@astrasyncai/verification-gateway 5.10.0 → 5.12.0

package/dist/git-trigger/git-hooks.d.mts

@@ -1,4 +1,4 @@
-import { T as TokenGuidance, b as CounterpartyType } from '../types-DQrn_kei.mjs';
+import { T as TokenGuidance, b as CounterpartyType } from '../types-DlshIIR-.mjs';
 import '../metadata-capture.mjs';
 
 /**

package/dist/git-trigger/git-hooks.d.ts

@@ -1,4 +1,4 @@
-import { T as TokenGuidance, b as CounterpartyType } from '../types-CtFXmDzm.js';
+import { T as TokenGuidance, b as CounterpartyType } from '../types-C_b4QTyO.js';
 import '../metadata-capture.js';
 
 /**

package/dist/index.d.mts

@@ -645,6 +645,18 @@ interface VerificationResult {
      * on misconfig (deterministic — retrying will not help) and on real denials.
      */
     retryable?: boolean;
+    /**
+     * 5.12.0: HTTP status the verify-access backend answered with on a
+     * non-2xx (e.g. 429, 503). Lets adapters and integrators tell a platform
+     * rate limit apart from an outage. Absent on network errors / timeouts.
+     */
+    httpStatus?: number;
+    /**
+     * 5.12.0: the backend's `Retry-After`, in milliseconds, when it sent one
+     * (429 / 503). Adapters relay it on their own 503 so callers back off for
+     * as long as the platform asked.
+     */
+    retryAfterMs?: number;
     /** Whether step-up authentication is required */
     requiresStepUp?: boolean;
     /** Whether approval is required */
@@ -1009,6 +1021,12 @@ interface AttemptReport {
     agentId?: string;
     considerationSet?: ConsiderationSet;
     outcome?: AttemptOutcome;
+    /**
+     * Where a catalog view was answered from: `bridge_cache` (the AstraSync
+     * bridge's anonymous cache — no load on the merchant's site) or `merchant`
+     * (fetched fresh). Attribution only.
+     */
+    servedFrom?: 'bridge_cache' | 'merchant';
 }
 /**
  * Raw commerce-protocol artifacts as verify-access accepts them (backend
@@ -1479,9 +1497,24 @@ declare function verify(config: GatewayConfig, request: VerificationRequest, opt
  * Authenticated with the same credentials as verify(); the backend responds
  * 202 and folds the data into the attempt chain keyed by `attemptId`.
  *
- * Fire-and-forget — errors are silently swallowed, never throws.
+ * Fire-and-forget — never throws. 5.12.0: a 429/5xx is retried once
+ * (Retry-After honoured, capped at 2s) off the caller's path; a lost report
+ * is surfaced via `options.onFailure`.
  */
-declare function reportAttempt(config: GatewayConfig, report: AttemptReport): Promise<void>;
+declare function reportAttempt(config: GatewayConfig, report: AttemptReport, options?: ReportAttemptOptions): Promise<void>;
+/** 5.12.0: options for {@link reportAttempt}. */
+interface ReportAttemptOptions {
+    /**
+     * Called once when the report is finally lost (non-retryable status,
+     * network error, or the single retry failed). For counters/telemetry;
+     * exceptions it throws are swallowed.
+     */
+    onFailure?: (failure: {
+        status?: number;
+        error?: string;
+        retried: boolean;
+    }) => void;
+}
 /**
  * Fetch the per-route policy for an endpoint from the AstraSync backend.
  * v2.9.7 moved policy authority into the dashboard — the SDK no longer
@@ -1571,8 +1604,76 @@ declare function quickVerify(config: GatewayConfig, credentials: AgentCredential
     identityVerified: boolean;
     policyAllowed: boolean;
     reason?: string;
+    /**
+     * 5.12.0: verification infrastructure was unavailable (timeout / 5xx /
+     * the platform's 429) — NOT a denial. Callers should fail open on reads
+     * or answer 503 + Retry-After (`retryAfterMs`, else 30s), never 401.
+     */
+    unavailable?: true;
+    retryAfterMs?: number;
 }>;
 
+/**
+ * 5.12.0 — HTTP adapter failure posture, lifted from edge-core
+ * (`pipeline.ts` isApiErrorResult/unavailableOutcome, `enforce.ts` 503 +
+ * Retry-After + buildUnavailableBody) so the Express and Next.js adapters
+ * and `quickVerify` answer an AstraSync outage the way the edge does.
+ *
+ * The 1 Oct load test: the platform rate-limited a merchant's verify-access
+ * calls (429), the SDK mapped that to `UNAUTHORIZED` 401 and failed closed
+ * — even for anonymous catalogue reads — so the merchant was down for 11
+ * minutes. Fail posture follows success posture:
+ *
+ *   - observe routes and anonymous reads (GET/HEAD, no credentials) pass
+ *     through, stamped `X-Astra-Verification: unavailable`;
+ *   - enforced routes answer 503 + `Retry-After` (the backend's value, else
+ *     30s) + `VERIFICATION_UNAVAILABLE`. Never 401 — the caller's identity
+ *     was never evaluated.
+ *
+ * Identity status mapping (contract correction, not a break): credentials
+ * missing → 401; a presented id that is malformed or unknown → 403 with
+ * registration guidance (re-authenticating with the same id cannot help).
+ */
+
+/** Response header stamped on a fail-open pass-through during an outage. */
+declare const VERIFICATION_STATUS_HEADER = "X-Astra-Verification";
+/**
+ * A verify() result that is the SDK's typed, retryable api_error fallback —
+ * infrastructure unavailability (timeout, 5xx, 429), not a policy deny and
+ * not the deterministic merchant misconfig — or an adapter's internal-error
+ * fail-closed result.
+ */
+declare function isVerificationUnavailable(result: VerificationResult): boolean;
+/** Retry-After seconds to relay: the backend's value (≥1s), else 30. */
+declare function unavailableRetryAfterSeconds(result: VerificationResult): number;
+/** Machine-readable 503 body — same shape as edge-core's buildUnavailableBody. */
+declare function buildVerificationUnavailableBody(result: VerificationResult): {
+    success: false;
+    error: {
+        code: 'VERIFICATION_UNAVAILABLE';
+        message: string;
+        retryable: true;
+        retryAfterSeconds: number;
+        failures?: VerificationResult['failures'];
+        correlationId?: string;
+        guidance: {
+            message: string;
+        };
+    };
+};
+/** True when the deny is about a presented-but-malformed/unknown agent id. */
+declare function isRejectedIdentityClaim(result: VerificationResult): boolean;
+/**
+ * HTTP status + code for an ordinary (non-outage, non-misconfig) deny:
+ * missing identity → 401 UNAUTHORIZED; presented-but-rejected id → 403
+ * AGENT_IDENTITY_REJECTED; identity fine but policy denied → 403 with the
+ * adapter's policy code.
+ */
+declare function denyStatusFor(result: VerificationResult, policyDeniedCode: string): {
+    status: 401 | 403;
+    code: string;
+};
+
 /**
  * Step-up hold-and-poll (3.6.0) — the synchronous half of the MFA-style gate,
  * mirroring the Java SDK's `awaitStepUpApproval` / `pollStepUpStatus`.
@@ -1828,6 +1929,12 @@ declare class VerificationGatewayClient {
      * fulfil against it only once the order is settled / pending_merchant. An
      * explicit `buyerEmail` (here or on the bridge handoff body) wins over the
      * account default.
+     *
+     * 5.12.0 approval binding: pass the bridge handoff body's `attemptId` (and
+     * the same `checkoutSessionId`) so a step-up approval minted for this cart
+     * is matched to — and only to — this confirm. A held cart's approval is
+     * bound to its checkout session and exact value; a confirm for any other
+     * cart is held for its own approval.
      */
     confirmCheckout(options: {
         astraId?: string;
@@ -1839,6 +1946,8 @@ declare class VerificationGatewayClient {
         currency?: string;
         checkoutSessionId?: string;
         checkoutItems?: VerificationRequest['checkoutItems'];
+        /** 5.12.0: the `att_…` attempt-chain id from the bridge handoff body. */
+        attemptId?: string;
         /** 5.6.0: alternate receipt/delivery email (transit-only) — omit to let
          * the platform default `fulfilment.email` to the buyer's account email. */
         buyerEmail?: string;
@@ -3700,6 +3809,10 @@ interface McpMiddlewareOptions extends GatewayConfig {
      * record what WOULD be denied with `failOnError: 'closed'` so merchants
      * can grep correlationId for impact analysis during the observation
      * window. Default flips to `'closed'` in a follow-up release.
+     *
+     * 5.12.0: `'closed'` answers the retryable verification-unavailable
+     * JSON-RPC error (HTTP 503 + Retry-After, code -32003) — never an
+     * identity-shaped 401.
      */
     failOnError?: 'open' | 'closed';
 }
@@ -4832,9 +4945,106 @@ declare function detectRuntime(userAgent: string | undefined | null): string | u
  * silently (never throwing), so this is a no-op there — which is correct:
  * in a browser the page's real UA is the honest identity.
  */
-declare const SDK_USER_AGENT = "astrasync-sdk/5.10.0";
+declare const SDK_USER_AGENT = "astrasync-sdk/5.12.0";
 declare const sdkFetch: typeof fetch;
 
+interface LocalPolicy {
+    version: string;
+    name: string;
+    description?: string;
+    purposes: LocalPurposeRule[];
+    scope?: LocalScope;
+    limits?: LocalLimits;
+    riskThresholds?: LocalRiskThresholds;
+    selfInstantiation?: LocalSelfInstantiation;
+}
+interface LocalPurposeRule {
+    id: string;
+    allowed: boolean;
+    targets?: string[];
+    blockedPatterns?: string[];
+    requiresApproval?: boolean;
+}
+interface LocalScope {
+    allowedDomains?: string[];
+    blockedDomains?: string[];
+    blockedResources?: string[];
+}
+interface LocalLimits {
+    /**
+     * Autonomous Limit — a transaction value at or below this is granted without
+     * escalation. A value in the band `[autonomousThreshold, maxTransactionAmount)`
+     * requires human approval (step-up → MANUAL_REVIEW), mirroring the backend
+     * `checkWithinLimits` ladder. When omitted there is no autonomous band: every
+     * positive value below the Hard Limit is granted (legacy flat-cap behaviour).
+     */
+    autonomousThreshold?: number;
+    /**
+     * Hard Limit — a transaction value at or above this is denied outright. (Named
+     * `maxTransactionAmount` for backward compatibility with existing local policy
+     * files; it is the SDK equivalent of the backend `approvalThreshold`.)
+     */
+    maxTransactionAmount?: number;
+    maxRequestsPerHour?: number;
+    currency?: string;
+}
+interface LocalRiskThresholds {
+    autoAllow: {
+        min: number;
+        max: number;
+    };
+    requireApproval: {
+        min: number;
+        max: number;
+    };
+    autoBlock: {
+        min: number;
+        max: number;
+    };
+}
+interface LocalSelfInstantiation {
+    /** Whether sub-agent spawning is allowed */
+    allowed: boolean;
+    /** Maximum depth of sub-agent chain */
+    maxDepth?: number;
+}
+
+/**
+ * PDLSS Policy Schema Validation
+ *
+ * Validates local YAML policy files against the PDLSS schema.
+ * Ensures local policies can be uploaded to cloud without lossy transformation.
+ */
+interface ValidationError {
+    path: string;
+    message: string;
+}
+interface ValidationResult {
+    valid: boolean;
+    errors: ValidationError[];
+}
+/**
+ * Validate a parsed local policy object against the PDLSS schema.
+ */
+declare function validatePolicy(policy: unknown): ValidationResult;
+
+/**
+ * PDLSS Policy Parser
+ *
+ * Parses local YAML policy files into typed LocalPolicy objects.
+ * Validates against the PDLSS schema to ensure cloud compatibility.
+ */
+
+interface ParseResult {
+    policy: LocalPolicy | null;
+    validation: ValidationResult;
+    rawYaml?: string;
+}
+/**
+ * Parse a YAML string into a LocalPolicy.
+ */
+declare function parseYaml(yamlContent: string): ParseResult;
+
 /**
  * Single source-of-truth for the SDK's
  * package version emitted on verify-access bodies (and any future
@@ -4853,6 +5063,6 @@ declare const sdkFetch: typeof fetch;
  * is fine — bumping both in the release-ceremony commit keeps them
  * lockstep.
  */
-declare const SDK_VERSION = "5.10.0";
+declare const SDK_VERSION = "5.12.0";
 
-export { AgentClient, type AgentCredentials, type AgentProtocol, type AgentRecord, AstraSync, type AstraSyncConfig, type AstraSyncCredentials, AstraSyncError, type AttemptOutcome, type AttemptReport, AuthenticationError, type BuildGuidanceParams, CAPTURE_SCHEMA_VERSION, type CallerMetadata, ChallengeHandler, type CommerceArtifactsPayload, type CommerceContext, type CommercePipelineInput, type CommerceShieldProps, type ConsiderationItem, type ConsiderationSet, type CounterpartyType, DECLARED_SOURCE_MAX, DEFAULT_EDGE_CONFIG, type DynamicPlatformFingerprint, type EdgeConfig, type EdgeMode, type EdgePathRule, type EdgeVerificationDepth, type EnhancedVerificationResult, type ExpressMiddlewareOptions, type FetchEdgeConfigResult, type FetchEdgeConfigSuccess, type FiatSettlementBinding, type FrameworkConfig, type FulfilmentInfo, type GatewayConfig, type GuidanceEnvelope, type GuidanceInfo, type HealthResponse, KYDRequiredError, MAX_HEADERS, MAX_HEADER_VALUE_BYTES, MAX_TOTAL_BYTES, MCP_VERIFIED_HOP_HEADER, MCP_VERIFIED_HOP_MAX_AGE_MS, type McpMiddlewareOptions, type MerchantSettlementToken, type ModelConfig, type NextJsMiddlewareOptions, type ObservedMetadata, type PDLSSConfig$1 as PDLSSConfig, type PDLSSDuration, type PDLSSInfo, type PDLSSLimits, type PDLSSPurpose, type PDLSSScope, type PDLSSSelfInstantiation, PLATFORM_AGENT_SIGNATURES, type PendingRegistrationResponse, type PlatformAgentVendor, type PlatformDetectionInput, type PlatformFingerprint, type PlatformSignatureDef, type PollRegistrationResult, type ProtocolTransport, RUNTIME_SIGNATURES, type RegisterOptions, type RegisterResult, RegistrationDeniedError, RegistrationExpiredError, type RegistrationResponse, RegistrationTimeoutError, type RouteAccessConfig, type RuntimeChallengeResult, type RuntimeSignature, type SDKOptions, SDK_USER_AGENT, type SanitizeHeadersResult, type SettlementArtifact, type SettlementArtifactBinding, type SettlementArtifactBindingBase, type SettlementDecision, type SettlementOutcomeInfo, type SettlementRequest, type StablecoinSettlementBinding, type StepUpApprovalInfo, type StepUpApprovalStatus, type StepUpOutcome, TRUST_LEVEL_RANGES, type TokenGuidance, type ToolGate, type ToolGateConfig, type TrustLevel, SDK_VERSION as VERSION, type VerificationInterstitialProps, type VerificationRequest, type VerificationResult, type VerifiedAgent, type VerifiedDeveloper, type VerifiedHopMarker, type VerifiedOrganization, type VerifyOptions, type VerifyResponse, type WaitForApprovalOptions, type WellKnownAgenticCommerce, _resetEdgeConfigCache, index as agent, authorizeSettlement, awaitStepUpApproval, buildGuidance, buildSdkObservedMetadata, clearCache, createMcpMiddleware, degradeToObserve, deriveConnectionFromHeaders, detectPlatformFingerprint, detectRuntime, express, extractApiKeyFormat, extractCredentials, extractMcpCredentials, extractPlatformHeaders, fetchEdgeConfig, fetchRoutes, getCachedWellKnownUrls, getEdgeConfig, getTrustLevel, getWellKnownUrls, hasCredentials, isEdgeConfig, isVerifiedHopValidFor, matchEdgePathRule, matchPlatformSignature, nextjs, normalizeDeclaredSource, parseVerifiedHop, pollStepUpStatus, prefetchWellKnown, quickVerify, recordDecision, reportAttempt, reportUnregisteredAttempt, sanitizeHeaders, sdk, sdkFetch, serializeVerifiedHop, setMcpMeta, index$1 as transport, verify };
+export { AgentClient, type AgentCredentials, type AgentProtocol, type AgentRecord, AstraSync, type AstraSyncConfig, type AstraSyncCredentials, AstraSyncError, type AttemptOutcome, type AttemptReport, AuthenticationError, type BuildGuidanceParams, CAPTURE_SCHEMA_VERSION, type CallerMetadata, ChallengeHandler, type CommerceArtifactsPayload, type CommerceContext, type CommercePipelineInput, type CommerceShieldProps, type ConsiderationItem, type ConsiderationSet, type CounterpartyType, DECLARED_SOURCE_MAX, DEFAULT_EDGE_CONFIG, type DynamicPlatformFingerprint, type EdgeConfig, type EdgeMode, type EdgePathRule, type EdgeVerificationDepth, type EnhancedVerificationResult, type ExpressMiddlewareOptions, type FetchEdgeConfigResult, type FetchEdgeConfigSuccess, type FiatSettlementBinding, type FrameworkConfig, type FulfilmentInfo, type GatewayConfig, type GuidanceEnvelope, type GuidanceInfo, type HealthResponse, KYDRequiredError, type ParseResult as LocalPolicyParseResult, type ValidationError as LocalPolicyValidationError, type ValidationResult as LocalPolicyValidationResult, MAX_HEADERS, MAX_HEADER_VALUE_BYTES, MAX_TOTAL_BYTES, MCP_VERIFIED_HOP_HEADER, MCP_VERIFIED_HOP_MAX_AGE_MS, type McpMiddlewareOptions, type MerchantSettlementToken, type ModelConfig, type NextJsMiddlewareOptions, type ObservedMetadata, type PDLSSConfig$1 as PDLSSConfig, type PDLSSDuration, type PDLSSInfo, type PDLSSLimits, type PDLSSPurpose, type PDLSSScope, type PDLSSSelfInstantiation, PLATFORM_AGENT_SIGNATURES, type PendingRegistrationResponse, type PlatformAgentVendor, type PlatformDetectionInput, type PlatformFingerprint, type PlatformSignatureDef, type PollRegistrationResult, type ProtocolTransport, RUNTIME_SIGNATURES, type RegisterOptions, type RegisterResult, RegistrationDeniedError, RegistrationExpiredError, type RegistrationResponse, RegistrationTimeoutError, type ReportAttemptOptions, type RouteAccessConfig, type RuntimeChallengeResult, type RuntimeSignature, type SDKOptions, SDK_USER_AGENT, type SanitizeHeadersResult, type SettlementArtifact, type SettlementArtifactBinding, type SettlementArtifactBindingBase, type SettlementDecision, type SettlementOutcomeInfo, type SettlementRequest, type StablecoinSettlementBinding, type StepUpApprovalInfo, type StepUpApprovalStatus, type StepUpOutcome, TRUST_LEVEL_RANGES, type TokenGuidance, type ToolGate, type ToolGateConfig, type TrustLevel, VERIFICATION_STATUS_HEADER, SDK_VERSION as VERSION, type VerificationInterstitialProps, type VerificationRequest, type VerificationResult, type VerifiedAgent, type VerifiedDeveloper, type VerifiedHopMarker, type VerifiedOrganization, type VerifyOptions, type VerifyResponse, type WaitForApprovalOptions, type WellKnownAgenticCommerce, _resetEdgeConfigCache, index as agent, authorizeSettlement, awaitStepUpApproval, buildGuidance, buildSdkObservedMetadata, buildVerificationUnavailableBody, clearCache, createMcpMiddleware, degradeToObserve, denyStatusFor, deriveConnectionFromHeaders, detectPlatformFingerprint, detectRuntime, express, extractApiKeyFormat, extractCredentials, extractMcpCredentials, extractPlatformHeaders, fetchEdgeConfig, fetchRoutes, getCachedWellKnownUrls, getEdgeConfig, getTrustLevel, getWellKnownUrls, hasCredentials, isEdgeConfig, isRejectedIdentityClaim, isVerificationUnavailable, isVerifiedHopValidFor, matchEdgePathRule, matchPlatformSignature, nextjs, normalizeDeclaredSource, parseYaml as parseLocalPolicyYaml, parseVerifiedHop, pollStepUpStatus, prefetchWellKnown, quickVerify, recordDecision, reportAttempt, reportUnregisteredAttempt, sanitizeHeaders, sdk, sdkFetch, serializeVerifiedHop, setMcpMeta, index$1 as transport, unavailableRetryAfterSeconds, validatePolicy as validateLocalPolicy, verify };

package/dist/index.d.ts

@@ -645,6 +645,18 @@ interface VerificationResult {
      * on misconfig (deterministic — retrying will not help) and on real denials.
      */
     retryable?: boolean;
+    /**
+     * 5.12.0: HTTP status the verify-access backend answered with on a
+     * non-2xx (e.g. 429, 503). Lets adapters and integrators tell a platform
+     * rate limit apart from an outage. Absent on network errors / timeouts.
+     */
+    httpStatus?: number;
+    /**
+     * 5.12.0: the backend's `Retry-After`, in milliseconds, when it sent one
+     * (429 / 503). Adapters relay it on their own 503 so callers back off for
+     * as long as the platform asked.
+     */
+    retryAfterMs?: number;
     /** Whether step-up authentication is required */
     requiresStepUp?: boolean;
     /** Whether approval is required */
@@ -1009,6 +1021,12 @@ interface AttemptReport {
     agentId?: string;
     considerationSet?: ConsiderationSet;
     outcome?: AttemptOutcome;
+    /**
+     * Where a catalog view was answered from: `bridge_cache` (the AstraSync
+     * bridge's anonymous cache — no load on the merchant's site) or `merchant`
+     * (fetched fresh). Attribution only.
+     */
+    servedFrom?: 'bridge_cache' | 'merchant';
 }
 /**
  * Raw commerce-protocol artifacts as verify-access accepts them (backend
@@ -1479,9 +1497,24 @@ declare function verify(config: GatewayConfig, request: VerificationRequest, opt
  * Authenticated with the same credentials as verify(); the backend responds
  * 202 and folds the data into the attempt chain keyed by `attemptId`.
  *
- * Fire-and-forget — errors are silently swallowed, never throws.
+ * Fire-and-forget — never throws. 5.12.0: a 429/5xx is retried once
+ * (Retry-After honoured, capped at 2s) off the caller's path; a lost report
+ * is surfaced via `options.onFailure`.
  */
-declare function reportAttempt(config: GatewayConfig, report: AttemptReport): Promise<void>;
+declare function reportAttempt(config: GatewayConfig, report: AttemptReport, options?: ReportAttemptOptions): Promise<void>;
+/** 5.12.0: options for {@link reportAttempt}. */
+interface ReportAttemptOptions {
+    /**
+     * Called once when the report is finally lost (non-retryable status,
+     * network error, or the single retry failed). For counters/telemetry;
+     * exceptions it throws are swallowed.
+     */
+    onFailure?: (failure: {
+        status?: number;
+        error?: string;
+        retried: boolean;
+    }) => void;
+}
 /**
  * Fetch the per-route policy for an endpoint from the AstraSync backend.
  * v2.9.7 moved policy authority into the dashboard — the SDK no longer
@@ -1571,8 +1604,76 @@ declare function quickVerify(config: GatewayConfig, credentials: AgentCredential
     identityVerified: boolean;
     policyAllowed: boolean;
     reason?: string;
+    /**
+     * 5.12.0: verification infrastructure was unavailable (timeout / 5xx /
+     * the platform's 429) — NOT a denial. Callers should fail open on reads
+     * or answer 503 + Retry-After (`retryAfterMs`, else 30s), never 401.
+     */
+    unavailable?: true;
+    retryAfterMs?: number;
 }>;
 
+/**
+ * 5.12.0 — HTTP adapter failure posture, lifted from edge-core
+ * (`pipeline.ts` isApiErrorResult/unavailableOutcome, `enforce.ts` 503 +
+ * Retry-After + buildUnavailableBody) so the Express and Next.js adapters
+ * and `quickVerify` answer an AstraSync outage the way the edge does.
+ *
+ * The 1 Oct load test: the platform rate-limited a merchant's verify-access
+ * calls (429), the SDK mapped that to `UNAUTHORIZED` 401 and failed closed
+ * — even for anonymous catalogue reads — so the merchant was down for 11
+ * minutes. Fail posture follows success posture:
+ *
+ *   - observe routes and anonymous reads (GET/HEAD, no credentials) pass
+ *     through, stamped `X-Astra-Verification: unavailable`;
+ *   - enforced routes answer 503 + `Retry-After` (the backend's value, else
+ *     30s) + `VERIFICATION_UNAVAILABLE`. Never 401 — the caller's identity
+ *     was never evaluated.
+ *
+ * Identity status mapping (contract correction, not a break): credentials
+ * missing → 401; a presented id that is malformed or unknown → 403 with
+ * registration guidance (re-authenticating with the same id cannot help).
+ */
+
+/** Response header stamped on a fail-open pass-through during an outage. */
+declare const VERIFICATION_STATUS_HEADER = "X-Astra-Verification";
+/**
+ * A verify() result that is the SDK's typed, retryable api_error fallback —
+ * infrastructure unavailability (timeout, 5xx, 429), not a policy deny and
+ * not the deterministic merchant misconfig — or an adapter's internal-error
+ * fail-closed result.
+ */
+declare function isVerificationUnavailable(result: VerificationResult): boolean;
+/** Retry-After seconds to relay: the backend's value (≥1s), else 30. */
+declare function unavailableRetryAfterSeconds(result: VerificationResult): number;
+/** Machine-readable 503 body — same shape as edge-core's buildUnavailableBody. */
+declare function buildVerificationUnavailableBody(result: VerificationResult): {
+    success: false;
+    error: {
+        code: 'VERIFICATION_UNAVAILABLE';
+        message: string;
+        retryable: true;
+        retryAfterSeconds: number;
+        failures?: VerificationResult['failures'];
+        correlationId?: string;
+        guidance: {
+            message: string;
+        };
+    };
+};
+/** True when the deny is about a presented-but-malformed/unknown agent id. */
+declare function isRejectedIdentityClaim(result: VerificationResult): boolean;
+/**
+ * HTTP status + code for an ordinary (non-outage, non-misconfig) deny:
+ * missing identity → 401 UNAUTHORIZED; presented-but-rejected id → 403
+ * AGENT_IDENTITY_REJECTED; identity fine but policy denied → 403 with the
+ * adapter's policy code.
+ */
+declare function denyStatusFor(result: VerificationResult, policyDeniedCode: string): {
+    status: 401 | 403;
+    code: string;
+};
+
 /**
  * Step-up hold-and-poll (3.6.0) — the synchronous half of the MFA-style gate,
  * mirroring the Java SDK's `awaitStepUpApproval` / `pollStepUpStatus`.
@@ -1828,6 +1929,12 @@ declare class VerificationGatewayClient {
      * fulfil against it only once the order is settled / pending_merchant. An
      * explicit `buyerEmail` (here or on the bridge handoff body) wins over the
      * account default.
+     *
+     * 5.12.0 approval binding: pass the bridge handoff body's `attemptId` (and
+     * the same `checkoutSessionId`) so a step-up approval minted for this cart
+     * is matched to — and only to — this confirm. A held cart's approval is
+     * bound to its checkout session and exact value; a confirm for any other
+     * cart is held for its own approval.
      */
     confirmCheckout(options: {
         astraId?: string;
@@ -1839,6 +1946,8 @@ declare class VerificationGatewayClient {
         currency?: string;
         checkoutSessionId?: string;
         checkoutItems?: VerificationRequest['checkoutItems'];
+        /** 5.12.0: the `att_…` attempt-chain id from the bridge handoff body. */
+        attemptId?: string;
         /** 5.6.0: alternate receipt/delivery email (transit-only) — omit to let
          * the platform default `fulfilment.email` to the buyer's account email. */
         buyerEmail?: string;
@@ -3700,6 +3809,10 @@ interface McpMiddlewareOptions extends GatewayConfig {
      * record what WOULD be denied with `failOnError: 'closed'` so merchants
      * can grep correlationId for impact analysis during the observation
      * window. Default flips to `'closed'` in a follow-up release.
+     *
+     * 5.12.0: `'closed'` answers the retryable verification-unavailable
+     * JSON-RPC error (HTTP 503 + Retry-After, code -32003) — never an
+     * identity-shaped 401.
      */
     failOnError?: 'open' | 'closed';
 }
@@ -4832,9 +4945,106 @@ declare function detectRuntime(userAgent: string | undefined | null): string | u
  * silently (never throwing), so this is a no-op there — which is correct:
  * in a browser the page's real UA is the honest identity.
  */
-declare const SDK_USER_AGENT = "astrasync-sdk/5.10.0";
+declare const SDK_USER_AGENT = "astrasync-sdk/5.12.0";
 declare const sdkFetch: typeof fetch;
 
+interface LocalPolicy {
+    version: string;
+    name: string;
+    description?: string;
+    purposes: LocalPurposeRule[];
+    scope?: LocalScope;
+    limits?: LocalLimits;
+    riskThresholds?: LocalRiskThresholds;
+    selfInstantiation?: LocalSelfInstantiation;
+}
+interface LocalPurposeRule {
+    id: string;
+    allowed: boolean;
+    targets?: string[];
+    blockedPatterns?: string[];
+    requiresApproval?: boolean;
+}
+interface LocalScope {
+    allowedDomains?: string[];
+    blockedDomains?: string[];
+    blockedResources?: string[];
+}
+interface LocalLimits {
+    /**
+     * Autonomous Limit — a transaction value at or below this is granted without
+     * escalation. A value in the band `[autonomousThreshold, maxTransactionAmount)`
+     * requires human approval (step-up → MANUAL_REVIEW), mirroring the backend
+     * `checkWithinLimits` ladder. When omitted there is no autonomous band: every
+     * positive value below the Hard Limit is granted (legacy flat-cap behaviour).
+     */
+    autonomousThreshold?: number;
+    /**
+     * Hard Limit — a transaction value at or above this is denied outright. (Named
+     * `maxTransactionAmount` for backward compatibility with existing local policy
+     * files; it is the SDK equivalent of the backend `approvalThreshold`.)
+     */
+    maxTransactionAmount?: number;
+    maxRequestsPerHour?: number;
+    currency?: string;
+}
+interface LocalRiskThresholds {
+    autoAllow: {
+        min: number;
+        max: number;
+    };
+    requireApproval: {
+        min: number;
+        max: number;
+    };
+    autoBlock: {
+        min: number;
+        max: number;
+    };
+}
+interface LocalSelfInstantiation {
+    /** Whether sub-agent spawning is allowed */
+    allowed: boolean;
+    /** Maximum depth of sub-agent chain */
+    maxDepth?: number;
+}
+
+/**
+ * PDLSS Policy Schema Validation
+ *
+ * Validates local YAML policy files against the PDLSS schema.
+ * Ensures local policies can be uploaded to cloud without lossy transformation.
+ */
+interface ValidationError {
+    path: string;
+    message: string;
+}
+interface ValidationResult {
+    valid: boolean;
+    errors: ValidationError[];
+}
+/**
+ * Validate a parsed local policy object against the PDLSS schema.
+ */
+declare function validatePolicy(policy: unknown): ValidationResult;
+
+/**
+ * PDLSS Policy Parser
+ *
+ * Parses local YAML policy files into typed LocalPolicy objects.
+ * Validates against the PDLSS schema to ensure cloud compatibility.
+ */
+
+interface ParseResult {
+    policy: LocalPolicy | null;
+    validation: ValidationResult;
+    rawYaml?: string;
+}
+/**
+ * Parse a YAML string into a LocalPolicy.
+ */
+declare function parseYaml(yamlContent: string): ParseResult;
+
 /**
  * Single source-of-truth for the SDK's
  * package version emitted on verify-access bodies (and any future
@@ -4853,6 +5063,6 @@ declare const sdkFetch: typeof fetch;
  * is fine — bumping both in the release-ceremony commit keeps them
  * lockstep.
  */
-declare const SDK_VERSION = "5.10.0";
+declare const SDK_VERSION = "5.12.0";
 
-export { AgentClient, type AgentCredentials, type AgentProtocol, type AgentRecord, AstraSync, type AstraSyncConfig, type AstraSyncCredentials, AstraSyncError, type AttemptOutcome, type AttemptReport, AuthenticationError, type BuildGuidanceParams, CAPTURE_SCHEMA_VERSION, type CallerMetadata, ChallengeHandler, type CommerceArtifactsPayload, type CommerceContext, type CommercePipelineInput, type CommerceShieldProps, type ConsiderationItem, type ConsiderationSet, type CounterpartyType, DECLARED_SOURCE_MAX, DEFAULT_EDGE_CONFIG, type DynamicPlatformFingerprint, type EdgeConfig, type EdgeMode, type EdgePathRule, type EdgeVerificationDepth, type EnhancedVerificationResult, type ExpressMiddlewareOptions, type FetchEdgeConfigResult, type FetchEdgeConfigSuccess, type FiatSettlementBinding, type FrameworkConfig, type FulfilmentInfo, type GatewayConfig, type GuidanceEnvelope, type GuidanceInfo, type HealthResponse, KYDRequiredError, MAX_HEADERS, MAX_HEADER_VALUE_BYTES, MAX_TOTAL_BYTES, MCP_VERIFIED_HOP_HEADER, MCP_VERIFIED_HOP_MAX_AGE_MS, type McpMiddlewareOptions, type MerchantSettlementToken, type ModelConfig, type NextJsMiddlewareOptions, type ObservedMetadata, type PDLSSConfig$1 as PDLSSConfig, type PDLSSDuration, type PDLSSInfo, type PDLSSLimits, type PDLSSPurpose, type PDLSSScope, type PDLSSSelfInstantiation, PLATFORM_AGENT_SIGNATURES, type PendingRegistrationResponse, type PlatformAgentVendor, type PlatformDetectionInput, type PlatformFingerprint, type PlatformSignatureDef, type PollRegistrationResult, type ProtocolTransport, RUNTIME_SIGNATURES, type RegisterOptions, type RegisterResult, RegistrationDeniedError, RegistrationExpiredError, type RegistrationResponse, RegistrationTimeoutError, type RouteAccessConfig, type RuntimeChallengeResult, type RuntimeSignature, type SDKOptions, SDK_USER_AGENT, type SanitizeHeadersResult, type SettlementArtifact, type SettlementArtifactBinding, type SettlementArtifactBindingBase, type SettlementDecision, type SettlementOutcomeInfo, type SettlementRequest, type StablecoinSettlementBinding, type StepUpApprovalInfo, type StepUpApprovalStatus, type StepUpOutcome, TRUST_LEVEL_RANGES, type TokenGuidance, type ToolGate, type ToolGateConfig, type TrustLevel, SDK_VERSION as VERSION, type VerificationInterstitialProps, type VerificationRequest, type VerificationResult, type VerifiedAgent, type VerifiedDeveloper, type VerifiedHopMarker, type VerifiedOrganization, type VerifyOptions, type VerifyResponse, type WaitForApprovalOptions, type WellKnownAgenticCommerce, _resetEdgeConfigCache, index as agent, authorizeSettlement, awaitStepUpApproval, buildGuidance, buildSdkObservedMetadata, clearCache, createMcpMiddleware, degradeToObserve, deriveConnectionFromHeaders, detectPlatformFingerprint, detectRuntime, express, extractApiKeyFormat, extractCredentials, extractMcpCredentials, extractPlatformHeaders, fetchEdgeConfig, fetchRoutes, getCachedWellKnownUrls, getEdgeConfig, getTrustLevel, getWellKnownUrls, hasCredentials, isEdgeConfig, isVerifiedHopValidFor, matchEdgePathRule, matchPlatformSignature, nextjs, normalizeDeclaredSource, parseVerifiedHop, pollStepUpStatus, prefetchWellKnown, quickVerify, recordDecision, reportAttempt, reportUnregisteredAttempt, sanitizeHeaders, sdk, sdkFetch, serializeVerifiedHop, setMcpMeta, index$1 as transport, verify };
+export { AgentClient, type AgentCredentials, type AgentProtocol, type AgentRecord, AstraSync, type AstraSyncConfig, type AstraSyncCredentials, AstraSyncError, type AttemptOutcome, type AttemptReport, AuthenticationError, type BuildGuidanceParams, CAPTURE_SCHEMA_VERSION, type CallerMetadata, ChallengeHandler, type CommerceArtifactsPayload, type CommerceContext, type CommercePipelineInput, type CommerceShieldProps, type ConsiderationItem, type ConsiderationSet, type CounterpartyType, DECLARED_SOURCE_MAX, DEFAULT_EDGE_CONFIG, type DynamicPlatformFingerprint, type EdgeConfig, type EdgeMode, type EdgePathRule, type EdgeVerificationDepth, type EnhancedVerificationResult, type ExpressMiddlewareOptions, type FetchEdgeConfigResult, type FetchEdgeConfigSuccess, type FiatSettlementBinding, type FrameworkConfig, type FulfilmentInfo, type GatewayConfig, type GuidanceEnvelope, type GuidanceInfo, type HealthResponse, KYDRequiredError, type ParseResult as LocalPolicyParseResult, type ValidationError as LocalPolicyValidationError, type ValidationResult as LocalPolicyValidationResult, MAX_HEADERS, MAX_HEADER_VALUE_BYTES, MAX_TOTAL_BYTES, MCP_VERIFIED_HOP_HEADER, MCP_VERIFIED_HOP_MAX_AGE_MS, type McpMiddlewareOptions, type MerchantSettlementToken, type ModelConfig, type NextJsMiddlewareOptions, type ObservedMetadata, type PDLSSConfig$1 as PDLSSConfig, type PDLSSDuration, type PDLSSInfo, type PDLSSLimits, type PDLSSPurpose, type PDLSSScope, type PDLSSSelfInstantiation, PLATFORM_AGENT_SIGNATURES, type PendingRegistrationResponse, type PlatformAgentVendor, type PlatformDetectionInput, type PlatformFingerprint, type PlatformSignatureDef, type PollRegistrationResult, type ProtocolTransport, RUNTIME_SIGNATURES, type RegisterOptions, type RegisterResult, RegistrationDeniedError, RegistrationExpiredError, type RegistrationResponse, RegistrationTimeoutError, type ReportAttemptOptions, type RouteAccessConfig, type RuntimeChallengeResult, type RuntimeSignature, type SDKOptions, SDK_USER_AGENT, type SanitizeHeadersResult, type SettlementArtifact, type SettlementArtifactBinding, type SettlementArtifactBindingBase, type SettlementDecision, type SettlementOutcomeInfo, type SettlementRequest, type StablecoinSettlementBinding, type StepUpApprovalInfo, type StepUpApprovalStatus, type StepUpOutcome, TRUST_LEVEL_RANGES, type TokenGuidance, type ToolGate, type ToolGateConfig, type TrustLevel, VERIFICATION_STATUS_HEADER, SDK_VERSION as VERSION, type VerificationInterstitialProps, type VerificationRequest, type VerificationResult, type VerifiedAgent, type VerifiedDeveloper, type VerifiedHopMarker, type VerifiedOrganization, type VerifyOptions, type VerifyResponse, type WaitForApprovalOptions, type WellKnownAgenticCommerce, _resetEdgeConfigCache, index as agent, authorizeSettlement, awaitStepUpApproval, buildGuidance, buildSdkObservedMetadata, buildVerificationUnavailableBody, clearCache, createMcpMiddleware, degradeToObserve, denyStatusFor, deriveConnectionFromHeaders, detectPlatformFingerprint, detectRuntime, express, extractApiKeyFormat, extractCredentials, extractMcpCredentials, extractPlatformHeaders, fetchEdgeConfig, fetchRoutes, getCachedWellKnownUrls, getEdgeConfig, getTrustLevel, getWellKnownUrls, hasCredentials, isEdgeConfig, isRejectedIdentityClaim, isVerificationUnavailable, isVerifiedHopValidFor, matchEdgePathRule, matchPlatformSignature, nextjs, normalizeDeclaredSource, parseYaml as parseLocalPolicyYaml, parseVerifiedHop, pollStepUpStatus, prefetchWellKnown, quickVerify, recordDecision, reportAttempt, reportUnregisteredAttempt, sanitizeHeaders, sdk, sdkFetch, serializeVerifiedHop, setMcpMeta, index$1 as transport, unavailableRetryAfterSeconds, validatePolicy as validateLocalPolicy, verify };