@astrasyncai/verification-gateway 4.1.0 → 4.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/agent/index.js +2 -2
- package/dist/agent/index.js.map +1 -1
- package/dist/agent/index.mjs +2 -2
- package/dist/agent/index.mjs.map +1 -1
- package/dist/bin/astrasync-claude-hook.js +2 -2
- package/dist/bin/astrasync-codex-hook.js +2 -2
- package/dist/bin/astrasync-guard.js +89 -2
- package/dist/bin/astrasync.js +92 -5
- package/dist/browser/background.js +2 -2
- package/dist/browser/background.js.map +1 -1
- package/dist/browser/background.mjs +2 -2
- package/dist/browser/background.mjs.map +1 -1
- package/dist/codex/index.js +13 -2
- package/dist/codex/index.js.map +1 -1
- package/dist/codex/index.mjs +13 -2
- package/dist/codex/index.mjs.map +1 -1
- package/dist/cursor/extension.js +2 -2
- package/dist/cursor/extension.js.map +1 -1
- package/dist/cursor/extension.mjs +2 -2
- package/dist/cursor/extension.mjs.map +1 -1
- package/dist/gateway/gateway.js +2 -2
- package/dist/gateway/gateway.js.map +1 -1
- package/dist/gateway/gateway.mjs +2 -2
- package/dist/gateway/gateway.mjs.map +1 -1
- package/dist/{index-BPEBlOsE.d.mts → index-BTeQ9fgV.d.mts} +2 -2
- package/dist/{index-B0YHu_SP.d.ts → index-BqHKlLOU.d.ts} +2 -2
- package/dist/index.d.mts +1 -1
- package/dist/index.d.ts +1 -1
- package/dist/index.js +5 -5
- package/dist/index.js.map +1 -1
- package/dist/index.mjs +2 -2
- package/dist/index.mjs.map +1 -1
- package/dist/transport/index.d.mts +1 -1
- package/dist/transport/index.d.ts +1 -1
- package/dist/transport/index.js +5 -5
- package/dist/transport/index.js.map +1 -1
- package/dist/transport/index.mjs +2 -2
- package/dist/transport/index.mjs.map +1 -1
- package/package.json +2 -4
|
@@ -628,7 +628,7 @@ declare const claim: {
|
|
|
628
628
|
* - payment_mandate — authorizes the actual payment rail
|
|
629
629
|
*
|
|
630
630
|
* Mandates are cross-referenced via ids; each is an SD-JWT over ES256 (or
|
|
631
|
-
* equivalent). We decode via @sd-jwt/
|
|
631
|
+
* equivalent). We decode via @sd-jwt/core and extract the AP2-specific
|
|
632
632
|
* shape — verification lives in ap2-verify.ts.
|
|
633
633
|
*/
|
|
634
634
|
|
|
@@ -1024,7 +1024,7 @@ declare function extractX402Context(message: {
|
|
|
1024
1024
|
* AstraSync-specific composition logic — that's the whitespace here.
|
|
1025
1025
|
*
|
|
1026
1026
|
* This module does NOT re-verify selective-disclosure hashes (the extractor
|
|
1027
|
-
* already applied them via @sd-jwt/
|
|
1027
|
+
* already applied them via @sd-jwt/core). It DOES verify:
|
|
1028
1028
|
* - cnf.jwk in L1 payload points to L2's signing key (thumbprint match)
|
|
1029
1029
|
* - cnf.jwk in L2 payload points to L3's signing key
|
|
1030
1030
|
* - L3a.transaction_id === L3b.transaction_id (when both present)
|
|
@@ -628,7 +628,7 @@ declare const claim: {
|
|
|
628
628
|
* - payment_mandate — authorizes the actual payment rail
|
|
629
629
|
*
|
|
630
630
|
* Mandates are cross-referenced via ids; each is an SD-JWT over ES256 (or
|
|
631
|
-
* equivalent). We decode via @sd-jwt/
|
|
631
|
+
* equivalent). We decode via @sd-jwt/core and extract the AP2-specific
|
|
632
632
|
* shape — verification lives in ap2-verify.ts.
|
|
633
633
|
*/
|
|
634
634
|
|
|
@@ -1024,7 +1024,7 @@ declare function extractX402Context(message: {
|
|
|
1024
1024
|
* AstraSync-specific composition logic — that's the whitespace here.
|
|
1025
1025
|
*
|
|
1026
1026
|
* This module does NOT re-verify selective-disclosure hashes (the extractor
|
|
1027
|
-
* already applied them via @sd-jwt/
|
|
1027
|
+
* already applied them via @sd-jwt/core). It DOES verify:
|
|
1028
1028
|
* - cnf.jwk in L1 payload points to L2's signing key (thumbprint match)
|
|
1029
1029
|
* - cnf.jwk in L2 payload points to L3's signing key
|
|
1030
1030
|
* - L3a.transaction_id === L3b.transaction_id (when both present)
|
package/dist/index.d.mts
CHANGED
|
@@ -4,7 +4,7 @@ export { A as ACCESS_LEVEL_DESCRIPTIONS, a as ACCESS_LEVEL_HIERARCHY, b as Acces
|
|
|
4
4
|
export { VerifyOptions, clearCache, extractCredentials, fetchRoutes, hasCredentials, quickVerify, reportAttempt, reportUnregisteredAttempt, verify } from './verify.mjs';
|
|
5
5
|
export { e as express } from './express-D_4hTn5Z.mjs';
|
|
6
6
|
export { n as nextjs } from './nextjs-WyeVr2Kp.mjs';
|
|
7
|
-
export { aR as extractMcpCredentials, bg as setMcpMeta, b1 as transport } from './index-
|
|
7
|
+
export { aR as extractMcpCredentials, bg as setMcpMeta, b1 as transport } from './index-BTeQ9fgV.mjs';
|
|
8
8
|
export { McpMiddlewareOptions, ToolGateConfig, createMcpMiddleware } from './adapters/mcp.mjs';
|
|
9
9
|
export { AgentProtocol, AgentRecord, AstraSync, AstraSyncConfig, AstraSyncError, AuthenticationError, BuildGuidanceParams, FrameworkConfig, GuidanceEnvelope, HealthResponse, KYDRequiredError, ModelConfig, PDLSSConfig, PDLSSDuration, PDLSSLimits, PDLSSPurpose, PDLSSScope, PDLSSSelfInstantiation, PendingRegistrationResponse, PollRegistrationResult, RegisterOptions, RegisterResult, RegistrationDeniedError, RegistrationExpiredError, RegistrationResponse, RegistrationTimeoutError, VerifyResponse, WaitForApprovalOptions, buildGuidance } from './registration/index.mjs';
|
|
10
10
|
export { A as AgentClient, C as ChallengeHandler, i as agent, r as recordDecision } from './index-DQb5-_1X.mjs';
|
package/dist/index.d.ts
CHANGED
|
@@ -4,7 +4,7 @@ export { A as ACCESS_LEVEL_DESCRIPTIONS, a as ACCESS_LEVEL_HIERARCHY, b as Acces
|
|
|
4
4
|
export { VerifyOptions, clearCache, extractCredentials, fetchRoutes, hasCredentials, quickVerify, reportAttempt, reportUnregisteredAttempt, verify } from './verify.js';
|
|
5
5
|
export { e as express } from './express-BVd1_3FE.js';
|
|
6
6
|
export { n as nextjs } from './nextjs-w7RTbP1P.js';
|
|
7
|
-
export { aR as extractMcpCredentials, bg as setMcpMeta, b1 as transport } from './index-
|
|
7
|
+
export { aR as extractMcpCredentials, bg as setMcpMeta, b1 as transport } from './index-BqHKlLOU.js';
|
|
8
8
|
export { McpMiddlewareOptions, ToolGateConfig, createMcpMiddleware } from './adapters/mcp.js';
|
|
9
9
|
export { AgentProtocol, AgentRecord, AstraSync, AstraSyncConfig, AstraSyncError, AuthenticationError, BuildGuidanceParams, FrameworkConfig, GuidanceEnvelope, HealthResponse, KYDRequiredError, ModelConfig, PDLSSConfig, PDLSSDuration, PDLSSLimits, PDLSSPurpose, PDLSSScope, PDLSSSelfInstantiation, PendingRegistrationResponse, PollRegistrationResult, RegisterOptions, RegisterResult, RegistrationDeniedError, RegistrationExpiredError, RegistrationResponse, RegistrationTimeoutError, VerifyResponse, WaitForApprovalOptions, buildGuidance } from './registration/index.js';
|
|
10
10
|
export { A as AgentClient, C as ChallengeHandler, i as agent, r as recordDecision } from './index-T1aBoUcc.js';
|
package/dist/index.js
CHANGED
|
@@ -3564,13 +3564,13 @@ function coerceString3(v) {
|
|
|
3564
3564
|
}
|
|
3565
3565
|
|
|
3566
3566
|
// src/transport/vi.ts
|
|
3567
|
-
var
|
|
3567
|
+
var import_core = require("@sd-jwt/core");
|
|
3568
3568
|
var import_node_crypto = require("crypto");
|
|
3569
3569
|
function extractVIClaims(sdJwtCompact) {
|
|
3570
3570
|
if (!sdJwtCompact || typeof sdJwtCompact !== "string") return null;
|
|
3571
3571
|
let decoded;
|
|
3572
3572
|
try {
|
|
3573
|
-
decoded = (0,
|
|
3573
|
+
decoded = (0, import_core.decodeSdJwtSync)(sdJwtCompact, sha256Sync);
|
|
3574
3574
|
} catch {
|
|
3575
3575
|
return null;
|
|
3576
3576
|
}
|
|
@@ -3610,7 +3610,7 @@ function extractVIClaims(sdJwtCompact) {
|
|
|
3610
3610
|
}
|
|
3611
3611
|
function safeSplit(compact) {
|
|
3612
3612
|
try {
|
|
3613
|
-
const { jwt, kbJwt } = (0,
|
|
3613
|
+
const { jwt, kbJwt } = (0, import_core.splitSdJwt)(compact);
|
|
3614
3614
|
return { l3: jwt, l2: kbJwt };
|
|
3615
3615
|
} catch {
|
|
3616
3616
|
return {};
|
|
@@ -3957,13 +3957,13 @@ var claim = {
|
|
|
3957
3957
|
};
|
|
3958
3958
|
|
|
3959
3959
|
// src/transport/ap2.ts
|
|
3960
|
-
var
|
|
3960
|
+
var import_core2 = require("@sd-jwt/core");
|
|
3961
3961
|
var import_node_crypto3 = require("crypto");
|
|
3962
3962
|
function extractAP2Mandate(sdJwtCompact) {
|
|
3963
3963
|
if (!sdJwtCompact || typeof sdJwtCompact !== "string") return null;
|
|
3964
3964
|
let decoded;
|
|
3965
3965
|
try {
|
|
3966
|
-
decoded = (0,
|
|
3966
|
+
decoded = (0, import_core2.decodeSdJwtSync)(sdJwtCompact, sha256Sync2);
|
|
3967
3967
|
} catch {
|
|
3968
3968
|
return null;
|
|
3969
3969
|
}
|