@astrasyncai/verification-gateway 5.18.1 → 5.19.0

package/dist/bin/astrasync-claude-hook.js

@@ -3752,7 +3752,7 @@ function getTrustLevel(score) {
 }
 
 // src/version.ts
-var SDK_VERSION = "5.18.1";
+var SDK_VERSION = "5.19.0";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;
@@ -3907,7 +3907,12 @@ function getCacheKey(request, counterpartyId) {
     // its start_checkout quote was served the cached quote-leg grant (no
     // settlementOutcome) and never reached the backend. Same F-A1-07 bug class.
     request.commercePhase || "",
-    request.checkoutSessionId || ""
+    request.checkoutSessionId || "",
+    // 5.19.0: a route_config purpose claim is checked server-side against
+    // the stored rule for this method + path, so it changes the verdict.
+    request.purposeSource || "",
+    request.requestMethod || "",
+    request.requestPath || ""
   ].join("|");
 }
 function getCachedResult(request, counterpartyId) {
@@ -4081,6 +4086,11 @@ async function callVerifyAccessAPI(config, request) {
   if (requestData.buyerEmail) body.buyerEmail = requestData.buyerEmail;
   if (requestData.commerceArtifacts) body.commerceArtifacts = requestData.commerceArtifacts;
   if (requestData.attemptId) body.attemptId = requestData.attemptId;
+  if (requestData.purposeSource) body.purposeSource = requestData.purposeSource;
+  if (requestData.agentArtifacts) body.agentArtifacts = requestData.agentArtifacts;
+  if (requestData.metadata) body.metadata = requestData.metadata;
+  if (requestData.requestMethod) body.requestMethod = requestData.requestMethod;
+  if (requestData.requestPath) body.requestPath = requestData.requestPath;
   if (requestData.considerationSet) body.considerationSet = requestData.considerationSet;
   body.sdkVersion = SDK_VERSION;
   if (requestData.callerMetadata || requestData.clientIp || requestData.userAgent) {
@@ -4270,9 +4280,18 @@ async function verify(config, request, options) {
   if (!apiResponse.access?.allowed) {
     const aggregatedFailures = apiResponse.access?.failures;
     const idVerifiedFromBackend = apiResponse.verificationContext?.idVerified === true && !aggregatedFailures?.some((f) => REJECTED_IDENTITY_DIMENSIONS.has(f.dimension));
+    const denyAgent = idVerifiedFromBackend && apiResponse.agent ? {
+      astraId: apiResponse.agent.astraId,
+      name: apiResponse.agent.name,
+      trustScore: apiResponse.agent.trustScore,
+      trustLevel: getTrustLevel(apiResponse.agent.trustScore),
+      blockchainAnchored: apiResponse.agent.blockchainStatus === "anchored",
+      status: apiResponse.agent.agentStatus
+    } : void 0;
     const result2 = {
       identityVerified: idVerifiedFromBackend,
       policyAllowed: false,
+      ...denyAgent && { agent: denyAgent },
       // 3.6.0: the server now emits top-level denialReasons on every deny
       // path — prefer it verbatim; the failure-message reconstruction remains
       // as the fallback for older backends.
@@ -4418,6 +4437,9 @@ var MAX_TOTAL_BYTES = 16 * 1024;
 // src/adapters/commerce-detect.ts
 var MAX_BODY_BYTES = 64 * 1024;
 
+// src/adapters/routes-cache.ts
+var DEFAULT_ROUTES_REFRESH_MS = 5 * 60 * 1e3;
+
 // src/edge-config.ts
 var DEFAULT_EDGE_CONFIG = Object.freeze({
   version: 1,
@@ -4659,9 +4681,6 @@ var BeaconBuffer = class {
 };
 var beaconBuffer = new BeaconBuffer();
 
-// src/adapters/express.ts
-var DEFAULT_ROUTES_REFRESH_MS = 5 * 60 * 1e3;
-
 // src/adapters/nextjs.ts
 var DEFAULT_ROUTES_REFRESH_MS2 = 5 * 60 * 1e3;
 
@@ -4747,6 +4766,25 @@ var import_jose2 = require("jose");
 // src/idempotency/index.ts
 var DEFAULT_IDEMPOTENCY_TTL_MS = 24 * 60 * 60 * 1e3;
 
+// src/ucp/approval-events.ts
+var MemorySeenEvents = class {
+  constructor(max = 1e4) {
+    this.max = max;
+    this.ids = /* @__PURE__ */ new Set();
+  }
+  async has(eventId) {
+    return this.ids.has(eventId);
+  }
+  async add(eventId) {
+    if (this.ids.size >= this.max) {
+      const first = this.ids.values().next().value;
+      if (first !== void 0) this.ids.delete(first);
+    }
+    this.ids.add(eventId);
+  }
+};
+var defaultSeen = new MemorySeenEvents();
+
 // src/payments/kyapay.ts
 var import_jose4 = require("jose");
 
@@ -4786,7 +4824,9 @@ function toDecision(result) {
   if (result.identityVerified && result.policyAllowed) {
     return {
       recommendation: "ALLOW",
-      reason: result.agent?.trustScore ? `Verified (trust score ${result.agent.trustScore})` : "Verified",
+      // 5.19.0: the score is on `trustScore` for the merchant; `reason` is
+      // text a merchant may relay to the agent, so it never embeds the number.
+      reason: "Verified",
       trustScore: result.agent?.trustScore,
       sessionId: "sessionId" in result ? result.sessionId : void 0
     };

package/dist/bin/astrasync-codex-hook.js

@@ -3751,7 +3751,7 @@ function getTrustLevel(score) {
 }
 
 // src/version.ts
-var SDK_VERSION = "5.18.1";
+var SDK_VERSION = "5.19.0";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;
@@ -3906,7 +3906,12 @@ function getCacheKey(request, counterpartyId) {
     // its start_checkout quote was served the cached quote-leg grant (no
     // settlementOutcome) and never reached the backend. Same F-A1-07 bug class.
     request.commercePhase || "",
-    request.checkoutSessionId || ""
+    request.checkoutSessionId || "",
+    // 5.19.0: a route_config purpose claim is checked server-side against
+    // the stored rule for this method + path, so it changes the verdict.
+    request.purposeSource || "",
+    request.requestMethod || "",
+    request.requestPath || ""
   ].join("|");
 }
 function getCachedResult(request, counterpartyId) {
@@ -4080,6 +4085,11 @@ async function callVerifyAccessAPI(config, request) {
   if (requestData.buyerEmail) body.buyerEmail = requestData.buyerEmail;
   if (requestData.commerceArtifacts) body.commerceArtifacts = requestData.commerceArtifacts;
   if (requestData.attemptId) body.attemptId = requestData.attemptId;
+  if (requestData.purposeSource) body.purposeSource = requestData.purposeSource;
+  if (requestData.agentArtifacts) body.agentArtifacts = requestData.agentArtifacts;
+  if (requestData.metadata) body.metadata = requestData.metadata;
+  if (requestData.requestMethod) body.requestMethod = requestData.requestMethod;
+  if (requestData.requestPath) body.requestPath = requestData.requestPath;
   if (requestData.considerationSet) body.considerationSet = requestData.considerationSet;
   body.sdkVersion = SDK_VERSION;
   if (requestData.callerMetadata || requestData.clientIp || requestData.userAgent) {
@@ -4269,9 +4279,18 @@ async function verify(config, request, options) {
   if (!apiResponse.access?.allowed) {
     const aggregatedFailures = apiResponse.access?.failures;
     const idVerifiedFromBackend = apiResponse.verificationContext?.idVerified === true && !aggregatedFailures?.some((f) => REJECTED_IDENTITY_DIMENSIONS.has(f.dimension));
+    const denyAgent = idVerifiedFromBackend && apiResponse.agent ? {
+      astraId: apiResponse.agent.astraId,
+      name: apiResponse.agent.name,
+      trustScore: apiResponse.agent.trustScore,
+      trustLevel: getTrustLevel(apiResponse.agent.trustScore),
+      blockchainAnchored: apiResponse.agent.blockchainStatus === "anchored",
+      status: apiResponse.agent.agentStatus
+    } : void 0;
     const result2 = {
       identityVerified: idVerifiedFromBackend,
       policyAllowed: false,
+      ...denyAgent && { agent: denyAgent },
       // 3.6.0: the server now emits top-level denialReasons on every deny
       // path — prefer it verbatim; the failure-message reconstruction remains
       // as the fallback for older backends.
@@ -4417,6 +4436,9 @@ var MAX_TOTAL_BYTES = 16 * 1024;
 // src/adapters/commerce-detect.ts
 var MAX_BODY_BYTES = 64 * 1024;
 
+// src/adapters/routes-cache.ts
+var DEFAULT_ROUTES_REFRESH_MS = 5 * 60 * 1e3;
+
 // src/edge-config.ts
 var DEFAULT_EDGE_CONFIG = Object.freeze({
   version: 1,
@@ -4658,9 +4680,6 @@ var BeaconBuffer = class {
 };
 var beaconBuffer = new BeaconBuffer();
 
-// src/adapters/express.ts
-var DEFAULT_ROUTES_REFRESH_MS = 5 * 60 * 1e3;
-
 // src/adapters/nextjs.ts
 var DEFAULT_ROUTES_REFRESH_MS2 = 5 * 60 * 1e3;
 
@@ -4746,6 +4765,25 @@ var import_jose2 = require("jose");
 // src/idempotency/index.ts
 var DEFAULT_IDEMPOTENCY_TTL_MS = 24 * 60 * 60 * 1e3;
 
+// src/ucp/approval-events.ts
+var MemorySeenEvents = class {
+  constructor(max = 1e4) {
+    this.max = max;
+    this.ids = /* @__PURE__ */ new Set();
+  }
+  async has(eventId) {
+    return this.ids.has(eventId);
+  }
+  async add(eventId) {
+    if (this.ids.size >= this.max) {
+      const first = this.ids.values().next().value;
+      if (first !== void 0) this.ids.delete(first);
+    }
+    this.ids.add(eventId);
+  }
+};
+var defaultSeen = new MemorySeenEvents();
+
 // src/payments/kyapay.ts
 var import_jose4 = require("jose");
 
@@ -4785,7 +4823,9 @@ function toDecision(result) {
   if (result.identityVerified && result.policyAllowed) {
     return {
       recommendation: "ALLOW",
-      reason: result.agent?.trustScore ? `Verified (trust score ${result.agent.trustScore})` : "Verified",
+      // 5.19.0: the score is on `trustScore` for the merchant; `reason` is
+      // text a merchant may relay to the agent, so it never embeds the number.
+      reason: "Verified",
       trustScore: result.agent?.trustScore,
       sessionId: "sessionId" in result ? result.sessionId : void 0
     };

package/dist/bin/astrasync-guard.js

@@ -3713,7 +3713,7 @@ Policy saved to ${outputPath}`);
 };
 
 // src/version.ts
-var SDK_VERSION = "5.18.1";
+var SDK_VERSION = "5.19.0";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;
@@ -4772,7 +4772,12 @@ function getCacheKey(request2, counterpartyId) {
     // its start_checkout quote was served the cached quote-leg grant (no
     // settlementOutcome) and never reached the backend. Same F-A1-07 bug class.
     request2.commercePhase || "",
-    request2.checkoutSessionId || ""
+    request2.checkoutSessionId || "",
+    // 5.19.0: a route_config purpose claim is checked server-side against
+    // the stored rule for this method + path, so it changes the verdict.
+    request2.purposeSource || "",
+    request2.requestMethod || "",
+    request2.requestPath || ""
   ].join("|");
 }
 function getCachedResult(request2, counterpartyId) {
@@ -4946,6 +4951,11 @@ async function callVerifyAccessAPI(config, request2) {
   if (requestData.buyerEmail) body.buyerEmail = requestData.buyerEmail;
   if (requestData.commerceArtifacts) body.commerceArtifacts = requestData.commerceArtifacts;
   if (requestData.attemptId) body.attemptId = requestData.attemptId;
+  if (requestData.purposeSource) body.purposeSource = requestData.purposeSource;
+  if (requestData.agentArtifacts) body.agentArtifacts = requestData.agentArtifacts;
+  if (requestData.metadata) body.metadata = requestData.metadata;
+  if (requestData.requestMethod) body.requestMethod = requestData.requestMethod;
+  if (requestData.requestPath) body.requestPath = requestData.requestPath;
   if (requestData.considerationSet) body.considerationSet = requestData.considerationSet;
   body.sdkVersion = SDK_VERSION;
   if (requestData.callerMetadata || requestData.clientIp || requestData.userAgent) {
@@ -5135,9 +5145,18 @@ async function verify(config, request2, options) {
   if (!apiResponse.access?.allowed) {
     const aggregatedFailures = apiResponse.access?.failures;
     const idVerifiedFromBackend = apiResponse.verificationContext?.idVerified === true && !aggregatedFailures?.some((f) => REJECTED_IDENTITY_DIMENSIONS.has(f.dimension));
+    const denyAgent = idVerifiedFromBackend && apiResponse.agent ? {
+      astraId: apiResponse.agent.astraId,
+      name: apiResponse.agent.name,
+      trustScore: apiResponse.agent.trustScore,
+      trustLevel: getTrustLevel(apiResponse.agent.trustScore),
+      blockchainAnchored: apiResponse.agent.blockchainStatus === "anchored",
+      status: apiResponse.agent.agentStatus
+    } : void 0;
     const result2 = {
       identityVerified: idVerifiedFromBackend,
       policyAllowed: false,
+      ...denyAgent && { agent: denyAgent },
       // 3.6.0: the server now emits top-level denialReasons on every deny
       // path — prefer it verbatim; the failure-message reconstruction remains
       // as the fallback for older backends.
@@ -5283,6 +5302,9 @@ var MAX_TOTAL_BYTES = 16 * 1024;
 // src/adapters/commerce-detect.ts
 var MAX_BODY_BYTES = 64 * 1024;
 
+// src/adapters/routes-cache.ts
+var DEFAULT_ROUTES_REFRESH_MS = 5 * 60 * 1e3;
+
 // src/edge-config.ts
 var DEFAULT_EDGE_CONFIG = Object.freeze({
   version: 1,
@@ -5524,9 +5546,6 @@ var BeaconBuffer = class {
 };
 var beaconBuffer = new BeaconBuffer();
 
-// src/adapters/express.ts
-var DEFAULT_ROUTES_REFRESH_MS = 5 * 60 * 1e3;
-
 // src/adapters/nextjs.ts
 var DEFAULT_ROUTES_REFRESH_MS2 = 5 * 60 * 1e3;
 
@@ -5612,6 +5631,25 @@ var import_jose2 = require("jose");
 // src/idempotency/index.ts
 var DEFAULT_IDEMPOTENCY_TTL_MS = 24 * 60 * 60 * 1e3;
 
+// src/ucp/approval-events.ts
+var MemorySeenEvents = class {
+  constructor(max = 1e4) {
+    this.max = max;
+    this.ids = /* @__PURE__ */ new Set();
+  }
+  async has(eventId) {
+    return this.ids.has(eventId);
+  }
+  async add(eventId) {
+    if (this.ids.size >= this.max) {
+      const first = this.ids.values().next().value;
+      if (first !== void 0) this.ids.delete(first);
+    }
+    this.ids.add(eventId);
+  }
+};
+var defaultSeen = new MemorySeenEvents();
+
 // src/payments/kyapay.ts
 var import_jose4 = require("jose");
 
@@ -5651,7 +5689,9 @@ function toDecision(result) {
   if (result.identityVerified && result.policyAllowed) {
     return {
       recommendation: "ALLOW",
-      reason: result.agent?.trustScore ? `Verified (trust score ${result.agent.trustScore})` : "Verified",
+      // 5.19.0: the score is on `trustScore` for the merchant; `reason` is
+      // text a merchant may relay to the agent, so it never embeds the number.
+      reason: "Verified",
       trustScore: result.agent?.trustScore,
       sessionId: "sessionId" in result ? result.sessionId : void 0
     };

package/dist/bin/astrasync.js

@@ -36,7 +36,7 @@ var SDK_VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    SDK_VERSION = "5.18.1";
+    SDK_VERSION = "5.19.0";
   }
 });
 
@@ -5186,7 +5186,12 @@ function getCacheKey(request2, counterpartyId) {
     // its start_checkout quote was served the cached quote-leg grant (no
     // settlementOutcome) and never reached the backend. Same F-A1-07 bug class.
     request2.commercePhase || "",
-    request2.checkoutSessionId || ""
+    request2.checkoutSessionId || "",
+    // 5.19.0: a route_config purpose claim is checked server-side against
+    // the stored rule for this method + path, so it changes the verdict.
+    request2.purposeSource || "",
+    request2.requestMethod || "",
+    request2.requestPath || ""
   ].join("|");
 }
 function getCachedResult(request2, counterpartyId) {
@@ -5358,6 +5363,11 @@ async function callVerifyAccessAPI(config, request2) {
   if (requestData.buyerEmail) body.buyerEmail = requestData.buyerEmail;
   if (requestData.commerceArtifacts) body.commerceArtifacts = requestData.commerceArtifacts;
   if (requestData.attemptId) body.attemptId = requestData.attemptId;
+  if (requestData.purposeSource) body.purposeSource = requestData.purposeSource;
+  if (requestData.agentArtifacts) body.agentArtifacts = requestData.agentArtifacts;
+  if (requestData.metadata) body.metadata = requestData.metadata;
+  if (requestData.requestMethod) body.requestMethod = requestData.requestMethod;
+  if (requestData.requestPath) body.requestPath = requestData.requestPath;
   if (requestData.considerationSet) body.considerationSet = requestData.considerationSet;
   body.sdkVersion = SDK_VERSION;
   if (requestData.callerMetadata || requestData.clientIp || requestData.userAgent) {
@@ -5547,9 +5557,18 @@ async function verify(config, request2, options) {
   if (!apiResponse.access?.allowed) {
     const aggregatedFailures = apiResponse.access?.failures;
     const idVerifiedFromBackend = apiResponse.verificationContext?.idVerified === true && !aggregatedFailures?.some((f) => REJECTED_IDENTITY_DIMENSIONS.has(f.dimension));
+    const denyAgent = idVerifiedFromBackend && apiResponse.agent ? {
+      astraId: apiResponse.agent.astraId,
+      name: apiResponse.agent.name,
+      trustScore: apiResponse.agent.trustScore,
+      trustLevel: getTrustLevel(apiResponse.agent.trustScore),
+      blockchainAnchored: apiResponse.agent.blockchainStatus === "anchored",
+      status: apiResponse.agent.agentStatus
+    } : void 0;
     const result2 = {
       identityVerified: idVerifiedFromBackend,
       policyAllowed: false,
+      ...denyAgent && { agent: denyAgent },
       // 3.6.0: the server now emits top-level denialReasons on every deny
       // path — prefer it verbatim; the failure-message reconstruction remains
       // as the fallback for older backends.
@@ -5772,6 +5791,16 @@ var init_commerce_detect = __esm({
   }
 });
 
+// src/adapters/routes-cache.ts
+var DEFAULT_ROUTES_REFRESH_MS;
+var init_routes_cache = __esm({
+  "src/adapters/routes-cache.ts"() {
+    "use strict";
+    init_verify();
+    DEFAULT_ROUTES_REFRESH_MS = 5 * 60 * 1e3;
+  }
+});
+
 // src/transport/http.ts
 var init_http2 = __esm({
   "src/transport/http.ts"() {
@@ -6101,7 +6130,6 @@ var init_anonymous_beacon = __esm({
 });
 
 // src/adapters/express.ts
-var DEFAULT_ROUTES_REFRESH_MS;
 var init_express = __esm({
   "src/adapters/express.ts"() {
     "use strict";
@@ -6109,6 +6137,7 @@ var init_express = __esm({
     init_types2();
     init_stepup_poll();
     init_verify();
+    init_routes_cache();
     init_http2();
     init_verified_hop();
     init_http_pdlss();
@@ -6119,7 +6148,6 @@ var init_express = __esm({
     init_anonymous_beacon();
     init_failure_posture();
     init_route_pattern();
-    DEFAULT_ROUTES_REFRESH_MS = 5 * 60 * 1e3;
   }
 });
 
@@ -6460,6 +6488,7 @@ var init_mcp2 = __esm({
     init_approval_gate();
     init_stepup_poll();
     init_well_known();
+    init_routes_cache();
     init_failure_posture();
     init_mcp_server();
   }
@@ -6648,6 +6677,7 @@ var init_report_amount = __esm({
 var init_kit_shared = __esm({
   "src/ucp/kit-shared.ts"() {
     "use strict";
+    init_sign();
   }
 });
 
@@ -6667,6 +6697,41 @@ var init_checkout_kit = __esm({
     init_signatures();
     init_report_amount();
     init_kit_shared();
+    init_errors();
+    init_stepup_poll();
+  }
+});
+
+// src/webhooks.ts
+var init_webhooks = __esm({
+  "src/webhooks.ts"() {
+    "use strict";
+  }
+});
+
+// src/ucp/approval-events.ts
+var MemorySeenEvents, defaultSeen;
+var init_approval_events = __esm({
+  "src/ucp/approval-events.ts"() {
+    "use strict";
+    init_webhooks();
+    MemorySeenEvents = class {
+      constructor(max = 1e4) {
+        this.max = max;
+        this.ids = /* @__PURE__ */ new Set();
+      }
+      async has(eventId) {
+        return this.ids.has(eventId);
+      }
+      async add(eventId) {
+        if (this.ids.size >= this.max) {
+          const first = this.ids.values().next().value;
+          if (first !== void 0) this.ids.delete(first);
+        }
+        this.ids.add(eventId);
+      }
+    };
+    defaultSeen = new MemorySeenEvents();
   }
 });
 
@@ -6681,6 +6746,7 @@ var init_ucp2 = __esm({
     init_signatures();
     init_checkout_kit();
     init_jcs();
+    init_approval_events();
   }
 });
 
@@ -6742,6 +6808,8 @@ var init_checkout_kit2 = __esm({
     init_idempotency();
     init_report_amount();
     init_kit_shared();
+    init_errors();
+    init_stepup_poll();
   }
 });
 
@@ -6750,6 +6818,7 @@ var init_acp2 = __esm({
   "src/acp/index.ts"() {
     "use strict";
     init_checkout_kit2();
+    init_approval_events();
   }
 });
 
@@ -6758,6 +6827,7 @@ var init_kit_express = __esm({
   "src/adapters/kit-express.ts"() {
     "use strict";
     init_kit_shared();
+    init_approval_events();
   }
 });
 
@@ -6846,7 +6916,9 @@ function toDecision(result) {
   if (result.identityVerified && result.policyAllowed) {
     return {
       recommendation: "ALLOW",
-      reason: result.agent?.trustScore ? `Verified (trust score ${result.agent.trustScore})` : "Verified",
+      // 5.19.0: the score is on `trustScore` for the merchant; `reason` is
+      // text a merchant may relay to the agent, so it never embeds the number.
+      reason: "Verified",
       trustScore: result.agent?.trustScore,
       sessionId: "sessionId" in result ? result.sessionId : void 0
     };

package/dist/browser/background.js

@@ -3988,7 +3988,7 @@ function getTrustLevel(score) {
 }
 
 // src/version.ts
-var SDK_VERSION = "5.18.1";
+var SDK_VERSION = "5.19.0";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;
@@ -4143,7 +4143,12 @@ function getCacheKey(request, counterpartyId) {
     // its start_checkout quote was served the cached quote-leg grant (no
     // settlementOutcome) and never reached the backend. Same F-A1-07 bug class.
     request.commercePhase || "",
-    request.checkoutSessionId || ""
+    request.checkoutSessionId || "",
+    // 5.19.0: a route_config purpose claim is checked server-side against
+    // the stored rule for this method + path, so it changes the verdict.
+    request.purposeSource || "",
+    request.requestMethod || "",
+    request.requestPath || ""
   ].join("|");
 }
 function getCachedResult(request, counterpartyId) {
@@ -4317,6 +4322,11 @@ async function callVerifyAccessAPI(config, request) {
   if (requestData.buyerEmail) body.buyerEmail = requestData.buyerEmail;
   if (requestData.commerceArtifacts) body.commerceArtifacts = requestData.commerceArtifacts;
   if (requestData.attemptId) body.attemptId = requestData.attemptId;
+  if (requestData.purposeSource) body.purposeSource = requestData.purposeSource;
+  if (requestData.agentArtifacts) body.agentArtifacts = requestData.agentArtifacts;
+  if (requestData.metadata) body.metadata = requestData.metadata;
+  if (requestData.requestMethod) body.requestMethod = requestData.requestMethod;
+  if (requestData.requestPath) body.requestPath = requestData.requestPath;
   if (requestData.considerationSet) body.considerationSet = requestData.considerationSet;
   body.sdkVersion = SDK_VERSION;
   if (requestData.callerMetadata || requestData.clientIp || requestData.userAgent) {
@@ -4506,9 +4516,18 @@ async function verify(config, request, options) {
   if (!apiResponse.access?.allowed) {
     const aggregatedFailures = apiResponse.access?.failures;
     const idVerifiedFromBackend = apiResponse.verificationContext?.idVerified === true && !aggregatedFailures?.some((f) => REJECTED_IDENTITY_DIMENSIONS.has(f.dimension));
+    const denyAgent = idVerifiedFromBackend && apiResponse.agent ? {
+      astraId: apiResponse.agent.astraId,
+      name: apiResponse.agent.name,
+      trustScore: apiResponse.agent.trustScore,
+      trustLevel: getTrustLevel(apiResponse.agent.trustScore),
+      blockchainAnchored: apiResponse.agent.blockchainStatus === "anchored",
+      status: apiResponse.agent.agentStatus
+    } : void 0;
     const result2 = {
       identityVerified: idVerifiedFromBackend,
       policyAllowed: false,
+      ...denyAgent && { agent: denyAgent },
       // 3.6.0: the server now emits top-level denialReasons on every deny
       // path — prefer it verbatim; the failure-message reconstruction remains
       // as the fallback for older backends.
@@ -4654,6 +4673,9 @@ var MAX_TOTAL_BYTES = 16 * 1024;
 // src/adapters/commerce-detect.ts
 var MAX_BODY_BYTES = 64 * 1024;
 
+// src/adapters/routes-cache.ts
+var DEFAULT_ROUTES_REFRESH_MS = 5 * 60 * 1e3;
+
 // src/edge-config.ts
 var DEFAULT_EDGE_CONFIG = Object.freeze({
   version: 1,
@@ -4895,9 +4917,6 @@ var BeaconBuffer = class {
 };
 var beaconBuffer = new BeaconBuffer();
 
-// src/adapters/express.ts
-var DEFAULT_ROUTES_REFRESH_MS = 5 * 60 * 1e3;
-
 // src/adapters/nextjs.ts
 var DEFAULT_ROUTES_REFRESH_MS2 = 5 * 60 * 1e3;
 
@@ -4983,6 +5002,25 @@ var import_jose2 = require("jose");
 // src/idempotency/index.ts
 var DEFAULT_IDEMPOTENCY_TTL_MS = 24 * 60 * 60 * 1e3;
 
+// src/ucp/approval-events.ts
+var MemorySeenEvents = class {
+  constructor(max = 1e4) {
+    this.max = max;
+    this.ids = /* @__PURE__ */ new Set();
+  }
+  async has(eventId) {
+    return this.ids.has(eventId);
+  }
+  async add(eventId) {
+    if (this.ids.size >= this.max) {
+      const first = this.ids.values().next().value;
+      if (first !== void 0) this.ids.delete(first);
+    }
+    this.ids.add(eventId);
+  }
+};
+var defaultSeen = new MemorySeenEvents();
+
 // src/payments/kyapay.ts
 var import_jose4 = require("jose");
 
@@ -5022,7 +5060,9 @@ function toDecision(result) {
   if (result.identityVerified && result.policyAllowed) {
     return {
       recommendation: "ALLOW",
-      reason: result.agent?.trustScore ? `Verified (trust score ${result.agent.trustScore})` : "Verified",
+      // 5.19.0: the score is on `trustScore` for the merchant; `reason` is
+      // text a merchant may relay to the agent, so it never embeds the number.
+      reason: "Verified",
       trustScore: result.agent?.trustScore,
       sessionId: "sessionId" in result ? result.sessionId : void 0
     };