@astrasyncai/verification-gateway 3.5.0 → 3.7.0

package/dist/git-trigger/git-hooks.d.mts

@@ -1,6 +1,6 @@
 import { AstraSyncGateway } from '../gateway/gateway.mjs';
-import { V as VerificationDecision, P as PDLSSContext } from '../types-C8HyQEaz.mjs';
-import '../types-DrDIouvO.mjs';
+import { V as VerificationDecision, P as PDLSSContext } from '../types-B-ubjHER.mjs';
+import '../types-CKe8O0lR.mjs';
 
 /**
  * Git Trigger — Enterprise git push / PR verification

package/dist/git-trigger/git-hooks.d.ts

@@ -1,6 +1,6 @@
 import { AstraSyncGateway } from '../gateway/gateway.js';
-import { V as VerificationDecision, P as PDLSSContext } from '../types-xofemo0G.js';
-import '../types-DrDIouvO.js';
+import { V as VerificationDecision, P as PDLSSContext } from '../types-Bgn5gxHQ.js';
+import '../types-CKe8O0lR.js';
 
 /**
  * Git Trigger — Enterprise git push / PR verification

package/dist/{index-aZHAWujT.d.mts → index-BT_aRn-I.d.mts}

@@ -1,4 +1,4 @@
-import { c as AstraSyncCredentials, g as ProtocolTransport, G as GatewayConfig } from './types-DrDIouvO.mjs';
+import { c as AstraSyncCredentials, g as ProtocolTransport, G as GatewayConfig } from './types-CKe8O0lR.mjs';
 
 /**
  * AgentClient — Credential Presentation

package/dist/{index-DlCnmpJH.d.ts → index-D8-dvUFA.d.ts}

@@ -1,4 +1,4 @@
-import { c as AstraSyncCredentials, g as ProtocolTransport, G as GatewayConfig } from './types-DrDIouvO.js';
+import { c as AstraSyncCredentials, g as ProtocolTransport, G as GatewayConfig } from './types-CKe8O0lR.js';
 
 /**
  * AgentClient — Credential Presentation

package/dist/{index-BR2nmxBU.d.mts → index-WHKq2v17.d.mts}

@@ -1,4 +1,4 @@
-import { c as AstraSyncCredentials, g as ProtocolTransport } from './types-DrDIouvO.mjs';
+import { c as AstraSyncCredentials, g as ProtocolTransport } from './types-CKe8O0lR.mjs';
 import { JWK } from 'jose';
 
 /**

package/dist/{index-DEixUCu0.d.ts → index-rftma0ln.d.ts}

@@ -1,4 +1,4 @@
-import { c as AstraSyncCredentials, g as ProtocolTransport } from './types-DrDIouvO.js';
+import { c as AstraSyncCredentials, g as ProtocolTransport } from './types-CKe8O0lR.js';
 import { JWK } from 'jose';
 
 /**

package/dist/index.d.mts

@@ -1,12 +1,12 @@
-import { b as AgentCredentials, G as GatewayConfig, a as AccessLevel, V as VerificationRequest, l as VerificationResult, E as EnhancedVerificationResult, A as AccessFailure, j as StepUpApprovalInfo } from './types-DrDIouvO.mjs';
-export { c as AstraSyncCredentials, C as CommerceShieldProps, d as CounterpartyType, e as ExpressMiddlewareOptions, f as GuidanceInfo, N as NextJsMiddlewareOptions, P as PDLSSInfo, g as ProtocolTransport, R as RouteAccessConfig, h as RuntimeChallengeResult, S as SDKOptions, i as SettlementArtifact, T as TokenGuidance, k as TrustLevel, m as VerifiedAgent, n as VerifiedDeveloper, o as VerifiedOrganization } from './types-DrDIouvO.mjs';
-export { A as ACCESS_LEVEL_DESCRIPTIONS, a as ACCESS_LEVEL_HIERARCHY, b as AccessCapabilities, D as DEFAULT_TRUST_THRESHOLDS, T as TRUST_LEVEL_RANGES, d as determineAccessLevel, g as getAccessLevelForScore, e as getCapabilities, f as getTrustLevel, h as hasMinimumAccess, s as sdk } from './sdk-DKhwVL9X.mjs';
-export { e as express } from './express-BH5ADAyb.mjs';
-export { n as nextjs } from './nextjs-LTeoPqMH.mjs';
-export { aR as extractMcpCredentials, bg as setMcpMeta, b1 as transport } from './index-BR2nmxBU.mjs';
+import { b as AgentCredentials, G as GatewayConfig, a as AccessLevel, V as VerificationRequest, n as VerificationResult, j as StepUpApprovalInfo, l as StepUpOutcome, k as StepUpApprovalStatus, E as EnhancedVerificationResult, A as AccessFailure } from './types-CKe8O0lR.mjs';
+export { c as AstraSyncCredentials, C as CommerceShieldProps, d as CounterpartyType, e as ExpressMiddlewareOptions, f as GuidanceInfo, N as NextJsMiddlewareOptions, P as PDLSSInfo, g as ProtocolTransport, R as RouteAccessConfig, h as RuntimeChallengeResult, S as SDKOptions, i as SettlementArtifact, T as TokenGuidance, m as TrustLevel, o as VerifiedAgent, p as VerifiedDeveloper, q as VerifiedOrganization } from './types-CKe8O0lR.mjs';
+export { A as ACCESS_LEVEL_DESCRIPTIONS, a as ACCESS_LEVEL_HIERARCHY, b as AccessCapabilities, D as DEFAULT_TRUST_THRESHOLDS, T as TRUST_LEVEL_RANGES, d as determineAccessLevel, g as getAccessLevelForScore, e as getCapabilities, f as getTrustLevel, h as hasMinimumAccess, s as sdk } from './sdk-Cy3wAmDt.mjs';
+export { e as express } from './express-BnMO-H3y.mjs';
+export { n as nextjs } from './nextjs-DFKYhxe6.mjs';
+export { aR as extractMcpCredentials, bg as setMcpMeta, b1 as transport } from './index-WHKq2v17.mjs';
 export { McpMiddlewareOptions, ToolGateConfig, createMcpMiddleware } from './adapters/mcp.mjs';
 export { AgentProtocol, AgentRecord, AstraSync, AstraSyncConfig, AstraSyncError, AuthenticationError, BuildGuidanceParams, FrameworkConfig, GuidanceEnvelope, HealthResponse, KYDRequiredError, ModelConfig, PDLSSConfig, PDLSSDuration, PDLSSLimits, PDLSSPurpose, PDLSSScope, PDLSSSelfInstantiation, PendingRegistrationResponse, PollRegistrationResult, RegisterOptions, RegisterResult, RegistrationDeniedError, RegistrationExpiredError, RegistrationResponse, RegistrationTimeoutError, VerifyResponse, WaitForApprovalOptions, buildGuidance } from './registration/index.mjs';
-export { A as AgentClient, C as ChallengeHandler, i as agent, r as recordDecision } from './index-aZHAWujT.mjs';
+export { A as AgentClient, C as ChallengeHandler, i as agent, r as recordDecision } from './index-BT_aRn-I.mjs';
 import 'express';
 import 'next/server';
 import 'jose';
@@ -30,10 +30,23 @@ declare function extractCredentials(headers: Record<string, string | string[] |
  * Check if credentials are present
  */
 declare function hasCredentials(credentials: AgentCredentials): boolean;
+/**
+ * Options for a single verify() call (as opposed to GatewayConfig, which is
+ * per-gateway). Mirrors the Java SDK's `verify(request, bypassCache)`.
+ */
+interface VerifyOptions {
+    /**
+     * Skip the cache READ for this call so the request is guaranteed to reach
+     * the backend (the result is still written to the cache if cacheable).
+     * Used by the step-up hold-and-poll retry: the re-verify after an approval
+     * must hit the server to redeem the single-use approval.
+     */
+    bypassCache?: boolean;
+}
 /**
  * Main verification function
  */
-declare function verify(config: GatewayConfig, request: VerificationRequest): Promise<VerificationResult>;
+declare function verify(config: GatewayConfig, request: VerificationRequest, options?: VerifyOptions): Promise<VerificationResult>;
 /**
  * Quick verification — checks credentials and policy in one call.
  *
@@ -50,6 +63,39 @@ declare function quickVerify(config: GatewayConfig, credentials: AgentCredential
     reason?: string;
 }>;
 
+/**
+ * Step-up hold-and-poll (3.6.0) — the synchronous half of the MFA-style gate,
+ * mirroring the Java SDK's `awaitStepUpApproval` / `pollStepUpStatus`.
+ *
+ * A verify() that comes back step_up_required carries a `stepUpApproval`
+ * handle: `{ approvalId, pollUrl, expiresAt }`. The adapter HOLDS the original
+ * request, polls the approval status, and on 'approved' re-verifies the same
+ * request once (cache-bypassed) so the backend redeems the single-use approval
+ * and returns a grant. Any other terminal outcome falls into the adapter's
+ * normal fail-closed deny path.
+ *
+ * The poll endpoint is deliberately unauthenticated (it sits above the
+ * backend router's `authenticate` middleware): the unguessable UUIDv4
+ * approvalId is the capability token, and the route is rate-limited
+ * (60/min/IP). No Authorization header is sent.
+ */
+
+/**
+ * One GET of the approval's poll endpoint. Returns the status string, or
+ * null on any error / non-2xx / unparsable body — the hold loop treats null
+ * as transient and just polls again.
+ */
+declare function pollStepUpStatus(config: GatewayConfig, approval: StepUpApprovalInfo): Promise<StepUpApprovalStatus | null>;
+/**
+ * Block until a pending step-up approval reaches a terminal state or the wait
+ * budget runs out. Returns the terminal status, or 'timeout'.
+ *
+ * Unknown non-pending statuses (a future backend state) still terminate the
+ * hold — they are returned as-is and land in the deny path, which is the safe
+ * reading of "not approved".
+ */
+declare function awaitStepUpApproval(config: GatewayConfig, approval: StepUpApprovalInfo): Promise<StepUpOutcome>;
+
 /**
  * Settlement authorization — the value-aware, FAIL-CLOSED gate a direct merchant
  * MUST call before settling a priced cart (post-#447 partner round, finding #1).
@@ -156,4 +202,4 @@ declare function getCachedWellKnownUrls(apiBaseUrl: string): WellKnownAgenticCom
 
 declare const VERSION = "3.4.0";
 
-export { AccessLevel, AgentCredentials, EnhancedVerificationResult, GatewayConfig, type SettlementDecision, type SettlementRequest, StepUpApprovalInfo, VERSION, VerificationRequest, VerificationResult, type WellKnownAgenticCommerce, authorizeSettlement, clearCache, extractCredentials, getCachedWellKnownUrls, getWellKnownUrls, hasCredentials, prefetchWellKnown, quickVerify, verify };
+export { AccessLevel, AgentCredentials, EnhancedVerificationResult, GatewayConfig, type SettlementDecision, type SettlementRequest, StepUpApprovalInfo, StepUpApprovalStatus, StepUpOutcome, VERSION, VerificationRequest, VerificationResult, type VerifyOptions, type WellKnownAgenticCommerce, authorizeSettlement, awaitStepUpApproval, clearCache, extractCredentials, getCachedWellKnownUrls, getWellKnownUrls, hasCredentials, pollStepUpStatus, prefetchWellKnown, quickVerify, verify };

package/dist/index.d.ts

@@ -1,12 +1,12 @@
-import { b as AgentCredentials, G as GatewayConfig, a as AccessLevel, V as VerificationRequest, l as VerificationResult, E as EnhancedVerificationResult, A as AccessFailure, j as StepUpApprovalInfo } from './types-DrDIouvO.js';
-export { c as AstraSyncCredentials, C as CommerceShieldProps, d as CounterpartyType, e as ExpressMiddlewareOptions, f as GuidanceInfo, N as NextJsMiddlewareOptions, P as PDLSSInfo, g as ProtocolTransport, R as RouteAccessConfig, h as RuntimeChallengeResult, S as SDKOptions, i as SettlementArtifact, T as TokenGuidance, k as TrustLevel, m as VerifiedAgent, n as VerifiedDeveloper, o as VerifiedOrganization } from './types-DrDIouvO.js';
-export { A as ACCESS_LEVEL_DESCRIPTIONS, a as ACCESS_LEVEL_HIERARCHY, b as AccessCapabilities, D as DEFAULT_TRUST_THRESHOLDS, T as TRUST_LEVEL_RANGES, d as determineAccessLevel, g as getAccessLevelForScore, e as getCapabilities, f as getTrustLevel, h as hasMinimumAccess, s as sdk } from './sdk-LmvyDVpL.js';
-export { e as express } from './express-jUzLIoep.js';
-export { n as nextjs } from './nextjs-DfXOd0Au.js';
-export { aR as extractMcpCredentials, bg as setMcpMeta, b1 as transport } from './index-DEixUCu0.js';
+import { b as AgentCredentials, G as GatewayConfig, a as AccessLevel, V as VerificationRequest, n as VerificationResult, j as StepUpApprovalInfo, l as StepUpOutcome, k as StepUpApprovalStatus, E as EnhancedVerificationResult, A as AccessFailure } from './types-CKe8O0lR.js';
+export { c as AstraSyncCredentials, C as CommerceShieldProps, d as CounterpartyType, e as ExpressMiddlewareOptions, f as GuidanceInfo, N as NextJsMiddlewareOptions, P as PDLSSInfo, g as ProtocolTransport, R as RouteAccessConfig, h as RuntimeChallengeResult, S as SDKOptions, i as SettlementArtifact, T as TokenGuidance, m as TrustLevel, o as VerifiedAgent, p as VerifiedDeveloper, q as VerifiedOrganization } from './types-CKe8O0lR.js';
+export { A as ACCESS_LEVEL_DESCRIPTIONS, a as ACCESS_LEVEL_HIERARCHY, b as AccessCapabilities, D as DEFAULT_TRUST_THRESHOLDS, T as TRUST_LEVEL_RANGES, d as determineAccessLevel, g as getAccessLevelForScore, e as getCapabilities, f as getTrustLevel, h as hasMinimumAccess, s as sdk } from './sdk-CAcHgB5x.js';
+export { e as express } from './express-DQhDzNAt.js';
+export { n as nextjs } from './nextjs-DPj7ZNlq.js';
+export { aR as extractMcpCredentials, bg as setMcpMeta, b1 as transport } from './index-rftma0ln.js';
 export { McpMiddlewareOptions, ToolGateConfig, createMcpMiddleware } from './adapters/mcp.js';
 export { AgentProtocol, AgentRecord, AstraSync, AstraSyncConfig, AstraSyncError, AuthenticationError, BuildGuidanceParams, FrameworkConfig, GuidanceEnvelope, HealthResponse, KYDRequiredError, ModelConfig, PDLSSConfig, PDLSSDuration, PDLSSLimits, PDLSSPurpose, PDLSSScope, PDLSSSelfInstantiation, PendingRegistrationResponse, PollRegistrationResult, RegisterOptions, RegisterResult, RegistrationDeniedError, RegistrationExpiredError, RegistrationResponse, RegistrationTimeoutError, VerifyResponse, WaitForApprovalOptions, buildGuidance } from './registration/index.js';
-export { A as AgentClient, C as ChallengeHandler, i as agent, r as recordDecision } from './index-DlCnmpJH.js';
+export { A as AgentClient, C as ChallengeHandler, i as agent, r as recordDecision } from './index-D8-dvUFA.js';
 import 'express';
 import 'next/server';
 import 'jose';
@@ -30,10 +30,23 @@ declare function extractCredentials(headers: Record<string, string | string[] |
  * Check if credentials are present
  */
 declare function hasCredentials(credentials: AgentCredentials): boolean;
+/**
+ * Options for a single verify() call (as opposed to GatewayConfig, which is
+ * per-gateway). Mirrors the Java SDK's `verify(request, bypassCache)`.
+ */
+interface VerifyOptions {
+    /**
+     * Skip the cache READ for this call so the request is guaranteed to reach
+     * the backend (the result is still written to the cache if cacheable).
+     * Used by the step-up hold-and-poll retry: the re-verify after an approval
+     * must hit the server to redeem the single-use approval.
+     */
+    bypassCache?: boolean;
+}
 /**
  * Main verification function
  */
-declare function verify(config: GatewayConfig, request: VerificationRequest): Promise<VerificationResult>;
+declare function verify(config: GatewayConfig, request: VerificationRequest, options?: VerifyOptions): Promise<VerificationResult>;
 /**
  * Quick verification — checks credentials and policy in one call.
  *
@@ -50,6 +63,39 @@ declare function quickVerify(config: GatewayConfig, credentials: AgentCredential
     reason?: string;
 }>;
 
+/**
+ * Step-up hold-and-poll (3.6.0) — the synchronous half of the MFA-style gate,
+ * mirroring the Java SDK's `awaitStepUpApproval` / `pollStepUpStatus`.
+ *
+ * A verify() that comes back step_up_required carries a `stepUpApproval`
+ * handle: `{ approvalId, pollUrl, expiresAt }`. The adapter HOLDS the original
+ * request, polls the approval status, and on 'approved' re-verifies the same
+ * request once (cache-bypassed) so the backend redeems the single-use approval
+ * and returns a grant. Any other terminal outcome falls into the adapter's
+ * normal fail-closed deny path.
+ *
+ * The poll endpoint is deliberately unauthenticated (it sits above the
+ * backend router's `authenticate` middleware): the unguessable UUIDv4
+ * approvalId is the capability token, and the route is rate-limited
+ * (60/min/IP). No Authorization header is sent.
+ */
+
+/**
+ * One GET of the approval's poll endpoint. Returns the status string, or
+ * null on any error / non-2xx / unparsable body — the hold loop treats null
+ * as transient and just polls again.
+ */
+declare function pollStepUpStatus(config: GatewayConfig, approval: StepUpApprovalInfo): Promise<StepUpApprovalStatus | null>;
+/**
+ * Block until a pending step-up approval reaches a terminal state or the wait
+ * budget runs out. Returns the terminal status, or 'timeout'.
+ *
+ * Unknown non-pending statuses (a future backend state) still terminate the
+ * hold — they are returned as-is and land in the deny path, which is the safe
+ * reading of "not approved".
+ */
+declare function awaitStepUpApproval(config: GatewayConfig, approval: StepUpApprovalInfo): Promise<StepUpOutcome>;
+
 /**
  * Settlement authorization — the value-aware, FAIL-CLOSED gate a direct merchant
  * MUST call before settling a priced cart (post-#447 partner round, finding #1).
@@ -156,4 +202,4 @@ declare function getCachedWellKnownUrls(apiBaseUrl: string): WellKnownAgenticCom
 
 declare const VERSION = "3.4.0";
 
-export { AccessLevel, AgentCredentials, EnhancedVerificationResult, GatewayConfig, type SettlementDecision, type SettlementRequest, StepUpApprovalInfo, VERSION, VerificationRequest, VerificationResult, type WellKnownAgenticCommerce, authorizeSettlement, clearCache, extractCredentials, getCachedWellKnownUrls, getWellKnownUrls, hasCredentials, prefetchWellKnown, quickVerify, verify };
+export { AccessLevel, AgentCredentials, EnhancedVerificationResult, GatewayConfig, type SettlementDecision, type SettlementRequest, StepUpApprovalInfo, StepUpApprovalStatus, StepUpOutcome, VERSION, VerificationRequest, VerificationResult, type VerifyOptions, type WellKnownAgenticCommerce, authorizeSettlement, awaitStepUpApproval, clearCache, extractCredentials, getCachedWellKnownUrls, getWellKnownUrls, hasCredentials, pollStepUpStatus, prefetchWellKnown, quickVerify, verify };

package/dist/index.js

@@ -46,6 +46,7 @@ __export(src_exports, {
   VERSION: () => VERSION,
   agent: () => agent_exports,
   authorizeSettlement: () => authorizeSettlement,
+  awaitStepUpApproval: () => awaitStepUpApproval,
   buildGuidance: () => buildGuidance,
   clearCache: () => clearCache,
   createMcpMiddleware: () => createMcpMiddleware,
@@ -61,6 +62,7 @@ __export(src_exports, {
   hasCredentials: () => hasCredentials,
   hasMinimumAccess: () => hasMinimumAccess,
   nextjs: () => nextjs_exports,
+  pollStepUpStatus: () => pollStepUpStatus,
   prefetchWellKnown: () => prefetchWellKnown,
   quickVerify: () => quickVerify,
   recordDecision: () => recordDecision2,
@@ -193,7 +195,7 @@ function getCapabilities(accessLevel) {
 }
 
 // src/version.ts
-var SDK_VERSION = "3.5.0";
+var SDK_VERSION = "3.7.0";
 
 // src/well-known.ts
 var CACHE_TTL_MS = 60 * 60 * 1e3;
@@ -263,10 +265,10 @@ var DEFAULT_CONFIG = {
   // through (`hasMinimumAccess('guidance', 'guidance') === true`).
   defaultAccessLevel: "none",
   // minTrustScore + minTrustScoreForFull deprecated in v2.3.0 — server decides.
-  // Round-18.5 F4: cacheTtl deliberately unset. When undefined, cacheResult
-  // applies the split default (60s autonomous / 300s step-up). When the
-  // caller sets cacheTtl explicitly, that value is honoured uniformly.
-  // Set cacheTtl: 0 to disable caching entirely.
+  // cacheTtl deliberately unset. When undefined, cacheResult applies the 60s
+  // default; the caller's explicit value is honoured for cacheable results.
+  // Denials and step-up escalations are NEVER cached (3.6.0) regardless of
+  // cacheTtl. Set cacheTtl: 0 to disable caching entirely.
   debug: false
 };
 var initCheckPerformed = false;
@@ -353,10 +355,9 @@ function getCachedResult(request, counterpartyId) {
   }
   return null;
 }
-var DEFAULT_AUTONOMOUS_TTL_SECONDS = 60;
-var DEFAULT_STEP_UP_TTL_SECONDS = 300;
+var DEFAULT_CACHE_TTL_SECONDS = 60;
 function cacheResult(request, result, configuredTtl, counterpartyId) {
-  const ttlSeconds = configuredTtl && configuredTtl > 0 ? configuredTtl : result.requiresStepUp ? DEFAULT_STEP_UP_TTL_SECONDS : DEFAULT_AUTONOMOUS_TTL_SECONDS;
+  const ttlSeconds = configuredTtl && configuredTtl > 0 ? configuredTtl : DEFAULT_CACHE_TTL_SECONDS;
   const key = getCacheKey(request, counterpartyId);
   verificationCache.set(key, {
     result,
@@ -538,7 +539,7 @@ async function callVerifyAccessAPI(config, request) {
     };
   }
 }
-async function verify(config, request) {
+async function verify(config, request, options) {
   const mergedConfig = { ...DEFAULT_CONFIG, ...config };
   const urls = mergedConfig.apiBaseUrl ? getCachedWellKnownUrls(mergedConfig.apiBaseUrl) : void 0;
   if (!initCheckPerformed && !mergedConfig.disableInitChecks && mergedConfig.apiBaseUrl) {
@@ -554,7 +555,7 @@ async function verify(config, request) {
       "[VerificationGateway] minTrustScore / minTrustScoreForFull are deprecated in v2.3.0 and have no effect. Server is now the single source of truth for access-level decisions (the SDK reads access.accessLevel from the verify-access response). To gate access to an endpoint, configure the endpoint's trust_score_requirement server-side."
     );
   }
-  if (mergedConfig.cacheTtl !== 0) {
+  if (mergedConfig.cacheTtl !== 0 && !options?.bypassCache) {
     const cached = getCachedResult(request, mergedConfig.counterpartyId);
     if (cached) {
       if (mergedConfig.debug) {
@@ -574,6 +575,8 @@ async function verify(config, request) {
     console.log("[VerificationGateway] Calling verify-access API");
   }
   const apiResponse = await callVerifyAccessAPI(mergedConfig, enrichedRequest);
+  const rawServerDenialReasons = apiResponse.denialReasons;
+  const serverDenialReasons = Array.isArray(rawServerDenialReasons) && rawServerDenialReasons.length > 0 ? rawServerDenialReasons : void 0;
   if (!apiResponse.success) {
     return createGuidanceResponse(mergedConfig, apiResponse.error, {
       source: "api_error",
@@ -595,7 +598,10 @@ async function verify(config, request) {
       // ALSO short-circuit on `!identityVerified || !policyAllowed` before
       // the gate check — belt-and-braces.
       accessLevel: "none",
-      denialReasons: aggregatedFailures && aggregatedFailures.length > 0 ? aggregatedFailures.map((f) => f.message) : apiResponse.access?.reason ? [apiResponse.access.reason] : ["Access denied"],
+      // 3.6.0: the server now emits top-level denialReasons on every deny
+      // path — prefer it verbatim; the failure-message reconstruction remains
+      // as the fallback for older backends.
+      denialReasons: serverDenialReasons ?? (aggregatedFailures && aggregatedFailures.length > 0 ? aggregatedFailures.map((f) => f.message) : apiResponse.access?.reason ? [apiResponse.access.reason] : ["Access denied"]),
       failures: aggregatedFailures,
       requiresStepUp: apiResponse.access?.requiresStepUp,
       requiresApproval: apiResponse.access?.requiresApproval,
@@ -672,9 +678,7 @@ async function verify(config, request) {
   if (result.recommendation === "deny") {
     result.policyAllowed = false;
     result.accessLevel = "none";
-    result.denialReasons = result.recommendationReasons || [
-      "Access denied by AstraSync recommendation"
-    ];
+    result.denialReasons = serverDenialReasons ?? result.recommendationReasons ?? ["Access denied by AstraSync recommendation"];
     result.guidance = result.runtimeChallenge ? {
       message: `Verification failed: ${result.runtimeChallenge.reason || "runtime challenge failed"}`,
       registrationUrl: urls?.registrationUrl ?? "",
@@ -686,9 +690,10 @@ async function verify(config, request) {
     };
   } else if (result.recommendation === "step_up_required") {
     result.requiresStepUp = true;
-    result.denialReasons = result.recommendationReasons || ["Step-up verification required"];
+    result.denialReasons = serverDenialReasons ?? result.recommendationReasons ?? ["Step-up verification required"];
   }
-  if (mergedConfig.cacheTtl !== 0 && result.recommendation !== "deny") {
+  const escalates = result.requiresStepUp === true || result.requiresApproval === true || result.recommendation === "step_up_required";
+  if (mergedConfig.cacheTtl !== 0 && result.recommendation !== "deny" && !escalates) {
     cacheResult(request, result, mergedConfig.cacheTtl, mergedConfig.counterpartyId);
   }
   return result;
@@ -747,6 +752,64 @@ async function quickVerify(config, credentials) {
   };
 }
 
+// src/adapters/stepup-poll.ts
+var DEFAULT_POLL_INTERVAL_MS = 3e3;
+var MIN_POLL_INTERVAL_MS = 250;
+var FALLBACK_MAX_WAIT_MS = 5 * 60 * 1e3;
+var EXPIRY_GRACE_MS = 5e3;
+var POLL_REQUEST_TIMEOUT_MS = 1e4;
+function resolvePollUrl(config, pollUrl) {
+  if (pollUrl.startsWith("http")) return pollUrl;
+  const origin = (config.apiBaseUrl ?? "").replace(/\/api\/?$/, "");
+  return origin + pollUrl;
+}
+async function pollStepUpStatus(config, approval) {
+  if (!approval.pollUrl) return null;
+  try {
+    const res = await fetch(resolvePollUrl(config, approval.pollUrl), {
+      method: "GET",
+      signal: AbortSignal.timeout(POLL_REQUEST_TIMEOUT_MS)
+    });
+    if (!res.ok) return null;
+    const body = await res.json();
+    const data = body?.data;
+    const status = data && typeof data === "object" ? data.status : body?.status;
+    return typeof status === "string" ? status : null;
+  } catch {
+    return null;
+  }
+}
+function resolveDeadline(config, approval) {
+  const now = Date.now();
+  const maxWait = config.stepUpMaxWaitMs ?? 0;
+  if (maxWait > 0) return now + maxWait;
+  if (approval.expiresAt) {
+    const expiry = Date.parse(approval.expiresAt);
+    if (!Number.isNaN(expiry)) return Math.max(now, expiry) + EXPIRY_GRACE_MS;
+  }
+  return now + FALLBACK_MAX_WAIT_MS;
+}
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function awaitStepUpApproval(config, approval) {
+  const deadline = resolveDeadline(config, approval);
+  const pollInterval = Math.max(
+    MIN_POLL_INTERVAL_MS,
+    config.stepUpPollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS
+  );
+  while (Date.now() < deadline) {
+    const status = await pollStepUpStatus(config, approval);
+    if (status && status !== "pending") {
+      return status;
+    }
+    const remaining = deadline - Date.now();
+    if (remaining <= 0) break;
+    await sleep(Math.min(pollInterval, remaining));
+  }
+  return "timeout";
+}
+
 // src/adapters/approval-gate.ts
 var APPROVAL_REASON = "Transaction is above the autonomous limit and requires human approval. The agent owner can approve or deny this transaction in the AstraSync dashboard.";
 function requiresHumanApproval(result) {
@@ -1093,7 +1156,10 @@ function defaultOnDenied(result, _req, res) {
       // Round-10: aggregated per-dimension detail + correlation handle.
       failures: result.failures,
       correlationId: result.correlationId,
-      stepUpApproval: result.stepUpApproval
+      stepUpApproval: result.stepUpApproval,
+      // 3.6.0: terminal outcome of an opt-in hold-and-poll wait (denied /
+      // expired / consumed / timeout). Absent when the feature is off.
+      ...result.stepUpOutcome && { stepUpOutcome: result.stepUpOutcome }
     }
   });
 }
@@ -1258,7 +1324,7 @@ function createMiddleware(options) {
           }
         }
       }
-      const result = await verify(config, {
+      const verificationRequest = {
         credentials,
         purpose,
         action: pdlssPair.action,
@@ -1278,9 +1344,21 @@ function createMiddleware(options) {
           forwardedFor: forwardedForStr,
           agentCardUrl
         }
-      });
+      };
+      let result = await verify(config, verificationRequest);
       req.agentVerification = result;
-      const sessionId = result.sessionId;
+      let sessionId = result.sessionId;
+      if (config.stepUpMaxWaitMs !== void 0 && result.identityVerified && requiresHumanApproval(result) && result.stepUpApproval?.pollUrl) {
+        const outcome = await awaitStepUpApproval(config, result.stepUpApproval);
+        res.setHeader("X-Astra-Step-Up", outcome);
+        if (outcome === "approved") {
+          result = await verify(config, verificationRequest, { bypassCache: true });
+          req.agentVerification = result;
+          sessionId = result.sessionId;
+        } else {
+          result.stepUpOutcome = outcome;
+        }
+      }
       if (!result.identityVerified || !result.policyAllowed) {
         if (shouldRecordDecisions && sessionId) {
           recordDecision(config, sessionId, "denied", result.denialReasons?.[0]).catch(() => {
@@ -1729,7 +1807,7 @@ function createMiddleware2(options) {
     }
     const forwardedFor = request.headers.get("x-forwarded-for") || void 0;
     const originalClientIp = forwardedFor?.split(",")[0]?.trim();
-    const result = await verify(config, {
+    const verificationRequest = {
       credentials,
       purpose,
       action: pdlssPair.action,
@@ -1746,7 +1824,17 @@ function createMiddleware2(options) {
         forwardedFor,
         agentCardUrl: request.headers.get("x-astrasync-agent-card") || void 0
       }
-    });
+    };
+    let result = await verify(config, verificationRequest);
+    let stepUpHoldOutcome;
+    if (config.stepUpMaxWaitMs !== void 0 && result.identityVerified && requiresHumanApproval(result) && result.stepUpApproval?.pollUrl) {
+      stepUpHoldOutcome = await awaitStepUpApproval(config, result.stepUpApproval);
+      if (stepUpHoldOutcome === "approved") {
+        result = await verify(config, verificationRequest, { bypassCache: true });
+      } else {
+        result.stepUpOutcome = stepUpHoldOutcome;
+      }
+    }
     const approvalRequired = result.identityVerified && result.policyAllowed && requiresHumanApproval(result);
     if (approvalRequired) annotateApprovalRequired(result);
     if (!result.identityVerified || !result.policyAllowed || approvalRequired) {
@@ -1761,10 +1849,17 @@ function createMiddleware2(options) {
               message: result.denialReasons?.[0] || "Access denied",
               guidance: result.guidance,
               failures: result.failures,
-              stepUpApproval: result.stepUpApproval
+              stepUpApproval: result.stepUpApproval,
+              // 3.6.0: terminal outcome of an opt-in hold-and-poll wait.
+              ...result.stepUpOutcome && { stepUpOutcome: result.stepUpOutcome }
             }
           },
-          { status: !result.identityVerified ? 401 : 403 }
+          {
+            status: !result.identityVerified ? 401 : 403,
+            ...stepUpHoldOutcome && {
+              headers: { "X-Astra-Step-Up": stepUpHoldOutcome }
+            }
+          }
         );
       }
       if (showCommerceShield) {
@@ -1783,6 +1878,9 @@ function createMiddleware2(options) {
       "X-AstraSync-Verified",
       (result.identityVerified && result.policyAllowed).toString()
     );
+    if (stepUpHoldOutcome) {
+      response.headers.set("X-Astra-Step-Up", stepUpHoldOutcome);
+    }
     response.headers.set("X-AstraSync-Identity-Verified", result.identityVerified.toString());
     response.headers.set("X-AstraSync-Policy-Allowed", result.policyAllowed.toString());
     response.headers.set("X-AstraSync-Access-Level", result.accessLevel);
@@ -4680,7 +4778,10 @@ function defaultMcpDenied(result, req, res) {
         // Round-10: aggregated per-dimension detail + correlation handle.
         failures: result.failures,
         correlationId: result.correlationId,
-        stepUpApproval: result.stepUpApproval
+        stepUpApproval: result.stepUpApproval,
+        // 3.6.0: terminal outcome of an opt-in hold-and-poll wait (denied /
+        // expired / consumed / timeout). Absent when the feature is off.
+        ...result.stepUpOutcome && { stepUpOutcome: result.stepUpOutcome }
       }
     }
   });
@@ -4821,7 +4922,7 @@ function createMcpMiddleware(options) {
       }
       const counterpartyUrl = config.counterpartyUrl || `${req.protocol}://${req.get("host")}${req.path}`;
       const shouldRecordDecisions = recordDecisions !== false;
-      const result = await verify(config, {
+      const verificationRequest = {
         credentials,
         purpose: pdlss.purpose,
         action: pdlss.action,
@@ -4839,9 +4940,21 @@ function createMcpMiddleware(options) {
           userAgent: req.headers["user-agent"],
           host: req.headers.host
         }
-      });
+      };
+      let result = await verify(config, verificationRequest);
       req.agentVerification = result;
-      const sessionId = result.sessionId;
+      let sessionId = result.sessionId;
+      if (config.stepUpMaxWaitMs !== void 0 && result.identityVerified && requiresHumanApproval(result) && result.stepUpApproval?.pollUrl) {
+        const outcome = await awaitStepUpApproval(config, result.stepUpApproval);
+        res.setHeader("X-Astra-Step-Up", outcome);
+        if (outcome === "approved") {
+          result = await verify(config, verificationRequest, { bypassCache: true });
+          req.agentVerification = result;
+          sessionId = result.sessionId;
+        } else {
+          result.stepUpOutcome = outcome;
+        }
+      }
       if (!result.identityVerified || !result.policyAllowed) {
         if (shouldRecordDecisions && sessionId) {
           recordDecision(config, sessionId, "denied", result.denialReasons?.[0]).catch(() => {
@@ -4995,7 +5108,7 @@ var RegistrationTimeoutError = class extends AstraSyncError {
 
 // src/registration/api.ts
 var DEFAULT_BASE_URL = "https://astrasync.ai";
-var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+var sleep2 = (ms) => new Promise((r) => setTimeout(r, ms));
 var AstraSync = class {
   constructor(config = {}) {
     let raw = (config.baseUrl || process.env.ASTRASYNC_API_URL || DEFAULT_BASE_URL).replace(
@@ -5157,7 +5270,7 @@ var AstraSync = class {
       if (result.state === "expired") {
         throw new RegistrationExpiredError(requestId);
       }
-      await sleep(pollIntervalMs);
+      await sleep2(pollIntervalMs);
     }
     throw new RegistrationTimeoutError(requestId);
   }
@@ -5627,6 +5740,7 @@ var VERSION = "3.4.0";
   VERSION,
   agent,
   authorizeSettlement,
+  awaitStepUpApproval,
   buildGuidance,
   clearCache,
   createMcpMiddleware,
@@ -5642,6 +5756,7 @@ var VERSION = "3.4.0";
   hasCredentials,
   hasMinimumAccess,
   nextjs,
+  pollStepUpStatus,
   prefetchWellKnown,
   quickVerify,
   recordDecision,