@astrasyncai/verification-gateway 5.17.2 → 5.18.0

package/dist/{types-vNBvYD7Z.d.mts → types-3ObBpsnf.d.mts}

@@ -285,6 +285,13 @@ interface StepUpApprovalInfo {
      */
     approvalUrl?: string;
     expiresAt: string;
+    /**
+     * 5.18.0: `'consumed'` when this verification just redeemed the approval
+     * (the purchase may proceed); `'pending'` (or absent) while the buyer
+     * still has to approve; `'approved'` when the buyer approved but the
+     * purchase can't settle yet (e.g. no payment method) — still held.
+     */
+    status?: 'pending' | 'approved' | 'consumed';
 }
 /**
  * Lifecycle states of a step-up approval row (mirrors the backend's

package/dist/{types-DA8LzAOB.d.ts → types-BoxZEYPS.d.ts}

@@ -285,6 +285,13 @@ interface StepUpApprovalInfo {
      */
     approvalUrl?: string;
     expiresAt: string;
+    /**
+     * 5.18.0: `'consumed'` when this verification just redeemed the approval
+     * (the purchase may proceed); `'pending'` (or absent) while the buyer
+     * still has to approve; `'approved'` when the buyer approved but the
+     * purchase can't settle yet (e.g. no payment method) — still held.
+     */
+    status?: 'pending' | 'approved' | 'consumed';
 }
 /**
  * Lifecycle states of a step-up approval row (mirrors the backend's

package/dist/{types-DRb_plOh.d.mts → types-Cns4l8gX.d.mts}

@@ -343,6 +343,13 @@ interface StepUpApprovalInfo {
      */
     approvalUrl?: string;
     expiresAt: string;
+    /**
+     * 5.18.0: `'consumed'` when this verification just redeemed the approval
+     * (the purchase may proceed); `'pending'` (or absent) while the buyer
+     * still has to approve; `'approved'` when the buyer approved but the
+     * purchase can't settle yet (e.g. no payment method) — still held.
+     */
+    status?: 'pending' | 'approved' | 'consumed';
 }
 /**
  * Lifecycle states of a step-up approval row (mirrors the backend's
@@ -999,6 +1006,16 @@ interface ExpressMiddlewareOptions extends GatewayConfig {
      * owner approves once. Any deny is still refused. Default: none.
      */
     approvalHeldByRoute?: (req: unknown) => boolean;
+    /**
+     * 5.18.0: what happens to a request no configured route matches.
+     * `'pass'` (default): it passes unevaluated — unless
+     * `evaluateAlwaysIfCredentialed` is set and the caller sent an X-Astra-Id,
+     * in which case it's evaluated in observe mode. `'observe'`: any caller
+     * presenting AstraSync credentials (X-Astra-Id, API key or JWT) is
+     * evaluated in observe mode. Observe never vetoes: the request always
+     * reaches your handler, with `req.agentVerification` populated.
+     */
+    defaultRoutePolicy?: 'pass' | 'observe';
     /**
      * Refresh interval (ms) for the remote-fetched route policy. Default:
      * 5 minutes. Operators can shorten this to test policy edits faster, or

package/dist/{types-DRb_plOh.d.ts → types-Cns4l8gX.d.ts}

@@ -343,6 +343,13 @@ interface StepUpApprovalInfo {
      */
     approvalUrl?: string;
     expiresAt: string;
+    /**
+     * 5.18.0: `'consumed'` when this verification just redeemed the approval
+     * (the purchase may proceed); `'pending'` (or absent) while the buyer
+     * still has to approve; `'approved'` when the buyer approved but the
+     * purchase can't settle yet (e.g. no payment method) — still held.
+     */
+    status?: 'pending' | 'approved' | 'consumed';
 }
 /**
  * Lifecycle states of a step-up approval row (mirrors the backend's
@@ -999,6 +1006,16 @@ interface ExpressMiddlewareOptions extends GatewayConfig {
      * owner approves once. Any deny is still refused. Default: none.
      */
     approvalHeldByRoute?: (req: unknown) => boolean;
+    /**
+     * 5.18.0: what happens to a request no configured route matches.
+     * `'pass'` (default): it passes unevaluated — unless
+     * `evaluateAlwaysIfCredentialed` is set and the caller sent an X-Astra-Id,
+     * in which case it's evaluated in observe mode. `'observe'`: any caller
+     * presenting AstraSync credentials (X-Astra-Id, API key or JWT) is
+     * evaluated in observe mode. Observe never vetoes: the request always
+     * reaches your handler, with `req.agentVerification` populated.
+     */
+    defaultRoutePolicy?: 'pass' | 'observe';
     /**
      * Refresh interval (ms) for the remote-fetched route policy. Default:
      * 5 minutes. Operators can shorten this to test policy edits faster, or

package/dist/ui/index.d.mts

@@ -1,4 +1,4 @@
-import { V as VerificationInterstitialProps, d as VerificationResult, A as AgentCredentials, b as GuidanceInfo, T as TrustLevel } from '../types-DRb_plOh.mjs';
+import { V as VerificationInterstitialProps, d as VerificationResult, A as AgentCredentials, b as GuidanceInfo, T as TrustLevel } from '../types-Cns4l8gX.mjs';
 
 /**
  * AstraSync Verification Interstitial Component

package/dist/ui/index.d.ts

@@ -1,4 +1,4 @@
-import { V as VerificationInterstitialProps, d as VerificationResult, A as AgentCredentials, b as GuidanceInfo, T as TrustLevel } from '../types-DRb_plOh.js';
+import { V as VerificationInterstitialProps, d as VerificationResult, A as AgentCredentials, b as GuidanceInfo, T as TrustLevel } from '../types-Cns4l8gX.js';
 
 /**
  * AstraSync Verification Interstitial Component

package/dist/verify.d.mts

@@ -1,4 +1,4 @@
-import { A as AgentCredentials, G as GatewayConfig, a as AttemptReport, V as VerificationRequest, c as VerificationResult } from './types-vNBvYD7Z.mjs';
+import { A as AgentCredentials, G as GatewayConfig, a as AttemptReport, V as VerificationRequest, c as VerificationResult } from './types-3ObBpsnf.mjs';
 import { ObservedMetadata } from './metadata-capture.mjs';
 
 /**

package/dist/verify.d.ts

@@ -1,4 +1,4 @@
-import { A as AgentCredentials, G as GatewayConfig, a as AttemptReport, V as VerificationRequest, c as VerificationResult } from './types-DA8LzAOB.js';
+import { A as AgentCredentials, G as GatewayConfig, a as AttemptReport, V as VerificationRequest, c as VerificationResult } from './types-BoxZEYPS.js';
 import { ObservedMetadata } from './metadata-capture.js';
 
 /**

package/dist/verify.js

@@ -37,7 +37,7 @@ __export(verify_exports, {
 module.exports = __toCommonJS(verify_exports);
 
 // src/version.ts
-var SDK_VERSION = "5.17.2";
+var SDK_VERSION = "5.18.0";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;