@astrasyncai/verification-gateway 5.14.0 → 5.15.0

package/dist/{types-C_b4QTyO.d.ts → types-DtJjlW4O.d.ts}

@@ -169,6 +169,30 @@ interface VerifiedAgent {
     blockchainAnchored: boolean;
     /** Agent status */
     status: 'active' | 'inactive' | 'suspended' | 'migrating' | 'terminated' | 'retired';
+    /**
+     * 5.15.0: the protocol identities the agent declared at registration (its
+     * shared signing key, UCP profile, Web Bot Auth key directory, x402 wallet,
+     * network agent ids). Bind incoming protocol requests to these — e.g.
+     * {@link checkUcpAgentBinding} rejects a `UCP-Agent` profile that isn't the
+     * agent's. Identities AstraSync failed to verify are never included.
+     */
+    protocolIdentities?: AgentProtocolIdentities;
+}
+interface AgentProtocolIdentities {
+    /** Shared signing key (AP2 / VI `cnf`, RFC 9421). `thumbprint` = RFC 7638. */
+    agentKey?: {
+        kid: string | null;
+        thumbprint: string | null;
+        jwk: Record<string, unknown>;
+    };
+    ucpProfile?: string;
+    webBotAuthKeyDirectory?: string;
+    a2aCard?: string;
+    x402Wallet?: string;
+    visaAgentId?: string;
+    mastercardAgentId?: string;
+    /** Protocols whose identity AstraSync checked successfully. */
+    verified: string[];
 }
 /**
  * Verified developer (KYD) information
@@ -253,6 +277,13 @@ interface GuidanceInfo {
 interface StepUpApprovalInfo {
     approvalId: string;
     pollUrl: string;
+    /**
+     * 5.15.0: absolute https URL of the buyer-facing approval page. A UCP
+     * merchant returns it as `continue_url` with status `requires_escalation`;
+     * after the buyer approves, complete the same checkout again and the
+     * approval is redeemed once. Absent from backends older than 27.9.
+     */
+    approvalUrl?: string;
     expiresAt: string;
 }
 /**
@@ -428,19 +459,19 @@ interface VerificationResult {
     /** Settlement voucher (present on clean merchant-mediated grants with a verified wallet). */
     settlement?: SettlementArtifact;
     /**
-     * 5.3.0 (astra-pay): sanitized first-party settlement outcome. Present
-     * INSTEAD of `settlement` when the counterparty is an AstraSync-operated
-     * storefront and the request carried `commercePhase: 'confirm'` — the
-     * backend redeemed the voucher and executed the charge server-side
-     * (charge-at-redeem), so there is no artifact to deliver, only the result.
-     * `no_instrument` = policy passed but the owner has no chargeable
-     * instrument on file (steer the user to add one via onboarding).
+     * Sanitized order outcome for a purchase leg. 5.14.1: AstraSync never
+     * charges — every purchase grant records an order and hands YOU the
+     * settlement artifact, so the status is `pending_merchant` (with
+     * `orderId`): charge the `settlementToken` (card, first-party tenant) or
+     * redeem the `settlement` voucher (stablecoin), then `reportSettlement()`.
+     * `no_instrument` = policy passed but the owner has nothing usable on file
+     * (steer the user to add one via onboarding).
      */
     settlementOutcome?: SettlementOutcomeInfo;
     /**
-     * 5.5.0 (astra-pay): interim merchant self-settlement token. Present ONLY
-     * for firstParty merchants opted into settlement_mode='self_settle' on the
-     * confirm leg — YOUR server charges with this material on the shared Stripe
+     * Card settlement token. Present on a card purchase at a first-party
+     * storefront (our Stripe tenant) — 5.14.1: always, there is no charge-here
+     * mode. YOUR server charges with this material on the shared Stripe
      * account and reports the outcome via `client.reportSettlement()`.
      * MERCHANT-ONLY lane: never expose it to the agent plane, never log it,
      * never echo it back over the bridge handoff (the bridge strips it
@@ -461,6 +492,29 @@ interface VerificationResult {
      * confirm handoff body wins over `fulfilment.email` (the platform default).
      */
     fulfilment?: FulfilmentInfo;
+    /**
+     * 5.15.0: AP2 v0.2 mandates AstraSync issued for this purchase (merchant
+     * lane — never forward to the agent). `mode: 'closed'` on a purchase leg
+     * (Checkout + Payment, bound to your `checkoutJwt`), `'open'` on a quote
+     * leg for an agent with a registered key. Verify with `verifyAp2Mandate()`
+     * against AstraSync's JWKS (`kid`).
+     */
+    mandates?: AstraSyncMandates;
+    /**
+     * 5.15.0: a KYAPay `kya+jwt` identity token AstraSync issued for this agent
+     * at your endpoint (commerce legs; merchant lane). `hid.email` is where to
+     * send the receipt. Verify with `verifyKyaPayTokens()` (issuer = the
+     * AstraSync origin, audience = your ASTRAE-id).
+     */
+    kyaToken?: string;
+    /**
+     * 5.15.0: A-Comm Evidence Protocol (AEP v1.0.3-rc.2) artifact payloads for
+     * your AEP chain — present when your endpoint lists `aep`: `policy` (section 3.4),
+     * `delegation` (section 3.9 protocol_metadata: kya_identity, consumer_authorization)
+     * and, for AstraSync bridge traffic, platform-countersigned `intents` (section 8.7).
+     * Append them with `AepChain` (your Ed25519 key). Merchant lane only.
+     */
+    aep?: AstraSyncAepEvidence;
     /** Timestamp of verification */
     verifiedAt: Date;
     /** TTL for this result (seconds) */
@@ -612,6 +666,12 @@ interface VerificationRequest {
      * key charge the owner's card at most once. Omit for raw one-shot confirms.
      */
     checkoutSessionId?: string;
+    /**
+     * 5.15.0: your signed checkout as a compact JWS (AP2 `checkout_jwt`). At a
+     * merchant whose endpoint lists `ap2`, a granted purchase leg returns
+     * `mandates` — closed AP2 Checkout + Payment mandates bound to it.
+     */
+    checkoutJwt?: string;
     /**
      * 5.3.0 (astra-pay): the checkout's authoritative line items, forwarded on
      * the confirm leg for the ORDER plane (receipts + digital-goods fulfillment
@@ -875,5 +935,39 @@ interface TokenGuidance {
         scopeConvention: 'astrasync-canonical';
     };
 }
+/** 5.15.0: AP2 mandates AstraSync issued (see VerificationResult.mandates). */
+interface AstraSyncMandates {
+    kid: string;
+    mode: 'closed' | 'open';
+    /** Delegate SD-JWT: mandate.checkout.1 / mandate.checkout.open.1. */
+    checkout: string;
+    /** Delegate SD-JWT: mandate.payment.1 / mandate.payment.open.1. */
+    payment?: string;
+}
+/** 5.15.0: AstraSync's AEP evidence (see VerificationResult.aep). */
+interface AstraSyncAepEvidence {
+    spec_version: string;
+    policy: {
+        artifact_type: 'policy';
+        actor_type: 'merchant';
+        payload: Record<string, unknown>;
+    };
+    delegation?: {
+        artifact_type: 'delegation';
+        actor_type: 'agent';
+        actor_id: string;
+        payload: {
+            protocol_metadata: Record<string, unknown>;
+        };
+    };
+    intents?: Array<{
+        artifact_type: 'intent';
+        actor_type: 'agent';
+        actor_id: string;
+        payload: Record<string, unknown>;
+        /** Compact JWS (ES256) over the canonical payload; key in AstraSync's JWKS. */
+        platform_countersignature: string;
+    }>;
+}
 
 export type { AgentCredentials as A, CommerceArtifactsPayload as C, GatewayConfig as G, TokenGuidance as T, VerificationRequest as V, AttemptReport as a, CounterpartyType as b, VerificationResult as c };

package/dist/{types-BCkwBA84.d.mts → types-Dxf9DBpr.d.mts}

@@ -227,6 +227,30 @@ interface VerifiedAgent {
     blockchainAnchored: boolean;
     /** Agent status */
     status: 'active' | 'inactive' | 'suspended' | 'migrating' | 'terminated' | 'retired';
+    /**
+     * 5.15.0: the protocol identities the agent declared at registration (its
+     * shared signing key, UCP profile, Web Bot Auth key directory, x402 wallet,
+     * network agent ids). Bind incoming protocol requests to these — e.g.
+     * {@link checkUcpAgentBinding} rejects a `UCP-Agent` profile that isn't the
+     * agent's. Identities AstraSync failed to verify are never included.
+     */
+    protocolIdentities?: AgentProtocolIdentities;
+}
+interface AgentProtocolIdentities {
+    /** Shared signing key (AP2 / VI `cnf`, RFC 9421). `thumbprint` = RFC 7638. */
+    agentKey?: {
+        kid: string | null;
+        thumbprint: string | null;
+        jwk: Record<string, unknown>;
+    };
+    ucpProfile?: string;
+    webBotAuthKeyDirectory?: string;
+    a2aCard?: string;
+    x402Wallet?: string;
+    visaAgentId?: string;
+    mastercardAgentId?: string;
+    /** Protocols whose identity AstraSync checked successfully. */
+    verified: string[];
 }
 /**
  * Verified developer (KYD) information
@@ -311,6 +335,13 @@ interface GuidanceInfo {
 interface StepUpApprovalInfo {
     approvalId: string;
     pollUrl: string;
+    /**
+     * 5.15.0: absolute https URL of the buyer-facing approval page. A UCP
+     * merchant returns it as `continue_url` with status `requires_escalation`;
+     * after the buyer approves, complete the same checkout again and the
+     * approval is redeemed once. Absent from backends older than 27.9.
+     */
+    approvalUrl?: string;
     expiresAt: string;
 }
 /**
@@ -486,19 +517,19 @@ interface VerificationResult {
     /** Settlement voucher (present on clean merchant-mediated grants with a verified wallet). */
     settlement?: SettlementArtifact;
     /**
-     * 5.3.0 (astra-pay): sanitized first-party settlement outcome. Present
-     * INSTEAD of `settlement` when the counterparty is an AstraSync-operated
-     * storefront and the request carried `commercePhase: 'confirm'` — the
-     * backend redeemed the voucher and executed the charge server-side
-     * (charge-at-redeem), so there is no artifact to deliver, only the result.
-     * `no_instrument` = policy passed but the owner has no chargeable
-     * instrument on file (steer the user to add one via onboarding).
+     * Sanitized order outcome for a purchase leg. 5.14.1: AstraSync never
+     * charges — every purchase grant records an order and hands YOU the
+     * settlement artifact, so the status is `pending_merchant` (with
+     * `orderId`): charge the `settlementToken` (card, first-party tenant) or
+     * redeem the `settlement` voucher (stablecoin), then `reportSettlement()`.
+     * `no_instrument` = policy passed but the owner has nothing usable on file
+     * (steer the user to add one via onboarding).
      */
     settlementOutcome?: SettlementOutcomeInfo;
     /**
-     * 5.5.0 (astra-pay): interim merchant self-settlement token. Present ONLY
-     * for firstParty merchants opted into settlement_mode='self_settle' on the
-     * confirm leg — YOUR server charges with this material on the shared Stripe
+     * Card settlement token. Present on a card purchase at a first-party
+     * storefront (our Stripe tenant) — 5.14.1: always, there is no charge-here
+     * mode. YOUR server charges with this material on the shared Stripe
      * account and reports the outcome via `client.reportSettlement()`.
      * MERCHANT-ONLY lane: never expose it to the agent plane, never log it,
      * never echo it back over the bridge handoff (the bridge strips it
@@ -519,6 +550,29 @@ interface VerificationResult {
      * confirm handoff body wins over `fulfilment.email` (the platform default).
      */
     fulfilment?: FulfilmentInfo;
+    /**
+     * 5.15.0: AP2 v0.2 mandates AstraSync issued for this purchase (merchant
+     * lane — never forward to the agent). `mode: 'closed'` on a purchase leg
+     * (Checkout + Payment, bound to your `checkoutJwt`), `'open'` on a quote
+     * leg for an agent with a registered key. Verify with `verifyAp2Mandate()`
+     * against AstraSync's JWKS (`kid`).
+     */
+    mandates?: AstraSyncMandates;
+    /**
+     * 5.15.0: a KYAPay `kya+jwt` identity token AstraSync issued for this agent
+     * at your endpoint (commerce legs; merchant lane). `hid.email` is where to
+     * send the receipt. Verify with `verifyKyaPayTokens()` (issuer = the
+     * AstraSync origin, audience = your ASTRAE-id).
+     */
+    kyaToken?: string;
+    /**
+     * 5.15.0: A-Comm Evidence Protocol (AEP v1.0.3-rc.2) artifact payloads for
+     * your AEP chain — present when your endpoint lists `aep`: `policy` (section 3.4),
+     * `delegation` (section 3.9 protocol_metadata: kya_identity, consumer_authorization)
+     * and, for AstraSync bridge traffic, platform-countersigned `intents` (section 8.7).
+     * Append them with `AepChain` (your Ed25519 key). Merchant lane only.
+     */
+    aep?: AstraSyncAepEvidence;
     /** Timestamp of verification */
     verifiedAt: Date;
     /** TTL for this result (seconds) */
@@ -670,6 +724,12 @@ interface VerificationRequest {
      * key charge the owner's card at most once. Omit for raw one-shot confirms.
      */
     checkoutSessionId?: string;
+    /**
+     * 5.15.0: your signed checkout as a compact JWS (AP2 `checkout_jwt`). At a
+     * merchant whose endpoint lists `ap2`, a granted purchase leg returns
+     * `mandates` — closed AP2 Checkout + Payment mandates bound to it.
+     */
+    checkoutJwt?: string;
     /**
      * 5.3.0 (astra-pay): the checkout's authoritative line items, forwarded on
      * the confirm leg for the ORDER plane (receipts + digital-goods fulfillment
@@ -913,7 +973,7 @@ interface ExpressMiddlewareOptions extends GatewayConfig {
     onDenied?: (result: VerificationResult, req: unknown, res: unknown) => void;
     /** Automatically create sessions and record grant/deny decisions (default: true) */
     recordDecisions?: boolean;
-    /** Enable runtime challenge for all verify-access calls (default: true) */
+    /** Ask for a runtime challenge on every verify-access call (default: false — opt-in, round 27.8) */
     enableRuntimeChallenge?: boolean;
     /**
      * Refresh interval (ms) for the remote-fetched route policy. Default:
@@ -1010,7 +1070,7 @@ interface NextJsMiddlewareOptions extends GatewayConfig {
         message?: string;
         allowGuestAccess?: boolean;
     };
-    /** Enable runtime challenge for all verify-access calls (default: true) */
+    /** Ask for a runtime challenge on every verify-access call (default: false — opt-in, round 27.8) */
     enableRuntimeChallenge?: boolean;
     /**
      * Emit a fire-and-forget beacon for bot- and agent-shaped traffic that
@@ -1076,5 +1136,39 @@ interface VerificationInterstitialProps {
     /** Custom styles */
     className?: string;
 }
+/** 5.15.0: AP2 mandates AstraSync issued (see VerificationResult.mandates). */
+interface AstraSyncMandates {
+    kid: string;
+    mode: 'closed' | 'open';
+    /** Delegate SD-JWT: mandate.checkout.1 / mandate.checkout.open.1. */
+    checkout: string;
+    /** Delegate SD-JWT: mandate.payment.1 / mandate.payment.open.1. */
+    payment?: string;
+}
+/** 5.15.0: AstraSync's AEP evidence (see VerificationResult.aep). */
+interface AstraSyncAepEvidence {
+    spec_version: string;
+    policy: {
+        artifact_type: 'policy';
+        actor_type: 'merchant';
+        payload: Record<string, unknown>;
+    };
+    delegation?: {
+        artifact_type: 'delegation';
+        actor_type: 'agent';
+        actor_id: string;
+        payload: {
+            protocol_metadata: Record<string, unknown>;
+        };
+    };
+    intents?: Array<{
+        artifact_type: 'intent';
+        actor_type: 'agent';
+        actor_id: string;
+        payload: Record<string, unknown>;
+        /** Compact JWS (ES256) over the canonical payload; key in AstraSync's JWKS. */
+        platform_countersignature: string;
+    }>;
+}
 
 export type { AgentCredentials as A, ExpressMiddlewareOptions as E, GatewayConfig as G, NextJsMiddlewareOptions as N, SDKOptions as S, TrustLevel as T, VerificationInterstitialProps as V, AstraSyncCredentials as a, GuidanceInfo as b, VerificationRequest as c, VerificationResult as d };

package/dist/{types-BCkwBA84.d.ts → types-Dxf9DBpr.d.ts}

@@ -227,6 +227,30 @@ interface VerifiedAgent {
     blockchainAnchored: boolean;
     /** Agent status */
     status: 'active' | 'inactive' | 'suspended' | 'migrating' | 'terminated' | 'retired';
+    /**
+     * 5.15.0: the protocol identities the agent declared at registration (its
+     * shared signing key, UCP profile, Web Bot Auth key directory, x402 wallet,
+     * network agent ids). Bind incoming protocol requests to these — e.g.
+     * {@link checkUcpAgentBinding} rejects a `UCP-Agent` profile that isn't the
+     * agent's. Identities AstraSync failed to verify are never included.
+     */
+    protocolIdentities?: AgentProtocolIdentities;
+}
+interface AgentProtocolIdentities {
+    /** Shared signing key (AP2 / VI `cnf`, RFC 9421). `thumbprint` = RFC 7638. */
+    agentKey?: {
+        kid: string | null;
+        thumbprint: string | null;
+        jwk: Record<string, unknown>;
+    };
+    ucpProfile?: string;
+    webBotAuthKeyDirectory?: string;
+    a2aCard?: string;
+    x402Wallet?: string;
+    visaAgentId?: string;
+    mastercardAgentId?: string;
+    /** Protocols whose identity AstraSync checked successfully. */
+    verified: string[];
 }
 /**
  * Verified developer (KYD) information
@@ -311,6 +335,13 @@ interface GuidanceInfo {
 interface StepUpApprovalInfo {
     approvalId: string;
     pollUrl: string;
+    /**
+     * 5.15.0: absolute https URL of the buyer-facing approval page. A UCP
+     * merchant returns it as `continue_url` with status `requires_escalation`;
+     * after the buyer approves, complete the same checkout again and the
+     * approval is redeemed once. Absent from backends older than 27.9.
+     */
+    approvalUrl?: string;
     expiresAt: string;
 }
 /**
@@ -486,19 +517,19 @@ interface VerificationResult {
     /** Settlement voucher (present on clean merchant-mediated grants with a verified wallet). */
     settlement?: SettlementArtifact;
     /**
-     * 5.3.0 (astra-pay): sanitized first-party settlement outcome. Present
-     * INSTEAD of `settlement` when the counterparty is an AstraSync-operated
-     * storefront and the request carried `commercePhase: 'confirm'` — the
-     * backend redeemed the voucher and executed the charge server-side
-     * (charge-at-redeem), so there is no artifact to deliver, only the result.
-     * `no_instrument` = policy passed but the owner has no chargeable
-     * instrument on file (steer the user to add one via onboarding).
+     * Sanitized order outcome for a purchase leg. 5.14.1: AstraSync never
+     * charges — every purchase grant records an order and hands YOU the
+     * settlement artifact, so the status is `pending_merchant` (with
+     * `orderId`): charge the `settlementToken` (card, first-party tenant) or
+     * redeem the `settlement` voucher (stablecoin), then `reportSettlement()`.
+     * `no_instrument` = policy passed but the owner has nothing usable on file
+     * (steer the user to add one via onboarding).
      */
     settlementOutcome?: SettlementOutcomeInfo;
     /**
-     * 5.5.0 (astra-pay): interim merchant self-settlement token. Present ONLY
-     * for firstParty merchants opted into settlement_mode='self_settle' on the
-     * confirm leg — YOUR server charges with this material on the shared Stripe
+     * Card settlement token. Present on a card purchase at a first-party
+     * storefront (our Stripe tenant) — 5.14.1: always, there is no charge-here
+     * mode. YOUR server charges with this material on the shared Stripe
      * account and reports the outcome via `client.reportSettlement()`.
      * MERCHANT-ONLY lane: never expose it to the agent plane, never log it,
      * never echo it back over the bridge handoff (the bridge strips it
@@ -519,6 +550,29 @@ interface VerificationResult {
      * confirm handoff body wins over `fulfilment.email` (the platform default).
      */
     fulfilment?: FulfilmentInfo;
+    /**
+     * 5.15.0: AP2 v0.2 mandates AstraSync issued for this purchase (merchant
+     * lane — never forward to the agent). `mode: 'closed'` on a purchase leg
+     * (Checkout + Payment, bound to your `checkoutJwt`), `'open'` on a quote
+     * leg for an agent with a registered key. Verify with `verifyAp2Mandate()`
+     * against AstraSync's JWKS (`kid`).
+     */
+    mandates?: AstraSyncMandates;
+    /**
+     * 5.15.0: a KYAPay `kya+jwt` identity token AstraSync issued for this agent
+     * at your endpoint (commerce legs; merchant lane). `hid.email` is where to
+     * send the receipt. Verify with `verifyKyaPayTokens()` (issuer = the
+     * AstraSync origin, audience = your ASTRAE-id).
+     */
+    kyaToken?: string;
+    /**
+     * 5.15.0: A-Comm Evidence Protocol (AEP v1.0.3-rc.2) artifact payloads for
+     * your AEP chain — present when your endpoint lists `aep`: `policy` (section 3.4),
+     * `delegation` (section 3.9 protocol_metadata: kya_identity, consumer_authorization)
+     * and, for AstraSync bridge traffic, platform-countersigned `intents` (section 8.7).
+     * Append them with `AepChain` (your Ed25519 key). Merchant lane only.
+     */
+    aep?: AstraSyncAepEvidence;
     /** Timestamp of verification */
     verifiedAt: Date;
     /** TTL for this result (seconds) */
@@ -670,6 +724,12 @@ interface VerificationRequest {
      * key charge the owner's card at most once. Omit for raw one-shot confirms.
      */
     checkoutSessionId?: string;
+    /**
+     * 5.15.0: your signed checkout as a compact JWS (AP2 `checkout_jwt`). At a
+     * merchant whose endpoint lists `ap2`, a granted purchase leg returns
+     * `mandates` — closed AP2 Checkout + Payment mandates bound to it.
+     */
+    checkoutJwt?: string;
     /**
      * 5.3.0 (astra-pay): the checkout's authoritative line items, forwarded on
      * the confirm leg for the ORDER plane (receipts + digital-goods fulfillment
@@ -913,7 +973,7 @@ interface ExpressMiddlewareOptions extends GatewayConfig {
     onDenied?: (result: VerificationResult, req: unknown, res: unknown) => void;
     /** Automatically create sessions and record grant/deny decisions (default: true) */
     recordDecisions?: boolean;
-    /** Enable runtime challenge for all verify-access calls (default: true) */
+    /** Ask for a runtime challenge on every verify-access call (default: false — opt-in, round 27.8) */
     enableRuntimeChallenge?: boolean;
     /**
      * Refresh interval (ms) for the remote-fetched route policy. Default:
@@ -1010,7 +1070,7 @@ interface NextJsMiddlewareOptions extends GatewayConfig {
         message?: string;
         allowGuestAccess?: boolean;
     };
-    /** Enable runtime challenge for all verify-access calls (default: true) */
+    /** Ask for a runtime challenge on every verify-access call (default: false — opt-in, round 27.8) */
     enableRuntimeChallenge?: boolean;
     /**
      * Emit a fire-and-forget beacon for bot- and agent-shaped traffic that
@@ -1076,5 +1136,39 @@ interface VerificationInterstitialProps {
     /** Custom styles */
     className?: string;
 }
+/** 5.15.0: AP2 mandates AstraSync issued (see VerificationResult.mandates). */
+interface AstraSyncMandates {
+    kid: string;
+    mode: 'closed' | 'open';
+    /** Delegate SD-JWT: mandate.checkout.1 / mandate.checkout.open.1. */
+    checkout: string;
+    /** Delegate SD-JWT: mandate.payment.1 / mandate.payment.open.1. */
+    payment?: string;
+}
+/** 5.15.0: AstraSync's AEP evidence (see VerificationResult.aep). */
+interface AstraSyncAepEvidence {
+    spec_version: string;
+    policy: {
+        artifact_type: 'policy';
+        actor_type: 'merchant';
+        payload: Record<string, unknown>;
+    };
+    delegation?: {
+        artifact_type: 'delegation';
+        actor_type: 'agent';
+        actor_id: string;
+        payload: {
+            protocol_metadata: Record<string, unknown>;
+        };
+    };
+    intents?: Array<{
+        artifact_type: 'intent';
+        actor_type: 'agent';
+        actor_id: string;
+        payload: Record<string, unknown>;
+        /** Compact JWS (ES256) over the canonical payload; key in AstraSync's JWKS. */
+        platform_countersignature: string;
+    }>;
+}
 
 export type { AgentCredentials as A, ExpressMiddlewareOptions as E, GatewayConfig as G, NextJsMiddlewareOptions as N, SDKOptions as S, TrustLevel as T, VerificationInterstitialProps as V, AstraSyncCredentials as a, GuidanceInfo as b, VerificationRequest as c, VerificationResult as d };

package/dist/{types-DlshIIR-.d.mts → types-Eg6VoBNH.d.mts}

@@ -169,6 +169,30 @@ interface VerifiedAgent {
     blockchainAnchored: boolean;
     /** Agent status */
     status: 'active' | 'inactive' | 'suspended' | 'migrating' | 'terminated' | 'retired';
+    /**
+     * 5.15.0: the protocol identities the agent declared at registration (its
+     * shared signing key, UCP profile, Web Bot Auth key directory, x402 wallet,
+     * network agent ids). Bind incoming protocol requests to these — e.g.
+     * {@link checkUcpAgentBinding} rejects a `UCP-Agent` profile that isn't the
+     * agent's. Identities AstraSync failed to verify are never included.
+     */
+    protocolIdentities?: AgentProtocolIdentities;
+}
+interface AgentProtocolIdentities {
+    /** Shared signing key (AP2 / VI `cnf`, RFC 9421). `thumbprint` = RFC 7638. */
+    agentKey?: {
+        kid: string | null;
+        thumbprint: string | null;
+        jwk: Record<string, unknown>;
+    };
+    ucpProfile?: string;
+    webBotAuthKeyDirectory?: string;
+    a2aCard?: string;
+    x402Wallet?: string;
+    visaAgentId?: string;
+    mastercardAgentId?: string;
+    /** Protocols whose identity AstraSync checked successfully. */
+    verified: string[];
 }
 /**
  * Verified developer (KYD) information
@@ -253,6 +277,13 @@ interface GuidanceInfo {
 interface StepUpApprovalInfo {
     approvalId: string;
     pollUrl: string;
+    /**
+     * 5.15.0: absolute https URL of the buyer-facing approval page. A UCP
+     * merchant returns it as `continue_url` with status `requires_escalation`;
+     * after the buyer approves, complete the same checkout again and the
+     * approval is redeemed once. Absent from backends older than 27.9.
+     */
+    approvalUrl?: string;
     expiresAt: string;
 }
 /**
@@ -428,19 +459,19 @@ interface VerificationResult {
     /** Settlement voucher (present on clean merchant-mediated grants with a verified wallet). */
     settlement?: SettlementArtifact;
     /**
-     * 5.3.0 (astra-pay): sanitized first-party settlement outcome. Present
-     * INSTEAD of `settlement` when the counterparty is an AstraSync-operated
-     * storefront and the request carried `commercePhase: 'confirm'` — the
-     * backend redeemed the voucher and executed the charge server-side
-     * (charge-at-redeem), so there is no artifact to deliver, only the result.
-     * `no_instrument` = policy passed but the owner has no chargeable
-     * instrument on file (steer the user to add one via onboarding).
+     * Sanitized order outcome for a purchase leg. 5.14.1: AstraSync never
+     * charges — every purchase grant records an order and hands YOU the
+     * settlement artifact, so the status is `pending_merchant` (with
+     * `orderId`): charge the `settlementToken` (card, first-party tenant) or
+     * redeem the `settlement` voucher (stablecoin), then `reportSettlement()`.
+     * `no_instrument` = policy passed but the owner has nothing usable on file
+     * (steer the user to add one via onboarding).
      */
     settlementOutcome?: SettlementOutcomeInfo;
     /**
-     * 5.5.0 (astra-pay): interim merchant self-settlement token. Present ONLY
-     * for firstParty merchants opted into settlement_mode='self_settle' on the
-     * confirm leg — YOUR server charges with this material on the shared Stripe
+     * Card settlement token. Present on a card purchase at a first-party
+     * storefront (our Stripe tenant) — 5.14.1: always, there is no charge-here
+     * mode. YOUR server charges with this material on the shared Stripe
      * account and reports the outcome via `client.reportSettlement()`.
      * MERCHANT-ONLY lane: never expose it to the agent plane, never log it,
      * never echo it back over the bridge handoff (the bridge strips it
@@ -461,6 +492,29 @@ interface VerificationResult {
      * confirm handoff body wins over `fulfilment.email` (the platform default).
      */
     fulfilment?: FulfilmentInfo;
+    /**
+     * 5.15.0: AP2 v0.2 mandates AstraSync issued for this purchase (merchant
+     * lane — never forward to the agent). `mode: 'closed'` on a purchase leg
+     * (Checkout + Payment, bound to your `checkoutJwt`), `'open'` on a quote
+     * leg for an agent with a registered key. Verify with `verifyAp2Mandate()`
+     * against AstraSync's JWKS (`kid`).
+     */
+    mandates?: AstraSyncMandates;
+    /**
+     * 5.15.0: a KYAPay `kya+jwt` identity token AstraSync issued for this agent
+     * at your endpoint (commerce legs; merchant lane). `hid.email` is where to
+     * send the receipt. Verify with `verifyKyaPayTokens()` (issuer = the
+     * AstraSync origin, audience = your ASTRAE-id).
+     */
+    kyaToken?: string;
+    /**
+     * 5.15.0: A-Comm Evidence Protocol (AEP v1.0.3-rc.2) artifact payloads for
+     * your AEP chain — present when your endpoint lists `aep`: `policy` (section 3.4),
+     * `delegation` (section 3.9 protocol_metadata: kya_identity, consumer_authorization)
+     * and, for AstraSync bridge traffic, platform-countersigned `intents` (section 8.7).
+     * Append them with `AepChain` (your Ed25519 key). Merchant lane only.
+     */
+    aep?: AstraSyncAepEvidence;
     /** Timestamp of verification */
     verifiedAt: Date;
     /** TTL for this result (seconds) */
@@ -612,6 +666,12 @@ interface VerificationRequest {
      * key charge the owner's card at most once. Omit for raw one-shot confirms.
      */
     checkoutSessionId?: string;
+    /**
+     * 5.15.0: your signed checkout as a compact JWS (AP2 `checkout_jwt`). At a
+     * merchant whose endpoint lists `ap2`, a granted purchase leg returns
+     * `mandates` — closed AP2 Checkout + Payment mandates bound to it.
+     */
+    checkoutJwt?: string;
     /**
      * 5.3.0 (astra-pay): the checkout's authoritative line items, forwarded on
      * the confirm leg for the ORDER plane (receipts + digital-goods fulfillment
@@ -875,5 +935,39 @@ interface TokenGuidance {
         scopeConvention: 'astrasync-canonical';
     };
 }
+/** 5.15.0: AP2 mandates AstraSync issued (see VerificationResult.mandates). */
+interface AstraSyncMandates {
+    kid: string;
+    mode: 'closed' | 'open';
+    /** Delegate SD-JWT: mandate.checkout.1 / mandate.checkout.open.1. */
+    checkout: string;
+    /** Delegate SD-JWT: mandate.payment.1 / mandate.payment.open.1. */
+    payment?: string;
+}
+/** 5.15.0: AstraSync's AEP evidence (see VerificationResult.aep). */
+interface AstraSyncAepEvidence {
+    spec_version: string;
+    policy: {
+        artifact_type: 'policy';
+        actor_type: 'merchant';
+        payload: Record<string, unknown>;
+    };
+    delegation?: {
+        artifact_type: 'delegation';
+        actor_type: 'agent';
+        actor_id: string;
+        payload: {
+            protocol_metadata: Record<string, unknown>;
+        };
+    };
+    intents?: Array<{
+        artifact_type: 'intent';
+        actor_type: 'agent';
+        actor_id: string;
+        payload: Record<string, unknown>;
+        /** Compact JWS (ES256) over the canonical payload; key in AstraSync's JWKS. */
+        platform_countersignature: string;
+    }>;
+}
 
 export type { AgentCredentials as A, CommerceArtifactsPayload as C, GatewayConfig as G, TokenGuidance as T, VerificationRequest as V, AttemptReport as a, CounterpartyType as b, VerificationResult as c };