@twin3-ai/agent-id 0.3.49 → 0.3.50

package/browser-sdk.js

@@ -16,7 +16,7 @@
   // browser script and shipped in the package byte-for-byte, so it can
   // neither read the package at runtime nor go through a build step:
   // the version is written once here and CI refuses a mismatch.
-  var SDK_VERSION = "0.3.49";
+  var SDK_VERSION = "0.3.50";
   var w = window;
   var d = document;
   var s = d.currentScript || {};

package/cloudflare-a1-sync.js

@@ -62,7 +62,7 @@ function responseRows(response, siteUrl, observedAt, windowKey = "") {
     if (!userAgent || count < 1 || status < 100 || status > 599) return [];
     const clean = cleanPath(dimensions.clientRequestPath);
     const eventId = `cfa1_${crypto.createHash("sha256").update(JSON.stringify([host, windowKey, userAgent, clean, status])).digest("hex").slice(0, 32)}`;
-    return [{ event_id: eventId, host, path: clean, user_agent: userAgent, status, bytes: Math.max(0, Math.floor(Number(group && group.sum && group.sum.edgeResponseBytes || 0))), request_count: count, timestamp: observedAt, source: "cloudflare_ai_crawl_control" }];
+    return [{ event_id: eventId, host, path: clean, user_agent: userAgent, status, bytes: Math.max(0, Math.floor(Number(group && group.sum && group.sum.edgeResponseBytes || 0))), request_count: count, timestamp: observedAt, timestamp_is_request_time: false, observed_at: observedAt, event_time: null, record_kind: "aggregate", aggregate: true, window_key: String(windowKey || ""), time_basis: "observed_window", source_strength: "ua_claim", source: "cloudflare_ai_crawl_control" }];
   });
 }
 function createCloudflareA1Sync({ client, statePath, siteUrl, zoneId, apiToken, userAgents = DEFAULT_USER_AGENTS, lookbackMs = 3600000, intervalMs = 900000, maxPendingRows = 5000, fetchCloudflare = defaultFetchCloudflare, now = Date.now, random = Math.random } = {}) {

package/installer.js

@@ -731,9 +731,11 @@ async function readEnterpriseVerificationCapability(projectRoot, expectedChallen
   }
   try {
     const key = await enterpriseCapabilityWrapKey(paths);
-    const decipher = crypto.createDecipheriv("aes-256-gcm", key, Buffer.from(sealed.iv, "base64url"));
+    const decipher = crypto.createDecipheriv("aes-256-gcm", key, Buffer.from(sealed.iv, "base64url"), { authTagLength: 16 });
     decipher.setAAD(Buffer.from(`${VERIFICATION_CAPABILITY_AAD}\0${challenge}`, "utf8"));
-    decipher.setAuthTag(Buffer.from(sealed.auth_tag, "base64url"));
+    const authTag = Buffer.from(sealed.auth_tag, "base64url");
+    if (authTag.length !== 16) throw new Error("invalid auth tag length");
+    decipher.setAuthTag(authTag);
     const capability = Buffer.concat([
       decipher.update(Buffer.from(sealed.ciphertext, "base64url")),
       decipher.final(),

package/mcp-i18n.js

@@ -0,0 +1,19 @@
+"use strict";
+
+const MCP_MESSAGES = Object.freeze({
+  en: Object.freeze({
+    backend_authentication_failed: "Backend authentication failed.",
+    backend_permission_denied: "Backend denied permission or tenant scope.",
+    backend_rate_limited: "Backend rate limit exceeded; retry later.",
+    backend_unavailable: "Backend service is unavailable or failed.",
+    backend_rejected_request: "Backend rejected the tool request.",
+    agentx_passport_verify: "Verify an AgentX.ID Passport issuer proof, content hash, revocation, and current xAgent ID without exposing issuer secrets; returns failure_codes, next_actions, and execution_policy.",
+    checkout_session: "Create a Stripe Checkout session bound to the verified website and xAgent ID.",
+    register_site_agent: "Create a stable Site xAgent ID and domain ownership challenge.",
+    recruiting_authorize_pull: "Issue one 60-second, purpose-bound authorization with use_limit=1 for the private Career orchestrator. XHuman atomically enforces consumption; xAgent ID stores only receipt/idempotency/audit evidence and never handles Human profile or message content.",
+    recruiting_disclosed_profile: "Read only the Human-owner-granted profile fields for one mutually consented introduction. xAgent ID does not persist the returned profile.",
+    recruiting_conversation_message: "Send one bounded text message from the authenticated Company Agent to the exact owner-opened Human Agent A2A thread. xAgent ID does not persist message content."
+  })
+});
+
+module.exports = { MCP_MESSAGES };