@astrasyncai/verification-gateway 4.2.0 → 4.3.0

package/dist/{types-r850cOt0.d.mts → types-C0zfSXMB.d.mts}

@@ -897,6 +897,19 @@ interface ExpressMiddlewareOptions extends GatewayConfig {
      * disable the beacon and its config fetch entirely.
      */
     anonymousBeacon?: boolean;
+    /**
+     * Trust a fresh `X-Astra-Verified-Hop` marker from an upstream AstraSync
+     * hop (edge gateway at authenticate/authorize depth, or an MCP outer hop)
+     * and skip the duplicate verify-access call when the marker matches the
+     * presented `X-Astra-Id` and is within the freshness window. The marker is
+     * an UNSIGNED dedupe advisory — enable only when every network path to
+     * this middleware crosses a stripping gateway or equivalent trusted
+     * boundary. Default false. No `req.agentVerification` is populated on a
+     * hop-skip (same contract as the MCP adapter).
+     */
+    trustVerifiedHop?: boolean;
+    /** Acceptable `X-Astra-Verified-Hop` age in ms (default 60 000). */
+    verifiedHopMaxAgeMs?: number;
 }
 /**
  * Next.js middleware options.
@@ -907,6 +920,15 @@ interface ExpressMiddlewareOptions extends GatewayConfig {
 interface NextJsMiddlewareOptions extends GatewayConfig {
     /** Paths to skip verification */
     skipPaths?: string[];
+    /**
+     * Trust a fresh `X-Astra-Verified-Hop` marker from an upstream AstraSync
+     * hop and skip the duplicate verify-access call — see
+     * `ExpressMiddlewareOptions.trustVerifiedHop` for the trust model.
+     * Default false.
+     */
+    trustVerifiedHop?: boolean;
+    /** Acceptable `X-Astra-Verified-Hop` age in ms (default 60 000). */
+    verifiedHopMaxAgeMs?: number;
     /** Refresh interval (ms) for the remote-fetched route policy. Default: 5 minutes. */
     routesRefreshMs?: number;
     /**

package/dist/{types-DqfPU5Bl.d.mts → types-C7Rb-w0d.d.mts}

@@ -1,4 +1,4 @@
-import { a as AccessLevel, j as CounterpartyType, T as TokenGuidance } from './types-r850cOt0.mjs';
+import { a as AccessLevel, j as CounterpartyType, T as TokenGuidance } from './types-C0zfSXMB.mjs';
 
 /**
  * AstraSync Gateway - Types for gateway modes, local evaluation, and adapter interface.

package/dist/{types-sMxBT-nM.d.ts → types-DwSfO7Sb.d.ts}

@@ -897,6 +897,19 @@ interface ExpressMiddlewareOptions extends GatewayConfig {
      * disable the beacon and its config fetch entirely.
      */
     anonymousBeacon?: boolean;
+    /**
+     * Trust a fresh `X-Astra-Verified-Hop` marker from an upstream AstraSync
+     * hop (edge gateway at authenticate/authorize depth, or an MCP outer hop)
+     * and skip the duplicate verify-access call when the marker matches the
+     * presented `X-Astra-Id` and is within the freshness window. The marker is
+     * an UNSIGNED dedupe advisory — enable only when every network path to
+     * this middleware crosses a stripping gateway or equivalent trusted
+     * boundary. Default false. No `req.agentVerification` is populated on a
+     * hop-skip (same contract as the MCP adapter).
+     */
+    trustVerifiedHop?: boolean;
+    /** Acceptable `X-Astra-Verified-Hop` age in ms (default 60 000). */
+    verifiedHopMaxAgeMs?: number;
 }
 /**
  * Next.js middleware options.
@@ -907,6 +920,15 @@ interface ExpressMiddlewareOptions extends GatewayConfig {
 interface NextJsMiddlewareOptions extends GatewayConfig {
     /** Paths to skip verification */
     skipPaths?: string[];
+    /**
+     * Trust a fresh `X-Astra-Verified-Hop` marker from an upstream AstraSync
+     * hop and skip the duplicate verify-access call — see
+     * `ExpressMiddlewareOptions.trustVerifiedHop` for the trust model.
+     * Default false.
+     */
+    trustVerifiedHop?: boolean;
+    /** Acceptable `X-Astra-Verified-Hop` age in ms (default 60 000). */
+    verifiedHopMaxAgeMs?: number;
     /** Refresh interval (ms) for the remote-fetched route policy. Default: 5 minutes. */
     routesRefreshMs?: number;
     /**

package/dist/{types-BLUx92FJ.d.ts → types-nIh3HtuA.d.ts}

@@ -1,4 +1,4 @@
-import { a as AccessLevel, j as CounterpartyType, T as TokenGuidance } from './types-sMxBT-nM.js';
+import { a as AccessLevel, j as CounterpartyType, T as TokenGuidance } from './types-DwSfO7Sb.js';
 
 /**
  * AstraSync Gateway - Types for gateway modes, local evaluation, and adapter interface.

package/dist/ui/index.d.mts

@@ -1,4 +1,4 @@
-import { V as VerificationInterstitialProps, x as VerificationResult, b as AgentCredentials, l as GuidanceInfo, v as TrustLevel } from '../types-r850cOt0.mjs';
+import { V as VerificationInterstitialProps, x as VerificationResult, b as AgentCredentials, l as GuidanceInfo, v as TrustLevel } from '../types-C0zfSXMB.mjs';
 import '../metadata-capture.mjs';
 
 /**

package/dist/ui/index.d.ts

@@ -1,4 +1,4 @@
-import { V as VerificationInterstitialProps, x as VerificationResult, b as AgentCredentials, l as GuidanceInfo, v as TrustLevel } from '../types-sMxBT-nM.js';
+import { V as VerificationInterstitialProps, x as VerificationResult, b as AgentCredentials, l as GuidanceInfo, v as TrustLevel } from '../types-DwSfO7Sb.js';
 import '../metadata-capture.js';
 
 /**

package/dist/verify.d.mts

@@ -1,4 +1,4 @@
-import { b as AgentCredentials, G as GatewayConfig, a as AccessLevel, e as AttemptReport, w as VerificationRequest, x as VerificationResult } from './types-r850cOt0.mjs';
+import { b as AgentCredentials, G as GatewayConfig, a as AccessLevel, e as AttemptReport, w as VerificationRequest, x as VerificationResult } from './types-C0zfSXMB.mjs';
 import { ObservedMetadata } from './metadata-capture.mjs';
 
 /**

package/dist/verify.d.ts

@@ -1,4 +1,4 @@
-import { b as AgentCredentials, G as GatewayConfig, a as AccessLevel, e as AttemptReport, w as VerificationRequest, x as VerificationResult } from './types-sMxBT-nM.js';
+import { b as AgentCredentials, G as GatewayConfig, a as AccessLevel, e as AttemptReport, w as VerificationRequest, x as VerificationResult } from './types-DwSfO7Sb.js';
 import { ObservedMetadata } from './metadata-capture.js';
 
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrasyncai/verification-gateway",
-  "version": "4.2.0",
+  "version": "4.3.0",
   "description": "AstraSync KYA Platform SDK — counterparty verification gateway (verify incoming requests) + agent registration (register AI agents with the KYA backend).",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -174,9 +174,7 @@
     "directory": "packages/verification-gateway"
   },
   "dependencies": {
-    "@sd-jwt/core": "^0.19.0",
-    "@sd-jwt/decode": "^0.19.0",
-    "@sd-jwt/utils": "^0.19.0",
+    "@sd-jwt/core": "^0.20.0",
     "@x402/core": "^2.10.0",
     "ajv": "^8.17.1",
     "ethers": "^6.13.0",