@astrasyncai/verification-gateway 3.3.0 → 3.5.0

package/dist/adapters/express.mjs

@@ -7,7 +7,7 @@ function getTrustLevel(score) {
 }
 
 // src/version.ts
-var SDK_VERSION = "3.3.0";
+var SDK_VERSION = "3.5.0";
 
 // src/well-known.ts
 var CACHE_TTL_MS = 60 * 60 * 1e3;
@@ -419,7 +419,9 @@ async function verify(config, request) {
       // linking key (the sessionId-equivalent for anonymous callers).
       correlationId: apiResponse.correlationId,
       recommendation: apiResponse.recommendation,
-      recommendationReasons: apiResponse.recommendationReasons
+      recommendationReasons: apiResponse.recommendationReasons,
+      stepUpApproval: apiResponse.stepUpApproval,
+      settlement: apiResponse.settlement
     };
     return result2;
   }
@@ -471,7 +473,9 @@ async function verify(config, request) {
     tokenGuidance: apiResponse.tokenGuidance,
     recommendation: apiResponse.recommendation,
     recommendationReasons: apiResponse.recommendationReasons,
-    warningHeader: apiResponse.warningHeader
+    warningHeader: apiResponse.warningHeader,
+    stepUpApproval: apiResponse.stepUpApproval,
+    settlement: apiResponse.settlement
   };
   if (result.recommendation === "deny") {
     result.policyAllowed = false;
@@ -665,7 +669,7 @@ function resolveHttpPdlss(input) {
 }
 
 // src/adapters/approval-gate.ts
-var APPROVAL_REASON = "Transaction is above the autonomous limit and requires human approval, which is not yet available - it cannot be completed automatically.";
+var APPROVAL_REASON = "Transaction is above the autonomous limit and requires human approval. The agent owner can approve or deny this transaction in the AstraSync dashboard.";
 function requiresHumanApproval(result) {
   return result.requiresStepUp === true || result.requiresApproval === true;
 }
@@ -804,7 +808,8 @@ function defaultOnDenied(result, _req, res) {
       guidance: result.guidance,
       // Round-10: aggregated per-dimension detail + correlation handle.
       failures: result.failures,
-      correlationId: result.correlationId
+      correlationId: result.correlationId,
+      stepUpApproval: result.stepUpApproval
     }
   });
 }
@@ -954,6 +959,21 @@ function createMiddleware(options) {
         );
       }
       const agentCardUrl = typeof req.headers["x-astrasync-agent-card"] === "string" ? req.headers["x-astrasync-agent-card"] : void 0;
+      let txValue;
+      let txCurrency;
+      if (config.extractTransactionValue) {
+        try {
+          const extracted = config.extractTransactionValue(req);
+          if (extracted) {
+            txValue = extracted.value;
+            txCurrency = extracted.currency;
+          }
+        } catch (e) {
+          if (config.debug) {
+            console.warn("[VerificationGateway] extractTransactionValue threw:", e);
+          }
+        }
+      }
       const result = await verify(config, {
         credentials,
         purpose,
@@ -964,6 +984,8 @@ function createMiddleware(options) {
         counterpartyType: config.counterpartyType || "api",
         enableRuntimeChallenge,
         durationRequired: astraCreds?.pdlss?.duration?.maxSessionDuration,
+        ...txValue !== void 0 && { transactionValue: txValue },
+        ...txCurrency && { currency: txCurrency },
         callerMetadata: {
           sourceIp: originalClientIp,
           userAgent: req.headers["user-agent"],