@astrasyncai/verification-gateway 5.4.0 → 5.4.2

package/dist/codex/index.d.mts

@@ -1,8 +1,4 @@
-import { PlatformAdapter, AdapterConfig } from '../adapter-interface/interface.mjs';
-import { A as AgentAction, I as InterceptResult, P as PDLSSContext, V as VerificationDecision } from '../types-z_RNjHWm.mjs';
-import { AstraSyncGateway } from '../gateway/gateway.mjs';
-import '../types-CD1F9fmp.mjs';
-import '../metadata-capture.mjs';
+import { f as PlatformAdapter, A as AdapterConfig, a as AgentAction, I as InterceptResult, P as PDLSSContext, V as VerificationDecision, b as AstraSyncGateway } from '../interface-q1WrMsB1.mjs';
 
 /**
  * @astrasyncai/adapter-codex

package/dist/codex/index.d.ts

@@ -1,8 +1,4 @@
-import { PlatformAdapter, AdapterConfig } from '../adapter-interface/interface.js';
-import { A as AgentAction, I as InterceptResult, P as PDLSSContext, V as VerificationDecision } from '../types-DGh2akuh.js';
-import { AstraSyncGateway } from '../gateway/gateway.js';
-import '../types-76TB0fxW.js';
-import '../metadata-capture.js';
+import { f as PlatformAdapter, A as AdapterConfig, a as AgentAction, I as InterceptResult, P as PDLSSContext, V as VerificationDecision, b as AstraSyncGateway } from '../interface-q1WrMsB1.js';
 
 /**
  * @astrasyncai/adapter-codex

package/dist/codex/index.js

@@ -4027,7 +4027,7 @@ function getTrustLevel(score) {
 }
 
 // src/version.ts
-var SDK_VERSION = "5.4.0";
+var SDK_VERSION = "5.4.1";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;
@@ -4156,7 +4156,14 @@ function getCacheKey(request, counterpartyId) {
     request.callerMetadata?.sourceIp || "",
     request.callerMetadata?.userAgent || "",
     request.callerMetadata?.forwardedFor || "",
-    request.callerMetadata?.agentCardUrl || ""
+    request.callerMetadata?.agentCardUrl || "",
+    // UAT2 Bug B (5.4.1): the commerce phase and cart identity DO affect the
+    // backend verdict — the confirm leg is the ONLY leg that may execute
+    // first-party settlement. Without these, a confirm within the cache TTL of
+    // its start_checkout quote was served the cached quote-leg grant (no
+    // settlementOutcome) and never reached the backend. Same F-A1-07 bug class.
+    request.commercePhase || "",
+    request.checkoutSessionId || ""
   ].join("|");
 }
 function getCachedResult(request, counterpartyId) {