@astrasyncai/verification-gateway 5.9.0 → 5.11.0

package/dist/cli/index.d.mts

@@ -97,9 +97,14 @@ declare function inferFromGitignore(content: string): string[];
  * 1. Validate existing setup and check for prior upgrade
  * 2. Open browser for KYD registration
  * 3. Validate API key before proceeding
- * 4. Upload local policy to cloud (YAML -> cloud PDLSS, 1:1 mapping)
- * 5. Register agent and receive ASTRA-ID
- * 6. Choose mode (online or hybrid) and switch gateway
+ * 4. Link the ASTRA- agent this guard acts as (registered in the dashboard)
+ * 5. Choose mode (online or hybrid) and switch gateway
+ *
+ * 5.11.0: the old step 4 POSTed the local policy to
+ * /api/v1/agents/policies/upload — a route the platform never had, so every
+ * upgrade failed there. A developer's local policy no longer becomes cloud
+ * policy (organisation policy is central — see fleet mode); the agent's own
+ * PDLSS is declared when it is registered.
  *
  * Also supports event-triggered upgrade prompts when counterparties
  * reject unverified agents.
@@ -175,11 +180,6 @@ declare class UpgradeFlow {
      * Validate the API key by calling the platform.
      */
     private validateApiKey;
-    /**
-     * Upload local policy to the AstraSync cloud.
-     * YAML -> cloud PDLSS boundary, 1:1 mapping, no lossy transformation.
-     */
-    private uploadPolicy;
     /**
      * Write the config file for the chosen mode.
      */

package/dist/cli/index.d.ts

@@ -97,9 +97,14 @@ declare function inferFromGitignore(content: string): string[];
  * 1. Validate existing setup and check for prior upgrade
  * 2. Open browser for KYD registration
  * 3. Validate API key before proceeding
- * 4. Upload local policy to cloud (YAML -> cloud PDLSS, 1:1 mapping)
- * 5. Register agent and receive ASTRA-ID
- * 6. Choose mode (online or hybrid) and switch gateway
+ * 4. Link the ASTRA- agent this guard acts as (registered in the dashboard)
+ * 5. Choose mode (online or hybrid) and switch gateway
+ *
+ * 5.11.0: the old step 4 POSTed the local policy to
+ * /api/v1/agents/policies/upload — a route the platform never had, so every
+ * upgrade failed there. A developer's local policy no longer becomes cloud
+ * policy (organisation policy is central — see fleet mode); the agent's own
+ * PDLSS is declared when it is registered.
  *
  * Also supports event-triggered upgrade prompts when counterparties
  * reject unverified agents.
@@ -175,11 +180,6 @@ declare class UpgradeFlow {
      * Validate the API key by calling the platform.
      */
     private validateApiKey;
-    /**
-     * Upload local policy to the AstraSync cloud.
-     * YAML -> cloud PDLSS boundary, 1:1 mapping, no lossy transformation.
-     */
-    private uploadPolicy;
     /**
      * Write the config file for the chosen mode.
      */

package/dist/cli/index.js

@@ -3734,7 +3734,7 @@ function inferFromGitignore(content) {
 }
 
 // src/version.ts
-var SDK_VERSION = "5.9.0";
+var SDK_VERSION = "5.11.0";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;
@@ -3814,27 +3814,23 @@ var UpgradeFlow = class {
    */
   async continueUpgrade(apiKey, kydId) {
     const { print, prompt } = this.callbacks;
-    print("\n[3/5] Migrate local policy to cloud");
-    print(`  Policy: ${this.config.policyPath}`);
-    print(`  Name:   ${this.config.policy.name}`);
-    print(`  Rules:  ${this.config.policy.purposes.length} purpose rules`);
-    if (this.config.policy.scope) {
-      const scope = this.config.policy.scope;
-      const domains = [
-        ...(scope.allowedDomains || []).length ? [`${scope.allowedDomains.length} allowed`] : [],
-        ...(scope.blockedDomains || []).length ? [`${scope.blockedDomains.length} blocked`] : []
-      ];
-      if (domains.length) print(`  Scope:  ${domains.join(", ")} domains`);
-    }
-    print("");
-    print("  Uploading YAML -> Cloud PDLSS boundary...");
-    const uploadResult = await this.uploadPolicy(apiKey);
-    if (!uploadResult.success) {
-      print(`  Upload failed: ${uploadResult.error}`);
-      return uploadResult;
-    }
-    print("  Policy uploaded. Same rules, now with trust scoring and audit.");
-    print(`  Agent registered: ${uploadResult.agentId}`);
+    print("\n[3/5] Link your agent");
+    print(
+      `  Local policy ${this.config.policyPath} stays on this machine (${this.config.policy.purposes.length} purpose rules).`
+    );
+    print("  Register the agent in the AstraSync dashboard (or with `astrasync register`) and");
+    print("  paste its ASTRA- id so synced decisions are attributed to it.\n");
+    const agentInput = (await prompt("  Agent ASTRA- id (Enter to skip): ")).trim();
+    let agentId;
+    if (agentInput) {
+      if (!/^ASTRA-[A-Za-z0-9_-]+$/.test(agentInput)) {
+        return { success: false, error: `Not an ASTRA- agent id: ${agentInput}` };
+      }
+      agentId = agentInput;
+      print(`  Agent: ${agentId}`);
+    } else {
+      print("  No agent linked \u2014 decisions sync under your API key only.");
+    }
     if (kydId) {
       print(`  Developer: ${kydId}`);
     }
@@ -3845,23 +3841,23 @@ var UpgradeFlow = class {
     const mode = modeInput.trim().toLowerCase() === "online" ? "online" : "hybrid";
     print(`
 [5/5] Activating ${mode} verification`);
-    await this.writeLocalConfig(apiKey, uploadResult.agentId, mode, kydId);
+    await this.writeLocalConfig(apiKey, agentId, mode, kydId);
     print(`  Config written to ${this.configDir}/config`);
     print(`  Mode: ${mode}`);
     print("  Done!\n");
-    print(`  Your agent (${uploadResult.agentId}) is verified on the AstraSync network.`);
+    if (agentId) print(`  Your agent (${agentId}) is verified on the AstraSync network.`);
     if (mode === "hybrid") {
       print("  Local evaluation active for speed. Cloud sync for audit and trust scoring.");
     } else {
       print("  Trust scoring, audit trails, and blockchain recording are active.");
     }
     print(`
-  Dashboard: ${this.platformUrl}/agents/${uploadResult.agentId}
+  Dashboard: ${this.platformUrl}/agents${agentId ? `/${agentId}` : ""}
 `);
     return {
       success: true,
       apiKey,
-      agentId: uploadResult.agentId,
+      agentId,
       kydId,
       mode
     };
@@ -3914,44 +3910,6 @@ var UpgradeFlow = class {
       return { valid: true, error: `Could not reach platform (proceeding anyway)` };
     }
   }
-  /**
-   * Upload local policy to the AstraSync cloud.
-   * YAML -> cloud PDLSS boundary, 1:1 mapping, no lossy transformation.
-   */
-  async uploadPolicy(apiKey) {
-    const policyYaml = toYaml(this.config.policy);
-    try {
-      const response = await sdkFetch(`${this.platformUrl}/api/v1/agents/policies/upload`, {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          Authorization: `Bearer ${apiKey}`
-        },
-        body: JSON.stringify({
-          policy: policyYaml,
-          policyObject: this.config.policy,
-          format: "yaml",
-          source: "local-guard-upgrade",
-          name: this.config.policy.name
-        })
-      });
-      if (!response.ok) {
-        const body = await response.text();
-        return { success: false, error: `Upload failed (${response.status}): ${body}` };
-      }
-      const data = await response.json();
-      return {
-        success: true,
-        agentId: data.agentId || "ASTRA-PENDING",
-        kydId: data.kydId
-      };
-    } catch (err) {
-      return {
-        success: false,
-        error: `Network error: ${err instanceof Error ? err.message : String(err)}`
-      };
-    }
-  }
   /**
    * Write the config file for the chosen mode.
    */