@astrasyncai/verification-gateway 5.7.0 → 5.9.0

package/dist/git-trigger/git-hooks.d.mts

@@ -1,4 +1,4 @@
-import { T as TokenGuidance, b as CounterpartyType } from '../types-BCmHFdkJ.mjs';
+import { T as TokenGuidance, b as CounterpartyType } from '../types-DQrn_kei.mjs';
 import '../metadata-capture.mjs';
 
 /**

package/dist/git-trigger/git-hooks.d.ts

@@ -1,4 +1,4 @@
-import { T as TokenGuidance, b as CounterpartyType } from '../types-CwY5IY-0.js';
+import { T as TokenGuidance, b as CounterpartyType } from '../types-CtFXmDzm.js';
 import '../metadata-capture.js';
 
 /**

package/dist/index.d.mts

@@ -82,6 +82,14 @@ interface ObservedMetadata {
      * by the edge path, which sees the raw query string.
      */
     queryKeys?: string[];
+    /**
+     * Query-string VALUES for parameter names the endpoint owner explicitly
+     * allow-listed (`EdgeConfig.queryValueAllowlist`, seeded `utm_*` — VI
+     * uplift Part 4). The default remains NO value capture; this exists so
+     * campaign attribution (utm_source/medium/campaign) can be reported
+     * without widening the privacy stance. Bounded 16 entries × 256 chars.
+     */
+    queryParams?: Record<string, string>;
     /**
      * Version of the capture semantics this object was produced under — see
      * {@link CAPTURE_SCHEMA_VERSION}. Optional for backward compatibility with
@@ -104,6 +112,15 @@ interface SanitizeHeadersResult {
 declare const MAX_HEADERS = 64;
 declare const MAX_HEADER_VALUE_BYTES = 1024;
 declare const MAX_TOTAL_BYTES: number;
+/**
+ * `X-Astra-Source` declared-source protocol (VI uplift Part 2). The header is
+ * SELF-ASSERTED and spoofable — it buys attribution, never trust: it is never
+ * read by any access decision and never conflated with fingerprint-matched
+ * (`platformVendor`) or ASTRA-verified evidence. One shared validator so the
+ * edge, backend, and bridge accept byte-identical values.
+ */
+declare const DECLARED_SOURCE_MAX = 64;
+declare function normalizeDeclaredSource(value: string | undefined | null): string | undefined;
 /**
  * Extract the safe key-format prefix from a credential header value. Strips a
  * leading `Bearer ` / `Basic ` scheme, then returns the longest known prefix
@@ -337,8 +354,8 @@ interface VerifiedAgent {
     trustScore: number;
     /** Trust level tier */
     trustLevel: TrustLevel;
-    /** Whether agent is blockchain-verified */
-    blockchainVerified: boolean;
+    /** Whether the agent's identity record is anchored on-chain (5.9.0: was `blockchainVerified`) */
+    blockchainAnchored: boolean;
     /** Agent status */
     status: 'active' | 'inactive' | 'suspended' | 'migrating' | 'terminated' | 'retired';
 }
@@ -767,6 +784,21 @@ interface CallerMetadata {
     forwardedFor?: string;
     /** Published agent card URL, if the agent advertised one (future: from agent headers). */
     agentCardUrl?: string;
+    /**
+     * Transport marker for the hop that relayed this call (e.g.
+     * `mcp-bridge/<version>`, or an `astrasync-sdk/<v>` UA demoted out of the
+     * userAgent slot). Attribution only — never the caller's UA and never a
+     * trust signal; kept outside the self-traffic filter so relayed buyer
+     * traffic stays merchant-visible.
+     */
+    via?: string;
+    /**
+     * Self-declared platform from the `X-Astra-Source` header (VI uplift
+     * Part 2), normalised via `normalizeDeclaredSource`. Spoofable by design —
+     * surfaces as the distinct "declared · unverified" evidence class, never
+     * as fingerprint/verified evidence, and never enters an access decision.
+     */
+    declaredSource?: string;
     /**
      * The full sanitised view of the agent's inbound request headers + connection
      * signals (maximal metadata capture: every signal legitimately visible on
@@ -1071,6 +1103,13 @@ interface RouteAccessConfig {
     allowedJurisdictions?: string[];
     /** Maximum transaction value for this route */
     maxTransactionValue?: number;
+    /**
+     * Venue-declared response budget for this route in ms (5.8.0). Consumed by
+     * the AstraSync bridge, which waits this long before timing out a call it
+     * delivers to the venue (clamped bridge-side to a 60s ceiling; 30s default
+     * when unset). Declare it when a route's in-band holds outlive 30s.
+     */
+    responseBudgetMs?: number;
     /**
      * Backend-evaluator strict mode: when true AND
      * `allowedPurposes` is non-empty, verify-access denies requests arriving
@@ -1492,6 +1531,18 @@ declare function reportUnregisteredAttempt(config: GatewayConfig, data: {
     userAgent?: string;
     requestPath?: string;
     requestMethod?: string;
+    /**
+     * VI uplift Part 3 — attempt-chain handle (`att_<32hex>`, from the
+     * X-Astra-Attempt-Id header or an `?astra_attempt=` deep link). Joins
+     * the beacon into the agent's research chain. Attribution only.
+     */
+    attemptId?: string;
+    /** First-class referer (traffic-source reporting). */
+    referer?: string;
+    /** The caller's Accept header (surface-classifier input). */
+    accept?: string;
+    /** Self-declared platform from X-Astra-Source (attribution, never trust). */
+    declaredSource?: string;
     /**
      * 3.9.0 — edge-adapter evidence fields, persisted into the
      * event's eventData by the backend: `protocol` = detected transport/
@@ -4518,6 +4569,15 @@ interface EdgePathRule {
     mode?: EdgeMode;
     /** Override the top-level depth for this path. */
     depth?: EdgeVerificationDepth;
+    /**
+     * Per-path beacon sampling opt-DOWN (VI uplift 1.2). The default is full
+     * capture; put a fractional rate on explicitly high-volume/low-value paths
+     * (static mirrors, health checks) instead of sampling commerce traffic.
+     */
+    sampling?: {
+        /** Fraction (0..1) of anonymous-bot requests that emit a beacon. */
+        anonymousBeaconRate: number;
+    };
 }
 interface EdgeConfig {
     /** Shape version — bump on breaking changes. */
@@ -4532,6 +4592,15 @@ interface EdgeConfig {
         /** Fraction (0..1) of anonymous-bot requests that emit a beacon. */
         anonymousBeaconRate: number;
     };
+    /**
+     * Query-string parameter names whose VALUES may be captured into
+     * `observedMetadata.queryParams` (VI uplift Part 4 — campaign/UTM
+     * attribution). Lowercase exact names or a single trailing-`*` glob
+     * (`utm_*`); ≤16 entries × ≤64 chars. ABSENT by default — the privacy
+     * stance (query values dropped at capture) is unchanged unless the
+     * endpoint owner explicitly configures this.
+     */
+    queryValueAllowlist?: string[];
     /**
      * 4.5.0: the EFFECTIVE failure posture is derived from the effective
      * mode — fail posture follows success posture. Observe fails open
@@ -4550,6 +4619,11 @@ interface EdgeConfig {
  * The safe default: observe-only, classification depth, nothing enforced.
  * Served by the backend when an endpoint has never been configured, and
  * used by `getEdgeConfig` whenever no config can be fetched.
+ *
+ * Beacon rate 1.0 (VI uplift 1.2): every anonymous hit beacons by default —
+ * a sampled denominator understates anonymous traffic in every dashboard
+ * tile and no toggle can reveal the dropped rows. Sampling is a deliberate
+ * per-path opt-down (`EdgePathRule.sampling`) for static/high-volume paths.
  */
 declare const DEFAULT_EDGE_CONFIG: EdgeConfig;
 /** Structural guard for configs arriving over the wire. */
@@ -4614,7 +4688,7 @@ declare function _resetEdgeConfigCache(): void;
  * Pure regex — no Node built-ins, edge-safe. Detection is regex-only for
  * v2.9 — TLS fingerprinting / behavioural signatures are deferred.
  */
-type PlatformAgentVendor = 'claude' | 'chatgpt' | 'gemini' | 'cursor' | 'goose' | 'perplexity' | 'chatgpt-atlas' | 'perplexity-comet' | 'astrasync-sdk' | 'unknown';
+type PlatformAgentVendor = 'claude' | 'chatgpt' | 'gemini' | 'cursor' | 'goose' | 'perplexity' | 'chatgpt-atlas' | 'perplexity-comet' | 'astrasync-bridge' | 'astrasync-sdk' | 'unknown';
 interface PlatformFingerprint {
     vendor: PlatformAgentVendor;
     /** A stable identifier used as the orphan-agent dedup key. */
@@ -4758,7 +4832,7 @@ declare function detectRuntime(userAgent: string | undefined | null): string | u
  * silently (never throwing), so this is a no-op there — which is correct:
  * in a browser the page's real UA is the honest identity.
  */
-declare const SDK_USER_AGENT = "astrasync-sdk/5.7.0";
+declare const SDK_USER_AGENT = "astrasync-sdk/5.9.0";
 declare const sdkFetch: typeof fetch;
 
 /**
@@ -4779,6 +4853,6 @@ declare const sdkFetch: typeof fetch;
  * is fine — bumping both in the release-ceremony commit keeps them
  * lockstep.
  */
-declare const SDK_VERSION = "5.7.0";
+declare const SDK_VERSION = "5.9.0";
 
-export { AgentClient, type AgentCredentials, type AgentProtocol, type AgentRecord, AstraSync, type AstraSyncConfig, type AstraSyncCredentials, AstraSyncError, type AttemptOutcome, type AttemptReport, AuthenticationError, type BuildGuidanceParams, CAPTURE_SCHEMA_VERSION, type CallerMetadata, ChallengeHandler, type CommerceArtifactsPayload, type CommerceContext, type CommercePipelineInput, type CommerceShieldProps, type ConsiderationItem, type ConsiderationSet, type CounterpartyType, DEFAULT_EDGE_CONFIG, type DynamicPlatformFingerprint, type EdgeConfig, type EdgeMode, type EdgePathRule, type EdgeVerificationDepth, type EnhancedVerificationResult, type ExpressMiddlewareOptions, type FetchEdgeConfigResult, type FetchEdgeConfigSuccess, type FiatSettlementBinding, type FrameworkConfig, type FulfilmentInfo, type GatewayConfig, type GuidanceEnvelope, type GuidanceInfo, type HealthResponse, KYDRequiredError, MAX_HEADERS, MAX_HEADER_VALUE_BYTES, MAX_TOTAL_BYTES, MCP_VERIFIED_HOP_HEADER, MCP_VERIFIED_HOP_MAX_AGE_MS, type McpMiddlewareOptions, type MerchantSettlementToken, type ModelConfig, type NextJsMiddlewareOptions, type ObservedMetadata, type PDLSSConfig$1 as PDLSSConfig, type PDLSSDuration, type PDLSSInfo, type PDLSSLimits, type PDLSSPurpose, type PDLSSScope, type PDLSSSelfInstantiation, PLATFORM_AGENT_SIGNATURES, type PendingRegistrationResponse, type PlatformAgentVendor, type PlatformDetectionInput, type PlatformFingerprint, type PlatformSignatureDef, type PollRegistrationResult, type ProtocolTransport, RUNTIME_SIGNATURES, type RegisterOptions, type RegisterResult, RegistrationDeniedError, RegistrationExpiredError, type RegistrationResponse, RegistrationTimeoutError, type RouteAccessConfig, type RuntimeChallengeResult, type RuntimeSignature, type SDKOptions, SDK_USER_AGENT, type SanitizeHeadersResult, type SettlementArtifact, type SettlementArtifactBinding, type SettlementArtifactBindingBase, type SettlementDecision, type SettlementOutcomeInfo, type SettlementRequest, type StablecoinSettlementBinding, type StepUpApprovalInfo, type StepUpApprovalStatus, type StepUpOutcome, TRUST_LEVEL_RANGES, type TokenGuidance, type ToolGate, type ToolGateConfig, type TrustLevel, SDK_VERSION as VERSION, type VerificationInterstitialProps, type VerificationRequest, type VerificationResult, type VerifiedAgent, type VerifiedDeveloper, type VerifiedHopMarker, type VerifiedOrganization, type VerifyOptions, type VerifyResponse, type WaitForApprovalOptions, type WellKnownAgenticCommerce, _resetEdgeConfigCache, index as agent, authorizeSettlement, awaitStepUpApproval, buildGuidance, buildSdkObservedMetadata, clearCache, createMcpMiddleware, degradeToObserve, deriveConnectionFromHeaders, detectPlatformFingerprint, detectRuntime, express, extractApiKeyFormat, extractCredentials, extractMcpCredentials, extractPlatformHeaders, fetchEdgeConfig, fetchRoutes, getCachedWellKnownUrls, getEdgeConfig, getTrustLevel, getWellKnownUrls, hasCredentials, isEdgeConfig, isVerifiedHopValidFor, matchEdgePathRule, matchPlatformSignature, nextjs, parseVerifiedHop, pollStepUpStatus, prefetchWellKnown, quickVerify, recordDecision, reportAttempt, reportUnregisteredAttempt, sanitizeHeaders, sdk, sdkFetch, serializeVerifiedHop, setMcpMeta, index$1 as transport, verify };
+export { AgentClient, type AgentCredentials, type AgentProtocol, type AgentRecord, AstraSync, type AstraSyncConfig, type AstraSyncCredentials, AstraSyncError, type AttemptOutcome, type AttemptReport, AuthenticationError, type BuildGuidanceParams, CAPTURE_SCHEMA_VERSION, type CallerMetadata, ChallengeHandler, type CommerceArtifactsPayload, type CommerceContext, type CommercePipelineInput, type CommerceShieldProps, type ConsiderationItem, type ConsiderationSet, type CounterpartyType, DECLARED_SOURCE_MAX, DEFAULT_EDGE_CONFIG, type DynamicPlatformFingerprint, type EdgeConfig, type EdgeMode, type EdgePathRule, type EdgeVerificationDepth, type EnhancedVerificationResult, type ExpressMiddlewareOptions, type FetchEdgeConfigResult, type FetchEdgeConfigSuccess, type FiatSettlementBinding, type FrameworkConfig, type FulfilmentInfo, type GatewayConfig, type GuidanceEnvelope, type GuidanceInfo, type HealthResponse, KYDRequiredError, MAX_HEADERS, MAX_HEADER_VALUE_BYTES, MAX_TOTAL_BYTES, MCP_VERIFIED_HOP_HEADER, MCP_VERIFIED_HOP_MAX_AGE_MS, type McpMiddlewareOptions, type MerchantSettlementToken, type ModelConfig, type NextJsMiddlewareOptions, type ObservedMetadata, type PDLSSConfig$1 as PDLSSConfig, type PDLSSDuration, type PDLSSInfo, type PDLSSLimits, type PDLSSPurpose, type PDLSSScope, type PDLSSSelfInstantiation, PLATFORM_AGENT_SIGNATURES, type PendingRegistrationResponse, type PlatformAgentVendor, type PlatformDetectionInput, type PlatformFingerprint, type PlatformSignatureDef, type PollRegistrationResult, type ProtocolTransport, RUNTIME_SIGNATURES, type RegisterOptions, type RegisterResult, RegistrationDeniedError, RegistrationExpiredError, type RegistrationResponse, RegistrationTimeoutError, type RouteAccessConfig, type RuntimeChallengeResult, type RuntimeSignature, type SDKOptions, SDK_USER_AGENT, type SanitizeHeadersResult, type SettlementArtifact, type SettlementArtifactBinding, type SettlementArtifactBindingBase, type SettlementDecision, type SettlementOutcomeInfo, type SettlementRequest, type StablecoinSettlementBinding, type StepUpApprovalInfo, type StepUpApprovalStatus, type StepUpOutcome, TRUST_LEVEL_RANGES, type TokenGuidance, type ToolGate, type ToolGateConfig, type TrustLevel, SDK_VERSION as VERSION, type VerificationInterstitialProps, type VerificationRequest, type VerificationResult, type VerifiedAgent, type VerifiedDeveloper, type VerifiedHopMarker, type VerifiedOrganization, type VerifyOptions, type VerifyResponse, type WaitForApprovalOptions, type WellKnownAgenticCommerce, _resetEdgeConfigCache, index as agent, authorizeSettlement, awaitStepUpApproval, buildGuidance, buildSdkObservedMetadata, clearCache, createMcpMiddleware, degradeToObserve, deriveConnectionFromHeaders, detectPlatformFingerprint, detectRuntime, express, extractApiKeyFormat, extractCredentials, extractMcpCredentials, extractPlatformHeaders, fetchEdgeConfig, fetchRoutes, getCachedWellKnownUrls, getEdgeConfig, getTrustLevel, getWellKnownUrls, hasCredentials, isEdgeConfig, isVerifiedHopValidFor, matchEdgePathRule, matchPlatformSignature, nextjs, normalizeDeclaredSource, parseVerifiedHop, pollStepUpStatus, prefetchWellKnown, quickVerify, recordDecision, reportAttempt, reportUnregisteredAttempt, sanitizeHeaders, sdk, sdkFetch, serializeVerifiedHop, setMcpMeta, index$1 as transport, verify };

package/dist/index.d.ts

@@ -82,6 +82,14 @@ interface ObservedMetadata {
      * by the edge path, which sees the raw query string.
      */
     queryKeys?: string[];
+    /**
+     * Query-string VALUES for parameter names the endpoint owner explicitly
+     * allow-listed (`EdgeConfig.queryValueAllowlist`, seeded `utm_*` — VI
+     * uplift Part 4). The default remains NO value capture; this exists so
+     * campaign attribution (utm_source/medium/campaign) can be reported
+     * without widening the privacy stance. Bounded 16 entries × 256 chars.
+     */
+    queryParams?: Record<string, string>;
     /**
      * Version of the capture semantics this object was produced under — see
      * {@link CAPTURE_SCHEMA_VERSION}. Optional for backward compatibility with
@@ -104,6 +112,15 @@ interface SanitizeHeadersResult {
 declare const MAX_HEADERS = 64;
 declare const MAX_HEADER_VALUE_BYTES = 1024;
 declare const MAX_TOTAL_BYTES: number;
+/**
+ * `X-Astra-Source` declared-source protocol (VI uplift Part 2). The header is
+ * SELF-ASSERTED and spoofable — it buys attribution, never trust: it is never
+ * read by any access decision and never conflated with fingerprint-matched
+ * (`platformVendor`) or ASTRA-verified evidence. One shared validator so the
+ * edge, backend, and bridge accept byte-identical values.
+ */
+declare const DECLARED_SOURCE_MAX = 64;
+declare function normalizeDeclaredSource(value: string | undefined | null): string | undefined;
 /**
  * Extract the safe key-format prefix from a credential header value. Strips a
  * leading `Bearer ` / `Basic ` scheme, then returns the longest known prefix
@@ -337,8 +354,8 @@ interface VerifiedAgent {
     trustScore: number;
     /** Trust level tier */
     trustLevel: TrustLevel;
-    /** Whether agent is blockchain-verified */
-    blockchainVerified: boolean;
+    /** Whether the agent's identity record is anchored on-chain (5.9.0: was `blockchainVerified`) */
+    blockchainAnchored: boolean;
     /** Agent status */
     status: 'active' | 'inactive' | 'suspended' | 'migrating' | 'terminated' | 'retired';
 }
@@ -767,6 +784,21 @@ interface CallerMetadata {
     forwardedFor?: string;
     /** Published agent card URL, if the agent advertised one (future: from agent headers). */
     agentCardUrl?: string;
+    /**
+     * Transport marker for the hop that relayed this call (e.g.
+     * `mcp-bridge/<version>`, or an `astrasync-sdk/<v>` UA demoted out of the
+     * userAgent slot). Attribution only — never the caller's UA and never a
+     * trust signal; kept outside the self-traffic filter so relayed buyer
+     * traffic stays merchant-visible.
+     */
+    via?: string;
+    /**
+     * Self-declared platform from the `X-Astra-Source` header (VI uplift
+     * Part 2), normalised via `normalizeDeclaredSource`. Spoofable by design —
+     * surfaces as the distinct "declared · unverified" evidence class, never
+     * as fingerprint/verified evidence, and never enters an access decision.
+     */
+    declaredSource?: string;
     /**
      * The full sanitised view of the agent's inbound request headers + connection
      * signals (maximal metadata capture: every signal legitimately visible on
@@ -1071,6 +1103,13 @@ interface RouteAccessConfig {
     allowedJurisdictions?: string[];
     /** Maximum transaction value for this route */
     maxTransactionValue?: number;
+    /**
+     * Venue-declared response budget for this route in ms (5.8.0). Consumed by
+     * the AstraSync bridge, which waits this long before timing out a call it
+     * delivers to the venue (clamped bridge-side to a 60s ceiling; 30s default
+     * when unset). Declare it when a route's in-band holds outlive 30s.
+     */
+    responseBudgetMs?: number;
     /**
      * Backend-evaluator strict mode: when true AND
      * `allowedPurposes` is non-empty, verify-access denies requests arriving
@@ -1492,6 +1531,18 @@ declare function reportUnregisteredAttempt(config: GatewayConfig, data: {
     userAgent?: string;
     requestPath?: string;
     requestMethod?: string;
+    /**
+     * VI uplift Part 3 — attempt-chain handle (`att_<32hex>`, from the
+     * X-Astra-Attempt-Id header or an `?astra_attempt=` deep link). Joins
+     * the beacon into the agent's research chain. Attribution only.
+     */
+    attemptId?: string;
+    /** First-class referer (traffic-source reporting). */
+    referer?: string;
+    /** The caller's Accept header (surface-classifier input). */
+    accept?: string;
+    /** Self-declared platform from X-Astra-Source (attribution, never trust). */
+    declaredSource?: string;
     /**
      * 3.9.0 — edge-adapter evidence fields, persisted into the
      * event's eventData by the backend: `protocol` = detected transport/
@@ -4518,6 +4569,15 @@ interface EdgePathRule {
     mode?: EdgeMode;
     /** Override the top-level depth for this path. */
     depth?: EdgeVerificationDepth;
+    /**
+     * Per-path beacon sampling opt-DOWN (VI uplift 1.2). The default is full
+     * capture; put a fractional rate on explicitly high-volume/low-value paths
+     * (static mirrors, health checks) instead of sampling commerce traffic.
+     */
+    sampling?: {
+        /** Fraction (0..1) of anonymous-bot requests that emit a beacon. */
+        anonymousBeaconRate: number;
+    };
 }
 interface EdgeConfig {
     /** Shape version — bump on breaking changes. */
@@ -4532,6 +4592,15 @@ interface EdgeConfig {
         /** Fraction (0..1) of anonymous-bot requests that emit a beacon. */
         anonymousBeaconRate: number;
     };
+    /**
+     * Query-string parameter names whose VALUES may be captured into
+     * `observedMetadata.queryParams` (VI uplift Part 4 — campaign/UTM
+     * attribution). Lowercase exact names or a single trailing-`*` glob
+     * (`utm_*`); ≤16 entries × ≤64 chars. ABSENT by default — the privacy
+     * stance (query values dropped at capture) is unchanged unless the
+     * endpoint owner explicitly configures this.
+     */
+    queryValueAllowlist?: string[];
     /**
      * 4.5.0: the EFFECTIVE failure posture is derived from the effective
      * mode — fail posture follows success posture. Observe fails open
@@ -4550,6 +4619,11 @@ interface EdgeConfig {
  * The safe default: observe-only, classification depth, nothing enforced.
  * Served by the backend when an endpoint has never been configured, and
  * used by `getEdgeConfig` whenever no config can be fetched.
+ *
+ * Beacon rate 1.0 (VI uplift 1.2): every anonymous hit beacons by default —
+ * a sampled denominator understates anonymous traffic in every dashboard
+ * tile and no toggle can reveal the dropped rows. Sampling is a deliberate
+ * per-path opt-down (`EdgePathRule.sampling`) for static/high-volume paths.
  */
 declare const DEFAULT_EDGE_CONFIG: EdgeConfig;
 /** Structural guard for configs arriving over the wire. */
@@ -4614,7 +4688,7 @@ declare function _resetEdgeConfigCache(): void;
  * Pure regex — no Node built-ins, edge-safe. Detection is regex-only for
  * v2.9 — TLS fingerprinting / behavioural signatures are deferred.
  */
-type PlatformAgentVendor = 'claude' | 'chatgpt' | 'gemini' | 'cursor' | 'goose' | 'perplexity' | 'chatgpt-atlas' | 'perplexity-comet' | 'astrasync-sdk' | 'unknown';
+type PlatformAgentVendor = 'claude' | 'chatgpt' | 'gemini' | 'cursor' | 'goose' | 'perplexity' | 'chatgpt-atlas' | 'perplexity-comet' | 'astrasync-bridge' | 'astrasync-sdk' | 'unknown';
 interface PlatformFingerprint {
     vendor: PlatformAgentVendor;
     /** A stable identifier used as the orphan-agent dedup key. */
@@ -4758,7 +4832,7 @@ declare function detectRuntime(userAgent: string | undefined | null): string | u
  * silently (never throwing), so this is a no-op there — which is correct:
  * in a browser the page's real UA is the honest identity.
  */
-declare const SDK_USER_AGENT = "astrasync-sdk/5.7.0";
+declare const SDK_USER_AGENT = "astrasync-sdk/5.9.0";
 declare const sdkFetch: typeof fetch;
 
 /**
@@ -4779,6 +4853,6 @@ declare const sdkFetch: typeof fetch;
  * is fine — bumping both in the release-ceremony commit keeps them
  * lockstep.
  */
-declare const SDK_VERSION = "5.7.0";
+declare const SDK_VERSION = "5.9.0";
 
-export { AgentClient, type AgentCredentials, type AgentProtocol, type AgentRecord, AstraSync, type AstraSyncConfig, type AstraSyncCredentials, AstraSyncError, type AttemptOutcome, type AttemptReport, AuthenticationError, type BuildGuidanceParams, CAPTURE_SCHEMA_VERSION, type CallerMetadata, ChallengeHandler, type CommerceArtifactsPayload, type CommerceContext, type CommercePipelineInput, type CommerceShieldProps, type ConsiderationItem, type ConsiderationSet, type CounterpartyType, DEFAULT_EDGE_CONFIG, type DynamicPlatformFingerprint, type EdgeConfig, type EdgeMode, type EdgePathRule, type EdgeVerificationDepth, type EnhancedVerificationResult, type ExpressMiddlewareOptions, type FetchEdgeConfigResult, type FetchEdgeConfigSuccess, type FiatSettlementBinding, type FrameworkConfig, type FulfilmentInfo, type GatewayConfig, type GuidanceEnvelope, type GuidanceInfo, type HealthResponse, KYDRequiredError, MAX_HEADERS, MAX_HEADER_VALUE_BYTES, MAX_TOTAL_BYTES, MCP_VERIFIED_HOP_HEADER, MCP_VERIFIED_HOP_MAX_AGE_MS, type McpMiddlewareOptions, type MerchantSettlementToken, type ModelConfig, type NextJsMiddlewareOptions, type ObservedMetadata, type PDLSSConfig$1 as PDLSSConfig, type PDLSSDuration, type PDLSSInfo, type PDLSSLimits, type PDLSSPurpose, type PDLSSScope, type PDLSSSelfInstantiation, PLATFORM_AGENT_SIGNATURES, type PendingRegistrationResponse, type PlatformAgentVendor, type PlatformDetectionInput, type PlatformFingerprint, type PlatformSignatureDef, type PollRegistrationResult, type ProtocolTransport, RUNTIME_SIGNATURES, type RegisterOptions, type RegisterResult, RegistrationDeniedError, RegistrationExpiredError, type RegistrationResponse, RegistrationTimeoutError, type RouteAccessConfig, type RuntimeChallengeResult, type RuntimeSignature, type SDKOptions, SDK_USER_AGENT, type SanitizeHeadersResult, type SettlementArtifact, type SettlementArtifactBinding, type SettlementArtifactBindingBase, type SettlementDecision, type SettlementOutcomeInfo, type SettlementRequest, type StablecoinSettlementBinding, type StepUpApprovalInfo, type StepUpApprovalStatus, type StepUpOutcome, TRUST_LEVEL_RANGES, type TokenGuidance, type ToolGate, type ToolGateConfig, type TrustLevel, SDK_VERSION as VERSION, type VerificationInterstitialProps, type VerificationRequest, type VerificationResult, type VerifiedAgent, type VerifiedDeveloper, type VerifiedHopMarker, type VerifiedOrganization, type VerifyOptions, type VerifyResponse, type WaitForApprovalOptions, type WellKnownAgenticCommerce, _resetEdgeConfigCache, index as agent, authorizeSettlement, awaitStepUpApproval, buildGuidance, buildSdkObservedMetadata, clearCache, createMcpMiddleware, degradeToObserve, deriveConnectionFromHeaders, detectPlatformFingerprint, detectRuntime, express, extractApiKeyFormat, extractCredentials, extractMcpCredentials, extractPlatformHeaders, fetchEdgeConfig, fetchRoutes, getCachedWellKnownUrls, getEdgeConfig, getTrustLevel, getWellKnownUrls, hasCredentials, isEdgeConfig, isVerifiedHopValidFor, matchEdgePathRule, matchPlatformSignature, nextjs, parseVerifiedHop, pollStepUpStatus, prefetchWellKnown, quickVerify, recordDecision, reportAttempt, reportUnregisteredAttempt, sanitizeHeaders, sdk, sdkFetch, serializeVerifiedHop, setMcpMeta, index$1 as transport, verify };
+export { AgentClient, type AgentCredentials, type AgentProtocol, type AgentRecord, AstraSync, type AstraSyncConfig, type AstraSyncCredentials, AstraSyncError, type AttemptOutcome, type AttemptReport, AuthenticationError, type BuildGuidanceParams, CAPTURE_SCHEMA_VERSION, type CallerMetadata, ChallengeHandler, type CommerceArtifactsPayload, type CommerceContext, type CommercePipelineInput, type CommerceShieldProps, type ConsiderationItem, type ConsiderationSet, type CounterpartyType, DECLARED_SOURCE_MAX, DEFAULT_EDGE_CONFIG, type DynamicPlatformFingerprint, type EdgeConfig, type EdgeMode, type EdgePathRule, type EdgeVerificationDepth, type EnhancedVerificationResult, type ExpressMiddlewareOptions, type FetchEdgeConfigResult, type FetchEdgeConfigSuccess, type FiatSettlementBinding, type FrameworkConfig, type FulfilmentInfo, type GatewayConfig, type GuidanceEnvelope, type GuidanceInfo, type HealthResponse, KYDRequiredError, MAX_HEADERS, MAX_HEADER_VALUE_BYTES, MAX_TOTAL_BYTES, MCP_VERIFIED_HOP_HEADER, MCP_VERIFIED_HOP_MAX_AGE_MS, type McpMiddlewareOptions, type MerchantSettlementToken, type ModelConfig, type NextJsMiddlewareOptions, type ObservedMetadata, type PDLSSConfig$1 as PDLSSConfig, type PDLSSDuration, type PDLSSInfo, type PDLSSLimits, type PDLSSPurpose, type PDLSSScope, type PDLSSSelfInstantiation, PLATFORM_AGENT_SIGNATURES, type PendingRegistrationResponse, type PlatformAgentVendor, type PlatformDetectionInput, type PlatformFingerprint, type PlatformSignatureDef, type PollRegistrationResult, type ProtocolTransport, RUNTIME_SIGNATURES, type RegisterOptions, type RegisterResult, RegistrationDeniedError, RegistrationExpiredError, type RegistrationResponse, RegistrationTimeoutError, type RouteAccessConfig, type RuntimeChallengeResult, type RuntimeSignature, type SDKOptions, SDK_USER_AGENT, type SanitizeHeadersResult, type SettlementArtifact, type SettlementArtifactBinding, type SettlementArtifactBindingBase, type SettlementDecision, type SettlementOutcomeInfo, type SettlementRequest, type StablecoinSettlementBinding, type StepUpApprovalInfo, type StepUpApprovalStatus, type StepUpOutcome, TRUST_LEVEL_RANGES, type TokenGuidance, type ToolGate, type ToolGateConfig, type TrustLevel, SDK_VERSION as VERSION, type VerificationInterstitialProps, type VerificationRequest, type VerificationResult, type VerifiedAgent, type VerifiedDeveloper, type VerifiedHopMarker, type VerifiedOrganization, type VerifyOptions, type VerifyResponse, type WaitForApprovalOptions, type WellKnownAgenticCommerce, _resetEdgeConfigCache, index as agent, authorizeSettlement, awaitStepUpApproval, buildGuidance, buildSdkObservedMetadata, clearCache, createMcpMiddleware, degradeToObserve, deriveConnectionFromHeaders, detectPlatformFingerprint, detectRuntime, express, extractApiKeyFormat, extractCredentials, extractMcpCredentials, extractPlatformHeaders, fetchEdgeConfig, fetchRoutes, getCachedWellKnownUrls, getEdgeConfig, getTrustLevel, getWellKnownUrls, hasCredentials, isEdgeConfig, isVerifiedHopValidFor, matchEdgePathRule, matchPlatformSignature, nextjs, normalizeDeclaredSource, parseVerifiedHop, pollStepUpStatus, prefetchWellKnown, quickVerify, recordDecision, reportAttempt, reportUnregisteredAttempt, sanitizeHeaders, sdk, sdkFetch, serializeVerifiedHop, setMcpMeta, index$1 as transport, verify };

package/dist/index.js

@@ -36,6 +36,7 @@ __export(src_exports, {
   AuthenticationError: () => AuthenticationError,
   CAPTURE_SCHEMA_VERSION: () => CAPTURE_SCHEMA_VERSION,
   ChallengeHandler: () => ChallengeHandler,
+  DECLARED_SOURCE_MAX: () => DECLARED_SOURCE_MAX,
   DEFAULT_EDGE_CONFIG: () => DEFAULT_EDGE_CONFIG,
   KYDRequiredError: () => KYDRequiredError,
   MAX_HEADERS: () => MAX_HEADERS,
@@ -80,6 +81,7 @@ __export(src_exports, {
   matchEdgePathRule: () => matchEdgePathRule,
   matchPlatformSignature: () => matchPlatformSignature,
   nextjs: () => nextjs_exports,
+  normalizeDeclaredSource: () => normalizeDeclaredSource,
   parseVerifiedHop: () => parseVerifiedHop,
   pollStepUpStatus: () => pollStepUpStatus,
   prefetchWellKnown: () => prefetchWellKnown,
@@ -112,7 +114,7 @@ function getTrustLevel(score) {
 }
 
 // src/version.ts
-var SDK_VERSION = "5.7.0";
+var SDK_VERSION = "5.9.0";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;
@@ -662,7 +664,7 @@ async function verify(config, request, options) {
     name: apiResponse.agent.name,
     trustScore: apiResponse.agent.trustScore,
     trustLevel: getTrustLevel(apiResponse.agent.trustScore),
-    blockchainVerified: apiResponse.agent.blockchainStatus === "verified",
+    blockchainAnchored: apiResponse.agent.blockchainStatus === "anchored",
     status: apiResponse.agent.agentStatus
   } : void 0;
   const developer = apiResponse.developer ? {
@@ -1246,6 +1248,12 @@ var KEY_FORMAT_PREFIXES = [
 var MAX_HEADERS = 64;
 var MAX_HEADER_VALUE_BYTES = 1024;
 var MAX_TOTAL_BYTES = 16 * 1024;
+var DECLARED_SOURCE_MAX = 64;
+var DECLARED_SOURCE_PATTERN = /^[a-z0-9][a-z0-9 ._/-]{0,63}$/;
+function normalizeDeclaredSource(value) {
+  const trimmed = value?.trim().slice(0, DECLARED_SOURCE_MAX).toLowerCase();
+  return trimmed && DECLARED_SOURCE_PATTERN.test(trimmed) ? trimmed : void 0;
+}
 function byteLength(s) {
   let bytes = 0;
   for (let i = 0; i < s.length; i++) {
@@ -1425,11 +1433,16 @@ var DEFAULT_EDGE_CONFIG = Object.freeze({
   mode: "observe",
   depth: "classify",
   pathRules: [],
-  sampling: Object.freeze({ anonymousBeaconRate: 0.1 }),
+  sampling: Object.freeze({ anonymousBeaconRate: 1 }),
   failurePosture: "open"
 });
 var EDGE_MODES = ["observe", "enforce"];
 var EDGE_DEPTHS = ["classify", "authenticate", "authorize"];
+function isSamplingShape(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const rate = value.anonymousBeaconRate;
+  return typeof rate === "number" && rate >= 0 && rate <= 1;
+}
 function isEdgeConfig(value) {
   if (typeof value !== "object" || value === null) return false;
   const v = value;
@@ -1443,10 +1456,13 @@ function isEdgeConfig(value) {
     if (typeof r.pattern !== "string" || r.pattern.length === 0) return false;
     if (r.mode !== void 0 && !EDGE_MODES.includes(r.mode)) return false;
     if (r.depth !== void 0 && !EDGE_DEPTHS.includes(r.depth)) return false;
+    if (r.sampling !== void 0 && !isSamplingShape(r.sampling)) return false;
   }
-  const sampling = v.sampling;
-  if (typeof sampling !== "object" || sampling === null || typeof sampling.anonymousBeaconRate !== "number" || sampling.anonymousBeaconRate < 0 || sampling.anonymousBeaconRate > 1) {
-    return false;
+  if (!isSamplingShape(v.sampling)) return false;
+  if (v.queryValueAllowlist !== void 0) {
+    if (!Array.isArray(v.queryValueAllowlist) || v.queryValueAllowlist.length > 16 || !v.queryValueAllowlist.every((e) => typeof e === "string" && e.length > 0 && e.length <= 64)) {
+      return false;
+    }
   }
   return v.failurePosture === "open";
 }
@@ -1562,7 +1578,20 @@ var PLATFORM_AGENT_SIGNATURES = [
   {
     vendor: "gemini",
     displayName: "Google Gemini",
-    uaPatterns: [/gemini/i, /google-gemini/i, /bard/i],
+    uaPatterns: [
+      /gemini/i,
+      /google-gemini/i,
+      /bard/i,
+      // Google's AI/agent fetcher tokens (VI uplift 1.3). These are the
+      // AI-training/agent crawlers, NOT the Search crawler — googlebot IP
+      // ranges attribute Search and are deliberately absent from
+      // vendor-ip-ranges. Anchored tokens: none appears in stock browser
+      // UAs, and `-` counts as a \b boundary so GoogleOther-Image/-Video
+      // match too.
+      /\bGoogle-Extended\b/i,
+      /\bGoogleOther\b/i,
+      /\bGoogle-CloudVertexBot\b/i
+    ],
     agentCardPatterns: [/gemini\.google\.com/i, /ai\.google\.dev/i],
     apiKeyFormatPatterns: [/^aiza/i],
     headerPatterns: [/^x-goog-user-project/i, /^x-goog-api-client/i]
@@ -1608,6 +1637,16 @@ var PLATFORM_AGENT_SIGNATURES = [
     uaPatterns: [/\bcomet\/\d/i],
     headerPatterns: [/^sec-ch-ua: .*comet/i]
   },
+  // The MCP bridge's own catalog fetches (VI uplift 1.5). Deliberately a
+  // DISTINCT UA from `astrasync-sdk/`: bridge fetches are buyer-agent
+  // traffic merchants should see (identified · unregistered), so this
+  // vendor is kept OUT of the self-traffic filter and the edge's SELF
+  // short-circuit.
+  {
+    vendor: "astrasync-bridge",
+    displayName: "AstraSync MCP bridge (buyer-agent catalog fetch)",
+    uaPatterns: [/^astrasync-bridge\//i]
+  },
   // Our own SDK self-identifies (sdkFetch stamps this UA) — first-party
   // traffic must never pollute the unknown/anonymous pool it exists to audit.
   {
@@ -2052,6 +2091,8 @@ function createMiddleware(options) {
           }
         }
       }
+      const attemptHeader = req.headers["x-astra-attempt-id"];
+      const inboundAttemptId = typeof attemptHeader === "string" && /^att_[0-9a-f]{32}$/.test(attemptHeader) ? attemptHeader : void 0;
       const verificationRequest = {
         credentials,
         purpose,
@@ -2064,6 +2105,7 @@ function createMiddleware(options) {
         durationRequired: astraCreds?.pdlss?.duration?.maxSessionDuration,
         ...txValue !== void 0 && { transactionValue: txValue },
         ...txCurrency && { currency: txCurrency },
+        ...inboundAttemptId && { attemptId: inboundAttemptId },
         callerMetadata: {
           sourceIp: originalClientIp,
           userAgent: req.headers["user-agent"],
@@ -2568,6 +2610,8 @@ function createMiddleware2(options) {
     }
     const forwardedFor = request.headers.get("x-forwarded-for") || void 0;
     const originalClientIp = forwardedFor?.split(",")[0]?.trim();
+    const attemptHeader = request.headers.get("x-astra-attempt-id");
+    const inboundAttemptId = attemptHeader && /^att_[0-9a-f]{32}$/.test(attemptHeader) ? attemptHeader : void 0;
     const verificationRequest = {
       credentials,
       purpose,
@@ -2577,6 +2621,7 @@ function createMiddleware2(options) {
       counterpartyType: config.counterpartyType || "website",
       enableRuntimeChallenge,
       durationRequired: astraCreds?.pdlss?.duration?.maxSessionDuration,
+      ...inboundAttemptId && { attemptId: inboundAttemptId },
       callerMetadata: {
         sourceIp: originalClientIp,
         userAgent: request.headers.get("user-agent") || void 0,
@@ -6619,6 +6664,7 @@ function detectRuntime(userAgent) {
   AuthenticationError,
   CAPTURE_SCHEMA_VERSION,
   ChallengeHandler,
+  DECLARED_SOURCE_MAX,
   DEFAULT_EDGE_CONFIG,
   KYDRequiredError,
   MAX_HEADERS,
@@ -6663,6 +6709,7 @@ function detectRuntime(userAgent) {
   matchEdgePathRule,
   matchPlatformSignature,
   nextjs,
+  normalizeDeclaredSource,
   parseVerifiedHop,
   pollStepUpStatus,
   prefetchWellKnown,