requestshield 1.1.0 → 2.0.0-qat.301

package/README.md

@@ -257,9 +257,7 @@ It shows the current plan and subscription billing period, included allowance,
 approximate usage, remaining quota, overage and estimated cost in its currency.
 The CLI reads billing estimates directly; `usage` monitoring totals are separate.
 
-Billing counts authenticated API v2 token verification requests, including
-rejected requests and retries. API v1 activity, unauthenticated requests and
-service errors are excluded.
+Billing counts successful token verifications.
 
 Express includes 10,000 calls per period at no charge. Pro includes 100,000 calls
 for USD 100 per period, plus USD 0.001 per additional call. The estimate includes

package/config/.env.qat

@@ -0,0 +1,7 @@
+# Public QAT settings for the QAT npm release and source runner. Never add secrets.
+API_URL=https://management-api-qat.intellifend.ai
+CHALLENGE_URL=https://challenge-dev.intellifend.ai
+DOCS_URL=https://docs-qat.intellifend.ai
+OAUTH_ISSUER=https://incongruous-cherry-0283.customers.stytch.dev
+OAUTH_AUTHORIZATION_ISSUER=stytch.com/project-test-968146e2-6f34-4936-9d1c-a7e966813c70
+OAUTH_CLIENT_ID=connected-app-test-5ff62ca4-c0eb-48c3-84e5-06ae8f669998

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "requestshield",
-  "version": "1.1.0",
+  "version": "2.0.0-qat.301",
   "description": "Customer CLI for IntelliFend RequestShield.",
   "type": "module",
   "bin": {
@@ -9,11 +9,11 @@
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org/",
-    "tag": "latest"
+    "tag": "qat"
   },
   "files": [
     "src/",
-    "config/.env.prod",
+    "config/.env.qat",
     "skills/",
     "README.md"
   ],
@@ -22,6 +22,6 @@
   },
   "license": "UNLICENSED",
   "requestshield": {
-    "profile": "prod"
+    "profile": "qat"
   }
 }

package/skills/requestshield/SKILL.md

@@ -1,5 +1,7 @@
 ---
 name: requestshield
+metadata:
+  version: "2.0.0"
 description: Install, verify, troubleshoot, or remove IntelliFend RequestShield bot protection in a customer codebase — the browser SDK in Seamless or Manual mode, plus Java backend enforcement via the Spring Boot 3 starter or the Java core SDK — using the `requestshield` CLI for sign-in, applications and credentials, with SDK documentation and runtime observations for integration checks. Use this skill whenever the user mentions RequestShield, IntelliFend, `X-IntelliFend-Token`, `IntelliFend.getToken()`, `data-protect`, `@RequestShieldProtected`, App Key or API Secret setup, or asks to protect an endpoint such as registration, sign-in, password reset, checkout, or form submission from bots, scripted abuse, or credential stuffing — even when they never name the product. Also use it before hand-editing any file that already contains a RequestShield script tag, `verify()` call, or protection annotation.
 ---
 

package/skills/requestshield/references/cli.md

@@ -234,9 +234,7 @@ The App Key selects an account-wide report across its applications; do not
 allocate the account charge or included allowance to the requested app. The
 command is read-only and uses the existing application-read permission.
 
-Billing counts authenticated API v2 token verification requests, including
-rejected requests and retries. API v1 activity, unauthenticated requests and
-service errors are excluded.
+Billing counts successful token verifications.
 
 JSON returns `{data: ...}` with `appKey`, `scope: "account"`, subscription
 `status`, nullable `plan` (`free` for Express or `pro`), nullable

package/src/api-client.mjs

@@ -2,7 +2,7 @@
 import { CliError } from "./errors.mjs";
 import { validateBearerToken, validatedUrl } from "./config.mjs";
 
-const APPLICATIONS = "/v1/applications";
+const APPLICATIONS = "/v2/applications";
 const MAX_BODY_BYTES = 1024 * 1024;
 const API_ERRORS = new Set(["invalid_request", "invalid_token", "insufficient_scope", "application_not_found",
   "idempotency_conflict", "secret_revoked", "email_not_verified", "identity_not_found", "dependency_unavailable", "rate_limited"]);

package/config/.env.prod

@@ -1,9 +0,0 @@
-# Public production settings shipped in the npm package. Never add secrets.
-API_URL=https://management-api.intellifend.ai
-CHALLENGE_URL=https://challenge.intellifend.ai
-DOCS_URL=https://docs.intellifend.ai
-# Fill in the production Connected App values before releasing sign-in.
-OAUTH_ISSUER=https://diligent-snagglefoot-6840.customers.stytch.com
-# Optional callback iss pin; blank uses OAUTH_ISSUER.
-OAUTH_AUTHORIZATION_ISSUER=
-OAUTH_CLIENT_ID=connected-app-live-8383c2b5-6f1e-42b5-af4e-6c49e5bb5fe6