wayleave 0.5.4 → 0.5.5

package/README.md

@@ -25,7 +25,7 @@ Then policy runs per lane: allow, deny, rate-limit — and on routes you price,
 
 Only the first lane is cryptographic. The other three are read off what the client says about itself, so a bot willing to lie reaches the human lane — see [Guarantees](#guarantees-honestly-stated), and set `strictPricedPaths` on anything you charge for.
 
-## Two ways to use it
+## Three ways to use it
 
 **1. The hosted Identity API — no install, any language.** Post a request's
 signature headers and get back who signed it and which lane it belongs in.
@@ -54,6 +54,25 @@ way to know which to believe.
 you do not send. This is the path if you want to price routes, enforce access
 rules, or stay in-process. Start below.
 
+**3. A platform adapter — if your code does not run on Node.** This package is
+Express middleware and Node's crypto; it cannot run on a Worker or a Deno
+edge function. These can, share one policy engine with it, and are configured
+the same way:
+
+| Where you run | Install |
+|---|---|
+| Cloudflare Workers | [`@wayleave/cloudflare`](https://www.npmjs.com/package/@wayleave/cloudflare) |
+| Vercel middleware | [`@wayleave/vercel`](https://www.npmjs.com/package/@wayleave/vercel) |
+| Supabase Edge Functions | [`@wayleave/supabase`](https://www.npmjs.com/package/@wayleave/supabase) |
+| Netlify Edge Functions | [`@wayleave/netlify`](https://www.npmjs.com/package/@wayleave/netlify) |
+| An MCP server | [`@wayleave/mcp`](https://www.npmjs.com/package/@wayleave/mcp) |
+
+All four HTTP adapters default to observe mode and fail open, exactly as this
+one does. The MCP guard is the odd one: an MCP server has no HTTP request to
+inspect and MCP clients carry no signatures, so it does not classify lanes at
+all — it bounds tool calls by rate, budget and repetition instead, and says
+`classification: "unknown"` rather than guessing.
+
 ## Quickstart: observe first
 
 ```sh

package/index.js

@@ -344,7 +344,18 @@ export function classify(req, directories, now, opts = {}) {
   if (h['signature'] || h['signature-input'])
     return { lane: LANES.SUSPECT, agentId: null,
              evidence: [`crypto: ${v.reason}`, 'presented invalid signature'] };
-  if (AGENT_UA.some(p => p.test(ua))) {
+  /* WHICH pattern matched, not merely that one did.
+     
+     This used to be `.some(...)`, and the evidence then quoted the first 40
+     characters of the user-agent. Almost every bot UA opens with a Mozilla
+     compatibility preamble and names itself at the END, so the quote cut off
+     exactly where the identifying part began: 486 crossings on one site all
+     recorded as `mozilla/5.0 applewebkit/537.36 (khtml, l`, indistinguishable
+     from each other and from a browser.
+     
+     The matched pattern is the name. It was in hand and discarded. */
+  const agentMatch = AGENT_UA.map(p => (p.exec(ua) || [])[0]).find(Boolean);
+  if (agentMatch) {
     // A UA naming a known operator is a claim, and claims are checkable when
     // the operator publishes its addresses. Claiming to be GPTBot from an
     // address OpenAI does not own is a stronger fraud signal than saying
@@ -356,10 +367,10 @@ export function classify(req, directories, now, opts = {}) {
       : null;
     if (ipOk === false)
       return { lane: LANES.SUSPECT, agentId: null,
-               evidence: [`UA claims "${ua.slice(0, 40)}"`,
+               evidence: [`UA claims "${agentMatch}"`,
                           `but ${opts.ip || 'the client'} is not a published address for it`] };
     return { lane: LANES.DECLARED, agentId: null,
-             evidence: [`self-identified in UA: "${ua.slice(0, 40)}"`,
+             evidence: [`self-identified as "${agentMatch}"`,
                         ipOk === true ? 'source address matches published range'
                                       : 'no signature presented'] };
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wayleave",
-  "version": "0.5.4",
+  "version": "0.5.5",
   "description": "Know which AI agents cross your API \u2014 verified by signature, not guessed from an IP. Sorts every request into four lanes, prices the non-human ones with HTTP 402, and never charges a human. Zero dependencies.",
   "type": "module",
   "main": "index.js",