@astrasyncai/verification-gateway 5.4.1 → 5.4.2

package/dist/adapters/express.d.mts

@@ -1,5 +1,5 @@
 import { RequestHandler, Request } from 'express';
-import { d as VerificationResult, E as ExpressMiddlewareOptions, a as AstraSyncCredentials } from '../types-W-A326w3.mjs';
+import { d as VerificationResult, E as ExpressMiddlewareOptions, a as AstraSyncCredentials } from '../types-BU04qAAR.mjs';
 
 /**
  * AstraSync Universal Verification Gateway - Express Middleware

package/dist/adapters/express.d.ts

@@ -1,5 +1,5 @@
 import { RequestHandler, Request } from 'express';
-import { d as VerificationResult, E as ExpressMiddlewareOptions, a as AstraSyncCredentials } from '../types-W-A326w3.js';
+import { d as VerificationResult, E as ExpressMiddlewareOptions, a as AstraSyncCredentials } from '../types-BU04qAAR.js';
 
 /**
  * AstraSync Universal Verification Gateway - Express Middleware

package/dist/adapters/mcp.d.mts

@@ -1,5 +1,5 @@
 import { Request, Response, RequestHandler } from 'express';
-import { d as VerificationResult, G as GatewayConfig } from '../types-W-A326w3.mjs';
+import { d as VerificationResult, G as GatewayConfig } from '../types-BU04qAAR.mjs';
 
 /**
  * X-Astra-Verified-Hop — cross-hop verify-access dedupe marker.

package/dist/adapters/mcp.d.ts

@@ -1,5 +1,5 @@
 import { Request, Response, RequestHandler } from 'express';
-import { d as VerificationResult, G as GatewayConfig } from '../types-W-A326w3.js';
+import { d as VerificationResult, G as GatewayConfig } from '../types-BU04qAAR.js';
 
 /**
  * X-Astra-Verified-Hop — cross-hop verify-access dedupe marker.

package/dist/adapters/nextjs.d.mts

@@ -1,6 +1,6 @@
 import * as next_server from 'next/server';
 import { NextRequest } from 'next/server';
-import { N as NextJsMiddlewareOptions } from '../types-W-A326w3.mjs';
+import { N as NextJsMiddlewareOptions } from '../types-BU04qAAR.mjs';
 
 /**
  * Create Next.js middleware for agent verification.

package/dist/adapters/nextjs.d.ts

@@ -1,6 +1,6 @@
 import * as next_server from 'next/server';
 import { NextRequest } from 'next/server';
-import { N as NextJsMiddlewareOptions } from '../types-W-A326w3.js';
+import { N as NextJsMiddlewareOptions } from '../types-BU04qAAR.js';
 
 /**
  * Create Next.js middleware for agent verification.

package/dist/adapters/sdk.d.mts

@@ -1,4 +1,4 @@
-import { T as TrustLevel, S as SDKOptions, d as VerificationResult, c as VerificationRequest } from '../types-W-A326w3.mjs';
+import { T as TrustLevel, S as SDKOptions, d as VerificationResult, c as VerificationRequest } from '../types-BU04qAAR.mjs';
 
 /**
  * AstraSync Universal Verification Gateway — Trust Level helpers.

package/dist/adapters/sdk.d.ts

@@ -1,4 +1,4 @@
-import { T as TrustLevel, S as SDKOptions, d as VerificationResult, c as VerificationRequest } from '../types-W-A326w3.js';
+import { T as TrustLevel, S as SDKOptions, d as VerificationResult, c as VerificationRequest } from '../types-BU04qAAR.js';
 
 /**
  * AstraSync Universal Verification Gateway — Trust Level helpers.

package/dist/edge-config.d.mts

@@ -1,4 +1,4 @@
-import { G as GatewayConfig } from './types-DJMU5g7Z.mjs';
+import { G as GatewayConfig } from './types-Bd2O3eX1.mjs';
 import './metadata-capture.mjs';
 
 /**

package/dist/edge-config.d.ts

@@ -1,4 +1,4 @@
-import { G as GatewayConfig } from './types-D28h1384.js';
+import { G as GatewayConfig } from './types-DMChboN_.js';
 import './metadata-capture.js';
 
 /**

package/dist/edge-core/index.d.mts

@@ -1,6 +1,6 @@
 import { EdgeMode, EdgeVerificationDepth, EdgeConfig } from '../edge-config.mjs';
 import { PlatformFingerprint } from '../platform-signatures.mjs';
-import { C as CommerceArtifactsPayload, V as VerificationRequest } from '../types-DJMU5g7Z.mjs';
+import { C as CommerceArtifactsPayload, V as VerificationRequest } from '../types-Bd2O3eX1.mjs';
 import { verify } from '../verify.mjs';
 import { ObservedMetadata } from '../metadata-capture.mjs';
 

package/dist/edge-core/index.d.ts

@@ -1,6 +1,6 @@
 import { EdgeMode, EdgeVerificationDepth, EdgeConfig } from '../edge-config.js';
 import { PlatformFingerprint } from '../platform-signatures.js';
-import { C as CommerceArtifactsPayload, V as VerificationRequest } from '../types-D28h1384.js';
+import { C as CommerceArtifactsPayload, V as VerificationRequest } from '../types-DMChboN_.js';
 import { verify } from '../verify.js';
 import { ObservedMetadata } from '../metadata-capture.js';
 

package/dist/git-trigger/git-hooks.d.mts

@@ -1,4 +1,4 @@
-import { T as TokenGuidance, b as CounterpartyType } from '../types-DJMU5g7Z.mjs';
+import { T as TokenGuidance, b as CounterpartyType } from '../types-Bd2O3eX1.mjs';
 import '../metadata-capture.mjs';
 
 /**

package/dist/git-trigger/git-hooks.d.ts

@@ -1,4 +1,4 @@
-import { T as TokenGuidance, b as CounterpartyType } from '../types-D28h1384.js';
+import { T as TokenGuidance, b as CounterpartyType } from '../types-DMChboN_.js';
 import '../metadata-capture.js';
 
 /**

package/dist/index.d.mts

@@ -662,9 +662,15 @@ interface VerificationResult {
  * 5.3.0 (astra-pay): sanitized outcome of first-party charge-at-redeem
  * settlement. Carries NO voucher/instrument material — the settlement channel
  * stays merchant-only; this is the result the agent plane is allowed to see.
+ *
+ * 5.4.2: `requires_approval` — the transaction is HELD for human step-up
+ * approval. Not a failure: record the order as pending; after the human
+ * approves, the platform re-drives the confirm with the SAME
+ * checkoutSessionId and that re-drive carries the settling outcome
+ * (one order row per session — the re-drive claims the same row).
  */
 interface SettlementOutcomeInfo {
-    status: 'settled' | 'failed' | 'requires_action' | 'no_instrument';
+    status: 'settled' | 'failed' | 'requires_action' | 'no_instrument' | 'requires_approval';
     /** First-party order id — the buyer sees the purchase in their AstraSync
      * dashboard orders view (no public receipt page). */
     orderId?: string;

package/dist/index.d.ts

@@ -662,9 +662,15 @@ interface VerificationResult {
  * 5.3.0 (astra-pay): sanitized outcome of first-party charge-at-redeem
  * settlement. Carries NO voucher/instrument material — the settlement channel
  * stays merchant-only; this is the result the agent plane is allowed to see.
+ *
+ * 5.4.2: `requires_approval` — the transaction is HELD for human step-up
+ * approval. Not a failure: record the order as pending; after the human
+ * approves, the platform re-drives the confirm with the SAME
+ * checkoutSessionId and that re-drive carries the settling outcome
+ * (one order row per session — the re-drive claims the same row).
  */
 interface SettlementOutcomeInfo {
-    status: 'settled' | 'failed' | 'requires_action' | 'no_instrument';
+    status: 'settled' | 'failed' | 'requires_action' | 'no_instrument' | 'requires_approval';
     /** First-party order id — the buyer sees the purchase in their AstraSync
      * dashboard orders view (no public receipt page). */
     orderId?: string;

package/dist/{types-W-A326w3.d.mts → types-BU04qAAR.d.mts}

@@ -484,9 +484,15 @@ interface VerificationResult {
  * 5.3.0 (astra-pay): sanitized outcome of first-party charge-at-redeem
  * settlement. Carries NO voucher/instrument material — the settlement channel
  * stays merchant-only; this is the result the agent plane is allowed to see.
+ *
+ * 5.4.2: `requires_approval` — the transaction is HELD for human step-up
+ * approval. Not a failure: record the order as pending; after the human
+ * approves, the platform re-drives the confirm with the SAME
+ * checkoutSessionId and that re-drive carries the settling outcome
+ * (one order row per session — the re-drive claims the same row).
  */
 interface SettlementOutcomeInfo {
-    status: 'settled' | 'failed' | 'requires_action' | 'no_instrument';
+    status: 'settled' | 'failed' | 'requires_action' | 'no_instrument' | 'requires_approval';
     /** First-party order id — the buyer sees the purchase in their AstraSync
      * dashboard orders view (no public receipt page). */
     orderId?: string;

package/dist/{types-W-A326w3.d.ts → types-BU04qAAR.d.ts}

@@ -484,9 +484,15 @@ interface VerificationResult {
  * 5.3.0 (astra-pay): sanitized outcome of first-party charge-at-redeem
  * settlement. Carries NO voucher/instrument material — the settlement channel
  * stays merchant-only; this is the result the agent plane is allowed to see.
+ *
+ * 5.4.2: `requires_approval` — the transaction is HELD for human step-up
+ * approval. Not a failure: record the order as pending; after the human
+ * approves, the platform re-drives the confirm with the SAME
+ * checkoutSessionId and that re-drive carries the settling outcome
+ * (one order row per session — the re-drive claims the same row).
  */
 interface SettlementOutcomeInfo {
-    status: 'settled' | 'failed' | 'requires_action' | 'no_instrument';
+    status: 'settled' | 'failed' | 'requires_action' | 'no_instrument' | 'requires_approval';
     /** First-party order id — the buyer sees the purchase in their AstraSync
      * dashboard orders view (no public receipt page). */
     orderId?: string;

package/dist/{types-DJMU5g7Z.d.mts → types-Bd2O3eX1.d.mts}

@@ -434,9 +434,15 @@ interface VerificationResult {
  * 5.3.0 (astra-pay): sanitized outcome of first-party charge-at-redeem
  * settlement. Carries NO voucher/instrument material — the settlement channel
  * stays merchant-only; this is the result the agent plane is allowed to see.
+ *
+ * 5.4.2: `requires_approval` — the transaction is HELD for human step-up
+ * approval. Not a failure: record the order as pending; after the human
+ * approves, the platform re-drives the confirm with the SAME
+ * checkoutSessionId and that re-drive carries the settling outcome
+ * (one order row per session — the re-drive claims the same row).
  */
 interface SettlementOutcomeInfo {
-    status: 'settled' | 'failed' | 'requires_action' | 'no_instrument';
+    status: 'settled' | 'failed' | 'requires_action' | 'no_instrument' | 'requires_approval';
     /** First-party order id — the buyer sees the purchase in their AstraSync
      * dashboard orders view (no public receipt page). */
     orderId?: string;

package/dist/{types-D28h1384.d.ts → types-DMChboN_.d.ts}

@@ -434,9 +434,15 @@ interface VerificationResult {
  * 5.3.0 (astra-pay): sanitized outcome of first-party charge-at-redeem
  * settlement. Carries NO voucher/instrument material — the settlement channel
  * stays merchant-only; this is the result the agent plane is allowed to see.
+ *
+ * 5.4.2: `requires_approval` — the transaction is HELD for human step-up
+ * approval. Not a failure: record the order as pending; after the human
+ * approves, the platform re-drives the confirm with the SAME
+ * checkoutSessionId and that re-drive carries the settling outcome
+ * (one order row per session — the re-drive claims the same row).
  */
 interface SettlementOutcomeInfo {
-    status: 'settled' | 'failed' | 'requires_action' | 'no_instrument';
+    status: 'settled' | 'failed' | 'requires_action' | 'no_instrument' | 'requires_approval';
     /** First-party order id — the buyer sees the purchase in their AstraSync
      * dashboard orders view (no public receipt page). */
     orderId?: string;

package/dist/ui/index.d.mts

@@ -1,4 +1,4 @@
-import { V as VerificationInterstitialProps, d as VerificationResult, A as AgentCredentials, b as GuidanceInfo, T as TrustLevel } from '../types-W-A326w3.mjs';
+import { V as VerificationInterstitialProps, d as VerificationResult, A as AgentCredentials, b as GuidanceInfo, T as TrustLevel } from '../types-BU04qAAR.mjs';
 
 /**
  * AstraSync Verification Interstitial Component

package/dist/ui/index.d.ts

@@ -1,4 +1,4 @@
-import { V as VerificationInterstitialProps, d as VerificationResult, A as AgentCredentials, b as GuidanceInfo, T as TrustLevel } from '../types-W-A326w3.js';
+import { V as VerificationInterstitialProps, d as VerificationResult, A as AgentCredentials, b as GuidanceInfo, T as TrustLevel } from '../types-BU04qAAR.js';
 
 /**
  * AstraSync Verification Interstitial Component

package/dist/verify.d.mts

@@ -1,4 +1,4 @@
-import { A as AgentCredentials, G as GatewayConfig, a as AttemptReport, V as VerificationRequest, c as VerificationResult } from './types-DJMU5g7Z.mjs';
+import { A as AgentCredentials, G as GatewayConfig, a as AttemptReport, V as VerificationRequest, c as VerificationResult } from './types-Bd2O3eX1.mjs';
 import { ObservedMetadata } from './metadata-capture.mjs';
 
 /**

package/dist/verify.d.ts

@@ -1,4 +1,4 @@
-import { A as AgentCredentials, G as GatewayConfig, a as AttemptReport, V as VerificationRequest, c as VerificationResult } from './types-D28h1384.js';
+import { A as AgentCredentials, G as GatewayConfig, a as AttemptReport, V as VerificationRequest, c as VerificationResult } from './types-DMChboN_.js';
 import { ObservedMetadata } from './metadata-capture.js';
 
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrasyncai/verification-gateway",
-  "version": "5.4.1",
+  "version": "5.4.2",
   "description": "AstraSync KYA Platform SDK — counterparty verification gateway (verify incoming requests) + agent registration (register AI agents with the KYA backend).",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",