@astrasyncai/verification-gateway 4.0.0 → 4.2.0

package/dist/codex/index.mjs

@@ -3955,7 +3955,7 @@ function getTrustLevel(score) {
 }
 
 // src/version.ts
-var SDK_VERSION = "4.0.0";
+var SDK_VERSION = "4.1.0";
 
 // src/well-known.ts
 var CACHE_TTL_MS = 60 * 60 * 1e3;
@@ -4456,6 +4456,18 @@ var FALLBACK_MAX_WAIT_MS = 5 * 60 * 1e3;
 // src/metadata-capture.ts
 var MAX_TOTAL_BYTES = 16 * 1024;
 
+// src/edge-config.ts
+var DEFAULT_EDGE_CONFIG = Object.freeze({
+  version: 1,
+  mode: "observe",
+  depth: "classify",
+  pathRules: [],
+  sampling: Object.freeze({ anonymousBeaconRate: 0.1 }),
+  failurePosture: "open"
+});
+var DEFAULT_TTL_MS = 60 * 1e3;
+var DEFAULT_MAX_STALE_MS = 24 * 60 * 60 * 1e3;
+
 // src/adapters/express.ts
 var DEFAULT_ROUTES_REFRESH_MS = 5 * 60 * 1e3;
 
@@ -4527,18 +4539,6 @@ import { createHash as createHash3, webcrypto } from "crypto";
 // src/transport/registry/visa.ts
 import { createRemoteJWKSet } from "jose";
 
-// src/edge-config.ts
-var DEFAULT_EDGE_CONFIG = Object.freeze({
-  version: 1,
-  mode: "observe",
-  depth: "classify",
-  pathRules: [],
-  sampling: Object.freeze({ anonymousBeaconRate: 0.1 }),
-  failurePosture: "open"
-});
-var DEFAULT_TTL_MS = 60 * 1e3;
-var DEFAULT_MAX_STALE_MS = 24 * 60 * 60 * 1e3;
-
 // src/gateway/modes/online.ts
 function toGatewayConfig(config) {
   return {
@@ -5287,6 +5287,17 @@ function uninstallClaudeHooks(settingsPath, marker2 = ASTRASYNC_HOOK_MARKER) {
   writeSettings(settingsPath, settings);
   return true;
 }
+var PERMISSION_DENY_PATHS = [
+  "**/.claude/settings.json",
+  "**/.claude/settings.local.json",
+  "~/.claude/settings.json",
+  "~/.claude/settings.local.json",
+  "**/.astrasync/**",
+  "~/.astrasync/**"
+];
+var GUARD_PERMISSION_DENY_RULES = PERMISSION_DENY_PATHS.map(
+  (p) => `Edit(${p})`
+);
 
 // src/codex/settings-installer.ts
 var ASTRASYNC_CODEX_HOOK_MARKER = "astrasync-codex-hook";