@astrasyncai/verification-gateway 5.4.0 → 5.4.2

package/dist/agent/index.d.mts

@@ -1,3 +1,224 @@
-export { A as AgentClient, a as AstraSyncSdkError, C as ChallengeHandler, O as OwnershipMismatchError, P as PDLSSConfig, T as TransportPDLSS, f as formatPDLSSForTransport, p as parsePDLSSFromTransport, r as recordDecision } from '../index-BVJkTyIF.mjs';
-import '../types-CD1F9fmp.mjs';
-import '../metadata-capture.mjs';
+import { A as AstraSyncCredentials, P as ProtocolTransport, G as GatewayConfig } from '../types-BfILnheI.mjs';
+
+/**
+ * AgentClient — Credential Presentation
+ *
+ * Agent-side SDK for automatically injecting AstraSync credentials
+ * into outgoing requests across all supported protocols.
+ */
+
+interface AgentClientConfig {
+    agentId: string;
+    verifyUrl?: string;
+    challengeUrl?: string;
+    pdlss?: AstraSyncCredentials['pdlss'];
+    /** Base URL for AstraSync API (used for ownership check). Defaults to https://astrasync.ai/api */
+    apiBaseUrl?: string;
+    /** API key used to authenticate ownership check + other authenticated calls. */
+    apiKey?: string;
+}
+interface FetchOptions extends RequestInit {
+    purpose?: string;
+    action?: string;
+}
+declare class AgentClient {
+    private credentials;
+    private apiBaseUrl;
+    private apiKey;
+    constructor(config: AgentClientConfig);
+    /**
+     * Async factory that validates the API key's account owns the configured
+     * ASTRA-id before returning a usable client. Refuses to initialise on
+     * mismatch so a stolen ASTRA-id cannot be paired with a valid (different)
+     * API key.
+     *
+     * Set env `ASTRASYNC_SKIP_OWNERSHIP_CHECK=true` to bypass — intended for
+     * test environments only.
+     */
+    static create(config: AgentClientConfig): Promise<AgentClient>;
+    /**
+     * Calls GET /api/agents/:astraId/ownership with the configured API key.
+     * Returns true only when the backend confirms this API key's account
+     * owns the configured agent.
+     */
+    private verifyOwnership;
+    /**
+     * Make an HTTP request with AstraSync headers automatically injected.
+     */
+    fetch(url: string, options?: FetchOptions): Promise<Response>;
+    /**
+     * Prepare A2A task metadata with AstraSync credentials.
+     */
+    prepareA2AMetadata(task: Record<string, unknown>, overrides?: {
+        purpose?: string;
+        action?: string;
+    }): Record<string, unknown>;
+    /**
+     * Prepare MCP params with AstraSync _meta.
+     */
+    prepareMcpMeta(params: Record<string, unknown>, overrides?: {
+        purpose?: string;
+        action?: string;
+    }): Record<string, unknown>;
+    /**
+     * Generic: apply credentials to any protocol.
+     */
+    applyCredentials(protocol: ProtocolTransport, target: Record<string, unknown>, overrides?: {
+        purpose?: string;
+        action?: string;
+    }): Record<string, unknown>;
+    private buildCredentials;
+}
+
+/**
+ * ChallengeHandler — Agent-Side Runtime Challenge Responder
+ *
+ * Handles incoming runtime challenges from AstraSync's verification service.
+ * Agents register pending counterparties before initiating contact,
+ * then this handler validates and responds to challenges.
+ */
+interface ChallengeResponse {
+    status: number;
+    body: {
+        challengeId: string;
+        acknowledged: boolean;
+        pendingCounterparties: string[];
+        respondedAt: string;
+        error?: string;
+    };
+}
+interface ChallengeHandlerConfig {
+    agentId: string;
+}
+declare class ChallengeHandler {
+    private agentId;
+    private pendingCounterparties;
+    constructor(config: ChallengeHandlerConfig);
+    /**
+     * Register a counterparty as pending (before initiating contact).
+     */
+    registerPending(counterpartyId: string): void;
+    /**
+     * Remove a counterparty from pending list (after interaction complete).
+     */
+    removePending(counterpartyId: string): void;
+    /**
+     * Get current pending counterparties list.
+     */
+    getPendingList(): string[];
+    /**
+     * Express middleware for the challenge endpoint.
+     * Mount at: app.post('/astrasync/challenge', handler.expressMiddleware())
+     */
+    expressMiddleware(): (req: {
+        body: unknown;
+    }, res: {
+        status: (code: number) => {
+            json: (body: unknown) => void;
+        };
+    }) => void;
+    /**
+     * Generic handler (framework-agnostic).
+     * Returns { status, body } for the caller to send.
+     */
+    handleChallenge(body: unknown): ChallengeResponse;
+}
+
+/**
+ * PDLSS Formatter — Transport Format Conversion
+ *
+ * Converts between full PDLSS boundaries and compact transport format
+ * used in HTTP headers, A2A metadata, and MCP _meta blocks.
+ */
+
+/**
+ * Full PDLSS configuration (as returned by the backend).
+ */
+interface PDLSSConfig {
+    purpose?: {
+        categories?: string[];
+        allowedActions?: string[];
+        deniedActions?: string[];
+    };
+    duration?: {
+        maxSessionDuration?: number;
+        ttl?: number;
+        allowedDays?: number[];
+        allowedHours?: {
+            start: number;
+            end: number;
+        };
+    };
+    limits?: {
+        autonomousThreshold?: number;
+        approvalThreshold?: number;
+        currency?: string;
+    };
+    scope?: {
+        jurisdictions?: string[];
+        resources?: string[];
+        resourceTypes?: string[];
+    };
+    selfInstantiation?: {
+        allowed: boolean;
+        maxDepth?: number;
+        maxSubAgents?: number;
+    };
+}
+/**
+ * Compact transport format (embedded in headers/metadata).
+ */
+type TransportPDLSS = NonNullable<AstraSyncCredentials['pdlss']>;
+/**
+ * Convert full PDLSS boundaries into compact transport format.
+ * Used by AgentClient when building credential headers/metadata.
+ */
+declare function formatPDLSSForTransport(pdlss: PDLSSConfig): TransportPDLSS;
+/**
+ * Parse transport format back into full PDLSS config.
+ * Used by counterparty-side when receiving credentials.
+ */
+declare function parsePDLSSFromTransport(transport: TransportPDLSS): PDLSSConfig;
+
+/**
+ * Decision Client — Counterparty-Side Decision Recording
+ *
+ * Helper for counterparties to record their grant/deny decisions
+ * back to AstraSync after receiving a verification result.
+ */
+
+interface RecordDecisionParams {
+    sessionId: string;
+    decision: 'granted' | 'denied';
+    reason?: string;
+    tokenIssued?: boolean;
+    auditId?: string;
+}
+interface RecordDecisionResult {
+    recorded: boolean;
+    blockchainTxHash?: string;
+}
+/**
+ * Record a counterparty's grant/deny decision for a verification session.
+ * POST to /agents/verify-access/:sessionId/decision
+ */
+declare function recordDecision(config: GatewayConfig, params: RecordDecisionParams): Promise<RecordDecisionResult>;
+
+/**
+ * Agent-side SDK errors.
+ */
+declare class AstraSyncSdkError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+/**
+ * Thrown when the API key used to initialise AgentClient is not owned by
+ * the same account that registered the configured ASTRA-id. Blocks the
+ * client from doing anything under a mismatched identity.
+ */
+declare class OwnershipMismatchError extends AstraSyncSdkError {
+    readonly astraId: string;
+    constructor(astraId: string);
+}
+
+export { AgentClient, AstraSyncSdkError, ChallengeHandler, OwnershipMismatchError, type PDLSSConfig, type TransportPDLSS, formatPDLSSForTransport, parsePDLSSFromTransport, recordDecision };

package/dist/agent/index.d.ts

@@ -1,3 +1,224 @@
-export { A as AgentClient, a as AstraSyncSdkError, C as ChallengeHandler, O as OwnershipMismatchError, P as PDLSSConfig, T as TransportPDLSS, f as formatPDLSSForTransport, p as parsePDLSSFromTransport, r as recordDecision } from '../index-DaMXZabg.js';
-import '../types-76TB0fxW.js';
-import '../metadata-capture.js';
+import { A as AstraSyncCredentials, P as ProtocolTransport, G as GatewayConfig } from '../types-BfILnheI.js';
+
+/**
+ * AgentClient — Credential Presentation
+ *
+ * Agent-side SDK for automatically injecting AstraSync credentials
+ * into outgoing requests across all supported protocols.
+ */
+
+interface AgentClientConfig {
+    agentId: string;
+    verifyUrl?: string;
+    challengeUrl?: string;
+    pdlss?: AstraSyncCredentials['pdlss'];
+    /** Base URL for AstraSync API (used for ownership check). Defaults to https://astrasync.ai/api */
+    apiBaseUrl?: string;
+    /** API key used to authenticate ownership check + other authenticated calls. */
+    apiKey?: string;
+}
+interface FetchOptions extends RequestInit {
+    purpose?: string;
+    action?: string;
+}
+declare class AgentClient {
+    private credentials;
+    private apiBaseUrl;
+    private apiKey;
+    constructor(config: AgentClientConfig);
+    /**
+     * Async factory that validates the API key's account owns the configured
+     * ASTRA-id before returning a usable client. Refuses to initialise on
+     * mismatch so a stolen ASTRA-id cannot be paired with a valid (different)
+     * API key.
+     *
+     * Set env `ASTRASYNC_SKIP_OWNERSHIP_CHECK=true` to bypass — intended for
+     * test environments only.
+     */
+    static create(config: AgentClientConfig): Promise<AgentClient>;
+    /**
+     * Calls GET /api/agents/:astraId/ownership with the configured API key.
+     * Returns true only when the backend confirms this API key's account
+     * owns the configured agent.
+     */
+    private verifyOwnership;
+    /**
+     * Make an HTTP request with AstraSync headers automatically injected.
+     */
+    fetch(url: string, options?: FetchOptions): Promise<Response>;
+    /**
+     * Prepare A2A task metadata with AstraSync credentials.
+     */
+    prepareA2AMetadata(task: Record<string, unknown>, overrides?: {
+        purpose?: string;
+        action?: string;
+    }): Record<string, unknown>;
+    /**
+     * Prepare MCP params with AstraSync _meta.
+     */
+    prepareMcpMeta(params: Record<string, unknown>, overrides?: {
+        purpose?: string;
+        action?: string;
+    }): Record<string, unknown>;
+    /**
+     * Generic: apply credentials to any protocol.
+     */
+    applyCredentials(protocol: ProtocolTransport, target: Record<string, unknown>, overrides?: {
+        purpose?: string;
+        action?: string;
+    }): Record<string, unknown>;
+    private buildCredentials;
+}
+
+/**
+ * ChallengeHandler — Agent-Side Runtime Challenge Responder
+ *
+ * Handles incoming runtime challenges from AstraSync's verification service.
+ * Agents register pending counterparties before initiating contact,
+ * then this handler validates and responds to challenges.
+ */
+interface ChallengeResponse {
+    status: number;
+    body: {
+        challengeId: string;
+        acknowledged: boolean;
+        pendingCounterparties: string[];
+        respondedAt: string;
+        error?: string;
+    };
+}
+interface ChallengeHandlerConfig {
+    agentId: string;
+}
+declare class ChallengeHandler {
+    private agentId;
+    private pendingCounterparties;
+    constructor(config: ChallengeHandlerConfig);
+    /**
+     * Register a counterparty as pending (before initiating contact).
+     */
+    registerPending(counterpartyId: string): void;
+    /**
+     * Remove a counterparty from pending list (after interaction complete).
+     */
+    removePending(counterpartyId: string): void;
+    /**
+     * Get current pending counterparties list.
+     */
+    getPendingList(): string[];
+    /**
+     * Express middleware for the challenge endpoint.
+     * Mount at: app.post('/astrasync/challenge', handler.expressMiddleware())
+     */
+    expressMiddleware(): (req: {
+        body: unknown;
+    }, res: {
+        status: (code: number) => {
+            json: (body: unknown) => void;
+        };
+    }) => void;
+    /**
+     * Generic handler (framework-agnostic).
+     * Returns { status, body } for the caller to send.
+     */
+    handleChallenge(body: unknown): ChallengeResponse;
+}
+
+/**
+ * PDLSS Formatter — Transport Format Conversion
+ *
+ * Converts between full PDLSS boundaries and compact transport format
+ * used in HTTP headers, A2A metadata, and MCP _meta blocks.
+ */
+
+/**
+ * Full PDLSS configuration (as returned by the backend).
+ */
+interface PDLSSConfig {
+    purpose?: {
+        categories?: string[];
+        allowedActions?: string[];
+        deniedActions?: string[];
+    };
+    duration?: {
+        maxSessionDuration?: number;
+        ttl?: number;
+        allowedDays?: number[];
+        allowedHours?: {
+            start: number;
+            end: number;
+        };
+    };
+    limits?: {
+        autonomousThreshold?: number;
+        approvalThreshold?: number;
+        currency?: string;
+    };
+    scope?: {
+        jurisdictions?: string[];
+        resources?: string[];
+        resourceTypes?: string[];
+    };
+    selfInstantiation?: {
+        allowed: boolean;
+        maxDepth?: number;
+        maxSubAgents?: number;
+    };
+}
+/**
+ * Compact transport format (embedded in headers/metadata).
+ */
+type TransportPDLSS = NonNullable<AstraSyncCredentials['pdlss']>;
+/**
+ * Convert full PDLSS boundaries into compact transport format.
+ * Used by AgentClient when building credential headers/metadata.
+ */
+declare function formatPDLSSForTransport(pdlss: PDLSSConfig): TransportPDLSS;
+/**
+ * Parse transport format back into full PDLSS config.
+ * Used by counterparty-side when receiving credentials.
+ */
+declare function parsePDLSSFromTransport(transport: TransportPDLSS): PDLSSConfig;
+
+/**
+ * Decision Client — Counterparty-Side Decision Recording
+ *
+ * Helper for counterparties to record their grant/deny decisions
+ * back to AstraSync after receiving a verification result.
+ */
+
+interface RecordDecisionParams {
+    sessionId: string;
+    decision: 'granted' | 'denied';
+    reason?: string;
+    tokenIssued?: boolean;
+    auditId?: string;
+}
+interface RecordDecisionResult {
+    recorded: boolean;
+    blockchainTxHash?: string;
+}
+/**
+ * Record a counterparty's grant/deny decision for a verification session.
+ * POST to /agents/verify-access/:sessionId/decision
+ */
+declare function recordDecision(config: GatewayConfig, params: RecordDecisionParams): Promise<RecordDecisionResult>;
+
+/**
+ * Agent-side SDK errors.
+ */
+declare class AstraSyncSdkError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+/**
+ * Thrown when the API key used to initialise AgentClient is not owned by
+ * the same account that registered the configured ASTRA-id. Blocks the
+ * client from doing anything under a mismatched identity.
+ */
+declare class OwnershipMismatchError extends AstraSyncSdkError {
+    readonly astraId: string;
+    constructor(astraId: string);
+}
+
+export { AgentClient, AstraSyncSdkError, ChallengeHandler, OwnershipMismatchError, type PDLSSConfig, type TransportPDLSS, formatPDLSSForTransport, parsePDLSSFromTransport, recordDecision };

package/dist/agent/index.js

@@ -31,7 +31,7 @@ __export(agent_exports, {
 module.exports = __toCommonJS(agent_exports);
 
 // src/version.ts
-var SDK_VERSION = "5.4.0";
+var SDK_VERSION = "5.4.1";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;