@newtype-ai/nit-sdk 0.2.3 → 0.3.0

package/README.md

@@ -49,7 +49,7 @@ Returns `Promise<VerifyResult>` — either `{ verified: true, agent_id, domain,
 
 ## Full Integration Guide
 
-See [app-integration.md](https://github.com/newtype-ai/newtype-ai/blob/main/docs/app-integration.md) for the complete flow, endpoint spec, and examples in multiple languages.
+See [docs/app-integration.md](docs/app-integration.md) for the complete flow, endpoint spec, code examples in multiple languages, fetching updated cards, and security notes.
 
 ## License
 

package/dist/index.d.ts

@@ -10,6 +10,8 @@ interface LoginPayload {
     domain: string;
     timestamp: number;
     signature: string;
+    /** Agent's public key. Present in nit >= 0.6.0. */
+    public_key?: string;
 }
 /** A skill listed in an agent's card. */
 interface AgentCardSkill {
@@ -43,9 +45,33 @@ interface AgentCard {
     iconUrl?: string;
     documentationUrl?: string;
 }
+/** Identity metadata returned by the server. */
+interface IdentityMetadata {
+    registration_timestamp: number | null;
+    machine_identity_count: number;
+    ip_identity_count: number;
+    total_logins: number;
+    last_login_timestamp: number | null;
+    unique_domains: number;
+}
+/** App-defined trust policy. Server evaluates and returns admitted: true/false. */
+interface VerifyPolicy {
+    max_identities_per_ip?: number;
+    max_identities_per_machine?: number;
+    min_age_seconds?: number;
+    max_login_rate_per_hour?: number;
+}
+/** Server attestation proving the server endorsed this verification. */
+interface ServerAttestation {
+    server_signature: string;
+    server_url: string;
+    server_public_key: string;
+}
 /** Successful verification result. */
 interface VerifySuccess {
     verified: true;
+    /** Whether the identity meets the app's policy. True if no policy were specified. */
+    admitted: boolean;
     agent_id: string;
     domain: string;
     card: AgentCard | null;
@@ -58,6 +84,10 @@ interface VerifySuccess {
     } | null;
     /** HMAC-signed read token for fetching the agent's domain branch card. 30-day expiry. */
     readToken: string;
+    /** Identity metadata — registration time, login count, machine/IP grouping, etc. */
+    identity?: IdentityMetadata;
+    /** Server attestation (if server signing key is configured). */
+    attestation?: ServerAttestation;
 }
 /** Failed verification result. */
 interface VerifyFailure {
@@ -68,6 +98,8 @@ type VerifyResult = VerifySuccess | VerifyFailure;
 interface VerifyOptions {
     /** Override the API base URL. Defaults to https://api.newtype-ai.org */
     apiUrl?: string;
+    /** App-defined trust policy. Server evaluates and returns admitted: true/false. */
+    policy?: VerifyPolicy;
 }
 interface FetchCardOptions {
     /** Override the base URL for agent card hosting. Defaults to https://agent-{agent_id}.newtype-ai.org */
@@ -107,4 +139,4 @@ declare function verifyAgent(payload: LoginPayload, options?: VerifyOptions): Pr
  */
 declare function fetchAgentCard(agentId: string, domain: string, readToken: string, options?: FetchCardOptions): Promise<AgentCard | null>;
 
-export { type AgentCard, type AgentCardSkill, type FetchCardOptions, type LoginPayload, type VerifyFailure, type VerifyOptions, type VerifyResult, type VerifySuccess, fetchAgentCard, verifyAgent };
+export { type AgentCard, type AgentCardSkill, type FetchCardOptions, type IdentityMetadata, type LoginPayload, type ServerAttestation, type VerifyFailure, type VerifyOptions, type VerifyPolicy, type VerifyResult, type VerifySuccess, fetchAgentCard, verifyAgent };

package/dist/index.js

@@ -9,7 +9,8 @@ async function verifyAgent(payload, options) {
       agent_id: payload.agent_id,
       domain: payload.domain,
       timestamp: payload.timestamp,
-      signature: payload.signature
+      signature: payload.signature,
+      ...options?.policy ? { policy: options.policy } : {}
     })
   });
   return res.json();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@newtype-ai/nit-sdk",
-  "version": "0.2.3",
+  "version": "0.3.0",
   "description": "Verify agent identity with one function call",
   "type": "module",
   "license": "MIT",
@@ -16,7 +16,9 @@
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
-  "files": ["dist"],
+  "files": [
+    "dist"
+  ],
   "scripts": {
     "build": "tsup",
     "prepublishOnly": "npm run build"