@astrasyncai/verification-gateway 4.4.0 → 4.5.1

package/dist/index.mjs

@@ -126,7 +126,7 @@ function getCapabilities(accessLevel) {
 }
 
 // src/version.ts
-var SDK_VERSION = "4.4.0";
+var SDK_VERSION = "4.5.1";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;
@@ -675,12 +675,15 @@ async function verify(config, request, options) {
   const verificationContext = apiResponse.verificationContext;
   const accessLevel = apiResponse.access?.accessLevel ?? "standard";
   const result = {
-    // Round-18 G4: backend allowed access. Identity is verified (we resolved
-    // the caller to an agent) and policy passed all gates. Read idVerified
-    // from verificationContext for symmetry with the deny branch; default true
-    // on success path since `access.allowed === true` implies identity was
-    // resolvable (anonymous-allow paths flow through createGuidanceResponse).
-    identityVerified: apiResponse.verificationContext?.idVerified !== false,
+    // 4.5.0 (probe F1): read idVerified from verificationContext with the
+    // SAME absent⇒false default as the deny branch. The previous `!== false`
+    // default manufactured `identityVerified: true` for anonymous
+    // allow_full/allow_partial/audit responses (which allow access but omit
+    // verificationContext entirely) — the "anonymous caller labelled
+    // verified" defect. Every authenticated success response has carried
+    // `verificationContext.idVerified: true` since v2.2.4, so a truth claim
+    // this load-bearing must never be defaulted on.
+    identityVerified: apiResponse.verificationContext?.idVerified === true,
     policyAllowed: true,
     accessLevel,
     agent,
@@ -1653,9 +1656,10 @@ function detectPlatformFingerprint(input) {
 
 // src/edge-core/classify.ts
 var STATIC_EXTENSIONS = /\.(css|js|mjs|map|png|jpe?g|gif|webp|avif|svg|ico|woff2?|ttf|otf|eot|mp4|webm|pdf|txt|xml)$/i;
+var SELF_UA_PATTERN = /^astrasync-sdk\//i;
 var BOT_UA_PATTERN = /curl|wget|python-requests|python-urllib|node-fetch|axios|got|okhttp|go-http-client|libwww|httpie|java\/|ruby|php|scrapy|headless|phantomjs|selenium|playwright|puppeteer|bot|crawler|spider|slurp/i;
 var BROWSER_UA_PATTERN = /mozilla\/\d/i;
-var _patterns = { STATIC_EXTENSIONS, BOT_UA_PATTERN, BROWSER_UA_PATTERN };
+var _patterns = { STATIC_EXTENSIONS, BOT_UA_PATTERN, BROWSER_UA_PATTERN, SELF_UA_PATTERN };
 
 // src/edge-core/events.ts
 function sampled(rate, random = Math.random) {
@@ -2075,7 +2079,7 @@ function createMiddleware(options) {
       let result = await verify(config, verificationRequest);
       req.agentVerification = result;
       let sessionId = result.sessionId;
-      if (config.stepUpMaxWaitMs !== void 0 && result.identityVerified && requiresHumanApproval(result) && result.stepUpApproval?.pollUrl) {
+      if (config.stepUpMaxWaitMs !== void 0 && result.policyAllowed && requiresHumanApproval(result) && result.stepUpApproval?.pollUrl) {
         const outcome = await awaitStepUpApproval(config, result.stepUpApproval);
         res.setHeader("X-Astra-Step-Up", outcome);
         if (outcome === "approved") {
@@ -2086,7 +2090,7 @@ function createMiddleware(options) {
           result.stepUpOutcome = outcome;
         }
       }
-      if (!result.identityVerified || !result.policyAllowed) {
+      if (!result.policyAllowed) {
         if (shouldRecordDecisions && sessionId) {
           recordDecision(config, sessionId, "denied", result.denialReasons?.[0]).catch(() => {
           });
@@ -2587,7 +2591,7 @@ function createMiddleware2(options) {
     };
     let result = await verify(config, verificationRequest);
     let stepUpHoldOutcome;
-    if (config.stepUpMaxWaitMs !== void 0 && result.identityVerified && requiresHumanApproval(result) && result.stepUpApproval?.pollUrl) {
+    if (config.stepUpMaxWaitMs !== void 0 && result.policyAllowed && requiresHumanApproval(result) && result.stepUpApproval?.pollUrl) {
       stepUpHoldOutcome = await awaitStepUpApproval(config, result.stepUpApproval);
       if (stepUpHoldOutcome === "approved") {
         result = await verify(config, verificationRequest, { bypassCache: true });
@@ -2595,9 +2599,9 @@ function createMiddleware2(options) {
         result.stepUpOutcome = stepUpHoldOutcome;
       }
     }
-    const approvalRequired = result.identityVerified && result.policyAllowed && requiresHumanApproval(result);
+    const approvalRequired = result.policyAllowed && requiresHumanApproval(result);
     if (approvalRequired) annotateApprovalRequired(result);
-    if (!result.identityVerified || !result.policyAllowed || approvalRequired) {
+    if (!result.policyAllowed || approvalRequired) {
       if (result.misconfigured && pathname.startsWith("/api/")) {
         return NextResponse.json(
           {
@@ -5733,7 +5737,7 @@ function createMcpMiddleware(options) {
       let result = await verify(config, verificationRequest);
       req.agentVerification = result;
       let sessionId = result.sessionId;
-      if (config.stepUpMaxWaitMs !== void 0 && result.identityVerified && requiresHumanApproval(result) && result.stepUpApproval?.pollUrl) {
+      if (config.stepUpMaxWaitMs !== void 0 && result.policyAllowed && requiresHumanApproval(result) && result.stepUpApproval?.pollUrl) {
         const outcome = await awaitStepUpApproval(config, result.stepUpApproval);
         res.setHeader("X-Astra-Step-Up", outcome);
         if (outcome === "approved") {
@@ -5744,7 +5748,7 @@ function createMcpMiddleware(options) {
           result.stepUpOutcome = outcome;
         }
       }
-      if (!result.identityVerified || !result.policyAllowed) {
+      if (!result.policyAllowed) {
         if (shouldRecordDecisions && sessionId) {
           recordDecision(config, sessionId, "denied", result.denialReasons?.[0]).catch(() => {
           });
@@ -6187,6 +6191,7 @@ function buildGuidance(params) {
       steps: [
         "Credentialed path (recommended): have your human mint an agent-scoped API key at Settings \u2192 API Keys, then re-call register_agent with apiKey set. An agent holding its own scoped kya_ key is fine and intended.",
         "No-credentials path: call request_registration({ name, ownerEmail, ... }) with the human owner's email \u2014 the only bootstrap credential. No API key is involved.",
+        "Include as much metadata as you can in the registration \u2014 especially model ({ modelName, modelProvider }) and framework ({ frameworkName, frameworkVersion }). Declared platform/model metadata directly improves your trust score and attributes your traffic correctly.",
         "The owner approves via an emailed link (first time, they create an account and complete a quick verification).",
         "Use poll_registration({ requestId }) once the owner confirms approval to retrieve the astraId.",
         "Never transmit a password or private key over the MCP wire \u2014 those are never required."
@@ -6572,6 +6577,8 @@ export {
   MAX_HEADERS,
   MAX_HEADER_VALUE_BYTES,
   MAX_TOTAL_BYTES,
+  MCP_VERIFIED_HOP_HEADER,
+  MCP_VERIFIED_HOP_MAX_AGE_MS,
   PLATFORM_AGENT_SIGNATURES,
   RUNTIME_SIGNATURES,
   RegistrationDeniedError,
@@ -6609,9 +6616,11 @@ export {
   hasCredentials,
   hasMinimumAccess,
   isEdgeConfig,
+  isVerifiedHopValidFor,
   matchEdgePathRule,
   matchPlatformSignature,
   nextjs_exports as nextjs,
+  parseVerifiedHop,
   pollStepUpStatus,
   prefetchWellKnown,
   quickVerify,
@@ -6621,6 +6630,7 @@ export {
   sanitizeHeaders,
   sdk_exports as sdk,
   sdkFetch,
+  serializeVerifiedHop,
   setMcpMeta,
   transport_exports as transport,
   verify