@astrasyncai/verification-gateway 5.12.0 → 5.14.0

package/dist/index.d.mts

@@ -1515,16 +1515,6 @@ interface ReportAttemptOptions {
         retried: boolean;
     }) => void;
 }
-/**
- * Fetch the per-route policy for an endpoint from the AstraSync backend.
- * v2.9.7 moved policy authority into the dashboard — the SDK no longer
- * accepts `routes` from merchant-side source code, it fetches them from
- * here on init (and refreshes periodically).
- *
- * Returns `null` when the request fails for any reason — the caller decides
- * how to fall back (the middleware allows-all when no policy is loaded so
- * a misconfigured init doesn't take down the merchant's API).
- */
 declare function fetchRoutes(config: GatewayConfig, counterpartyId: string): Promise<RouteAccessConfigShape[] | null>;
 /**
  * Minimal shape of an EndpointRoute as the SDK consumes it. Mirrors the
@@ -4945,7 +4935,7 @@ declare function detectRuntime(userAgent: string | undefined | null): string | u
  * silently (never throwing), so this is a no-op there — which is correct:
  * in a browser the page's real UA is the honest identity.
  */
-declare const SDK_USER_AGENT = "astrasync-sdk/5.12.0";
+declare const SDK_USER_AGENT = "astrasync-sdk/5.14.0";
 declare const sdkFetch: typeof fetch;
 
 interface LocalPolicy {
@@ -5063,6 +5053,6 @@ declare function parseYaml(yamlContent: string): ParseResult;
  * is fine — bumping both in the release-ceremony commit keeps them
  * lockstep.
  */
-declare const SDK_VERSION = "5.12.0";
+declare const SDK_VERSION = "5.14.0";
 
 export { AgentClient, type AgentCredentials, type AgentProtocol, type AgentRecord, AstraSync, type AstraSyncConfig, type AstraSyncCredentials, AstraSyncError, type AttemptOutcome, type AttemptReport, AuthenticationError, type BuildGuidanceParams, CAPTURE_SCHEMA_VERSION, type CallerMetadata, ChallengeHandler, type CommerceArtifactsPayload, type CommerceContext, type CommercePipelineInput, type CommerceShieldProps, type ConsiderationItem, type ConsiderationSet, type CounterpartyType, DECLARED_SOURCE_MAX, DEFAULT_EDGE_CONFIG, type DynamicPlatformFingerprint, type EdgeConfig, type EdgeMode, type EdgePathRule, type EdgeVerificationDepth, type EnhancedVerificationResult, type ExpressMiddlewareOptions, type FetchEdgeConfigResult, type FetchEdgeConfigSuccess, type FiatSettlementBinding, type FrameworkConfig, type FulfilmentInfo, type GatewayConfig, type GuidanceEnvelope, type GuidanceInfo, type HealthResponse, KYDRequiredError, type ParseResult as LocalPolicyParseResult, type ValidationError as LocalPolicyValidationError, type ValidationResult as LocalPolicyValidationResult, MAX_HEADERS, MAX_HEADER_VALUE_BYTES, MAX_TOTAL_BYTES, MCP_VERIFIED_HOP_HEADER, MCP_VERIFIED_HOP_MAX_AGE_MS, type McpMiddlewareOptions, type MerchantSettlementToken, type ModelConfig, type NextJsMiddlewareOptions, type ObservedMetadata, type PDLSSConfig$1 as PDLSSConfig, type PDLSSDuration, type PDLSSInfo, type PDLSSLimits, type PDLSSPurpose, type PDLSSScope, type PDLSSSelfInstantiation, PLATFORM_AGENT_SIGNATURES, type PendingRegistrationResponse, type PlatformAgentVendor, type PlatformDetectionInput, type PlatformFingerprint, type PlatformSignatureDef, type PollRegistrationResult, type ProtocolTransport, RUNTIME_SIGNATURES, type RegisterOptions, type RegisterResult, RegistrationDeniedError, RegistrationExpiredError, type RegistrationResponse, RegistrationTimeoutError, type ReportAttemptOptions, type RouteAccessConfig, type RuntimeChallengeResult, type RuntimeSignature, type SDKOptions, SDK_USER_AGENT, type SanitizeHeadersResult, type SettlementArtifact, type SettlementArtifactBinding, type SettlementArtifactBindingBase, type SettlementDecision, type SettlementOutcomeInfo, type SettlementRequest, type StablecoinSettlementBinding, type StepUpApprovalInfo, type StepUpApprovalStatus, type StepUpOutcome, TRUST_LEVEL_RANGES, type TokenGuidance, type ToolGate, type ToolGateConfig, type TrustLevel, VERIFICATION_STATUS_HEADER, SDK_VERSION as VERSION, type VerificationInterstitialProps, type VerificationRequest, type VerificationResult, type VerifiedAgent, type VerifiedDeveloper, type VerifiedHopMarker, type VerifiedOrganization, type VerifyOptions, type VerifyResponse, type WaitForApprovalOptions, type WellKnownAgenticCommerce, _resetEdgeConfigCache, index as agent, authorizeSettlement, awaitStepUpApproval, buildGuidance, buildSdkObservedMetadata, buildVerificationUnavailableBody, clearCache, createMcpMiddleware, degradeToObserve, denyStatusFor, deriveConnectionFromHeaders, detectPlatformFingerprint, detectRuntime, express, extractApiKeyFormat, extractCredentials, extractMcpCredentials, extractPlatformHeaders, fetchEdgeConfig, fetchRoutes, getCachedWellKnownUrls, getEdgeConfig, getTrustLevel, getWellKnownUrls, hasCredentials, isEdgeConfig, isRejectedIdentityClaim, isVerificationUnavailable, isVerifiedHopValidFor, matchEdgePathRule, matchPlatformSignature, nextjs, normalizeDeclaredSource, parseYaml as parseLocalPolicyYaml, parseVerifiedHop, pollStepUpStatus, prefetchWellKnown, quickVerify, recordDecision, reportAttempt, reportUnregisteredAttempt, sanitizeHeaders, sdk, sdkFetch, serializeVerifiedHop, setMcpMeta, index$1 as transport, unavailableRetryAfterSeconds, validatePolicy as validateLocalPolicy, verify };

package/dist/index.d.ts

@@ -1515,16 +1515,6 @@ interface ReportAttemptOptions {
         retried: boolean;
     }) => void;
 }
-/**
- * Fetch the per-route policy for an endpoint from the AstraSync backend.
- * v2.9.7 moved policy authority into the dashboard — the SDK no longer
- * accepts `routes` from merchant-side source code, it fetches them from
- * here on init (and refreshes periodically).
- *
- * Returns `null` when the request fails for any reason — the caller decides
- * how to fall back (the middleware allows-all when no policy is loaded so
- * a misconfigured init doesn't take down the merchant's API).
- */
 declare function fetchRoutes(config: GatewayConfig, counterpartyId: string): Promise<RouteAccessConfigShape[] | null>;
 /**
  * Minimal shape of an EndpointRoute as the SDK consumes it. Mirrors the
@@ -4945,7 +4935,7 @@ declare function detectRuntime(userAgent: string | undefined | null): string | u
  * silently (never throwing), so this is a no-op there — which is correct:
  * in a browser the page's real UA is the honest identity.
  */
-declare const SDK_USER_AGENT = "astrasync-sdk/5.12.0";
+declare const SDK_USER_AGENT = "astrasync-sdk/5.14.0";
 declare const sdkFetch: typeof fetch;
 
 interface LocalPolicy {
@@ -5063,6 +5053,6 @@ declare function parseYaml(yamlContent: string): ParseResult;
  * is fine — bumping both in the release-ceremony commit keeps them
  * lockstep.
  */
-declare const SDK_VERSION = "5.12.0";
+declare const SDK_VERSION = "5.14.0";
 
 export { AgentClient, type AgentCredentials, type AgentProtocol, type AgentRecord, AstraSync, type AstraSyncConfig, type AstraSyncCredentials, AstraSyncError, type AttemptOutcome, type AttemptReport, AuthenticationError, type BuildGuidanceParams, CAPTURE_SCHEMA_VERSION, type CallerMetadata, ChallengeHandler, type CommerceArtifactsPayload, type CommerceContext, type CommercePipelineInput, type CommerceShieldProps, type ConsiderationItem, type ConsiderationSet, type CounterpartyType, DECLARED_SOURCE_MAX, DEFAULT_EDGE_CONFIG, type DynamicPlatformFingerprint, type EdgeConfig, type EdgeMode, type EdgePathRule, type EdgeVerificationDepth, type EnhancedVerificationResult, type ExpressMiddlewareOptions, type FetchEdgeConfigResult, type FetchEdgeConfigSuccess, type FiatSettlementBinding, type FrameworkConfig, type FulfilmentInfo, type GatewayConfig, type GuidanceEnvelope, type GuidanceInfo, type HealthResponse, KYDRequiredError, type ParseResult as LocalPolicyParseResult, type ValidationError as LocalPolicyValidationError, type ValidationResult as LocalPolicyValidationResult, MAX_HEADERS, MAX_HEADER_VALUE_BYTES, MAX_TOTAL_BYTES, MCP_VERIFIED_HOP_HEADER, MCP_VERIFIED_HOP_MAX_AGE_MS, type McpMiddlewareOptions, type MerchantSettlementToken, type ModelConfig, type NextJsMiddlewareOptions, type ObservedMetadata, type PDLSSConfig$1 as PDLSSConfig, type PDLSSDuration, type PDLSSInfo, type PDLSSLimits, type PDLSSPurpose, type PDLSSScope, type PDLSSSelfInstantiation, PLATFORM_AGENT_SIGNATURES, type PendingRegistrationResponse, type PlatformAgentVendor, type PlatformDetectionInput, type PlatformFingerprint, type PlatformSignatureDef, type PollRegistrationResult, type ProtocolTransport, RUNTIME_SIGNATURES, type RegisterOptions, type RegisterResult, RegistrationDeniedError, RegistrationExpiredError, type RegistrationResponse, RegistrationTimeoutError, type ReportAttemptOptions, type RouteAccessConfig, type RuntimeChallengeResult, type RuntimeSignature, type SDKOptions, SDK_USER_AGENT, type SanitizeHeadersResult, type SettlementArtifact, type SettlementArtifactBinding, type SettlementArtifactBindingBase, type SettlementDecision, type SettlementOutcomeInfo, type SettlementRequest, type StablecoinSettlementBinding, type StepUpApprovalInfo, type StepUpApprovalStatus, type StepUpOutcome, TRUST_LEVEL_RANGES, type TokenGuidance, type ToolGate, type ToolGateConfig, type TrustLevel, VERIFICATION_STATUS_HEADER, SDK_VERSION as VERSION, type VerificationInterstitialProps, type VerificationRequest, type VerificationResult, type VerifiedAgent, type VerifiedDeveloper, type VerifiedHopMarker, type VerifiedOrganization, type VerifyOptions, type VerifyResponse, type WaitForApprovalOptions, type WellKnownAgenticCommerce, _resetEdgeConfigCache, index as agent, authorizeSettlement, awaitStepUpApproval, buildGuidance, buildSdkObservedMetadata, buildVerificationUnavailableBody, clearCache, createMcpMiddleware, degradeToObserve, denyStatusFor, deriveConnectionFromHeaders, detectPlatformFingerprint, detectRuntime, express, extractApiKeyFormat, extractCredentials, extractMcpCredentials, extractPlatformHeaders, fetchEdgeConfig, fetchRoutes, getCachedWellKnownUrls, getEdgeConfig, getTrustLevel, getWellKnownUrls, hasCredentials, isEdgeConfig, isRejectedIdentityClaim, isVerificationUnavailable, isVerifiedHopValidFor, matchEdgePathRule, matchPlatformSignature, nextjs, normalizeDeclaredSource, parseYaml as parseLocalPolicyYaml, parseVerifiedHop, pollStepUpStatus, prefetchWellKnown, quickVerify, recordDecision, reportAttempt, reportUnregisteredAttempt, sanitizeHeaders, sdk, sdkFetch, serializeVerifiedHop, setMcpMeta, index$1 as transport, unavailableRetryAfterSeconds, validatePolicy as validateLocalPolicy, verify };

package/dist/index.js

@@ -122,7 +122,7 @@ function getTrustLevel(score) {
 }
 
 // src/version.ts
-var SDK_VERSION = "5.12.0";
+var SDK_VERSION = "5.14.0";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;
@@ -266,7 +266,7 @@ var DEFAULT_CONFIG = {
 };
 var initCheckPerformed = false;
 var deprecationWarningShown = false;
-async function performInitCheck(apiBaseUrl, debug, strictInit, apiKey) {
+async function performInitCheck(apiBaseUrl, debug, strictInit, apiKey, counterparty) {
   initCheckPerformed = true;
   try {
     const probeUrl = `${apiBaseUrl}/agents/verify-access`;
@@ -284,7 +284,8 @@ async function performInitCheck(apiBaseUrl, debug, strictInit, apiKey) {
       );
     }
     if (apiKey) {
-      const selfCheck = await sdkFetch(`${apiBaseUrl}/agents/verify-access/self-check`, {
+      const q = counterparty?.id ? `?counterpartyId=${encodeURIComponent(counterparty.id)}` : counterparty?.url ? `?counterpartyUrl=${encodeURIComponent(counterparty.url)}` : "";
+      const selfCheck = await sdkFetch(`${apiBaseUrl}/agents/verify-access/self-check${q}`, {
         headers: { Authorization: `Bearer ${apiKey}` }
       });
       if (selfCheck.status === 401) {
@@ -296,6 +297,13 @@ async function performInitCheck(apiBaseUrl, debug, strictInit, apiKey) {
         console.error(message);
       } else if (selfCheck.ok) {
         const body = await selfCheck.json().catch(() => ({}));
+        if (body.counterparty && body.counterparty.canVerify === false) {
+          const message = `[VerificationGateway] the configured AstraSync API key cannot verify for this endpoint (${body.counterparty.message ?? "endpoint not found or owned by another account"}). Every inbound agent will be turned away until the key or counterparty is corrected.`;
+          if (strictInit) {
+            throw new Error(`${message} (strictInit=true)`);
+          }
+          console.error(message);
+        }
         if (typeof body.daysToExpiry === "number" && body.daysToExpiry <= 7) {
           console.warn(
             `[VerificationGateway] the configured AstraSync API key expires in ${body.daysToExpiry} day(s) \u2014 rotate it at Settings \u2192 Developer Tools before integrations start failing.`
@@ -440,11 +448,11 @@ function createGuidanceResponse(_config, reason, options = {}) {
   const isMisconfig = source === "merchant_misconfig";
   const urls = options.urls;
   const guidance = isMisconfig ? {
-    message: "This site's AstraSync integration is misconfigured (its API key was revoked, expired, or rotated). Your identity and the AstraSync platform are fine \u2014 contact the site operator. Retrying will not help.",
+    message: "This site's AstraSync integration is misconfigured (its API key was revoked, expired, rotated, or belongs to another account). Your identity and the AstraSync platform are fine \u2014 contact the site operator. Retrying will not help.",
     registrationUrl: urls?.registrationUrl ?? "",
     documentationUrl: options.remediation?.docsUrl ?? urls?.documentationUrl ?? "",
     steps: [
-      "Report the failure to the site operator \u2014 their AstraSync API key needs rotating",
+      "Report the failure to the site operator \u2014 their AstraSync API key needs replacing",
       "Do not retry: the failure is deterministic until the operator updates their key"
     ]
   } : isApiError ? {
@@ -656,12 +664,13 @@ async function callVerifyAccessAPI(config, request) {
       };
     }
     if (!response.ok) {
-      if (response.status === 401) {
+      const keyMismatch = response.status === 403 && data?.error === "COUNTERPARTY_KEY_MISMATCH";
+      if (response.status === 401 || keyMismatch) {
         return {
           success: false,
           error: data.message || data.error || "Integration API key rejected",
           misconfig: true,
-          misconfigCode: typeof data?.code === "string" ? data.code : void 0,
+          misconfigCode: keyMismatch ? "counterparty_key_mismatch" : typeof data?.code === "string" ? data.code : void 0,
           remediation: data?.remediation && typeof data.remediation === "object" ? data.remediation : void 0,
           correlationId: typeof data?.correlationId === "string" ? data.correlationId : void 0,
           attemptId: typeof data?.attemptId === "string" ? data.attemptId : void 0
@@ -694,14 +703,22 @@ async function verify(config, request, options) {
         mergedConfig.apiBaseUrl,
         mergedConfig.debug,
         true,
-        mergedConfig.apiKey
+        mergedConfig.apiKey,
+        {
+          id: mergedConfig.counterpartyId,
+          url: mergedConfig.counterpartyUrl ?? request.counterpartyUrl
+        }
       );
     } else {
       void performInitCheck(
         mergedConfig.apiBaseUrl,
         mergedConfig.debug,
         false,
-        mergedConfig.apiKey
+        mergedConfig.apiKey,
+        {
+          id: mergedConfig.counterpartyId,
+          url: mergedConfig.counterpartyUrl ?? request.counterpartyUrl
+        }
       );
     }
   }
@@ -932,6 +949,7 @@ async function reportAttempt(config, report, options = {}) {
   timer.unref?.();
 }
 var ATTEMPT_REPORT_MAX_RETRY_DELAY_MS = 2e3;
+var refusedPolicyReads = /* @__PURE__ */ new Set();
 async function fetchRoutes(config, counterpartyId) {
   if (!counterpartyId) return null;
   const headers = { "Content-Type": "application/json" };
@@ -944,7 +962,15 @@ async function fetchRoutes(config, counterpartyId) {
       `${config.apiBaseUrl}/endpoints/${encodeURIComponent(counterpartyId)}/routes`,
       { method: "GET", headers }
     );
-    if (!response.ok) return null;
+    if (!response.ok) {
+      if ((response.status === 401 || response.status === 403 || response.status === 404) && !refusedPolicyReads.has(counterpartyId)) {
+        refusedPolicyReads.add(counterpartyId);
+        console.error(
+          `[VerificationGateway] the configured API key cannot read the route policy for ${counterpartyId} (HTTP ${response.status}). The key belongs to an account that does not own this endpoint, or the counterpartyId is wrong. The gateway is in PASS-THROUGH mode: no agent is being verified.`
+        );
+      }
+      return null;
+    }
     const body = await response.json();
     return body.data?.routes ?? [];
   } catch {
@@ -1891,6 +1917,11 @@ async function withBudget(promise, ms) {
     if (timer) clearTimeout(timer);
   }
 }
+var CONTAINER_ID = (() => {
+  const c = globalThis.crypto;
+  if (c?.randomUUID) return c.randomUUID();
+  return `c-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 12)}`;
+})();
 var destKeyOf = (d) => `${d.apiBaseUrl}\0${d.apiKey ?? ""}\0${d.counterparty}\0${d.adapter ?? ""}`;
 var BeaconBuffer = class {
   constructor(options = {}) {
@@ -1898,6 +1929,7 @@ var BeaconBuffer = class {
     this.droppedSinceLast = 0;
     this.droppedTotal = 0;
     this.deliveredTotal = 0;
+    this.enqueuedTotal = 0;
     this.backoffUntil = 0;
     this.collapse = /* @__PURE__ */ new Map();
     /** Keys the backend answered 401 for — later batches go unauthenticated. */
@@ -1910,13 +1942,16 @@ var BeaconBuffer = class {
       collapseMaxKeys: options.collapseMaxKeys ?? 1e3,
       requestTimeoutMs: options.requestTimeoutMs ?? 1e4,
       retryBackoffMs: options.retryBackoffMs ?? 1e3,
+      holdRepeats: options.holdRepeats ?? false,
+      containerId: options.containerId ?? CONTAINER_ID,
       now: options.now ?? Date.now
     };
   }
   /**
    * Queue one beacon. With a `collapseKey`, a repeat inside the window is
-   * merged into a held aggregate (sent when the window closes) instead of
-   * becoming its own item.
+   * merged into this key's item while that item is still queued (not yet in
+   * flight). Once it has left, the repeat becomes a new item, sendable on
+   * this flush — nothing waits for a later invocation (round 27.6).
    */
   enqueue(dest, item, collapseKey) {
     const now = this.opts.now();
@@ -1929,12 +1964,15 @@ var BeaconBuffer = class {
             return;
           }
         }
-        const held = this.push(
-          dest,
-          { ...item, repeatCount: 1 },
-          entry.firstSeenAt + this.opts.collapseWindowMs
-        );
-        entry.held = held;
+        if (this.opts.holdRepeats) {
+          entry.held = this.push(
+            dest,
+            { ...item, repeatCount: 1 },
+            entry.firstSeenAt + this.opts.collapseWindowMs
+          );
+          return;
+        }
+        entry.first = this.push(dest, { ...item, repeatCount: 1 }, now);
         return;
       }
       this.collapse.delete(collapseKey);
@@ -1970,6 +2008,7 @@ var BeaconBuffer = class {
       droppedSinceLast: this.droppedSinceLast,
       droppedTotal: this.droppedTotal,
       deliveredTotal: this.deliveredTotal,
+      enqueuedTotal: this.enqueuedTotal,
       flushing: this.inFlight !== void 0
     };
   }
@@ -1984,6 +2023,7 @@ var BeaconBuffer = class {
       inFlight: false
     };
     this.queue.push(entry);
+    this.enqueuedTotal += 1;
     return entry;
   }
   dropOldest() {
@@ -2029,7 +2069,11 @@ var BeaconBuffer = class {
       droppedSinceLast: reportedDropped,
       queueDepth: this.queue.length,
       adapter: dest.adapter ?? "edge-core",
-      version: SDK_VERSION
+      version: SDK_VERSION,
+      containerId: this.opts.containerId,
+      enqueuedTotal: this.enqueuedTotal,
+      deliveredTotal: this.deliveredTotal,
+      droppedTotal: this.droppedTotal
     };
     const controller = typeof AbortController !== "undefined" ? new AbortController() : void 0;
     const response = await withBudget(