@astrasyncai/verification-gateway 5.17.1 → 5.18.0

package/dist/adapters/kit-express.d.mts

@@ -0,0 +1,63 @@
+/** Per-request context a host adapter (e.g. `expressHandler`) passes to `kit.handle`. */
+interface KitRequestContext {
+    /**
+     * The caller's VERIFIED ASTRA-id (e.g. from `req.agentVerification` after
+     * the AstraSync middleware ran). Sessions and idempotency keys are scoped
+     * to it; without it the kit falls back to Authorization, then X-Astra-Id.
+     */
+    callerId?: string;
+}
+
+/**
+ * 5.18.0 — mount a fetch-style checkout kit (`createUcpCheckoutKit`,
+ * `createAcpCheckoutKit`) on Express.
+ *
+ *   app.use('/ucp/v1', express.raw({ type: '*\/*' }), expressHandler(ucpKit));
+ *
+ * The kit checks RFC 9421 signatures and Content-Digest / idempotency
+ * fingerprints over the EXACT request bytes, so give it the raw body: mount
+ * `express.raw()` on the kit's routes (req.body is a Buffer), or keep a copy
+ * on `req.rawBody` (Buffer or string) in your JSON parser's `verify` hook.
+ * A body that was already parsed to an object is re-serialised with
+ * JSON.stringify — fine for unsigned traffic, but signatures won't verify.
+ *
+ * When the AstraSync middleware ran first, the caller's verified ASTRA-id
+ * (`req.agentVerification.agent.astraId`) scopes sessions and idempotency
+ * keys; override with `callerId`.
+ */
+
+/** Anything with a fetch-style `handle` (both checkout kits). */
+interface FetchKit {
+    handle(req: Request, ctx?: KitRequestContext): Promise<Response>;
+}
+/** The parts of an Express request this adapter reads. */
+interface KitExpressRequest {
+    method: string;
+    protocol?: string;
+    originalUrl?: string;
+    url: string;
+    headers: Record<string, string | string[] | undefined>;
+    body?: unknown;
+    rawBody?: unknown;
+    get?(name: string): string | undefined;
+    agentVerification?: {
+        identityVerified?: boolean;
+        agent?: {
+            astraId?: string;
+        };
+    };
+}
+/** The parts of an Express response this adapter writes. */
+interface KitExpressResponse {
+    status(code: number): unknown;
+    setHeader(name: string, value: string | string[]): unknown;
+    end(body?: unknown): unknown;
+}
+interface ExpressHandlerOptions {
+    /** The caller's verified ASTRA-id (default: from `req.agentVerification` when identity-verified). */
+    callerId?: (req: KitExpressRequest) => string | undefined;
+}
+/** An Express handler that runs a checkout kit and writes its Response back. */
+declare function expressHandler(kit: FetchKit, options?: ExpressHandlerOptions): (req: KitExpressRequest, res: KitExpressResponse, next: (err?: unknown) => void) => Promise<void>;
+
+export { type ExpressHandlerOptions, type FetchKit, type KitExpressRequest, type KitExpressResponse, expressHandler };

package/dist/adapters/kit-express.d.ts

@@ -0,0 +1,63 @@
+/** Per-request context a host adapter (e.g. `expressHandler`) passes to `kit.handle`. */
+interface KitRequestContext {
+    /**
+     * The caller's VERIFIED ASTRA-id (e.g. from `req.agentVerification` after
+     * the AstraSync middleware ran). Sessions and idempotency keys are scoped
+     * to it; without it the kit falls back to Authorization, then X-Astra-Id.
+     */
+    callerId?: string;
+}
+
+/**
+ * 5.18.0 — mount a fetch-style checkout kit (`createUcpCheckoutKit`,
+ * `createAcpCheckoutKit`) on Express.
+ *
+ *   app.use('/ucp/v1', express.raw({ type: '*\/*' }), expressHandler(ucpKit));
+ *
+ * The kit checks RFC 9421 signatures and Content-Digest / idempotency
+ * fingerprints over the EXACT request bytes, so give it the raw body: mount
+ * `express.raw()` on the kit's routes (req.body is a Buffer), or keep a copy
+ * on `req.rawBody` (Buffer or string) in your JSON parser's `verify` hook.
+ * A body that was already parsed to an object is re-serialised with
+ * JSON.stringify — fine for unsigned traffic, but signatures won't verify.
+ *
+ * When the AstraSync middleware ran first, the caller's verified ASTRA-id
+ * (`req.agentVerification.agent.astraId`) scopes sessions and idempotency
+ * keys; override with `callerId`.
+ */
+
+/** Anything with a fetch-style `handle` (both checkout kits). */
+interface FetchKit {
+    handle(req: Request, ctx?: KitRequestContext): Promise<Response>;
+}
+/** The parts of an Express request this adapter reads. */
+interface KitExpressRequest {
+    method: string;
+    protocol?: string;
+    originalUrl?: string;
+    url: string;
+    headers: Record<string, string | string[] | undefined>;
+    body?: unknown;
+    rawBody?: unknown;
+    get?(name: string): string | undefined;
+    agentVerification?: {
+        identityVerified?: boolean;
+        agent?: {
+            astraId?: string;
+        };
+    };
+}
+/** The parts of an Express response this adapter writes. */
+interface KitExpressResponse {
+    status(code: number): unknown;
+    setHeader(name: string, value: string | string[]): unknown;
+    end(body?: unknown): unknown;
+}
+interface ExpressHandlerOptions {
+    /** The caller's verified ASTRA-id (default: from `req.agentVerification` when identity-verified). */
+    callerId?: (req: KitExpressRequest) => string | undefined;
+}
+/** An Express handler that runs a checkout kit and writes its Response back. */
+declare function expressHandler(kit: FetchKit, options?: ExpressHandlerOptions): (req: KitExpressRequest, res: KitExpressResponse, next: (err?: unknown) => void) => Promise<void>;
+
+export { type ExpressHandlerOptions, type FetchKit, type KitExpressRequest, type KitExpressResponse, expressHandler };

package/dist/adapters/kit-express.js

@@ -0,0 +1,88 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/adapters/kit-express.ts
+var kit_express_exports = {};
+__export(kit_express_exports, {
+  expressHandler: () => expressHandler
+});
+module.exports = __toCommonJS(kit_express_exports);
+
+// src/ucp/kit-shared.ts
+var warned = /* @__PURE__ */ new Set();
+function warnOnce(key, message) {
+  if (warned.has(key) || process.env.NODE_ENV === "test") return;
+  warned.add(key);
+  console.warn(message);
+}
+
+// src/adapters/kit-express.ts
+var bytes = (b) => b.buffer.slice(b.byteOffset, b.byteOffset + b.byteLength);
+function rawBodyOf(req) {
+  if (req.method === "GET" || req.method === "HEAD") return void 0;
+  const raw = req.rawBody;
+  if (Buffer.isBuffer(raw)) return bytes(raw);
+  if (typeof raw === "string") return raw;
+  if (Buffer.isBuffer(req.body)) return bytes(req.body);
+  if (typeof req.body === "string") return req.body;
+  if (req.body !== void 0 && req.body !== null && typeof req.body === "object") {
+    if (Object.keys(req.body).length === 0) return void 0;
+    warnOnce(
+      "kit-express-parsed-body",
+      "[astrasync] expressHandler: the request body was already parsed \u2014 re-serialising it. Mount express.raw() on the checkout routes (or keep req.rawBody) so signatures and idempotency fingerprints see the exact bytes."
+    );
+    return JSON.stringify(req.body);
+  }
+  return void 0;
+}
+function expressHandler(kit, options = {}) {
+  return async (req, res, next) => {
+    try {
+      const host = req.get?.("host") ?? req.headers.host ?? "localhost";
+      const url = `${req.protocol ?? "http"}://${host}${req.originalUrl ?? req.url}`;
+      const headers = new Headers();
+      for (const [k, v] of Object.entries(req.headers)) {
+        if (v === void 0) continue;
+        if (Array.isArray(v)) v.forEach((x) => headers.append(k, x));
+        else headers.set(k, v);
+      }
+      const body = rawBodyOf(req);
+      const request = new Request(url, {
+        method: req.method,
+        headers,
+        ...body !== void 0 && { body }
+      });
+      const verified = req.agentVerification?.identityVerified ? req.agentVerification.agent?.astraId : void 0;
+      const callerId = options.callerId ? options.callerId(req) : verified;
+      const response = await kit.handle(request, callerId ? { callerId } : void 0);
+      res.status(response.status);
+      response.headers.forEach((value, name) => {
+        res.setHeader(name, value);
+      });
+      res.end(Buffer.from(await response.arrayBuffer()));
+    } catch (err) {
+      next(err);
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  expressHandler
+});
+//# sourceMappingURL=kit-express.js.map

package/dist/adapters/kit-express.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/adapters/kit-express.ts","../../src/ucp/kit-shared.ts"],"sourcesContent":["/**\n * 5.18.0 — mount a fetch-style checkout kit (`createUcpCheckoutKit`,\n * `createAcpCheckoutKit`) on Express.\n *\n *   app.use('/ucp/v1', express.raw({ type: '*\\/*' }), expressHandler(ucpKit));\n *\n * The kit checks RFC 9421 signatures and Content-Digest / idempotency\n * fingerprints over the EXACT request bytes, so give it the raw body: mount\n * `express.raw()` on the kit's routes (req.body is a Buffer), or keep a copy\n * on `req.rawBody` (Buffer or string) in your JSON parser's `verify` hook.\n * A body that was already parsed to an object is re-serialised with\n * JSON.stringify — fine for unsigned traffic, but signatures won't verify.\n *\n * When the AstraSync middleware ran first, the caller's verified ASTRA-id\n * (`req.agentVerification.agent.astraId`) scopes sessions and idempotency\n * keys; override with `callerId`.\n */\nimport type { KitRequestContext } from '../ucp/kit-shared';\nimport { warnOnce } from '../ucp/kit-shared';\n\n/** Anything with a fetch-style `handle` (both checkout kits). */\nexport interface FetchKit {\n  handle(req: Request, ctx?: KitRequestContext): Promise<Response>;\n}\n\n/** The parts of an Express request this adapter reads. */\nexport interface KitExpressRequest {\n  method: string;\n  protocol?: string;\n  originalUrl?: string;\n  url: string;\n  headers: Record<string, string | string[] | undefined>;\n  body?: unknown;\n  rawBody?: unknown;\n  get?(name: string): string | undefined;\n  agentVerification?: {\n    identityVerified?: boolean;\n    agent?: { astraId?: string };\n  };\n}\n\n/** The parts of an Express response this adapter writes. */\nexport interface KitExpressResponse {\n  status(code: number): unknown;\n  setHeader(name: string, value: string | string[]): unknown;\n  end(body?: unknown): unknown;\n}\n\nexport interface ExpressHandlerOptions {\n  /** The caller's verified ASTRA-id (default: from `req.agentVerification` when identity-verified). */\n  callerId?: (req: KitExpressRequest) => string | undefined;\n}\n\nconst bytes = (b: Buffer): ArrayBuffer =>\n  b.buffer.slice(b.byteOffset, b.byteOffset + b.byteLength) as ArrayBuffer;\n\nfunction rawBodyOf(req: KitExpressRequest): string | ArrayBuffer | undefined {\n  if (req.method === 'GET' || req.method === 'HEAD') return undefined;\n  const raw = req.rawBody;\n  if (Buffer.isBuffer(raw)) return bytes(raw);\n  if (typeof raw === 'string') return raw;\n  if (Buffer.isBuffer(req.body)) return bytes(req.body);\n  if (typeof req.body === 'string') return req.body;\n  if (req.body !== undefined && req.body !== null && typeof req.body === 'object') {\n    if (Object.keys(req.body as object).length === 0) return undefined;\n    warnOnce(\n      'kit-express-parsed-body',\n      '[astrasync] expressHandler: the request body was already parsed — re-serialising it. ' +\n        'Mount express.raw() on the checkout routes (or keep req.rawBody) so signatures and ' +\n        'idempotency fingerprints see the exact bytes.'\n    );\n    return JSON.stringify(req.body);\n  }\n  return undefined;\n}\n\n/** An Express handler that runs a checkout kit and writes its Response back. */\nexport function expressHandler(kit: FetchKit, options: ExpressHandlerOptions = {}) {\n  return async (\n    req: KitExpressRequest,\n    res: KitExpressResponse,\n    next: (err?: unknown) => void\n  ): Promise<void> => {\n    try {\n      const host = req.get?.('host') ?? (req.headers.host as string | undefined) ?? 'localhost';\n      const url = `${req.protocol ?? 'http'}://${host}${req.originalUrl ?? req.url}`;\n      const headers = new Headers();\n      for (const [k, v] of Object.entries(req.headers)) {\n        if (v === undefined) continue;\n        if (Array.isArray(v)) v.forEach((x) => headers.append(k, x));\n        else headers.set(k, v);\n      }\n      const body = rawBodyOf(req);\n      const request = new Request(url, {\n        method: req.method,\n        headers,\n        ...(body !== undefined && { body }),\n      });\n      const verified = req.agentVerification?.identityVerified\n        ? req.agentVerification.agent?.astraId\n        : undefined;\n      const callerId = options.callerId ? options.callerId(req) : verified;\n      const response = await kit.handle(request, callerId ? { callerId } : undefined);\n      res.status(response.status);\n      response.headers.forEach((value, name) => {\n        res.setHeader(name, value);\n      });\n      res.end(Buffer.from(await response.arrayBuffer()));\n    } catch (err) {\n      next(err);\n    }\n  };\n}\n","/**\n * 5.18.0 — logic the UCP and ACP checkout kits share: the hold test, caller\n * scoping, the result kept for a pending settlement, and one-time warnings.\n */\nimport { createHash } from 'crypto';\nimport type { VerificationResult } from '../types';\n\n/** Per-request context a host adapter (e.g. `expressHandler`) passes to `kit.handle`. */\nexport interface KitRequestContext {\n  /**\n   * The caller's VERIFIED ASTRA-id (e.g. from `req.agentVerification` after\n   * the AstraSync middleware ran). Sessions and idempotency keys are scoped\n   * to it; without it the kit falls back to Authorization, then X-Astra-Id.\n   */\n  callerId?: string;\n}\n\n/**\n * True when AstraSync held the purchase for the buyer's approval. Any step-up\n * signal counts; an approval that was just redeemed (`status: 'consumed'`)\n * does not. A held purchase must never reach settle or fulfil.\n */\nexport function isHeld(result: VerificationResult): boolean {\n  const r = result as VerificationResult & { recommendation?: string };\n  return Boolean(\n    r.requiresStepUp ||\n    r.requiresApproval ||\n    r.recommendation === 'step_up_required' ||\n    r.settlementOutcome?.status === 'requires_approval' ||\n    (r.stepUpApproval && r.stepUpApproval.status !== 'consumed')\n  );\n}\n\nconst scopeHash = (kind: string, value: string) =>\n  `${kind}:${createHash('sha256').update(`${kind}\\n${value}`).digest('hex').slice(0, 32)}`;\n\n/**\n * The scope a checkout session and its idempotency keys belong to: the\n * verified ASTRA-id when known, else the Authorization header, else the\n * X-Astra-Id header. Hashed, so no bearer token is ever written to a store.\n * Undefined when the request carries none of them.\n */\nexport async function resolveCallerScope(\n  req: Request,\n  ctx: KitRequestContext | undefined,\n  resolve?: (req: Request) => string | undefined | Promise<string | undefined>\n): Promise<string | undefined> {\n  const verified = ctx?.callerId ?? (resolve ? await resolve(req) : undefined);\n  if (verified) return scopeHash('astra', verified);\n  const auth = req.headers.get('authorization');\n  if (auth) return scopeHash('auth', auth);\n  const astraId = req.headers.get('x-astra-id');\n  if (astraId) return scopeHash('astra-header', astraId);\n  return undefined;\n}\n\n/** A scope for a fallback identity (e.g. the UCP platform profile). */\nexport const fallbackScope = (kind: string, value: string) => scopeHash(kind, value);\n\n/**\n * The verification result kept with a pending settlement, minus the\n * merchant-lane secrets (card settlement token, voucher, mandates, KYAPay\n * token, AEP payloads): a store must never hold payment material.\n */\nexport function pendingResult(result: VerificationResult): VerificationResult {\n  const {\n    settlementToken: _t,\n    settlement: _s,\n    mandates: _m,\n    kyaToken: _k,\n    aep: _a,\n    ...rest\n  } = result;\n  return rest;\n}\n\nconst warned = new Set<string>();\n\n/** console.warn once per process per key (never under NODE_ENV=test). */\nexport function warnOnce(key: string, message: string): void {\n  if (warned.has(key) || process.env.NODE_ENV === 'test') return;\n  warned.add(key);\n  // eslint-disable-next-line no-console\n  console.warn(message);\n}\n\n/** Warn when a kit runs on its in-memory defaults outside tests. */\nexport function warnInMemoryStores(kit: 'UCP' | 'ACP', missing: string[]): void {\n  if (!missing.length || process.env.NODE_ENV === 'test') return;\n  // eslint-disable-next-line no-console\n  console.warn(\n    `[astrasync] ${kit} checkout kit is using the in-memory ${missing.join(' and ')} ` +\n      '(sessions are lost on restart and not shared across instances). ' +\n      `Pass ${missing.map((m) => (m.startsWith('idempotency') ? 'idempotencyStore' : 'store')).join(' and ')} in production.`\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;AC4EA,IAAM,SAAS,oBAAI,IAAY;AAGxB,SAAS,SAAS,KAAa,SAAuB;AAC3D,MAAI,OAAO,IAAI,GAAG,KAAK,QAAQ,IAAI,aAAa,OAAQ;AACxD,SAAO,IAAI,GAAG;AAEd,UAAQ,KAAK,OAAO;AACtB;;;AD/BA,IAAM,QAAQ,CAAC,MACb,EAAE,OAAO,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU;AAE1D,SAAS,UAAU,KAA0D;AAC3E,MAAI,IAAI,WAAW,SAAS,IAAI,WAAW,OAAQ,QAAO;AAC1D,QAAM,MAAM,IAAI;AAChB,MAAI,OAAO,SAAS,GAAG,EAAG,QAAO,MAAM,GAAG;AAC1C,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,MAAI,OAAO,SAAS,IAAI,IAAI,EAAG,QAAO,MAAM,IAAI,IAAI;AACpD,MAAI,OAAO,IAAI,SAAS,SAAU,QAAO,IAAI;AAC7C,MAAI,IAAI,SAAS,UAAa,IAAI,SAAS,QAAQ,OAAO,IAAI,SAAS,UAAU;AAC/E,QAAI,OAAO,KAAK,IAAI,IAAc,EAAE,WAAW,EAAG,QAAO;AACzD;AAAA,MACE;AAAA,MACA;AAAA,IAGF;AACA,WAAO,KAAK,UAAU,IAAI,IAAI;AAAA,EAChC;AACA,SAAO;AACT;AAGO,SAAS,eAAe,KAAe,UAAiC,CAAC,GAAG;AACjF,SAAO,OACL,KACA,KACA,SACkB;AAClB,QAAI;AACF,YAAM,OAAO,IAAI,MAAM,MAAM,KAAM,IAAI,QAAQ,QAA+B;AAC9E,YAAM,MAAM,GAAG,IAAI,YAAY,MAAM,MAAM,IAAI,GAAG,IAAI,eAAe,IAAI,GAAG;AAC5E,YAAM,UAAU,IAAI,QAAQ;AAC5B,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,IAAI,OAAO,GAAG;AAChD,YAAI,MAAM,OAAW;AACrB,YAAI,MAAM,QAAQ,CAAC,EAAG,GAAE,QAAQ,CAAC,MAAM,QAAQ,OAAO,GAAG,CAAC,CAAC;AAAA,YACtD,SAAQ,IAAI,GAAG,CAAC;AAAA,MACvB;AACA,YAAM,OAAO,UAAU,GAAG;AAC1B,YAAM,UAAU,IAAI,QAAQ,KAAK;AAAA,QAC/B,QAAQ,IAAI;AAAA,QACZ;AAAA,QACA,GAAI,SAAS,UAAa,EAAE,KAAK;AAAA,MACnC,CAAC;AACD,YAAM,WAAW,IAAI,mBAAmB,mBACpC,IAAI,kBAAkB,OAAO,UAC7B;AACJ,YAAM,WAAW,QAAQ,WAAW,QAAQ,SAAS,GAAG,IAAI;AAC5D,YAAM,WAAW,MAAM,IAAI,OAAO,SAAS,WAAW,EAAE,SAAS,IAAI,MAAS;AAC9E,UAAI,OAAO,SAAS,MAAM;AAC1B,eAAS,QAAQ,QAAQ,CAAC,OAAO,SAAS;AACxC,YAAI,UAAU,MAAM,KAAK;AAAA,MAC3B,CAAC;AACD,UAAI,IAAI,OAAO,KAAK,MAAM,SAAS,YAAY,CAAC,CAAC;AAAA,IACnD,SAAS,KAAK;AACZ,WAAK,GAAG;AAAA,IACV;AAAA,EACF;AACF;","names":[]}

package/dist/adapters/kit-express.mjs

@@ -0,0 +1,61 @@
+// src/ucp/kit-shared.ts
+var warned = /* @__PURE__ */ new Set();
+function warnOnce(key, message) {
+  if (warned.has(key) || process.env.NODE_ENV === "test") return;
+  warned.add(key);
+  console.warn(message);
+}
+
+// src/adapters/kit-express.ts
+var bytes = (b) => b.buffer.slice(b.byteOffset, b.byteOffset + b.byteLength);
+function rawBodyOf(req) {
+  if (req.method === "GET" || req.method === "HEAD") return void 0;
+  const raw = req.rawBody;
+  if (Buffer.isBuffer(raw)) return bytes(raw);
+  if (typeof raw === "string") return raw;
+  if (Buffer.isBuffer(req.body)) return bytes(req.body);
+  if (typeof req.body === "string") return req.body;
+  if (req.body !== void 0 && req.body !== null && typeof req.body === "object") {
+    if (Object.keys(req.body).length === 0) return void 0;
+    warnOnce(
+      "kit-express-parsed-body",
+      "[astrasync] expressHandler: the request body was already parsed \u2014 re-serialising it. Mount express.raw() on the checkout routes (or keep req.rawBody) so signatures and idempotency fingerprints see the exact bytes."
+    );
+    return JSON.stringify(req.body);
+  }
+  return void 0;
+}
+function expressHandler(kit, options = {}) {
+  return async (req, res, next) => {
+    try {
+      const host = req.get?.("host") ?? req.headers.host ?? "localhost";
+      const url = `${req.protocol ?? "http"}://${host}${req.originalUrl ?? req.url}`;
+      const headers = new Headers();
+      for (const [k, v] of Object.entries(req.headers)) {
+        if (v === void 0) continue;
+        if (Array.isArray(v)) v.forEach((x) => headers.append(k, x));
+        else headers.set(k, v);
+      }
+      const body = rawBodyOf(req);
+      const request = new Request(url, {
+        method: req.method,
+        headers,
+        ...body !== void 0 && { body }
+      });
+      const verified = req.agentVerification?.identityVerified ? req.agentVerification.agent?.astraId : void 0;
+      const callerId = options.callerId ? options.callerId(req) : verified;
+      const response = await kit.handle(request, callerId ? { callerId } : void 0);
+      res.status(response.status);
+      response.headers.forEach((value, name) => {
+        res.setHeader(name, value);
+      });
+      res.end(Buffer.from(await response.arrayBuffer()));
+    } catch (err) {
+      next(err);
+    }
+  };
+}
+export {
+  expressHandler
+};
+//# sourceMappingURL=kit-express.mjs.map

package/dist/adapters/kit-express.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/ucp/kit-shared.ts","../../src/adapters/kit-express.ts"],"sourcesContent":["/**\n * 5.18.0 — logic the UCP and ACP checkout kits share: the hold test, caller\n * scoping, the result kept for a pending settlement, and one-time warnings.\n */\nimport { createHash } from 'crypto';\nimport type { VerificationResult } from '../types';\n\n/** Per-request context a host adapter (e.g. `expressHandler`) passes to `kit.handle`. */\nexport interface KitRequestContext {\n  /**\n   * The caller's VERIFIED ASTRA-id (e.g. from `req.agentVerification` after\n   * the AstraSync middleware ran). Sessions and idempotency keys are scoped\n   * to it; without it the kit falls back to Authorization, then X-Astra-Id.\n   */\n  callerId?: string;\n}\n\n/**\n * True when AstraSync held the purchase for the buyer's approval. Any step-up\n * signal counts; an approval that was just redeemed (`status: 'consumed'`)\n * does not. A held purchase must never reach settle or fulfil.\n */\nexport function isHeld(result: VerificationResult): boolean {\n  const r = result as VerificationResult & { recommendation?: string };\n  return Boolean(\n    r.requiresStepUp ||\n    r.requiresApproval ||\n    r.recommendation === 'step_up_required' ||\n    r.settlementOutcome?.status === 'requires_approval' ||\n    (r.stepUpApproval && r.stepUpApproval.status !== 'consumed')\n  );\n}\n\nconst scopeHash = (kind: string, value: string) =>\n  `${kind}:${createHash('sha256').update(`${kind}\\n${value}`).digest('hex').slice(0, 32)}`;\n\n/**\n * The scope a checkout session and its idempotency keys belong to: the\n * verified ASTRA-id when known, else the Authorization header, else the\n * X-Astra-Id header. Hashed, so no bearer token is ever written to a store.\n * Undefined when the request carries none of them.\n */\nexport async function resolveCallerScope(\n  req: Request,\n  ctx: KitRequestContext | undefined,\n  resolve?: (req: Request) => string | undefined | Promise<string | undefined>\n): Promise<string | undefined> {\n  const verified = ctx?.callerId ?? (resolve ? await resolve(req) : undefined);\n  if (verified) return scopeHash('astra', verified);\n  const auth = req.headers.get('authorization');\n  if (auth) return scopeHash('auth', auth);\n  const astraId = req.headers.get('x-astra-id');\n  if (astraId) return scopeHash('astra-header', astraId);\n  return undefined;\n}\n\n/** A scope for a fallback identity (e.g. the UCP platform profile). */\nexport const fallbackScope = (kind: string, value: string) => scopeHash(kind, value);\n\n/**\n * The verification result kept with a pending settlement, minus the\n * merchant-lane secrets (card settlement token, voucher, mandates, KYAPay\n * token, AEP payloads): a store must never hold payment material.\n */\nexport function pendingResult(result: VerificationResult): VerificationResult {\n  const {\n    settlementToken: _t,\n    settlement: _s,\n    mandates: _m,\n    kyaToken: _k,\n    aep: _a,\n    ...rest\n  } = result;\n  return rest;\n}\n\nconst warned = new Set<string>();\n\n/** console.warn once per process per key (never under NODE_ENV=test). */\nexport function warnOnce(key: string, message: string): void {\n  if (warned.has(key) || process.env.NODE_ENV === 'test') return;\n  warned.add(key);\n  // eslint-disable-next-line no-console\n  console.warn(message);\n}\n\n/** Warn when a kit runs on its in-memory defaults outside tests. */\nexport function warnInMemoryStores(kit: 'UCP' | 'ACP', missing: string[]): void {\n  if (!missing.length || process.env.NODE_ENV === 'test') return;\n  // eslint-disable-next-line no-console\n  console.warn(\n    `[astrasync] ${kit} checkout kit is using the in-memory ${missing.join(' and ')} ` +\n      '(sessions are lost on restart and not shared across instances). ' +\n      `Pass ${missing.map((m) => (m.startsWith('idempotency') ? 'idempotencyStore' : 'store')).join(' and ')} in production.`\n  );\n}\n","/**\n * 5.18.0 — mount a fetch-style checkout kit (`createUcpCheckoutKit`,\n * `createAcpCheckoutKit`) on Express.\n *\n *   app.use('/ucp/v1', express.raw({ type: '*\\/*' }), expressHandler(ucpKit));\n *\n * The kit checks RFC 9421 signatures and Content-Digest / idempotency\n * fingerprints over the EXACT request bytes, so give it the raw body: mount\n * `express.raw()` on the kit's routes (req.body is a Buffer), or keep a copy\n * on `req.rawBody` (Buffer or string) in your JSON parser's `verify` hook.\n * A body that was already parsed to an object is re-serialised with\n * JSON.stringify — fine for unsigned traffic, but signatures won't verify.\n *\n * When the AstraSync middleware ran first, the caller's verified ASTRA-id\n * (`req.agentVerification.agent.astraId`) scopes sessions and idempotency\n * keys; override with `callerId`.\n */\nimport type { KitRequestContext } from '../ucp/kit-shared';\nimport { warnOnce } from '../ucp/kit-shared';\n\n/** Anything with a fetch-style `handle` (both checkout kits). */\nexport interface FetchKit {\n  handle(req: Request, ctx?: KitRequestContext): Promise<Response>;\n}\n\n/** The parts of an Express request this adapter reads. */\nexport interface KitExpressRequest {\n  method: string;\n  protocol?: string;\n  originalUrl?: string;\n  url: string;\n  headers: Record<string, string | string[] | undefined>;\n  body?: unknown;\n  rawBody?: unknown;\n  get?(name: string): string | undefined;\n  agentVerification?: {\n    identityVerified?: boolean;\n    agent?: { astraId?: string };\n  };\n}\n\n/** The parts of an Express response this adapter writes. */\nexport interface KitExpressResponse {\n  status(code: number): unknown;\n  setHeader(name: string, value: string | string[]): unknown;\n  end(body?: unknown): unknown;\n}\n\nexport interface ExpressHandlerOptions {\n  /** The caller's verified ASTRA-id (default: from `req.agentVerification` when identity-verified). */\n  callerId?: (req: KitExpressRequest) => string | undefined;\n}\n\nconst bytes = (b: Buffer): ArrayBuffer =>\n  b.buffer.slice(b.byteOffset, b.byteOffset + b.byteLength) as ArrayBuffer;\n\nfunction rawBodyOf(req: KitExpressRequest): string | ArrayBuffer | undefined {\n  if (req.method === 'GET' || req.method === 'HEAD') return undefined;\n  const raw = req.rawBody;\n  if (Buffer.isBuffer(raw)) return bytes(raw);\n  if (typeof raw === 'string') return raw;\n  if (Buffer.isBuffer(req.body)) return bytes(req.body);\n  if (typeof req.body === 'string') return req.body;\n  if (req.body !== undefined && req.body !== null && typeof req.body === 'object') {\n    if (Object.keys(req.body as object).length === 0) return undefined;\n    warnOnce(\n      'kit-express-parsed-body',\n      '[astrasync] expressHandler: the request body was already parsed — re-serialising it. ' +\n        'Mount express.raw() on the checkout routes (or keep req.rawBody) so signatures and ' +\n        'idempotency fingerprints see the exact bytes.'\n    );\n    return JSON.stringify(req.body);\n  }\n  return undefined;\n}\n\n/** An Express handler that runs a checkout kit and writes its Response back. */\nexport function expressHandler(kit: FetchKit, options: ExpressHandlerOptions = {}) {\n  return async (\n    req: KitExpressRequest,\n    res: KitExpressResponse,\n    next: (err?: unknown) => void\n  ): Promise<void> => {\n    try {\n      const host = req.get?.('host') ?? (req.headers.host as string | undefined) ?? 'localhost';\n      const url = `${req.protocol ?? 'http'}://${host}${req.originalUrl ?? req.url}`;\n      const headers = new Headers();\n      for (const [k, v] of Object.entries(req.headers)) {\n        if (v === undefined) continue;\n        if (Array.isArray(v)) v.forEach((x) => headers.append(k, x));\n        else headers.set(k, v);\n      }\n      const body = rawBodyOf(req);\n      const request = new Request(url, {\n        method: req.method,\n        headers,\n        ...(body !== undefined && { body }),\n      });\n      const verified = req.agentVerification?.identityVerified\n        ? req.agentVerification.agent?.astraId\n        : undefined;\n      const callerId = options.callerId ? options.callerId(req) : verified;\n      const response = await kit.handle(request, callerId ? { callerId } : undefined);\n      res.status(response.status);\n      response.headers.forEach((value, name) => {\n        res.setHeader(name, value);\n      });\n      res.end(Buffer.from(await response.arrayBuffer()));\n    } catch (err) {\n      next(err);\n    }\n  };\n}\n"],"mappings":";AA4EA,IAAM,SAAS,oBAAI,IAAY;AAGxB,SAAS,SAAS,KAAa,SAAuB;AAC3D,MAAI,OAAO,IAAI,GAAG,KAAK,QAAQ,IAAI,aAAa,OAAQ;AACxD,SAAO,IAAI,GAAG;AAEd,UAAQ,KAAK,OAAO;AACtB;;;AC/BA,IAAM,QAAQ,CAAC,MACb,EAAE,OAAO,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU;AAE1D,SAAS,UAAU,KAA0D;AAC3E,MAAI,IAAI,WAAW,SAAS,IAAI,WAAW,OAAQ,QAAO;AAC1D,QAAM,MAAM,IAAI;AAChB,MAAI,OAAO,SAAS,GAAG,EAAG,QAAO,MAAM,GAAG;AAC1C,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,MAAI,OAAO,SAAS,IAAI,IAAI,EAAG,QAAO,MAAM,IAAI,IAAI;AACpD,MAAI,OAAO,IAAI,SAAS,SAAU,QAAO,IAAI;AAC7C,MAAI,IAAI,SAAS,UAAa,IAAI,SAAS,QAAQ,OAAO,IAAI,SAAS,UAAU;AAC/E,QAAI,OAAO,KAAK,IAAI,IAAc,EAAE,WAAW,EAAG,QAAO;AACzD;AAAA,MACE;AAAA,MACA;AAAA,IAGF;AACA,WAAO,KAAK,UAAU,IAAI,IAAI;AAAA,EAChC;AACA,SAAO;AACT;AAGO,SAAS,eAAe,KAAe,UAAiC,CAAC,GAAG;AACjF,SAAO,OACL,KACA,KACA,SACkB;AAClB,QAAI;AACF,YAAM,OAAO,IAAI,MAAM,MAAM,KAAM,IAAI,QAAQ,QAA+B;AAC9E,YAAM,MAAM,GAAG,IAAI,YAAY,MAAM,MAAM,IAAI,GAAG,IAAI,eAAe,IAAI,GAAG;AAC5E,YAAM,UAAU,IAAI,QAAQ;AAC5B,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,IAAI,OAAO,GAAG;AAChD,YAAI,MAAM,OAAW;AACrB,YAAI,MAAM,QAAQ,CAAC,EAAG,GAAE,QAAQ,CAAC,MAAM,QAAQ,OAAO,GAAG,CAAC,CAAC;AAAA,YACtD,SAAQ,IAAI,GAAG,CAAC;AAAA,MACvB;AACA,YAAM,OAAO,UAAU,GAAG;AAC1B,YAAM,UAAU,IAAI,QAAQ,KAAK;AAAA,QAC/B,QAAQ,IAAI;AAAA,QACZ;AAAA,QACA,GAAI,SAAS,UAAa,EAAE,KAAK;AAAA,MACnC,CAAC;AACD,YAAM,WAAW,IAAI,mBAAmB,mBACpC,IAAI,kBAAkB,OAAO,UAC7B;AACJ,YAAM,WAAW,QAAQ,WAAW,QAAQ,SAAS,GAAG,IAAI;AAC5D,YAAM,WAAW,MAAM,IAAI,OAAO,SAAS,WAAW,EAAE,SAAS,IAAI,MAAS;AAC9E,UAAI,OAAO,SAAS,MAAM;AAC1B,eAAS,QAAQ,QAAQ,CAAC,OAAO,SAAS;AACxC,YAAI,UAAU,MAAM,KAAK;AAAA,MAC3B,CAAC;AACD,UAAI,IAAI,OAAO,KAAK,MAAM,SAAS,YAAY,CAAC,CAAC;AAAA,IACnD,SAAS,KAAK;AACZ,WAAK,GAAG;AAAA,IACV;AAAA,EACF;AACF;","names":[]}

package/dist/adapters/mcp.d.mts

@@ -1,5 +1,5 @@
 import { Request, Response, RequestHandler } from 'express';
-import { d as VerificationResult, G as GatewayConfig } from '../types-DRb_plOh.mjs';
+import { d as VerificationResult, G as GatewayConfig } from '../types-Cns4l8gX.mjs';
 
 /**
  * X-Astra-Verified-Hop — cross-hop verify-access dedupe marker.

package/dist/adapters/mcp.d.ts

@@ -1,5 +1,5 @@
 import { Request, Response, RequestHandler } from 'express';
-import { d as VerificationResult, G as GatewayConfig } from '../types-DRb_plOh.js';
+import { d as VerificationResult, G as GatewayConfig } from '../types-Cns4l8gX.js';
 
 /**
  * X-Astra-Verified-Hop — cross-hop verify-access dedupe marker.

package/dist/adapters/mcp.js

@@ -32,7 +32,7 @@ __export(mcp_exports, {
 module.exports = __toCommonJS(mcp_exports);
 
 // src/version.ts
-var SDK_VERSION = "5.17.1";
+var SDK_VERSION = "5.18.0";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;