@astrasyncai/verification-gateway 3.4.0 → 3.5.0

package/dist/{types-Cj92yKeA.d.mts → types-C8HyQEaz.d.mts}

@@ -1,4 +1,4 @@
-import { a as AccessLevel, d as CounterpartyType, T as TokenGuidance } from './types-Cwrvo30g.mjs';
+import { a as AccessLevel, d as CounterpartyType, T as TokenGuidance } from './types-DrDIouvO.mjs';
 
 /**
  * AstraSync Gateway - Types for gateway modes, local evaluation, and adapter interface.

package/dist/{types-Cwrvo30g.d.mts → types-DrDIouvO.d.mts}

@@ -444,9 +444,14 @@ interface VerificationRequest {
     resource?: string;
     /** Jurisdiction for the request */
     jurisdiction?: string;
-    /** Transaction value (if applicable) */
+    /**
+     * Transaction value in MAJOR units (dollars, euros, native token units —
+     * NOT cents/minor units). Diverges from Stripe (minor units). UCP/ACP
+     * extractors auto-convert from cents (÷100). x402 uses per-token decimals.
+     * See `transport/transaction-value.ts` for per-protocol normalization.
+     */
     transactionValue?: number;
-    /** Currency for transaction value */
+    /** ISO-4217 currency code for transactionValue (e.g. 'USD', 'AUD', 'ETH'). Falls back to 'USD' server-side when unset. */
     currency?: string;
     /** Whether this is a sub-agent request */
     isSubAgentRequest?: boolean;
@@ -557,6 +562,23 @@ interface ExpressMiddlewareOptions extends GatewayConfig {
      * DELETE→data.delete). Dashboard route mapping still outranks it.
      */
     extractAction?: (req: unknown) => string | undefined;
+    /**
+     * Optional extractor for the transaction value from the incoming request.
+     * Must return the value in MAJOR units (dollars, euros — NOT cents/minor
+     * units). This diverges from Stripe and most payment rails which use minor
+     * units. If your source is in minor units (cents), divide by 100 before
+     * returning.
+     *
+     * When configured, the extracted value and currency are forwarded to
+     * verify-access so PDLSS limit evaluation runs at middleware time.
+     *
+     * NOTE: this is opt-in upfront enforcement. `authorizeSettlement()` remains
+     * the REQUIRED fail-closed settlement gate at settlement time.
+     */
+    extractTransactionValue?: (req: unknown) => {
+        value: number;
+        currency: string;
+    } | undefined;
     /** Skip verification for certain paths */
     skipPaths?: string[];
     /** Custom response for denied requests */

package/dist/{types-Cwrvo30g.d.ts → types-DrDIouvO.d.ts}

@@ -444,9 +444,14 @@ interface VerificationRequest {
     resource?: string;
     /** Jurisdiction for the request */
     jurisdiction?: string;
-    /** Transaction value (if applicable) */
+    /**
+     * Transaction value in MAJOR units (dollars, euros, native token units —
+     * NOT cents/minor units). Diverges from Stripe (minor units). UCP/ACP
+     * extractors auto-convert from cents (÷100). x402 uses per-token decimals.
+     * See `transport/transaction-value.ts` for per-protocol normalization.
+     */
     transactionValue?: number;
-    /** Currency for transaction value */
+    /** ISO-4217 currency code for transactionValue (e.g. 'USD', 'AUD', 'ETH'). Falls back to 'USD' server-side when unset. */
     currency?: string;
     /** Whether this is a sub-agent request */
     isSubAgentRequest?: boolean;
@@ -557,6 +562,23 @@ interface ExpressMiddlewareOptions extends GatewayConfig {
      * DELETE→data.delete). Dashboard route mapping still outranks it.
      */
     extractAction?: (req: unknown) => string | undefined;
+    /**
+     * Optional extractor for the transaction value from the incoming request.
+     * Must return the value in MAJOR units (dollars, euros — NOT cents/minor
+     * units). This diverges from Stripe and most payment rails which use minor
+     * units. If your source is in minor units (cents), divide by 100 before
+     * returning.
+     *
+     * When configured, the extracted value and currency are forwarded to
+     * verify-access so PDLSS limit evaluation runs at middleware time.
+     *
+     * NOTE: this is opt-in upfront enforcement. `authorizeSettlement()` remains
+     * the REQUIRED fail-closed settlement gate at settlement time.
+     */
+    extractTransactionValue?: (req: unknown) => {
+        value: number;
+        currency: string;
+    } | undefined;
     /** Skip verification for certain paths */
     skipPaths?: string[];
     /** Custom response for denied requests */

package/dist/{types-DOeL-dIw.d.ts → types-xofemo0G.d.ts}

@@ -1,4 +1,4 @@
-import { a as AccessLevel, d as CounterpartyType, T as TokenGuidance } from './types-Cwrvo30g.js';
+import { a as AccessLevel, d as CounterpartyType, T as TokenGuidance } from './types-DrDIouvO.js';
 
 /**
  * AstraSync Gateway - Types for gateway modes, local evaluation, and adapter interface.

package/dist/ui/index.d.mts

@@ -1,4 +1,4 @@
-import { C as CommerceShieldProps, l as VerificationResult, b as AgentCredentials, f as GuidanceInfo, k as TrustLevel } from '../types-Cwrvo30g.mjs';
+import { C as CommerceShieldProps, l as VerificationResult, b as AgentCredentials, f as GuidanceInfo, k as TrustLevel } from '../types-DrDIouvO.mjs';
 
 /**
  * AstraSync Commerce Shield Component

package/dist/ui/index.d.ts

@@ -1,4 +1,4 @@
-import { C as CommerceShieldProps, l as VerificationResult, b as AgentCredentials, f as GuidanceInfo, k as TrustLevel } from '../types-Cwrvo30g.js';
+import { C as CommerceShieldProps, l as VerificationResult, b as AgentCredentials, f as GuidanceInfo, k as TrustLevel } from '../types-DrDIouvO.js';
 
 /**
  * AstraSync Commerce Shield Component

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrasyncai/verification-gateway",
-  "version": "3.4.0",
+  "version": "3.5.0",
   "description": "AstraSync KYA Platform SDK — counterparty verification gateway (verify incoming requests) + agent registration (register AI agents with the KYA backend).",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",