@astrasyncai/verification-gateway 5.16.0 → 5.17.1

package/dist/adapters/mcp.d.mts

@@ -1,5 +1,5 @@
 import { Request, Response, RequestHandler } from 'express';
-import { d as VerificationResult, G as GatewayConfig } from '../types-Blz520bR.mjs';
+import { d as VerificationResult, G as GatewayConfig } from '../types-DRb_plOh.mjs';
 
 /**
  * X-Astra-Verified-Hop — cross-hop verify-access dedupe marker.

package/dist/adapters/mcp.d.ts

@@ -1,5 +1,5 @@
 import { Request, Response, RequestHandler } from 'express';
-import { d as VerificationResult, G as GatewayConfig } from '../types-Blz520bR.js';
+import { d as VerificationResult, G as GatewayConfig } from '../types-DRb_plOh.js';
 
 /**
  * X-Astra-Verified-Hop — cross-hop verify-access dedupe marker.

package/dist/adapters/mcp.js

@@ -32,7 +32,7 @@ __export(mcp_exports, {
 module.exports = __toCommonJS(mcp_exports);
 
 // src/version.ts
-var SDK_VERSION = "5.16.0";
+var SDK_VERSION = "5.17.1";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;
@@ -258,6 +258,7 @@ function getCacheKey(request, counterpartyId) {
     request.enableRuntimeChallenge ? "1" : "0",
     // 5.16.0: route policy changes the verdict (owners / challenge).
     request.routePolicy ? JSON.stringify(request.routePolicy) : "",
+    request.approvalHeldByRoute ? "1" : "0",
     // callerMetadata fields contribute to risk model; include the ones
     // backend reads. sourceIp/userAgent/forwardedFor change per-request
     // so their inclusion effectively forces a re-check for any varying
@@ -465,6 +466,7 @@ async function callVerifyAccessAPI(config, request) {
   if (requestData.enableRuntimeChallenge)
     body.enableRuntimeChallenge = requestData.enableRuntimeChallenge;
   if (requestData.routePolicy) body.routePolicy = requestData.routePolicy;
+  if (requestData.approvalHeldByRoute) body.approvalHeldByRoute = true;
   if (requestData.createSession) body.createSession = requestData.createSession;
   if (requestData.durationRequired) body.durationRequired = requestData.durationRequired;
   if (requestData.counterpartyType) body.counterpartyType = requestData.counterpartyType;
@@ -796,6 +798,8 @@ async function verify(config, request, options) {
   } else if (result.recommendation === "step_up_required" && result.identityVerified) {
     result.requiresStepUp = true;
     result.denialReasons = serverDenialReasons ?? result.recommendationReasons ?? ["Step-up verification required"];
+    const stepUpFailures = apiResponse.access?.failures;
+    if (stepUpFailures?.length) result.failures = stepUpFailures;
   }
   const escalates = result.requiresStepUp === true || result.requiresApproval === true || result.recommendation === "step_up_required";
   if (mergedConfig.cacheTtl !== 0 && result.recommendation !== "deny" && !escalates) {
@@ -1060,12 +1064,27 @@ function requiresHumanApproval(result) {
   return result.requiresStepUp === true || result.requiresApproval === true;
 }
 function annotateApprovalRequired(result) {
-  result.failures = [
-    ...result.failures ?? [],
-    { dimension: "commerce.intent.approval_required", message: APPROVAL_REASON }
-  ];
+  if (isDimensionApproval(result)) {
+    result.denialReasons = [DIMENSION_APPROVAL_REASON, ...result.denialReasons ?? []];
+    return;
+  }
+  const named = (result.failures ?? []).some(
+    (f) => f.dimension === "commerce.intent.approval_required"
+  );
+  if (!named) {
+    result.failures = [
+      ...result.failures ?? [],
+      { dimension: "commerce.intent.approval_required", message: APPROVAL_REASON }
+    ];
+  }
   result.denialReasons = [APPROVAL_REASON, ...result.denialReasons ?? []];
 }
+var DIMENSION_APPROVAL_REASON = "The agent's owner asked to approve this kind of request. The owner can approve or deny it in the AstraSync dashboard.";
+var DIMENSION_APPROVAL = /^pdlss\.[a-z_]+\.approval_required$/;
+function isDimensionApproval(result) {
+  const f = result.failures ?? [];
+  return f.some((x) => DIMENSION_APPROVAL.test(x.dimension)) && !f.some((x) => x.dimension === "commerce.intent.approval_required");
+}
 
 // src/adapters/stepup-poll.ts
 var DEFAULT_POLL_INTERVAL_MS = 3e3;