@astrasyncai/verification-gateway 3.4.0 → 3.6.0

package/dist/{types-Cj92yKeA.d.mts → types-B-ubjHER.d.mts}

@@ -1,4 +1,4 @@
-import { a as AccessLevel, d as CounterpartyType, T as TokenGuidance } from './types-Cwrvo30g.mjs';
+import { a as AccessLevel, d as CounterpartyType, T as TokenGuidance } from './types-CKe8O0lR.mjs';
 
 /**
  * AstraSync Gateway - Types for gateway modes, local evaluation, and adapter interface.

package/dist/{types-DOeL-dIw.d.ts → types-Bgn5gxHQ.d.ts}

@@ -1,4 +1,4 @@
-import { a as AccessLevel, d as CounterpartyType, T as TokenGuidance } from './types-Cwrvo30g.js';
+import { a as AccessLevel, d as CounterpartyType, T as TokenGuidance } from './types-CKe8O0lR.js';
 
 /**
  * AstraSync Gateway - Types for gateway modes, local evaluation, and adapter interface.

package/dist/{types-Cwrvo30g.d.mts → types-CKe8O0lR.d.mts}

@@ -101,6 +101,29 @@ interface GatewayConfig {
      *    the registered origin
      */
     counterpartyId?: string;
+    /**
+     * Step-up hold-and-poll (3.6.0, opt-in). When set, adapters HOLD a request
+     * whose verify() came back step_up_required, poll the approval status, and
+     * on 'approved' re-verify the same request once (cache-bypassed) so the
+     * backend redeems the single-use approval — the MFA model the Java SDK
+     * ships default-on. Values:
+     *  - undefined (default): feature OFF — adapters fail closed immediately,
+     *    exactly as 3.5.0 (a minor release must not silently convert instant
+     *    403s into multi-minute holds).
+     *  - 0: hold until the approval's expiresAt (+5s grace); 5-min fallback
+     *    when expiresAt is missing/unparsable (Java parity).
+     *  - >0: hold at most this many milliseconds.
+     * Next.js edge runtimes enforce ~25s wall-clock budgets — set a small value
+     * there (≤20000) or gate in a Node route handler instead.
+     */
+    stepUpMaxWaitMs?: number;
+    /**
+     * Poll interval for the step-up hold (3.6.0). Default 3000ms, clamped to a
+     * 250ms floor. At the default the backend's 60/min/IP poll rate limit
+     * tolerates ~3 concurrent holds per merchant IP; poll errors are treated as
+     * transient, so limiter hits degrade the hold to 'timeout', never an error.
+     */
+    stepUpPollIntervalMs?: number;
     /**
      * Disable the one-time init self-test. The SDK normally fires a HEAD/OPTIONS
      * to `${apiBaseUrl}/agents/verify-access` on first verify() call and warns
@@ -310,6 +333,16 @@ interface StepUpApprovalInfo {
     pollUrl: string;
     expiresAt: string;
 }
+/**
+ * Lifecycle states of a step-up approval row (mirrors the backend's
+ * step_up_approval_status_check constraint).
+ */
+type StepUpApprovalStatus = 'pending' | 'approved' | 'denied' | 'expired' | 'consumed';
+/**
+ * Terminal outcome of a hold-and-poll wait: any non-pending status, or
+ * 'timeout' when the hold budget ran out while the approval was still pending.
+ */
+type StepUpOutcome = Exclude<StepUpApprovalStatus, 'pending'> | 'timeout';
 interface SettlementArtifact {
     type: string;
     artifact: string;
@@ -401,6 +434,13 @@ interface VerificationResult {
     requiresApproval?: boolean;
     /** Step-up approval info (present when transaction is in the human-approval band). */
     stepUpApproval?: StepUpApprovalInfo;
+    /**
+     * Terminal outcome of an opt-in hold-and-poll wait (3.6.0). Set by adapters
+     * on the result they deny with when the hold ended in denied / expired /
+     * consumed / timeout. Absent when the feature is off or the hold succeeded
+     * (an approved hold re-verifies and the fresh grant result replaces this one).
+     */
+    stepUpOutcome?: StepUpOutcome;
     /** Settlement voucher (present on clean merchant-mediated grants with a verified wallet). */
     settlement?: SettlementArtifact;
     /** Timestamp of verification */
@@ -444,9 +484,14 @@ interface VerificationRequest {
     resource?: string;
     /** Jurisdiction for the request */
     jurisdiction?: string;
-    /** Transaction value (if applicable) */
+    /**
+     * Transaction value in MAJOR units (dollars, euros, native token units —
+     * NOT cents/minor units). Diverges from Stripe (minor units). UCP/ACP
+     * extractors auto-convert from cents (÷100). x402 uses per-token decimals.
+     * See `transport/transaction-value.ts` for per-protocol normalization.
+     */
     transactionValue?: number;
-    /** Currency for transaction value */
+    /** ISO-4217 currency code for transactionValue (e.g. 'USD', 'AUD', 'ETH'). Falls back to 'USD' server-side when unset. */
     currency?: string;
     /** Whether this is a sub-agent request */
     isSubAgentRequest?: boolean;
@@ -557,6 +602,23 @@ interface ExpressMiddlewareOptions extends GatewayConfig {
      * DELETE→data.delete). Dashboard route mapping still outranks it.
      */
     extractAction?: (req: unknown) => string | undefined;
+    /**
+     * Optional extractor for the transaction value from the incoming request.
+     * Must return the value in MAJOR units (dollars, euros — NOT cents/minor
+     * units). This diverges from Stripe and most payment rails which use minor
+     * units. If your source is in minor units (cents), divide by 100 before
+     * returning.
+     *
+     * When configured, the extracted value and currency are forwarded to
+     * verify-access so PDLSS limit evaluation runs at middleware time.
+     *
+     * NOTE: this is opt-in upfront enforcement. `authorizeSettlement()` remains
+     * the REQUIRED fail-closed settlement gate at settlement time.
+     */
+    extractTransactionValue?: (req: unknown) => {
+        value: number;
+        currency: string;
+    } | undefined;
     /** Skip verification for certain paths */
     skipPaths?: string[];
     /** Custom response for denied requests */
@@ -752,4 +814,4 @@ interface CommerceShieldProps {
     className?: string;
 }
 
-export type { AccessFailure as A, CommerceShieldProps as C, EnhancedVerificationResult as E, GatewayConfig as G, NextJsMiddlewareOptions as N, PDLSSInfo as P, RouteAccessConfig as R, SDKOptions as S, TokenGuidance as T, VerificationRequest as V, AccessLevel as a, AgentCredentials as b, AstraSyncCredentials as c, CounterpartyType as d, ExpressMiddlewareOptions as e, GuidanceInfo as f, ProtocolTransport as g, RuntimeChallengeResult as h, SettlementArtifact as i, StepUpApprovalInfo as j, TrustLevel as k, VerificationResult as l, VerifiedAgent as m, VerifiedDeveloper as n, VerifiedOrganization as o };
+export type { AccessFailure as A, CommerceShieldProps as C, EnhancedVerificationResult as E, GatewayConfig as G, NextJsMiddlewareOptions as N, PDLSSInfo as P, RouteAccessConfig as R, SDKOptions as S, TokenGuidance as T, VerificationRequest as V, AccessLevel as a, AgentCredentials as b, AstraSyncCredentials as c, CounterpartyType as d, ExpressMiddlewareOptions as e, GuidanceInfo as f, ProtocolTransport as g, RuntimeChallengeResult as h, SettlementArtifact as i, StepUpApprovalInfo as j, StepUpApprovalStatus as k, StepUpOutcome as l, TrustLevel as m, VerificationResult as n, VerifiedAgent as o, VerifiedDeveloper as p, VerifiedOrganization as q };

package/dist/{types-Cwrvo30g.d.ts → types-CKe8O0lR.d.ts}

@@ -101,6 +101,29 @@ interface GatewayConfig {
      *    the registered origin
      */
     counterpartyId?: string;
+    /**
+     * Step-up hold-and-poll (3.6.0, opt-in). When set, adapters HOLD a request
+     * whose verify() came back step_up_required, poll the approval status, and
+     * on 'approved' re-verify the same request once (cache-bypassed) so the
+     * backend redeems the single-use approval — the MFA model the Java SDK
+     * ships default-on. Values:
+     *  - undefined (default): feature OFF — adapters fail closed immediately,
+     *    exactly as 3.5.0 (a minor release must not silently convert instant
+     *    403s into multi-minute holds).
+     *  - 0: hold until the approval's expiresAt (+5s grace); 5-min fallback
+     *    when expiresAt is missing/unparsable (Java parity).
+     *  - >0: hold at most this many milliseconds.
+     * Next.js edge runtimes enforce ~25s wall-clock budgets — set a small value
+     * there (≤20000) or gate in a Node route handler instead.
+     */
+    stepUpMaxWaitMs?: number;
+    /**
+     * Poll interval for the step-up hold (3.6.0). Default 3000ms, clamped to a
+     * 250ms floor. At the default the backend's 60/min/IP poll rate limit
+     * tolerates ~3 concurrent holds per merchant IP; poll errors are treated as
+     * transient, so limiter hits degrade the hold to 'timeout', never an error.
+     */
+    stepUpPollIntervalMs?: number;
     /**
      * Disable the one-time init self-test. The SDK normally fires a HEAD/OPTIONS
      * to `${apiBaseUrl}/agents/verify-access` on first verify() call and warns
@@ -310,6 +333,16 @@ interface StepUpApprovalInfo {
     pollUrl: string;
     expiresAt: string;
 }
+/**
+ * Lifecycle states of a step-up approval row (mirrors the backend's
+ * step_up_approval_status_check constraint).
+ */
+type StepUpApprovalStatus = 'pending' | 'approved' | 'denied' | 'expired' | 'consumed';
+/**
+ * Terminal outcome of a hold-and-poll wait: any non-pending status, or
+ * 'timeout' when the hold budget ran out while the approval was still pending.
+ */
+type StepUpOutcome = Exclude<StepUpApprovalStatus, 'pending'> | 'timeout';
 interface SettlementArtifact {
     type: string;
     artifact: string;
@@ -401,6 +434,13 @@ interface VerificationResult {
     requiresApproval?: boolean;
     /** Step-up approval info (present when transaction is in the human-approval band). */
     stepUpApproval?: StepUpApprovalInfo;
+    /**
+     * Terminal outcome of an opt-in hold-and-poll wait (3.6.0). Set by adapters
+     * on the result they deny with when the hold ended in denied / expired /
+     * consumed / timeout. Absent when the feature is off or the hold succeeded
+     * (an approved hold re-verifies and the fresh grant result replaces this one).
+     */
+    stepUpOutcome?: StepUpOutcome;
     /** Settlement voucher (present on clean merchant-mediated grants with a verified wallet). */
     settlement?: SettlementArtifact;
     /** Timestamp of verification */
@@ -444,9 +484,14 @@ interface VerificationRequest {
     resource?: string;
     /** Jurisdiction for the request */
     jurisdiction?: string;
-    /** Transaction value (if applicable) */
+    /**
+     * Transaction value in MAJOR units (dollars, euros, native token units —
+     * NOT cents/minor units). Diverges from Stripe (minor units). UCP/ACP
+     * extractors auto-convert from cents (÷100). x402 uses per-token decimals.
+     * See `transport/transaction-value.ts` for per-protocol normalization.
+     */
     transactionValue?: number;
-    /** Currency for transaction value */
+    /** ISO-4217 currency code for transactionValue (e.g. 'USD', 'AUD', 'ETH'). Falls back to 'USD' server-side when unset. */
     currency?: string;
     /** Whether this is a sub-agent request */
     isSubAgentRequest?: boolean;
@@ -557,6 +602,23 @@ interface ExpressMiddlewareOptions extends GatewayConfig {
      * DELETE→data.delete). Dashboard route mapping still outranks it.
      */
     extractAction?: (req: unknown) => string | undefined;
+    /**
+     * Optional extractor for the transaction value from the incoming request.
+     * Must return the value in MAJOR units (dollars, euros — NOT cents/minor
+     * units). This diverges from Stripe and most payment rails which use minor
+     * units. If your source is in minor units (cents), divide by 100 before
+     * returning.
+     *
+     * When configured, the extracted value and currency are forwarded to
+     * verify-access so PDLSS limit evaluation runs at middleware time.
+     *
+     * NOTE: this is opt-in upfront enforcement. `authorizeSettlement()` remains
+     * the REQUIRED fail-closed settlement gate at settlement time.
+     */
+    extractTransactionValue?: (req: unknown) => {
+        value: number;
+        currency: string;
+    } | undefined;
     /** Skip verification for certain paths */
     skipPaths?: string[];
     /** Custom response for denied requests */
@@ -752,4 +814,4 @@ interface CommerceShieldProps {
     className?: string;
 }
 
-export type { AccessFailure as A, CommerceShieldProps as C, EnhancedVerificationResult as E, GatewayConfig as G, NextJsMiddlewareOptions as N, PDLSSInfo as P, RouteAccessConfig as R, SDKOptions as S, TokenGuidance as T, VerificationRequest as V, AccessLevel as a, AgentCredentials as b, AstraSyncCredentials as c, CounterpartyType as d, ExpressMiddlewareOptions as e, GuidanceInfo as f, ProtocolTransport as g, RuntimeChallengeResult as h, SettlementArtifact as i, StepUpApprovalInfo as j, TrustLevel as k, VerificationResult as l, VerifiedAgent as m, VerifiedDeveloper as n, VerifiedOrganization as o };
+export type { AccessFailure as A, CommerceShieldProps as C, EnhancedVerificationResult as E, GatewayConfig as G, NextJsMiddlewareOptions as N, PDLSSInfo as P, RouteAccessConfig as R, SDKOptions as S, TokenGuidance as T, VerificationRequest as V, AccessLevel as a, AgentCredentials as b, AstraSyncCredentials as c, CounterpartyType as d, ExpressMiddlewareOptions as e, GuidanceInfo as f, ProtocolTransport as g, RuntimeChallengeResult as h, SettlementArtifact as i, StepUpApprovalInfo as j, StepUpApprovalStatus as k, StepUpOutcome as l, TrustLevel as m, VerificationResult as n, VerifiedAgent as o, VerifiedDeveloper as p, VerifiedOrganization as q };

package/dist/ui/index.d.mts

@@ -1,4 +1,4 @@
-import { C as CommerceShieldProps, l as VerificationResult, b as AgentCredentials, f as GuidanceInfo, k as TrustLevel } from '../types-Cwrvo30g.mjs';
+import { C as CommerceShieldProps, n as VerificationResult, b as AgentCredentials, f as GuidanceInfo, m as TrustLevel } from '../types-CKe8O0lR.mjs';
 
 /**
  * AstraSync Commerce Shield Component

package/dist/ui/index.d.ts

@@ -1,4 +1,4 @@
-import { C as CommerceShieldProps, l as VerificationResult, b as AgentCredentials, f as GuidanceInfo, k as TrustLevel } from '../types-Cwrvo30g.js';
+import { C as CommerceShieldProps, n as VerificationResult, b as AgentCredentials, f as GuidanceInfo, m as TrustLevel } from '../types-CKe8O0lR.js';
 
 /**
  * AstraSync Commerce Shield Component

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrasyncai/verification-gateway",
-  "version": "3.4.0",
+  "version": "3.6.0",
   "description": "AstraSync KYA Platform SDK — counterparty verification gateway (verify incoming requests) + agent registration (register AI agents with the KYA backend).",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",