perimeterx-js-core 0.35.1 → 0.37.0

package/lib/cjs/activities/utils.js

@@ -93,6 +93,9 @@ var addRootContextDataToDetails = function (details, context) {
     if (context.vidSource) {
         details.enforcer_vid_source = context.vidSource;
     }
+    if (context.origCookieVid) {
+        details.orig_cookie_vid = context.origCookieVid;
+    }
     if (context.graphqlData) {
         details.graphql_operations = context.graphqlData;
     }
@@ -161,6 +164,23 @@ var addProductDataToDetails = function (details, productData) {
             details.is_sensitive_route = productData.bd.isSensitiveRequest;
         }
     }
+    if (productData.at) {
+        if (productData.at.mcpMethod) {
+            details.mcp_method = productData.at.mcpMethod;
+        }
+        if (productData.at.mcpToolName) {
+            details.mcp_tool_name = productData.at.mcpToolName;
+        }
+        if (productData.at.mcpToolArgumentKeys) {
+            details.mcp_tool_argument_keys = productData.at.mcpToolArgumentKeys;
+        }
+        if (productData.at.mcpSessionId) {
+            details.mcp_session_id = productData.at.mcpSessionId;
+        }
+        if (productData.at.mcpHttpMethod) {
+            details.mcp_http_method = productData.at.mcpHttpMethod;
+        }
+    }
 };
 exports.addProductDataToDetails = addProductDataToDetails;
 var addTlsDataToDetails = function (details, tlsData) {

package/lib/cjs/blocker/model/BlockAction.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.BlockAction = void 0;
 var BlockAction;
 (function (BlockAction) {
+    BlockAction["BLOCK"] = "b";
     BlockAction["CAPTCHA"] = "c";
     BlockAction["RATE_LIMIT"] = "r";
     BlockAction["CHALLENGE"] = "j";

package/lib/cjs/blocker/model/BlockActionToWordMap.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.BLOCK_ACTION_TO_WORD_MAP = void 0;
 var BlockAction_1 = require("./BlockAction.js");
 exports.BLOCK_ACTION_TO_WORD_MAP = new Map([
+    [BlockAction_1.BlockAction.BLOCK, 'block'],
     [BlockAction_1.BlockAction.CAPTCHA, 'captcha'],
     [BlockAction_1.BlockAction.RATE_LIMIT, 'ratelimit'],
     [BlockAction_1.BlockAction.CHALLENGE, 'challenge'],

package/lib/cjs/config/ConfigurationBase.js

@@ -790,6 +790,20 @@ var ConfigurationBase = /** @class */ (function () {
         enumerable: false,
         configurable: true
     });
+    Object.defineProperty(ConfigurationBase.prototype, "agenticTrustEnabled", {
+        get: function () {
+            return this.configParams.px_agentic_trust_enabled;
+        },
+        enumerable: false,
+        configurable: true
+    });
+    Object.defineProperty(ConfigurationBase.prototype, "agenticTrustMcpEndpointPath", {
+        get: function () {
+            return this.configParams.px_agentic_trust_mcp_endpoint_path;
+        },
+        enumerable: false,
+        configurable: true
+    });
     Object.defineProperty(ConfigurationBase.prototype, "enableBlockedUrlOnCaptchaBlockPage", {
         get: function () {
             return true;

package/lib/cjs/config/defaults/DefaultConfigurationParams.js

@@ -141,5 +141,7 @@ var defaultConfigurationParams = function () { return ({
     px_custom_is_enforced_request: null,
     px_custom_is_filtered_request: null,
     px_extract_graphql_keywords: null,
+    px_agentic_trust_enabled: false,
+    px_agentic_trust_mcp_endpoint_path: '/mcp',
 }); };
 exports.defaultConfigurationParams = defaultConfigurationParams;

package/lib/cjs/context/DefaultContext.js

@@ -152,6 +152,9 @@ var DefaultContext = /** @class */ (function () {
             this.vid = vidValue;
             this.vidSource = utils_1.VidSource.VID_COOKIE;
         }
+        else if (vidValue) {
+            this.origCookieVid = vidValue;
+        }
         var pxhdCookie = this.requestData.cookies[utils_1.PXHD_COOKIE_NAME];
         if (pxhdCookie) {
             this.pxhd = {
@@ -184,6 +187,7 @@ var DefaultContext = /** @class */ (function () {
             customParameters: this.customParameters,
             graphqlData: this.graphqlData,
             vid: this.vid,
+            origCookieVid: this.origCookieVid,
             vidSource: this.vidSource,
             uuid: this.uuid,
             enforcerStartTime: this.enforcerStartTime,

package/lib/cjs/context/SerializedContext.js

@@ -39,6 +39,7 @@ var SerializedContext = /** @class */ (function () {
         this.tokenOrigin = contextJson.tokenOrigin;
         this.uuid = contextJson.uuid;
         this.vid = contextJson.vid;
+        this.origCookieVid = contextJson.origCookieVid;
         this.vidSource = contextJson.vidSource;
         this.pxhd = contextJson.pxhd;
         this.pxde = contextJson.pxde;

package/lib/cjs/enforcer/utils.js

@@ -68,12 +68,14 @@ var createEnforcerProducts = function (config, products, base64Utils, hashUtils,
     var accountDefender = (products === null || products === void 0 ? void 0 : products.ad) || new products_1.AccountDefender(config, { base64Utils: base64Utils });
     var credentialIntelligence = (products === null || products === void 0 ? void 0 : products.ci) || new products_1.CredentialIntelligence(config, { hashUtils: hashUtils, urlUtils: urlUtils });
     var hypeSaleChallenge = (products === null || products === void 0 ? void 0 : products.hsc) || new products_1.HypeSaleChallenge(config, { base64Utils: base64Utils });
+    var agenticTrust = (products === null || products === void 0 ? void 0 : products.at) || new products_1.AgenticTrust(config);
     return _a = {},
         _a[products_1.ProductName.BOT_DEFENDER] = botDefender,
         _a[products_1.ProductName.ACCOUNT_DEFENDER] = accountDefender,
         _a[products_1.ProductName.CODE_DEFENDER] = products === null || products === void 0 ? void 0 : products.cd,
         _a[products_1.ProductName.CREDENTIAL_INTELLIGENCE] = credentialIntelligence,
         _a[products_1.ProductName.HYPE_SALE_CHALLENGE] = hypeSaleChallenge,
+        _a[products_1.ProductName.AGENTIC_TRUST] = agenticTrust,
         _a;
 };
 exports.createEnforcerProducts = createEnforcerProducts;

package/lib/cjs/products/agentic_trust/AgenticTrust.js

@@ -0,0 +1,163 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
+    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgenticTrust = void 0;
+var http_1 = require("../../http/index.js");
+var MCP_SESSION_ID_HEADER = 'mcp-session-id';
+var AgenticTrust = /** @class */ (function () {
+    function AgenticTrust(config) {
+        this.config = config;
+    }
+    AgenticTrust.prototype.enrichContextFromRequest = function (context) {
+        return __awaiter(this, void 0, void 0, function () {
+            var data, sessionId;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        if (!this.config.agenticTrustEnabled) {
+                            return [2 /*return*/, null];
+                        }
+                        if (!this.isMatchingEndpoint(context)) {
+                            return [2 /*return*/, null];
+                        }
+                        data = {
+                            mcpHttpMethod: context.requestData.method,
+                        };
+                        sessionId = context.requestData.request.headers.get(MCP_SESSION_ID_HEADER);
+                        if (sessionId) {
+                            data.mcpSessionId = sessionId;
+                        }
+                        if (!(context.requestData.method === http_1.HttpMethod.POST)) return [3 /*break*/, 2];
+                        return [4 /*yield*/, this.extractFromBody(context, data)];
+                    case 1:
+                        _a.sent();
+                        _a.label = 2;
+                    case 2: return [2 /*return*/, data];
+                }
+            });
+        });
+    };
+    AgenticTrust.prototype.enrichContextFromRiskApi = function (_context) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                return [2 /*return*/, null];
+            });
+        });
+    };
+    AgenticTrust.prototype.modifyIncomingRequest = function (_context) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                return [2 /*return*/];
+            });
+        });
+    };
+    AgenticTrust.prototype.enrichContextFromResponse = function (context) {
+        return __awaiter(this, void 0, void 0, function () {
+            var responseHeaders, sessionId;
+            var _a;
+            return __generator(this, function (_b) {
+                if (!context.productData.at) {
+                    return [2 /*return*/, null];
+                }
+                if (context.productData.at.mcpSessionId) {
+                    return [2 /*return*/, null];
+                }
+                responseHeaders = (_a = context.response) === null || _a === void 0 ? void 0 : _a.headers;
+                if (!responseHeaders) {
+                    return [2 /*return*/, null];
+                }
+                sessionId = responseHeaders.get(MCP_SESSION_ID_HEADER);
+                if (sessionId) {
+                    return [2 /*return*/, { mcpSessionId: sessionId }];
+                }
+                return [2 /*return*/, null];
+            });
+        });
+    };
+    AgenticTrust.prototype.modifyOutgoingResponse = function (_context) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                return [2 /*return*/];
+            });
+        });
+    };
+    AgenticTrust.prototype.isMatchingEndpoint = function (context) {
+        var pathname = context.requestData.url.pathname.replace(/\/+$/, '');
+        var configuredPath = this.config.agenticTrustMcpEndpointPath.replace(/\/+$/, '');
+        return pathname === configuredPath;
+    };
+    AgenticTrust.prototype.extractFromBody = function (context, data) {
+        return __awaiter(this, void 0, void 0, function () {
+            var body, jsonRpcMessage, _a;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0:
+                        _b.trys.push([0, 2, , 3]);
+                        return [4 /*yield*/, context.requestData.request.json()];
+                    case 1:
+                        body = _b.sent();
+                        if (!body) {
+                            return [2 /*return*/];
+                        }
+                        jsonRpcMessage = Array.isArray(body) ? body[0] : body;
+                        if (!jsonRpcMessage) {
+                            return [2 /*return*/];
+                        }
+                        if (typeof jsonRpcMessage.method === 'string') {
+                            data.mcpMethod = jsonRpcMessage.method;
+                        }
+                        if (jsonRpcMessage.params) {
+                            if (typeof jsonRpcMessage.params.name === 'string') {
+                                data.mcpToolName = jsonRpcMessage.params.name;
+                            }
+                            if (jsonRpcMessage.params.arguments && typeof jsonRpcMessage.params.arguments === 'object') {
+                                data.mcpToolArgumentKeys = Object.keys(jsonRpcMessage.params.arguments).join(',');
+                            }
+                        }
+                        return [3 /*break*/, 3];
+                    case 2:
+                        _a = _b.sent();
+                        return [3 /*break*/, 3];
+                    case 3: return [2 /*return*/];
+                }
+            });
+        });
+    };
+    return AgenticTrust;
+}());
+exports.AgenticTrust = AgenticTrust;

package/lib/cjs/products/agentic_trust/IAgenticTrust.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/cjs/products/agentic_trust/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./AgenticTrust.js"), exports);
+__exportStar(require("./IAgenticTrust.js"), exports);
+__exportStar(require("./model/index.js"), exports);

package/lib/cjs/products/agentic_trust/model/AgenticTrustData.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/cjs/products/agentic_trust/model/index.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./AgenticTrustData.js"), exports);

package/lib/cjs/products/bot_defender/block/DefaultBotDefenderBlocker.js

@@ -14,6 +14,7 @@ var DefaultBotDefenderBlocker = /** @class */ (function () {
             this.captchaBlocker = options.captchaBlocker;
         }
         else {
+            this.base64Utils = options.base64Utils;
             this.captchaBlocker = new captcha_1.CaptchaBlocker({
                 config: config,
                 base64Utils: options.base64Utils,
@@ -27,6 +28,8 @@ var DefaultBotDefenderBlocker = /** @class */ (function () {
     };
     DefaultBotDefenderBlocker.prototype.createBlockResponse = function (context) {
         switch (context.blockAction) {
+            case blocker_1.BlockAction.BLOCK:
+                return this.createHardBlockResponse(context);
             case blocker_1.BlockAction.RATE_LIMIT:
                 return this.createRateLimitResponse();
             case blocker_1.BlockAction.CHALLENGE:
@@ -35,6 +38,18 @@ var DefaultBotDefenderBlocker = /** @class */ (function () {
                 return this.createCaptchaResponse(context);
         }
     };
+    DefaultBotDefenderBlocker.prototype.createHardBlockResponse = function (context) {
+        var _a;
+        var blockData = this.base64Utils ? (0, blocker_1.createBlockData)(this.config, context, this.base64Utils) : undefined;
+        var body = (0, blocker_1.renderHtml)(templates_1.HARD_BLOCK_TEMPLATE, blockData);
+        return new http_1.MinimalResponseImpl({
+            body: body,
+            status: 403,
+            headers: (_a = {},
+                _a[http_1.CONTENT_TYPE_HEADER_NAME] = [http_1.ContentType.TEXT_HTML],
+                _a),
+        });
+    };
     DefaultBotDefenderBlocker.prototype.createRateLimitResponse = function () {
         var _a;
         var status = 429;

package/lib/cjs/products/bot_defender/block/captcha/JsonCaptchaBlocker.js

@@ -29,7 +29,9 @@ var JsonCaptchaBlocker = /** @class */ (function (_super) {
         if (!this.config.advancedBlockingResponseEnabled) {
             return false;
         }
-        return context.blockAction !== blocker_1.BlockAction.RATE_LIMIT && _super.prototype.shouldBlock.call(this, context);
+        return (context.blockAction !== blocker_1.BlockAction.RATE_LIMIT &&
+            context.blockAction !== blocker_1.BlockAction.BLOCK &&
+            _super.prototype.shouldBlock.call(this, context));
     };
     JsonCaptchaBlocker.prototype.createJsonPayload = function (context) {
         var _a, _b;

package/lib/cjs/products/bot_defender/block/templates/hard_block_template.js

@@ -0,0 +1,4 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HARD_BLOCK_TEMPLATE = void 0;
+exports.HARD_BLOCK_TEMPLATE = "<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"utf-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n    <meta name=\"description\" content=\"px-hard-block\">\n    <title>Access Denied</title>\n    {{cssRef}}\n    <style>\n        @import url('https://fonts.googleapis.com/css2?family=Roboto:wght@300;400;500&display=swap');\n        body {\n            background-color: #fafbfc;\n            margin: 0;\n            padding: 0;\n        }\n        .px-hard-block-container {\n            position: fixed;\n            background-color: #fff;\n            font-family: Roboto, sans-serif;\n        }\n        .px-hard-block-logo {\n            text-align: center;\n            margin: 30px 0 0;\n        }\n        .px-hard-block-logo img {\n            max-height: 50px;\n        }\n        .px-hard-block-logo img[src=\"\"] {\n            display: none;\n        }\n        .px-hard-block-header {\n            color: #000;\n            font-size: 29px;\n            margin: 35px 0 20px;\n            font-weight: 500;\n            line-height: 1;\n            text-align: center;\n        }\n        .px-hard-block-message {\n            color: #646464;\n            font-size: 16px;\n            margin: 0 30px 25px;\n            line-height: 1.4;\n            text-align: center;\n        }\n        .px-hard-block-refid {\n            border-top: solid 1px #f0eeee;\n            height: 27px;\n            margin: 15px 0 0;\n            border-radius: 0 0 3px 3px;\n            background-color: #fafbfc;\n            font-size: 10px;\n            line-height: 2.5;\n            text-align: center;\n            color: #b1b5b8;\n        }\n        @media (min-width: 620px) {\n            .px-hard-block-container {\n                width: 530px;\n                top: 50%;\n                left: 50%;\n                margin-top: -150px;\n                margin-left: -265px;\n                border-radius: 3px;\n                box-shadow: 0 2px 9px -1px rgba(0,0,0,.13);\n            }\n        }\n        @media (min-width: 481px) and (max-width: 619px) {\n            .px-hard-block-container {\n                width: 85%;\n                top: 50%;\n                left: 50%;\n                margin-top: -150px;\n                margin-left: -42.5%;\n                border-radius: 3px;\n                box-shadow: 0 2px 9px -1px rgba(0,0,0,.13);\n            }\n        }\n        @media (max-width: 480px) {\n            body { background-color: #fff; }\n            .px-hard-block-container {\n                width: 100%;\n                top: 50%;\n                left: 0;\n                margin-top: -150px;\n            }\n            .px-hard-block-refid {\n                position: fixed;\n                width: 100%;\n                left: 0;\n                bottom: 0;\n                border-radius: 0;\n                font-size: 14px;\n                line-height: 2;\n            }\n        }\n    </style>\n</head>\n<body>\n    <div class=\"px-hard-block-container\">\n        <div class=\"px-hard-block-logo\"><img src=\"{{customLogo}}\" alt=\"\"></div>\n        <div class=\"px-hard-block-header\">Access Denied</div>\n        <div class=\"px-hard-block-message\">Access to this page has been denied.<br>Please contact the site administrator if you believe this is an error.</div>\n        <div class=\"px-hard-block-refid\">Reference ID: {{uuid}}</div>\n    </div>\n    {{jsRef}}\n</body>\n</html>\n";

package/lib/cjs/products/bot_defender/block/templates/index.js

@@ -15,4 +15,5 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./captcha_template.js"), exports);
+__exportStar(require("./hard_block_template.js"), exports);
 __exportStar(require("./rate_limit_template.js"), exports);

package/lib/cjs/products/index.js

@@ -20,3 +20,4 @@ __exportStar(require("./bot_defender/index.js"), exports);
 __exportStar(require("./credential_intelligence/index.js"), exports);
 __exportStar(require("./account_defender/index.js"), exports);
 __exportStar(require("./hype_sale_challenge/index.js"), exports);
+__exportStar(require("./agentic_trust/index.js"), exports);

package/lib/cjs/products/utils/ProductName.js

@@ -8,4 +8,5 @@ var ProductName;
     ProductName["CODE_DEFENDER"] = "cd";
     ProductName["CREDENTIAL_INTELLIGENCE"] = "ci";
     ProductName["HYPE_SALE_CHALLENGE"] = "hsc";
+    ProductName["AGENTIC_TRUST"] = "at";
 })(ProductName || (exports.ProductName = ProductName = {}));

package/lib/cjs/products/utils/ProductPriorityOrder.js

@@ -8,4 +8,5 @@ exports.PRODUCT_PRIORITY_ORDER = [
     ProductName_1.ProductName.ACCOUNT_DEFENDER,
     ProductName_1.ProductName.CREDENTIAL_INTELLIGENCE,
     ProductName_1.ProductName.CODE_DEFENDER,
+    ProductName_1.ProductName.AGENTIC_TRUST,
 ];

package/lib/cjs/risk_api/model/GetRiskRequestHeaders.js

@@ -97,6 +97,9 @@ exports.RISK_ACTIVITY_ADDITIONAL_FIELDS_TO_HEADER_NAMES = {
     enforcer_vid_source: {
         header: 'x-px-add-enforcer-vid-source',
     },
+    orig_cookie_vid: {
+        header: 'x-px-add-orig-cookie-vid',
+    },
     server_info_datacenter: {
         header: 'x-px-add-server-info-datacenter',
     },
@@ -186,4 +189,19 @@ exports.RISK_ACTIVITY_ADDITIONAL_FIELDS_TO_HEADER_NAMES = {
         header: 'x-px-add-is-sensitive-route',
         convertToString: function (value) { return "".concat(value); },
     },
+    mcp_method: {
+        header: 'x-px-add-mcp-method',
+    },
+    mcp_tool_name: {
+        header: 'x-px-add-mcp-tool-name',
+    },
+    mcp_tool_argument_keys: {
+        header: 'x-px-add-mcp-tool-argument-keys',
+    },
+    mcp_session_id: {
+        header: 'x-px-add-mcp-session-id',
+    },
+    mcp_http_method: {
+        header: 'x-px-add-mcp-http-method',
+    },
 };

package/lib/cjs/utils/constants.js

@@ -15,4 +15,4 @@ exports.PUSH_DATA_FEATURE_HEADER_NAME = 'x-px-feature';
 exports.EMAIL_ADDRESS_REGEX = /^[a-zA-Z0-9_+&*-]+(?:\.[a-zA-Z0-9_+&*-]+)*@(?:[a-zA-Z0-9-]+\.)+[a-zA-Z]{2,7}$/;
 exports.URL_REGEX = /^(https?:)\/\/(([^@\s:\/]+):?([^@\s\/]*)@)?(([^:\/?#]*)(?:\:([0-9]+))?)(\/?[^?#]*)(\?[^#]*|)(#.*|)$/;
 exports.REGEX_STRUCTURE = /^\/(.+?)\/([gimsuyvd]*)$/;
-exports.CORE_MODULE_VERSION = 'JS Core 0.35.1';
+exports.CORE_MODULE_VERSION = 'JS Core 0.37.0';

package/lib/esm/activities/utils.js

@@ -83,6 +83,9 @@ export const addRootContextDataToDetails = (details, context) => {
     if (context.vidSource) {
         details.enforcer_vid_source = context.vidSource;
     }
+    if (context.origCookieVid) {
+        details.orig_cookie_vid = context.origCookieVid;
+    }
     if (context.graphqlData) {
         details.graphql_operations = context.graphqlData;
     }
@@ -148,6 +151,23 @@ export const addProductDataToDetails = (details, productData) => {
             details.is_sensitive_route = productData.bd.isSensitiveRequest;
         }
     }
+    if (productData.at) {
+        if (productData.at.mcpMethod) {
+            details.mcp_method = productData.at.mcpMethod;
+        }
+        if (productData.at.mcpToolName) {
+            details.mcp_tool_name = productData.at.mcpToolName;
+        }
+        if (productData.at.mcpToolArgumentKeys) {
+            details.mcp_tool_argument_keys = productData.at.mcpToolArgumentKeys;
+        }
+        if (productData.at.mcpSessionId) {
+            details.mcp_session_id = productData.at.mcpSessionId;
+        }
+        if (productData.at.mcpHttpMethod) {
+            details.mcp_http_method = productData.at.mcpHttpMethod;
+        }
+    }
 };
 export const addTlsDataToDetails = (details, tlsData) => {
     if (tlsData.tlsCipher) {

package/lib/esm/blocker/model/BlockAction.js

@@ -1,5 +1,6 @@
 export var BlockAction;
 (function (BlockAction) {
+    BlockAction["BLOCK"] = "b";
     BlockAction["CAPTCHA"] = "c";
     BlockAction["RATE_LIMIT"] = "r";
     BlockAction["CHALLENGE"] = "j";

package/lib/esm/blocker/model/BlockActionToWordMap.js

@@ -1,5 +1,6 @@
 import { BlockAction } from './BlockAction.js';
 export const BLOCK_ACTION_TO_WORD_MAP = new Map([
+    [BlockAction.BLOCK, 'block'],
     [BlockAction.CAPTCHA, 'captcha'],
     [BlockAction.RATE_LIMIT, 'ratelimit'],
     [BlockAction.CHALLENGE, 'challenge'],

package/lib/esm/config/ConfigurationBase.js

@@ -412,6 +412,12 @@ export class ConfigurationBase {
     get proxyUrl() {
         return this.configParams.px_proxy_url;
     }
+    get agenticTrustEnabled() {
+        return this.configParams.px_agentic_trust_enabled;
+    }
+    get agenticTrustMcpEndpointPath() {
+        return this.configParams.px_agentic_trust_mcp_endpoint_path;
+    }
     get enableBlockedUrlOnCaptchaBlockPage() {
         return true;
     }

package/lib/esm/config/defaults/DefaultConfigurationParams.js

@@ -138,4 +138,6 @@ export const defaultConfigurationParams = () => ({
     px_custom_is_enforced_request: null,
     px_custom_is_filtered_request: null,
     px_extract_graphql_keywords: null,
+    px_agentic_trust_enabled: false,
+    px_agentic_trust_mcp_endpoint_path: '/mcp',
 });

package/lib/esm/context/DefaultContext.js

@@ -22,6 +22,7 @@ export class DefaultContext {
     productData;
     uuid;
     vid;
+    origCookieVid;
     vidSource;
     action;
     reasons;
@@ -154,6 +155,9 @@ export class DefaultContext {
             this.vid = vidValue;
             this.vidSource = VidSource.VID_COOKIE;
         }
+        else if (vidValue) {
+            this.origCookieVid = vidValue;
+        }
         const pxhdCookie = this.requestData.cookies[PXHD_COOKIE_NAME];
         if (pxhdCookie) {
             this.pxhd = {
@@ -190,6 +194,7 @@ export class DefaultContext {
             customParameters: this.customParameters,
             graphqlData: this.graphqlData,
             vid: this.vid,
+            origCookieVid: this.origCookieVid,
             vidSource: this.vidSource,
             uuid: this.uuid,
             enforcerStartTime: this.enforcerStartTime,

package/lib/esm/context/SerializedContext.js

@@ -29,6 +29,7 @@ export class SerializedContext {
     customParameters;
     graphqlData;
     vid;
+    origCookieVid;
     vidSource;
     tokenOrigin;
     uuid;
@@ -50,6 +51,7 @@ export class SerializedContext {
         this.tokenOrigin = contextJson.tokenOrigin;
         this.uuid = contextJson.uuid;
         this.vid = contextJson.vid;
+        this.origCookieVid = contextJson.origCookieVid;
         this.vidSource = contextJson.vidSource;
         this.pxhd = contextJson.pxhd;
         this.pxde = contextJson.pxde;

package/lib/esm/enforcer/utils.js

@@ -7,7 +7,7 @@ import { DefaultGraphQLParser } from '../graphql/index.js';
 import { PostRiskApiClientV2, PostRiskApiClientV3 } from '../risk_api/index.js';
 import { HttpActivityClient, HttpBatchedActivityClient } from '../activities/index.js';
 import { HttpLogServiceClient } from '../logger/index.js';
-import { AccountDefender, BotDefender, CredentialIntelligence, HypeSaleChallenge, ProductName, } from '../products/index.js';
+import { AccountDefender, BotDefender, CredentialIntelligence, HypeSaleChallenge, AgenticTrust, ProductName, } from '../products/index.js';
 import { EnforcerError, isValidTokenVersion } from '../utils/index.js';
 import { DefaultSnippetRetriever } from '../snippet_injection/index.js';
 export const createEnforcerInitializationBlock = (config, options) => {
@@ -70,12 +70,14 @@ export const createEnforcerProducts = (config, products, base64Utils, hashUtils,
     const accountDefender = products?.ad || new AccountDefender(config, { base64Utils });
     const credentialIntelligence = products?.ci || new CredentialIntelligence(config, { hashUtils, urlUtils });
     const hypeSaleChallenge = products?.hsc || new HypeSaleChallenge(config, { base64Utils });
+    const agenticTrust = products?.at || new AgenticTrust(config);
     return {
         [ProductName.BOT_DEFENDER]: botDefender,
         [ProductName.ACCOUNT_DEFENDER]: accountDefender,
         [ProductName.CODE_DEFENDER]: products?.cd,
         [ProductName.CREDENTIAL_INTELLIGENCE]: credentialIntelligence,
         [ProductName.HYPE_SALE_CHALLENGE]: hypeSaleChallenge,
+        [ProductName.AGENTIC_TRUST]: agenticTrust,
     };
 };
 export const createRemoteConfigClients = (config, options) => {