@astrasyncai/verification-gateway 3.3.0 → 3.5.0

package/dist/{types-ClvUqrEm.d.mts → types-C8HyQEaz.d.mts}

@@ -1,4 +1,4 @@
-import { a as AccessLevel, d as CounterpartyType, T as TokenGuidance } from './types-B_wnd7ZX.mjs';
+import { a as AccessLevel, d as CounterpartyType, T as TokenGuidance } from './types-DrDIouvO.mjs';
 
 /**
  * AstraSync Gateway - Types for gateway modes, local evaluation, and adapter interface.

package/dist/{types-B_wnd7ZX.d.mts → types-DrDIouvO.d.mts}

@@ -280,6 +280,14 @@ interface Attestation {
     /** Attestation kind (e.g. `verified_human_party`). */
     type: string;
     status: 'passed' | 'failed';
+    /**
+     * ISO-8601 timestamp of the underlying check (when KYC/IDV/AML actually ran).
+     * Merchants compare this against their `maxAgeDays` requirement on the
+     * endpoint to enforce per-attestation freshness. Distinct from `validUntil`:
+     * `checkedAt` is when the data was sourced; `validUntil` is when the issuer
+     * stops vouching for it.
+     */
+    checkedAt: string;
     validUntil?: string;
     proofType: 'reference' | 'zkp';
     proof: string;
@@ -297,6 +305,23 @@ interface GuidanceInfo {
     /** Steps to get verified */
     steps?: string[];
 }
+interface StepUpApprovalInfo {
+    approvalId: string;
+    pollUrl: string;
+    expiresAt: string;
+}
+interface SettlementArtifact {
+    type: string;
+    artifact: string;
+    binding: {
+        merchantId: string;
+        amount: number;
+        currency: string;
+        sessionId: string;
+        singleUse: true;
+        expiresAt: string;
+    };
+}
 /**
  * Complete verification result
  */
@@ -374,6 +399,10 @@ interface VerificationResult {
     requiresStepUp?: boolean;
     /** Whether approval is required */
     requiresApproval?: boolean;
+    /** Step-up approval info (present when transaction is in the human-approval band). */
+    stepUpApproval?: StepUpApprovalInfo;
+    /** Settlement voucher (present on clean merchant-mediated grants with a verified wallet). */
+    settlement?: SettlementArtifact;
     /** Timestamp of verification */
     verifiedAt: Date;
     /** TTL for this result (seconds) */
@@ -415,9 +444,14 @@ interface VerificationRequest {
     resource?: string;
     /** Jurisdiction for the request */
     jurisdiction?: string;
-    /** Transaction value (if applicable) */
+    /**
+     * Transaction value in MAJOR units (dollars, euros, native token units —
+     * NOT cents/minor units). Diverges from Stripe (minor units). UCP/ACP
+     * extractors auto-convert from cents (÷100). x402 uses per-token decimals.
+     * See `transport/transaction-value.ts` for per-protocol normalization.
+     */
     transactionValue?: number;
-    /** Currency for transaction value */
+    /** ISO-4217 currency code for transactionValue (e.g. 'USD', 'AUD', 'ETH'). Falls back to 'USD' server-side when unset. */
     currency?: string;
     /** Whether this is a sub-agent request */
     isSubAgentRequest?: boolean;
@@ -528,6 +562,23 @@ interface ExpressMiddlewareOptions extends GatewayConfig {
      * DELETE→data.delete). Dashboard route mapping still outranks it.
      */
     extractAction?: (req: unknown) => string | undefined;
+    /**
+     * Optional extractor for the transaction value from the incoming request.
+     * Must return the value in MAJOR units (dollars, euros — NOT cents/minor
+     * units). This diverges from Stripe and most payment rails which use minor
+     * units. If your source is in minor units (cents), divide by 100 before
+     * returning.
+     *
+     * When configured, the extracted value and currency are forwarded to
+     * verify-access so PDLSS limit evaluation runs at middleware time.
+     *
+     * NOTE: this is opt-in upfront enforcement. `authorizeSettlement()` remains
+     * the REQUIRED fail-closed settlement gate at settlement time.
+     */
+    extractTransactionValue?: (req: unknown) => {
+        value: number;
+        currency: string;
+    } | undefined;
     /** Skip verification for certain paths */
     skipPaths?: string[];
     /** Custom response for denied requests */
@@ -723,4 +774,4 @@ interface CommerceShieldProps {
     className?: string;
 }
 
-export type { AccessFailure as A, CommerceShieldProps as C, EnhancedVerificationResult as E, GatewayConfig as G, NextJsMiddlewareOptions as N, PDLSSInfo as P, RouteAccessConfig as R, SDKOptions as S, TokenGuidance as T, VerificationRequest as V, AccessLevel as a, AgentCredentials as b, AstraSyncCredentials as c, CounterpartyType as d, ExpressMiddlewareOptions as e, GuidanceInfo as f, ProtocolTransport as g, RuntimeChallengeResult as h, TrustLevel as i, VerificationResult as j, VerifiedAgent as k, VerifiedDeveloper as l, VerifiedOrganization as m };
+export type { AccessFailure as A, CommerceShieldProps as C, EnhancedVerificationResult as E, GatewayConfig as G, NextJsMiddlewareOptions as N, PDLSSInfo as P, RouteAccessConfig as R, SDKOptions as S, TokenGuidance as T, VerificationRequest as V, AccessLevel as a, AgentCredentials as b, AstraSyncCredentials as c, CounterpartyType as d, ExpressMiddlewareOptions as e, GuidanceInfo as f, ProtocolTransport as g, RuntimeChallengeResult as h, SettlementArtifact as i, StepUpApprovalInfo as j, TrustLevel as k, VerificationResult as l, VerifiedAgent as m, VerifiedDeveloper as n, VerifiedOrganization as o };

package/dist/{types-B_wnd7ZX.d.ts → types-DrDIouvO.d.ts}

@@ -280,6 +280,14 @@ interface Attestation {
     /** Attestation kind (e.g. `verified_human_party`). */
     type: string;
     status: 'passed' | 'failed';
+    /**
+     * ISO-8601 timestamp of the underlying check (when KYC/IDV/AML actually ran).
+     * Merchants compare this against their `maxAgeDays` requirement on the
+     * endpoint to enforce per-attestation freshness. Distinct from `validUntil`:
+     * `checkedAt` is when the data was sourced; `validUntil` is when the issuer
+     * stops vouching for it.
+     */
+    checkedAt: string;
     validUntil?: string;
     proofType: 'reference' | 'zkp';
     proof: string;
@@ -297,6 +305,23 @@ interface GuidanceInfo {
     /** Steps to get verified */
     steps?: string[];
 }
+interface StepUpApprovalInfo {
+    approvalId: string;
+    pollUrl: string;
+    expiresAt: string;
+}
+interface SettlementArtifact {
+    type: string;
+    artifact: string;
+    binding: {
+        merchantId: string;
+        amount: number;
+        currency: string;
+        sessionId: string;
+        singleUse: true;
+        expiresAt: string;
+    };
+}
 /**
  * Complete verification result
  */
@@ -374,6 +399,10 @@ interface VerificationResult {
     requiresStepUp?: boolean;
     /** Whether approval is required */
     requiresApproval?: boolean;
+    /** Step-up approval info (present when transaction is in the human-approval band). */
+    stepUpApproval?: StepUpApprovalInfo;
+    /** Settlement voucher (present on clean merchant-mediated grants with a verified wallet). */
+    settlement?: SettlementArtifact;
     /** Timestamp of verification */
     verifiedAt: Date;
     /** TTL for this result (seconds) */
@@ -415,9 +444,14 @@ interface VerificationRequest {
     resource?: string;
     /** Jurisdiction for the request */
     jurisdiction?: string;
-    /** Transaction value (if applicable) */
+    /**
+     * Transaction value in MAJOR units (dollars, euros, native token units —
+     * NOT cents/minor units). Diverges from Stripe (minor units). UCP/ACP
+     * extractors auto-convert from cents (÷100). x402 uses per-token decimals.
+     * See `transport/transaction-value.ts` for per-protocol normalization.
+     */
     transactionValue?: number;
-    /** Currency for transaction value */
+    /** ISO-4217 currency code for transactionValue (e.g. 'USD', 'AUD', 'ETH'). Falls back to 'USD' server-side when unset. */
     currency?: string;
     /** Whether this is a sub-agent request */
     isSubAgentRequest?: boolean;
@@ -528,6 +562,23 @@ interface ExpressMiddlewareOptions extends GatewayConfig {
      * DELETE→data.delete). Dashboard route mapping still outranks it.
      */
     extractAction?: (req: unknown) => string | undefined;
+    /**
+     * Optional extractor for the transaction value from the incoming request.
+     * Must return the value in MAJOR units (dollars, euros — NOT cents/minor
+     * units). This diverges from Stripe and most payment rails which use minor
+     * units. If your source is in minor units (cents), divide by 100 before
+     * returning.
+     *
+     * When configured, the extracted value and currency are forwarded to
+     * verify-access so PDLSS limit evaluation runs at middleware time.
+     *
+     * NOTE: this is opt-in upfront enforcement. `authorizeSettlement()` remains
+     * the REQUIRED fail-closed settlement gate at settlement time.
+     */
+    extractTransactionValue?: (req: unknown) => {
+        value: number;
+        currency: string;
+    } | undefined;
     /** Skip verification for certain paths */
     skipPaths?: string[];
     /** Custom response for denied requests */
@@ -723,4 +774,4 @@ interface CommerceShieldProps {
     className?: string;
 }
 
-export type { AccessFailure as A, CommerceShieldProps as C, EnhancedVerificationResult as E, GatewayConfig as G, NextJsMiddlewareOptions as N, PDLSSInfo as P, RouteAccessConfig as R, SDKOptions as S, TokenGuidance as T, VerificationRequest as V, AccessLevel as a, AgentCredentials as b, AstraSyncCredentials as c, CounterpartyType as d, ExpressMiddlewareOptions as e, GuidanceInfo as f, ProtocolTransport as g, RuntimeChallengeResult as h, TrustLevel as i, VerificationResult as j, VerifiedAgent as k, VerifiedDeveloper as l, VerifiedOrganization as m };
+export type { AccessFailure as A, CommerceShieldProps as C, EnhancedVerificationResult as E, GatewayConfig as G, NextJsMiddlewareOptions as N, PDLSSInfo as P, RouteAccessConfig as R, SDKOptions as S, TokenGuidance as T, VerificationRequest as V, AccessLevel as a, AgentCredentials as b, AstraSyncCredentials as c, CounterpartyType as d, ExpressMiddlewareOptions as e, GuidanceInfo as f, ProtocolTransport as g, RuntimeChallengeResult as h, SettlementArtifact as i, StepUpApprovalInfo as j, TrustLevel as k, VerificationResult as l, VerifiedAgent as m, VerifiedDeveloper as n, VerifiedOrganization as o };

package/dist/{types-B6uD4jAI.d.ts → types-xofemo0G.d.ts}

@@ -1,4 +1,4 @@
-import { a as AccessLevel, d as CounterpartyType, T as TokenGuidance } from './types-B_wnd7ZX.js';
+import { a as AccessLevel, d as CounterpartyType, T as TokenGuidance } from './types-DrDIouvO.js';
 
 /**
  * AstraSync Gateway - Types for gateway modes, local evaluation, and adapter interface.

package/dist/ui/index.d.mts

@@ -1,4 +1,4 @@
-import { C as CommerceShieldProps, j as VerificationResult, b as AgentCredentials, f as GuidanceInfo, i as TrustLevel } from '../types-B_wnd7ZX.mjs';
+import { C as CommerceShieldProps, l as VerificationResult, b as AgentCredentials, f as GuidanceInfo, k as TrustLevel } from '../types-DrDIouvO.mjs';
 
 /**
  * AstraSync Commerce Shield Component

package/dist/ui/index.d.ts

@@ -1,4 +1,4 @@
-import { C as CommerceShieldProps, j as VerificationResult, b as AgentCredentials, f as GuidanceInfo, i as TrustLevel } from '../types-B_wnd7ZX.js';
+import { C as CommerceShieldProps, l as VerificationResult, b as AgentCredentials, f as GuidanceInfo, k as TrustLevel } from '../types-DrDIouvO.js';
 
 /**
  * AstraSync Commerce Shield Component

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrasyncai/verification-gateway",
-  "version": "3.3.0",
+  "version": "3.5.0",
   "description": "AstraSync KYA Platform SDK — counterparty verification gateway (verify incoming requests) + agent registration (register AI agents with the KYA backend).",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",