@astrasyncai/verification-gateway 5.9.0 → 5.10.0

package/dist/edge-core/index.mjs

@@ -1,5 +1,5 @@
 // src/version.ts
-var SDK_VERSION = "5.9.0";
+var SDK_VERSION = "5.10.0";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;
@@ -680,6 +680,24 @@ async function callVerifyAccessAPI(config, request) {
         }
       };
     }
+    if (response.status === 400 && data?.error === "INVALID_AGENT_ID") {
+      const message = typeof data?.message === "string" ? data.message : "Agent identifier must be a canonical ASTRA-* id.";
+      return {
+        success: true,
+        attemptId: typeof data?.attemptId === "string" ? data.attemptId : void 0,
+        access: {
+          allowed: false,
+          reason: "invalid_agent_id",
+          failures: [
+            {
+              dimension: "identity.invalid_agent_id",
+              message,
+              guidance: typeof data?.guidance === "string" ? data.guidance : "Present your canonical ASTRA-* id (discover it via GET /api/agents/request-registration/{requestId} after owner approval)."
+            }
+          ]
+        }
+      };
+    }
     if (!response.ok) {
       if (response.status === 401) {
         return {
@@ -1163,7 +1181,7 @@ function classify(req, host, depth) {
   if (!credentials.astraId && (isAccountApiKey(credentials.jwt) || isAccountApiKey(credentials.apiKey))) {
     return { tier: "self", evidence: { firstPartyApiKey: true } };
   }
-  if (credentials.astraId || credentials.apiKey || credentials.jwt) {
+  if (credentials.astraId) {
     return { tier: "verified", protocol: "x-astra" };
   }
   const { apiKeyFormat, platformHeaders } = sanitizeHeaders(req.headers);