@astrasyncai/verification-gateway 3.9.0 → 3.10.0

package/dist/git-trigger/git-hooks.d.mts

@@ -1,6 +1,7 @@
 import { AstraSyncGateway } from '../gateway/gateway.mjs';
-import { V as VerificationDecision, P as PDLSSContext } from '../types-BtqUvK8v.mjs';
-import '../types-ACMsV07B.mjs';
+import { V as VerificationDecision, P as PDLSSContext } from '../types-D0lCtFQ7.mjs';
+import '../types-sy3tq8lp.mjs';
+import '../metadata-capture.mjs';
 
 /**
  * Git Trigger — Enterprise git push / PR verification

package/dist/git-trigger/git-hooks.d.ts

@@ -1,6 +1,7 @@
 import { AstraSyncGateway } from '../gateway/gateway.js';
-import { V as VerificationDecision, P as PDLSSContext } from '../types-DmSDgPpG.js';
-import '../types-ACMsV07B.js';
+import { V as VerificationDecision, P as PDLSSContext } from '../types-YbiXYKx1.js';
+import '../types-9tns4wyl.js';
+import '../metadata-capture.js';
 
 /**
  * Git Trigger — Enterprise git push / PR verification

package/dist/{index-Dalih3EB.d.mts → index-BrNKDmiR.d.mts}

@@ -1,4 +1,4 @@
-import { c as AstraSyncCredentials, h as ProtocolTransport } from './types-ACMsV07B.mjs';
+import { c as AstraSyncCredentials, h as ProtocolTransport } from './types-sy3tq8lp.mjs';
 import { JWK } from 'jose';
 
 /**

package/dist/{index-C61VL_OW.d.ts → index-CfHurO1P.d.ts}

@@ -1,4 +1,4 @@
-import { c as AstraSyncCredentials, h as ProtocolTransport, G as GatewayConfig } from './types-ACMsV07B.js';
+import { c as AstraSyncCredentials, h as ProtocolTransport, G as GatewayConfig } from './types-9tns4wyl.js';
 
 /**
  * AgentClient — Credential Presentation

package/dist/{index-CMg-vjEK.d.ts → index-D2ztkumS.d.ts}

@@ -1,4 +1,4 @@
-import { c as AstraSyncCredentials, h as ProtocolTransport } from './types-ACMsV07B.js';
+import { c as AstraSyncCredentials, h as ProtocolTransport } from './types-9tns4wyl.js';
 import { JWK } from 'jose';
 
 /**

package/dist/{index-DmmdehNu.d.mts → index-Dr_XiN65.d.mts}

@@ -1,4 +1,4 @@
-import { c as AstraSyncCredentials, h as ProtocolTransport, G as GatewayConfig } from './types-ACMsV07B.mjs';
+import { c as AstraSyncCredentials, h as ProtocolTransport, G as GatewayConfig } from './types-sy3tq8lp.mjs';
 
 /**
  * AgentClient — Credential Presentation

package/dist/index.d.mts

@@ -1,15 +1,16 @@
-import { G as GatewayConfig, n as StepUpApprovalInfo, p as StepUpOutcome, o as StepUpApprovalStatus, E as EnhancedVerificationResult, A as AccessFailure } from './types-ACMsV07B.mjs';
-export { a as AccessLevel, b as AgentCredentials, c as AstraSyncCredentials, C as CommerceArtifactsPayload, d as CommerceShieldProps, e as CounterpartyType, f as ExpressMiddlewareOptions, F as FiatSettlementBinding, g as GuidanceInfo, N as NextJsMiddlewareOptions, P as PDLSSInfo, h as ProtocolTransport, R as RouteAccessConfig, i as RuntimeChallengeResult, S as SDKOptions, j as SettlementArtifact, k as SettlementArtifactBinding, l as SettlementArtifactBindingBase, m as StablecoinSettlementBinding, T as TokenGuidance, q as TrustLevel, V as VerificationRequest, r as VerificationResult, s as VerifiedAgent, t as VerifiedDeveloper, u as VerifiedOrganization } from './types-ACMsV07B.mjs';
-export { A as ACCESS_LEVEL_DESCRIPTIONS, a as ACCESS_LEVEL_HIERARCHY, b as AccessCapabilities, D as DEFAULT_TRUST_THRESHOLDS, T as TRUST_LEVEL_RANGES, d as determineAccessLevel, g as getAccessLevelForScore, e as getCapabilities, f as getTrustLevel, h as hasMinimumAccess, s as sdk } from './sdk-Clob2-0A.mjs';
+import { G as GatewayConfig, n as StepUpApprovalInfo, p as StepUpOutcome, o as StepUpApprovalStatus, E as EnhancedVerificationResult, A as AccessFailure } from './types-sy3tq8lp.mjs';
+export { a as AccessLevel, b as AgentCredentials, c as AstraSyncCredentials, C as CommerceArtifactsPayload, d as CommerceShieldProps, e as CounterpartyType, f as ExpressMiddlewareOptions, F as FiatSettlementBinding, g as GuidanceInfo, N as NextJsMiddlewareOptions, P as PDLSSInfo, h as ProtocolTransport, R as RouteAccessConfig, i as RuntimeChallengeResult, S as SDKOptions, j as SettlementArtifact, k as SettlementArtifactBinding, l as SettlementArtifactBindingBase, m as StablecoinSettlementBinding, T as TokenGuidance, q as TrustLevel, V as VerificationRequest, r as VerificationResult, s as VerifiedAgent, t as VerifiedDeveloper, u as VerifiedOrganization } from './types-sy3tq8lp.mjs';
+export { A as ACCESS_LEVEL_DESCRIPTIONS, a as ACCESS_LEVEL_HIERARCHY, b as AccessCapabilities, D as DEFAULT_TRUST_THRESHOLDS, T as TRUST_LEVEL_RANGES, d as determineAccessLevel, g as getAccessLevelForScore, e as getCapabilities, f as getTrustLevel, h as hasMinimumAccess, s as sdk } from './sdk-CZkbSOeO.mjs';
 export { VerifyOptions, clearCache, extractCredentials, fetchRoutes, hasCredentials, quickVerify, reportUnregisteredAttempt, verify } from './verify.mjs';
-export { e as express } from './express-DXUyvv7t.mjs';
-export { n as nextjs } from './nextjs-F_2pbPIA.mjs';
-export { aR as extractMcpCredentials, bg as setMcpMeta, b1 as transport } from './index-Dalih3EB.mjs';
+export { e as express } from './express-DCXa1oqj.mjs';
+export { n as nextjs } from './nextjs-DcQIk6Zj.mjs';
+export { aR as extractMcpCredentials, bg as setMcpMeta, b1 as transport } from './index-BrNKDmiR.mjs';
 export { McpMiddlewareOptions, ToolGateConfig, createMcpMiddleware } from './adapters/mcp.mjs';
 export { AgentProtocol, AgentRecord, AstraSync, AstraSyncConfig, AstraSyncError, AuthenticationError, BuildGuidanceParams, FrameworkConfig, GuidanceEnvelope, HealthResponse, KYDRequiredError, ModelConfig, PDLSSConfig, PDLSSDuration, PDLSSLimits, PDLSSPurpose, PDLSSScope, PDLSSSelfInstantiation, PendingRegistrationResponse, PollRegistrationResult, RegisterOptions, RegisterResult, RegistrationDeniedError, RegistrationExpiredError, RegistrationResponse, RegistrationTimeoutError, VerifyResponse, WaitForApprovalOptions, buildGuidance } from './registration/index.mjs';
-export { A as AgentClient, C as ChallengeHandler, i as agent, r as recordDecision } from './index-DmmdehNu.mjs';
+export { A as AgentClient, C as ChallengeHandler, i as agent, r as recordDecision } from './index-Dr_XiN65.mjs';
 export { DEFAULT_EDGE_CONFIG, EdgeConfig, EdgeMode, EdgePathRule, EdgeVerificationDepth, FetchEdgeConfigResult, FetchEdgeConfigSuccess, _resetEdgeConfigCache, degradeToObserve, fetchEdgeConfig, getEdgeConfig, isEdgeConfig, matchEdgePathRule } from './edge-config.mjs';
-export { PLATFORM_AGENT_SIGNATURES, PlatformAgentVendor, PlatformDetectionInput, PlatformFingerprint, detectPlatformFingerprint } from './platform-signatures.mjs';
+export { DynamicPlatformFingerprint, PLATFORM_AGENT_SIGNATURES, PlatformAgentVendor, PlatformDetectionInput, PlatformFingerprint, PlatformSignatureDef, detectPlatformFingerprint, matchPlatformSignature } from './platform-signatures.mjs';
+export { MAX_HEADERS, MAX_HEADER_VALUE_BYTES, MAX_TOTAL_BYTES, ObservedMetadata, SanitizeHeadersResult, extractApiKeyFormat, extractPlatformHeaders, sanitizeHeaders } from './metadata-capture.mjs';
 import 'express';
 import 'next/server';
 import 'jose';
@@ -144,6 +145,6 @@ declare function getCachedWellKnownUrls(apiBaseUrl: string): WellKnownAgenticCom
  * is fine — bumping both in the release-ceremony commit keeps them
  * lockstep.
  */
-declare const SDK_VERSION = "3.9.0";
+declare const SDK_VERSION = "3.10.0";
 
 export { EnhancedVerificationResult, GatewayConfig, type SettlementDecision, type SettlementRequest, StepUpApprovalInfo, StepUpApprovalStatus, StepUpOutcome, SDK_VERSION as VERSION, type WellKnownAgenticCommerce, authorizeSettlement, awaitStepUpApproval, getCachedWellKnownUrls, getWellKnownUrls, pollStepUpStatus, prefetchWellKnown };

package/dist/index.d.ts

@@ -1,15 +1,16 @@
-import { G as GatewayConfig, n as StepUpApprovalInfo, p as StepUpOutcome, o as StepUpApprovalStatus, E as EnhancedVerificationResult, A as AccessFailure } from './types-ACMsV07B.js';
-export { a as AccessLevel, b as AgentCredentials, c as AstraSyncCredentials, C as CommerceArtifactsPayload, d as CommerceShieldProps, e as CounterpartyType, f as ExpressMiddlewareOptions, F as FiatSettlementBinding, g as GuidanceInfo, N as NextJsMiddlewareOptions, P as PDLSSInfo, h as ProtocolTransport, R as RouteAccessConfig, i as RuntimeChallengeResult, S as SDKOptions, j as SettlementArtifact, k as SettlementArtifactBinding, l as SettlementArtifactBindingBase, m as StablecoinSettlementBinding, T as TokenGuidance, q as TrustLevel, V as VerificationRequest, r as VerificationResult, s as VerifiedAgent, t as VerifiedDeveloper, u as VerifiedOrganization } from './types-ACMsV07B.js';
-export { A as ACCESS_LEVEL_DESCRIPTIONS, a as ACCESS_LEVEL_HIERARCHY, b as AccessCapabilities, D as DEFAULT_TRUST_THRESHOLDS, T as TRUST_LEVEL_RANGES, d as determineAccessLevel, g as getAccessLevelForScore, e as getCapabilities, f as getTrustLevel, h as hasMinimumAccess, s as sdk } from './sdk-CfHANs4A.js';
+import { G as GatewayConfig, n as StepUpApprovalInfo, p as StepUpOutcome, o as StepUpApprovalStatus, E as EnhancedVerificationResult, A as AccessFailure } from './types-9tns4wyl.js';
+export { a as AccessLevel, b as AgentCredentials, c as AstraSyncCredentials, C as CommerceArtifactsPayload, d as CommerceShieldProps, e as CounterpartyType, f as ExpressMiddlewareOptions, F as FiatSettlementBinding, g as GuidanceInfo, N as NextJsMiddlewareOptions, P as PDLSSInfo, h as ProtocolTransport, R as RouteAccessConfig, i as RuntimeChallengeResult, S as SDKOptions, j as SettlementArtifact, k as SettlementArtifactBinding, l as SettlementArtifactBindingBase, m as StablecoinSettlementBinding, T as TokenGuidance, q as TrustLevel, V as VerificationRequest, r as VerificationResult, s as VerifiedAgent, t as VerifiedDeveloper, u as VerifiedOrganization } from './types-9tns4wyl.js';
+export { A as ACCESS_LEVEL_DESCRIPTIONS, a as ACCESS_LEVEL_HIERARCHY, b as AccessCapabilities, D as DEFAULT_TRUST_THRESHOLDS, T as TRUST_LEVEL_RANGES, d as determineAccessLevel, g as getAccessLevelForScore, e as getCapabilities, f as getTrustLevel, h as hasMinimumAccess, s as sdk } from './sdk-H0JCLW2y.js';
 export { VerifyOptions, clearCache, extractCredentials, fetchRoutes, hasCredentials, quickVerify, reportUnregisteredAttempt, verify } from './verify.js';
-export { e as express } from './express-sGXhDdd0.js';
-export { n as nextjs } from './nextjs-DwUW-Nm1.js';
-export { aR as extractMcpCredentials, bg as setMcpMeta, b1 as transport } from './index-CMg-vjEK.js';
+export { e as express } from './express-ClNtDhhc.js';
+export { n as nextjs } from './nextjs-CEBVBsdi.js';
+export { aR as extractMcpCredentials, bg as setMcpMeta, b1 as transport } from './index-D2ztkumS.js';
 export { McpMiddlewareOptions, ToolGateConfig, createMcpMiddleware } from './adapters/mcp.js';
 export { AgentProtocol, AgentRecord, AstraSync, AstraSyncConfig, AstraSyncError, AuthenticationError, BuildGuidanceParams, FrameworkConfig, GuidanceEnvelope, HealthResponse, KYDRequiredError, ModelConfig, PDLSSConfig, PDLSSDuration, PDLSSLimits, PDLSSPurpose, PDLSSScope, PDLSSSelfInstantiation, PendingRegistrationResponse, PollRegistrationResult, RegisterOptions, RegisterResult, RegistrationDeniedError, RegistrationExpiredError, RegistrationResponse, RegistrationTimeoutError, VerifyResponse, WaitForApprovalOptions, buildGuidance } from './registration/index.js';
-export { A as AgentClient, C as ChallengeHandler, i as agent, r as recordDecision } from './index-C61VL_OW.js';
+export { A as AgentClient, C as ChallengeHandler, i as agent, r as recordDecision } from './index-CfHurO1P.js';
 export { DEFAULT_EDGE_CONFIG, EdgeConfig, EdgeMode, EdgePathRule, EdgeVerificationDepth, FetchEdgeConfigResult, FetchEdgeConfigSuccess, _resetEdgeConfigCache, degradeToObserve, fetchEdgeConfig, getEdgeConfig, isEdgeConfig, matchEdgePathRule } from './edge-config.js';
-export { PLATFORM_AGENT_SIGNATURES, PlatformAgentVendor, PlatformDetectionInput, PlatformFingerprint, detectPlatformFingerprint } from './platform-signatures.js';
+export { DynamicPlatformFingerprint, PLATFORM_AGENT_SIGNATURES, PlatformAgentVendor, PlatformDetectionInput, PlatformFingerprint, PlatformSignatureDef, detectPlatformFingerprint, matchPlatformSignature } from './platform-signatures.js';
+export { MAX_HEADERS, MAX_HEADER_VALUE_BYTES, MAX_TOTAL_BYTES, ObservedMetadata, SanitizeHeadersResult, extractApiKeyFormat, extractPlatformHeaders, sanitizeHeaders } from './metadata-capture.js';
 import 'express';
 import 'next/server';
 import 'jose';
@@ -144,6 +145,6 @@ declare function getCachedWellKnownUrls(apiBaseUrl: string): WellKnownAgenticCom
  * is fine — bumping both in the release-ceremony commit keeps them
  * lockstep.
  */
-declare const SDK_VERSION = "3.9.0";
+declare const SDK_VERSION = "3.10.0";
 
 export { EnhancedVerificationResult, GatewayConfig, type SettlementDecision, type SettlementRequest, StepUpApprovalInfo, StepUpApprovalStatus, StepUpOutcome, SDK_VERSION as VERSION, type WellKnownAgenticCommerce, authorizeSettlement, awaitStepUpApproval, getCachedWellKnownUrls, getWellKnownUrls, pollStepUpStatus, prefetchWellKnown };

package/dist/index.js

@@ -40,6 +40,9 @@ __export(src_exports, {
   DEFAULT_EDGE_CONFIG: () => DEFAULT_EDGE_CONFIG,
   DEFAULT_TRUST_THRESHOLDS: () => DEFAULT_TRUST_THRESHOLDS,
   KYDRequiredError: () => KYDRequiredError,
+  MAX_HEADERS: () => MAX_HEADERS,
+  MAX_HEADER_VALUE_BYTES: () => MAX_HEADER_VALUE_BYTES,
+  MAX_TOTAL_BYTES: () => MAX_TOTAL_BYTES,
   PLATFORM_AGENT_SIGNATURES: () => PLATFORM_AGENT_SIGNATURES,
   RegistrationDeniedError: () => RegistrationDeniedError,
   RegistrationExpiredError: () => RegistrationExpiredError,
@@ -57,8 +60,10 @@ __export(src_exports, {
   detectPlatformFingerprint: () => detectPlatformFingerprint,
   determineAccessLevel: () => determineAccessLevel,
   express: () => express_exports,
+  extractApiKeyFormat: () => extractApiKeyFormat,
   extractCredentials: () => extractCredentials,
   extractMcpCredentials: () => extractMcpCredentials,
+  extractPlatformHeaders: () => extractPlatformHeaders,
   fetchEdgeConfig: () => fetchEdgeConfig,
   fetchRoutes: () => fetchRoutes,
   getAccessLevelForScore: () => getAccessLevelForScore,
@@ -71,12 +76,14 @@ __export(src_exports, {
   hasMinimumAccess: () => hasMinimumAccess,
   isEdgeConfig: () => isEdgeConfig,
   matchEdgePathRule: () => matchEdgePathRule,
+  matchPlatformSignature: () => matchPlatformSignature,
   nextjs: () => nextjs_exports,
   pollStepUpStatus: () => pollStepUpStatus,
   prefetchWellKnown: () => prefetchWellKnown,
   quickVerify: () => quickVerify,
   recordDecision: () => recordDecision2,
   reportUnregisteredAttempt: () => reportUnregisteredAttempt,
+  sanitizeHeaders: () => sanitizeHeaders,
   sdk: () => sdk_exports,
   setMcpMeta: () => setMcpMeta,
   transport: () => transport_exports,
@@ -206,7 +213,7 @@ function getCapabilities(accessLevel) {
 }
 
 // src/version.ts
-var SDK_VERSION = "3.9.0";
+var SDK_VERSION = "3.10.0";
 
 // src/well-known.ts
 var CACHE_TTL_MS = 60 * 60 * 1e3;
@@ -1103,6 +1110,152 @@ function performCounterpartyPreCheck(routeConfig, astraCreds, purpose) {
   return failures;
 }
 
+// src/metadata-capture.ts
+var SECRET_HEADER_NAMES = /* @__PURE__ */ new Set([
+  "cookie",
+  "set-cookie",
+  "x-csrf-token",
+  "proxy-authorization",
+  "x-astrasync-signature",
+  "x-astrasync-secret",
+  "x-hub-signature",
+  "x-hub-signature-256"
+]);
+var SECRET_HEADER_PREFIXES = ["x-astrasync-", "kya-", "kya_"];
+var CREDENTIAL_HEADER_NAMES = /* @__PURE__ */ new Set([
+  "authorization",
+  "x-api-key",
+  "x-goog-api-key",
+  "api-key"
+]);
+function isSignatureHeader(name) {
+  return name === "signature" || name.endsWith("-signature") || name.endsWith("-signature-256");
+}
+var PLATFORM_HEADER_NAMES = /* @__PURE__ */ new Set([
+  "openai-organization",
+  "openai-project",
+  "openai-version",
+  "openai-processing-ms",
+  "anthropic-version",
+  "anthropic-beta",
+  "x-goog-user-project",
+  "x-goog-api-client",
+  "user-agent",
+  "x-agent-card-url",
+  "x-agent-provider"
+]);
+var PLATFORM_HEADER_PREFIXES = ["x-goog-", "x-stainless-", "x-anthropic-", "x-openai-"];
+var KEY_FORMAT_PREFIXES = [
+  "sk-ant-api03",
+  "sk-ant-api",
+  "sk-ant",
+  "sk-proj",
+  "sk-svcacct",
+  "sk-or-v1",
+  "sk-or",
+  "sk-lf",
+  "sk-",
+  "gsk_",
+  "aiza",
+  "ya29",
+  "ghp_",
+  "gho_",
+  "github_pat_",
+  "xai-",
+  "pplx-",
+  "r8_",
+  "hf_",
+  "astra-",
+  "astrae-"
+];
+var MAX_HEADERS = 64;
+var MAX_HEADER_VALUE_BYTES = 1024;
+var MAX_TOTAL_BYTES = 16 * 1024;
+function byteLength(s) {
+  let bytes = 0;
+  for (let i = 0; i < s.length; i++) {
+    const code = s.charCodeAt(i);
+    if (code < 128) bytes += 1;
+    else if (code < 2048) bytes += 2;
+    else if (code >= 55296 && code <= 56319) {
+      bytes += 4;
+      i++;
+    } else bytes += 3;
+  }
+  return bytes;
+}
+function extractApiKeyFormat(rawValue) {
+  if (!rawValue) return void 0;
+  let value = rawValue.trim();
+  const spaceIdx = value.indexOf(" ");
+  if (spaceIdx > 0) {
+    const scheme = value.slice(0, spaceIdx).toLowerCase();
+    if (scheme === "bearer" || scheme === "basic" || scheme === "token") {
+      value = value.slice(spaceIdx + 1).trim();
+    }
+  }
+  const lower = value.toLowerCase();
+  for (const prefix of KEY_FORMAT_PREFIXES) {
+    if (lower.startsWith(prefix)) {
+      return prefix;
+    }
+  }
+  return void 0;
+}
+function isSecretHeader(name) {
+  if (SECRET_HEADER_NAMES.has(name)) return true;
+  if (SECRET_HEADER_PREFIXES.some((p) => name.startsWith(p))) return true;
+  if (isSignatureHeader(name)) return true;
+  return false;
+}
+function isPlatformHeader(name) {
+  if (PLATFORM_HEADER_NAMES.has(name)) return true;
+  return PLATFORM_HEADER_PREFIXES.some((p) => name.startsWith(p));
+}
+function sanitizeHeaders(raw) {
+  const headers = {};
+  const platformHeaders = {};
+  let apiKeyFormat;
+  let totalBytes = 0;
+  let count = 0;
+  if (!raw) return { headers };
+  for (const rawName of Object.keys(raw)) {
+    if (count >= MAX_HEADERS) break;
+    const name = rawName.toLowerCase();
+    const rawValue = raw[rawName];
+    if (rawValue === void 0) continue;
+    const joined = Array.isArray(rawValue) ? rawValue.join(", ") : String(rawValue);
+    if (CREDENTIAL_HEADER_NAMES.has(name)) {
+      const fmt = extractApiKeyFormat(joined);
+      if (fmt && !apiKeyFormat) apiKeyFormat = fmt;
+      continue;
+    }
+    if (isSecretHeader(name)) continue;
+    let value = joined;
+    if (byteLength(value) > MAX_HEADER_VALUE_BYTES) {
+      value = value.slice(0, MAX_HEADER_VALUE_BYTES);
+    }
+    const entryBytes = byteLength(name) + byteLength(value);
+    if (totalBytes + entryBytes > MAX_TOTAL_BYTES) continue;
+    totalBytes += entryBytes;
+    count++;
+    headers[name] = value;
+    if (isPlatformHeader(name)) platformHeaders[name] = value;
+  }
+  const result = { headers };
+  if (apiKeyFormat) result.apiKeyFormat = apiKeyFormat;
+  if (Object.keys(platformHeaders).length > 0) result.platformHeaders = platformHeaders;
+  return result;
+}
+function extractPlatformHeaders(sanitized) {
+  const out = {};
+  if (!sanitized) return out;
+  for (const name of Object.keys(sanitized)) {
+    if (isPlatformHeader(name.toLowerCase())) out[name.toLowerCase()] = sanitized[name];
+  }
+  return out;
+}
+
 // src/adapters/express.ts
 function defaultExtractCredentials(req) {
   return extractCredentials(
@@ -1369,7 +1522,18 @@ function createMiddleware(options) {
           referer: req.headers.referer,
           host: req.headers.host,
           forwardedFor: forwardedForStr,
-          agentCardUrl
+          agentCardUrl,
+          // Workstream D — capture EVERY inbound header (SDK-only merchants
+          // have no edge to do it upstream). Local string work, secrets
+          // stripped; out of the verify cache key so it doesn't defeat caching.
+          observedMetadata: (() => {
+            const { headers, apiKeyFormat, platformHeaders } = sanitizeHeaders(req.headers);
+            return {
+              headers,
+              ...apiKeyFormat && { apiKeyFormat },
+              ...platformHeaders && { platformHeaders }
+            };
+          })()
         }
       };
       let result = await verify(config, verificationRequest);
@@ -1849,7 +2013,18 @@ function createMiddleware2(options) {
         referer: request.headers.get("referer") || void 0,
         host: request.headers.get("host") || void 0,
         forwardedFor,
-        agentCardUrl: request.headers.get("x-astrasync-agent-card") || void 0
+        agentCardUrl: request.headers.get("x-astrasync-agent-card") || void 0,
+        // Workstream D — full sanitised header capture (Web Headers → plain map).
+        observedMetadata: (() => {
+          const { headers, apiKeyFormat, platformHeaders } = sanitizeHeaders(
+            Object.fromEntries(request.headers.entries())
+          );
+          return {
+            headers,
+            ...apiKeyFormat && { apiKeyFormat },
+            ...platformHeaders && { platformHeaders }
+          };
+        })()
       }
     };
     let result = await verify(config, verificationRequest);
@@ -5879,19 +6054,25 @@ var PLATFORM_AGENT_SIGNATURES = [
     vendor: "claude",
     displayName: "Anthropic Claude",
     uaPatterns: [/claude/i, /anthropic/i],
-    agentCardPatterns: [/anthropic\.com/i, /claude\.ai/i]
+    agentCardPatterns: [/anthropic\.com/i, /claude\.ai/i],
+    apiKeyFormatPatterns: [/^sk-ant/i],
+    headerPatterns: [/^anthropic-version/i, /^anthropic-beta/i, /^x-anthropic-/i]
   },
   {
     vendor: "chatgpt",
     displayName: "OpenAI ChatGPT",
     uaPatterns: [/chatgpt/i, /openai/i, /gpt-?\d/i],
-    agentCardPatterns: [/openai\.com/i, /chatgpt\.com/i]
+    agentCardPatterns: [/openai\.com/i, /chatgpt\.com/i],
+    apiKeyFormatPatterns: [/^sk-proj/i, /^sk-svcacct/i],
+    headerPatterns: [/^openai-organization/i, /^openai-project/i, /^openai-version/i]
   },
   {
     vendor: "gemini",
     displayName: "Google Gemini",
     uaPatterns: [/gemini/i, /google-gemini/i, /bard/i],
-    agentCardPatterns: [/gemini\.google\.com/i, /ai\.google\.dev/i]
+    agentCardPatterns: [/gemini\.google\.com/i, /ai\.google\.dev/i],
+    apiKeyFormatPatterns: [/^aiza/i],
+    headerPatterns: [/^x-goog-user-project/i, /^x-goog-api-client/i]
   },
   {
     vendor: "cursor",
@@ -5904,15 +6085,31 @@ var PLATFORM_AGENT_SIGNATURES = [
     displayName: "Block Goose",
     uaPatterns: [/goose/i, /block-goose/i],
     agentCardPatterns: [/block\.xyz\/goose/i, /goose\.tools/i]
+  },
+  {
+    vendor: "perplexity",
+    displayName: "Perplexity",
+    uaPatterns: [/perplexity/i],
+    agentCardPatterns: [/perplexity\.ai/i],
+    apiKeyFormatPatterns: [/^pplx-/i]
   }
 ];
-function detectPlatformFingerprint(input) {
+function matchPlatformSignature(signatures, input) {
   const ua = input.userAgent ?? "";
   const cardUrl = input.agentCardUrl ?? "";
-  for (const sig of PLATFORM_AGENT_SIGNATURES) {
+  const apiKeyFormat = input.apiKeyFormat ?? "";
+  const headerLines = [];
+  if (input.platformHeaders) {
+    for (const [name, value] of Object.entries(input.platformHeaders)) {
+      headerLines.push(name, `${name}: ${value}`);
+    }
+  }
+  for (const sig of signatures) {
     const uaMatch = sig.uaPatterns?.some((p) => p.test(ua));
     const cardMatch = sig.agentCardPatterns?.some((p) => p.test(cardUrl));
-    if (uaMatch || cardMatch) {
+    const keyMatch = apiKeyFormat.length > 0 && sig.apiKeyFormatPatterns?.some((p) => p.test(apiKeyFormat));
+    const headerMatch = headerLines.length > 0 && sig.headerPatterns?.some((p) => headerLines.some((line) => p.test(line)));
+    if (uaMatch || cardMatch || keyMatch || headerMatch) {
       const uaBase = ua.split(/[\s/]/)[0]?.toLowerCase() ?? "";
       const cardHost = (() => {
         try {
@@ -5921,16 +6118,19 @@ function detectPlatformFingerprint(input) {
           return "";
         }
       })();
-      const fingerprintKey = `${sig.vendor}:${uaBase || cardHost || "unknown"}`;
+      const keyBasis = uaBase || cardHost || apiKeyFormat || "unknown";
       return {
         vendor: sig.vendor,
-        fingerprintKey,
+        fingerprintKey: `${sig.vendor}:${keyBasis}`,
         displayName: sig.displayName
       };
     }
   }
   return void 0;
 }
+function detectPlatformFingerprint(input) {
+  return matchPlatformSignature(PLATFORM_AGENT_SIGNATURES, input);
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ACCESS_LEVEL_DESCRIPTIONS,
@@ -5943,6 +6143,9 @@ function detectPlatformFingerprint(input) {
   DEFAULT_EDGE_CONFIG,
   DEFAULT_TRUST_THRESHOLDS,
   KYDRequiredError,
+  MAX_HEADERS,
+  MAX_HEADER_VALUE_BYTES,
+  MAX_TOTAL_BYTES,
   PLATFORM_AGENT_SIGNATURES,
   RegistrationDeniedError,
   RegistrationExpiredError,
@@ -5960,8 +6163,10 @@ function detectPlatformFingerprint(input) {
   detectPlatformFingerprint,
   determineAccessLevel,
   express,
+  extractApiKeyFormat,
   extractCredentials,
   extractMcpCredentials,
+  extractPlatformHeaders,
   fetchEdgeConfig,
   fetchRoutes,
   getAccessLevelForScore,
@@ -5974,12 +6179,14 @@ function detectPlatformFingerprint(input) {
   hasMinimumAccess,
   isEdgeConfig,
   matchEdgePathRule,
+  matchPlatformSignature,
   nextjs,
   pollStepUpStatus,
   prefetchWellKnown,
   quickVerify,
   recordDecision,
   reportUnregisteredAttempt,
+  sanitizeHeaders,
   sdk,
   setMcpMeta,
   transport,