@astrasyncai/verification-gateway 5.10.0 → 5.12.0

package/dist/edge-config.d.mts

@@ -1,4 +1,4 @@
-import { G as GatewayConfig } from './types-DQrn_kei.mjs';
+import { G as GatewayConfig } from './types-DlshIIR-.mjs';
 import './metadata-capture.mjs';
 
 /**

package/dist/edge-config.d.ts

@@ -1,4 +1,4 @@
-import { G as GatewayConfig } from './types-CtFXmDzm.js';
+import { G as GatewayConfig } from './types-C_b4QTyO.js';
 import './metadata-capture.js';
 
 /**

package/dist/edge-config.js

@@ -31,7 +31,7 @@ __export(edge_config_exports, {
 module.exports = __toCommonJS(edge_config_exports);
 
 // src/version.ts
-var SDK_VERSION = "5.10.0";
+var SDK_VERSION = "5.12.0";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;

package/dist/edge-config.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/edge-config.ts","../src/version.ts","../src/http.ts"],"sourcesContent":["/**\n * Edge verification config — the per-endpoint policy the Trusted Agent\n * Gateway edge adapters (e.g. `@astrasyncai/adapter-lambda`) fetch from the\n * AstraSync dashboard to decide how much verification friction to apply\n * to inbound traffic, and where.\n *\n * Fetch pattern mirrors `well-known.ts`: TTL cache + stale-while-revalidate\n * + in-flight dedupe, with a `_reset*` hook for tests. Fail posture is\n * deliberately asymmetric: this module can NEVER put a site into enforce\n * mode on its own — enforce only ever originates from a successfully\n * fetched config, and a config that has gone stale past `maxStaleMs`\n * degrades back to observe.\n *\n * Which EdgeConfig fields each integration consumes:\n *\n * | Field                          | Edge adapters | SDK adapters (express/nextjs/mcp) |\n * | ------------------------------ | ------------- | --------------------------------- |\n * | `mode` (observe/enforce)       | yes           | —                                 |\n * | `depth`                        | yes           | —                                 |\n * | `pathRules`                    | yes           | —                                 |\n * | `sampling.anonymousBeaconRate` | yes           | yes — the SDK anonymous beacon    |\n * | `failurePosture`               | yes           | —                                 |\n *\n * The observe/enforce × depth posture is EDGE-ONLY by design: SDK adapters\n * enforce via the dashboard route policy (`fetchRoutes`), not via this\n * config, and consume only the `sampling` block for their anonymous\n * traffic beacon.\n */\n\nimport { sdkFetch } from './http';\nimport type { GatewayConfig } from './types';\n\n/**\n * Edge posture. Canonical Trusted Agent Gateway vocabulary:\n * `observe` ≈ the gateway's `passive` posture (verify +\n * record, enforce nothing), `enforce` ≈ `active`. New value set on a new\n * field name — do NOT reuse `GatewayPosture`'s `active`/`passive` here\n * (different field, different meaning: posture governs an agent-side\n * gateway; mode governs counterparty-side edge interception).\n */\nexport type EdgeMode = 'observe' | 'enforce';\n\n/**\n * How deep the edge checks each request — what is it → who is it → are\n * they allowed:\n * - `classify`     — UA / platform-fingerprint classification only; no\n *                    credential handling.\n * - `authenticate` — establish who is calling: detect and parse agent\n *                    credentials (X-Astra-*, VI SD-JWT, RFC 9421, ACP,\n *                    UCP, AP2…) and verify presented AstraSync identities.\n * - `authorize`    — full policy decision: credentials cryptographically\n *                    proven and PDLSS-evaluated via a verify-access round\n *                    trip. (US spelling on the wire, matching\n *                    `authorizeSettlement` and HTTP `Authorization`.)\n */\nexport type EdgeVerificationDepth = 'classify' | 'authenticate' | 'authorize';\n\nexport interface EdgePathRule {\n  /**\n   * `*`-wildcard glob matched against the request path. Matching is\n   * case-INsensitive and all regex metacharacters except `*` are\n   * escaped. (Deliberately diverges from the express adapter's\n   * `matchRoute`, which is historically case-sensitive by default —\n   * new surface ships case-insensitive matching as the default.)\n   */\n  pattern: string;\n  /** Pass the request through untouched (static assets); mode/depth ignored. */\n  skip?: boolean;\n  /** Override the top-level mode for this path. */\n  mode?: EdgeMode;\n  /** Override the top-level depth for this path. */\n  depth?: EdgeVerificationDepth;\n  /**\n   * Per-path beacon sampling opt-DOWN (VI uplift 1.2). The default is full\n   * capture; put a fractional rate on explicitly high-volume/low-value paths\n   * (static mirrors, health checks) instead of sampling commerce traffic.\n   */\n  sampling?: {\n    /** Fraction (0..1) of anonymous-bot requests that emit a beacon. */\n    anonymousBeaconRate: number;\n  };\n}\n\nexport interface EdgeConfig {\n  /** Shape version — bump on breaking changes. */\n  version: 1;\n  /** Default posture for paths no rule matches. */\n  mode: EdgeMode;\n  /** Default check depth for paths no rule matches. */\n  depth: EdgeVerificationDepth;\n  /** Ordered, first-match-wins. */\n  pathRules: EdgePathRule[];\n  sampling: {\n    /** Fraction (0..1) of anonymous-bot requests that emit a beacon. */\n    anonymousBeaconRate: number;\n  };\n  /**\n   * Query-string parameter names whose VALUES may be captured into\n   * `observedMetadata.queryParams` (VI uplift Part 4 — campaign/UTM\n   * attribution). Lowercase exact names or a single trailing-`*` glob\n   * (`utm_*`); ≤16 entries × ≤64 chars. ABSENT by default — the privacy\n   * stance (query values dropped at capture) is unchanged unless the\n   * endpoint owner explicitly configures this.\n   */\n  queryValueAllowlist?: string[];\n  /**\n   * 4.5.0: the EFFECTIVE failure posture is derived from the effective\n   * mode — fail posture follows success posture. Observe fails open\n   * (unreachable backend = pass-through, site never breaks); enforce fails\n   * closed on verification-infrastructure failure (503\n   * `VERIFICATION_UNAVAILABLE`, retry-later — see edge-core/pipeline). This\n   * field is retained on the wire for adapter compatibility and as a future\n   * explicit override; it is not consulted by the 4.5.x pipeline. Note the\n   * distinction from CONFIG staleness: a config stale past 24h still has\n   * enforce degraded to observe (`degradeToObserve`) — that is config-trust\n   * hygiene, independent of runtime verification availability.\n   */\n  failurePosture: 'open' | 'closed';\n}\n\n/**\n * The safe default: observe-only, classification depth, nothing enforced.\n * Served by the backend when an endpoint has never been configured, and\n * used by `getEdgeConfig` whenever no config can be fetched.\n *\n * Beacon rate 1.0 (VI uplift 1.2): every anonymous hit beacons by default —\n * a sampled denominator understates anonymous traffic in every dashboard\n * tile and no toggle can reveal the dropped rows. Sampling is a deliberate\n * per-path opt-down (`EdgePathRule.sampling`) for static/high-volume paths.\n */\nexport const DEFAULT_EDGE_CONFIG: EdgeConfig = Object.freeze({\n  version: 1,\n  mode: 'observe',\n  depth: 'classify',\n  pathRules: [],\n  sampling: Object.freeze({ anonymousBeaconRate: 1.0 }),\n  failurePosture: 'open',\n}) as EdgeConfig;\n\nconst EDGE_MODES: readonly string[] = ['observe', 'enforce'];\nconst EDGE_DEPTHS: readonly string[] = ['classify', 'authenticate', 'authorize'];\n\nfunction isSamplingShape(value: unknown): value is { anonymousBeaconRate: number } {\n  if (typeof value !== 'object' || value === null) return false;\n  const rate = (value as Record<string, unknown>).anonymousBeaconRate;\n  return typeof rate === 'number' && rate >= 0 && rate <= 1;\n}\n\n/** Structural guard for configs arriving over the wire. */\nexport function isEdgeConfig(value: unknown): value is EdgeConfig {\n  if (typeof value !== 'object' || value === null) return false;\n  const v = value as Record<string, unknown>;\n  if (v.version !== 1) return false;\n  if (!EDGE_MODES.includes(v.mode as string)) return false;\n  if (!EDGE_DEPTHS.includes(v.depth as string)) return false;\n  if (!Array.isArray(v.pathRules)) return false;\n  for (const rule of v.pathRules) {\n    if (typeof rule !== 'object' || rule === null) return false;\n    const r = rule as Record<string, unknown>;\n    if (typeof r.pattern !== 'string' || r.pattern.length === 0) return false;\n    if (r.mode !== undefined && !EDGE_MODES.includes(r.mode as string)) return false;\n    if (r.depth !== undefined && !EDGE_DEPTHS.includes(r.depth as string)) return false;\n    if (r.sampling !== undefined && !isSamplingShape(r.sampling)) return false;\n  }\n  if (!isSamplingShape(v.sampling)) return false;\n  if (v.queryValueAllowlist !== undefined) {\n    if (\n      !Array.isArray(v.queryValueAllowlist) ||\n      v.queryValueAllowlist.length > 16 ||\n      !v.queryValueAllowlist.every((e) => typeof e === 'string' && e.length > 0 && e.length <= 64)\n    ) {\n      return false;\n    }\n  }\n  return v.failurePosture === 'open';\n}\n\nexport interface FetchEdgeConfigSuccess {\n  edgeConfig: EdgeConfig;\n  etag?: string;\n}\n\nexport type FetchEdgeConfigResult = FetchEdgeConfigSuccess | { notModified: true } | null;\n\n/**\n * Fetch the edge config for an endpoint from the AstraSync backend.\n * `GET {apiBaseUrl}/endpoints/:counterpartyId/edge-config` with the same\n * auth headers as `fetchRoutes`. Pass the cached `etag` to get a cheap\n * `{ notModified: true }` on 304. Returns `null` on any failure —\n * the caller decides how to fall back.\n */\nexport async function fetchEdgeConfig(\n  config: Pick<GatewayConfig, 'apiBaseUrl' | 'apiKey'>,\n  counterpartyId: string,\n  opts?: { etag?: string; timeoutMs?: number }\n): Promise<FetchEdgeConfigResult> {\n  if (!counterpartyId) return null;\n  const headers: Record<string, string> = { Accept: 'application/json' };\n  if (config.apiKey) {\n    headers['Authorization'] = `Bearer ${config.apiKey}`;\n    headers['X-API-Key'] = config.apiKey;\n  }\n  if (opts?.etag) headers['If-None-Match'] = opts.etag;\n  try {\n    const response = await sdkFetch(\n      `${config.apiBaseUrl}/endpoints/${encodeURIComponent(counterpartyId)}/edge-config`,\n      { method: 'GET', headers, signal: AbortSignal.timeout(opts?.timeoutMs ?? 5000) }\n    );\n    if (response.status === 304) return { notModified: true };\n    if (!response.ok) return null;\n    const body = (await response.json()) as { data?: { edgeConfig?: unknown } };\n    const edgeConfig = body.data?.edgeConfig;\n    if (!isEdgeConfig(edgeConfig)) return null;\n    return { edgeConfig, etag: response.headers.get('etag') ?? undefined };\n  } catch {\n    return null;\n  }\n}\n\ninterface CacheEntry {\n  config: EdgeConfig;\n  etag?: string;\n  /** When the entry was last confirmed fresh (fetch or 304). */\n  lastSuccessAt: number;\n}\n\nconst DEFAULT_TTL_MS = 60 * 1000;\nconst DEFAULT_MAX_STALE_MS = 24 * 60 * 60 * 1000;\n\nconst cache = new Map<string, CacheEntry>();\nconst inflight = new Map<string, Promise<void>>();\n\nfunction cacheKey(apiBaseUrl: string, counterpartyId: string): string {\n  return `${apiBaseUrl}|${counterpartyId}`;\n}\n\n/** Copy of `config` with every enforce (top-level and per-rule) degraded to observe. */\nexport function degradeToObserve(config: EdgeConfig): EdgeConfig {\n  if (config.mode !== 'enforce' && !config.pathRules.some((r) => r.mode === 'enforce')) {\n    return config;\n  }\n  return {\n    ...config,\n    mode: 'observe',\n    pathRules: config.pathRules.map((r) => (r.mode === 'enforce' ? { ...r, mode: 'observe' } : r)),\n  };\n}\n\nasync function revalidate(\n  config: Pick<GatewayConfig, 'apiBaseUrl' | 'apiKey'>,\n  counterpartyId: string\n): Promise<void> {\n  const key = cacheKey(config.apiBaseUrl, counterpartyId);\n  const existing = inflight.get(key);\n  if (existing) return existing;\n\n  const promise = fetchEdgeConfig(config, counterpartyId, { etag: cache.get(key)?.etag })\n    .then((result) => {\n      if (result === null) return; // failure — cache untouched, caller falls back\n      const now = Date.now();\n      if ('notModified' in result) {\n        const entry = cache.get(key);\n        if (entry) entry.lastSuccessAt = now;\n        return;\n      }\n      cache.set(key, { config: result.edgeConfig, etag: result.etag, lastSuccessAt: now });\n    })\n    .finally(() => {\n      inflight.delete(key);\n    });\n\n  inflight.set(key, promise);\n  return promise;\n}\n\n/**\n * Get the edge config for an endpoint, cached. Never throws, never blocks\n * longer than one fetch.\n *\n * - Fresh cache (within `ttlMs`) → cached config, no network.\n * - Stale cache → cached config immediately + background revalidate\n *   (stale-while-revalidate). If the last successful fetch is older than\n *   `maxStaleMs` (default 24h), any enforce is degraded to observe — a\n *   long-dead backend can never keep a site enforcing.\n * - No cache → await one fetch; on failure return `DEFAULT_EDGE_CONFIG`\n *   (observe-only). Defaults never enforce.\n */\nexport async function getEdgeConfig(\n  config: Pick<GatewayConfig, 'apiBaseUrl' | 'apiKey'>,\n  counterpartyId: string,\n  opts?: { ttlMs?: number; maxStaleMs?: number }\n): Promise<EdgeConfig> {\n  const ttlMs = opts?.ttlMs ?? DEFAULT_TTL_MS;\n  const maxStaleMs = opts?.maxStaleMs ?? DEFAULT_MAX_STALE_MS;\n  const key = cacheKey(config.apiBaseUrl, counterpartyId);\n\n  const entry = cache.get(key);\n  if (entry) {\n    const age = Date.now() - entry.lastSuccessAt;\n    if (age > ttlMs) {\n      revalidate(config, counterpartyId).catch(() => {\n        // background refresh failed — stale entry remains until next call\n      });\n    }\n    return age > maxStaleMs ? degradeToObserve(entry.config) : entry.config;\n  }\n\n  await revalidate(config, counterpartyId).catch(() => {\n    // fetch failed — fall through to defaults\n  });\n  return cache.get(key)?.config ?? DEFAULT_EDGE_CONFIG;\n}\n\n/**\n * First-match-wins path-rule lookup. Case-insensitive `*` globs with all\n * other regex metacharacters escaped (a literal `.` in a pattern matches\n * only `.`). Returns `undefined` when no rule matches — the caller applies\n * the config's top-level mode/depth.\n */\nexport function matchEdgePathRule(rules: EdgePathRule[], path: string): EdgePathRule | undefined {\n  for (const rule of rules) {\n    if (globToRegExp(rule.pattern).test(path)) return rule;\n  }\n  return undefined;\n}\n\nfunction globToRegExp(pattern: string): RegExp {\n  const escaped = pattern.replace(/[.+?^${}()|[\\]\\\\]/g, '\\\\$&').replace(/\\*/g, '.*');\n  return new RegExp(`^${escaped}$`, 'i');\n}\n\n/** Reset cache — for testing only. */\nexport function _resetEdgeConfigCache(): void {\n  cache.clear();\n  inflight.clear();\n}\n","/**\n * Single source-of-truth for the SDK's\n * package version emitted on verify-access bodies (and any future\n * telemetry). Bumped alongside `package.json#version` on every release.\n *\n * Why a constant rather than `import pkg from '../package.json'`:\n * - `tsconfig.json` sets `rootDir: ./src`; importing the sibling\n *   package.json fails the build with \"outside rootDir\".\n * - Build-time string replacement (tsup `define`, esbuild banner, etc.)\n *   adds toolchain coupling for a trivial gain.\n * - Embedded readonly constant works in every environment (Node, browser,\n *   bundlers, Deno) without runtime fs / network access.\n *\n * Release discipline: a CI lint can grep `package.json#version` against\n * this constant if the two ever diverge in the wild. A manual bump\n * is fine — bumping both in the release-ceremony commit keeps them\n * lockstep.\n */\nexport const SDK_VERSION = '5.10.0';\n","/**\n * Shared outbound-HTTP wrapper — every request the SDK makes to the\n * AstraSync backend (or anywhere else) goes through `sdkFetch` so it\n * carries an identifying User-Agent.\n *\n * Why: Node's global fetch defaults to `user-agent: node`, which is\n * indistinguishable from every other Node client on the wire. Visit\n * Intelligence observed our own SDK/beacon traffic as anonymous \"node\"\n * visits. Self-identification is the platform's own medicine.\n *\n * Browser note: some browsers filter the User-Agent request header\n * silently (never throwing), so this is a no-op there — which is correct:\n * in a browser the page's real UA is the honest identity.\n */\n\nimport { SDK_VERSION } from './version';\n\nexport const SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;\n\n/**\n * Add the SDK User-Agent without changing the SHAPE of the caller's headers\n * (plain records stay plain records) — interceptors, adapters, and tests\n * read `init.headers` as a record, and `Headers` would also lowercase names.\n */\nfunction withUserAgent(initHeaders: HeadersInit | undefined): HeadersInit {\n  if (!initHeaders) return { 'user-agent': SDK_USER_AGENT };\n  if (initHeaders instanceof Headers) {\n    const copy = new Headers(initHeaders);\n    if (!copy.has('user-agent')) copy.set('user-agent', SDK_USER_AGENT);\n    return copy;\n  }\n  if (Array.isArray(initHeaders)) {\n    const has = initHeaders.some(([name]) => name.toLowerCase() === 'user-agent');\n    return has ? initHeaders : [...initHeaders, ['user-agent', SDK_USER_AGENT]];\n  }\n  const has = Object.keys(initHeaders).some((name) => name.toLowerCase() === 'user-agent');\n  return has ? initHeaders : { 'user-agent': SDK_USER_AGENT, ...initHeaders };\n}\n\nexport const sdkFetch: typeof fetch = (input, init) =>\n  fetch(input, { ...init, headers: withUserAgent(init?.headers) });\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACkBO,IAAM,cAAc;;;ACDpB,IAAM,iBAAiB,iBAAiB,WAAW;AAO1D,SAAS,cAAc,aAAmD;AACxE,MAAI,CAAC,YAAa,QAAO,EAAE,cAAc,eAAe;AACxD,MAAI,uBAAuB,SAAS;AAClC,UAAM,OAAO,IAAI,QAAQ,WAAW;AACpC,QAAI,CAAC,KAAK,IAAI,YAAY,EAAG,MAAK,IAAI,cAAc,cAAc;AAClE,WAAO;AAAA,EACT;AACA,MAAI,MAAM,QAAQ,WAAW,GAAG;AAC9B,UAAMA,OAAM,YAAY,KAAK,CAAC,CAAC,IAAI,MAAM,KAAK,YAAY,MAAM,YAAY;AAC5E,WAAOA,OAAM,cAAc,CAAC,GAAG,aAAa,CAAC,cAAc,cAAc,CAAC;AAAA,EAC5E;AACA,QAAM,MAAM,OAAO,KAAK,WAAW,EAAE,KAAK,CAAC,SAAS,KAAK,YAAY,MAAM,YAAY;AACvF,SAAO,MAAM,cAAc,EAAE,cAAc,gBAAgB,GAAG,YAAY;AAC5E;AAEO,IAAM,WAAyB,CAAC,OAAO,SAC5C,MAAM,OAAO,EAAE,GAAG,MAAM,SAAS,cAAc,MAAM,OAAO,EAAE,CAAC;;;AF0F1D,IAAM,sBAAkC,OAAO,OAAO;AAAA,EAC3D,SAAS;AAAA,EACT,MAAM;AAAA,EACN,OAAO;AAAA,EACP,WAAW,CAAC;AAAA,EACZ,UAAU,OAAO,OAAO,EAAE,qBAAqB,EAAI,CAAC;AAAA,EACpD,gBAAgB;AAClB,CAAC;AAED,IAAM,aAAgC,CAAC,WAAW,SAAS;AAC3D,IAAM,cAAiC,CAAC,YAAY,gBAAgB,WAAW;AAE/E,SAAS,gBAAgB,OAA0D;AACjF,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,OAAQ,MAAkC;AAChD,SAAO,OAAO,SAAS,YAAY,QAAQ,KAAK,QAAQ;AAC1D;AAGO,SAAS,aAAa,OAAqC;AAChE,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,IAAI;AACV,MAAI,EAAE,YAAY,EAAG,QAAO;AAC5B,MAAI,CAAC,WAAW,SAAS,EAAE,IAAc,EAAG,QAAO;AACnD,MAAI,CAAC,YAAY,SAAS,EAAE,KAAe,EAAG,QAAO;AACrD,MAAI,CAAC,MAAM,QAAQ,EAAE,SAAS,EAAG,QAAO;AACxC,aAAW,QAAQ,EAAE,WAAW;AAC9B,QAAI,OAAO,SAAS,YAAY,SAAS,KAAM,QAAO;AACtD,UAAM,IAAI;AACV,QAAI,OAAO,EAAE,YAAY,YAAY,EAAE,QAAQ,WAAW,EAAG,QAAO;AACpE,QAAI,EAAE,SAAS,UAAa,CAAC,WAAW,SAAS,EAAE,IAAc,EAAG,QAAO;AAC3E,QAAI,EAAE,UAAU,UAAa,CAAC,YAAY,SAAS,EAAE,KAAe,EAAG,QAAO;AAC9E,QAAI,EAAE,aAAa,UAAa,CAAC,gBAAgB,EAAE,QAAQ,EAAG,QAAO;AAAA,EACvE;AACA,MAAI,CAAC,gBAAgB,EAAE,QAAQ,EAAG,QAAO;AACzC,MAAI,EAAE,wBAAwB,QAAW;AACvC,QACE,CAAC,MAAM,QAAQ,EAAE,mBAAmB,KACpC,EAAE,oBAAoB,SAAS,MAC/B,CAAC,EAAE,oBAAoB,MAAM,CAAC,MAAM,OAAO,MAAM,YAAY,EAAE,SAAS,KAAK,EAAE,UAAU,EAAE,GAC3F;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO,EAAE,mBAAmB;AAC9B;AAgBA,eAAsB,gBACpB,QACA,gBACA,MACgC;AAChC,MAAI,CAAC,eAAgB,QAAO;AAC5B,QAAM,UAAkC,EAAE,QAAQ,mBAAmB;AACrE,MAAI,OAAO,QAAQ;AACjB,YAAQ,eAAe,IAAI,UAAU,OAAO,MAAM;AAClD,YAAQ,WAAW,IAAI,OAAO;AAAA,EAChC;AACA,MAAI,MAAM,KAAM,SAAQ,eAAe,IAAI,KAAK;AAChD,MAAI;AACF,UAAM,WAAW,MAAM;AAAA,MACrB,GAAG,OAAO,UAAU,cAAc,mBAAmB,cAAc,CAAC;AAAA,MACpE,EAAE,QAAQ,OAAO,SAAS,QAAQ,YAAY,QAAQ,MAAM,aAAa,GAAI,EAAE;AAAA,IACjF;AACA,QAAI,SAAS,WAAW,IAAK,QAAO,EAAE,aAAa,KAAK;AACxD,QAAI,CAAC,SAAS,GAAI,QAAO;AACzB,UAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,UAAM,aAAa,KAAK,MAAM;AAC9B,QAAI,CAAC,aAAa,UAAU,EAAG,QAAO;AACtC,WAAO,EAAE,YAAY,MAAM,SAAS,QAAQ,IAAI,MAAM,KAAK,OAAU;AAAA,EACvE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AASA,IAAM,iBAAiB,KAAK;AAC5B,IAAM,uBAAuB,KAAK,KAAK,KAAK;AAE5C,IAAM,QAAQ,oBAAI,IAAwB;AAC1C,IAAM,WAAW,oBAAI,IAA2B;AAEhD,SAAS,SAAS,YAAoB,gBAAgC;AACpE,SAAO,GAAG,UAAU,IAAI,cAAc;AACxC;AAGO,SAAS,iBAAiB,QAAgC;AAC/D,MAAI,OAAO,SAAS,aAAa,CAAC,OAAO,UAAU,KAAK,CAAC,MAAM,EAAE,SAAS,SAAS,GAAG;AACpF,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,MAAM;AAAA,IACN,WAAW,OAAO,UAAU,IAAI,CAAC,MAAO,EAAE,SAAS,YAAY,EAAE,GAAG,GAAG,MAAM,UAAU,IAAI,CAAE;AAAA,EAC/F;AACF;AAEA,eAAe,WACb,QACA,gBACe;AACf,QAAM,MAAM,SAAS,OAAO,YAAY,cAAc;AACtD,QAAM,WAAW,SAAS,IAAI,GAAG;AACjC,MAAI,SAAU,QAAO;AAErB,QAAM,UAAU,gBAAgB,QAAQ,gBAAgB,EAAE,MAAM,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,EACnF,KAAK,CAAC,WAAW;AAChB,QAAI,WAAW,KAAM;AACrB,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,iBAAiB,QAAQ;AAC3B,YAAM,QAAQ,MAAM,IAAI,GAAG;AAC3B,UAAI,MAAO,OAAM,gBAAgB;AACjC;AAAA,IACF;AACA,UAAM,IAAI,KAAK,EAAE,QAAQ,OAAO,YAAY,MAAM,OAAO,MAAM,eAAe,IAAI,CAAC;AAAA,EACrF,CAAC,EACA,QAAQ,MAAM;AACb,aAAS,OAAO,GAAG;AAAA,EACrB,CAAC;AAEH,WAAS,IAAI,KAAK,OAAO;AACzB,SAAO;AACT;AAcA,eAAsB,cACpB,QACA,gBACA,MACqB;AACrB,QAAM,QAAQ,MAAM,SAAS;AAC7B,QAAM,aAAa,MAAM,cAAc;AACvC,QAAM,MAAM,SAAS,OAAO,YAAY,cAAc;AAEtD,QAAM,QAAQ,MAAM,IAAI,GAAG;AAC3B,MAAI,OAAO;AACT,UAAM,MAAM,KAAK,IAAI,IAAI,MAAM;AAC/B,QAAI,MAAM,OAAO;AACf,iBAAW,QAAQ,cAAc,EAAE,MAAM,MAAM;AAAA,MAE/C,CAAC;AAAA,IACH;AACA,WAAO,MAAM,aAAa,iBAAiB,MAAM,MAAM,IAAI,MAAM;AAAA,EACnE;AAEA,QAAM,WAAW,QAAQ,cAAc,EAAE,MAAM,MAAM;AAAA,EAErD,CAAC;AACD,SAAO,MAAM,IAAI,GAAG,GAAG,UAAU;AACnC;AAQO,SAAS,kBAAkB,OAAuB,MAAwC;AAC/F,aAAW,QAAQ,OAAO;AACxB,QAAI,aAAa,KAAK,OAAO,EAAE,KAAK,IAAI,EAAG,QAAO;AAAA,EACpD;AACA,SAAO;AACT;AAEA,SAAS,aAAa,SAAyB;AAC7C,QAAM,UAAU,QAAQ,QAAQ,sBAAsB,MAAM,EAAE,QAAQ,OAAO,IAAI;AACjF,SAAO,IAAI,OAAO,IAAI,OAAO,KAAK,GAAG;AACvC;AAGO,SAAS,wBAA8B;AAC5C,QAAM,MAAM;AACZ,WAAS,MAAM;AACjB;","names":["has"]}
+{"version":3,"sources":["../src/edge-config.ts","../src/version.ts","../src/http.ts"],"sourcesContent":["/**\n * Edge verification config — the per-endpoint policy the Trusted Agent\n * Gateway edge adapters (e.g. `@astrasyncai/adapter-lambda`) fetch from the\n * AstraSync dashboard to decide how much verification friction to apply\n * to inbound traffic, and where.\n *\n * Fetch pattern mirrors `well-known.ts`: TTL cache + stale-while-revalidate\n * + in-flight dedupe, with a `_reset*` hook for tests. Fail posture is\n * deliberately asymmetric: this module can NEVER put a site into enforce\n * mode on its own — enforce only ever originates from a successfully\n * fetched config, and a config that has gone stale past `maxStaleMs`\n * degrades back to observe.\n *\n * Which EdgeConfig fields each integration consumes:\n *\n * | Field                          | Edge adapters | SDK adapters (express/nextjs/mcp) |\n * | ------------------------------ | ------------- | --------------------------------- |\n * | `mode` (observe/enforce)       | yes           | —                                 |\n * | `depth`                        | yes           | —                                 |\n * | `pathRules`                    | yes           | —                                 |\n * | `sampling.anonymousBeaconRate` | yes           | yes — the SDK anonymous beacon    |\n * | `failurePosture`               | yes           | —                                 |\n *\n * The observe/enforce × depth posture is EDGE-ONLY by design: SDK adapters\n * enforce via the dashboard route policy (`fetchRoutes`), not via this\n * config, and consume only the `sampling` block for their anonymous\n * traffic beacon.\n */\n\nimport { sdkFetch } from './http';\nimport type { GatewayConfig } from './types';\n\n/**\n * Edge posture. Canonical Trusted Agent Gateway vocabulary:\n * `observe` ≈ the gateway's `passive` posture (verify +\n * record, enforce nothing), `enforce` ≈ `active`. New value set on a new\n * field name — do NOT reuse `GatewayPosture`'s `active`/`passive` here\n * (different field, different meaning: posture governs an agent-side\n * gateway; mode governs counterparty-side edge interception).\n */\nexport type EdgeMode = 'observe' | 'enforce';\n\n/**\n * How deep the edge checks each request — what is it → who is it → are\n * they allowed:\n * - `classify`     — UA / platform-fingerprint classification only; no\n *                    credential handling.\n * - `authenticate` — establish who is calling: detect and parse agent\n *                    credentials (X-Astra-*, VI SD-JWT, RFC 9421, ACP,\n *                    UCP, AP2…) and verify presented AstraSync identities.\n * - `authorize`    — full policy decision: credentials cryptographically\n *                    proven and PDLSS-evaluated via a verify-access round\n *                    trip. (US spelling on the wire, matching\n *                    `authorizeSettlement` and HTTP `Authorization`.)\n */\nexport type EdgeVerificationDepth = 'classify' | 'authenticate' | 'authorize';\n\nexport interface EdgePathRule {\n  /**\n   * `*`-wildcard glob matched against the request path. Matching is\n   * case-INsensitive and all regex metacharacters except `*` are\n   * escaped. (Deliberately diverges from the express adapter's\n   * `matchRoute`, which is historically case-sensitive by default —\n   * new surface ships case-insensitive matching as the default.)\n   */\n  pattern: string;\n  /** Pass the request through untouched (static assets); mode/depth ignored. */\n  skip?: boolean;\n  /** Override the top-level mode for this path. */\n  mode?: EdgeMode;\n  /** Override the top-level depth for this path. */\n  depth?: EdgeVerificationDepth;\n  /**\n   * Per-path beacon sampling opt-DOWN (VI uplift 1.2). The default is full\n   * capture; put a fractional rate on explicitly high-volume/low-value paths\n   * (static mirrors, health checks) instead of sampling commerce traffic.\n   */\n  sampling?: {\n    /** Fraction (0..1) of anonymous-bot requests that emit a beacon. */\n    anonymousBeaconRate: number;\n  };\n}\n\nexport interface EdgeConfig {\n  /** Shape version — bump on breaking changes. */\n  version: 1;\n  /** Default posture for paths no rule matches. */\n  mode: EdgeMode;\n  /** Default check depth for paths no rule matches. */\n  depth: EdgeVerificationDepth;\n  /** Ordered, first-match-wins. */\n  pathRules: EdgePathRule[];\n  sampling: {\n    /** Fraction (0..1) of anonymous-bot requests that emit a beacon. */\n    anonymousBeaconRate: number;\n  };\n  /**\n   * Query-string parameter names whose VALUES may be captured into\n   * `observedMetadata.queryParams` (VI uplift Part 4 — campaign/UTM\n   * attribution). Lowercase exact names or a single trailing-`*` glob\n   * (`utm_*`); ≤16 entries × ≤64 chars. ABSENT by default — the privacy\n   * stance (query values dropped at capture) is unchanged unless the\n   * endpoint owner explicitly configures this.\n   */\n  queryValueAllowlist?: string[];\n  /**\n   * 4.5.0: the EFFECTIVE failure posture is derived from the effective\n   * mode — fail posture follows success posture. Observe fails open\n   * (unreachable backend = pass-through, site never breaks); enforce fails\n   * closed on verification-infrastructure failure (503\n   * `VERIFICATION_UNAVAILABLE`, retry-later — see edge-core/pipeline). This\n   * field is retained on the wire for adapter compatibility and as a future\n   * explicit override; it is not consulted by the 4.5.x pipeline. Note the\n   * distinction from CONFIG staleness: a config stale past 24h still has\n   * enforce degraded to observe (`degradeToObserve`) — that is config-trust\n   * hygiene, independent of runtime verification availability.\n   */\n  failurePosture: 'open' | 'closed';\n}\n\n/**\n * The safe default: observe-only, classification depth, nothing enforced.\n * Served by the backend when an endpoint has never been configured, and\n * used by `getEdgeConfig` whenever no config can be fetched.\n *\n * Beacon rate 1.0 (VI uplift 1.2): every anonymous hit beacons by default —\n * a sampled denominator understates anonymous traffic in every dashboard\n * tile and no toggle can reveal the dropped rows. Sampling is a deliberate\n * per-path opt-down (`EdgePathRule.sampling`) for static/high-volume paths.\n */\nexport const DEFAULT_EDGE_CONFIG: EdgeConfig = Object.freeze({\n  version: 1,\n  mode: 'observe',\n  depth: 'classify',\n  pathRules: [],\n  sampling: Object.freeze({ anonymousBeaconRate: 1.0 }),\n  failurePosture: 'open',\n}) as EdgeConfig;\n\nconst EDGE_MODES: readonly string[] = ['observe', 'enforce'];\nconst EDGE_DEPTHS: readonly string[] = ['classify', 'authenticate', 'authorize'];\n\nfunction isSamplingShape(value: unknown): value is { anonymousBeaconRate: number } {\n  if (typeof value !== 'object' || value === null) return false;\n  const rate = (value as Record<string, unknown>).anonymousBeaconRate;\n  return typeof rate === 'number' && rate >= 0 && rate <= 1;\n}\n\n/** Structural guard for configs arriving over the wire. */\nexport function isEdgeConfig(value: unknown): value is EdgeConfig {\n  if (typeof value !== 'object' || value === null) return false;\n  const v = value as Record<string, unknown>;\n  if (v.version !== 1) return false;\n  if (!EDGE_MODES.includes(v.mode as string)) return false;\n  if (!EDGE_DEPTHS.includes(v.depth as string)) return false;\n  if (!Array.isArray(v.pathRules)) return false;\n  for (const rule of v.pathRules) {\n    if (typeof rule !== 'object' || rule === null) return false;\n    const r = rule as Record<string, unknown>;\n    if (typeof r.pattern !== 'string' || r.pattern.length === 0) return false;\n    if (r.mode !== undefined && !EDGE_MODES.includes(r.mode as string)) return false;\n    if (r.depth !== undefined && !EDGE_DEPTHS.includes(r.depth as string)) return false;\n    if (r.sampling !== undefined && !isSamplingShape(r.sampling)) return false;\n  }\n  if (!isSamplingShape(v.sampling)) return false;\n  if (v.queryValueAllowlist !== undefined) {\n    if (\n      !Array.isArray(v.queryValueAllowlist) ||\n      v.queryValueAllowlist.length > 16 ||\n      !v.queryValueAllowlist.every((e) => typeof e === 'string' && e.length > 0 && e.length <= 64)\n    ) {\n      return false;\n    }\n  }\n  return v.failurePosture === 'open';\n}\n\nexport interface FetchEdgeConfigSuccess {\n  edgeConfig: EdgeConfig;\n  etag?: string;\n}\n\nexport type FetchEdgeConfigResult = FetchEdgeConfigSuccess | { notModified: true } | null;\n\n/**\n * Fetch the edge config for an endpoint from the AstraSync backend.\n * `GET {apiBaseUrl}/endpoints/:counterpartyId/edge-config` with the same\n * auth headers as `fetchRoutes`. Pass the cached `etag` to get a cheap\n * `{ notModified: true }` on 304. Returns `null` on any failure —\n * the caller decides how to fall back.\n */\nexport async function fetchEdgeConfig(\n  config: Pick<GatewayConfig, 'apiBaseUrl' | 'apiKey'>,\n  counterpartyId: string,\n  opts?: { etag?: string; timeoutMs?: number }\n): Promise<FetchEdgeConfigResult> {\n  if (!counterpartyId) return null;\n  const headers: Record<string, string> = { Accept: 'application/json' };\n  if (config.apiKey) {\n    headers['Authorization'] = `Bearer ${config.apiKey}`;\n    headers['X-API-Key'] = config.apiKey;\n  }\n  if (opts?.etag) headers['If-None-Match'] = opts.etag;\n  try {\n    const response = await sdkFetch(\n      `${config.apiBaseUrl}/endpoints/${encodeURIComponent(counterpartyId)}/edge-config`,\n      { method: 'GET', headers, signal: AbortSignal.timeout(opts?.timeoutMs ?? 5000) }\n    );\n    if (response.status === 304) return { notModified: true };\n    if (!response.ok) return null;\n    const body = (await response.json()) as { data?: { edgeConfig?: unknown } };\n    const edgeConfig = body.data?.edgeConfig;\n    if (!isEdgeConfig(edgeConfig)) return null;\n    return { edgeConfig, etag: response.headers.get('etag') ?? undefined };\n  } catch {\n    return null;\n  }\n}\n\ninterface CacheEntry {\n  config: EdgeConfig;\n  etag?: string;\n  /** When the entry was last confirmed fresh (fetch or 304). */\n  lastSuccessAt: number;\n}\n\nconst DEFAULT_TTL_MS = 60 * 1000;\nconst DEFAULT_MAX_STALE_MS = 24 * 60 * 60 * 1000;\n\nconst cache = new Map<string, CacheEntry>();\nconst inflight = new Map<string, Promise<void>>();\n\nfunction cacheKey(apiBaseUrl: string, counterpartyId: string): string {\n  return `${apiBaseUrl}|${counterpartyId}`;\n}\n\n/** Copy of `config` with every enforce (top-level and per-rule) degraded to observe. */\nexport function degradeToObserve(config: EdgeConfig): EdgeConfig {\n  if (config.mode !== 'enforce' && !config.pathRules.some((r) => r.mode === 'enforce')) {\n    return config;\n  }\n  return {\n    ...config,\n    mode: 'observe',\n    pathRules: config.pathRules.map((r) => (r.mode === 'enforce' ? { ...r, mode: 'observe' } : r)),\n  };\n}\n\nasync function revalidate(\n  config: Pick<GatewayConfig, 'apiBaseUrl' | 'apiKey'>,\n  counterpartyId: string\n): Promise<void> {\n  const key = cacheKey(config.apiBaseUrl, counterpartyId);\n  const existing = inflight.get(key);\n  if (existing) return existing;\n\n  const promise = fetchEdgeConfig(config, counterpartyId, { etag: cache.get(key)?.etag })\n    .then((result) => {\n      if (result === null) return; // failure — cache untouched, caller falls back\n      const now = Date.now();\n      if ('notModified' in result) {\n        const entry = cache.get(key);\n        if (entry) entry.lastSuccessAt = now;\n        return;\n      }\n      cache.set(key, { config: result.edgeConfig, etag: result.etag, lastSuccessAt: now });\n    })\n    .finally(() => {\n      inflight.delete(key);\n    });\n\n  inflight.set(key, promise);\n  return promise;\n}\n\n/**\n * Get the edge config for an endpoint, cached. Never throws, never blocks\n * longer than one fetch.\n *\n * - Fresh cache (within `ttlMs`) → cached config, no network.\n * - Stale cache → cached config immediately + background revalidate\n *   (stale-while-revalidate). If the last successful fetch is older than\n *   `maxStaleMs` (default 24h), any enforce is degraded to observe — a\n *   long-dead backend can never keep a site enforcing.\n * - No cache → await one fetch; on failure return `DEFAULT_EDGE_CONFIG`\n *   (observe-only). Defaults never enforce.\n */\nexport async function getEdgeConfig(\n  config: Pick<GatewayConfig, 'apiBaseUrl' | 'apiKey'>,\n  counterpartyId: string,\n  opts?: { ttlMs?: number; maxStaleMs?: number }\n): Promise<EdgeConfig> {\n  const ttlMs = opts?.ttlMs ?? DEFAULT_TTL_MS;\n  const maxStaleMs = opts?.maxStaleMs ?? DEFAULT_MAX_STALE_MS;\n  const key = cacheKey(config.apiBaseUrl, counterpartyId);\n\n  const entry = cache.get(key);\n  if (entry) {\n    const age = Date.now() - entry.lastSuccessAt;\n    if (age > ttlMs) {\n      revalidate(config, counterpartyId).catch(() => {\n        // background refresh failed — stale entry remains until next call\n      });\n    }\n    return age > maxStaleMs ? degradeToObserve(entry.config) : entry.config;\n  }\n\n  await revalidate(config, counterpartyId).catch(() => {\n    // fetch failed — fall through to defaults\n  });\n  return cache.get(key)?.config ?? DEFAULT_EDGE_CONFIG;\n}\n\n/**\n * First-match-wins path-rule lookup. Case-insensitive `*` globs with all\n * other regex metacharacters escaped (a literal `.` in a pattern matches\n * only `.`). Returns `undefined` when no rule matches — the caller applies\n * the config's top-level mode/depth.\n */\nexport function matchEdgePathRule(rules: EdgePathRule[], path: string): EdgePathRule | undefined {\n  for (const rule of rules) {\n    if (globToRegExp(rule.pattern).test(path)) return rule;\n  }\n  return undefined;\n}\n\nfunction globToRegExp(pattern: string): RegExp {\n  const escaped = pattern.replace(/[.+?^${}()|[\\]\\\\]/g, '\\\\$&').replace(/\\*/g, '.*');\n  return new RegExp(`^${escaped}$`, 'i');\n}\n\n/** Reset cache — for testing only. */\nexport function _resetEdgeConfigCache(): void {\n  cache.clear();\n  inflight.clear();\n}\n","/**\n * Single source-of-truth for the SDK's\n * package version emitted on verify-access bodies (and any future\n * telemetry). Bumped alongside `package.json#version` on every release.\n *\n * Why a constant rather than `import pkg from '../package.json'`:\n * - `tsconfig.json` sets `rootDir: ./src`; importing the sibling\n *   package.json fails the build with \"outside rootDir\".\n * - Build-time string replacement (tsup `define`, esbuild banner, etc.)\n *   adds toolchain coupling for a trivial gain.\n * - Embedded readonly constant works in every environment (Node, browser,\n *   bundlers, Deno) without runtime fs / network access.\n *\n * Release discipline: a CI lint can grep `package.json#version` against\n * this constant if the two ever diverge in the wild. A manual bump\n * is fine — bumping both in the release-ceremony commit keeps them\n * lockstep.\n */\nexport const SDK_VERSION = '5.12.0';\n","/**\n * Shared outbound-HTTP wrapper — every request the SDK makes to the\n * AstraSync backend (or anywhere else) goes through `sdkFetch` so it\n * carries an identifying User-Agent.\n *\n * Why: Node's global fetch defaults to `user-agent: node`, which is\n * indistinguishable from every other Node client on the wire. Visit\n * Intelligence observed our own SDK/beacon traffic as anonymous \"node\"\n * visits. Self-identification is the platform's own medicine.\n *\n * Browser note: some browsers filter the User-Agent request header\n * silently (never throwing), so this is a no-op there — which is correct:\n * in a browser the page's real UA is the honest identity.\n */\n\nimport { SDK_VERSION } from './version';\n\nexport const SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;\n\n/**\n * Add the SDK User-Agent without changing the SHAPE of the caller's headers\n * (plain records stay plain records) — interceptors, adapters, and tests\n * read `init.headers` as a record, and `Headers` would also lowercase names.\n */\nfunction withUserAgent(initHeaders: HeadersInit | undefined): HeadersInit {\n  if (!initHeaders) return { 'user-agent': SDK_USER_AGENT };\n  if (initHeaders instanceof Headers) {\n    const copy = new Headers(initHeaders);\n    if (!copy.has('user-agent')) copy.set('user-agent', SDK_USER_AGENT);\n    return copy;\n  }\n  if (Array.isArray(initHeaders)) {\n    const has = initHeaders.some(([name]) => name.toLowerCase() === 'user-agent');\n    return has ? initHeaders : [...initHeaders, ['user-agent', SDK_USER_AGENT]];\n  }\n  const has = Object.keys(initHeaders).some((name) => name.toLowerCase() === 'user-agent');\n  return has ? initHeaders : { 'user-agent': SDK_USER_AGENT, ...initHeaders };\n}\n\nexport const sdkFetch: typeof fetch = (input, init) =>\n  fetch(input, { ...init, headers: withUserAgent(init?.headers) });\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACkBO,IAAM,cAAc;;;ACDpB,IAAM,iBAAiB,iBAAiB,WAAW;AAO1D,SAAS,cAAc,aAAmD;AACxE,MAAI,CAAC,YAAa,QAAO,EAAE,cAAc,eAAe;AACxD,MAAI,uBAAuB,SAAS;AAClC,UAAM,OAAO,IAAI,QAAQ,WAAW;AACpC,QAAI,CAAC,KAAK,IAAI,YAAY,EAAG,MAAK,IAAI,cAAc,cAAc;AAClE,WAAO;AAAA,EACT;AACA,MAAI,MAAM,QAAQ,WAAW,GAAG;AAC9B,UAAMA,OAAM,YAAY,KAAK,CAAC,CAAC,IAAI,MAAM,KAAK,YAAY,MAAM,YAAY;AAC5E,WAAOA,OAAM,cAAc,CAAC,GAAG,aAAa,CAAC,cAAc,cAAc,CAAC;AAAA,EAC5E;AACA,QAAM,MAAM,OAAO,KAAK,WAAW,EAAE,KAAK,CAAC,SAAS,KAAK,YAAY,MAAM,YAAY;AACvF,SAAO,MAAM,cAAc,EAAE,cAAc,gBAAgB,GAAG,YAAY;AAC5E;AAEO,IAAM,WAAyB,CAAC,OAAO,SAC5C,MAAM,OAAO,EAAE,GAAG,MAAM,SAAS,cAAc,MAAM,OAAO,EAAE,CAAC;;;AF0F1D,IAAM,sBAAkC,OAAO,OAAO;AAAA,EAC3D,SAAS;AAAA,EACT,MAAM;AAAA,EACN,OAAO;AAAA,EACP,WAAW,CAAC;AAAA,EACZ,UAAU,OAAO,OAAO,EAAE,qBAAqB,EAAI,CAAC;AAAA,EACpD,gBAAgB;AAClB,CAAC;AAED,IAAM,aAAgC,CAAC,WAAW,SAAS;AAC3D,IAAM,cAAiC,CAAC,YAAY,gBAAgB,WAAW;AAE/E,SAAS,gBAAgB,OAA0D;AACjF,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,OAAQ,MAAkC;AAChD,SAAO,OAAO,SAAS,YAAY,QAAQ,KAAK,QAAQ;AAC1D;AAGO,SAAS,aAAa,OAAqC;AAChE,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,IAAI;AACV,MAAI,EAAE,YAAY,EAAG,QAAO;AAC5B,MAAI,CAAC,WAAW,SAAS,EAAE,IAAc,EAAG,QAAO;AACnD,MAAI,CAAC,YAAY,SAAS,EAAE,KAAe,EAAG,QAAO;AACrD,MAAI,CAAC,MAAM,QAAQ,EAAE,SAAS,EAAG,QAAO;AACxC,aAAW,QAAQ,EAAE,WAAW;AAC9B,QAAI,OAAO,SAAS,YAAY,SAAS,KAAM,QAAO;AACtD,UAAM,IAAI;AACV,QAAI,OAAO,EAAE,YAAY,YAAY,EAAE,QAAQ,WAAW,EAAG,QAAO;AACpE,QAAI,EAAE,SAAS,UAAa,CAAC,WAAW,SAAS,EAAE,IAAc,EAAG,QAAO;AAC3E,QAAI,EAAE,UAAU,UAAa,CAAC,YAAY,SAAS,EAAE,KAAe,EAAG,QAAO;AAC9E,QAAI,EAAE,aAAa,UAAa,CAAC,gBAAgB,EAAE,QAAQ,EAAG,QAAO;AAAA,EACvE;AACA,MAAI,CAAC,gBAAgB,EAAE,QAAQ,EAAG,QAAO;AACzC,MAAI,EAAE,wBAAwB,QAAW;AACvC,QACE,CAAC,MAAM,QAAQ,EAAE,mBAAmB,KACpC,EAAE,oBAAoB,SAAS,MAC/B,CAAC,EAAE,oBAAoB,MAAM,CAAC,MAAM,OAAO,MAAM,YAAY,EAAE,SAAS,KAAK,EAAE,UAAU,EAAE,GAC3F;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO,EAAE,mBAAmB;AAC9B;AAgBA,eAAsB,gBACpB,QACA,gBACA,MACgC;AAChC,MAAI,CAAC,eAAgB,QAAO;AAC5B,QAAM,UAAkC,EAAE,QAAQ,mBAAmB;AACrE,MAAI,OAAO,QAAQ;AACjB,YAAQ,eAAe,IAAI,UAAU,OAAO,MAAM;AAClD,YAAQ,WAAW,IAAI,OAAO;AAAA,EAChC;AACA,MAAI,MAAM,KAAM,SAAQ,eAAe,IAAI,KAAK;AAChD,MAAI;AACF,UAAM,WAAW,MAAM;AAAA,MACrB,GAAG,OAAO,UAAU,cAAc,mBAAmB,cAAc,CAAC;AAAA,MACpE,EAAE,QAAQ,OAAO,SAAS,QAAQ,YAAY,QAAQ,MAAM,aAAa,GAAI,EAAE;AAAA,IACjF;AACA,QAAI,SAAS,WAAW,IAAK,QAAO,EAAE,aAAa,KAAK;AACxD,QAAI,CAAC,SAAS,GAAI,QAAO;AACzB,UAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,UAAM,aAAa,KAAK,MAAM;AAC9B,QAAI,CAAC,aAAa,UAAU,EAAG,QAAO;AACtC,WAAO,EAAE,YAAY,MAAM,SAAS,QAAQ,IAAI,MAAM,KAAK,OAAU;AAAA,EACvE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AASA,IAAM,iBAAiB,KAAK;AAC5B,IAAM,uBAAuB,KAAK,KAAK,KAAK;AAE5C,IAAM,QAAQ,oBAAI,IAAwB;AAC1C,IAAM,WAAW,oBAAI,IAA2B;AAEhD,SAAS,SAAS,YAAoB,gBAAgC;AACpE,SAAO,GAAG,UAAU,IAAI,cAAc;AACxC;AAGO,SAAS,iBAAiB,QAAgC;AAC/D,MAAI,OAAO,SAAS,aAAa,CAAC,OAAO,UAAU,KAAK,CAAC,MAAM,EAAE,SAAS,SAAS,GAAG;AACpF,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,MAAM;AAAA,IACN,WAAW,OAAO,UAAU,IAAI,CAAC,MAAO,EAAE,SAAS,YAAY,EAAE,GAAG,GAAG,MAAM,UAAU,IAAI,CAAE;AAAA,EAC/F;AACF;AAEA,eAAe,WACb,QACA,gBACe;AACf,QAAM,MAAM,SAAS,OAAO,YAAY,cAAc;AACtD,QAAM,WAAW,SAAS,IAAI,GAAG;AACjC,MAAI,SAAU,QAAO;AAErB,QAAM,UAAU,gBAAgB,QAAQ,gBAAgB,EAAE,MAAM,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,EACnF,KAAK,CAAC,WAAW;AAChB,QAAI,WAAW,KAAM;AACrB,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,iBAAiB,QAAQ;AAC3B,YAAM,QAAQ,MAAM,IAAI,GAAG;AAC3B,UAAI,MAAO,OAAM,gBAAgB;AACjC;AAAA,IACF;AACA,UAAM,IAAI,KAAK,EAAE,QAAQ,OAAO,YAAY,MAAM,OAAO,MAAM,eAAe,IAAI,CAAC;AAAA,EACrF,CAAC,EACA,QAAQ,MAAM;AACb,aAAS,OAAO,GAAG;AAAA,EACrB,CAAC;AAEH,WAAS,IAAI,KAAK,OAAO;AACzB,SAAO;AACT;AAcA,eAAsB,cACpB,QACA,gBACA,MACqB;AACrB,QAAM,QAAQ,MAAM,SAAS;AAC7B,QAAM,aAAa,MAAM,cAAc;AACvC,QAAM,MAAM,SAAS,OAAO,YAAY,cAAc;AAEtD,QAAM,QAAQ,MAAM,IAAI,GAAG;AAC3B,MAAI,OAAO;AACT,UAAM,MAAM,KAAK,IAAI,IAAI,MAAM;AAC/B,QAAI,MAAM,OAAO;AACf,iBAAW,QAAQ,cAAc,EAAE,MAAM,MAAM;AAAA,MAE/C,CAAC;AAAA,IACH;AACA,WAAO,MAAM,aAAa,iBAAiB,MAAM,MAAM,IAAI,MAAM;AAAA,EACnE;AAEA,QAAM,WAAW,QAAQ,cAAc,EAAE,MAAM,MAAM;AAAA,EAErD,CAAC;AACD,SAAO,MAAM,IAAI,GAAG,GAAG,UAAU;AACnC;AAQO,SAAS,kBAAkB,OAAuB,MAAwC;AAC/F,aAAW,QAAQ,OAAO;AACxB,QAAI,aAAa,KAAK,OAAO,EAAE,KAAK,IAAI,EAAG,QAAO;AAAA,EACpD;AACA,SAAO;AACT;AAEA,SAAS,aAAa,SAAyB;AAC7C,QAAM,UAAU,QAAQ,QAAQ,sBAAsB,MAAM,EAAE,QAAQ,OAAO,IAAI;AACjF,SAAO,IAAI,OAAO,IAAI,OAAO,KAAK,GAAG;AACvC;AAGO,SAAS,wBAA8B;AAC5C,QAAM,MAAM;AACZ,WAAS,MAAM;AACjB;","names":["has"]}

package/dist/edge-config.mjs

@@ -1,5 +1,5 @@
 // src/version.ts
-var SDK_VERSION = "5.10.0";
+var SDK_VERSION = "5.12.0";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;

package/dist/edge-config.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/version.ts","../src/http.ts","../src/edge-config.ts"],"sourcesContent":["/**\n * Single source-of-truth for the SDK's\n * package version emitted on verify-access bodies (and any future\n * telemetry). Bumped alongside `package.json#version` on every release.\n *\n * Why a constant rather than `import pkg from '../package.json'`:\n * - `tsconfig.json` sets `rootDir: ./src`; importing the sibling\n *   package.json fails the build with \"outside rootDir\".\n * - Build-time string replacement (tsup `define`, esbuild banner, etc.)\n *   adds toolchain coupling for a trivial gain.\n * - Embedded readonly constant works in every environment (Node, browser,\n *   bundlers, Deno) without runtime fs / network access.\n *\n * Release discipline: a CI lint can grep `package.json#version` against\n * this constant if the two ever diverge in the wild. A manual bump\n * is fine — bumping both in the release-ceremony commit keeps them\n * lockstep.\n */\nexport const SDK_VERSION = '5.10.0';\n","/**\n * Shared outbound-HTTP wrapper — every request the SDK makes to the\n * AstraSync backend (or anywhere else) goes through `sdkFetch` so it\n * carries an identifying User-Agent.\n *\n * Why: Node's global fetch defaults to `user-agent: node`, which is\n * indistinguishable from every other Node client on the wire. Visit\n * Intelligence observed our own SDK/beacon traffic as anonymous \"node\"\n * visits. Self-identification is the platform's own medicine.\n *\n * Browser note: some browsers filter the User-Agent request header\n * silently (never throwing), so this is a no-op there — which is correct:\n * in a browser the page's real UA is the honest identity.\n */\n\nimport { SDK_VERSION } from './version';\n\nexport const SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;\n\n/**\n * Add the SDK User-Agent without changing the SHAPE of the caller's headers\n * (plain records stay plain records) — interceptors, adapters, and tests\n * read `init.headers` as a record, and `Headers` would also lowercase names.\n */\nfunction withUserAgent(initHeaders: HeadersInit | undefined): HeadersInit {\n  if (!initHeaders) return { 'user-agent': SDK_USER_AGENT };\n  if (initHeaders instanceof Headers) {\n    const copy = new Headers(initHeaders);\n    if (!copy.has('user-agent')) copy.set('user-agent', SDK_USER_AGENT);\n    return copy;\n  }\n  if (Array.isArray(initHeaders)) {\n    const has = initHeaders.some(([name]) => name.toLowerCase() === 'user-agent');\n    return has ? initHeaders : [...initHeaders, ['user-agent', SDK_USER_AGENT]];\n  }\n  const has = Object.keys(initHeaders).some((name) => name.toLowerCase() === 'user-agent');\n  return has ? initHeaders : { 'user-agent': SDK_USER_AGENT, ...initHeaders };\n}\n\nexport const sdkFetch: typeof fetch = (input, init) =>\n  fetch(input, { ...init, headers: withUserAgent(init?.headers) });\n","/**\n * Edge verification config — the per-endpoint policy the Trusted Agent\n * Gateway edge adapters (e.g. `@astrasyncai/adapter-lambda`) fetch from the\n * AstraSync dashboard to decide how much verification friction to apply\n * to inbound traffic, and where.\n *\n * Fetch pattern mirrors `well-known.ts`: TTL cache + stale-while-revalidate\n * + in-flight dedupe, with a `_reset*` hook for tests. Fail posture is\n * deliberately asymmetric: this module can NEVER put a site into enforce\n * mode on its own — enforce only ever originates from a successfully\n * fetched config, and a config that has gone stale past `maxStaleMs`\n * degrades back to observe.\n *\n * Which EdgeConfig fields each integration consumes:\n *\n * | Field                          | Edge adapters | SDK adapters (express/nextjs/mcp) |\n * | ------------------------------ | ------------- | --------------------------------- |\n * | `mode` (observe/enforce)       | yes           | —                                 |\n * | `depth`                        | yes           | —                                 |\n * | `pathRules`                    | yes           | —                                 |\n * | `sampling.anonymousBeaconRate` | yes           | yes — the SDK anonymous beacon    |\n * | `failurePosture`               | yes           | —                                 |\n *\n * The observe/enforce × depth posture is EDGE-ONLY by design: SDK adapters\n * enforce via the dashboard route policy (`fetchRoutes`), not via this\n * config, and consume only the `sampling` block for their anonymous\n * traffic beacon.\n */\n\nimport { sdkFetch } from './http';\nimport type { GatewayConfig } from './types';\n\n/**\n * Edge posture. Canonical Trusted Agent Gateway vocabulary:\n * `observe` ≈ the gateway's `passive` posture (verify +\n * record, enforce nothing), `enforce` ≈ `active`. New value set on a new\n * field name — do NOT reuse `GatewayPosture`'s `active`/`passive` here\n * (different field, different meaning: posture governs an agent-side\n * gateway; mode governs counterparty-side edge interception).\n */\nexport type EdgeMode = 'observe' | 'enforce';\n\n/**\n * How deep the edge checks each request — what is it → who is it → are\n * they allowed:\n * - `classify`     — UA / platform-fingerprint classification only; no\n *                    credential handling.\n * - `authenticate` — establish who is calling: detect and parse agent\n *                    credentials (X-Astra-*, VI SD-JWT, RFC 9421, ACP,\n *                    UCP, AP2…) and verify presented AstraSync identities.\n * - `authorize`    — full policy decision: credentials cryptographically\n *                    proven and PDLSS-evaluated via a verify-access round\n *                    trip. (US spelling on the wire, matching\n *                    `authorizeSettlement` and HTTP `Authorization`.)\n */\nexport type EdgeVerificationDepth = 'classify' | 'authenticate' | 'authorize';\n\nexport interface EdgePathRule {\n  /**\n   * `*`-wildcard glob matched against the request path. Matching is\n   * case-INsensitive and all regex metacharacters except `*` are\n   * escaped. (Deliberately diverges from the express adapter's\n   * `matchRoute`, which is historically case-sensitive by default —\n   * new surface ships case-insensitive matching as the default.)\n   */\n  pattern: string;\n  /** Pass the request through untouched (static assets); mode/depth ignored. */\n  skip?: boolean;\n  /** Override the top-level mode for this path. */\n  mode?: EdgeMode;\n  /** Override the top-level depth for this path. */\n  depth?: EdgeVerificationDepth;\n  /**\n   * Per-path beacon sampling opt-DOWN (VI uplift 1.2). The default is full\n   * capture; put a fractional rate on explicitly high-volume/low-value paths\n   * (static mirrors, health checks) instead of sampling commerce traffic.\n   */\n  sampling?: {\n    /** Fraction (0..1) of anonymous-bot requests that emit a beacon. */\n    anonymousBeaconRate: number;\n  };\n}\n\nexport interface EdgeConfig {\n  /** Shape version — bump on breaking changes. */\n  version: 1;\n  /** Default posture for paths no rule matches. */\n  mode: EdgeMode;\n  /** Default check depth for paths no rule matches. */\n  depth: EdgeVerificationDepth;\n  /** Ordered, first-match-wins. */\n  pathRules: EdgePathRule[];\n  sampling: {\n    /** Fraction (0..1) of anonymous-bot requests that emit a beacon. */\n    anonymousBeaconRate: number;\n  };\n  /**\n   * Query-string parameter names whose VALUES may be captured into\n   * `observedMetadata.queryParams` (VI uplift Part 4 — campaign/UTM\n   * attribution). Lowercase exact names or a single trailing-`*` glob\n   * (`utm_*`); ≤16 entries × ≤64 chars. ABSENT by default — the privacy\n   * stance (query values dropped at capture) is unchanged unless the\n   * endpoint owner explicitly configures this.\n   */\n  queryValueAllowlist?: string[];\n  /**\n   * 4.5.0: the EFFECTIVE failure posture is derived from the effective\n   * mode — fail posture follows success posture. Observe fails open\n   * (unreachable backend = pass-through, site never breaks); enforce fails\n   * closed on verification-infrastructure failure (503\n   * `VERIFICATION_UNAVAILABLE`, retry-later — see edge-core/pipeline). This\n   * field is retained on the wire for adapter compatibility and as a future\n   * explicit override; it is not consulted by the 4.5.x pipeline. Note the\n   * distinction from CONFIG staleness: a config stale past 24h still has\n   * enforce degraded to observe (`degradeToObserve`) — that is config-trust\n   * hygiene, independent of runtime verification availability.\n   */\n  failurePosture: 'open' | 'closed';\n}\n\n/**\n * The safe default: observe-only, classification depth, nothing enforced.\n * Served by the backend when an endpoint has never been configured, and\n * used by `getEdgeConfig` whenever no config can be fetched.\n *\n * Beacon rate 1.0 (VI uplift 1.2): every anonymous hit beacons by default —\n * a sampled denominator understates anonymous traffic in every dashboard\n * tile and no toggle can reveal the dropped rows. Sampling is a deliberate\n * per-path opt-down (`EdgePathRule.sampling`) for static/high-volume paths.\n */\nexport const DEFAULT_EDGE_CONFIG: EdgeConfig = Object.freeze({\n  version: 1,\n  mode: 'observe',\n  depth: 'classify',\n  pathRules: [],\n  sampling: Object.freeze({ anonymousBeaconRate: 1.0 }),\n  failurePosture: 'open',\n}) as EdgeConfig;\n\nconst EDGE_MODES: readonly string[] = ['observe', 'enforce'];\nconst EDGE_DEPTHS: readonly string[] = ['classify', 'authenticate', 'authorize'];\n\nfunction isSamplingShape(value: unknown): value is { anonymousBeaconRate: number } {\n  if (typeof value !== 'object' || value === null) return false;\n  const rate = (value as Record<string, unknown>).anonymousBeaconRate;\n  return typeof rate === 'number' && rate >= 0 && rate <= 1;\n}\n\n/** Structural guard for configs arriving over the wire. */\nexport function isEdgeConfig(value: unknown): value is EdgeConfig {\n  if (typeof value !== 'object' || value === null) return false;\n  const v = value as Record<string, unknown>;\n  if (v.version !== 1) return false;\n  if (!EDGE_MODES.includes(v.mode as string)) return false;\n  if (!EDGE_DEPTHS.includes(v.depth as string)) return false;\n  if (!Array.isArray(v.pathRules)) return false;\n  for (const rule of v.pathRules) {\n    if (typeof rule !== 'object' || rule === null) return false;\n    const r = rule as Record<string, unknown>;\n    if (typeof r.pattern !== 'string' || r.pattern.length === 0) return false;\n    if (r.mode !== undefined && !EDGE_MODES.includes(r.mode as string)) return false;\n    if (r.depth !== undefined && !EDGE_DEPTHS.includes(r.depth as string)) return false;\n    if (r.sampling !== undefined && !isSamplingShape(r.sampling)) return false;\n  }\n  if (!isSamplingShape(v.sampling)) return false;\n  if (v.queryValueAllowlist !== undefined) {\n    if (\n      !Array.isArray(v.queryValueAllowlist) ||\n      v.queryValueAllowlist.length > 16 ||\n      !v.queryValueAllowlist.every((e) => typeof e === 'string' && e.length > 0 && e.length <= 64)\n    ) {\n      return false;\n    }\n  }\n  return v.failurePosture === 'open';\n}\n\nexport interface FetchEdgeConfigSuccess {\n  edgeConfig: EdgeConfig;\n  etag?: string;\n}\n\nexport type FetchEdgeConfigResult = FetchEdgeConfigSuccess | { notModified: true } | null;\n\n/**\n * Fetch the edge config for an endpoint from the AstraSync backend.\n * `GET {apiBaseUrl}/endpoints/:counterpartyId/edge-config` with the same\n * auth headers as `fetchRoutes`. Pass the cached `etag` to get a cheap\n * `{ notModified: true }` on 304. Returns `null` on any failure —\n * the caller decides how to fall back.\n */\nexport async function fetchEdgeConfig(\n  config: Pick<GatewayConfig, 'apiBaseUrl' | 'apiKey'>,\n  counterpartyId: string,\n  opts?: { etag?: string; timeoutMs?: number }\n): Promise<FetchEdgeConfigResult> {\n  if (!counterpartyId) return null;\n  const headers: Record<string, string> = { Accept: 'application/json' };\n  if (config.apiKey) {\n    headers['Authorization'] = `Bearer ${config.apiKey}`;\n    headers['X-API-Key'] = config.apiKey;\n  }\n  if (opts?.etag) headers['If-None-Match'] = opts.etag;\n  try {\n    const response = await sdkFetch(\n      `${config.apiBaseUrl}/endpoints/${encodeURIComponent(counterpartyId)}/edge-config`,\n      { method: 'GET', headers, signal: AbortSignal.timeout(opts?.timeoutMs ?? 5000) }\n    );\n    if (response.status === 304) return { notModified: true };\n    if (!response.ok) return null;\n    const body = (await response.json()) as { data?: { edgeConfig?: unknown } };\n    const edgeConfig = body.data?.edgeConfig;\n    if (!isEdgeConfig(edgeConfig)) return null;\n    return { edgeConfig, etag: response.headers.get('etag') ?? undefined };\n  } catch {\n    return null;\n  }\n}\n\ninterface CacheEntry {\n  config: EdgeConfig;\n  etag?: string;\n  /** When the entry was last confirmed fresh (fetch or 304). */\n  lastSuccessAt: number;\n}\n\nconst DEFAULT_TTL_MS = 60 * 1000;\nconst DEFAULT_MAX_STALE_MS = 24 * 60 * 60 * 1000;\n\nconst cache = new Map<string, CacheEntry>();\nconst inflight = new Map<string, Promise<void>>();\n\nfunction cacheKey(apiBaseUrl: string, counterpartyId: string): string {\n  return `${apiBaseUrl}|${counterpartyId}`;\n}\n\n/** Copy of `config` with every enforce (top-level and per-rule) degraded to observe. */\nexport function degradeToObserve(config: EdgeConfig): EdgeConfig {\n  if (config.mode !== 'enforce' && !config.pathRules.some((r) => r.mode === 'enforce')) {\n    return config;\n  }\n  return {\n    ...config,\n    mode: 'observe',\n    pathRules: config.pathRules.map((r) => (r.mode === 'enforce' ? { ...r, mode: 'observe' } : r)),\n  };\n}\n\nasync function revalidate(\n  config: Pick<GatewayConfig, 'apiBaseUrl' | 'apiKey'>,\n  counterpartyId: string\n): Promise<void> {\n  const key = cacheKey(config.apiBaseUrl, counterpartyId);\n  const existing = inflight.get(key);\n  if (existing) return existing;\n\n  const promise = fetchEdgeConfig(config, counterpartyId, { etag: cache.get(key)?.etag })\n    .then((result) => {\n      if (result === null) return; // failure — cache untouched, caller falls back\n      const now = Date.now();\n      if ('notModified' in result) {\n        const entry = cache.get(key);\n        if (entry) entry.lastSuccessAt = now;\n        return;\n      }\n      cache.set(key, { config: result.edgeConfig, etag: result.etag, lastSuccessAt: now });\n    })\n    .finally(() => {\n      inflight.delete(key);\n    });\n\n  inflight.set(key, promise);\n  return promise;\n}\n\n/**\n * Get the edge config for an endpoint, cached. Never throws, never blocks\n * longer than one fetch.\n *\n * - Fresh cache (within `ttlMs`) → cached config, no network.\n * - Stale cache → cached config immediately + background revalidate\n *   (stale-while-revalidate). If the last successful fetch is older than\n *   `maxStaleMs` (default 24h), any enforce is degraded to observe — a\n *   long-dead backend can never keep a site enforcing.\n * - No cache → await one fetch; on failure return `DEFAULT_EDGE_CONFIG`\n *   (observe-only). Defaults never enforce.\n */\nexport async function getEdgeConfig(\n  config: Pick<GatewayConfig, 'apiBaseUrl' | 'apiKey'>,\n  counterpartyId: string,\n  opts?: { ttlMs?: number; maxStaleMs?: number }\n): Promise<EdgeConfig> {\n  const ttlMs = opts?.ttlMs ?? DEFAULT_TTL_MS;\n  const maxStaleMs = opts?.maxStaleMs ?? DEFAULT_MAX_STALE_MS;\n  const key = cacheKey(config.apiBaseUrl, counterpartyId);\n\n  const entry = cache.get(key);\n  if (entry) {\n    const age = Date.now() - entry.lastSuccessAt;\n    if (age > ttlMs) {\n      revalidate(config, counterpartyId).catch(() => {\n        // background refresh failed — stale entry remains until next call\n      });\n    }\n    return age > maxStaleMs ? degradeToObserve(entry.config) : entry.config;\n  }\n\n  await revalidate(config, counterpartyId).catch(() => {\n    // fetch failed — fall through to defaults\n  });\n  return cache.get(key)?.config ?? DEFAULT_EDGE_CONFIG;\n}\n\n/**\n * First-match-wins path-rule lookup. Case-insensitive `*` globs with all\n * other regex metacharacters escaped (a literal `.` in a pattern matches\n * only `.`). Returns `undefined` when no rule matches — the caller applies\n * the config's top-level mode/depth.\n */\nexport function matchEdgePathRule(rules: EdgePathRule[], path: string): EdgePathRule | undefined {\n  for (const rule of rules) {\n    if (globToRegExp(rule.pattern).test(path)) return rule;\n  }\n  return undefined;\n}\n\nfunction globToRegExp(pattern: string): RegExp {\n  const escaped = pattern.replace(/[.+?^${}()|[\\]\\\\]/g, '\\\\$&').replace(/\\*/g, '.*');\n  return new RegExp(`^${escaped}$`, 'i');\n}\n\n/** Reset cache — for testing only. */\nexport function _resetEdgeConfigCache(): void {\n  cache.clear();\n  inflight.clear();\n}\n"],"mappings":";AAkBO,IAAM,cAAc;;;ACDpB,IAAM,iBAAiB,iBAAiB,WAAW;AAO1D,SAAS,cAAc,aAAmD;AACxE,MAAI,CAAC,YAAa,QAAO,EAAE,cAAc,eAAe;AACxD,MAAI,uBAAuB,SAAS;AAClC,UAAM,OAAO,IAAI,QAAQ,WAAW;AACpC,QAAI,CAAC,KAAK,IAAI,YAAY,EAAG,MAAK,IAAI,cAAc,cAAc;AAClE,WAAO;AAAA,EACT;AACA,MAAI,MAAM,QAAQ,WAAW,GAAG;AAC9B,UAAMA,OAAM,YAAY,KAAK,CAAC,CAAC,IAAI,MAAM,KAAK,YAAY,MAAM,YAAY;AAC5E,WAAOA,OAAM,cAAc,CAAC,GAAG,aAAa,CAAC,cAAc,cAAc,CAAC;AAAA,EAC5E;AACA,QAAM,MAAM,OAAO,KAAK,WAAW,EAAE,KAAK,CAAC,SAAS,KAAK,YAAY,MAAM,YAAY;AACvF,SAAO,MAAM,cAAc,EAAE,cAAc,gBAAgB,GAAG,YAAY;AAC5E;AAEO,IAAM,WAAyB,CAAC,OAAO,SAC5C,MAAM,OAAO,EAAE,GAAG,MAAM,SAAS,cAAc,MAAM,OAAO,EAAE,CAAC;;;AC0F1D,IAAM,sBAAkC,OAAO,OAAO;AAAA,EAC3D,SAAS;AAAA,EACT,MAAM;AAAA,EACN,OAAO;AAAA,EACP,WAAW,CAAC;AAAA,EACZ,UAAU,OAAO,OAAO,EAAE,qBAAqB,EAAI,CAAC;AAAA,EACpD,gBAAgB;AAClB,CAAC;AAED,IAAM,aAAgC,CAAC,WAAW,SAAS;AAC3D,IAAM,cAAiC,CAAC,YAAY,gBAAgB,WAAW;AAE/E,SAAS,gBAAgB,OAA0D;AACjF,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,OAAQ,MAAkC;AAChD,SAAO,OAAO,SAAS,YAAY,QAAQ,KAAK,QAAQ;AAC1D;AAGO,SAAS,aAAa,OAAqC;AAChE,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,IAAI;AACV,MAAI,EAAE,YAAY,EAAG,QAAO;AAC5B,MAAI,CAAC,WAAW,SAAS,EAAE,IAAc,EAAG,QAAO;AACnD,MAAI,CAAC,YAAY,SAAS,EAAE,KAAe,EAAG,QAAO;AACrD,MAAI,CAAC,MAAM,QAAQ,EAAE,SAAS,EAAG,QAAO;AACxC,aAAW,QAAQ,EAAE,WAAW;AAC9B,QAAI,OAAO,SAAS,YAAY,SAAS,KAAM,QAAO;AACtD,UAAM,IAAI;AACV,QAAI,OAAO,EAAE,YAAY,YAAY,EAAE,QAAQ,WAAW,EAAG,QAAO;AACpE,QAAI,EAAE,SAAS,UAAa,CAAC,WAAW,SAAS,EAAE,IAAc,EAAG,QAAO;AAC3E,QAAI,EAAE,UAAU,UAAa,CAAC,YAAY,SAAS,EAAE,KAAe,EAAG,QAAO;AAC9E,QAAI,EAAE,aAAa,UAAa,CAAC,gBAAgB,EAAE,QAAQ,EAAG,QAAO;AAAA,EACvE;AACA,MAAI,CAAC,gBAAgB,EAAE,QAAQ,EAAG,QAAO;AACzC,MAAI,EAAE,wBAAwB,QAAW;AACvC,QACE,CAAC,MAAM,QAAQ,EAAE,mBAAmB,KACpC,EAAE,oBAAoB,SAAS,MAC/B,CAAC,EAAE,oBAAoB,MAAM,CAAC,MAAM,OAAO,MAAM,YAAY,EAAE,SAAS,KAAK,EAAE,UAAU,EAAE,GAC3F;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO,EAAE,mBAAmB;AAC9B;AAgBA,eAAsB,gBACpB,QACA,gBACA,MACgC;AAChC,MAAI,CAAC,eAAgB,QAAO;AAC5B,QAAM,UAAkC,EAAE,QAAQ,mBAAmB;AACrE,MAAI,OAAO,QAAQ;AACjB,YAAQ,eAAe,IAAI,UAAU,OAAO,MAAM;AAClD,YAAQ,WAAW,IAAI,OAAO;AAAA,EAChC;AACA,MAAI,MAAM,KAAM,SAAQ,eAAe,IAAI,KAAK;AAChD,MAAI;AACF,UAAM,WAAW,MAAM;AAAA,MACrB,GAAG,OAAO,UAAU,cAAc,mBAAmB,cAAc,CAAC;AAAA,MACpE,EAAE,QAAQ,OAAO,SAAS,QAAQ,YAAY,QAAQ,MAAM,aAAa,GAAI,EAAE;AAAA,IACjF;AACA,QAAI,SAAS,WAAW,IAAK,QAAO,EAAE,aAAa,KAAK;AACxD,QAAI,CAAC,SAAS,GAAI,QAAO;AACzB,UAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,UAAM,aAAa,KAAK,MAAM;AAC9B,QAAI,CAAC,aAAa,UAAU,EAAG,QAAO;AACtC,WAAO,EAAE,YAAY,MAAM,SAAS,QAAQ,IAAI,MAAM,KAAK,OAAU;AAAA,EACvE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AASA,IAAM,iBAAiB,KAAK;AAC5B,IAAM,uBAAuB,KAAK,KAAK,KAAK;AAE5C,IAAM,QAAQ,oBAAI,IAAwB;AAC1C,IAAM,WAAW,oBAAI,IAA2B;AAEhD,SAAS,SAAS,YAAoB,gBAAgC;AACpE,SAAO,GAAG,UAAU,IAAI,cAAc;AACxC;AAGO,SAAS,iBAAiB,QAAgC;AAC/D,MAAI,OAAO,SAAS,aAAa,CAAC,OAAO,UAAU,KAAK,CAAC,MAAM,EAAE,SAAS,SAAS,GAAG;AACpF,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,MAAM;AAAA,IACN,WAAW,OAAO,UAAU,IAAI,CAAC,MAAO,EAAE,SAAS,YAAY,EAAE,GAAG,GAAG,MAAM,UAAU,IAAI,CAAE;AAAA,EAC/F;AACF;AAEA,eAAe,WACb,QACA,gBACe;AACf,QAAM,MAAM,SAAS,OAAO,YAAY,cAAc;AACtD,QAAM,WAAW,SAAS,IAAI,GAAG;AACjC,MAAI,SAAU,QAAO;AAErB,QAAM,UAAU,gBAAgB,QAAQ,gBAAgB,EAAE,MAAM,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,EACnF,KAAK,CAAC,WAAW;AAChB,QAAI,WAAW,KAAM;AACrB,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,iBAAiB,QAAQ;AAC3B,YAAM,QAAQ,MAAM,IAAI,GAAG;AAC3B,UAAI,MAAO,OAAM,gBAAgB;AACjC;AAAA,IACF;AACA,UAAM,IAAI,KAAK,EAAE,QAAQ,OAAO,YAAY,MAAM,OAAO,MAAM,eAAe,IAAI,CAAC;AAAA,EACrF,CAAC,EACA,QAAQ,MAAM;AACb,aAAS,OAAO,GAAG;AAAA,EACrB,CAAC;AAEH,WAAS,IAAI,KAAK,OAAO;AACzB,SAAO;AACT;AAcA,eAAsB,cACpB,QACA,gBACA,MACqB;AACrB,QAAM,QAAQ,MAAM,SAAS;AAC7B,QAAM,aAAa,MAAM,cAAc;AACvC,QAAM,MAAM,SAAS,OAAO,YAAY,cAAc;AAEtD,QAAM,QAAQ,MAAM,IAAI,GAAG;AAC3B,MAAI,OAAO;AACT,UAAM,MAAM,KAAK,IAAI,IAAI,MAAM;AAC/B,QAAI,MAAM,OAAO;AACf,iBAAW,QAAQ,cAAc,EAAE,MAAM,MAAM;AAAA,MAE/C,CAAC;AAAA,IACH;AACA,WAAO,MAAM,aAAa,iBAAiB,MAAM,MAAM,IAAI,MAAM;AAAA,EACnE;AAEA,QAAM,WAAW,QAAQ,cAAc,EAAE,MAAM,MAAM;AAAA,EAErD,CAAC;AACD,SAAO,MAAM,IAAI,GAAG,GAAG,UAAU;AACnC;AAQO,SAAS,kBAAkB,OAAuB,MAAwC;AAC/F,aAAW,QAAQ,OAAO;AACxB,QAAI,aAAa,KAAK,OAAO,EAAE,KAAK,IAAI,EAAG,QAAO;AAAA,EACpD;AACA,SAAO;AACT;AAEA,SAAS,aAAa,SAAyB;AAC7C,QAAM,UAAU,QAAQ,QAAQ,sBAAsB,MAAM,EAAE,QAAQ,OAAO,IAAI;AACjF,SAAO,IAAI,OAAO,IAAI,OAAO,KAAK,GAAG;AACvC;AAGO,SAAS,wBAA8B;AAC5C,QAAM,MAAM;AACZ,WAAS,MAAM;AACjB;","names":["has"]}
+{"version":3,"sources":["../src/version.ts","../src/http.ts","../src/edge-config.ts"],"sourcesContent":["/**\n * Single source-of-truth for the SDK's\n * package version emitted on verify-access bodies (and any future\n * telemetry). Bumped alongside `package.json#version` on every release.\n *\n * Why a constant rather than `import pkg from '../package.json'`:\n * - `tsconfig.json` sets `rootDir: ./src`; importing the sibling\n *   package.json fails the build with \"outside rootDir\".\n * - Build-time string replacement (tsup `define`, esbuild banner, etc.)\n *   adds toolchain coupling for a trivial gain.\n * - Embedded readonly constant works in every environment (Node, browser,\n *   bundlers, Deno) without runtime fs / network access.\n *\n * Release discipline: a CI lint can grep `package.json#version` against\n * this constant if the two ever diverge in the wild. A manual bump\n * is fine — bumping both in the release-ceremony commit keeps them\n * lockstep.\n */\nexport const SDK_VERSION = '5.12.0';\n","/**\n * Shared outbound-HTTP wrapper — every request the SDK makes to the\n * AstraSync backend (or anywhere else) goes through `sdkFetch` so it\n * carries an identifying User-Agent.\n *\n * Why: Node's global fetch defaults to `user-agent: node`, which is\n * indistinguishable from every other Node client on the wire. Visit\n * Intelligence observed our own SDK/beacon traffic as anonymous \"node\"\n * visits. Self-identification is the platform's own medicine.\n *\n * Browser note: some browsers filter the User-Agent request header\n * silently (never throwing), so this is a no-op there — which is correct:\n * in a browser the page's real UA is the honest identity.\n */\n\nimport { SDK_VERSION } from './version';\n\nexport const SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;\n\n/**\n * Add the SDK User-Agent without changing the SHAPE of the caller's headers\n * (plain records stay plain records) — interceptors, adapters, and tests\n * read `init.headers` as a record, and `Headers` would also lowercase names.\n */\nfunction withUserAgent(initHeaders: HeadersInit | undefined): HeadersInit {\n  if (!initHeaders) return { 'user-agent': SDK_USER_AGENT };\n  if (initHeaders instanceof Headers) {\n    const copy = new Headers(initHeaders);\n    if (!copy.has('user-agent')) copy.set('user-agent', SDK_USER_AGENT);\n    return copy;\n  }\n  if (Array.isArray(initHeaders)) {\n    const has = initHeaders.some(([name]) => name.toLowerCase() === 'user-agent');\n    return has ? initHeaders : [...initHeaders, ['user-agent', SDK_USER_AGENT]];\n  }\n  const has = Object.keys(initHeaders).some((name) => name.toLowerCase() === 'user-agent');\n  return has ? initHeaders : { 'user-agent': SDK_USER_AGENT, ...initHeaders };\n}\n\nexport const sdkFetch: typeof fetch = (input, init) =>\n  fetch(input, { ...init, headers: withUserAgent(init?.headers) });\n","/**\n * Edge verification config — the per-endpoint policy the Trusted Agent\n * Gateway edge adapters (e.g. `@astrasyncai/adapter-lambda`) fetch from the\n * AstraSync dashboard to decide how much verification friction to apply\n * to inbound traffic, and where.\n *\n * Fetch pattern mirrors `well-known.ts`: TTL cache + stale-while-revalidate\n * + in-flight dedupe, with a `_reset*` hook for tests. Fail posture is\n * deliberately asymmetric: this module can NEVER put a site into enforce\n * mode on its own — enforce only ever originates from a successfully\n * fetched config, and a config that has gone stale past `maxStaleMs`\n * degrades back to observe.\n *\n * Which EdgeConfig fields each integration consumes:\n *\n * | Field                          | Edge adapters | SDK adapters (express/nextjs/mcp) |\n * | ------------------------------ | ------------- | --------------------------------- |\n * | `mode` (observe/enforce)       | yes           | —                                 |\n * | `depth`                        | yes           | —                                 |\n * | `pathRules`                    | yes           | —                                 |\n * | `sampling.anonymousBeaconRate` | yes           | yes — the SDK anonymous beacon    |\n * | `failurePosture`               | yes           | —                                 |\n *\n * The observe/enforce × depth posture is EDGE-ONLY by design: SDK adapters\n * enforce via the dashboard route policy (`fetchRoutes`), not via this\n * config, and consume only the `sampling` block for their anonymous\n * traffic beacon.\n */\n\nimport { sdkFetch } from './http';\nimport type { GatewayConfig } from './types';\n\n/**\n * Edge posture. Canonical Trusted Agent Gateway vocabulary:\n * `observe` ≈ the gateway's `passive` posture (verify +\n * record, enforce nothing), `enforce` ≈ `active`. New value set on a new\n * field name — do NOT reuse `GatewayPosture`'s `active`/`passive` here\n * (different field, different meaning: posture governs an agent-side\n * gateway; mode governs counterparty-side edge interception).\n */\nexport type EdgeMode = 'observe' | 'enforce';\n\n/**\n * How deep the edge checks each request — what is it → who is it → are\n * they allowed:\n * - `classify`     — UA / platform-fingerprint classification only; no\n *                    credential handling.\n * - `authenticate` — establish who is calling: detect and parse agent\n *                    credentials (X-Astra-*, VI SD-JWT, RFC 9421, ACP,\n *                    UCP, AP2…) and verify presented AstraSync identities.\n * - `authorize`    — full policy decision: credentials cryptographically\n *                    proven and PDLSS-evaluated via a verify-access round\n *                    trip. (US spelling on the wire, matching\n *                    `authorizeSettlement` and HTTP `Authorization`.)\n */\nexport type EdgeVerificationDepth = 'classify' | 'authenticate' | 'authorize';\n\nexport interface EdgePathRule {\n  /**\n   * `*`-wildcard glob matched against the request path. Matching is\n   * case-INsensitive and all regex metacharacters except `*` are\n   * escaped. (Deliberately diverges from the express adapter's\n   * `matchRoute`, which is historically case-sensitive by default —\n   * new surface ships case-insensitive matching as the default.)\n   */\n  pattern: string;\n  /** Pass the request through untouched (static assets); mode/depth ignored. */\n  skip?: boolean;\n  /** Override the top-level mode for this path. */\n  mode?: EdgeMode;\n  /** Override the top-level depth for this path. */\n  depth?: EdgeVerificationDepth;\n  /**\n   * Per-path beacon sampling opt-DOWN (VI uplift 1.2). The default is full\n   * capture; put a fractional rate on explicitly high-volume/low-value paths\n   * (static mirrors, health checks) instead of sampling commerce traffic.\n   */\n  sampling?: {\n    /** Fraction (0..1) of anonymous-bot requests that emit a beacon. */\n    anonymousBeaconRate: number;\n  };\n}\n\nexport interface EdgeConfig {\n  /** Shape version — bump on breaking changes. */\n  version: 1;\n  /** Default posture for paths no rule matches. */\n  mode: EdgeMode;\n  /** Default check depth for paths no rule matches. */\n  depth: EdgeVerificationDepth;\n  /** Ordered, first-match-wins. */\n  pathRules: EdgePathRule[];\n  sampling: {\n    /** Fraction (0..1) of anonymous-bot requests that emit a beacon. */\n    anonymousBeaconRate: number;\n  };\n  /**\n   * Query-string parameter names whose VALUES may be captured into\n   * `observedMetadata.queryParams` (VI uplift Part 4 — campaign/UTM\n   * attribution). Lowercase exact names or a single trailing-`*` glob\n   * (`utm_*`); ≤16 entries × ≤64 chars. ABSENT by default — the privacy\n   * stance (query values dropped at capture) is unchanged unless the\n   * endpoint owner explicitly configures this.\n   */\n  queryValueAllowlist?: string[];\n  /**\n   * 4.5.0: the EFFECTIVE failure posture is derived from the effective\n   * mode — fail posture follows success posture. Observe fails open\n   * (unreachable backend = pass-through, site never breaks); enforce fails\n   * closed on verification-infrastructure failure (503\n   * `VERIFICATION_UNAVAILABLE`, retry-later — see edge-core/pipeline). This\n   * field is retained on the wire for adapter compatibility and as a future\n   * explicit override; it is not consulted by the 4.5.x pipeline. Note the\n   * distinction from CONFIG staleness: a config stale past 24h still has\n   * enforce degraded to observe (`degradeToObserve`) — that is config-trust\n   * hygiene, independent of runtime verification availability.\n   */\n  failurePosture: 'open' | 'closed';\n}\n\n/**\n * The safe default: observe-only, classification depth, nothing enforced.\n * Served by the backend when an endpoint has never been configured, and\n * used by `getEdgeConfig` whenever no config can be fetched.\n *\n * Beacon rate 1.0 (VI uplift 1.2): every anonymous hit beacons by default —\n * a sampled denominator understates anonymous traffic in every dashboard\n * tile and no toggle can reveal the dropped rows. Sampling is a deliberate\n * per-path opt-down (`EdgePathRule.sampling`) for static/high-volume paths.\n */\nexport const DEFAULT_EDGE_CONFIG: EdgeConfig = Object.freeze({\n  version: 1,\n  mode: 'observe',\n  depth: 'classify',\n  pathRules: [],\n  sampling: Object.freeze({ anonymousBeaconRate: 1.0 }),\n  failurePosture: 'open',\n}) as EdgeConfig;\n\nconst EDGE_MODES: readonly string[] = ['observe', 'enforce'];\nconst EDGE_DEPTHS: readonly string[] = ['classify', 'authenticate', 'authorize'];\n\nfunction isSamplingShape(value: unknown): value is { anonymousBeaconRate: number } {\n  if (typeof value !== 'object' || value === null) return false;\n  const rate = (value as Record<string, unknown>).anonymousBeaconRate;\n  return typeof rate === 'number' && rate >= 0 && rate <= 1;\n}\n\n/** Structural guard for configs arriving over the wire. */\nexport function isEdgeConfig(value: unknown): value is EdgeConfig {\n  if (typeof value !== 'object' || value === null) return false;\n  const v = value as Record<string, unknown>;\n  if (v.version !== 1) return false;\n  if (!EDGE_MODES.includes(v.mode as string)) return false;\n  if (!EDGE_DEPTHS.includes(v.depth as string)) return false;\n  if (!Array.isArray(v.pathRules)) return false;\n  for (const rule of v.pathRules) {\n    if (typeof rule !== 'object' || rule === null) return false;\n    const r = rule as Record<string, unknown>;\n    if (typeof r.pattern !== 'string' || r.pattern.length === 0) return false;\n    if (r.mode !== undefined && !EDGE_MODES.includes(r.mode as string)) return false;\n    if (r.depth !== undefined && !EDGE_DEPTHS.includes(r.depth as string)) return false;\n    if (r.sampling !== undefined && !isSamplingShape(r.sampling)) return false;\n  }\n  if (!isSamplingShape(v.sampling)) return false;\n  if (v.queryValueAllowlist !== undefined) {\n    if (\n      !Array.isArray(v.queryValueAllowlist) ||\n      v.queryValueAllowlist.length > 16 ||\n      !v.queryValueAllowlist.every((e) => typeof e === 'string' && e.length > 0 && e.length <= 64)\n    ) {\n      return false;\n    }\n  }\n  return v.failurePosture === 'open';\n}\n\nexport interface FetchEdgeConfigSuccess {\n  edgeConfig: EdgeConfig;\n  etag?: string;\n}\n\nexport type FetchEdgeConfigResult = FetchEdgeConfigSuccess | { notModified: true } | null;\n\n/**\n * Fetch the edge config for an endpoint from the AstraSync backend.\n * `GET {apiBaseUrl}/endpoints/:counterpartyId/edge-config` with the same\n * auth headers as `fetchRoutes`. Pass the cached `etag` to get a cheap\n * `{ notModified: true }` on 304. Returns `null` on any failure —\n * the caller decides how to fall back.\n */\nexport async function fetchEdgeConfig(\n  config: Pick<GatewayConfig, 'apiBaseUrl' | 'apiKey'>,\n  counterpartyId: string,\n  opts?: { etag?: string; timeoutMs?: number }\n): Promise<FetchEdgeConfigResult> {\n  if (!counterpartyId) return null;\n  const headers: Record<string, string> = { Accept: 'application/json' };\n  if (config.apiKey) {\n    headers['Authorization'] = `Bearer ${config.apiKey}`;\n    headers['X-API-Key'] = config.apiKey;\n  }\n  if (opts?.etag) headers['If-None-Match'] = opts.etag;\n  try {\n    const response = await sdkFetch(\n      `${config.apiBaseUrl}/endpoints/${encodeURIComponent(counterpartyId)}/edge-config`,\n      { method: 'GET', headers, signal: AbortSignal.timeout(opts?.timeoutMs ?? 5000) }\n    );\n    if (response.status === 304) return { notModified: true };\n    if (!response.ok) return null;\n    const body = (await response.json()) as { data?: { edgeConfig?: unknown } };\n    const edgeConfig = body.data?.edgeConfig;\n    if (!isEdgeConfig(edgeConfig)) return null;\n    return { edgeConfig, etag: response.headers.get('etag') ?? undefined };\n  } catch {\n    return null;\n  }\n}\n\ninterface CacheEntry {\n  config: EdgeConfig;\n  etag?: string;\n  /** When the entry was last confirmed fresh (fetch or 304). */\n  lastSuccessAt: number;\n}\n\nconst DEFAULT_TTL_MS = 60 * 1000;\nconst DEFAULT_MAX_STALE_MS = 24 * 60 * 60 * 1000;\n\nconst cache = new Map<string, CacheEntry>();\nconst inflight = new Map<string, Promise<void>>();\n\nfunction cacheKey(apiBaseUrl: string, counterpartyId: string): string {\n  return `${apiBaseUrl}|${counterpartyId}`;\n}\n\n/** Copy of `config` with every enforce (top-level and per-rule) degraded to observe. */\nexport function degradeToObserve(config: EdgeConfig): EdgeConfig {\n  if (config.mode !== 'enforce' && !config.pathRules.some((r) => r.mode === 'enforce')) {\n    return config;\n  }\n  return {\n    ...config,\n    mode: 'observe',\n    pathRules: config.pathRules.map((r) => (r.mode === 'enforce' ? { ...r, mode: 'observe' } : r)),\n  };\n}\n\nasync function revalidate(\n  config: Pick<GatewayConfig, 'apiBaseUrl' | 'apiKey'>,\n  counterpartyId: string\n): Promise<void> {\n  const key = cacheKey(config.apiBaseUrl, counterpartyId);\n  const existing = inflight.get(key);\n  if (existing) return existing;\n\n  const promise = fetchEdgeConfig(config, counterpartyId, { etag: cache.get(key)?.etag })\n    .then((result) => {\n      if (result === null) return; // failure — cache untouched, caller falls back\n      const now = Date.now();\n      if ('notModified' in result) {\n        const entry = cache.get(key);\n        if (entry) entry.lastSuccessAt = now;\n        return;\n      }\n      cache.set(key, { config: result.edgeConfig, etag: result.etag, lastSuccessAt: now });\n    })\n    .finally(() => {\n      inflight.delete(key);\n    });\n\n  inflight.set(key, promise);\n  return promise;\n}\n\n/**\n * Get the edge config for an endpoint, cached. Never throws, never blocks\n * longer than one fetch.\n *\n * - Fresh cache (within `ttlMs`) → cached config, no network.\n * - Stale cache → cached config immediately + background revalidate\n *   (stale-while-revalidate). If the last successful fetch is older than\n *   `maxStaleMs` (default 24h), any enforce is degraded to observe — a\n *   long-dead backend can never keep a site enforcing.\n * - No cache → await one fetch; on failure return `DEFAULT_EDGE_CONFIG`\n *   (observe-only). Defaults never enforce.\n */\nexport async function getEdgeConfig(\n  config: Pick<GatewayConfig, 'apiBaseUrl' | 'apiKey'>,\n  counterpartyId: string,\n  opts?: { ttlMs?: number; maxStaleMs?: number }\n): Promise<EdgeConfig> {\n  const ttlMs = opts?.ttlMs ?? DEFAULT_TTL_MS;\n  const maxStaleMs = opts?.maxStaleMs ?? DEFAULT_MAX_STALE_MS;\n  const key = cacheKey(config.apiBaseUrl, counterpartyId);\n\n  const entry = cache.get(key);\n  if (entry) {\n    const age = Date.now() - entry.lastSuccessAt;\n    if (age > ttlMs) {\n      revalidate(config, counterpartyId).catch(() => {\n        // background refresh failed — stale entry remains until next call\n      });\n    }\n    return age > maxStaleMs ? degradeToObserve(entry.config) : entry.config;\n  }\n\n  await revalidate(config, counterpartyId).catch(() => {\n    // fetch failed — fall through to defaults\n  });\n  return cache.get(key)?.config ?? DEFAULT_EDGE_CONFIG;\n}\n\n/**\n * First-match-wins path-rule lookup. Case-insensitive `*` globs with all\n * other regex metacharacters escaped (a literal `.` in a pattern matches\n * only `.`). Returns `undefined` when no rule matches — the caller applies\n * the config's top-level mode/depth.\n */\nexport function matchEdgePathRule(rules: EdgePathRule[], path: string): EdgePathRule | undefined {\n  for (const rule of rules) {\n    if (globToRegExp(rule.pattern).test(path)) return rule;\n  }\n  return undefined;\n}\n\nfunction globToRegExp(pattern: string): RegExp {\n  const escaped = pattern.replace(/[.+?^${}()|[\\]\\\\]/g, '\\\\$&').replace(/\\*/g, '.*');\n  return new RegExp(`^${escaped}$`, 'i');\n}\n\n/** Reset cache — for testing only. */\nexport function _resetEdgeConfigCache(): void {\n  cache.clear();\n  inflight.clear();\n}\n"],"mappings":";AAkBO,IAAM,cAAc;;;ACDpB,IAAM,iBAAiB,iBAAiB,WAAW;AAO1D,SAAS,cAAc,aAAmD;AACxE,MAAI,CAAC,YAAa,QAAO,EAAE,cAAc,eAAe;AACxD,MAAI,uBAAuB,SAAS;AAClC,UAAM,OAAO,IAAI,QAAQ,WAAW;AACpC,QAAI,CAAC,KAAK,IAAI,YAAY,EAAG,MAAK,IAAI,cAAc,cAAc;AAClE,WAAO;AAAA,EACT;AACA,MAAI,MAAM,QAAQ,WAAW,GAAG;AAC9B,UAAMA,OAAM,YAAY,KAAK,CAAC,CAAC,IAAI,MAAM,KAAK,YAAY,MAAM,YAAY;AAC5E,WAAOA,OAAM,cAAc,CAAC,GAAG,aAAa,CAAC,cAAc,cAAc,CAAC;AAAA,EAC5E;AACA,QAAM,MAAM,OAAO,KAAK,WAAW,EAAE,KAAK,CAAC,SAAS,KAAK,YAAY,MAAM,YAAY;AACvF,SAAO,MAAM,cAAc,EAAE,cAAc,gBAAgB,GAAG,YAAY;AAC5E;AAEO,IAAM,WAAyB,CAAC,OAAO,SAC5C,MAAM,OAAO,EAAE,GAAG,MAAM,SAAS,cAAc,MAAM,OAAO,EAAE,CAAC;;;AC0F1D,IAAM,sBAAkC,OAAO,OAAO;AAAA,EAC3D,SAAS;AAAA,EACT,MAAM;AAAA,EACN,OAAO;AAAA,EACP,WAAW,CAAC;AAAA,EACZ,UAAU,OAAO,OAAO,EAAE,qBAAqB,EAAI,CAAC;AAAA,EACpD,gBAAgB;AAClB,CAAC;AAED,IAAM,aAAgC,CAAC,WAAW,SAAS;AAC3D,IAAM,cAAiC,CAAC,YAAY,gBAAgB,WAAW;AAE/E,SAAS,gBAAgB,OAA0D;AACjF,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,OAAQ,MAAkC;AAChD,SAAO,OAAO,SAAS,YAAY,QAAQ,KAAK,QAAQ;AAC1D;AAGO,SAAS,aAAa,OAAqC;AAChE,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,IAAI;AACV,MAAI,EAAE,YAAY,EAAG,QAAO;AAC5B,MAAI,CAAC,WAAW,SAAS,EAAE,IAAc,EAAG,QAAO;AACnD,MAAI,CAAC,YAAY,SAAS,EAAE,KAAe,EAAG,QAAO;AACrD,MAAI,CAAC,MAAM,QAAQ,EAAE,SAAS,EAAG,QAAO;AACxC,aAAW,QAAQ,EAAE,WAAW;AAC9B,QAAI,OAAO,SAAS,YAAY,SAAS,KAAM,QAAO;AACtD,UAAM,IAAI;AACV,QAAI,OAAO,EAAE,YAAY,YAAY,EAAE,QAAQ,WAAW,EAAG,QAAO;AACpE,QAAI,EAAE,SAAS,UAAa,CAAC,WAAW,SAAS,EAAE,IAAc,EAAG,QAAO;AAC3E,QAAI,EAAE,UAAU,UAAa,CAAC,YAAY,SAAS,EAAE,KAAe,EAAG,QAAO;AAC9E,QAAI,EAAE,aAAa,UAAa,CAAC,gBAAgB,EAAE,QAAQ,EAAG,QAAO;AAAA,EACvE;AACA,MAAI,CAAC,gBAAgB,EAAE,QAAQ,EAAG,QAAO;AACzC,MAAI,EAAE,wBAAwB,QAAW;AACvC,QACE,CAAC,MAAM,QAAQ,EAAE,mBAAmB,KACpC,EAAE,oBAAoB,SAAS,MAC/B,CAAC,EAAE,oBAAoB,MAAM,CAAC,MAAM,OAAO,MAAM,YAAY,EAAE,SAAS,KAAK,EAAE,UAAU,EAAE,GAC3F;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO,EAAE,mBAAmB;AAC9B;AAgBA,eAAsB,gBACpB,QACA,gBACA,MACgC;AAChC,MAAI,CAAC,eAAgB,QAAO;AAC5B,QAAM,UAAkC,EAAE,QAAQ,mBAAmB;AACrE,MAAI,OAAO,QAAQ;AACjB,YAAQ,eAAe,IAAI,UAAU,OAAO,MAAM;AAClD,YAAQ,WAAW,IAAI,OAAO;AAAA,EAChC;AACA,MAAI,MAAM,KAAM,SAAQ,eAAe,IAAI,KAAK;AAChD,MAAI;AACF,UAAM,WAAW,MAAM;AAAA,MACrB,GAAG,OAAO,UAAU,cAAc,mBAAmB,cAAc,CAAC;AAAA,MACpE,EAAE,QAAQ,OAAO,SAAS,QAAQ,YAAY,QAAQ,MAAM,aAAa,GAAI,EAAE;AAAA,IACjF;AACA,QAAI,SAAS,WAAW,IAAK,QAAO,EAAE,aAAa,KAAK;AACxD,QAAI,CAAC,SAAS,GAAI,QAAO;AACzB,UAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,UAAM,aAAa,KAAK,MAAM;AAC9B,QAAI,CAAC,aAAa,UAAU,EAAG,QAAO;AACtC,WAAO,EAAE,YAAY,MAAM,SAAS,QAAQ,IAAI,MAAM,KAAK,OAAU;AAAA,EACvE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AASA,IAAM,iBAAiB,KAAK;AAC5B,IAAM,uBAAuB,KAAK,KAAK,KAAK;AAE5C,IAAM,QAAQ,oBAAI,IAAwB;AAC1C,IAAM,WAAW,oBAAI,IAA2B;AAEhD,SAAS,SAAS,YAAoB,gBAAgC;AACpE,SAAO,GAAG,UAAU,IAAI,cAAc;AACxC;AAGO,SAAS,iBAAiB,QAAgC;AAC/D,MAAI,OAAO,SAAS,aAAa,CAAC,OAAO,UAAU,KAAK,CAAC,MAAM,EAAE,SAAS,SAAS,GAAG;AACpF,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,MAAM;AAAA,IACN,WAAW,OAAO,UAAU,IAAI,CAAC,MAAO,EAAE,SAAS,YAAY,EAAE,GAAG,GAAG,MAAM,UAAU,IAAI,CAAE;AAAA,EAC/F;AACF;AAEA,eAAe,WACb,QACA,gBACe;AACf,QAAM,MAAM,SAAS,OAAO,YAAY,cAAc;AACtD,QAAM,WAAW,SAAS,IAAI,GAAG;AACjC,MAAI,SAAU,QAAO;AAErB,QAAM,UAAU,gBAAgB,QAAQ,gBAAgB,EAAE,MAAM,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,EACnF,KAAK,CAAC,WAAW;AAChB,QAAI,WAAW,KAAM;AACrB,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,iBAAiB,QAAQ;AAC3B,YAAM,QAAQ,MAAM,IAAI,GAAG;AAC3B,UAAI,MAAO,OAAM,gBAAgB;AACjC;AAAA,IACF;AACA,UAAM,IAAI,KAAK,EAAE,QAAQ,OAAO,YAAY,MAAM,OAAO,MAAM,eAAe,IAAI,CAAC;AAAA,EACrF,CAAC,EACA,QAAQ,MAAM;AACb,aAAS,OAAO,GAAG;AAAA,EACrB,CAAC;AAEH,WAAS,IAAI,KAAK,OAAO;AACzB,SAAO;AACT;AAcA,eAAsB,cACpB,QACA,gBACA,MACqB;AACrB,QAAM,QAAQ,MAAM,SAAS;AAC7B,QAAM,aAAa,MAAM,cAAc;AACvC,QAAM,MAAM,SAAS,OAAO,YAAY,cAAc;AAEtD,QAAM,QAAQ,MAAM,IAAI,GAAG;AAC3B,MAAI,OAAO;AACT,UAAM,MAAM,KAAK,IAAI,IAAI,MAAM;AAC/B,QAAI,MAAM,OAAO;AACf,iBAAW,QAAQ,cAAc,EAAE,MAAM,MAAM;AAAA,MAE/C,CAAC;AAAA,IACH;AACA,WAAO,MAAM,aAAa,iBAAiB,MAAM,MAAM,IAAI,MAAM;AAAA,EACnE;AAEA,QAAM,WAAW,QAAQ,cAAc,EAAE,MAAM,MAAM;AAAA,EAErD,CAAC;AACD,SAAO,MAAM,IAAI,GAAG,GAAG,UAAU;AACnC;AAQO,SAAS,kBAAkB,OAAuB,MAAwC;AAC/F,aAAW,QAAQ,OAAO;AACxB,QAAI,aAAa,KAAK,OAAO,EAAE,KAAK,IAAI,EAAG,QAAO;AAAA,EACpD;AACA,SAAO;AACT;AAEA,SAAS,aAAa,SAAyB;AAC7C,QAAM,UAAU,QAAQ,QAAQ,sBAAsB,MAAM,EAAE,QAAQ,OAAO,IAAI;AACjF,SAAO,IAAI,OAAO,IAAI,OAAO,KAAK,GAAG;AACvC;AAGO,SAAS,wBAA8B;AAC5C,QAAM,MAAM;AACZ,WAAS,MAAM;AACjB;","names":["has"]}

package/dist/edge-core/index.d.mts

@@ -1,6 +1,6 @@
 import { EdgeMode, EdgeVerificationDepth, EdgeConfig } from '../edge-config.mjs';
 import { PlatformFingerprint } from '../platform-signatures.mjs';
-import { C as CommerceArtifactsPayload, V as VerificationRequest } from '../types-DQrn_kei.mjs';
+import { C as CommerceArtifactsPayload, V as VerificationRequest } from '../types-DlshIIR-.mjs';
 import { verify } from '../verify.mjs';
 import { ObservedMetadata } from '../metadata-capture.mjs';
 
@@ -193,6 +193,11 @@ interface EdgeCoreOptions {
      * beacons are awaited under their time budget.
      */
     waitUntil?: (promise: Promise<unknown>) => void;
+    /**
+     * 5.12.0: adapter name reported in beacon batch meta (`lambda-edge`,
+     * `cloudflare`, `fastly`, `vercel`) for delivery monitoring.
+     */
+    adapter?: string;
     /** Random source for beacon sampling — injectable for tests. */
     random?: () => number;
     /** Structured log sink. */
@@ -337,27 +342,137 @@ declare function applyOutcome(options: {
 }, outcome: TierOutcome, policy: EffectivePolicy): OutcomeApplication;
 
 /**
- * Time-budgeted event emission.
+ * Time-budgeted event emission + the edge beacon buffer.
  *
  * Some edge runtimes (Lambda@Edge) have no background-work scheduler —
  * anything not awaited before the handler returns may never run. So every
- * telemetry call is awaited under an explicit budget and DROPPED on
- * timeout: latency to the customer's traffic is bounded, and a slow
- * AstraSync API costs telemetry, never page loads. Runtimes that provide
- * `waitUntil` (Cloudflare Workers, Vercel Edge, Fastly Compute) can pass
- * it via {@link EdgeCoreOptions.waitUntil} to take beacons off the latency
- * path entirely.
+ * telemetry call is awaited under an explicit budget: latency to the
+ * customer's traffic is bounded, and a slow AstraSync API costs telemetry
+ * time, never page loads. Runtimes that provide `waitUntil` (Cloudflare
+ * Workers, Vercel Edge, Fastly Compute) pass it via
+ * {@link EdgeCoreOptions.waitUntil} to take beacons off the latency path.
+ *
+ * 5.12.0 (round 27.4): beacons go through a module-scope
+ * {@link BeaconBuffer} instead of one awaited POST each. Measured on
+ * staging, one-POST-per-request under a 300ms budget delivered only ~38%
+ * of beacons (origin RTT ~230ms, cold TLS ~700ms, so most POSTs were
+ * abandoned at the budget). The buffer:
+ *  - is bounded (1000 items, drop-oldest, counted);
+ *  - flushes batches of ≤100 same-destination items to
+ *    `/verification-activity/edge-events`, authenticated with the API key
+ *    when one is configured (unauthenticated batches are still accepted,
+ *    flagged as unverified attribution);
+ *  - keeps its in-flight flush across invocations — a POST abandoned at the
+ *    budget keeps running, and a frozen Lambda resumes it on thaw; items in
+ *    flight are never re-sent while it is pending;
+ *  - re-queues failed items (max 3 attempts; 429 honours Retry-After
+ *    without spending an attempt; a 401 on the key falls back to
+ *    unauthenticated delivery);
+ *  - collapses identical requests (same counterparty, IP, UA, method, path,
+ *    attempt id) inside a 60s window into one item carrying `repeatCount`;
+ *  - stamps each batch with `meta { droppedSinceLast, queueDepth, adapter,
+ *    version }` so the backend can report delivery loss.
+ * Delivery is at-least-once: a POST that times out after the backend
+ * recorded it is retried.
  */
 
 /** Await `promise` for at most `ms`; resolve `undefined` on timeout/error. */
 declare function withBudget<T>(promise: Promise<T>, ms: number): Promise<T | undefined>;
+/** One beacon item — the backend `unregisteredAttemptSchema` shape + observedAt. */
+type BeaconItem = Record<string, unknown> & {
+    repeatCount?: number;
+};
+/** Where a beacon goes. Items batch together only when every field matches. */
+interface BeaconDestination {
+    apiBaseUrl: string;
+    /** Sent as `Authorization: Bearer` when set (verified attribution). */
+    apiKey?: string;
+    /** The counterparty the item names — one batch never mixes counterparties. */
+    counterparty: string;
+    /** Adapter name reported in batch meta (e.g. `lambda-edge`). */
+    adapter?: string;
+}
+/** Batch metadata the backend records for delivery monitoring. */
+interface BeaconBatchMeta {
+    droppedSinceLast: number;
+    queueDepth: number;
+    adapter: string;
+    version: string;
+}
+interface BeaconBufferOptions {
+    /** Max queued items; the oldest is dropped (and counted) beyond it. Default 1000. */
+    maxItems?: number;
+    /** Max items per POST (backend cap). Default 100. */
+    maxBatch?: number;
+    /** Delivery attempts per item before it is dropped. Default 3. */
+    maxAttempts?: number;
+    /** Repeat-collapse window. Default 60s. */
+    collapseWindowMs?: number;
+    /** Max distinct repeat keys remembered (LRU). Default 1000. */
+    collapseMaxKeys?: number;
+    /** Per-POST timeout (the budget is the caller's; this bounds a hung POST). Default 10s. */
+    requestTimeoutMs?: number;
+    /** Pause after a failed POST before the next attempt. Default 1s. */
+    retryBackoffMs?: number;
+    /** Clock — injectable for tests. */
+    now?: () => number;
+}
+declare class BeaconBuffer {
+    private queue;
+    private droppedSinceLast;
+    private droppedTotal;
+    private deliveredTotal;
+    private inFlight;
+    private backoffUntil;
+    private readonly collapse;
+    /** Keys the backend answered 401 for — later batches go unauthenticated. */
+    private readonly rejectedKeys;
+    private readonly opts;
+    constructor(options?: BeaconBufferOptions);
+    /**
+     * Queue one beacon. With a `collapseKey`, a repeat inside the window is
+     * merged into a held aggregate (sent when the window closes) instead of
+     * becoming its own item.
+     */
+    enqueue(dest: BeaconDestination, item: BeaconItem, collapseKey?: string): void;
+    /**
+     * Deliver every eligible queued item. Concurrent callers share ONE
+     * in-flight drain (it survives the caller's budget and a Lambda freeze),
+     * so nothing in flight is ever sent twice; items queued while it runs are
+     * picked up by the same drain.
+     */
+    flush(): Promise<void>;
+    /** Counters for tests and diagnostics. */
+    stats(): {
+        queueDepth: number;
+        droppedSinceLast: number;
+        droppedTotal: number;
+        deliveredTotal: number;
+        flushing: boolean;
+    };
+    private push;
+    private dropOldest;
+    private countDropped;
+    private drain;
+    /** Oldest eligible item + up to maxBatch-1 more for the same destination. */
+    private takeBatch;
+    /** POST one batch. Returns false when the drain should pause (backoff). */
+    private send;
+    /** Put a failed batch back at the head of the queue (order preserved). */
+    private requeue;
+}
+/** The process-wide buffer every {@link emitBeacon} call feeds. */
+declare function getBeaconBuffer(): BeaconBuffer;
+/** Replace the process-wide buffer (tests; or custom limits at cold start). */
+declare function resetBeaconBuffer(options?: BeaconBufferOptions): BeaconBuffer;
 /**
  * Emit an unregistered-attempt beacon for `identified` (non-crypto depths)
- * and sampled `anonymous-bot` traffic. Unauthenticated by design; the
- * backend fingerprints the UA and find-or-provisions platform agents
- * server-side.
+ * and sampled `anonymous-bot` traffic: enqueue it, then give the shared
+ * flush up to `budgetMs` (or hand the flush to `waitUntil` when the runtime
+ * has one). Authenticated with `apiKey` when given; the backend
+ * fingerprints the UA and find-or-provisions platform agents server-side.
  */
-declare function emitBeacon(options: EdgeCoreOptions, req: NormalizedRequest, classification: Classification, budgetMs: number, queryValueAllowlist?: string[]): Promise<void>;
+declare function emitBeacon(options: EdgeCoreOptions, req: NormalizedRequest, classification: Classification, budgetMs: number, queryValueAllowlist?: string[], apiKey?: string): Promise<void>;
 /** Deterministic-in-tests sampling gate. */
 declare function sampled(rate: number, random?: () => number): boolean;
 
@@ -461,4 +576,4 @@ declare function requestUrl(req: NormalizedRequest, host: string): string;
  */
 declare function buildObservedMetadata(req: NormalizedRequest, queryValueAllowlist?: string[]): ObservedMetadata;
 
-export { ASAT_HEADERS, type Classification, type DenyBody, type DetectedCommerce, type EdgeCoreOptions, type EdgeDecision, type EdgeEvaluation, type EdgeLogger, type EffectivePolicy, type ManualReviewBody, type NormalizedRequest, type OutcomeApplication, type PlatformIo, type TierOutcome, type TrafficTier, _patterns, applyOutcome, buildDenyBody, buildManualReviewBody, buildObservedMetadata, buildVerificationRequest, classify, detectCommerce, emitBeacon, evaluateEdgeRequest, headerValue, outcomeFromVerifyResult, passUntouched, requestUrl, resolvePolicy, runTier, sampled, withBudget };
+export { ASAT_HEADERS, type BeaconBatchMeta, BeaconBuffer, type BeaconBufferOptions, type BeaconDestination, type BeaconItem, type Classification, type DenyBody, type DetectedCommerce, type EdgeCoreOptions, type EdgeDecision, type EdgeEvaluation, type EdgeLogger, type EffectivePolicy, type ManualReviewBody, type NormalizedRequest, type OutcomeApplication, type PlatformIo, type TierOutcome, type TrafficTier, _patterns, applyOutcome, buildDenyBody, buildManualReviewBody, buildObservedMetadata, buildVerificationRequest, classify, detectCommerce, emitBeacon, evaluateEdgeRequest, getBeaconBuffer, headerValue, outcomeFromVerifyResult, passUntouched, requestUrl, resetBeaconBuffer, resolvePolicy, runTier, sampled, withBudget };

package/dist/edge-core/index.d.ts

@@ -1,6 +1,6 @@
 import { EdgeMode, EdgeVerificationDepth, EdgeConfig } from '../edge-config.js';
 import { PlatformFingerprint } from '../platform-signatures.js';
-import { C as CommerceArtifactsPayload, V as VerificationRequest } from '../types-CtFXmDzm.js';
+import { C as CommerceArtifactsPayload, V as VerificationRequest } from '../types-C_b4QTyO.js';
 import { verify } from '../verify.js';
 import { ObservedMetadata } from '../metadata-capture.js';
 
@@ -193,6 +193,11 @@ interface EdgeCoreOptions {
      * beacons are awaited under their time budget.
      */
     waitUntil?: (promise: Promise<unknown>) => void;
+    /**
+     * 5.12.0: adapter name reported in beacon batch meta (`lambda-edge`,
+     * `cloudflare`, `fastly`, `vercel`) for delivery monitoring.
+     */
+    adapter?: string;
     /** Random source for beacon sampling — injectable for tests. */
     random?: () => number;
     /** Structured log sink. */
@@ -337,27 +342,137 @@ declare function applyOutcome(options: {
 }, outcome: TierOutcome, policy: EffectivePolicy): OutcomeApplication;
 
 /**
- * Time-budgeted event emission.
+ * Time-budgeted event emission + the edge beacon buffer.
  *
  * Some edge runtimes (Lambda@Edge) have no background-work scheduler —
  * anything not awaited before the handler returns may never run. So every
- * telemetry call is awaited under an explicit budget and DROPPED on
- * timeout: latency to the customer's traffic is bounded, and a slow
- * AstraSync API costs telemetry, never page loads. Runtimes that provide
- * `waitUntil` (Cloudflare Workers, Vercel Edge, Fastly Compute) can pass
- * it via {@link EdgeCoreOptions.waitUntil} to take beacons off the latency
- * path entirely.
+ * telemetry call is awaited under an explicit budget: latency to the
+ * customer's traffic is bounded, and a slow AstraSync API costs telemetry
+ * time, never page loads. Runtimes that provide `waitUntil` (Cloudflare
+ * Workers, Vercel Edge, Fastly Compute) pass it via
+ * {@link EdgeCoreOptions.waitUntil} to take beacons off the latency path.
+ *
+ * 5.12.0 (round 27.4): beacons go through a module-scope
+ * {@link BeaconBuffer} instead of one awaited POST each. Measured on
+ * staging, one-POST-per-request under a 300ms budget delivered only ~38%
+ * of beacons (origin RTT ~230ms, cold TLS ~700ms, so most POSTs were
+ * abandoned at the budget). The buffer:
+ *  - is bounded (1000 items, drop-oldest, counted);
+ *  - flushes batches of ≤100 same-destination items to
+ *    `/verification-activity/edge-events`, authenticated with the API key
+ *    when one is configured (unauthenticated batches are still accepted,
+ *    flagged as unverified attribution);
+ *  - keeps its in-flight flush across invocations — a POST abandoned at the
+ *    budget keeps running, and a frozen Lambda resumes it on thaw; items in
+ *    flight are never re-sent while it is pending;
+ *  - re-queues failed items (max 3 attempts; 429 honours Retry-After
+ *    without spending an attempt; a 401 on the key falls back to
+ *    unauthenticated delivery);
+ *  - collapses identical requests (same counterparty, IP, UA, method, path,
+ *    attempt id) inside a 60s window into one item carrying `repeatCount`;
+ *  - stamps each batch with `meta { droppedSinceLast, queueDepth, adapter,
+ *    version }` so the backend can report delivery loss.
+ * Delivery is at-least-once: a POST that times out after the backend
+ * recorded it is retried.
  */
 
 /** Await `promise` for at most `ms`; resolve `undefined` on timeout/error. */
 declare function withBudget<T>(promise: Promise<T>, ms: number): Promise<T | undefined>;
+/** One beacon item — the backend `unregisteredAttemptSchema` shape + observedAt. */
+type BeaconItem = Record<string, unknown> & {
+    repeatCount?: number;
+};
+/** Where a beacon goes. Items batch together only when every field matches. */
+interface BeaconDestination {
+    apiBaseUrl: string;
+    /** Sent as `Authorization: Bearer` when set (verified attribution). */
+    apiKey?: string;
+    /** The counterparty the item names — one batch never mixes counterparties. */
+    counterparty: string;
+    /** Adapter name reported in batch meta (e.g. `lambda-edge`). */
+    adapter?: string;
+}
+/** Batch metadata the backend records for delivery monitoring. */
+interface BeaconBatchMeta {
+    droppedSinceLast: number;
+    queueDepth: number;
+    adapter: string;
+    version: string;
+}
+interface BeaconBufferOptions {
+    /** Max queued items; the oldest is dropped (and counted) beyond it. Default 1000. */
+    maxItems?: number;
+    /** Max items per POST (backend cap). Default 100. */
+    maxBatch?: number;
+    /** Delivery attempts per item before it is dropped. Default 3. */
+    maxAttempts?: number;
+    /** Repeat-collapse window. Default 60s. */
+    collapseWindowMs?: number;
+    /** Max distinct repeat keys remembered (LRU). Default 1000. */
+    collapseMaxKeys?: number;
+    /** Per-POST timeout (the budget is the caller's; this bounds a hung POST). Default 10s. */
+    requestTimeoutMs?: number;
+    /** Pause after a failed POST before the next attempt. Default 1s. */
+    retryBackoffMs?: number;
+    /** Clock — injectable for tests. */
+    now?: () => number;
+}
+declare class BeaconBuffer {
+    private queue;
+    private droppedSinceLast;
+    private droppedTotal;
+    private deliveredTotal;
+    private inFlight;
+    private backoffUntil;
+    private readonly collapse;
+    /** Keys the backend answered 401 for — later batches go unauthenticated. */
+    private readonly rejectedKeys;
+    private readonly opts;
+    constructor(options?: BeaconBufferOptions);
+    /**
+     * Queue one beacon. With a `collapseKey`, a repeat inside the window is
+     * merged into a held aggregate (sent when the window closes) instead of
+     * becoming its own item.
+     */
+    enqueue(dest: BeaconDestination, item: BeaconItem, collapseKey?: string): void;
+    /**
+     * Deliver every eligible queued item. Concurrent callers share ONE
+     * in-flight drain (it survives the caller's budget and a Lambda freeze),
+     * so nothing in flight is ever sent twice; items queued while it runs are
+     * picked up by the same drain.
+     */
+    flush(): Promise<void>;
+    /** Counters for tests and diagnostics. */
+    stats(): {
+        queueDepth: number;
+        droppedSinceLast: number;
+        droppedTotal: number;
+        deliveredTotal: number;
+        flushing: boolean;
+    };
+    private push;
+    private dropOldest;
+    private countDropped;
+    private drain;
+    /** Oldest eligible item + up to maxBatch-1 more for the same destination. */
+    private takeBatch;
+    /** POST one batch. Returns false when the drain should pause (backoff). */
+    private send;
+    /** Put a failed batch back at the head of the queue (order preserved). */
+    private requeue;
+}
+/** The process-wide buffer every {@link emitBeacon} call feeds. */
+declare function getBeaconBuffer(): BeaconBuffer;
+/** Replace the process-wide buffer (tests; or custom limits at cold start). */
+declare function resetBeaconBuffer(options?: BeaconBufferOptions): BeaconBuffer;
 /**
  * Emit an unregistered-attempt beacon for `identified` (non-crypto depths)
- * and sampled `anonymous-bot` traffic. Unauthenticated by design; the
- * backend fingerprints the UA and find-or-provisions platform agents
- * server-side.
+ * and sampled `anonymous-bot` traffic: enqueue it, then give the shared
+ * flush up to `budgetMs` (or hand the flush to `waitUntil` when the runtime
+ * has one). Authenticated with `apiKey` when given; the backend
+ * fingerprints the UA and find-or-provisions platform agents server-side.
  */
-declare function emitBeacon(options: EdgeCoreOptions, req: NormalizedRequest, classification: Classification, budgetMs: number, queryValueAllowlist?: string[]): Promise<void>;
+declare function emitBeacon(options: EdgeCoreOptions, req: NormalizedRequest, classification: Classification, budgetMs: number, queryValueAllowlist?: string[], apiKey?: string): Promise<void>;
 /** Deterministic-in-tests sampling gate. */
 declare function sampled(rate: number, random?: () => number): boolean;
 
@@ -461,4 +576,4 @@ declare function requestUrl(req: NormalizedRequest, host: string): string;
  */
 declare function buildObservedMetadata(req: NormalizedRequest, queryValueAllowlist?: string[]): ObservedMetadata;
 
-export { ASAT_HEADERS, type Classification, type DenyBody, type DetectedCommerce, type EdgeCoreOptions, type EdgeDecision, type EdgeEvaluation, type EdgeLogger, type EffectivePolicy, type ManualReviewBody, type NormalizedRequest, type OutcomeApplication, type PlatformIo, type TierOutcome, type TrafficTier, _patterns, applyOutcome, buildDenyBody, buildManualReviewBody, buildObservedMetadata, buildVerificationRequest, classify, detectCommerce, emitBeacon, evaluateEdgeRequest, headerValue, outcomeFromVerifyResult, passUntouched, requestUrl, resolvePolicy, runTier, sampled, withBudget };
+export { ASAT_HEADERS, type BeaconBatchMeta, BeaconBuffer, type BeaconBufferOptions, type BeaconDestination, type BeaconItem, type Classification, type DenyBody, type DetectedCommerce, type EdgeCoreOptions, type EdgeDecision, type EdgeEvaluation, type EdgeLogger, type EffectivePolicy, type ManualReviewBody, type NormalizedRequest, type OutcomeApplication, type PlatformIo, type TierOutcome, type TrafficTier, _patterns, applyOutcome, buildDenyBody, buildManualReviewBody, buildObservedMetadata, buildVerificationRequest, classify, detectCommerce, emitBeacon, evaluateEdgeRequest, getBeaconBuffer, headerValue, outcomeFromVerifyResult, passUntouched, requestUrl, resetBeaconBuffer, resolvePolicy, runTier, sampled, withBudget };