@astrasyncai/verification-gateway 5.0.0 → 5.2.0

package/dist/adapters/nextjs.d.mts

@@ -1,4 +1,4 @@
 import 'next/server';
-import '../types-CJjZvPr9.mjs';
-export { c as createMatcherConfig, a as createMiddleware } from '../nextjs-B1sBdEav.mjs';
+import '../types-CSHcByFX.mjs';
+export { c as createMatcherConfig, a as createMiddleware } from '../nextjs-BuoDBN4g.mjs';
 import '../metadata-capture.mjs';

package/dist/adapters/nextjs.d.ts

@@ -1,4 +1,4 @@
 import 'next/server';
-import '../types-BK2POWNc.js';
-export { c as createMatcherConfig, a as createMiddleware } from '../nextjs-DoRmhV_Z.js';
+import '../types-CNBaZKxY.js';
+export { c as createMatcherConfig, a as createMiddleware } from '../nextjs-rZKzY_8o.js';
 import '../metadata-capture.js';

package/dist/adapters/nextjs.js

@@ -36,7 +36,7 @@ __export(nextjs_exports, {
 module.exports = __toCommonJS(nextjs_exports);
 
 // src/version.ts
-var SDK_VERSION = "5.0.0";
+var SDK_VERSION = "5.2.0";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;
@@ -288,6 +288,14 @@ function extractCredentials(headers, query) {
   }
   return credentials;
 }
+function mcpGuidance(urls) {
+  if (!urls?.mcpEndpoint) return void 0;
+  return {
+    endpoint: urls.mcpEndpoint,
+    discoveryUrl: urls.mcpDiscoveryUrl,
+    message: "If you are operating inside an MCP-capable host (Claude, ChatGPT, Cursor, or any MCP client), add the AstraSync MCP connector instead of integrating these URLs by hand: registration through the connector is KEYLESS and HUMAN-APPROVED \u2014 your human approves in an in-chat card, and you never see, hold, or transmit an API key, password, or private key."
+  };
+}
 function createGuidanceResponse(_config, reason, options = {}) {
   const source = options.source ?? "no_credentials";
   const isApiError = source === "api_error";
@@ -314,11 +322,17 @@ function createGuidanceResponse(_config, reason, options = {}) {
     registrationUrl: urls?.registrationUrl ?? "",
     documentationUrl: urls?.documentationUrl ?? "",
     steps: [
+      // MCP steering leads when the hosted bridge is advertised — the
+      // connector is the agent-actionable path (keyless, human-approved).
+      ...urls?.mcpEndpoint ? [
+        `Fastest path (inside an MCP host): add the AstraSync MCP connector at ${urls.mcpEndpoint} \u2014 keyless, human-approved registration`
+      ] : [],
       "Register for an AstraSync account",
       "Create and register your agent",
       "Add your ASTRA-ID to request headers",
       "Retry your request"
-    ]
+    ],
+    ...mcpGuidance(urls) && { mcp: mcpGuidance(urls) }
   };
   return {
     // Round-18 G4: createGuidanceResponse fires for unverified-agent path or
@@ -537,7 +551,10 @@ async function verify(config, request, options) {
       guidance: {
         message: apiResponse.access?.reason || "Access denied by PDLSS policy",
         registrationUrl: urls?.registrationUrl ?? "",
-        documentationUrl: urls?.documentationUrl ?? ""
+        documentationUrl: urls?.documentationUrl ?? "",
+        // 5.1.0: anonymous callers land on this branch — steer MCP-hosted
+        // agents to the connector (this is what the edge deny body surfaces).
+        ...mcpGuidance(urls) && { mcp: mcpGuidance(urls) }
       },
       verifiedAt: /* @__PURE__ */ new Date(),
       // Extract sessionId so decisions can be recorded for denials too