@astrasyncai/verification-gateway 3.3.0 → 3.4.0

package/dist/index.mjs

@@ -544,7 +544,9 @@ async function verify(config, request) {
       // linking key (the sessionId-equivalent for anonymous callers).
       correlationId: apiResponse.correlationId,
       recommendation: apiResponse.recommendation,
-      recommendationReasons: apiResponse.recommendationReasons
+      recommendationReasons: apiResponse.recommendationReasons,
+      stepUpApproval: apiResponse.stepUpApproval,
+      settlement: apiResponse.settlement
     };
     return result2;
   }
@@ -596,7 +598,9 @@ async function verify(config, request) {
     tokenGuidance: apiResponse.tokenGuidance,
     recommendation: apiResponse.recommendation,
     recommendationReasons: apiResponse.recommendationReasons,
-    warningHeader: apiResponse.warningHeader
+    warningHeader: apiResponse.warningHeader,
+    stepUpApproval: apiResponse.stepUpApproval,
+    settlement: apiResponse.settlement
   };
   if (result.recommendation === "deny") {
     result.policyAllowed = false;
@@ -677,7 +681,7 @@ async function quickVerify(config, credentials) {
 }
 
 // src/adapters/approval-gate.ts
-var APPROVAL_REASON = "Transaction is above the autonomous limit and requires human approval, which is not yet available - it cannot be completed automatically.";
+var APPROVAL_REASON = "Transaction is above the autonomous limit and requires human approval. The agent owner can approve or deny this transaction in the AstraSync dashboard.";
 function requiresHumanApproval(result) {
   return result.requiresStepUp === true || result.requiresApproval === true;
 }
@@ -733,7 +737,8 @@ async function authorizeSettlement(config, req) {
     recommendation,
     reason: authorized ? void 0 : result.denialReasons?.[0] ?? (requiresHumanApproval(result) ? "Transaction is above the autonomous limit and requires human approval; settlement cannot be authorized automatically." : "Settlement not authorized by the agent's PDLSS limits."),
     failures: result.failures,
-    correlationId: result.correlationId
+    correlationId: result.correlationId,
+    stepUpApproval: requiresHumanApproval(result) ? result.stepUpApproval : void 0
   };
 }
 
@@ -1020,7 +1025,8 @@ function defaultOnDenied(result, _req, res) {
       guidance: result.guidance,
       // Round-10: aggregated per-dimension detail + correlation handle.
       failures: result.failures,
-      correlationId: result.correlationId
+      correlationId: result.correlationId,
+      stepUpApproval: result.stepUpApproval
     }
   });
 }
@@ -1670,7 +1676,8 @@ function createMiddleware2(options) {
               code: !result.identityVerified ? "UNAUTHORIZED" : "POLICY_DENIED",
               message: result.denialReasons?.[0] || "Access denied",
               guidance: result.guidance,
-              failures: result.failures
+              failures: result.failures,
+              stepUpApproval: result.stepUpApproval
             }
           },
           { status: !result.identityVerified ? 401 : 403 }
@@ -4573,7 +4580,8 @@ function defaultMcpDenied(result, req, res) {
         guidance: result.guidance,
         // Round-10: aggregated per-dimension detail + correlation handle.
         failures: result.failures,
-        correlationId: result.correlationId
+        correlationId: result.correlationId,
+        stepUpApproval: result.stepUpApproval
       }
     }
   });
@@ -5501,7 +5509,7 @@ async function recordDecision2(config, params) {
 }
 
 // src/index.ts
-var VERSION = "2.0.0";
+var VERSION = "3.4.0";
 export {
   ACCESS_LEVEL_DESCRIPTIONS,
   ACCESS_LEVEL_HIERARCHY,