@astrasyncai/verification-gateway 3.11.0 → 3.12.0

package/dist/bin/astrasync.js

@@ -4628,8 +4628,9 @@ function extractBacktickSubstitutions(text, collect) {
   return kept.join(" ");
 }
 function basename(token) {
-  const slash = token.lastIndexOf("/");
-  return slash === -1 ? token : token.slice(slash + 1);
+  const slash = Math.max(token.lastIndexOf("/"), token.lastIndexOf("\\"));
+  const name = slash === -1 ? token : token.slice(slash + 1);
+  return name.replace(/\.(exe|cmd|bat|ps1)$/i, "");
 }
 function matchSegment(segment, list) {
   const tokens = segment.split(/\s+/).filter((t) => /[a-z0-9]/.test(t));
@@ -4795,7 +4796,9 @@ var init_evaluator = __esm({
         }
         return {
           recommendation: "ALLOW",
-          reason: "All PDLSS checks passed",
+          // "evaluated": dimensions absent from the policy are skipped, not
+          // failed — evaluatedDimensions below records which ones ran.
+          reason: "All evaluated PDLSS checks passed",
           evaluatedDimensions: {
             purpose: true,
             scope: !!this.policy.scope,
@@ -4894,7 +4897,7 @@ var init_evaluator = __esm({
           }
         }
         if ((context.purpose === "file.read" || context.purpose === "file.write" || context.purpose === "file.delete") && context.target) {
-          const targetLower = context.target.toLowerCase();
+          const targetLower = context.target.toLowerCase().replace(/\\/g, "/");
           for (const sensitivePath of SENSITIVE_PATHS) {
             if (targetLower.includes(sensitivePath.toLowerCase())) {
               score = Math.max(score, 50);
@@ -4923,12 +4926,20 @@ var init_evaluator = __esm({
       matchesAnyPattern(value, patterns) {
         return patterns.some((pattern) => this.matchGlob(value, pattern));
       }
-      /**
-       * Simple glob pattern matching.
-       * Supports * (matches any characters including / and spaces) and ? (single char).
-       * Uses the same approach as the backend's matchGlobPattern.
-       */
+      homePrefix() {
+        if (this.cachedHomePrefix !== void 0) return this.cachedHomePrefix;
+        const env = typeof process !== "undefined" ? process.env : void 0;
+        const home = env?.HOME || env?.USERPROFILE;
+        this.cachedHomePrefix = home ? home.replace(/\\/g, "/") : null;
+        return this.cachedHomePrefix;
+      }
       matchGlob(value, pattern) {
+        value = value.replace(/\\/g, "/");
+        pattern = pattern.replace(/\\/g, "/");
+        if (pattern === "~" || pattern.startsWith("~/")) {
+          const home = this.homePrefix();
+          if (home) pattern = home + pattern.slice(1);
+        }
         if (pattern === value) return true;
         const starCount = (pattern.match(/\*/g) ?? []).length;
         if (starCount > 8) {
@@ -4989,7 +5000,7 @@ var SDK_VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    SDK_VERSION = "3.11.0";
+    SDK_VERSION = "3.12.0";
   }
 });
 
@@ -5146,6 +5157,7 @@ function createGuidanceResponse(_config, reason, options = {}) {
       }
     ] : void 0,
     correlationId: options.correlationId,
+    attemptId: options.attemptId,
     verifiedAt: /* @__PURE__ */ new Date()
   };
 }
@@ -5175,6 +5187,8 @@ async function callVerifyAccessAPI(config, request2) {
     body.runtimeChallengeOptions = requestData.runtimeChallengeOptions;
   if (requestData.invocationProtocol) body.invocationProtocol = requestData.invocationProtocol;
   if (requestData.commerceArtifacts) body.commerceArtifacts = requestData.commerceArtifacts;
+  if (requestData.attemptId) body.attemptId = requestData.attemptId;
+  if (requestData.considerationSet) body.considerationSet = requestData.considerationSet;
   body.sdkVersion = SDK_VERSION;
   if (requestData.callerMetadata || requestData.clientIp || requestData.userAgent) {
     const meta = {
@@ -5202,6 +5216,9 @@ async function callVerifyAccessAPI(config, request2) {
     if (response.status === 410) {
       return {
         success: true,
+        // 3.12.0 (Trust Record): keep the server-echoed attempt handle even on
+        // the synthesised 410 deny shape (echoed on every branch).
+        attemptId: typeof data?.attemptId === "string" ? data.attemptId : void 0,
         access: {
           allowed: false,
           accessLevel: "none",
@@ -5220,7 +5237,8 @@ async function callVerifyAccessAPI(config, request2) {
       return {
         success: false,
         error: data.message || data.error || `API returned ${response.status}`,
-        correlationId: typeof data?.correlationId === "string" ? data.correlationId : void 0
+        correlationId: typeof data?.correlationId === "string" ? data.correlationId : void 0,
+        attemptId: typeof data?.attemptId === "string" ? data.attemptId : void 0
       };
     }
     return data;
@@ -5254,7 +5272,13 @@ async function verify(config, request2, options) {
       if (mergedConfig.debug) {
         console.log("[VerificationGateway] Returning cached result");
       }
-      return cached;
+      const hit = { ...cached };
+      if (request2.attemptId) {
+        hit.attemptId = request2.attemptId;
+      } else {
+        delete hit.attemptId;
+      }
+      return hit;
     }
   }
   const enrichedRequest = { ...request2 };
@@ -5274,6 +5298,7 @@ async function verify(config, request2, options) {
     return createGuidanceResponse(mergedConfig, apiResponse.error, {
       source: "api_error",
       correlationId: apiResponse.correlationId,
+      attemptId: apiResponse.attemptId,
       urls
     });
   }
@@ -5309,6 +5334,9 @@ async function verify(config, request2, options) {
       // Anonymous traffic has no session → correlationId is the per-attempt
       // linking key (the sessionId-equivalent for anonymous callers).
       correlationId: apiResponse.correlationId,
+      // 3.12.0 (Trust Record): server echoes the attempt-chain handle on
+      // every branch — denials included (the funnel outlives one deny).
+      attemptId: apiResponse.attemptId,
       recommendation: apiResponse.recommendation,
       recommendationReasons: apiResponse.recommendationReasons,
       stepUpApproval: apiResponse.stepUpApproval,
@@ -5360,6 +5388,8 @@ async function verify(config, request2, options) {
     // v2.3.10 (defect #34, round-4): anonymous responses surface correlationId
     // (no session row exists for unverified callers).
     correlationId: apiResponse.correlationId,
+    // 3.12.0 (Trust Record): server-echoed attempt-chain handle.
+    attemptId: apiResponse.attemptId,
     runtimeChallenge: apiResponse.runtimeChallenge,
     tokenGuidance: apiResponse.tokenGuidance,
     recommendation: apiResponse.recommendation,
@@ -5938,6 +5968,7 @@ var init_src = __esm({
     init_edge_config();
     init_platform_signatures();
     init_verify();
+    init_verify();
     init_metadata_capture();
     init_version();
   }
@@ -6231,13 +6262,29 @@ var init_trace_logger = __esm({
        */
       logEvaluation(context, decision) {
         if (!this.enabled) return;
-        this.write({
-          id: this.generateId(),
-          timestamp: /* @__PURE__ */ new Date(),
-          type: "evaluation",
-          context: redactDeep(context),
-          decision: redactDeep(decision)
-        });
+        let event;
+        try {
+          event = {
+            id: this.generateId(),
+            timestamp: /* @__PURE__ */ new Date(),
+            type: "evaluation",
+            context: redactDeep(context),
+            decision: redactDeep(decision)
+          };
+        } catch (err) {
+          event = {
+            id: this.generateId(),
+            timestamp: /* @__PURE__ */ new Date(),
+            type: "error",
+            metadata: {
+              error: `trace redaction failed: ${err instanceof Error ? err.message : String(err)}`,
+              recommendation: decision.recommendation,
+              purpose: context.purpose,
+              action: context.action
+            }
+          };
+        }
+        this.write(event);
       }
       /**
        * Log a tool call the guard saw but did not govern. One line per skip
@@ -6279,17 +6326,34 @@ var init_trace_logger = __esm({
         });
       }
       write(event) {
+        let line;
+        try {
+          line = JSON.stringify(event) + "\n";
+        } catch {
+          return;
+        }
         try {
           const filePath = this.getCurrentFilePath();
-          const line = JSON.stringify(event) + "\n";
           if ((0, import_fs3.existsSync)(filePath)) {
             const stats = (0, import_fs3.statSync)(filePath);
             if (stats.size > MAX_FILE_SIZE) {
               this.rotate();
             }
           }
-          (0, import_fs3.appendFileSync)(filePath, line);
+          for (let attempt = 0; attempt < 3; attempt++) {
+            try {
+              (0, import_fs3.appendFileSync)(filePath, line);
+              return;
+            } catch {
+            }
+          }
+          const fallbackPath = filePath.replace(/\.jsonl$/, `-r${process.pid}.jsonl`);
+          (0, import_fs3.appendFileSync)(fallbackPath, line);
         } catch {
+          try {
+            console.error(`[AstraSync TraceLogger] failed to persist trace line: ${line.trim()}`);
+          } catch {
+          }
         }
       }
       getCurrentFilePath() {

package/dist/browser/background.js

@@ -387,8 +387,9 @@ function extractBacktickSubstitutions(text, collect) {
   return kept.join(" ");
 }
 function basename(token) {
-  const slash = token.lastIndexOf("/");
-  return slash === -1 ? token : token.slice(slash + 1);
+  const slash = Math.max(token.lastIndexOf("/"), token.lastIndexOf("\\"));
+  const name = slash === -1 ? token : token.slice(slash + 1);
+  return name.replace(/\.(exe|cmd|bat|ps1)$/i, "");
 }
 function matchSegment(segment, list) {
   const tokens = segment.split(/\s+/).filter((t) => /[a-z0-9]/.test(t));
@@ -521,7 +522,9 @@ var LocalEvaluator = class {
     }
     return {
       recommendation: "ALLOW",
-      reason: "All PDLSS checks passed",
+      // "evaluated": dimensions absent from the policy are skipped, not
+      // failed — evaluatedDimensions below records which ones ran.
+      reason: "All evaluated PDLSS checks passed",
       evaluatedDimensions: {
         purpose: true,
         scope: !!this.policy.scope,
@@ -620,7 +623,7 @@ var LocalEvaluator = class {
       }
     }
     if ((context.purpose === "file.read" || context.purpose === "file.write" || context.purpose === "file.delete") && context.target) {
-      const targetLower = context.target.toLowerCase();
+      const targetLower = context.target.toLowerCase().replace(/\\/g, "/");
       for (const sensitivePath of SENSITIVE_PATHS) {
         if (targetLower.includes(sensitivePath.toLowerCase())) {
           score = Math.max(score, 50);
@@ -649,12 +652,20 @@ var LocalEvaluator = class {
   matchesAnyPattern(value, patterns) {
     return patterns.some((pattern) => this.matchGlob(value, pattern));
   }
-  /**
-   * Simple glob pattern matching.
-   * Supports * (matches any characters including / and spaces) and ? (single char).
-   * Uses the same approach as the backend's matchGlobPattern.
-   */
+  homePrefix() {
+    if (this.cachedHomePrefix !== void 0) return this.cachedHomePrefix;
+    const env = typeof process !== "undefined" ? process.env : void 0;
+    const home = env?.HOME || env?.USERPROFILE;
+    this.cachedHomePrefix = home ? home.replace(/\\/g, "/") : null;
+    return this.cachedHomePrefix;
+  }
   matchGlob(value, pattern) {
+    value = value.replace(/\\/g, "/");
+    pattern = pattern.replace(/\\/g, "/");
+    if (pattern === "~" || pattern.startsWith("~/")) {
+      const home = this.homePrefix();
+      if (home) pattern = home + pattern.slice(1);
+    }
     if (pattern === value) return true;
     const starCount = (pattern.match(/\*/g) ?? []).length;
     if (starCount > 8) {
@@ -3927,7 +3938,7 @@ function getTrustLevel(score) {
 }
 
 // src/version.ts
-var SDK_VERSION = "3.11.0";
+var SDK_VERSION = "3.12.0";
 
 // src/well-known.ts
 var CACHE_TTL_MS = 60 * 60 * 1e3;
@@ -4094,6 +4105,7 @@ function createGuidanceResponse(_config, reason, options = {}) {
       }
     ] : void 0,
     correlationId: options.correlationId,
+    attemptId: options.attemptId,
     verifiedAt: /* @__PURE__ */ new Date()
   };
 }
@@ -4123,6 +4135,8 @@ async function callVerifyAccessAPI(config, request) {
     body.runtimeChallengeOptions = requestData.runtimeChallengeOptions;
   if (requestData.invocationProtocol) body.invocationProtocol = requestData.invocationProtocol;
   if (requestData.commerceArtifacts) body.commerceArtifacts = requestData.commerceArtifacts;
+  if (requestData.attemptId) body.attemptId = requestData.attemptId;
+  if (requestData.considerationSet) body.considerationSet = requestData.considerationSet;
   body.sdkVersion = SDK_VERSION;
   if (requestData.callerMetadata || requestData.clientIp || requestData.userAgent) {
     const meta = {
@@ -4150,6 +4164,9 @@ async function callVerifyAccessAPI(config, request) {
     if (response.status === 410) {
       return {
         success: true,
+        // 3.12.0 (Trust Record): keep the server-echoed attempt handle even on
+        // the synthesised 410 deny shape (echoed on every branch).
+        attemptId: typeof data?.attemptId === "string" ? data.attemptId : void 0,
         access: {
           allowed: false,
           accessLevel: "none",
@@ -4168,7 +4185,8 @@ async function callVerifyAccessAPI(config, request) {
       return {
         success: false,
         error: data.message || data.error || `API returned ${response.status}`,
-        correlationId: typeof data?.correlationId === "string" ? data.correlationId : void 0
+        correlationId: typeof data?.correlationId === "string" ? data.correlationId : void 0,
+        attemptId: typeof data?.attemptId === "string" ? data.attemptId : void 0
       };
     }
     return data;
@@ -4202,7 +4220,13 @@ async function verify(config, request, options) {
       if (mergedConfig.debug) {
         console.log("[VerificationGateway] Returning cached result");
       }
-      return cached;
+      const hit = { ...cached };
+      if (request.attemptId) {
+        hit.attemptId = request.attemptId;
+      } else {
+        delete hit.attemptId;
+      }
+      return hit;
     }
   }
   const enrichedRequest = { ...request };
@@ -4222,6 +4246,7 @@ async function verify(config, request, options) {
     return createGuidanceResponse(mergedConfig, apiResponse.error, {
       source: "api_error",
       correlationId: apiResponse.correlationId,
+      attemptId: apiResponse.attemptId,
       urls
     });
   }
@@ -4257,6 +4282,9 @@ async function verify(config, request, options) {
       // Anonymous traffic has no session → correlationId is the per-attempt
       // linking key (the sessionId-equivalent for anonymous callers).
       correlationId: apiResponse.correlationId,
+      // 3.12.0 (Trust Record): server echoes the attempt-chain handle on
+      // every branch — denials included (the funnel outlives one deny).
+      attemptId: apiResponse.attemptId,
       recommendation: apiResponse.recommendation,
       recommendationReasons: apiResponse.recommendationReasons,
       stepUpApproval: apiResponse.stepUpApproval,
@@ -4308,6 +4336,8 @@ async function verify(config, request, options) {
     // v2.3.10 (defect #34, round-4): anonymous responses surface correlationId
     // (no session row exists for unverified callers).
     correlationId: apiResponse.correlationId,
+    // 3.12.0 (Trust Record): server-echoed attempt-chain handle.
+    attemptId: apiResponse.attemptId,
     runtimeChallenge: apiResponse.runtimeChallenge,
     tokenGuidance: apiResponse.tokenGuidance,
     recommendation: apiResponse.recommendation,
@@ -4691,13 +4721,29 @@ var TraceLogger = class {
    */
   logEvaluation(context, decision) {
     if (!this.enabled) return;
-    this.write({
-      id: this.generateId(),
-      timestamp: /* @__PURE__ */ new Date(),
-      type: "evaluation",
-      context: redactDeep(context),
-      decision: redactDeep(decision)
-    });
+    let event;
+    try {
+      event = {
+        id: this.generateId(),
+        timestamp: /* @__PURE__ */ new Date(),
+        type: "evaluation",
+        context: redactDeep(context),
+        decision: redactDeep(decision)
+      };
+    } catch (err) {
+      event = {
+        id: this.generateId(),
+        timestamp: /* @__PURE__ */ new Date(),
+        type: "error",
+        metadata: {
+          error: `trace redaction failed: ${err instanceof Error ? err.message : String(err)}`,
+          recommendation: decision.recommendation,
+          purpose: context.purpose,
+          action: context.action
+        }
+      };
+    }
+    this.write(event);
   }
   /**
    * Log a tool call the guard saw but did not govern. One line per skip
@@ -4739,17 +4785,34 @@ var TraceLogger = class {
     });
   }
   write(event) {
+    let line;
+    try {
+      line = JSON.stringify(event) + "\n";
+    } catch {
+      return;
+    }
     try {
       const filePath = this.getCurrentFilePath();
-      const line = JSON.stringify(event) + "\n";
       if ((0, import_fs3.existsSync)(filePath)) {
         const stats = (0, import_fs3.statSync)(filePath);
         if (stats.size > MAX_FILE_SIZE) {
           this.rotate();
         }
       }
-      (0, import_fs3.appendFileSync)(filePath, line);
+      for (let attempt = 0; attempt < 3; attempt++) {
+        try {
+          (0, import_fs3.appendFileSync)(filePath, line);
+          return;
+        } catch {
+        }
+      }
+      const fallbackPath = filePath.replace(/\.jsonl$/, `-r${process.pid}.jsonl`);
+      (0, import_fs3.appendFileSync)(fallbackPath, line);
     } catch {
+      try {
+        console.error(`[AstraSync TraceLogger] failed to persist trace line: ${line.trim()}`);
+      } catch {
+      }
     }
   }
   getCurrentFilePath() {