@astrasyncai/verification-gateway 5.7.0 → 5.9.0

package/README.md

@@ -407,7 +407,7 @@ interface VerificationResult {
     name: string;
     trustScore: number;
     trustLevel: 'BRONZE' | 'SILVER' | 'GOLD' | 'PLATINUM';
-    blockchainVerified: boolean;
+    blockchainAnchored: boolean;
   };
 
   developer?: {
@@ -474,6 +474,42 @@ interface StepUpApprovalInfo {
 
 Poll the `pollUrl` (unauthenticated, rate-limited 60 req/min) to check if the owner approved. The `getApprovalPollingInfo(result)` helper extracts it from a `VerificationResult`.
 
+### Attempt chain (`X-Astra-Attempt-Id`, 5.8.0)
+
+Every interaction chain carries an attempt id of the form `att_<32 hex>`. The
+AstraSync bridge stamps it on each call it delivers to your endpoint as the
+`X-Astra-Attempt-Id` request header, and the express / Next.js middleware
+automatically read the header and thread the id into verify-access (invalid
+values are dropped). Two effects:
+
+- **One intent = one approval.** A step-up the owner already approved for
+  this chain passes every later verify-access hop that carries the same
+  attempt id (the bridge pre-verify, your middleware's re-verify, and any
+  re-drive after a delivery failure) — it is never asked for twice.
+- **Idempotency key.** Key your own idempotency/dedupe on the header value:
+  a re-drive of the same chain arrives with the SAME id, so replays of an
+  already-executed action can be detected venue-side.
+
+No configuration is needed; direct (non-bridge) callers simply don't send the
+header and behaviour is unchanged.
+
+### Bridge-fronted endpoints: hold budgets
+
+The bridge delivers your endpoint's response within an HTTP budget of **30 s
+by default (60 s maximum, configurable per route via `responseBudgetMs` in
+your registration's `routes[]`)**. `stepUpMaxWaitMs: 0` (hold in-request
+until the approval decides) is designed for direct integrations and will
+outlive that budget — behind the bridge, either:
+
+- leave `stepUpMaxWaitMs` unset and return the 403 with `stepUpApproval`
+  in-band (the bridge renders the approval card and re-drives after
+  approval), or
+- bound the hold to well under the budget (~20 s) so the deny still reaches
+  the bridge in time.
+
+Either way the attempt chain above guarantees the post-approval re-drive
+passes without a second approval.
+
 ## Checkout & settlement (astra-pay)
 
 The first-party commerce rail: an agent shops under its ASTRA-id, holds NO

package/dist/adapters/express.d.mts

@@ -1,5 +1,5 @@
 import { RequestHandler, Request } from 'express';
-import { d as VerificationResult, E as ExpressMiddlewareOptions, a as AstraSyncCredentials } from '../types-BK_pRNSs.mjs';
+import { d as VerificationResult, E as ExpressMiddlewareOptions, a as AstraSyncCredentials } from '../types-CTmUpNpS.mjs';
 
 /**
  * AstraSync Universal Verification Gateway - Express Middleware

package/dist/adapters/express.d.ts

@@ -1,5 +1,5 @@
 import { RequestHandler, Request } from 'express';
-import { d as VerificationResult, E as ExpressMiddlewareOptions, a as AstraSyncCredentials } from '../types-BK_pRNSs.js';
+import { d as VerificationResult, E as ExpressMiddlewareOptions, a as AstraSyncCredentials } from '../types-CTmUpNpS.js';
 
 /**
  * AstraSync Universal Verification Gateway - Express Middleware

package/dist/adapters/express.js

@@ -26,7 +26,7 @@ __export(express_exports, {
 module.exports = __toCommonJS(express_exports);
 
 // src/version.ts
-var SDK_VERSION = "5.7.0";
+var SDK_VERSION = "5.9.0";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;
@@ -636,7 +636,7 @@ async function verify(config, request, options) {
     name: apiResponse.agent.name,
     trustScore: apiResponse.agent.trustScore,
     trustLevel: getTrustLevel(apiResponse.agent.trustScore),
-    blockchainVerified: apiResponse.agent.blockchainStatus === "verified",
+    blockchainAnchored: apiResponse.agent.blockchainStatus === "anchored",
     status: apiResponse.agent.agentStatus
   } : void 0;
   const developer = apiResponse.developer ? {
@@ -1221,11 +1221,16 @@ var DEFAULT_EDGE_CONFIG = Object.freeze({
   mode: "observe",
   depth: "classify",
   pathRules: [],
-  sampling: Object.freeze({ anonymousBeaconRate: 0.1 }),
+  sampling: Object.freeze({ anonymousBeaconRate: 1 }),
   failurePosture: "open"
 });
 var EDGE_MODES = ["observe", "enforce"];
 var EDGE_DEPTHS = ["classify", "authenticate", "authorize"];
+function isSamplingShape(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const rate = value.anonymousBeaconRate;
+  return typeof rate === "number" && rate >= 0 && rate <= 1;
+}
 function isEdgeConfig(value) {
   if (typeof value !== "object" || value === null) return false;
   const v = value;
@@ -1239,10 +1244,13 @@ function isEdgeConfig(value) {
     if (typeof r.pattern !== "string" || r.pattern.length === 0) return false;
     if (r.mode !== void 0 && !EDGE_MODES.includes(r.mode)) return false;
     if (r.depth !== void 0 && !EDGE_DEPTHS.includes(r.depth)) return false;
+    if (r.sampling !== void 0 && !isSamplingShape(r.sampling)) return false;
   }
-  const sampling = v.sampling;
-  if (typeof sampling !== "object" || sampling === null || typeof sampling.anonymousBeaconRate !== "number" || sampling.anonymousBeaconRate < 0 || sampling.anonymousBeaconRate > 1) {
-    return false;
+  if (!isSamplingShape(v.sampling)) return false;
+  if (v.queryValueAllowlist !== void 0) {
+    if (!Array.isArray(v.queryValueAllowlist) || v.queryValueAllowlist.length > 16 || !v.queryValueAllowlist.every((e) => typeof e === "string" && e.length > 0 && e.length <= 64)) {
+      return false;
+    }
   }
   return v.failurePosture === "open";
 }
@@ -1344,7 +1352,20 @@ var PLATFORM_AGENT_SIGNATURES = [
   {
     vendor: "gemini",
     displayName: "Google Gemini",
-    uaPatterns: [/gemini/i, /google-gemini/i, /bard/i],
+    uaPatterns: [
+      /gemini/i,
+      /google-gemini/i,
+      /bard/i,
+      // Google's AI/agent fetcher tokens (VI uplift 1.3). These are the
+      // AI-training/agent crawlers, NOT the Search crawler — googlebot IP
+      // ranges attribute Search and are deliberately absent from
+      // vendor-ip-ranges. Anchored tokens: none appears in stock browser
+      // UAs, and `-` counts as a \b boundary so GoogleOther-Image/-Video
+      // match too.
+      /\bGoogle-Extended\b/i,
+      /\bGoogleOther\b/i,
+      /\bGoogle-CloudVertexBot\b/i
+    ],
     agentCardPatterns: [/gemini\.google\.com/i, /ai\.google\.dev/i],
     apiKeyFormatPatterns: [/^aiza/i],
     headerPatterns: [/^x-goog-user-project/i, /^x-goog-api-client/i]
@@ -1390,6 +1411,16 @@ var PLATFORM_AGENT_SIGNATURES = [
     uaPatterns: [/\bcomet\/\d/i],
     headerPatterns: [/^sec-ch-ua: .*comet/i]
   },
+  // The MCP bridge's own catalog fetches (VI uplift 1.5). Deliberately a
+  // DISTINCT UA from `astrasync-sdk/`: bridge fetches are buyer-agent
+  // traffic merchants should see (identified · unregistered), so this
+  // vendor is kept OUT of the self-traffic filter and the edge's SELF
+  // short-circuit.
+  {
+    vendor: "astrasync-bridge",
+    displayName: "AstraSync MCP bridge (buyer-agent catalog fetch)",
+    uaPatterns: [/^astrasync-bridge\//i]
+  },
   // Our own SDK self-identifies (sdkFetch stamps this UA) — first-party
   // traffic must never pollute the unknown/anonymous pool it exists to audit.
   {
@@ -1834,6 +1865,8 @@ function createMiddleware(options) {
           }
         }
       }
+      const attemptHeader = req.headers["x-astra-attempt-id"];
+      const inboundAttemptId = typeof attemptHeader === "string" && /^att_[0-9a-f]{32}$/.test(attemptHeader) ? attemptHeader : void 0;
       const verificationRequest = {
         credentials,
         purpose,
@@ -1846,6 +1879,7 @@ function createMiddleware(options) {
         durationRequired: astraCreds?.pdlss?.duration?.maxSessionDuration,
         ...txValue !== void 0 && { transactionValue: txValue },
         ...txCurrency && { currency: txCurrency },
+        ...inboundAttemptId && { attemptId: inboundAttemptId },
         callerMetadata: {
           sourceIp: originalClientIp,
           userAgent: req.headers["user-agent"],