@astrasyncai/verification-gateway 4.3.0 → 4.5.0

package/dist/index.d.mts

@@ -127,6 +127,55 @@ declare function getWellKnownUrls(apiBaseUrl: string): Promise<WellKnownAgenticC
  */
 declare function getCachedWellKnownUrls(apiBaseUrl: string): WellKnownAgenticCommerce | undefined;
 
+/**
+ * HTTP-client RUNTIME signatures — a display-only vocabulary, disjoint from
+ * the platform-agent vendor vocabulary in `platform-signatures.ts`.
+ *
+ * A UA of `node` or `python-requests` identifies the HTTP STACK, never the
+ * operator: OpenAI Codex, Claude Code, Perplexity's tooling, and our own SDK
+ * all fetch through Node — labeling any of them a vendor from the runtime
+ * alone would be fabrication. What we CAN say honestly is "undeclared
+ * automation on the Node.js runtime", which beats "unknown" in every surface.
+ *
+ * HARD RULE: this module must NEVER be consulted by `edge-core/classify.ts`,
+ * `detectPlatformFingerprint`, or any tiering / orphan-provisioning path.
+ * Runtime matches carry no identity: promoting them to the `identified` tier
+ * would flip anonymous-bot traffic to 1:1 beacons and auto-provision orphan
+ * agents literally named "node". Display and clustering layers only.
+ */
+interface RuntimeSignature {
+    /** Stable runtime key — namespace disjoint from `PlatformAgentVendor`. */
+    runtime: string;
+    /** Human-readable label, e.g. "Node.js runtime". */
+    displayName: string;
+    uaPatterns: RegExp[];
+}
+/** First match wins — order more-specific tokens before generic ones. */
+declare const RUNTIME_SIGNATURES: ReadonlyArray<RuntimeSignature>;
+/**
+ * Detect the HTTP-client runtime from a User-Agent. Returns the displayName
+ * (e.g. "Node.js runtime") or undefined when the UA doesn't look like a bare
+ * runtime/library client.
+ */
+declare function detectRuntime(userAgent: string | undefined | null): string | undefined;
+
+/**
+ * Shared outbound-HTTP wrapper — every request the SDK makes to the
+ * AstraSync backend (or anywhere else) goes through `sdkFetch` so it
+ * carries an identifying User-Agent.
+ *
+ * Why: Node's global fetch defaults to `user-agent: node`, which is
+ * indistinguishable from every other Node client on the wire. Visit
+ * Intelligence observed our own SDK/beacon traffic as anonymous "node"
+ * visits. Self-identification is the platform's own medicine.
+ *
+ * Browser note: some browsers filter the User-Agent request header
+ * silently (never throwing), so this is a no-op there — which is correct:
+ * in a browser the page's real UA is the honest identity.
+ */
+declare const SDK_USER_AGENT = "astrasync-sdk/4.5.0";
+declare const sdkFetch: typeof fetch;
+
 /**
  * Single source-of-truth for the SDK's
  * package version emitted on verify-access bodies (and any future
@@ -145,6 +194,6 @@ declare function getCachedWellKnownUrls(apiBaseUrl: string): WellKnownAgenticCom
  * is fine — bumping both in the release-ceremony commit keeps them
  * lockstep.
  */
-declare const SDK_VERSION = "4.1.0";
+declare const SDK_VERSION = "4.5.0";
 
-export { EnhancedVerificationResult, GatewayConfig, type SettlementDecision, type SettlementRequest, StepUpApprovalInfo, StepUpApprovalStatus, StepUpOutcome, SDK_VERSION as VERSION, type WellKnownAgenticCommerce, authorizeSettlement, awaitStepUpApproval, getCachedWellKnownUrls, getWellKnownUrls, pollStepUpStatus, prefetchWellKnown };
+export { EnhancedVerificationResult, GatewayConfig, RUNTIME_SIGNATURES, type RuntimeSignature, SDK_USER_AGENT, type SettlementDecision, type SettlementRequest, StepUpApprovalInfo, StepUpApprovalStatus, StepUpOutcome, SDK_VERSION as VERSION, type WellKnownAgenticCommerce, authorizeSettlement, awaitStepUpApproval, detectRuntime, getCachedWellKnownUrls, getWellKnownUrls, pollStepUpStatus, prefetchWellKnown, sdkFetch };

package/dist/index.d.ts

@@ -127,6 +127,55 @@ declare function getWellKnownUrls(apiBaseUrl: string): Promise<WellKnownAgenticC
  */
 declare function getCachedWellKnownUrls(apiBaseUrl: string): WellKnownAgenticCommerce | undefined;
 
+/**
+ * HTTP-client RUNTIME signatures — a display-only vocabulary, disjoint from
+ * the platform-agent vendor vocabulary in `platform-signatures.ts`.
+ *
+ * A UA of `node` or `python-requests` identifies the HTTP STACK, never the
+ * operator: OpenAI Codex, Claude Code, Perplexity's tooling, and our own SDK
+ * all fetch through Node — labeling any of them a vendor from the runtime
+ * alone would be fabrication. What we CAN say honestly is "undeclared
+ * automation on the Node.js runtime", which beats "unknown" in every surface.
+ *
+ * HARD RULE: this module must NEVER be consulted by `edge-core/classify.ts`,
+ * `detectPlatformFingerprint`, or any tiering / orphan-provisioning path.
+ * Runtime matches carry no identity: promoting them to the `identified` tier
+ * would flip anonymous-bot traffic to 1:1 beacons and auto-provision orphan
+ * agents literally named "node". Display and clustering layers only.
+ */
+interface RuntimeSignature {
+    /** Stable runtime key — namespace disjoint from `PlatformAgentVendor`. */
+    runtime: string;
+    /** Human-readable label, e.g. "Node.js runtime". */
+    displayName: string;
+    uaPatterns: RegExp[];
+}
+/** First match wins — order more-specific tokens before generic ones. */
+declare const RUNTIME_SIGNATURES: ReadonlyArray<RuntimeSignature>;
+/**
+ * Detect the HTTP-client runtime from a User-Agent. Returns the displayName
+ * (e.g. "Node.js runtime") or undefined when the UA doesn't look like a bare
+ * runtime/library client.
+ */
+declare function detectRuntime(userAgent: string | undefined | null): string | undefined;
+
+/**
+ * Shared outbound-HTTP wrapper — every request the SDK makes to the
+ * AstraSync backend (or anywhere else) goes through `sdkFetch` so it
+ * carries an identifying User-Agent.
+ *
+ * Why: Node's global fetch defaults to `user-agent: node`, which is
+ * indistinguishable from every other Node client on the wire. Visit
+ * Intelligence observed our own SDK/beacon traffic as anonymous "node"
+ * visits. Self-identification is the platform's own medicine.
+ *
+ * Browser note: some browsers filter the User-Agent request header
+ * silently (never throwing), so this is a no-op there — which is correct:
+ * in a browser the page's real UA is the honest identity.
+ */
+declare const SDK_USER_AGENT = "astrasync-sdk/4.5.0";
+declare const sdkFetch: typeof fetch;
+
 /**
  * Single source-of-truth for the SDK's
  * package version emitted on verify-access bodies (and any future
@@ -145,6 +194,6 @@ declare function getCachedWellKnownUrls(apiBaseUrl: string): WellKnownAgenticCom
  * is fine — bumping both in the release-ceremony commit keeps them
  * lockstep.
  */
-declare const SDK_VERSION = "4.1.0";
+declare const SDK_VERSION = "4.5.0";
 
-export { EnhancedVerificationResult, GatewayConfig, type SettlementDecision, type SettlementRequest, StepUpApprovalInfo, StepUpApprovalStatus, StepUpOutcome, SDK_VERSION as VERSION, type WellKnownAgenticCommerce, authorizeSettlement, awaitStepUpApproval, getCachedWellKnownUrls, getWellKnownUrls, pollStepUpStatus, prefetchWellKnown };
+export { EnhancedVerificationResult, GatewayConfig, RUNTIME_SIGNATURES, type RuntimeSignature, SDK_USER_AGENT, type SettlementDecision, type SettlementRequest, StepUpApprovalInfo, StepUpApprovalStatus, StepUpOutcome, SDK_VERSION as VERSION, type WellKnownAgenticCommerce, authorizeSettlement, awaitStepUpApproval, detectRuntime, getCachedWellKnownUrls, getWellKnownUrls, pollStepUpStatus, prefetchWellKnown, sdkFetch };

package/dist/index.js

@@ -45,9 +45,11 @@ __export(src_exports, {
   MAX_HEADER_VALUE_BYTES: () => MAX_HEADER_VALUE_BYTES,
   MAX_TOTAL_BYTES: () => MAX_TOTAL_BYTES,
   PLATFORM_AGENT_SIGNATURES: () => PLATFORM_AGENT_SIGNATURES,
+  RUNTIME_SIGNATURES: () => RUNTIME_SIGNATURES,
   RegistrationDeniedError: () => RegistrationDeniedError,
   RegistrationExpiredError: () => RegistrationExpiredError,
   RegistrationTimeoutError: () => RegistrationTimeoutError,
+  SDK_USER_AGENT: () => SDK_USER_AGENT,
   TRUST_LEVEL_RANGES: () => TRUST_LEVEL_RANGES,
   VERSION: () => SDK_VERSION,
   _resetEdgeConfigCache: () => _resetEdgeConfigCache,
@@ -61,6 +63,7 @@ __export(src_exports, {
   degradeToObserve: () => degradeToObserve,
   deriveConnectionFromHeaders: () => deriveConnectionFromHeaders,
   detectPlatformFingerprint: () => detectPlatformFingerprint,
+  detectRuntime: () => detectRuntime,
   determineAccessLevel: () => determineAccessLevel,
   express: () => express_exports,
   extractApiKeyFormat: () => extractApiKeyFormat,
@@ -89,6 +92,7 @@ __export(src_exports, {
   reportUnregisteredAttempt: () => reportUnregisteredAttempt,
   sanitizeHeaders: () => sanitizeHeaders,
   sdk: () => sdk_exports,
+  sdkFetch: () => sdkFetch,
   setMcpMeta: () => setMcpMeta,
   transport: () => transport_exports,
   verify: () => verify
@@ -217,7 +221,25 @@ function getCapabilities(accessLevel) {
 }
 
 // src/version.ts
-var SDK_VERSION = "4.1.0";
+var SDK_VERSION = "4.5.0";
+
+// src/http.ts
+var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;
+function withUserAgent(initHeaders) {
+  if (!initHeaders) return { "user-agent": SDK_USER_AGENT };
+  if (initHeaders instanceof Headers) {
+    const copy = new Headers(initHeaders);
+    if (!copy.has("user-agent")) copy.set("user-agent", SDK_USER_AGENT);
+    return copy;
+  }
+  if (Array.isArray(initHeaders)) {
+    const has2 = initHeaders.some(([name]) => name.toLowerCase() === "user-agent");
+    return has2 ? initHeaders : [...initHeaders, ["user-agent", SDK_USER_AGENT]];
+  }
+  const has = Object.keys(initHeaders).some((name) => name.toLowerCase() === "user-agent");
+  return has ? initHeaders : { "user-agent": SDK_USER_AGENT, ...initHeaders };
+}
+var sdkFetch = (input, init) => fetch(input, { ...init, headers: withUserAgent(init?.headers) });
 
 // src/well-known.ts
 var CACHE_TTL_MS = 60 * 60 * 1e3;
@@ -229,7 +251,7 @@ function wellKnownUrl(apiBaseUrl) {
 }
 async function fetchWellKnown(apiBaseUrl) {
   const url = wellKnownUrl(apiBaseUrl);
-  const response = await fetch(url, {
+  const response = await sdkFetch(url, {
     method: "GET",
     headers: { Accept: "application/json" },
     signal: AbortSignal.timeout(5e3)
@@ -299,7 +321,7 @@ async function performInitCheck(apiBaseUrl, debug, strictInit, apiKey) {
   initCheckPerformed = true;
   try {
     const probeUrl = `${apiBaseUrl}/agents/verify-access`;
-    const response = await fetch(probeUrl, { method: "HEAD" });
+    const response = await sdkFetch(probeUrl, { method: "HEAD" });
     const contentType = response.headers.get("content-type") ?? "";
     if (contentType.startsWith("text/html")) {
       const message = `[VerificationGateway] apiBaseUrl '${apiBaseUrl}' returned HTML (content-type: ${contentType}). This usually means apiBaseUrl is pointing at a marketing site instead of the API. Expected: 'https://astrasync.ai/api' (prod) or 'https://staging.astrasync.ai/api' (staging).`;
@@ -313,7 +335,7 @@ async function performInitCheck(apiBaseUrl, debug, strictInit, apiKey) {
       );
     }
     if (apiKey) {
-      const selfCheck = await fetch(`${apiBaseUrl}/agents/verify-access/self-check`, {
+      const selfCheck = await sdkFetch(`${apiBaseUrl}/agents/verify-access/self-check`, {
         headers: { Authorization: `Bearer ${apiKey}` }
       });
       if (selfCheck.status === 401) {
@@ -566,7 +588,7 @@ async function callVerifyAccessAPI(config, request) {
     headers["X-API-Key"] = config.apiKey;
   }
   try {
-    const response = await fetch(`${config.apiBaseUrl}/agents/verify-access`, {
+    const response = await sdkFetch(`${config.apiBaseUrl}/agents/verify-access`, {
       method: "POST",
       headers,
       body: JSON.stringify(body),
@@ -748,12 +770,15 @@ async function verify(config, request, options) {
   const verificationContext = apiResponse.verificationContext;
   const accessLevel = apiResponse.access?.accessLevel ?? "standard";
   const result = {
-    // Round-18 G4: backend allowed access. Identity is verified (we resolved
-    // the caller to an agent) and policy passed all gates. Read idVerified
-    // from verificationContext for symmetry with the deny branch; default true
-    // on success path since `access.allowed === true` implies identity was
-    // resolvable (anonymous-allow paths flow through createGuidanceResponse).
-    identityVerified: apiResponse.verificationContext?.idVerified !== false,
+    // 4.5.0 (probe F1): read idVerified from verificationContext with the
+    // SAME absent⇒false default as the deny branch. The previous `!== false`
+    // default manufactured `identityVerified: true` for anonymous
+    // allow_full/allow_partial/audit responses (which allow access but omit
+    // verificationContext entirely) — the "anonymous caller labelled
+    // verified" defect. Every authenticated success response has carried
+    // `verificationContext.idVerified: true` since v2.2.4, so a truth claim
+    // this load-bearing must never be defaulted on.
+    identityVerified: apiResponse.verificationContext?.idVerified === true,
     policyAllowed: true,
     accessLevel,
     agent,
@@ -809,7 +834,7 @@ async function recordDecision(config, sessionId, decision, reason) {
     headers["Authorization"] = `Bearer ${config.apiKey}`;
     headers["X-API-Key"] = config.apiKey;
   }
-  await fetch(`${config.apiBaseUrl}/agents/verify-access/${sessionId}/decision`, {
+  await sdkFetch(`${config.apiBaseUrl}/agents/verify-access/${sessionId}/decision`, {
     method: "POST",
     headers,
     body: JSON.stringify({ decision, reason })
@@ -827,7 +852,7 @@ async function reportAttempt(config, report) {
     ...report,
     ...!report.counterpartyId && config.counterpartyId && { counterpartyId: config.counterpartyId }
   };
-  await fetch(`${apiBaseUrl}/agents/verify-access/attempt-report`, {
+  await sdkFetch(`${apiBaseUrl}/agents/verify-access/attempt-report`, {
     method: "POST",
     headers,
     body: JSON.stringify(body)
@@ -842,7 +867,7 @@ async function fetchRoutes(config, counterpartyId) {
     headers["X-API-Key"] = config.apiKey;
   }
   try {
-    const response = await fetch(
+    const response = await sdkFetch(
       `${config.apiBaseUrl}/endpoints/${encodeURIComponent(counterpartyId)}/routes`,
       { method: "GET", headers }
     );
@@ -861,7 +886,7 @@ async function reportUnregisteredAttempt(config, data) {
     ...counterpartyUrl && { counterpartyUrl },
     ...config.counterpartyId && { counterpartyId: config.counterpartyId }
   };
-  await fetch(`${apiBaseUrl}/verification-activity/unregistered-attempt`, {
+  await sdkFetch(`${apiBaseUrl}/verification-activity/unregistered-attempt`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify(body)
@@ -870,7 +895,7 @@ async function reportUnregisteredAttempt(config, data) {
 }
 async function reportCounterpartyPreCheckFailure(config, data) {
   const apiBaseUrl = config.apiBaseUrl || DEFAULT_CONFIG.apiBaseUrl;
-  await fetch(`${apiBaseUrl}/verification-activity/counterparty-pre-check-failure`, {
+  await sdkFetch(`${apiBaseUrl}/verification-activity/counterparty-pre-check-failure`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify(data)
@@ -904,7 +929,7 @@ function resolvePollUrl(config, pollUrl) {
 async function pollStepUpStatus(config, approval) {
   if (!approval.pollUrl) return null;
   try {
-    const res = await fetch(resolvePollUrl(config, approval.pollUrl), {
+    const res = await sdkFetch(resolvePollUrl(config, approval.pollUrl), {
       method: "GET",
       signal: AbortSignal.timeout(POLL_REQUEST_TIMEOUT_MS)
     });
@@ -1279,7 +1304,13 @@ var PLATFORM_HEADER_NAMES = /* @__PURE__ */ new Set([
   "x-agent-card-url",
   "x-agent-provider"
 ]);
-var PLATFORM_HEADER_PREFIXES = ["x-goog-", "x-stainless-", "x-anthropic-", "x-openai-"];
+var PLATFORM_HEADER_PREFIXES = [
+  "x-goog-",
+  "x-stainless-",
+  "x-anthropic-",
+  "x-openai-",
+  "sec-ch-"
+];
 var KEY_FORMAT_PREFIXES = [
   "sk-ant-api03",
   "sk-ant-api",
@@ -1351,6 +1382,7 @@ function sanitizeHeaders(raw) {
   const headers = {};
   const platformHeaders = {};
   let apiKeyFormat;
+  let cookieCount;
   let totalBytes = 0;
   let count = 0;
   if (!raw) return { headers };
@@ -1365,6 +1397,9 @@ function sanitizeHeaders(raw) {
       if (fmt && !apiKeyFormat) apiKeyFormat = fmt;
       continue;
     }
+    if (name === "cookie") {
+      cookieCount = joined.split(";").filter((s) => s.trim().length > 0).length;
+    }
     if (isSecretHeader(name)) continue;
     let value = joined;
     if (byteLength(value) > MAX_HEADER_VALUE_BYTES) {
@@ -1380,6 +1415,7 @@ function sanitizeHeaders(raw) {
   const result = { headers };
   if (apiKeyFormat) result.apiKeyFormat = apiKeyFormat;
   if (Object.keys(platformHeaders).length > 0) result.platformHeaders = platformHeaders;
+  if (cookieCount !== void 0) result.cookieCount = cookieCount;
   return result;
 }
 function extractPlatformHeaders(sanitized) {
@@ -1399,6 +1435,9 @@ var CONNECTION_HEADER_SOURCES = [
   ["region", ["x-vercel-ip-country-region", "cloudfront-viewer-country-region"]],
   ["countryRegionName", ["cloudfront-viewer-country-region-name"]],
   ["city", ["x-vercel-ip-city", "cloudfront-viewer-city"]],
+  ["latitude", ["x-vercel-ip-latitude", "cloudfront-viewer-latitude"]],
+  ["longitude", ["x-vercel-ip-longitude", "cloudfront-viewer-longitude"]],
+  ["postalCode", ["x-vercel-ip-postal-code", "cloudfront-viewer-postal-code"]],
   ["asn", ["cloudfront-viewer-asn"]],
   ["tlsVersion", ["cloudfront-viewer-tls"]],
   ["httpVersion", ["cloudfront-viewer-http-version"]],
@@ -1433,19 +1472,25 @@ function deriveConnectionFromHeaders(headers) {
       }
     }
   }
-  if (!connection.ip) {
+  {
     const addr = lower["cloudfront-viewer-address"]?.trim();
-    if (addr) connection.ip = addr.replace(/:\d+$/, "");
+    const portMatch = addr?.match(/:(\d+)$/);
+    if (portMatch) connection.sourcePort = portMatch[1];
+    if (!connection.ip && addr) connection.ip = addr.replace(/:\d+$/, "");
   }
   if (!connection.ip) {
     const xff = lower["x-forwarded-for"];
     const client = xff?.split(",")[0]?.trim();
     if (client) connection.ip = client;
   }
+  if (!connection.tlsCipher) {
+    const cipher = connection.tlsVersion?.split(":")[1];
+    if (cipher) connection.tlsCipher = cipher;
+  }
   return Object.keys(connection).length > 0 ? connection : void 0;
 }
 function buildSdkObservedMetadata(rawHeaders) {
-  const { headers, apiKeyFormat, platformHeaders } = sanitizeHeaders(rawHeaders);
+  const { headers, apiKeyFormat, platformHeaders, cookieCount } = sanitizeHeaders(rawHeaders);
   const flat = {};
   if (rawHeaders) {
     for (const name of Object.keys(rawHeaders)) {
@@ -1460,6 +1505,7 @@ function buildSdkObservedMetadata(rawHeaders) {
     ...apiKeyFormat && { apiKeyFormat },
     ...platformHeaders && { platformHeaders },
     ...connection && { connection },
+    ...cookieCount !== void 0 && { cookieCount },
     schemaVersion: CAPTURE_SCHEMA_VERSION
   };
 }
@@ -1504,7 +1550,7 @@ async function fetchEdgeConfig(config, counterpartyId, opts) {
   }
   if (opts?.etag) headers["If-None-Match"] = opts.etag;
   try {
-    const response = await fetch(
+    const response = await sdkFetch(
       `${config.apiBaseUrl}/endpoints/${encodeURIComponent(counterpartyId)}/edge-config`,
       { method: "GET", headers, signal: AbortSignal.timeout(opts?.timeoutMs ?? 5e3) }
     );
@@ -1630,12 +1676,43 @@ var PLATFORM_AGENT_SIGNATURES = [
     uaPatterns: [/perplexity/i],
     agentCardPatterns: [/perplexity\.ai/i],
     apiKeyFormatPatterns: [/^pplx-/i]
+  },
+  // Agentic browsers — versioned-token patterns ONLY (a stock Chrome UA must
+  // never match). Distinct vendor keys (not 'chatgpt'/'perplexity'): the
+  // browser product is a different surface than the assistant service, and
+  // the DB registry mirrors one row per vendor. These sit after the primary
+  // vendor entries so a UA carrying an explicit vendor token keeps its
+  // primary attribution; a browser-shaped UA with the agentic token is
+  // caught here BEFORE classify's human tier, which is what makes these
+  // visits observable at all. Token drift is real (some builds mimic Chrome
+  // outright) — re-verify against captured events when a new browser ships,
+  // and check `sec-ch-ua` platformHeaders for the real brand.
+  {
+    vendor: "chatgpt-atlas",
+    displayName: "ChatGPT Atlas browser",
+    uaPatterns: [/\batlas\/\d/i],
+    headerPatterns: [/^sec-ch-ua: .*atlas/i]
+  },
+  {
+    vendor: "perplexity-comet",
+    displayName: "Perplexity Comet browser",
+    uaPatterns: [/\bcomet\/\d/i],
+    headerPatterns: [/^sec-ch-ua: .*comet/i]
+  },
+  // Our own SDK self-identifies (sdkFetch stamps this UA) — first-party
+  // traffic must never pollute the unknown/anonymous pool it exists to audit.
+  {
+    vendor: "astrasync-sdk",
+    displayName: "AstraSync SDK",
+    uaPatterns: [/^astrasync-sdk\//i]
   }
 ];
 function matchPlatformSignature(signatures, input) {
   const ua = input.userAgent ?? "";
   const cardUrl = input.agentCardUrl ?? "";
   const apiKeyFormat = input.apiKeyFormat ?? "";
+  const ja4 = input.ja4 ?? "";
+  const asn = input.asn ?? "";
   const headerLines = [];
   if (input.platformHeaders) {
     for (const [name, value] of Object.entries(input.platformHeaders)) {
@@ -1647,7 +1724,9 @@ function matchPlatformSignature(signatures, input) {
     const cardMatch = sig.agentCardPatterns?.some((p) => p.test(cardUrl));
     const keyMatch = apiKeyFormat.length > 0 && sig.apiKeyFormatPatterns?.some((p) => p.test(apiKeyFormat));
     const headerMatch = headerLines.length > 0 && sig.headerPatterns?.some((p) => headerLines.some((line) => p.test(line)));
-    if (uaMatch || cardMatch || keyMatch || headerMatch) {
+    const ja4Match = ja4.length > 0 && sig.ja4Patterns?.some((p) => p.test(ja4));
+    const asnMatch = asn.length > 0 && sig.asnList?.includes(asn);
+    if (uaMatch || cardMatch || keyMatch || headerMatch || ja4Match || asnMatch) {
       const uaBase = ua.split(/[\s/]/)[0]?.toLowerCase() ?? "";
       const cardHost = (() => {
         try {
@@ -1656,7 +1735,7 @@ function matchPlatformSignature(signatures, input) {
           return "";
         }
       })();
-      const keyBasis = uaBase || cardHost || apiKeyFormat || "unknown";
+      const keyBasis = uaBase || cardHost || apiKeyFormat || ja4 || asn && `asn${asn}` || "unknown";
       return {
         vendor: sig.vendor,
         fingerprintKey: `${sig.vendor}:${keyBasis}`,
@@ -1672,9 +1751,10 @@ function detectPlatformFingerprint(input) {
 
 // src/edge-core/classify.ts
 var STATIC_EXTENSIONS = /\.(css|js|mjs|map|png|jpe?g|gif|webp|avif|svg|ico|woff2?|ttf|otf|eot|mp4|webm|pdf|txt|xml)$/i;
+var SELF_UA_PATTERN = /^astrasync-sdk\//i;
 var BOT_UA_PATTERN = /curl|wget|python-requests|python-urllib|node-fetch|axios|got|okhttp|go-http-client|libwww|httpie|java\/|ruby|php|scrapy|headless|phantomjs|selenium|playwright|puppeteer|bot|crawler|spider|slurp/i;
 var BROWSER_UA_PATTERN = /mozilla\/\d/i;
-var _patterns = { STATIC_EXTENSIONS, BOT_UA_PATTERN, BROWSER_UA_PATTERN };
+var _patterns = { STATIC_EXTENSIONS, BOT_UA_PATTERN, BROWSER_UA_PATTERN, SELF_UA_PATTERN };
 
 // src/edge-core/events.ts
 function sampled(rate, random = Math.random) {
@@ -2094,7 +2174,7 @@ function createMiddleware(options) {
       let result = await verify(config, verificationRequest);
       req.agentVerification = result;
       let sessionId = result.sessionId;
-      if (config.stepUpMaxWaitMs !== void 0 && result.identityVerified && requiresHumanApproval(result) && result.stepUpApproval?.pollUrl) {
+      if (config.stepUpMaxWaitMs !== void 0 && result.policyAllowed && requiresHumanApproval(result) && result.stepUpApproval?.pollUrl) {
         const outcome = await awaitStepUpApproval(config, result.stepUpApproval);
         res.setHeader("X-Astra-Step-Up", outcome);
         if (outcome === "approved") {
@@ -2105,7 +2185,7 @@ function createMiddleware(options) {
           result.stepUpOutcome = outcome;
         }
       }
-      if (!result.identityVerified || !result.policyAllowed) {
+      if (!result.policyAllowed) {
         if (shouldRecordDecisions && sessionId) {
           recordDecision(config, sessionId, "denied", result.denialReasons?.[0]).catch(() => {
           });
@@ -2606,7 +2686,7 @@ function createMiddleware2(options) {
     };
     let result = await verify(config, verificationRequest);
     let stepUpHoldOutcome;
-    if (config.stepUpMaxWaitMs !== void 0 && result.identityVerified && requiresHumanApproval(result) && result.stepUpApproval?.pollUrl) {
+    if (config.stepUpMaxWaitMs !== void 0 && result.policyAllowed && requiresHumanApproval(result) && result.stepUpApproval?.pollUrl) {
       stepUpHoldOutcome = await awaitStepUpApproval(config, result.stepUpApproval);
       if (stepUpHoldOutcome === "approved") {
         result = await verify(config, verificationRequest, { bypassCache: true });
@@ -2614,9 +2694,9 @@ function createMiddleware2(options) {
         result.stepUpOutcome = stepUpHoldOutcome;
       }
     }
-    const approvalRequired = result.identityVerified && result.policyAllowed && requiresHumanApproval(result);
+    const approvalRequired = result.policyAllowed && requiresHumanApproval(result);
     if (approvalRequired) annotateApprovalRequired(result);
-    if (!result.identityVerified || !result.policyAllowed || approvalRequired) {
+    if (!result.policyAllowed || approvalRequired) {
       if (result.misconfigured && pathname.startsWith("/api/")) {
         return NextResponse.json(
           {
@@ -3487,7 +3567,7 @@ async function fetchUCPManifest(manifestUrl, options = {}) {
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), timeoutMs);
   try {
-    const res = await fetch(manifestUrl, { signal: controller.signal });
+    const res = await sdkFetch(manifestUrl, { signal: controller.signal });
     if (!res.ok) return null;
     return await res.json();
   } catch {
@@ -5749,7 +5829,7 @@ function createMcpMiddleware(options) {
       let result = await verify(config, verificationRequest);
       req.agentVerification = result;
       let sessionId = result.sessionId;
-      if (config.stepUpMaxWaitMs !== void 0 && result.identityVerified && requiresHumanApproval(result) && result.stepUpApproval?.pollUrl) {
+      if (config.stepUpMaxWaitMs !== void 0 && result.policyAllowed && requiresHumanApproval(result) && result.stepUpApproval?.pollUrl) {
         const outcome = await awaitStepUpApproval(config, result.stepUpApproval);
         res.setHeader("X-Astra-Step-Up", outcome);
         if (outcome === "approved") {
@@ -5760,7 +5840,7 @@ function createMcpMiddleware(options) {
           result.stepUpOutcome = outcome;
         }
       }
-      if (!result.identityVerified || !result.policyAllowed) {
+      if (!result.policyAllowed) {
         if (shouldRecordDecisions && sessionId) {
           recordDecision(config, sessionId, "denied", result.denialReasons?.[0]).catch(() => {
           });
@@ -6032,7 +6112,7 @@ var AstraSync = class {
    */
   async pollRegistration(requestId) {
     const url = `${this.baseUrl}/api/agents/request-registration/${requestId}`;
-    const res = await fetch(url, { headers: { Accept: "application/json" } });
+    const res = await sdkFetch(url, { headers: { Accept: "application/json" } });
     if (!res.ok) {
       const errBody = await res.json().catch(() => ({}));
       throw new AstraSyncError(
@@ -6089,7 +6169,7 @@ var AstraSync = class {
    * Check API health.
    */
   async health() {
-    const res = await fetch(`${this.baseUrl}/api/health/`);
+    const res = await sdkFetch(`${this.baseUrl}/api/health/`);
     if (!res.ok) {
       throw new AstraSyncError(`Health check failed: ${res.status}`, res.status);
     }
@@ -6116,7 +6196,7 @@ var AstraSync = class {
       const signature = await this.signRequest(method, endpoint, body || {});
       headers["X-AstraSync-Signature"] = signature;
     }
-    const res = await fetch(url, {
+    const res = await sdkFetch(url, {
       method,
       headers,
       ...body ? { body: JSON.stringify(body) } : {}
@@ -6141,7 +6221,7 @@ var AstraSync = class {
     if (this.cachedJwt && this.jwtExpiresAt && Date.now() < this.jwtExpiresAt) {
       return this.cachedJwt;
     }
-    const res = await fetch(`${this.baseUrl}/api/auth/login`, {
+    const res = await sdkFetch(`${this.baseUrl}/api/auth/login`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ email: this.email, password: this.password })
@@ -6284,7 +6364,7 @@ var AgentClient = class _AgentClient {
     const url = `${this.apiBaseUrl.replace(/\/+$/, "")}/api/agents/${encodeURIComponent(
       this.credentials.agentId
     )}/ownership`;
-    const resp = await fetch(url, {
+    const resp = await sdkFetch(url, {
       method: "GET",
       headers: {
         Authorization: `Bearer ${this.apiKey}`,
@@ -6322,7 +6402,7 @@ var AgentClient = class _AgentClient {
       }
     }
     const enrichedHeaders = setHttpHeaders(existingHeaders, creds);
-    return fetch(url, {
+    return sdkFetch(url, {
       ...fetchOptions,
       headers: enrichedHeaders
     });
@@ -6511,7 +6591,7 @@ async function recordDecision2(config, params) {
   if (config.customHeaders) {
     Object.assign(headers, config.customHeaders);
   }
-  const response = await fetch(url, {
+  const response = await sdkFetch(url, {
     method: "POST",
     headers,
     body: JSON.stringify(body)
@@ -6528,6 +6608,51 @@ async function recordDecision2(config, params) {
     blockchainTxHash: result.blockchainTxHash
   };
 }
+
+// src/runtime-signatures.ts
+var RUNTIME_SIGNATURES = [
+  {
+    runtime: "browser-automation",
+    displayName: "Browser automation",
+    uaPatterns: [/headless/i, /phantomjs/i, /selenium/i, /playwright/i, /puppeteer/i]
+  },
+  {
+    runtime: "nodejs",
+    displayName: "Node.js runtime",
+    // `node` exactly is the global-fetch default UA; the token forms cover
+    // the common Node HTTP libraries.
+    uaPatterns: [/^node$/i, /^undici/i, /node-fetch/i, /^axios/i, /^got\b/i, /needle/i]
+  },
+  {
+    runtime: "python",
+    displayName: "Python runtime",
+    uaPatterns: [/python-requests/i, /python-urllib/i, /^python\b/i, /httpx/i, /aiohttp/i]
+  },
+  { runtime: "go", displayName: "Go runtime", uaPatterns: [/go-http-client/i] },
+  {
+    runtime: "java",
+    displayName: "Java runtime",
+    uaPatterns: [/^java\//i, /okhttp/i, /apache-httpclient/i]
+  },
+  { runtime: "curl", displayName: "curl", uaPatterns: [/^curl\//i] },
+  { runtime: "wget", displayName: "wget", uaPatterns: [/^wget\//i] },
+  { runtime: "ruby", displayName: "Ruby runtime", uaPatterns: [/^ruby\b/i, /faraday/i] },
+  {
+    runtime: "php",
+    displayName: "PHP runtime",
+    uaPatterns: [/^php\b/i, /guzzlehttp/i, /^symfony/i]
+  },
+  { runtime: "dotnet", displayName: ".NET runtime", uaPatterns: [/^dotnet/i, /httpclient/i] },
+  { runtime: "dart", displayName: "Dart runtime", uaPatterns: [/^dart/i] }
+];
+function detectRuntime(userAgent) {
+  if (!userAgent) return void 0;
+  const ua = userAgent.trim();
+  for (const sig of RUNTIME_SIGNATURES) {
+    if (sig.uaPatterns.some((p) => p.test(ua))) return sig.displayName;
+  }
+  return void 0;
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ACCESS_LEVEL_DESCRIPTIONS,
@@ -6545,9 +6670,11 @@ async function recordDecision2(config, params) {
   MAX_HEADER_VALUE_BYTES,
   MAX_TOTAL_BYTES,
   PLATFORM_AGENT_SIGNATURES,
+  RUNTIME_SIGNATURES,
   RegistrationDeniedError,
   RegistrationExpiredError,
   RegistrationTimeoutError,
+  SDK_USER_AGENT,
   TRUST_LEVEL_RANGES,
   VERSION,
   _resetEdgeConfigCache,
@@ -6561,6 +6688,7 @@ async function recordDecision2(config, params) {
   degradeToObserve,
   deriveConnectionFromHeaders,
   detectPlatformFingerprint,
+  detectRuntime,
   determineAccessLevel,
   express,
   extractApiKeyFormat,
@@ -6589,6 +6717,7 @@ async function recordDecision2(config, params) {
   reportUnregisteredAttempt,
   sanitizeHeaders,
   sdk,
+  sdkFetch,
   setMcpMeta,
   transport,
   verify