@astrasyncai/verification-gateway 4.6.0 → 5.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/adapter-interface/interface.d.mts +2 -2
- package/dist/adapter-interface/interface.d.ts +2 -2
- package/dist/adapters/express.d.mts +2 -2
- package/dist/adapters/express.d.ts +2 -2
- package/dist/adapters/express.js +25 -35
- package/dist/adapters/express.js.map +1 -1
- package/dist/adapters/express.mjs +25 -35
- package/dist/adapters/express.mjs.map +1 -1
- package/dist/adapters/mcp.d.mts +2 -2
- package/dist/adapters/mcp.d.ts +2 -2
- package/dist/adapters/mcp.js +42 -67
- package/dist/adapters/mcp.js.map +1 -1
- package/dist/adapters/mcp.mjs +41 -66
- package/dist/adapters/mcp.mjs.map +1 -1
- package/dist/adapters/nextjs.d.mts +2 -2
- package/dist/adapters/nextjs.d.ts +2 -2
- package/dist/adapters/nextjs.js +23 -32
- package/dist/adapters/nextjs.js.map +1 -1
- package/dist/adapters/nextjs.mjs +23 -32
- package/dist/adapters/nextjs.mjs.map +1 -1
- package/dist/adapters/sdk.d.mts +2 -2
- package/dist/adapters/sdk.d.ts +2 -2
- package/dist/adapters/sdk.js +22 -126
- package/dist/adapters/sdk.js.map +1 -1
- package/dist/adapters/sdk.mjs +22 -124
- package/dist/adapters/sdk.mjs.map +1 -1
- package/dist/agent/index.d.mts +2 -2
- package/dist/agent/index.d.ts +2 -2
- package/dist/agent/index.js +1 -1
- package/dist/agent/index.js.map +1 -1
- package/dist/agent/index.mjs +1 -1
- package/dist/agent/index.mjs.map +1 -1
- package/dist/bin/astrasync-claude-hook.js +23 -31
- package/dist/bin/astrasync-codex-hook.js +23 -31
- package/dist/bin/astrasync-guard.js +23 -31
- package/dist/bin/astrasync.js +28 -36
- package/dist/browser/background.js +23 -31
- package/dist/browser/background.js.map +1 -1
- package/dist/browser/background.mjs +23 -31
- package/dist/browser/background.mjs.map +1 -1
- package/dist/browser/browser-adapter.d.mts +2 -2
- package/dist/browser/browser-adapter.d.ts +2 -2
- package/dist/claude-code/claude-code-adapter.d.mts +2 -2
- package/dist/claude-code/claude-code-adapter.d.ts +2 -2
- package/dist/cli/index.d.mts +2 -2
- package/dist/cli/index.d.ts +2 -2
- package/dist/cli/index.js +1 -1
- package/dist/cli/index.js.map +1 -1
- package/dist/cli/index.mjs +1 -1
- package/dist/cli/index.mjs.map +1 -1
- package/dist/codex/index.d.mts +2 -2
- package/dist/codex/index.d.ts +2 -2
- package/dist/codex/index.js +23 -31
- package/dist/codex/index.js.map +1 -1
- package/dist/codex/index.mjs +23 -31
- package/dist/codex/index.mjs.map +1 -1
- package/dist/cursor/cursor-adapter.d.mts +2 -2
- package/dist/cursor/cursor-adapter.d.ts +2 -2
- package/dist/cursor/extension.d.mts +2 -2
- package/dist/cursor/extension.d.ts +2 -2
- package/dist/cursor/extension.js +23 -31
- package/dist/cursor/extension.js.map +1 -1
- package/dist/cursor/extension.mjs +23 -31
- package/dist/cursor/extension.mjs.map +1 -1
- package/dist/edge-config.d.mts +1 -1
- package/dist/edge-config.d.ts +1 -1
- package/dist/edge-config.js +1 -1
- package/dist/edge-config.js.map +1 -1
- package/dist/edge-config.mjs +1 -1
- package/dist/edge-config.mjs.map +1 -1
- package/dist/edge-core/index.d.mts +12 -3
- package/dist/edge-core/index.d.ts +12 -3
- package/dist/edge-core/index.js +42 -36
- package/dist/edge-core/index.js.map +1 -1
- package/dist/edge-core/index.mjs +42 -36
- package/dist/edge-core/index.mjs.map +1 -1
- package/dist/{express-DBtPKXOL.d.mts → express-KkBZBMqi.d.mts} +1 -1
- package/dist/{express-D-8Ks2Uo.d.ts → express-xK8pRrmj.d.ts} +1 -1
- package/dist/gateway/gateway.d.mts +2 -2
- package/dist/gateway/gateway.d.ts +2 -2
- package/dist/gateway/gateway.js +23 -31
- package/dist/gateway/gateway.js.map +1 -1
- package/dist/gateway/gateway.mjs +23 -31
- package/dist/gateway/gateway.mjs.map +1 -1
- package/dist/git-trigger/git-hooks.d.mts +2 -2
- package/dist/git-trigger/git-hooks.d.ts +2 -2
- package/dist/{index-kGCGWd5x.d.mts → index-DIRzR5IS.d.mts} +1 -1
- package/dist/{index-DlZORQsb.d.ts → index-DLQ4Rcuc.d.ts} +1 -1
- package/dist/{index-CUfmJ1Dq.d.mts → index-GPDn_EGI.d.mts} +1 -1
- package/dist/{index-BND3kQev.d.ts → index-Hnz5VyMR.d.ts} +1 -1
- package/dist/index.d.mts +14 -10
- package/dist/index.d.ts +14 -10
- package/dist/index.js +44 -219
- package/dist/index.js.map +1 -1
- package/dist/index.mjs +44 -212
- package/dist/index.mjs.map +1 -1
- package/dist/local-evaluator/evaluator.d.mts +2 -2
- package/dist/local-evaluator/evaluator.d.ts +2 -2
- package/dist/local-evaluator/evaluator.js.map +1 -1
- package/dist/local-evaluator/evaluator.mjs.map +1 -1
- package/dist/{mcp-DToTlwIn.d.ts → mcp-DPpu4xQz.d.ts} +53 -52
- package/dist/{mcp-ZRN4kY3b.d.mts → mcp-Dju_Sr1o.d.mts} +53 -52
- package/dist/{nextjs-C0KASOy_.d.mts → nextjs-BuoDBN4g.d.mts} +1 -1
- package/dist/{nextjs-lwNvWYWT.d.ts → nextjs-rZKzY_8o.d.ts} +1 -1
- package/dist/registration/index.js +1 -1
- package/dist/registration/index.js.map +1 -1
- package/dist/registration/index.mjs +1 -1
- package/dist/registration/index.mjs.map +1 -1
- package/dist/sdk-CdO6TIEf.d.mts +142 -0
- package/dist/sdk-DxHuIJBm.d.ts +142 -0
- package/dist/transport/index.d.mts +2 -2
- package/dist/transport/index.d.ts +2 -2
- package/dist/transport/index.js +1 -1
- package/dist/transport/index.js.map +1 -1
- package/dist/transport/index.mjs +1 -1
- package/dist/transport/index.mjs.map +1 -1
- package/dist/{types-DhhJxKIC.d.ts → types-3UV7IZx7.d.ts} +1 -3
- package/dist/{types-CGPU7HLi.d.ts → types-CNBaZKxY.d.ts} +24 -50
- package/dist/{types-Cx9hTpKI.d.mts → types-CSHcByFX.d.mts} +24 -50
- package/dist/{types-CfSJLS4i.d.mts → types-CoDjpbVY.d.mts} +1 -3
- package/dist/ui/index.d.mts +2 -17
- package/dist/ui/index.d.ts +2 -17
- package/dist/ui/index.js +1 -43
- package/dist/ui/index.js.map +1 -1
- package/dist/ui/index.mjs +1 -42
- package/dist/ui/index.mjs.map +1 -1
- package/dist/verify.d.mts +3 -4
- package/dist/verify.d.ts +3 -4
- package/dist/verify.js +22 -30
- package/dist/verify.js.map +1 -1
- package/dist/verify.mjs +22 -30
- package/dist/verify.mjs.map +1 -1
- package/package.json +1 -1
- package/dist/sdk-B4aodEwj.d.ts +0 -215
- package/dist/sdk-B9dSwum7.d.mts +0 -215
package/dist/sdk-B4aodEwj.d.ts
DELETED
|
@@ -1,215 +0,0 @@
|
|
|
1
|
-
import { a as AccessLevel, v as TrustLevel, S as SDKOptions, x as VerificationResult } from './types-CGPU7HLi.js';
|
|
2
|
-
|
|
3
|
-
/**
|
|
4
|
-
* AstraSync Universal Verification Gateway - Access Level Definitions
|
|
5
|
-
*
|
|
6
|
-
* Defines the hierarchy and capabilities of each access level.
|
|
7
|
-
*
|
|
8
|
-
* v2.3.9: renamed `'guidance'` band → `'restricted'`. See
|
|
9
|
-
* `types.ts` AccessLevel for the rationale (value-name collision with the
|
|
10
|
-
* `guidance: {...}` help-payload object on VerificationResult).
|
|
11
|
-
*/
|
|
12
|
-
|
|
13
|
-
/**
|
|
14
|
-
* Access level hierarchy (higher number = more access)
|
|
15
|
-
*/
|
|
16
|
-
declare const ACCESS_LEVEL_HIERARCHY: Record<AccessLevel, number>;
|
|
17
|
-
/**
|
|
18
|
-
* Access level descriptions for UI
|
|
19
|
-
*/
|
|
20
|
-
declare const ACCESS_LEVEL_DESCRIPTIONS: Record<AccessLevel, string>;
|
|
21
|
-
/**
|
|
22
|
-
* Default trust score thresholds for access levels
|
|
23
|
-
*/
|
|
24
|
-
declare const DEFAULT_TRUST_THRESHOLDS: Record<AccessLevel, number>;
|
|
25
|
-
/**
|
|
26
|
-
* Trust level score ranges
|
|
27
|
-
*/
|
|
28
|
-
declare const TRUST_LEVEL_RANGES: Record<TrustLevel, {
|
|
29
|
-
min: number;
|
|
30
|
-
max: number;
|
|
31
|
-
}>;
|
|
32
|
-
/**
|
|
33
|
-
* Determine trust level from score
|
|
34
|
-
*/
|
|
35
|
-
declare function getTrustLevel(score: number): TrustLevel;
|
|
36
|
-
/**
|
|
37
|
-
* Check if access level A is greater than or equal to access level B.
|
|
38
|
-
*
|
|
39
|
-
* @deprecated 3.2.0 — the access-level band is informational only and no
|
|
40
|
-
* longer gates in the middleware adapters (post-3.1.0 feedback #1). Retained
|
|
41
|
-
* for explicit opt-in queries and back-compat. Prefer the server-side policy
|
|
42
|
-
* decision (identity + policy + trust) or per-route `minTrustScore`.
|
|
43
|
-
*/
|
|
44
|
-
declare function hasMinimumAccess(actual: AccessLevel, required: AccessLevel): boolean;
|
|
45
|
-
/**
|
|
46
|
-
* Get the highest access level for a given trust score
|
|
47
|
-
*/
|
|
48
|
-
declare function getAccessLevelForScore(trustScore: number, thresholds?: Record<AccessLevel, number>): AccessLevel;
|
|
49
|
-
/**
|
|
50
|
-
* Determine access level from verification result.
|
|
51
|
-
*
|
|
52
|
-
* v2.3.9: unverified callers now return `'none'` (was
|
|
53
|
-
* `'guidance'`). Denials grant zero — never a positive band.
|
|
54
|
-
*/
|
|
55
|
-
declare function determineAccessLevel(verified: boolean, trustScore: number, isOrgMember: boolean, customThresholds?: Partial<Record<AccessLevel, number>>): AccessLevel;
|
|
56
|
-
/**
|
|
57
|
-
* Access capabilities per level
|
|
58
|
-
*/
|
|
59
|
-
interface AccessCapabilities {
|
|
60
|
-
canRead: boolean;
|
|
61
|
-
canWrite: boolean;
|
|
62
|
-
canDelete: boolean;
|
|
63
|
-
canAdmin: boolean;
|
|
64
|
-
canAccessInternal: boolean;
|
|
65
|
-
maxTransactionValue?: number;
|
|
66
|
-
allowedPurposes?: string[];
|
|
67
|
-
}
|
|
68
|
-
/**
|
|
69
|
-
* Get capabilities for an access level
|
|
70
|
-
*/
|
|
71
|
-
declare function getCapabilities(accessLevel: AccessLevel): AccessCapabilities;
|
|
72
|
-
|
|
73
|
-
/**
|
|
74
|
-
* AstraSync Universal Verification Gateway - SDK Adapter
|
|
75
|
-
*
|
|
76
|
-
* Direct SDK for verifying agents in any JavaScript/TypeScript environment.
|
|
77
|
-
* Useful for agent-to-agent verification, serverless functions, or custom integrations.
|
|
78
|
-
*
|
|
79
|
-
* @example
|
|
80
|
-
* ```typescript
|
|
81
|
-
* import { createClient } from '@astrasyncai/verification-gateway/sdk';
|
|
82
|
-
*
|
|
83
|
-
* const gateway = createClient({
|
|
84
|
-
* apiBaseUrl: 'https://astrasync.ai/api',
|
|
85
|
-
* });
|
|
86
|
-
*
|
|
87
|
-
* // Verify another agent before interacting
|
|
88
|
-
* const result = await gateway.verify({
|
|
89
|
-
* astraId: 'ASTRA-abc123',
|
|
90
|
-
* purpose: 'data-exchange',
|
|
91
|
-
* });
|
|
92
|
-
*
|
|
93
|
-
* if (result.identityVerified && result.policyAllowed && result.accessLevel !== 'none') {
|
|
94
|
-
* // Safe to interact with this agent
|
|
95
|
-
* }
|
|
96
|
-
* ```
|
|
97
|
-
*/
|
|
98
|
-
|
|
99
|
-
/**
|
|
100
|
-
* Verification Gateway SDK Client
|
|
101
|
-
*/
|
|
102
|
-
declare class VerificationGatewayClient {
|
|
103
|
-
private config;
|
|
104
|
-
private timeout;
|
|
105
|
-
private retryConfig;
|
|
106
|
-
constructor(options: SDKOptions);
|
|
107
|
-
/**
|
|
108
|
-
* Full verification with all details
|
|
109
|
-
*/
|
|
110
|
-
verify(options: {
|
|
111
|
-
astraId?: string;
|
|
112
|
-
apiKey?: string;
|
|
113
|
-
jwt?: string;
|
|
114
|
-
purpose?: string;
|
|
115
|
-
action?: string;
|
|
116
|
-
resourceType?: string;
|
|
117
|
-
resource?: string;
|
|
118
|
-
jurisdiction?: string;
|
|
119
|
-
transactionValue?: number;
|
|
120
|
-
currency?: string;
|
|
121
|
-
isSubAgentRequest?: boolean;
|
|
122
|
-
parentAgentId?: string;
|
|
123
|
-
subAgentDepth?: number;
|
|
124
|
-
counterpartyUrl?: string;
|
|
125
|
-
counterpartyType?: string;
|
|
126
|
-
}): Promise<VerificationResult>;
|
|
127
|
-
/**
|
|
128
|
-
* Quick verification — checks credentials and policy in one call.
|
|
129
|
-
*
|
|
130
|
-
* The return shape mirrors `VerificationResult`'s identity/policy
|
|
131
|
-
* split. Map to HTTP status the same way: `!identityVerified` → 401,
|
|
132
|
-
* `identityVerified && !policyAllowed` → 403.
|
|
133
|
-
*/
|
|
134
|
-
quickVerify(credentials: {
|
|
135
|
-
astraId?: string;
|
|
136
|
-
apiKey?: string;
|
|
137
|
-
jwt?: string;
|
|
138
|
-
}): Promise<{
|
|
139
|
-
identityVerified: boolean;
|
|
140
|
-
policyAllowed: boolean;
|
|
141
|
-
accessLevel: AccessLevel;
|
|
142
|
-
reason?: string;
|
|
143
|
-
}>;
|
|
144
|
-
/**
|
|
145
|
-
* Check if an agent has a specific access level.
|
|
146
|
-
*
|
|
147
|
-
* @deprecated 3.2.0 — the access-level band is informational only; it no
|
|
148
|
-
* longer gates in the middleware adapters (post-3.1.0 feedback #1). This
|
|
149
|
-
* explicit opt-in query still works, but prefer gating on the server-side
|
|
150
|
-
* policy decision (identity + policy + trust) or per-route `minTrustScore`.
|
|
151
|
-
* Explicit per-route condition→constraint rules are the Phase-2 successor.
|
|
152
|
-
*/
|
|
153
|
-
hasAccess(credentials: {
|
|
154
|
-
astraId?: string;
|
|
155
|
-
apiKey?: string;
|
|
156
|
-
jwt?: string;
|
|
157
|
-
}, requiredLevel: AccessLevel): Promise<boolean>;
|
|
158
|
-
/**
|
|
159
|
-
* Get capabilities for a verified agent
|
|
160
|
-
*/
|
|
161
|
-
getCapabilities(credentials: {
|
|
162
|
-
astraId?: string;
|
|
163
|
-
apiKey?: string;
|
|
164
|
-
jwt?: string;
|
|
165
|
-
}): Promise<AccessCapabilities>;
|
|
166
|
-
/**
|
|
167
|
-
* Verify a specific ASTRA-ID
|
|
168
|
-
*/
|
|
169
|
-
verifyAstraId(astraId: string, options?: {
|
|
170
|
-
purpose?: string;
|
|
171
|
-
action?: string;
|
|
172
|
-
}): Promise<VerificationResult>;
|
|
173
|
-
/**
|
|
174
|
-
* Verify using an API key
|
|
175
|
-
*/
|
|
176
|
-
verifyApiKey(apiKey: string, options?: {
|
|
177
|
-
purpose?: string;
|
|
178
|
-
action?: string;
|
|
179
|
-
}): Promise<VerificationResult>;
|
|
180
|
-
/**
|
|
181
|
-
* Clear the verification cache
|
|
182
|
-
*/
|
|
183
|
-
clearCache(): void;
|
|
184
|
-
/**
|
|
185
|
-
* Execute a function with retry logic
|
|
186
|
-
*/
|
|
187
|
-
private executeWithRetry;
|
|
188
|
-
}
|
|
189
|
-
/**
|
|
190
|
-
* Create a new SDK client
|
|
191
|
-
*/
|
|
192
|
-
declare function createClient(options: SDKOptions): VerificationGatewayClient;
|
|
193
|
-
/**
|
|
194
|
-
* One-shot verification without creating a client
|
|
195
|
-
*/
|
|
196
|
-
declare function verifyOnce(options: SDKOptions & {
|
|
197
|
-
astraId?: string;
|
|
198
|
-
apiKey?: string;
|
|
199
|
-
jwt?: string;
|
|
200
|
-
purpose?: string;
|
|
201
|
-
action?: string;
|
|
202
|
-
}): Promise<VerificationResult>;
|
|
203
|
-
|
|
204
|
-
type sdk_VerificationGatewayClient = VerificationGatewayClient;
|
|
205
|
-
declare const sdk_VerificationGatewayClient: typeof VerificationGatewayClient;
|
|
206
|
-
declare const sdk_createClient: typeof createClient;
|
|
207
|
-
declare const sdk_getCapabilities: typeof getCapabilities;
|
|
208
|
-
declare const sdk_getTrustLevel: typeof getTrustLevel;
|
|
209
|
-
declare const sdk_hasMinimumAccess: typeof hasMinimumAccess;
|
|
210
|
-
declare const sdk_verifyOnce: typeof verifyOnce;
|
|
211
|
-
declare namespace sdk {
|
|
212
|
-
export { sdk_VerificationGatewayClient as VerificationGatewayClient, sdk_createClient as createClient, sdk_getCapabilities as getCapabilities, sdk_getTrustLevel as getTrustLevel, sdk_hasMinimumAccess as hasMinimumAccess, sdk_verifyOnce as verifyOnce };
|
|
213
|
-
}
|
|
214
|
-
|
|
215
|
-
export { ACCESS_LEVEL_DESCRIPTIONS as A, DEFAULT_TRUST_THRESHOLDS as D, TRUST_LEVEL_RANGES as T, VerificationGatewayClient as V, ACCESS_LEVEL_HIERARCHY as a, type AccessCapabilities as b, createClient as c, determineAccessLevel as d, getCapabilities as e, getTrustLevel as f, getAccessLevelForScore as g, hasMinimumAccess as h, sdk as s, verifyOnce as v };
|
package/dist/sdk-B9dSwum7.d.mts
DELETED
|
@@ -1,215 +0,0 @@
|
|
|
1
|
-
import { a as AccessLevel, v as TrustLevel, S as SDKOptions, x as VerificationResult } from './types-Cx9hTpKI.mjs';
|
|
2
|
-
|
|
3
|
-
/**
|
|
4
|
-
* AstraSync Universal Verification Gateway - Access Level Definitions
|
|
5
|
-
*
|
|
6
|
-
* Defines the hierarchy and capabilities of each access level.
|
|
7
|
-
*
|
|
8
|
-
* v2.3.9: renamed `'guidance'` band → `'restricted'`. See
|
|
9
|
-
* `types.ts` AccessLevel for the rationale (value-name collision with the
|
|
10
|
-
* `guidance: {...}` help-payload object on VerificationResult).
|
|
11
|
-
*/
|
|
12
|
-
|
|
13
|
-
/**
|
|
14
|
-
* Access level hierarchy (higher number = more access)
|
|
15
|
-
*/
|
|
16
|
-
declare const ACCESS_LEVEL_HIERARCHY: Record<AccessLevel, number>;
|
|
17
|
-
/**
|
|
18
|
-
* Access level descriptions for UI
|
|
19
|
-
*/
|
|
20
|
-
declare const ACCESS_LEVEL_DESCRIPTIONS: Record<AccessLevel, string>;
|
|
21
|
-
/**
|
|
22
|
-
* Default trust score thresholds for access levels
|
|
23
|
-
*/
|
|
24
|
-
declare const DEFAULT_TRUST_THRESHOLDS: Record<AccessLevel, number>;
|
|
25
|
-
/**
|
|
26
|
-
* Trust level score ranges
|
|
27
|
-
*/
|
|
28
|
-
declare const TRUST_LEVEL_RANGES: Record<TrustLevel, {
|
|
29
|
-
min: number;
|
|
30
|
-
max: number;
|
|
31
|
-
}>;
|
|
32
|
-
/**
|
|
33
|
-
* Determine trust level from score
|
|
34
|
-
*/
|
|
35
|
-
declare function getTrustLevel(score: number): TrustLevel;
|
|
36
|
-
/**
|
|
37
|
-
* Check if access level A is greater than or equal to access level B.
|
|
38
|
-
*
|
|
39
|
-
* @deprecated 3.2.0 — the access-level band is informational only and no
|
|
40
|
-
* longer gates in the middleware adapters (post-3.1.0 feedback #1). Retained
|
|
41
|
-
* for explicit opt-in queries and back-compat. Prefer the server-side policy
|
|
42
|
-
* decision (identity + policy + trust) or per-route `minTrustScore`.
|
|
43
|
-
*/
|
|
44
|
-
declare function hasMinimumAccess(actual: AccessLevel, required: AccessLevel): boolean;
|
|
45
|
-
/**
|
|
46
|
-
* Get the highest access level for a given trust score
|
|
47
|
-
*/
|
|
48
|
-
declare function getAccessLevelForScore(trustScore: number, thresholds?: Record<AccessLevel, number>): AccessLevel;
|
|
49
|
-
/**
|
|
50
|
-
* Determine access level from verification result.
|
|
51
|
-
*
|
|
52
|
-
* v2.3.9: unverified callers now return `'none'` (was
|
|
53
|
-
* `'guidance'`). Denials grant zero — never a positive band.
|
|
54
|
-
*/
|
|
55
|
-
declare function determineAccessLevel(verified: boolean, trustScore: number, isOrgMember: boolean, customThresholds?: Partial<Record<AccessLevel, number>>): AccessLevel;
|
|
56
|
-
/**
|
|
57
|
-
* Access capabilities per level
|
|
58
|
-
*/
|
|
59
|
-
interface AccessCapabilities {
|
|
60
|
-
canRead: boolean;
|
|
61
|
-
canWrite: boolean;
|
|
62
|
-
canDelete: boolean;
|
|
63
|
-
canAdmin: boolean;
|
|
64
|
-
canAccessInternal: boolean;
|
|
65
|
-
maxTransactionValue?: number;
|
|
66
|
-
allowedPurposes?: string[];
|
|
67
|
-
}
|
|
68
|
-
/**
|
|
69
|
-
* Get capabilities for an access level
|
|
70
|
-
*/
|
|
71
|
-
declare function getCapabilities(accessLevel: AccessLevel): AccessCapabilities;
|
|
72
|
-
|
|
73
|
-
/**
|
|
74
|
-
* AstraSync Universal Verification Gateway - SDK Adapter
|
|
75
|
-
*
|
|
76
|
-
* Direct SDK for verifying agents in any JavaScript/TypeScript environment.
|
|
77
|
-
* Useful for agent-to-agent verification, serverless functions, or custom integrations.
|
|
78
|
-
*
|
|
79
|
-
* @example
|
|
80
|
-
* ```typescript
|
|
81
|
-
* import { createClient } from '@astrasyncai/verification-gateway/sdk';
|
|
82
|
-
*
|
|
83
|
-
* const gateway = createClient({
|
|
84
|
-
* apiBaseUrl: 'https://astrasync.ai/api',
|
|
85
|
-
* });
|
|
86
|
-
*
|
|
87
|
-
* // Verify another agent before interacting
|
|
88
|
-
* const result = await gateway.verify({
|
|
89
|
-
* astraId: 'ASTRA-abc123',
|
|
90
|
-
* purpose: 'data-exchange',
|
|
91
|
-
* });
|
|
92
|
-
*
|
|
93
|
-
* if (result.identityVerified && result.policyAllowed && result.accessLevel !== 'none') {
|
|
94
|
-
* // Safe to interact with this agent
|
|
95
|
-
* }
|
|
96
|
-
* ```
|
|
97
|
-
*/
|
|
98
|
-
|
|
99
|
-
/**
|
|
100
|
-
* Verification Gateway SDK Client
|
|
101
|
-
*/
|
|
102
|
-
declare class VerificationGatewayClient {
|
|
103
|
-
private config;
|
|
104
|
-
private timeout;
|
|
105
|
-
private retryConfig;
|
|
106
|
-
constructor(options: SDKOptions);
|
|
107
|
-
/**
|
|
108
|
-
* Full verification with all details
|
|
109
|
-
*/
|
|
110
|
-
verify(options: {
|
|
111
|
-
astraId?: string;
|
|
112
|
-
apiKey?: string;
|
|
113
|
-
jwt?: string;
|
|
114
|
-
purpose?: string;
|
|
115
|
-
action?: string;
|
|
116
|
-
resourceType?: string;
|
|
117
|
-
resource?: string;
|
|
118
|
-
jurisdiction?: string;
|
|
119
|
-
transactionValue?: number;
|
|
120
|
-
currency?: string;
|
|
121
|
-
isSubAgentRequest?: boolean;
|
|
122
|
-
parentAgentId?: string;
|
|
123
|
-
subAgentDepth?: number;
|
|
124
|
-
counterpartyUrl?: string;
|
|
125
|
-
counterpartyType?: string;
|
|
126
|
-
}): Promise<VerificationResult>;
|
|
127
|
-
/**
|
|
128
|
-
* Quick verification — checks credentials and policy in one call.
|
|
129
|
-
*
|
|
130
|
-
* The return shape mirrors `VerificationResult`'s identity/policy
|
|
131
|
-
* split. Map to HTTP status the same way: `!identityVerified` → 401,
|
|
132
|
-
* `identityVerified && !policyAllowed` → 403.
|
|
133
|
-
*/
|
|
134
|
-
quickVerify(credentials: {
|
|
135
|
-
astraId?: string;
|
|
136
|
-
apiKey?: string;
|
|
137
|
-
jwt?: string;
|
|
138
|
-
}): Promise<{
|
|
139
|
-
identityVerified: boolean;
|
|
140
|
-
policyAllowed: boolean;
|
|
141
|
-
accessLevel: AccessLevel;
|
|
142
|
-
reason?: string;
|
|
143
|
-
}>;
|
|
144
|
-
/**
|
|
145
|
-
* Check if an agent has a specific access level.
|
|
146
|
-
*
|
|
147
|
-
* @deprecated 3.2.0 — the access-level band is informational only; it no
|
|
148
|
-
* longer gates in the middleware adapters (post-3.1.0 feedback #1). This
|
|
149
|
-
* explicit opt-in query still works, but prefer gating on the server-side
|
|
150
|
-
* policy decision (identity + policy + trust) or per-route `minTrustScore`.
|
|
151
|
-
* Explicit per-route condition→constraint rules are the Phase-2 successor.
|
|
152
|
-
*/
|
|
153
|
-
hasAccess(credentials: {
|
|
154
|
-
astraId?: string;
|
|
155
|
-
apiKey?: string;
|
|
156
|
-
jwt?: string;
|
|
157
|
-
}, requiredLevel: AccessLevel): Promise<boolean>;
|
|
158
|
-
/**
|
|
159
|
-
* Get capabilities for a verified agent
|
|
160
|
-
*/
|
|
161
|
-
getCapabilities(credentials: {
|
|
162
|
-
astraId?: string;
|
|
163
|
-
apiKey?: string;
|
|
164
|
-
jwt?: string;
|
|
165
|
-
}): Promise<AccessCapabilities>;
|
|
166
|
-
/**
|
|
167
|
-
* Verify a specific ASTRA-ID
|
|
168
|
-
*/
|
|
169
|
-
verifyAstraId(astraId: string, options?: {
|
|
170
|
-
purpose?: string;
|
|
171
|
-
action?: string;
|
|
172
|
-
}): Promise<VerificationResult>;
|
|
173
|
-
/**
|
|
174
|
-
* Verify using an API key
|
|
175
|
-
*/
|
|
176
|
-
verifyApiKey(apiKey: string, options?: {
|
|
177
|
-
purpose?: string;
|
|
178
|
-
action?: string;
|
|
179
|
-
}): Promise<VerificationResult>;
|
|
180
|
-
/**
|
|
181
|
-
* Clear the verification cache
|
|
182
|
-
*/
|
|
183
|
-
clearCache(): void;
|
|
184
|
-
/**
|
|
185
|
-
* Execute a function with retry logic
|
|
186
|
-
*/
|
|
187
|
-
private executeWithRetry;
|
|
188
|
-
}
|
|
189
|
-
/**
|
|
190
|
-
* Create a new SDK client
|
|
191
|
-
*/
|
|
192
|
-
declare function createClient(options: SDKOptions): VerificationGatewayClient;
|
|
193
|
-
/**
|
|
194
|
-
* One-shot verification without creating a client
|
|
195
|
-
*/
|
|
196
|
-
declare function verifyOnce(options: SDKOptions & {
|
|
197
|
-
astraId?: string;
|
|
198
|
-
apiKey?: string;
|
|
199
|
-
jwt?: string;
|
|
200
|
-
purpose?: string;
|
|
201
|
-
action?: string;
|
|
202
|
-
}): Promise<VerificationResult>;
|
|
203
|
-
|
|
204
|
-
type sdk_VerificationGatewayClient = VerificationGatewayClient;
|
|
205
|
-
declare const sdk_VerificationGatewayClient: typeof VerificationGatewayClient;
|
|
206
|
-
declare const sdk_createClient: typeof createClient;
|
|
207
|
-
declare const sdk_getCapabilities: typeof getCapabilities;
|
|
208
|
-
declare const sdk_getTrustLevel: typeof getTrustLevel;
|
|
209
|
-
declare const sdk_hasMinimumAccess: typeof hasMinimumAccess;
|
|
210
|
-
declare const sdk_verifyOnce: typeof verifyOnce;
|
|
211
|
-
declare namespace sdk {
|
|
212
|
-
export { sdk_VerificationGatewayClient as VerificationGatewayClient, sdk_createClient as createClient, sdk_getCapabilities as getCapabilities, sdk_getTrustLevel as getTrustLevel, sdk_hasMinimumAccess as hasMinimumAccess, sdk_verifyOnce as verifyOnce };
|
|
213
|
-
}
|
|
214
|
-
|
|
215
|
-
export { ACCESS_LEVEL_DESCRIPTIONS as A, DEFAULT_TRUST_THRESHOLDS as D, TRUST_LEVEL_RANGES as T, VerificationGatewayClient as V, ACCESS_LEVEL_HIERARCHY as a, type AccessCapabilities as b, createClient as c, determineAccessLevel as d, getCapabilities as e, getTrustLevel as f, getAccessLevelForScore as g, hasMinimumAccess as h, sdk as s, verifyOnce as v };
|