@astrasyncai/verification-gateway 5.21.1 → 5.21.2

package/dist/index.mjs

@@ -30,7 +30,7 @@ function getTrustLevel(score) {
 }
 
 // src/version.ts
-var SDK_VERSION = "5.21.1";
+var SDK_VERSION = "5.21.2";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;
@@ -2138,6 +2138,23 @@ var PLATFORM_AGENT_SIGNATURES = [
     agentCardPatterns: [/perplexity\.ai/i],
     apiKeyFormatPatterns: [/^pplx-/i]
   },
+  // Round 30.1: xAI's documented crawlers (GrokBot/1.0, xAI-Grok/1.0,
+  // Grok-DeepSearch/1.0). Anchored, versioned tokens — never in a stock UA.
+  {
+    vendor: "grok",
+    displayName: "xAI Grok",
+    uaPatterns: [/\bGrokBot\//i, /\bxAI-Grok\//i, /\bGrok-DeepSearch\//i],
+    agentCardPatterns: [/\bx\.ai\b/i, /grok\.com/i],
+    apiKeyFormatPatterns: [/^xai-/i]
+  },
+  // Round 30.1: Meta AI's index and fetch crawlers. facebookexternalhit
+  // (link previews) is deliberately NOT here — it stays a generic crawler.
+  {
+    vendor: "meta-ai",
+    displayName: "Meta AI",
+    uaPatterns: [/\bMeta-WebIndexer\b/i, /\bMeta-ExternalFetcher\b/i],
+    agentCardPatterns: [/meta\.ai/i]
+  },
   // Agentic browsers — versioned-token patterns ONLY (a stock Chrome UA must
   // never match). Distinct vendor keys (not 'chatgpt'/'perplexity'): the
   // browser product is a different surface than the assistant service, and