@astrasyncai/verification-gateway 5.0.0 → 5.2.0

package/dist/adapter-interface/interface.d.mts

@@ -1,6 +1,6 @@
 import { AstraSyncGateway } from '../gateway/gateway.mjs';
-import { A as AgentAction, I as InterceptResult, P as PDLSSContext, V as VerificationDecision } from '../types-DQmop7ZW.mjs';
-import '../types-CJjZvPr9.mjs';
+import { A as AgentAction, I as InterceptResult, P as PDLSSContext, V as VerificationDecision } from '../types-CoDjpbVY.mjs';
+import '../types-CSHcByFX.mjs';
 import '../metadata-capture.mjs';
 
 /**

package/dist/adapter-interface/interface.d.ts

@@ -1,6 +1,6 @@
 import { AstraSyncGateway } from '../gateway/gateway.js';
-import { A as AgentAction, I as InterceptResult, P as PDLSSContext, V as VerificationDecision } from '../types-CXf3q4kZ.js';
-import '../types-BK2POWNc.js';
+import { A as AgentAction, I as InterceptResult, P as PDLSSContext, V as VerificationDecision } from '../types-3UV7IZx7.js';
+import '../types-CNBaZKxY.js';
 import '../metadata-capture.js';
 
 /**

package/dist/adapters/express.d.mts

@@ -1,4 +1,4 @@
 import 'express';
-import '../types-CJjZvPr9.mjs';
-export { c as createMiddleware, a as extractAstraSyncCredentials } from '../express-Dm-snUuY.mjs';
+import '../types-CSHcByFX.mjs';
+export { c as createMiddleware, a as extractAstraSyncCredentials } from '../express-KkBZBMqi.mjs';
 import '../metadata-capture.mjs';

package/dist/adapters/express.d.ts

@@ -1,4 +1,4 @@
 import 'express';
-import '../types-BK2POWNc.js';
-export { c as createMiddleware, a as extractAstraSyncCredentials } from '../express-B5lWuemA.js';
+import '../types-CNBaZKxY.js';
+export { c as createMiddleware, a as extractAstraSyncCredentials } from '../express-xK8pRrmj.js';
 import '../metadata-capture.js';

package/dist/adapters/express.js

@@ -26,7 +26,7 @@ __export(express_exports, {
 module.exports = __toCommonJS(express_exports);
 
 // src/version.ts
-var SDK_VERSION = "5.0.0";
+var SDK_VERSION = "5.2.0";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;
@@ -330,6 +330,14 @@ function extractCredentials(headers, query) {
   }
   return credentials;
 }
+function mcpGuidance(urls) {
+  if (!urls?.mcpEndpoint) return void 0;
+  return {
+    endpoint: urls.mcpEndpoint,
+    discoveryUrl: urls.mcpDiscoveryUrl,
+    message: "If you are operating inside an MCP-capable host (Claude, ChatGPT, Cursor, or any MCP client), add the AstraSync MCP connector instead of integrating these URLs by hand: registration through the connector is KEYLESS and HUMAN-APPROVED \u2014 your human approves in an in-chat card, and you never see, hold, or transmit an API key, password, or private key."
+  };
+}
 function createGuidanceResponse(_config, reason, options = {}) {
   const source = options.source ?? "no_credentials";
   const isApiError = source === "api_error";
@@ -356,11 +364,17 @@ function createGuidanceResponse(_config, reason, options = {}) {
     registrationUrl: urls?.registrationUrl ?? "",
     documentationUrl: urls?.documentationUrl ?? "",
     steps: [
+      // MCP steering leads when the hosted bridge is advertised — the
+      // connector is the agent-actionable path (keyless, human-approved).
+      ...urls?.mcpEndpoint ? [
+        `Fastest path (inside an MCP host): add the AstraSync MCP connector at ${urls.mcpEndpoint} \u2014 keyless, human-approved registration`
+      ] : [],
       "Register for an AstraSync account",
       "Create and register your agent",
       "Add your ASTRA-ID to request headers",
       "Retry your request"
-    ]
+    ],
+    ...mcpGuidance(urls) && { mcp: mcpGuidance(urls) }
   };
   return {
     // Round-18 G4: createGuidanceResponse fires for unverified-agent path or
@@ -579,7 +593,10 @@ async function verify(config, request, options) {
       guidance: {
         message: apiResponse.access?.reason || "Access denied by PDLSS policy",
         registrationUrl: urls?.registrationUrl ?? "",
-        documentationUrl: urls?.documentationUrl ?? ""
+        documentationUrl: urls?.documentationUrl ?? "",
+        // 5.1.0: anonymous callers land on this branch — steer MCP-hosted
+        // agents to the connector (this is what the edge deny body surfaces).
+        ...mcpGuidance(urls) && { mcp: mcpGuidance(urls) }
       },
       verifiedAt: /* @__PURE__ */ new Date(),
       // Extract sessionId so decisions can be recorded for denials too