@astrasyncai/verification-gateway 5.16.0 → 5.17.1

package/dist/git-trigger/git-hooks.d.mts

@@ -1,4 +1,4 @@
-import { T as TokenGuidance, b as CounterpartyType } from '../types-DBe4hgfT.mjs';
+import { T as TokenGuidance, b as CounterpartyType } from '../types-vNBvYD7Z.mjs';
 import '../metadata-capture.mjs';
 
 /**

package/dist/git-trigger/git-hooks.d.ts

@@ -1,4 +1,4 @@
-import { T as TokenGuidance, b as CounterpartyType } from '../types-Bm1QvGqI.js';
+import { T as TokenGuidance, b as CounterpartyType } from '../types-DA8LzAOB.js';
 import '../metadata-capture.js';
 
 /**

package/dist/index.d.mts

@@ -963,6 +963,12 @@ interface VerificationRequest {
     enableRuntimeChallenge?: boolean;
     /** 5.16.0: the matched route's policy for verify-access to enforce. */
     routePolicy?: RoutePolicy;
+    /**
+     * 5.17.1: the route itself holds a request that needs the owner's approval
+     * (see ExpressMiddlewareOptions.approvalHeldByRoute), so verify-access
+     * reports the hold but creates no approval of its own.
+     */
+    approvalHeldByRoute?: boolean;
     /** Create a verification session (returns sessionId) */
     createSession?: boolean;
     /** Counterparty type */
@@ -1281,6 +1287,14 @@ interface ExpressMiddlewareOptions extends GatewayConfig {
     recordDecisions?: boolean;
     /** Ask for a runtime challenge on every verify-access call (default: false — opt-in, round 27.8) */
     enableRuntimeChallenge?: boolean;
+    /**
+     * 5.17.1: return true for requests whose route asks the owner for approval
+     * itself (it creates its own hold and answers 202 while it waits). For those
+     * requests a result that only needs the owner's approval is passed to the
+     * route instead of refused, and verify-access creates no approval, so the
+     * owner approves once. Any deny is still refused. Default: none.
+     */
+    approvalHeldByRoute?: (req: unknown) => boolean;
     /**
      * Refresh interval (ms) for the remote-fetched route policy. Default:
      * 5 minutes. Operators can shorten this to test policy edits faster, or
@@ -5134,7 +5148,7 @@ declare function detectRuntime(userAgent: string | undefined | null): string | u
  * silently (never throwing), so this is a no-op there — which is correct:
  * in a browser the page's real UA is the honest identity.
  */
-declare const SDK_USER_AGENT = "astrasync-sdk/5.16.0";
+declare const SDK_USER_AGENT = "astrasync-sdk/5.17.1";
 declare const sdkFetch: typeof fetch;
 
 interface LocalPolicy {
@@ -5252,7 +5266,7 @@ declare function parseYaml(yamlContent: string): ParseResult;
  * is fine — bumping both in the release-ceremony commit keeps them
  * lockstep.
  */
-declare const SDK_VERSION = "5.16.0";
+declare const SDK_VERSION = "5.17.1";
 
 /**
  * 5.15.0 — the `UCP-Agent` request header (UCP 2026-08-25): an RFC 8941

package/dist/index.d.ts

@@ -963,6 +963,12 @@ interface VerificationRequest {
     enableRuntimeChallenge?: boolean;
     /** 5.16.0: the matched route's policy for verify-access to enforce. */
     routePolicy?: RoutePolicy;
+    /**
+     * 5.17.1: the route itself holds a request that needs the owner's approval
+     * (see ExpressMiddlewareOptions.approvalHeldByRoute), so verify-access
+     * reports the hold but creates no approval of its own.
+     */
+    approvalHeldByRoute?: boolean;
     /** Create a verification session (returns sessionId) */
     createSession?: boolean;
     /** Counterparty type */
@@ -1281,6 +1287,14 @@ interface ExpressMiddlewareOptions extends GatewayConfig {
     recordDecisions?: boolean;
     /** Ask for a runtime challenge on every verify-access call (default: false — opt-in, round 27.8) */
     enableRuntimeChallenge?: boolean;
+    /**
+     * 5.17.1: return true for requests whose route asks the owner for approval
+     * itself (it creates its own hold and answers 202 while it waits). For those
+     * requests a result that only needs the owner's approval is passed to the
+     * route instead of refused, and verify-access creates no approval, so the
+     * owner approves once. Any deny is still refused. Default: none.
+     */
+    approvalHeldByRoute?: (req: unknown) => boolean;
     /**
      * Refresh interval (ms) for the remote-fetched route policy. Default:
      * 5 minutes. Operators can shorten this to test policy edits faster, or
@@ -5134,7 +5148,7 @@ declare function detectRuntime(userAgent: string | undefined | null): string | u
  * silently (never throwing), so this is a no-op there — which is correct:
  * in a browser the page's real UA is the honest identity.
  */
-declare const SDK_USER_AGENT = "astrasync-sdk/5.16.0";
+declare const SDK_USER_AGENT = "astrasync-sdk/5.17.1";
 declare const sdkFetch: typeof fetch;
 
 interface LocalPolicy {
@@ -5252,7 +5266,7 @@ declare function parseYaml(yamlContent: string): ParseResult;
  * is fine — bumping both in the release-ceremony commit keeps them
  * lockstep.
  */
-declare const SDK_VERSION = "5.16.0";
+declare const SDK_VERSION = "5.17.1";
 
 /**
  * 5.15.0 — the `UCP-Agent` request header (UCP 2026-08-25): an RFC 8941

package/dist/index.js

@@ -205,7 +205,7 @@ function getTrustLevel(score) {
 }
 
 // src/version.ts
-var SDK_VERSION = "5.16.0";
+var SDK_VERSION = "5.17.1";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;
@@ -441,6 +441,7 @@ function getCacheKey(request, counterpartyId) {
     request.enableRuntimeChallenge ? "1" : "0",
     // 5.16.0: route policy changes the verdict (owners / challenge).
     request.routePolicy ? JSON.stringify(request.routePolicy) : "",
+    request.approvalHeldByRoute ? "1" : "0",
     // callerMetadata fields contribute to risk model; include the ones
     // backend reads. sourceIp/userAgent/forwardedFor change per-request
     // so their inclusion effectively forces a re-check for any varying
@@ -654,6 +655,7 @@ async function callVerifyAccessAPI(config, request) {
   if (requestData.enableRuntimeChallenge)
     body.enableRuntimeChallenge = requestData.enableRuntimeChallenge;
   if (requestData.routePolicy) body.routePolicy = requestData.routePolicy;
+  if (requestData.approvalHeldByRoute) body.approvalHeldByRoute = true;
   if (requestData.createSession) body.createSession = requestData.createSession;
   if (requestData.durationRequired) body.durationRequired = requestData.durationRequired;
   if (requestData.counterpartyType) body.counterpartyType = requestData.counterpartyType;
@@ -985,6 +987,8 @@ async function verify(config, request, options) {
   } else if (result.recommendation === "step_up_required" && result.identityVerified) {
     result.requiresStepUp = true;
     result.denialReasons = serverDenialReasons ?? result.recommendationReasons ?? ["Step-up verification required"];
+    const stepUpFailures = apiResponse.access?.failures;
+    if (stepUpFailures?.length) result.failures = stepUpFailures;
   }
   const escalates = result.requiresStepUp === true || result.requiresApproval === true || result.recommendation === "step_up_required";
   if (mergedConfig.cacheTtl !== 0 && result.recommendation !== "deny" && !escalates) {
@@ -1184,12 +1188,31 @@ function requiresHumanApproval(result) {
   return result.requiresStepUp === true || result.requiresApproval === true;
 }
 function annotateApprovalRequired(result) {
-  result.failures = [
-    ...result.failures ?? [],
-    { dimension: "commerce.intent.approval_required", message: APPROVAL_REASON }
-  ];
+  if (isDimensionApproval(result)) {
+    result.denialReasons = [DIMENSION_APPROVAL_REASON, ...result.denialReasons ?? []];
+    return;
+  }
+  const named = (result.failures ?? []).some(
+    (f) => f.dimension === "commerce.intent.approval_required"
+  );
+  if (!named) {
+    result.failures = [
+      ...result.failures ?? [],
+      { dimension: "commerce.intent.approval_required", message: APPROVAL_REASON }
+    ];
+  }
   result.denialReasons = [APPROVAL_REASON, ...result.denialReasons ?? []];
 }
+var DIMENSION_APPROVAL_REASON = "The agent's owner asked to approve this kind of request. The owner can approve or deny it in the AstraSync dashboard.";
+var DIMENSION_APPROVAL = /^pdlss\.[a-z_]+\.approval_required$/;
+function isDimensionApproval(result) {
+  const f = result.failures ?? [];
+  return f.some((x) => DIMENSION_APPROVAL.test(x.dimension)) && !f.some((x) => x.dimension === "commerce.intent.approval_required");
+}
+function onlyNeedsApproval(result) {
+  if (!result.policyAllowed || !requiresHumanApproval(result)) return false;
+  return (result.failures ?? []).every((f) => /\.approval_required$/.test(f.dimension));
+}
 
 // src/settlement.ts
 async function authorizeSettlement(config, req) {
@@ -2865,6 +2888,7 @@ function createMiddleware(options) {
       const attemptHeader = req.headers["x-astra-attempt-id"];
       const inboundAttemptId = typeof attemptHeader === "string" && /^att_[0-9a-f]{32}$/.test(attemptHeader) ? attemptHeader : void 0;
       const commerceArtifacts = detectExpressCommerce(req);
+      const heldByRoute = options.approvalHeldByRoute?.(req) === true;
       const verificationRequest = {
         credentials,
         ...commerceArtifacts && { commerceArtifacts },
@@ -2876,6 +2900,7 @@ function createMiddleware(options) {
         counterpartyType: config.counterpartyType || "api",
         enableRuntimeChallenge,
         ...routePolicyOf(routeConfig) && { routePolicy: routePolicyOf(routeConfig) },
+        ...heldByRoute && { approvalHeldByRoute: true },
         durationRequired: astraCreds?.pdlss?.duration?.maxSessionDuration,
         ...txValue !== void 0 && { transactionValue: txValue },
         ...txCurrency && { currency: txCurrency },
@@ -2932,6 +2957,9 @@ function createMiddleware(options) {
         onDenied(result, req, res);
         return;
       }
+      if (heldByRoute && !result.stepUpApproval && onlyNeedsApproval(result)) {
+        return next();
+      }
       if (requiresHumanApproval(result)) {
         annotateApprovalRequired(result);
         if (shouldRecordDecisions && sessionId) {