@astrasyncai/verification-gateway 3.8.0 → 3.10.0

package/dist/edge-config.d.mts

@@ -0,0 +1,131 @@
+import { G as GatewayConfig } from './types-sy3tq8lp.mjs';
+import './metadata-capture.mjs';
+
+/**
+ * Edge verification config — the per-endpoint policy the Commerce Shield
+ * edge adapter (§7.4, `@astrasyncai/adapter-lambda`) fetches from the
+ * AstraSync dashboard to decide how much verification friction to apply
+ * to inbound traffic, and where.
+ *
+ * Fetch pattern mirrors `well-known.ts`: TTL cache + stale-while-revalidate
+ * + in-flight dedupe, with a `_reset*` hook for tests. Fail posture is
+ * deliberately asymmetric: this module can NEVER put a site into enforce
+ * mode on its own — enforce only ever originates from a successfully
+ * fetched config, and a config that has gone stale past `maxStaleMs`
+ * degrades back to observe.
+ */
+
+/**
+ * Edge posture. Canonical Commerce Shield vocabulary (strategy doc /
+ * spec §33.5): `observe` ≈ the gateway's `passive` posture (verify +
+ * record, enforce nothing), `enforce` ≈ `active`. New value set on a new
+ * field name — do NOT reuse `GatewayPosture`'s `active`/`passive` here
+ * (different field, different meaning: posture governs an agent-side
+ * gateway; mode governs counterparty-side edge interception).
+ */
+type EdgeMode = 'observe' | 'enforce';
+/**
+ * How deep the edge checks each request — what is it → who is it → are
+ * they allowed:
+ * - `classify`     — UA / platform-fingerprint classification only; no
+ *                    credential handling.
+ * - `authenticate` — establish who is calling: detect and parse agent
+ *                    credentials (X-Astra-*, VI SD-JWT, RFC 9421, ACP,
+ *                    UCP, AP2…) and verify presented AstraSync identities.
+ * - `authorize`    — full policy decision: credentials cryptographically
+ *                    proven and PDLSS-evaluated via a verify-access round
+ *                    trip. (US spelling on the wire, matching
+ *                    `authorizeSettlement` and HTTP `Authorization`.)
+ */
+type EdgeVerificationDepth = 'classify' | 'authenticate' | 'authorize';
+interface EdgePathRule {
+    /**
+     * `*`-wildcard glob matched against the request path. Matching is
+     * case-INsensitive and all regex metacharacters except `*` are
+     * escaped. (Deliberately diverges from the express adapter's
+     * `matchRoute`, which is case-sensitive by default and mid-shadow-
+     * rollout of the F-A6-31 fix — new surface ships the fix as default.)
+     */
+    pattern: string;
+    /** Pass the request through untouched (static assets); mode/depth ignored. */
+    skip?: boolean;
+    /** Override the top-level mode for this path. */
+    mode?: EdgeMode;
+    /** Override the top-level depth for this path. */
+    depth?: EdgeVerificationDepth;
+}
+interface EdgeConfig {
+    /** Shape version — bump on breaking changes. */
+    version: 1;
+    /** Default posture for paths no rule matches. */
+    mode: EdgeMode;
+    /** Default check depth for paths no rule matches. */
+    depth: EdgeVerificationDepth;
+    /** Ordered, first-match-wins. */
+    pathRules: EdgePathRule[];
+    sampling: {
+        /** Fraction (0..1) of anonymous-bot requests that emit a beacon. */
+        anonymousBeaconRate: number;
+    };
+    /**
+     * v1: only 'open' is representable — an unreachable backend always
+     * means observe + pass-through, never a broken or silently-enforcing
+     * customer site.
+     */
+    failurePosture: 'open';
+}
+/**
+ * The safe default: observe-only, classification depth, nothing enforced.
+ * Served by the backend when an endpoint has never been configured, and
+ * used by `getEdgeConfig` whenever no config can be fetched.
+ */
+declare const DEFAULT_EDGE_CONFIG: EdgeConfig;
+/** Structural guard for configs arriving over the wire. */
+declare function isEdgeConfig(value: unknown): value is EdgeConfig;
+interface FetchEdgeConfigSuccess {
+    edgeConfig: EdgeConfig;
+    etag?: string;
+}
+type FetchEdgeConfigResult = FetchEdgeConfigSuccess | {
+    notModified: true;
+} | null;
+/**
+ * Fetch the edge config for an endpoint from the AstraSync backend.
+ * `GET {apiBaseUrl}/endpoints/:counterpartyId/edge-config` with the same
+ * auth headers as `fetchRoutes`. Pass the cached `etag` to get a cheap
+ * `{ notModified: true }` on 304. Returns `null` on any failure —
+ * the caller decides how to fall back.
+ */
+declare function fetchEdgeConfig(config: Pick<GatewayConfig, 'apiBaseUrl' | 'apiKey'>, counterpartyId: string, opts?: {
+    etag?: string;
+    timeoutMs?: number;
+}): Promise<FetchEdgeConfigResult>;
+/** Copy of `config` with every enforce (top-level and per-rule) degraded to observe. */
+declare function degradeToObserve(config: EdgeConfig): EdgeConfig;
+/**
+ * Get the edge config for an endpoint, cached. Never throws, never blocks
+ * longer than one fetch.
+ *
+ * - Fresh cache (within `ttlMs`) → cached config, no network.
+ * - Stale cache → cached config immediately + background revalidate
+ *   (stale-while-revalidate). If the last successful fetch is older than
+ *   `maxStaleMs` (default 24h), any enforce is degraded to observe — a
+ *   long-dead backend can never keep a site enforcing.
+ * - No cache → await one fetch; on failure return `DEFAULT_EDGE_CONFIG`
+ *   (observe-only). Defaults never enforce.
+ */
+declare function getEdgeConfig(config: Pick<GatewayConfig, 'apiBaseUrl' | 'apiKey'>, counterpartyId: string, opts?: {
+    ttlMs?: number;
+    maxStaleMs?: number;
+}): Promise<EdgeConfig>;
+/**
+ * First-match-wins path-rule lookup. Case-insensitive `*` globs with all
+ * other regex metacharacters escaped (a literal `.` in a pattern matches
+ * only `.`). Returns `undefined` when no rule matches — the caller applies
+ * the config's top-level mode/depth.
+ */
+declare function matchEdgePathRule(rules: EdgePathRule[], path: string): EdgePathRule | undefined;
+/** Reset cache — for testing only. */
+declare function _resetEdgeConfigCache(): void;
+
+export { DEFAULT_EDGE_CONFIG, type EdgeConfig, type EdgeMode, type EdgePathRule, type EdgeVerificationDepth, type FetchEdgeConfigResult, type FetchEdgeConfigSuccess, _resetEdgeConfigCache, degradeToObserve, fetchEdgeConfig, getEdgeConfig, isEdgeConfig, matchEdgePathRule };

package/dist/edge-config.d.ts

@@ -0,0 +1,131 @@
+import { G as GatewayConfig } from './types-9tns4wyl.js';
+import './metadata-capture.js';
+
+/**
+ * Edge verification config — the per-endpoint policy the Commerce Shield
+ * edge adapter (§7.4, `@astrasyncai/adapter-lambda`) fetches from the
+ * AstraSync dashboard to decide how much verification friction to apply
+ * to inbound traffic, and where.
+ *
+ * Fetch pattern mirrors `well-known.ts`: TTL cache + stale-while-revalidate
+ * + in-flight dedupe, with a `_reset*` hook for tests. Fail posture is
+ * deliberately asymmetric: this module can NEVER put a site into enforce
+ * mode on its own — enforce only ever originates from a successfully
+ * fetched config, and a config that has gone stale past `maxStaleMs`
+ * degrades back to observe.
+ */
+
+/**
+ * Edge posture. Canonical Commerce Shield vocabulary (strategy doc /
+ * spec §33.5): `observe` ≈ the gateway's `passive` posture (verify +
+ * record, enforce nothing), `enforce` ≈ `active`. New value set on a new
+ * field name — do NOT reuse `GatewayPosture`'s `active`/`passive` here
+ * (different field, different meaning: posture governs an agent-side
+ * gateway; mode governs counterparty-side edge interception).
+ */
+type EdgeMode = 'observe' | 'enforce';
+/**
+ * How deep the edge checks each request — what is it → who is it → are
+ * they allowed:
+ * - `classify`     — UA / platform-fingerprint classification only; no
+ *                    credential handling.
+ * - `authenticate` — establish who is calling: detect and parse agent
+ *                    credentials (X-Astra-*, VI SD-JWT, RFC 9421, ACP,
+ *                    UCP, AP2…) and verify presented AstraSync identities.
+ * - `authorize`    — full policy decision: credentials cryptographically
+ *                    proven and PDLSS-evaluated via a verify-access round
+ *                    trip. (US spelling on the wire, matching
+ *                    `authorizeSettlement` and HTTP `Authorization`.)
+ */
+type EdgeVerificationDepth = 'classify' | 'authenticate' | 'authorize';
+interface EdgePathRule {
+    /**
+     * `*`-wildcard glob matched against the request path. Matching is
+     * case-INsensitive and all regex metacharacters except `*` are
+     * escaped. (Deliberately diverges from the express adapter's
+     * `matchRoute`, which is case-sensitive by default and mid-shadow-
+     * rollout of the F-A6-31 fix — new surface ships the fix as default.)
+     */
+    pattern: string;
+    /** Pass the request through untouched (static assets); mode/depth ignored. */
+    skip?: boolean;
+    /** Override the top-level mode for this path. */
+    mode?: EdgeMode;
+    /** Override the top-level depth for this path. */
+    depth?: EdgeVerificationDepth;
+}
+interface EdgeConfig {
+    /** Shape version — bump on breaking changes. */
+    version: 1;
+    /** Default posture for paths no rule matches. */
+    mode: EdgeMode;
+    /** Default check depth for paths no rule matches. */
+    depth: EdgeVerificationDepth;
+    /** Ordered, first-match-wins. */
+    pathRules: EdgePathRule[];
+    sampling: {
+        /** Fraction (0..1) of anonymous-bot requests that emit a beacon. */
+        anonymousBeaconRate: number;
+    };
+    /**
+     * v1: only 'open' is representable — an unreachable backend always
+     * means observe + pass-through, never a broken or silently-enforcing
+     * customer site.
+     */
+    failurePosture: 'open';
+}
+/**
+ * The safe default: observe-only, classification depth, nothing enforced.
+ * Served by the backend when an endpoint has never been configured, and
+ * used by `getEdgeConfig` whenever no config can be fetched.
+ */
+declare const DEFAULT_EDGE_CONFIG: EdgeConfig;
+/** Structural guard for configs arriving over the wire. */
+declare function isEdgeConfig(value: unknown): value is EdgeConfig;
+interface FetchEdgeConfigSuccess {
+    edgeConfig: EdgeConfig;
+    etag?: string;
+}
+type FetchEdgeConfigResult = FetchEdgeConfigSuccess | {
+    notModified: true;
+} | null;
+/**
+ * Fetch the edge config for an endpoint from the AstraSync backend.
+ * `GET {apiBaseUrl}/endpoints/:counterpartyId/edge-config` with the same
+ * auth headers as `fetchRoutes`. Pass the cached `etag` to get a cheap
+ * `{ notModified: true }` on 304. Returns `null` on any failure —
+ * the caller decides how to fall back.
+ */
+declare function fetchEdgeConfig(config: Pick<GatewayConfig, 'apiBaseUrl' | 'apiKey'>, counterpartyId: string, opts?: {
+    etag?: string;
+    timeoutMs?: number;
+}): Promise<FetchEdgeConfigResult>;
+/** Copy of `config` with every enforce (top-level and per-rule) degraded to observe. */
+declare function degradeToObserve(config: EdgeConfig): EdgeConfig;
+/**
+ * Get the edge config for an endpoint, cached. Never throws, never blocks
+ * longer than one fetch.
+ *
+ * - Fresh cache (within `ttlMs`) → cached config, no network.
+ * - Stale cache → cached config immediately + background revalidate
+ *   (stale-while-revalidate). If the last successful fetch is older than
+ *   `maxStaleMs` (default 24h), any enforce is degraded to observe — a
+ *   long-dead backend can never keep a site enforcing.
+ * - No cache → await one fetch; on failure return `DEFAULT_EDGE_CONFIG`
+ *   (observe-only). Defaults never enforce.
+ */
+declare function getEdgeConfig(config: Pick<GatewayConfig, 'apiBaseUrl' | 'apiKey'>, counterpartyId: string, opts?: {
+    ttlMs?: number;
+    maxStaleMs?: number;
+}): Promise<EdgeConfig>;
+/**
+ * First-match-wins path-rule lookup. Case-insensitive `*` globs with all
+ * other regex metacharacters escaped (a literal `.` in a pattern matches
+ * only `.`). Returns `undefined` when no rule matches — the caller applies
+ * the config's top-level mode/depth.
+ */
+declare function matchEdgePathRule(rules: EdgePathRule[], path: string): EdgePathRule | undefined;
+/** Reset cache — for testing only. */
+declare function _resetEdgeConfigCache(): void;
+
+export { DEFAULT_EDGE_CONFIG, type EdgeConfig, type EdgeMode, type EdgePathRule, type EdgeVerificationDepth, type FetchEdgeConfigResult, type FetchEdgeConfigSuccess, _resetEdgeConfigCache, degradeToObserve, fetchEdgeConfig, getEdgeConfig, isEdgeConfig, matchEdgePathRule };

package/dist/edge-config.js

@@ -0,0 +1,162 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/edge-config.ts
+var edge_config_exports = {};
+__export(edge_config_exports, {
+  DEFAULT_EDGE_CONFIG: () => DEFAULT_EDGE_CONFIG,
+  _resetEdgeConfigCache: () => _resetEdgeConfigCache,
+  degradeToObserve: () => degradeToObserve,
+  fetchEdgeConfig: () => fetchEdgeConfig,
+  getEdgeConfig: () => getEdgeConfig,
+  isEdgeConfig: () => isEdgeConfig,
+  matchEdgePathRule: () => matchEdgePathRule
+});
+module.exports = __toCommonJS(edge_config_exports);
+var DEFAULT_EDGE_CONFIG = Object.freeze({
+  version: 1,
+  mode: "observe",
+  depth: "classify",
+  pathRules: [],
+  sampling: Object.freeze({ anonymousBeaconRate: 0.1 }),
+  failurePosture: "open"
+});
+var EDGE_MODES = ["observe", "enforce"];
+var EDGE_DEPTHS = ["classify", "authenticate", "authorize"];
+function isEdgeConfig(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const v = value;
+  if (v.version !== 1) return false;
+  if (!EDGE_MODES.includes(v.mode)) return false;
+  if (!EDGE_DEPTHS.includes(v.depth)) return false;
+  if (!Array.isArray(v.pathRules)) return false;
+  for (const rule of v.pathRules) {
+    if (typeof rule !== "object" || rule === null) return false;
+    const r = rule;
+    if (typeof r.pattern !== "string" || r.pattern.length === 0) return false;
+    if (r.mode !== void 0 && !EDGE_MODES.includes(r.mode)) return false;
+    if (r.depth !== void 0 && !EDGE_DEPTHS.includes(r.depth)) return false;
+  }
+  const sampling = v.sampling;
+  if (typeof sampling !== "object" || sampling === null || typeof sampling.anonymousBeaconRate !== "number" || sampling.anonymousBeaconRate < 0 || sampling.anonymousBeaconRate > 1) {
+    return false;
+  }
+  return v.failurePosture === "open";
+}
+async function fetchEdgeConfig(config, counterpartyId, opts) {
+  if (!counterpartyId) return null;
+  const headers = { Accept: "application/json" };
+  if (config.apiKey) {
+    headers["Authorization"] = `Bearer ${config.apiKey}`;
+    headers["X-API-Key"] = config.apiKey;
+  }
+  if (opts?.etag) headers["If-None-Match"] = opts.etag;
+  try {
+    const response = await fetch(
+      `${config.apiBaseUrl}/endpoints/${encodeURIComponent(counterpartyId)}/edge-config`,
+      { method: "GET", headers, signal: AbortSignal.timeout(opts?.timeoutMs ?? 5e3) }
+    );
+    if (response.status === 304) return { notModified: true };
+    if (!response.ok) return null;
+    const body = await response.json();
+    const edgeConfig = body.data?.edgeConfig;
+    if (!isEdgeConfig(edgeConfig)) return null;
+    return { edgeConfig, etag: response.headers.get("etag") ?? void 0 };
+  } catch {
+    return null;
+  }
+}
+var DEFAULT_TTL_MS = 60 * 1e3;
+var DEFAULT_MAX_STALE_MS = 24 * 60 * 60 * 1e3;
+var cache = /* @__PURE__ */ new Map();
+var inflight = /* @__PURE__ */ new Map();
+function cacheKey(apiBaseUrl, counterpartyId) {
+  return `${apiBaseUrl}|${counterpartyId}`;
+}
+function degradeToObserve(config) {
+  if (config.mode !== "enforce" && !config.pathRules.some((r) => r.mode === "enforce")) {
+    return config;
+  }
+  return {
+    ...config,
+    mode: "observe",
+    pathRules: config.pathRules.map((r) => r.mode === "enforce" ? { ...r, mode: "observe" } : r)
+  };
+}
+async function revalidate(config, counterpartyId) {
+  const key = cacheKey(config.apiBaseUrl, counterpartyId);
+  const existing = inflight.get(key);
+  if (existing) return existing;
+  const promise = fetchEdgeConfig(config, counterpartyId, { etag: cache.get(key)?.etag }).then((result) => {
+    if (result === null) return;
+    const now = Date.now();
+    if ("notModified" in result) {
+      const entry = cache.get(key);
+      if (entry) entry.lastSuccessAt = now;
+      return;
+    }
+    cache.set(key, { config: result.edgeConfig, etag: result.etag, lastSuccessAt: now });
+  }).finally(() => {
+    inflight.delete(key);
+  });
+  inflight.set(key, promise);
+  return promise;
+}
+async function getEdgeConfig(config, counterpartyId, opts) {
+  const ttlMs = opts?.ttlMs ?? DEFAULT_TTL_MS;
+  const maxStaleMs = opts?.maxStaleMs ?? DEFAULT_MAX_STALE_MS;
+  const key = cacheKey(config.apiBaseUrl, counterpartyId);
+  const entry = cache.get(key);
+  if (entry) {
+    const age = Date.now() - entry.lastSuccessAt;
+    if (age > ttlMs) {
+      revalidate(config, counterpartyId).catch(() => {
+      });
+    }
+    return age > maxStaleMs ? degradeToObserve(entry.config) : entry.config;
+  }
+  await revalidate(config, counterpartyId).catch(() => {
+  });
+  return cache.get(key)?.config ?? DEFAULT_EDGE_CONFIG;
+}
+function matchEdgePathRule(rules, path) {
+  for (const rule of rules) {
+    if (globToRegExp(rule.pattern).test(path)) return rule;
+  }
+  return void 0;
+}
+function globToRegExp(pattern) {
+  const escaped = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*");
+  return new RegExp(`^${escaped}$`, "i");
+}
+function _resetEdgeConfigCache() {
+  cache.clear();
+  inflight.clear();
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  DEFAULT_EDGE_CONFIG,
+  _resetEdgeConfigCache,
+  degradeToObserve,
+  fetchEdgeConfig,
+  getEdgeConfig,
+  isEdgeConfig,
+  matchEdgePathRule
+});
+//# sourceMappingURL=edge-config.js.map

package/dist/edge-config.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/edge-config.ts"],"sourcesContent":["/**\n * Edge verification config — the per-endpoint policy the Commerce Shield\n * edge adapter (§7.4, `@astrasyncai/adapter-lambda`) fetches from the\n * AstraSync dashboard to decide how much verification friction to apply\n * to inbound traffic, and where.\n *\n * Fetch pattern mirrors `well-known.ts`: TTL cache + stale-while-revalidate\n * + in-flight dedupe, with a `_reset*` hook for tests. Fail posture is\n * deliberately asymmetric: this module can NEVER put a site into enforce\n * mode on its own — enforce only ever originates from a successfully\n * fetched config, and a config that has gone stale past `maxStaleMs`\n * degrades back to observe.\n */\n\nimport type { GatewayConfig } from './types';\n\n/**\n * Edge posture. Canonical Commerce Shield vocabulary (strategy doc /\n * spec §33.5): `observe` ≈ the gateway's `passive` posture (verify +\n * record, enforce nothing), `enforce` ≈ `active`. New value set on a new\n * field name — do NOT reuse `GatewayPosture`'s `active`/`passive` here\n * (different field, different meaning: posture governs an agent-side\n * gateway; mode governs counterparty-side edge interception).\n */\nexport type EdgeMode = 'observe' | 'enforce';\n\n/**\n * How deep the edge checks each request — what is it → who is it → are\n * they allowed:\n * - `classify`     — UA / platform-fingerprint classification only; no\n *                    credential handling.\n * - `authenticate` — establish who is calling: detect and parse agent\n *                    credentials (X-Astra-*, VI SD-JWT, RFC 9421, ACP,\n *                    UCP, AP2…) and verify presented AstraSync identities.\n * - `authorize`    — full policy decision: credentials cryptographically\n *                    proven and PDLSS-evaluated via a verify-access round\n *                    trip. (US spelling on the wire, matching\n *                    `authorizeSettlement` and HTTP `Authorization`.)\n */\nexport type EdgeVerificationDepth = 'classify' | 'authenticate' | 'authorize';\n\nexport interface EdgePathRule {\n  /**\n   * `*`-wildcard glob matched against the request path. Matching is\n   * case-INsensitive and all regex metacharacters except `*` are\n   * escaped. (Deliberately diverges from the express adapter's\n   * `matchRoute`, which is case-sensitive by default and mid-shadow-\n   * rollout of the F-A6-31 fix — new surface ships the fix as default.)\n   */\n  pattern: string;\n  /** Pass the request through untouched (static assets); mode/depth ignored. */\n  skip?: boolean;\n  /** Override the top-level mode for this path. */\n  mode?: EdgeMode;\n  /** Override the top-level depth for this path. */\n  depth?: EdgeVerificationDepth;\n}\n\nexport interface EdgeConfig {\n  /** Shape version — bump on breaking changes. */\n  version: 1;\n  /** Default posture for paths no rule matches. */\n  mode: EdgeMode;\n  /** Default check depth for paths no rule matches. */\n  depth: EdgeVerificationDepth;\n  /** Ordered, first-match-wins. */\n  pathRules: EdgePathRule[];\n  sampling: {\n    /** Fraction (0..1) of anonymous-bot requests that emit a beacon. */\n    anonymousBeaconRate: number;\n  };\n  /**\n   * v1: only 'open' is representable — an unreachable backend always\n   * means observe + pass-through, never a broken or silently-enforcing\n   * customer site.\n   */\n  failurePosture: 'open';\n}\n\n/**\n * The safe default: observe-only, classification depth, nothing enforced.\n * Served by the backend when an endpoint has never been configured, and\n * used by `getEdgeConfig` whenever no config can be fetched.\n */\nexport const DEFAULT_EDGE_CONFIG: EdgeConfig = Object.freeze({\n  version: 1,\n  mode: 'observe',\n  depth: 'classify',\n  pathRules: [],\n  sampling: Object.freeze({ anonymousBeaconRate: 0.1 }),\n  failurePosture: 'open',\n}) as EdgeConfig;\n\nconst EDGE_MODES: readonly string[] = ['observe', 'enforce'];\nconst EDGE_DEPTHS: readonly string[] = ['classify', 'authenticate', 'authorize'];\n\n/** Structural guard for configs arriving over the wire. */\nexport function isEdgeConfig(value: unknown): value is EdgeConfig {\n  if (typeof value !== 'object' || value === null) return false;\n  const v = value as Record<string, unknown>;\n  if (v.version !== 1) return false;\n  if (!EDGE_MODES.includes(v.mode as string)) return false;\n  if (!EDGE_DEPTHS.includes(v.depth as string)) return false;\n  if (!Array.isArray(v.pathRules)) return false;\n  for (const rule of v.pathRules) {\n    if (typeof rule !== 'object' || rule === null) return false;\n    const r = rule as Record<string, unknown>;\n    if (typeof r.pattern !== 'string' || r.pattern.length === 0) return false;\n    if (r.mode !== undefined && !EDGE_MODES.includes(r.mode as string)) return false;\n    if (r.depth !== undefined && !EDGE_DEPTHS.includes(r.depth as string)) return false;\n  }\n  const sampling = v.sampling as Record<string, unknown> | undefined;\n  if (\n    typeof sampling !== 'object' ||\n    sampling === null ||\n    typeof sampling.anonymousBeaconRate !== 'number' ||\n    sampling.anonymousBeaconRate < 0 ||\n    sampling.anonymousBeaconRate > 1\n  ) {\n    return false;\n  }\n  return v.failurePosture === 'open';\n}\n\nexport interface FetchEdgeConfigSuccess {\n  edgeConfig: EdgeConfig;\n  etag?: string;\n}\n\nexport type FetchEdgeConfigResult = FetchEdgeConfigSuccess | { notModified: true } | null;\n\n/**\n * Fetch the edge config for an endpoint from the AstraSync backend.\n * `GET {apiBaseUrl}/endpoints/:counterpartyId/edge-config` with the same\n * auth headers as `fetchRoutes`. Pass the cached `etag` to get a cheap\n * `{ notModified: true }` on 304. Returns `null` on any failure —\n * the caller decides how to fall back.\n */\nexport async function fetchEdgeConfig(\n  config: Pick<GatewayConfig, 'apiBaseUrl' | 'apiKey'>,\n  counterpartyId: string,\n  opts?: { etag?: string; timeoutMs?: number }\n): Promise<FetchEdgeConfigResult> {\n  if (!counterpartyId) return null;\n  const headers: Record<string, string> = { Accept: 'application/json' };\n  if (config.apiKey) {\n    headers['Authorization'] = `Bearer ${config.apiKey}`;\n    headers['X-API-Key'] = config.apiKey;\n  }\n  if (opts?.etag) headers['If-None-Match'] = opts.etag;\n  try {\n    const response = await fetch(\n      `${config.apiBaseUrl}/endpoints/${encodeURIComponent(counterpartyId)}/edge-config`,\n      { method: 'GET', headers, signal: AbortSignal.timeout(opts?.timeoutMs ?? 5000) }\n    );\n    if (response.status === 304) return { notModified: true };\n    if (!response.ok) return null;\n    const body = (await response.json()) as { data?: { edgeConfig?: unknown } };\n    const edgeConfig = body.data?.edgeConfig;\n    if (!isEdgeConfig(edgeConfig)) return null;\n    return { edgeConfig, etag: response.headers.get('etag') ?? undefined };\n  } catch {\n    return null;\n  }\n}\n\ninterface CacheEntry {\n  config: EdgeConfig;\n  etag?: string;\n  /** When the entry was last confirmed fresh (fetch or 304). */\n  lastSuccessAt: number;\n}\n\nconst DEFAULT_TTL_MS = 60 * 1000;\nconst DEFAULT_MAX_STALE_MS = 24 * 60 * 60 * 1000;\n\nconst cache = new Map<string, CacheEntry>();\nconst inflight = new Map<string, Promise<void>>();\n\nfunction cacheKey(apiBaseUrl: string, counterpartyId: string): string {\n  return `${apiBaseUrl}|${counterpartyId}`;\n}\n\n/** Copy of `config` with every enforce (top-level and per-rule) degraded to observe. */\nexport function degradeToObserve(config: EdgeConfig): EdgeConfig {\n  if (config.mode !== 'enforce' && !config.pathRules.some((r) => r.mode === 'enforce')) {\n    return config;\n  }\n  return {\n    ...config,\n    mode: 'observe',\n    pathRules: config.pathRules.map((r) => (r.mode === 'enforce' ? { ...r, mode: 'observe' } : r)),\n  };\n}\n\nasync function revalidate(\n  config: Pick<GatewayConfig, 'apiBaseUrl' | 'apiKey'>,\n  counterpartyId: string\n): Promise<void> {\n  const key = cacheKey(config.apiBaseUrl, counterpartyId);\n  const existing = inflight.get(key);\n  if (existing) return existing;\n\n  const promise = fetchEdgeConfig(config, counterpartyId, { etag: cache.get(key)?.etag })\n    .then((result) => {\n      if (result === null) return; // failure — cache untouched, caller falls back\n      const now = Date.now();\n      if ('notModified' in result) {\n        const entry = cache.get(key);\n        if (entry) entry.lastSuccessAt = now;\n        return;\n      }\n      cache.set(key, { config: result.edgeConfig, etag: result.etag, lastSuccessAt: now });\n    })\n    .finally(() => {\n      inflight.delete(key);\n    });\n\n  inflight.set(key, promise);\n  return promise;\n}\n\n/**\n * Get the edge config for an endpoint, cached. Never throws, never blocks\n * longer than one fetch.\n *\n * - Fresh cache (within `ttlMs`) → cached config, no network.\n * - Stale cache → cached config immediately + background revalidate\n *   (stale-while-revalidate). If the last successful fetch is older than\n *   `maxStaleMs` (default 24h), any enforce is degraded to observe — a\n *   long-dead backend can never keep a site enforcing.\n * - No cache → await one fetch; on failure return `DEFAULT_EDGE_CONFIG`\n *   (observe-only). Defaults never enforce.\n */\nexport async function getEdgeConfig(\n  config: Pick<GatewayConfig, 'apiBaseUrl' | 'apiKey'>,\n  counterpartyId: string,\n  opts?: { ttlMs?: number; maxStaleMs?: number }\n): Promise<EdgeConfig> {\n  const ttlMs = opts?.ttlMs ?? DEFAULT_TTL_MS;\n  const maxStaleMs = opts?.maxStaleMs ?? DEFAULT_MAX_STALE_MS;\n  const key = cacheKey(config.apiBaseUrl, counterpartyId);\n\n  const entry = cache.get(key);\n  if (entry) {\n    const age = Date.now() - entry.lastSuccessAt;\n    if (age > ttlMs) {\n      revalidate(config, counterpartyId).catch(() => {\n        // background refresh failed — stale entry remains until next call\n      });\n    }\n    return age > maxStaleMs ? degradeToObserve(entry.config) : entry.config;\n  }\n\n  await revalidate(config, counterpartyId).catch(() => {\n    // fetch failed — fall through to defaults\n  });\n  return cache.get(key)?.config ?? DEFAULT_EDGE_CONFIG;\n}\n\n/**\n * First-match-wins path-rule lookup. Case-insensitive `*` globs with all\n * other regex metacharacters escaped (a literal `.` in a pattern matches\n * only `.`). Returns `undefined` when no rule matches — the caller applies\n * the config's top-level mode/depth.\n */\nexport function matchEdgePathRule(rules: EdgePathRule[], path: string): EdgePathRule | undefined {\n  for (const rule of rules) {\n    if (globToRegExp(rule.pattern).test(path)) return rule;\n  }\n  return undefined;\n}\n\nfunction globToRegExp(pattern: string): RegExp {\n  const escaped = pattern.replace(/[.+?^${}()|[\\]\\\\]/g, '\\\\$&').replace(/\\*/g, '.*');\n  return new RegExp(`^${escaped}$`, 'i');\n}\n\n/** Reset cache — for testing only. */\nexport function _resetEdgeConfigCache(): void {\n  cache.clear();\n  inflight.clear();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAoFO,IAAM,sBAAkC,OAAO,OAAO;AAAA,EAC3D,SAAS;AAAA,EACT,MAAM;AAAA,EACN,OAAO;AAAA,EACP,WAAW,CAAC;AAAA,EACZ,UAAU,OAAO,OAAO,EAAE,qBAAqB,IAAI,CAAC;AAAA,EACpD,gBAAgB;AAClB,CAAC;AAED,IAAM,aAAgC,CAAC,WAAW,SAAS;AAC3D,IAAM,cAAiC,CAAC,YAAY,gBAAgB,WAAW;AAGxE,SAAS,aAAa,OAAqC;AAChE,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,IAAI;AACV,MAAI,EAAE,YAAY,EAAG,QAAO;AAC5B,MAAI,CAAC,WAAW,SAAS,EAAE,IAAc,EAAG,QAAO;AACnD,MAAI,CAAC,YAAY,SAAS,EAAE,KAAe,EAAG,QAAO;AACrD,MAAI,CAAC,MAAM,QAAQ,EAAE,SAAS,EAAG,QAAO;AACxC,aAAW,QAAQ,EAAE,WAAW;AAC9B,QAAI,OAAO,SAAS,YAAY,SAAS,KAAM,QAAO;AACtD,UAAM,IAAI;AACV,QAAI,OAAO,EAAE,YAAY,YAAY,EAAE,QAAQ,WAAW,EAAG,QAAO;AACpE,QAAI,EAAE,SAAS,UAAa,CAAC,WAAW,SAAS,EAAE,IAAc,EAAG,QAAO;AAC3E,QAAI,EAAE,UAAU,UAAa,CAAC,YAAY,SAAS,EAAE,KAAe,EAAG,QAAO;AAAA,EAChF;AACA,QAAM,WAAW,EAAE;AACnB,MACE,OAAO,aAAa,YACpB,aAAa,QACb,OAAO,SAAS,wBAAwB,YACxC,SAAS,sBAAsB,KAC/B,SAAS,sBAAsB,GAC/B;AACA,WAAO;AAAA,EACT;AACA,SAAO,EAAE,mBAAmB;AAC9B;AAgBA,eAAsB,gBACpB,QACA,gBACA,MACgC;AAChC,MAAI,CAAC,eAAgB,QAAO;AAC5B,QAAM,UAAkC,EAAE,QAAQ,mBAAmB;AACrE,MAAI,OAAO,QAAQ;AACjB,YAAQ,eAAe,IAAI,UAAU,OAAO,MAAM;AAClD,YAAQ,WAAW,IAAI,OAAO;AAAA,EAChC;AACA,MAAI,MAAM,KAAM,SAAQ,eAAe,IAAI,KAAK;AAChD,MAAI;AACF,UAAM,WAAW,MAAM;AAAA,MACrB,GAAG,OAAO,UAAU,cAAc,mBAAmB,cAAc,CAAC;AAAA,MACpE,EAAE,QAAQ,OAAO,SAAS,QAAQ,YAAY,QAAQ,MAAM,aAAa,GAAI,EAAE;AAAA,IACjF;AACA,QAAI,SAAS,WAAW,IAAK,QAAO,EAAE,aAAa,KAAK;AACxD,QAAI,CAAC,SAAS,GAAI,QAAO;AACzB,UAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,UAAM,aAAa,KAAK,MAAM;AAC9B,QAAI,CAAC,aAAa,UAAU,EAAG,QAAO;AACtC,WAAO,EAAE,YAAY,MAAM,SAAS,QAAQ,IAAI,MAAM,KAAK,OAAU;AAAA,EACvE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AASA,IAAM,iBAAiB,KAAK;AAC5B,IAAM,uBAAuB,KAAK,KAAK,KAAK;AAE5C,IAAM,QAAQ,oBAAI,IAAwB;AAC1C,IAAM,WAAW,oBAAI,IAA2B;AAEhD,SAAS,SAAS,YAAoB,gBAAgC;AACpE,SAAO,GAAG,UAAU,IAAI,cAAc;AACxC;AAGO,SAAS,iBAAiB,QAAgC;AAC/D,MAAI,OAAO,SAAS,aAAa,CAAC,OAAO,UAAU,KAAK,CAAC,MAAM,EAAE,SAAS,SAAS,GAAG;AACpF,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,MAAM;AAAA,IACN,WAAW,OAAO,UAAU,IAAI,CAAC,MAAO,EAAE,SAAS,YAAY,EAAE,GAAG,GAAG,MAAM,UAAU,IAAI,CAAE;AAAA,EAC/F;AACF;AAEA,eAAe,WACb,QACA,gBACe;AACf,QAAM,MAAM,SAAS,OAAO,YAAY,cAAc;AACtD,QAAM,WAAW,SAAS,IAAI,GAAG;AACjC,MAAI,SAAU,QAAO;AAErB,QAAM,UAAU,gBAAgB,QAAQ,gBAAgB,EAAE,MAAM,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,EACnF,KAAK,CAAC,WAAW;AAChB,QAAI,WAAW,KAAM;AACrB,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,iBAAiB,QAAQ;AAC3B,YAAM,QAAQ,MAAM,IAAI,GAAG;AAC3B,UAAI,MAAO,OAAM,gBAAgB;AACjC;AAAA,IACF;AACA,UAAM,IAAI,KAAK,EAAE,QAAQ,OAAO,YAAY,MAAM,OAAO,MAAM,eAAe,IAAI,CAAC;AAAA,EACrF,CAAC,EACA,QAAQ,MAAM;AACb,aAAS,OAAO,GAAG;AAAA,EACrB,CAAC;AAEH,WAAS,IAAI,KAAK,OAAO;AACzB,SAAO;AACT;AAcA,eAAsB,cACpB,QACA,gBACA,MACqB;AACrB,QAAM,QAAQ,MAAM,SAAS;AAC7B,QAAM,aAAa,MAAM,cAAc;AACvC,QAAM,MAAM,SAAS,OAAO,YAAY,cAAc;AAEtD,QAAM,QAAQ,MAAM,IAAI,GAAG;AAC3B,MAAI,OAAO;AACT,UAAM,MAAM,KAAK,IAAI,IAAI,MAAM;AAC/B,QAAI,MAAM,OAAO;AACf,iBAAW,QAAQ,cAAc,EAAE,MAAM,MAAM;AAAA,MAE/C,CAAC;AAAA,IACH;AACA,WAAO,MAAM,aAAa,iBAAiB,MAAM,MAAM,IAAI,MAAM;AAAA,EACnE;AAEA,QAAM,WAAW,QAAQ,cAAc,EAAE,MAAM,MAAM;AAAA,EAErD,CAAC;AACD,SAAO,MAAM,IAAI,GAAG,GAAG,UAAU;AACnC;AAQO,SAAS,kBAAkB,OAAuB,MAAwC;AAC/F,aAAW,QAAQ,OAAO;AACxB,QAAI,aAAa,KAAK,OAAO,EAAE,KAAK,IAAI,EAAG,QAAO;AAAA,EACpD;AACA,SAAO;AACT;AAEA,SAAS,aAAa,SAAyB;AAC7C,QAAM,UAAU,QAAQ,QAAQ,sBAAsB,MAAM,EAAE,QAAQ,OAAO,IAAI;AACjF,SAAO,IAAI,OAAO,IAAI,OAAO,KAAK,GAAG;AACvC;AAGO,SAAS,wBAA8B;AAC5C,QAAM,MAAM;AACZ,WAAS,MAAM;AACjB;","names":[]}

package/dist/edge-config.mjs

@@ -0,0 +1,131 @@
+// src/edge-config.ts
+var DEFAULT_EDGE_CONFIG = Object.freeze({
+  version: 1,
+  mode: "observe",
+  depth: "classify",
+  pathRules: [],
+  sampling: Object.freeze({ anonymousBeaconRate: 0.1 }),
+  failurePosture: "open"
+});
+var EDGE_MODES = ["observe", "enforce"];
+var EDGE_DEPTHS = ["classify", "authenticate", "authorize"];
+function isEdgeConfig(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const v = value;
+  if (v.version !== 1) return false;
+  if (!EDGE_MODES.includes(v.mode)) return false;
+  if (!EDGE_DEPTHS.includes(v.depth)) return false;
+  if (!Array.isArray(v.pathRules)) return false;
+  for (const rule of v.pathRules) {
+    if (typeof rule !== "object" || rule === null) return false;
+    const r = rule;
+    if (typeof r.pattern !== "string" || r.pattern.length === 0) return false;
+    if (r.mode !== void 0 && !EDGE_MODES.includes(r.mode)) return false;
+    if (r.depth !== void 0 && !EDGE_DEPTHS.includes(r.depth)) return false;
+  }
+  const sampling = v.sampling;
+  if (typeof sampling !== "object" || sampling === null || typeof sampling.anonymousBeaconRate !== "number" || sampling.anonymousBeaconRate < 0 || sampling.anonymousBeaconRate > 1) {
+    return false;
+  }
+  return v.failurePosture === "open";
+}
+async function fetchEdgeConfig(config, counterpartyId, opts) {
+  if (!counterpartyId) return null;
+  const headers = { Accept: "application/json" };
+  if (config.apiKey) {
+    headers["Authorization"] = `Bearer ${config.apiKey}`;
+    headers["X-API-Key"] = config.apiKey;
+  }
+  if (opts?.etag) headers["If-None-Match"] = opts.etag;
+  try {
+    const response = await fetch(
+      `${config.apiBaseUrl}/endpoints/${encodeURIComponent(counterpartyId)}/edge-config`,
+      { method: "GET", headers, signal: AbortSignal.timeout(opts?.timeoutMs ?? 5e3) }
+    );
+    if (response.status === 304) return { notModified: true };
+    if (!response.ok) return null;
+    const body = await response.json();
+    const edgeConfig = body.data?.edgeConfig;
+    if (!isEdgeConfig(edgeConfig)) return null;
+    return { edgeConfig, etag: response.headers.get("etag") ?? void 0 };
+  } catch {
+    return null;
+  }
+}
+var DEFAULT_TTL_MS = 60 * 1e3;
+var DEFAULT_MAX_STALE_MS = 24 * 60 * 60 * 1e3;
+var cache = /* @__PURE__ */ new Map();
+var inflight = /* @__PURE__ */ new Map();
+function cacheKey(apiBaseUrl, counterpartyId) {
+  return `${apiBaseUrl}|${counterpartyId}`;
+}
+function degradeToObserve(config) {
+  if (config.mode !== "enforce" && !config.pathRules.some((r) => r.mode === "enforce")) {
+    return config;
+  }
+  return {
+    ...config,
+    mode: "observe",
+    pathRules: config.pathRules.map((r) => r.mode === "enforce" ? { ...r, mode: "observe" } : r)
+  };
+}
+async function revalidate(config, counterpartyId) {
+  const key = cacheKey(config.apiBaseUrl, counterpartyId);
+  const existing = inflight.get(key);
+  if (existing) return existing;
+  const promise = fetchEdgeConfig(config, counterpartyId, { etag: cache.get(key)?.etag }).then((result) => {
+    if (result === null) return;
+    const now = Date.now();
+    if ("notModified" in result) {
+      const entry = cache.get(key);
+      if (entry) entry.lastSuccessAt = now;
+      return;
+    }
+    cache.set(key, { config: result.edgeConfig, etag: result.etag, lastSuccessAt: now });
+  }).finally(() => {
+    inflight.delete(key);
+  });
+  inflight.set(key, promise);
+  return promise;
+}
+async function getEdgeConfig(config, counterpartyId, opts) {
+  const ttlMs = opts?.ttlMs ?? DEFAULT_TTL_MS;
+  const maxStaleMs = opts?.maxStaleMs ?? DEFAULT_MAX_STALE_MS;
+  const key = cacheKey(config.apiBaseUrl, counterpartyId);
+  const entry = cache.get(key);
+  if (entry) {
+    const age = Date.now() - entry.lastSuccessAt;
+    if (age > ttlMs) {
+      revalidate(config, counterpartyId).catch(() => {
+      });
+    }
+    return age > maxStaleMs ? degradeToObserve(entry.config) : entry.config;
+  }
+  await revalidate(config, counterpartyId).catch(() => {
+  });
+  return cache.get(key)?.config ?? DEFAULT_EDGE_CONFIG;
+}
+function matchEdgePathRule(rules, path) {
+  for (const rule of rules) {
+    if (globToRegExp(rule.pattern).test(path)) return rule;
+  }
+  return void 0;
+}
+function globToRegExp(pattern) {
+  const escaped = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*");
+  return new RegExp(`^${escaped}$`, "i");
+}
+function _resetEdgeConfigCache() {
+  cache.clear();
+  inflight.clear();
+}
+export {
+  DEFAULT_EDGE_CONFIG,
+  _resetEdgeConfigCache,
+  degradeToObserve,
+  fetchEdgeConfig,
+  getEdgeConfig,
+  isEdgeConfig,
+  matchEdgePathRule
+};
+//# sourceMappingURL=edge-config.mjs.map

package/dist/edge-config.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/edge-config.ts"],"sourcesContent":["/**\n * Edge verification config — the per-endpoint policy the Commerce Shield\n * edge adapter (§7.4, `@astrasyncai/adapter-lambda`) fetches from the\n * AstraSync dashboard to decide how much verification friction to apply\n * to inbound traffic, and where.\n *\n * Fetch pattern mirrors `well-known.ts`: TTL cache + stale-while-revalidate\n * + in-flight dedupe, with a `_reset*` hook for tests. Fail posture is\n * deliberately asymmetric: this module can NEVER put a site into enforce\n * mode on its own — enforce only ever originates from a successfully\n * fetched config, and a config that has gone stale past `maxStaleMs`\n * degrades back to observe.\n */\n\nimport type { GatewayConfig } from './types';\n\n/**\n * Edge posture. Canonical Commerce Shield vocabulary (strategy doc /\n * spec §33.5): `observe` ≈ the gateway's `passive` posture (verify +\n * record, enforce nothing), `enforce` ≈ `active`. New value set on a new\n * field name — do NOT reuse `GatewayPosture`'s `active`/`passive` here\n * (different field, different meaning: posture governs an agent-side\n * gateway; mode governs counterparty-side edge interception).\n */\nexport type EdgeMode = 'observe' | 'enforce';\n\n/**\n * How deep the edge checks each request — what is it → who is it → are\n * they allowed:\n * - `classify`     — UA / platform-fingerprint classification only; no\n *                    credential handling.\n * - `authenticate` — establish who is calling: detect and parse agent\n *                    credentials (X-Astra-*, VI SD-JWT, RFC 9421, ACP,\n *                    UCP, AP2…) and verify presented AstraSync identities.\n * - `authorize`    — full policy decision: credentials cryptographically\n *                    proven and PDLSS-evaluated via a verify-access round\n *                    trip. (US spelling on the wire, matching\n *                    `authorizeSettlement` and HTTP `Authorization`.)\n */\nexport type EdgeVerificationDepth = 'classify' | 'authenticate' | 'authorize';\n\nexport interface EdgePathRule {\n  /**\n   * `*`-wildcard glob matched against the request path. Matching is\n   * case-INsensitive and all regex metacharacters except `*` are\n   * escaped. (Deliberately diverges from the express adapter's\n   * `matchRoute`, which is case-sensitive by default and mid-shadow-\n   * rollout of the F-A6-31 fix — new surface ships the fix as default.)\n   */\n  pattern: string;\n  /** Pass the request through untouched (static assets); mode/depth ignored. */\n  skip?: boolean;\n  /** Override the top-level mode for this path. */\n  mode?: EdgeMode;\n  /** Override the top-level depth for this path. */\n  depth?: EdgeVerificationDepth;\n}\n\nexport interface EdgeConfig {\n  /** Shape version — bump on breaking changes. */\n  version: 1;\n  /** Default posture for paths no rule matches. */\n  mode: EdgeMode;\n  /** Default check depth for paths no rule matches. */\n  depth: EdgeVerificationDepth;\n  /** Ordered, first-match-wins. */\n  pathRules: EdgePathRule[];\n  sampling: {\n    /** Fraction (0..1) of anonymous-bot requests that emit a beacon. */\n    anonymousBeaconRate: number;\n  };\n  /**\n   * v1: only 'open' is representable — an unreachable backend always\n   * means observe + pass-through, never a broken or silently-enforcing\n   * customer site.\n   */\n  failurePosture: 'open';\n}\n\n/**\n * The safe default: observe-only, classification depth, nothing enforced.\n * Served by the backend when an endpoint has never been configured, and\n * used by `getEdgeConfig` whenever no config can be fetched.\n */\nexport const DEFAULT_EDGE_CONFIG: EdgeConfig = Object.freeze({\n  version: 1,\n  mode: 'observe',\n  depth: 'classify',\n  pathRules: [],\n  sampling: Object.freeze({ anonymousBeaconRate: 0.1 }),\n  failurePosture: 'open',\n}) as EdgeConfig;\n\nconst EDGE_MODES: readonly string[] = ['observe', 'enforce'];\nconst EDGE_DEPTHS: readonly string[] = ['classify', 'authenticate', 'authorize'];\n\n/** Structural guard for configs arriving over the wire. */\nexport function isEdgeConfig(value: unknown): value is EdgeConfig {\n  if (typeof value !== 'object' || value === null) return false;\n  const v = value as Record<string, unknown>;\n  if (v.version !== 1) return false;\n  if (!EDGE_MODES.includes(v.mode as string)) return false;\n  if (!EDGE_DEPTHS.includes(v.depth as string)) return false;\n  if (!Array.isArray(v.pathRules)) return false;\n  for (const rule of v.pathRules) {\n    if (typeof rule !== 'object' || rule === null) return false;\n    const r = rule as Record<string, unknown>;\n    if (typeof r.pattern !== 'string' || r.pattern.length === 0) return false;\n    if (r.mode !== undefined && !EDGE_MODES.includes(r.mode as string)) return false;\n    if (r.depth !== undefined && !EDGE_DEPTHS.includes(r.depth as string)) return false;\n  }\n  const sampling = v.sampling as Record<string, unknown> | undefined;\n  if (\n    typeof sampling !== 'object' ||\n    sampling === null ||\n    typeof sampling.anonymousBeaconRate !== 'number' ||\n    sampling.anonymousBeaconRate < 0 ||\n    sampling.anonymousBeaconRate > 1\n  ) {\n    return false;\n  }\n  return v.failurePosture === 'open';\n}\n\nexport interface FetchEdgeConfigSuccess {\n  edgeConfig: EdgeConfig;\n  etag?: string;\n}\n\nexport type FetchEdgeConfigResult = FetchEdgeConfigSuccess | { notModified: true } | null;\n\n/**\n * Fetch the edge config for an endpoint from the AstraSync backend.\n * `GET {apiBaseUrl}/endpoints/:counterpartyId/edge-config` with the same\n * auth headers as `fetchRoutes`. Pass the cached `etag` to get a cheap\n * `{ notModified: true }` on 304. Returns `null` on any failure —\n * the caller decides how to fall back.\n */\nexport async function fetchEdgeConfig(\n  config: Pick<GatewayConfig, 'apiBaseUrl' | 'apiKey'>,\n  counterpartyId: string,\n  opts?: { etag?: string; timeoutMs?: number }\n): Promise<FetchEdgeConfigResult> {\n  if (!counterpartyId) return null;\n  const headers: Record<string, string> = { Accept: 'application/json' };\n  if (config.apiKey) {\n    headers['Authorization'] = `Bearer ${config.apiKey}`;\n    headers['X-API-Key'] = config.apiKey;\n  }\n  if (opts?.etag) headers['If-None-Match'] = opts.etag;\n  try {\n    const response = await fetch(\n      `${config.apiBaseUrl}/endpoints/${encodeURIComponent(counterpartyId)}/edge-config`,\n      { method: 'GET', headers, signal: AbortSignal.timeout(opts?.timeoutMs ?? 5000) }\n    );\n    if (response.status === 304) return { notModified: true };\n    if (!response.ok) return null;\n    const body = (await response.json()) as { data?: { edgeConfig?: unknown } };\n    const edgeConfig = body.data?.edgeConfig;\n    if (!isEdgeConfig(edgeConfig)) return null;\n    return { edgeConfig, etag: response.headers.get('etag') ?? undefined };\n  } catch {\n    return null;\n  }\n}\n\ninterface CacheEntry {\n  config: EdgeConfig;\n  etag?: string;\n  /** When the entry was last confirmed fresh (fetch or 304). */\n  lastSuccessAt: number;\n}\n\nconst DEFAULT_TTL_MS = 60 * 1000;\nconst DEFAULT_MAX_STALE_MS = 24 * 60 * 60 * 1000;\n\nconst cache = new Map<string, CacheEntry>();\nconst inflight = new Map<string, Promise<void>>();\n\nfunction cacheKey(apiBaseUrl: string, counterpartyId: string): string {\n  return `${apiBaseUrl}|${counterpartyId}`;\n}\n\n/** Copy of `config` with every enforce (top-level and per-rule) degraded to observe. */\nexport function degradeToObserve(config: EdgeConfig): EdgeConfig {\n  if (config.mode !== 'enforce' && !config.pathRules.some((r) => r.mode === 'enforce')) {\n    return config;\n  }\n  return {\n    ...config,\n    mode: 'observe',\n    pathRules: config.pathRules.map((r) => (r.mode === 'enforce' ? { ...r, mode: 'observe' } : r)),\n  };\n}\n\nasync function revalidate(\n  config: Pick<GatewayConfig, 'apiBaseUrl' | 'apiKey'>,\n  counterpartyId: string\n): Promise<void> {\n  const key = cacheKey(config.apiBaseUrl, counterpartyId);\n  const existing = inflight.get(key);\n  if (existing) return existing;\n\n  const promise = fetchEdgeConfig(config, counterpartyId, { etag: cache.get(key)?.etag })\n    .then((result) => {\n      if (result === null) return; // failure — cache untouched, caller falls back\n      const now = Date.now();\n      if ('notModified' in result) {\n        const entry = cache.get(key);\n        if (entry) entry.lastSuccessAt = now;\n        return;\n      }\n      cache.set(key, { config: result.edgeConfig, etag: result.etag, lastSuccessAt: now });\n    })\n    .finally(() => {\n      inflight.delete(key);\n    });\n\n  inflight.set(key, promise);\n  return promise;\n}\n\n/**\n * Get the edge config for an endpoint, cached. Never throws, never blocks\n * longer than one fetch.\n *\n * - Fresh cache (within `ttlMs`) → cached config, no network.\n * - Stale cache → cached config immediately + background revalidate\n *   (stale-while-revalidate). If the last successful fetch is older than\n *   `maxStaleMs` (default 24h), any enforce is degraded to observe — a\n *   long-dead backend can never keep a site enforcing.\n * - No cache → await one fetch; on failure return `DEFAULT_EDGE_CONFIG`\n *   (observe-only). Defaults never enforce.\n */\nexport async function getEdgeConfig(\n  config: Pick<GatewayConfig, 'apiBaseUrl' | 'apiKey'>,\n  counterpartyId: string,\n  opts?: { ttlMs?: number; maxStaleMs?: number }\n): Promise<EdgeConfig> {\n  const ttlMs = opts?.ttlMs ?? DEFAULT_TTL_MS;\n  const maxStaleMs = opts?.maxStaleMs ?? DEFAULT_MAX_STALE_MS;\n  const key = cacheKey(config.apiBaseUrl, counterpartyId);\n\n  const entry = cache.get(key);\n  if (entry) {\n    const age = Date.now() - entry.lastSuccessAt;\n    if (age > ttlMs) {\n      revalidate(config, counterpartyId).catch(() => {\n        // background refresh failed — stale entry remains until next call\n      });\n    }\n    return age > maxStaleMs ? degradeToObserve(entry.config) : entry.config;\n  }\n\n  await revalidate(config, counterpartyId).catch(() => {\n    // fetch failed — fall through to defaults\n  });\n  return cache.get(key)?.config ?? DEFAULT_EDGE_CONFIG;\n}\n\n/**\n * First-match-wins path-rule lookup. Case-insensitive `*` globs with all\n * other regex metacharacters escaped (a literal `.` in a pattern matches\n * only `.`). Returns `undefined` when no rule matches — the caller applies\n * the config's top-level mode/depth.\n */\nexport function matchEdgePathRule(rules: EdgePathRule[], path: string): EdgePathRule | undefined {\n  for (const rule of rules) {\n    if (globToRegExp(rule.pattern).test(path)) return rule;\n  }\n  return undefined;\n}\n\nfunction globToRegExp(pattern: string): RegExp {\n  const escaped = pattern.replace(/[.+?^${}()|[\\]\\\\]/g, '\\\\$&').replace(/\\*/g, '.*');\n  return new RegExp(`^${escaped}$`, 'i');\n}\n\n/** Reset cache — for testing only. */\nexport function _resetEdgeConfigCache(): void {\n  cache.clear();\n  inflight.clear();\n}\n"],"mappings":";AAoFO,IAAM,sBAAkC,OAAO,OAAO;AAAA,EAC3D,SAAS;AAAA,EACT,MAAM;AAAA,EACN,OAAO;AAAA,EACP,WAAW,CAAC;AAAA,EACZ,UAAU,OAAO,OAAO,EAAE,qBAAqB,IAAI,CAAC;AAAA,EACpD,gBAAgB;AAClB,CAAC;AAED,IAAM,aAAgC,CAAC,WAAW,SAAS;AAC3D,IAAM,cAAiC,CAAC,YAAY,gBAAgB,WAAW;AAGxE,SAAS,aAAa,OAAqC;AAChE,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,IAAI;AACV,MAAI,EAAE,YAAY,EAAG,QAAO;AAC5B,MAAI,CAAC,WAAW,SAAS,EAAE,IAAc,EAAG,QAAO;AACnD,MAAI,CAAC,YAAY,SAAS,EAAE,KAAe,EAAG,QAAO;AACrD,MAAI,CAAC,MAAM,QAAQ,EAAE,SAAS,EAAG,QAAO;AACxC,aAAW,QAAQ,EAAE,WAAW;AAC9B,QAAI,OAAO,SAAS,YAAY,SAAS,KAAM,QAAO;AACtD,UAAM,IAAI;AACV,QAAI,OAAO,EAAE,YAAY,YAAY,EAAE,QAAQ,WAAW,EAAG,QAAO;AACpE,QAAI,EAAE,SAAS,UAAa,CAAC,WAAW,SAAS,EAAE,IAAc,EAAG,QAAO;AAC3E,QAAI,EAAE,UAAU,UAAa,CAAC,YAAY,SAAS,EAAE,KAAe,EAAG,QAAO;AAAA,EAChF;AACA,QAAM,WAAW,EAAE;AACnB,MACE,OAAO,aAAa,YACpB,aAAa,QACb,OAAO,SAAS,wBAAwB,YACxC,SAAS,sBAAsB,KAC/B,SAAS,sBAAsB,GAC/B;AACA,WAAO;AAAA,EACT;AACA,SAAO,EAAE,mBAAmB;AAC9B;AAgBA,eAAsB,gBACpB,QACA,gBACA,MACgC;AAChC,MAAI,CAAC,eAAgB,QAAO;AAC5B,QAAM,UAAkC,EAAE,QAAQ,mBAAmB;AACrE,MAAI,OAAO,QAAQ;AACjB,YAAQ,eAAe,IAAI,UAAU,OAAO,MAAM;AAClD,YAAQ,WAAW,IAAI,OAAO;AAAA,EAChC;AACA,MAAI,MAAM,KAAM,SAAQ,eAAe,IAAI,KAAK;AAChD,MAAI;AACF,UAAM,WAAW,MAAM;AAAA,MACrB,GAAG,OAAO,UAAU,cAAc,mBAAmB,cAAc,CAAC;AAAA,MACpE,EAAE,QAAQ,OAAO,SAAS,QAAQ,YAAY,QAAQ,MAAM,aAAa,GAAI,EAAE;AAAA,IACjF;AACA,QAAI,SAAS,WAAW,IAAK,QAAO,EAAE,aAAa,KAAK;AACxD,QAAI,CAAC,SAAS,GAAI,QAAO;AACzB,UAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,UAAM,aAAa,KAAK,MAAM;AAC9B,QAAI,CAAC,aAAa,UAAU,EAAG,QAAO;AACtC,WAAO,EAAE,YAAY,MAAM,SAAS,QAAQ,IAAI,MAAM,KAAK,OAAU;AAAA,EACvE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AASA,IAAM,iBAAiB,KAAK;AAC5B,IAAM,uBAAuB,KAAK,KAAK,KAAK;AAE5C,IAAM,QAAQ,oBAAI,IAAwB;AAC1C,IAAM,WAAW,oBAAI,IAA2B;AAEhD,SAAS,SAAS,YAAoB,gBAAgC;AACpE,SAAO,GAAG,UAAU,IAAI,cAAc;AACxC;AAGO,SAAS,iBAAiB,QAAgC;AAC/D,MAAI,OAAO,SAAS,aAAa,CAAC,OAAO,UAAU,KAAK,CAAC,MAAM,EAAE,SAAS,SAAS,GAAG;AACpF,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,MAAM;AAAA,IACN,WAAW,OAAO,UAAU,IAAI,CAAC,MAAO,EAAE,SAAS,YAAY,EAAE,GAAG,GAAG,MAAM,UAAU,IAAI,CAAE;AAAA,EAC/F;AACF;AAEA,eAAe,WACb,QACA,gBACe;AACf,QAAM,MAAM,SAAS,OAAO,YAAY,cAAc;AACtD,QAAM,WAAW,SAAS,IAAI,GAAG;AACjC,MAAI,SAAU,QAAO;AAErB,QAAM,UAAU,gBAAgB,QAAQ,gBAAgB,EAAE,MAAM,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,EACnF,KAAK,CAAC,WAAW;AAChB,QAAI,WAAW,KAAM;AACrB,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,iBAAiB,QAAQ;AAC3B,YAAM,QAAQ,MAAM,IAAI,GAAG;AAC3B,UAAI,MAAO,OAAM,gBAAgB;AACjC;AAAA,IACF;AACA,UAAM,IAAI,KAAK,EAAE,QAAQ,OAAO,YAAY,MAAM,OAAO,MAAM,eAAe,IAAI,CAAC;AAAA,EACrF,CAAC,EACA,QAAQ,MAAM;AACb,aAAS,OAAO,GAAG;AAAA,EACrB,CAAC;AAEH,WAAS,IAAI,KAAK,OAAO;AACzB,SAAO;AACT;AAcA,eAAsB,cACpB,QACA,gBACA,MACqB;AACrB,QAAM,QAAQ,MAAM,SAAS;AAC7B,QAAM,aAAa,MAAM,cAAc;AACvC,QAAM,MAAM,SAAS,OAAO,YAAY,cAAc;AAEtD,QAAM,QAAQ,MAAM,IAAI,GAAG;AAC3B,MAAI,OAAO;AACT,UAAM,MAAM,KAAK,IAAI,IAAI,MAAM;AAC/B,QAAI,MAAM,OAAO;AACf,iBAAW,QAAQ,cAAc,EAAE,MAAM,MAAM;AAAA,MAE/C,CAAC;AAAA,IACH;AACA,WAAO,MAAM,aAAa,iBAAiB,MAAM,MAAM,IAAI,MAAM;AAAA,EACnE;AAEA,QAAM,WAAW,QAAQ,cAAc,EAAE,MAAM,MAAM;AAAA,EAErD,CAAC;AACD,SAAO,MAAM,IAAI,GAAG,GAAG,UAAU;AACnC;AAQO,SAAS,kBAAkB,OAAuB,MAAwC;AAC/F,aAAW,QAAQ,OAAO;AACxB,QAAI,aAAa,KAAK,OAAO,EAAE,KAAK,IAAI,EAAG,QAAO;AAAA,EACpD;AACA,SAAO;AACT;AAEA,SAAS,aAAa,SAAyB;AAC7C,QAAM,UAAU,QAAQ,QAAQ,sBAAsB,MAAM,EAAE,QAAQ,OAAO,IAAI;AACjF,SAAO,IAAI,OAAO,IAAI,OAAO,KAAK,GAAG;AACvC;AAGO,SAAS,wBAA8B;AAC5C,QAAM,MAAM;AACZ,WAAS,MAAM;AACjB;","names":[]}

package/dist/{express-C8nJGi5P.d.ts → express-ClNtDhhc.d.ts}

@@ -1,5 +1,5 @@
 import { RequestHandler, Request } from 'express';
-import { q as VerificationResult, e as ExpressMiddlewareOptions, c as AstraSyncCredentials } from './types-DedAJbNI.js';
+import { r as VerificationResult, f as ExpressMiddlewareOptions, c as AstraSyncCredentials } from './types-9tns4wyl.js';
 
 /**
  * AstraSync Universal Verification Gateway - Express Middleware

package/dist/{express-Di_hnZZS.d.mts → express-DCXa1oqj.d.mts}

@@ -1,5 +1,5 @@
 import { RequestHandler, Request } from 'express';
-import { q as VerificationResult, e as ExpressMiddlewareOptions, c as AstraSyncCredentials } from './types-DedAJbNI.mjs';
+import { r as VerificationResult, f as ExpressMiddlewareOptions, c as AstraSyncCredentials } from './types-sy3tq8lp.mjs';
 
 /**
  * AstraSync Universal Verification Gateway - Express Middleware

package/dist/gateway/gateway.d.mts

@@ -1,5 +1,6 @@
-import { a as AstraSyncGatewayConfig, P as PDLSSContext, V as VerificationDecision } from '../types-CSFci5zD.mjs';
-import '../types-DedAJbNI.mjs';
+import { a as AstraSyncGatewayConfig, P as PDLSSContext, V as VerificationDecision } from '../types-D0lCtFQ7.mjs';
+import '../types-sy3tq8lp.mjs';
+import '../metadata-capture.mjs';
 
 /**
  * AstraSyncGateway — Primary API surface for agent verification.

package/dist/gateway/gateway.d.ts

@@ -1,5 +1,6 @@
-import { a as AstraSyncGatewayConfig, P as PDLSSContext, V as VerificationDecision } from '../types-D1kyMiml.js';
-import '../types-DedAJbNI.js';
+import { a as AstraSyncGatewayConfig, P as PDLSSContext, V as VerificationDecision } from '../types-YbiXYKx1.js';
+import '../types-9tns4wyl.js';
+import '../metadata-capture.js';
 
 /**
  * AstraSyncGateway — Primary API surface for agent verification.