@astrasyncai/verification-gateway 5.15.0 → 5.16.0

package/dist/{types-Dxf9DBpr.d.mts → types-Blz520bR.d.mts}

@@ -773,6 +773,8 @@ interface VerificationRequest {
     callerMetadata?: CallerMetadata;
     /** Enable runtime challenge for this request */
     enableRuntimeChallenge?: boolean;
+    /** 5.16.0: the matched route's policy for verify-access to enforce. */
+    routePolicy?: RoutePolicy;
     /** Create a verification session (returns sessionId) */
     createSession?: boolean;
     /** Counterparty type */
@@ -924,6 +926,14 @@ interface CommerceArtifactsPayload {
         secret: string;
     };
 }
+/**
+ * 5.16.0: the matched route's policy that verify-access enforces (forwarded
+ * by the middleware from the dashboard route). Tighten-only.
+ */
+interface RoutePolicy {
+    allowedOwners?: string[];
+    requiresRuntimeChallenge?: boolean;
+}
 /**
  * Express middleware options.
  *

package/dist/{types-Dxf9DBpr.d.ts → types-Blz520bR.d.ts}

@@ -773,6 +773,8 @@ interface VerificationRequest {
     callerMetadata?: CallerMetadata;
     /** Enable runtime challenge for this request */
     enableRuntimeChallenge?: boolean;
+    /** 5.16.0: the matched route's policy for verify-access to enforce. */
+    routePolicy?: RoutePolicy;
     /** Create a verification session (returns sessionId) */
     createSession?: boolean;
     /** Counterparty type */
@@ -924,6 +926,14 @@ interface CommerceArtifactsPayload {
         secret: string;
     };
 }
+/**
+ * 5.16.0: the matched route's policy that verify-access enforces (forwarded
+ * by the middleware from the dashboard route). Tighten-only.
+ */
+interface RoutePolicy {
+    allowedOwners?: string[];
+    requiresRuntimeChallenge?: boolean;
+}
 /**
  * Express middleware options.
  *

package/dist/{types-DtJjlW4O.d.ts → types-Bm1QvGqI.d.ts}

@@ -715,6 +715,8 @@ interface VerificationRequest {
     callerMetadata?: CallerMetadata;
     /** Enable runtime challenge for this request */
     enableRuntimeChallenge?: boolean;
+    /** 5.16.0: the matched route's policy for verify-access to enforce. */
+    routePolicy?: RoutePolicy;
     /** Create a verification session (returns sessionId) */
     createSession?: boolean;
     /** Counterparty type */
@@ -908,6 +910,14 @@ interface CommerceArtifactsPayload {
         secret: string;
     };
 }
+/**
+ * 5.16.0: the matched route's policy that verify-access enforces (forwarded
+ * by the middleware from the dashboard route). Tighten-only.
+ */
+interface RoutePolicy {
+    allowedOwners?: string[];
+    requiresRuntimeChallenge?: boolean;
+}
 /**
  * Token guidance returned from verify-access.
  *

package/dist/{types-Eg6VoBNH.d.mts → types-DBe4hgfT.d.mts}

@@ -715,6 +715,8 @@ interface VerificationRequest {
     callerMetadata?: CallerMetadata;
     /** Enable runtime challenge for this request */
     enableRuntimeChallenge?: boolean;
+    /** 5.16.0: the matched route's policy for verify-access to enforce. */
+    routePolicy?: RoutePolicy;
     /** Create a verification session (returns sessionId) */
     createSession?: boolean;
     /** Counterparty type */
@@ -908,6 +910,14 @@ interface CommerceArtifactsPayload {
         secret: string;
     };
 }
+/**
+ * 5.16.0: the matched route's policy that verify-access enforces (forwarded
+ * by the middleware from the dashboard route). Tighten-only.
+ */
+interface RoutePolicy {
+    allowedOwners?: string[];
+    requiresRuntimeChallenge?: boolean;
+}
 /**
  * Token guidance returned from verify-access.
  *

package/dist/ui/index.d.mts

@@ -1,4 +1,4 @@
-import { V as VerificationInterstitialProps, d as VerificationResult, A as AgentCredentials, b as GuidanceInfo, T as TrustLevel } from '../types-Dxf9DBpr.mjs';
+import { V as VerificationInterstitialProps, d as VerificationResult, A as AgentCredentials, b as GuidanceInfo, T as TrustLevel } from '../types-Blz520bR.mjs';
 
 /**
  * AstraSync Verification Interstitial Component

package/dist/ui/index.d.ts

@@ -1,4 +1,4 @@
-import { V as VerificationInterstitialProps, d as VerificationResult, A as AgentCredentials, b as GuidanceInfo, T as TrustLevel } from '../types-Dxf9DBpr.js';
+import { V as VerificationInterstitialProps, d as VerificationResult, A as AgentCredentials, b as GuidanceInfo, T as TrustLevel } from '../types-Blz520bR.js';
 
 /**
  * AstraSync Verification Interstitial Component

package/dist/verify.d.mts

@@ -1,4 +1,4 @@
-import { A as AgentCredentials, G as GatewayConfig, a as AttemptReport, V as VerificationRequest, c as VerificationResult } from './types-Eg6VoBNH.mjs';
+import { A as AgentCredentials, G as GatewayConfig, a as AttemptReport, V as VerificationRequest, c as VerificationResult } from './types-DBe4hgfT.mjs';
 import { ObservedMetadata } from './metadata-capture.mjs';
 
 /**

package/dist/verify.d.ts

@@ -1,4 +1,4 @@
-import { A as AgentCredentials, G as GatewayConfig, a as AttemptReport, V as VerificationRequest, c as VerificationResult } from './types-DtJjlW4O.js';
+import { A as AgentCredentials, G as GatewayConfig, a as AttemptReport, V as VerificationRequest, c as VerificationResult } from './types-Bm1QvGqI.js';
 import { ObservedMetadata } from './metadata-capture.js';
 
 /**

package/dist/verify.js

@@ -37,7 +37,7 @@ __export(verify_exports, {
 module.exports = __toCommonJS(verify_exports);
 
 // src/version.ts
-var SDK_VERSION = "5.15.0";
+var SDK_VERSION = "5.16.0";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;
@@ -200,6 +200,8 @@ function getCacheKey(request, counterpartyId) {
     request.durationRequired ?? "",
     request.invocationProtocol || "",
     request.enableRuntimeChallenge ? "1" : "0",
+    // 5.16.0: route policy changes the verdict (owners / challenge).
+    request.routePolicy ? JSON.stringify(request.routePolicy) : "",
     // callerMetadata fields contribute to risk model; include the ones
     // backend reads. sourceIp/userAgent/forwardedFor change per-request
     // so their inclusion effectively forces a re-check for any varying
@@ -412,6 +414,7 @@ async function callVerifyAccessAPI(config, request) {
   if (requestData.subAgentDepth !== void 0) body.subAgentDepth = requestData.subAgentDepth;
   if (requestData.enableRuntimeChallenge)
     body.enableRuntimeChallenge = requestData.enableRuntimeChallenge;
+  if (requestData.routePolicy) body.routePolicy = requestData.routePolicy;
   if (requestData.createSession) body.createSession = requestData.createSession;
   if (requestData.durationRequired) body.durationRequired = requestData.durationRequired;
   if (requestData.counterpartyType) body.counterpartyType = requestData.counterpartyType;