@astrasyncai/verification-gateway 5.21.2 → 5.22.0

package/dist/adapters/mcp.mjs

@@ -1,5 +1,5 @@
 // src/version.ts
-var SDK_VERSION = "5.21.2";
+var SDK_VERSION = "5.22.0";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;
@@ -921,7 +921,11 @@ var PLATFORM_HEADER_NAMES = /* @__PURE__ */ new Set([
   "x-goog-api-client",
   "user-agent",
   "x-agent-card-url",
-  "x-agent-provider"
+  "x-agent-provider",
+  // Round 31 — Web Bot Auth's Signature-Agent names the signing agent's
+  // directory host (a public URL, never a secret). It attributes a signed
+  // agent even when its UA is stock Chrome.
+  "signature-agent"
 ]);
 var PLATFORM_HEADER_PREFIXES = [
   "x-goog-",
@@ -1038,7 +1042,12 @@ function sanitizeHeaders(raw) {
   return result;
 }
 var CONNECTION_HEADER_SOURCES = [
-  ["ip", ["cf-connecting-ip", "fastly-client-ip", "true-client-ip", "x-real-ip"]],
+  // Round 31: `incap-client-ip` = Imperva Cloud WAF; `true-client-ip` is
+  // also Akamai's client-IP header when the property enables it.
+  [
+    "ip",
+    ["cf-connecting-ip", "fastly-client-ip", "incap-client-ip", "true-client-ip", "x-real-ip"]
+  ],
   [
     "country",
     ["cf-ipcountry", "x-vercel-ip-country", "cloudfront-viewer-country", "fastly-geo-country"]
@@ -1089,6 +1098,28 @@ function deriveConnectionFromHeaders(headers) {
     if (portMatch) connection.sourcePort = portMatch[1];
     if (!connection.ip && addr) connection.ip = addr.replace(/:\d+$/, "");
   }
+  {
+    const edgescape = (lower["x-akamai-edgescape"] ?? lower["akamai-edgescape"])?.trim();
+    if (edgescape) {
+      const fields = /* @__PURE__ */ new Map();
+      for (const pair of edgescape.split(",")) {
+        const i = pair.indexOf("=");
+        if (i > 0) fields.set(pair.slice(0, i).trim().toLowerCase(), pair.slice(i + 1).trim());
+      }
+      const fill = (key, field) => {
+        const v = fields.get(field);
+        if (v && !connection[key]) connection[key] = v.slice(0, MAX_CONNECTION_VALUE_CHARS);
+      };
+      fill("country", "country_code");
+      fill("region", "region_code");
+      fill("city", "city");
+      fill("latitude", "lat");
+      fill("longitude", "long");
+      fill("timeZone", "timezone");
+      fill("asn", "asnum");
+      fill("continent", "continent");
+    }
+  }
   if (!connection.ip) {
     const xff = lower["x-forwarded-for"];
     const client = xff?.split(",")[0]?.trim();