@astrasyncai/verification-gateway 5.15.0 → 5.17.0

package/dist/adapters/mcp.d.mts

@@ -1,5 +1,5 @@
 import { Request, Response, RequestHandler } from 'express';
-import { d as VerificationResult, G as GatewayConfig } from '../types-Dxf9DBpr.mjs';
+import { d as VerificationResult, G as GatewayConfig } from '../types-Blz520bR.mjs';
 
 /**
  * X-Astra-Verified-Hop — cross-hop verify-access dedupe marker.

package/dist/adapters/mcp.d.ts

@@ -1,5 +1,5 @@
 import { Request, Response, RequestHandler } from 'express';
-import { d as VerificationResult, G as GatewayConfig } from '../types-Dxf9DBpr.js';
+import { d as VerificationResult, G as GatewayConfig } from '../types-Blz520bR.js';
 
 /**
  * X-Astra-Verified-Hop — cross-hop verify-access dedupe marker.

package/dist/adapters/mcp.js

@@ -32,7 +32,7 @@ __export(mcp_exports, {
 module.exports = __toCommonJS(mcp_exports);
 
 // src/version.ts
-var SDK_VERSION = "5.15.0";
+var SDK_VERSION = "5.17.0";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;
@@ -256,6 +256,8 @@ function getCacheKey(request, counterpartyId) {
     request.durationRequired ?? "",
     request.invocationProtocol || "",
     request.enableRuntimeChallenge ? "1" : "0",
+    // 5.16.0: route policy changes the verdict (owners / challenge).
+    request.routePolicy ? JSON.stringify(request.routePolicy) : "",
     // callerMetadata fields contribute to risk model; include the ones
     // backend reads. sourceIp/userAgent/forwardedFor change per-request
     // so their inclusion effectively forces a re-check for any varying
@@ -462,6 +464,7 @@ async function callVerifyAccessAPI(config, request) {
   if (requestData.subAgentDepth !== void 0) body.subAgentDepth = requestData.subAgentDepth;
   if (requestData.enableRuntimeChallenge)
     body.enableRuntimeChallenge = requestData.enableRuntimeChallenge;
+  if (requestData.routePolicy) body.routePolicy = requestData.routePolicy;
   if (requestData.createSession) body.createSession = requestData.createSession;
   if (requestData.durationRequired) body.durationRequired = requestData.durationRequired;
   if (requestData.counterpartyType) body.counterpartyType = requestData.counterpartyType;