@astrasyncai/verification-gateway 5.4.2 → 5.5.0

package/dist/git-trigger/git-hooks.d.mts

@@ -1,4 +1,4 @@
-import { T as TokenGuidance, b as CounterpartyType } from '../types-Bd2O3eX1.mjs';
+import { T as TokenGuidance, b as CounterpartyType } from '../types-C-hPsi9M.mjs';
 import '../metadata-capture.mjs';
 
 /**

package/dist/git-trigger/git-hooks.d.ts

@@ -1,4 +1,4 @@
-import { T as TokenGuidance, b as CounterpartyType } from '../types-DMChboN_.js';
+import { T as TokenGuidance, b as CounterpartyType } from '../types-CKouL1Tv.js';
 import '../metadata-capture.js';
 
 /**

package/dist/index.d.mts

@@ -653,11 +653,48 @@ interface VerificationResult {
      * instrument on file (steer the user to add one via onboarding).
      */
     settlementOutcome?: SettlementOutcomeInfo;
+    /**
+     * 5.5.0 (astra-pay): interim merchant self-settlement token. Present ONLY
+     * for firstParty merchants opted into settlement_mode='self_settle' on the
+     * confirm leg — YOUR server charges with this material on the shared Stripe
+     * account and reports the outcome via `client.reportSettlement()`.
+     * MERCHANT-ONLY lane: never expose it to the agent plane, never log it,
+     * never echo it back over the bridge handoff (the bridge strips it
+     * defensively). Charge with idempotency key `voucher:<jti>` and
+     * `metadata.jti` — that lets the platform webhook auto-reconcile even if
+     * your report never arrives.
+     */
+    settlementToken?: MerchantSettlementToken;
     /** Timestamp of verification */
     verifiedAt: Date;
     /** TTL for this result (seconds) */
     cacheTtl?: number;
 }
+/**
+ * 5.5.0 (astra-pay): agent-blind settlement token for self-settling
+ * first-party merchants. Self-describing via `type`, so a Stripe Shared
+ * Payment Token can replace the raw customer/payment-method pair without a
+ * contract change.
+ */
+interface MerchantSettlementToken {
+    type: 'stripe_delegated_charge';
+    stripeCustomerId: string;
+    stripePaymentMethodId: string;
+    /** Integer minor units — money is never a float on the wire. */
+    amountMinor: number;
+    /** Upper-case ISO-4217. */
+    currency: string;
+    /** Verification session id — the report-back key. */
+    sessionId: string | null;
+    /** The pending kya_shop_order row your report resolves. */
+    orderId: string;
+    /** Settlement spine: charge with Stripe idempotency key `voucher:<jti>`
+     * and set `metadata.jti` on the PaymentIntent. */
+    jti: string;
+    statementSuffix: string | null;
+    /** Advisory charge-by bound (ISO); stuck orders are ops-swept after it. */
+    expiresAt: string;
+}
 /**
  * 5.3.0 (astra-pay): sanitized outcome of first-party charge-at-redeem
  * settlement. Carries NO voucher/instrument material — the settlement channel
@@ -668,9 +705,16 @@ interface VerificationResult {
  * approves, the platform re-drives the confirm with the SAME
  * checkoutSessionId and that re-drive carries the settling outcome
  * (one order row per session — the re-drive claims the same row).
+ *
+ * 5.5.0: OPEN union — the platform may introduce statuses (e.g.
+ * `pending_merchant` for self-settling merchants) ahead of your SDK version.
+ * Rule: treat any status you don't recognize as PENDING, never as failed.
+ * Also 5.5.0: `no_instrument` on a held/approved session is NON-terminal —
+ * the human's approval is NOT consumed; a re-drive with the same
+ * checkoutSessionId settles once a card is on file.
  */
 interface SettlementOutcomeInfo {
-    status: 'settled' | 'failed' | 'requires_action' | 'no_instrument' | 'requires_approval';
+    status: 'settled' | 'failed' | 'requires_action' | 'no_instrument' | 'requires_approval' | 'pending_merchant' | (string & {});
     /** First-party order id — the buyer sees the purchase in their AstraSync
      * dashboard orders view (no public receipt page). */
     orderId?: string;
@@ -1685,6 +1729,13 @@ declare class VerificationGatewayClient {
      * settled/failed/requires_action/no_instrument outcome (+ `orderId`), and the
      * identity/policy/`failures` fields for a denial. On any non-`confirm`/first-
      * party path `settlementOutcome` is simply absent — no money moves.
+     *
+     * 5.5.0 self-settling merchants (settlement_mode='self_settle'): the result
+     * carries `.settlementToken` instead of a completed charge. Charge on your
+     * own integration with Stripe idempotency key `voucher:<token.jti>` and
+     * `metadata: { jti: token.jti, sessionId: token.sessionId }`, then call
+     * `reportSettlement()` with the outcome. Treat any `settlementOutcome.status`
+     * you don't recognize (e.g. `pending_merchant`) as PENDING, never failed.
      */
     confirmCheckout(options: {
         astraId?: string;
@@ -1699,6 +1750,28 @@ declare class VerificationGatewayClient {
         counterpartyUrl?: string;
         counterpartyType?: string;
     }): Promise<VerificationResult>;
+    /**
+     * 5.5.0 (astra-pay): report a self-settled charge outcome back to the
+     * platform — the other half of the `settlementToken` contract. Call after
+     * your PaymentIntent reaches a terminal state so the buyer's dashboard,
+     * /orders and the agent's poll surface reconcile. Authenticated with this
+     * client's api key (must be the merchant's own). Amounts must match the
+     * order EXACTLY (integer minor units) or the report is rejected whole
+     * (409 amount_mismatch). Replays of the same terminal state are safe.
+     */
+    reportSettlement(options: {
+        sessionId: string;
+        status: 'settled' | 'declined' | 'failed';
+        amountMinor: number;
+        currency: string;
+        /** Stripe PaymentIntent id — REQUIRED when status is 'settled'. */
+        processorRef?: string;
+        failureCode?: string;
+    }): Promise<{
+        orderId: string;
+        status: string;
+        alreadySettled?: boolean;
+    }>;
     /**
      * Quick verification — checks credentials and policy in one call.
      *
@@ -4641,7 +4714,7 @@ declare function detectRuntime(userAgent: string | undefined | null): string | u
  * silently (never throwing), so this is a no-op there — which is correct:
  * in a browser the page's real UA is the honest identity.
  */
-declare const SDK_USER_AGENT = "astrasync-sdk/5.4.1";
+declare const SDK_USER_AGENT = "astrasync-sdk/5.5.0";
 declare const sdkFetch: typeof fetch;
 
 /**
@@ -4662,6 +4735,6 @@ declare const sdkFetch: typeof fetch;
  * is fine — bumping both in the release-ceremony commit keeps them
  * lockstep.
  */
-declare const SDK_VERSION = "5.4.1";
+declare const SDK_VERSION = "5.5.0";
 
-export { AgentClient, type AgentCredentials, type AgentProtocol, type AgentRecord, AstraSync, type AstraSyncConfig, type AstraSyncCredentials, AstraSyncError, type AttemptOutcome, type AttemptReport, AuthenticationError, type BuildGuidanceParams, CAPTURE_SCHEMA_VERSION, type CallerMetadata, ChallengeHandler, type CommerceArtifactsPayload, type CommerceContext, type CommercePipelineInput, type CommerceShieldProps, type ConsiderationItem, type ConsiderationSet, type CounterpartyType, DEFAULT_EDGE_CONFIG, type DynamicPlatformFingerprint, type EdgeConfig, type EdgeMode, type EdgePathRule, type EdgeVerificationDepth, type EnhancedVerificationResult, type ExpressMiddlewareOptions, type FetchEdgeConfigResult, type FetchEdgeConfigSuccess, type FiatSettlementBinding, type FrameworkConfig, type GatewayConfig, type GuidanceEnvelope, type GuidanceInfo, type HealthResponse, KYDRequiredError, MAX_HEADERS, MAX_HEADER_VALUE_BYTES, MAX_TOTAL_BYTES, MCP_VERIFIED_HOP_HEADER, MCP_VERIFIED_HOP_MAX_AGE_MS, type McpMiddlewareOptions, type ModelConfig, type NextJsMiddlewareOptions, type ObservedMetadata, type PDLSSConfig$1 as PDLSSConfig, type PDLSSDuration, type PDLSSInfo, type PDLSSLimits, type PDLSSPurpose, type PDLSSScope, type PDLSSSelfInstantiation, PLATFORM_AGENT_SIGNATURES, type PendingRegistrationResponse, type PlatformAgentVendor, type PlatformDetectionInput, type PlatformFingerprint, type PlatformSignatureDef, type PollRegistrationResult, type ProtocolTransport, RUNTIME_SIGNATURES, type RegisterOptions, type RegisterResult, RegistrationDeniedError, RegistrationExpiredError, type RegistrationResponse, RegistrationTimeoutError, type RouteAccessConfig, type RuntimeChallengeResult, type RuntimeSignature, type SDKOptions, SDK_USER_AGENT, type SanitizeHeadersResult, type SettlementArtifact, type SettlementArtifactBinding, type SettlementArtifactBindingBase, type SettlementDecision, type SettlementOutcomeInfo, type SettlementRequest, type StablecoinSettlementBinding, type StepUpApprovalInfo, type StepUpApprovalStatus, type StepUpOutcome, TRUST_LEVEL_RANGES, type TokenGuidance, type ToolGate, type ToolGateConfig, type TrustLevel, SDK_VERSION as VERSION, type VerificationInterstitialProps, type VerificationRequest, type VerificationResult, type VerifiedAgent, type VerifiedDeveloper, type VerifiedHopMarker, type VerifiedOrganization, type VerifyOptions, type VerifyResponse, type WaitForApprovalOptions, type WellKnownAgenticCommerce, _resetEdgeConfigCache, index as agent, authorizeSettlement, awaitStepUpApproval, buildGuidance, buildSdkObservedMetadata, clearCache, createMcpMiddleware, degradeToObserve, deriveConnectionFromHeaders, detectPlatformFingerprint, detectRuntime, express, extractApiKeyFormat, extractCredentials, extractMcpCredentials, extractPlatformHeaders, fetchEdgeConfig, fetchRoutes, getCachedWellKnownUrls, getEdgeConfig, getTrustLevel, getWellKnownUrls, hasCredentials, isEdgeConfig, isVerifiedHopValidFor, matchEdgePathRule, matchPlatformSignature, nextjs, parseVerifiedHop, pollStepUpStatus, prefetchWellKnown, quickVerify, recordDecision, reportAttempt, reportUnregisteredAttempt, sanitizeHeaders, sdk, sdkFetch, serializeVerifiedHop, setMcpMeta, index$1 as transport, verify };
+export { AgentClient, type AgentCredentials, type AgentProtocol, type AgentRecord, AstraSync, type AstraSyncConfig, type AstraSyncCredentials, AstraSyncError, type AttemptOutcome, type AttemptReport, AuthenticationError, type BuildGuidanceParams, CAPTURE_SCHEMA_VERSION, type CallerMetadata, ChallengeHandler, type CommerceArtifactsPayload, type CommerceContext, type CommercePipelineInput, type CommerceShieldProps, type ConsiderationItem, type ConsiderationSet, type CounterpartyType, DEFAULT_EDGE_CONFIG, type DynamicPlatformFingerprint, type EdgeConfig, type EdgeMode, type EdgePathRule, type EdgeVerificationDepth, type EnhancedVerificationResult, type ExpressMiddlewareOptions, type FetchEdgeConfigResult, type FetchEdgeConfigSuccess, type FiatSettlementBinding, type FrameworkConfig, type GatewayConfig, type GuidanceEnvelope, type GuidanceInfo, type HealthResponse, KYDRequiredError, MAX_HEADERS, MAX_HEADER_VALUE_BYTES, MAX_TOTAL_BYTES, MCP_VERIFIED_HOP_HEADER, MCP_VERIFIED_HOP_MAX_AGE_MS, type McpMiddlewareOptions, type MerchantSettlementToken, type ModelConfig, type NextJsMiddlewareOptions, type ObservedMetadata, type PDLSSConfig$1 as PDLSSConfig, type PDLSSDuration, type PDLSSInfo, type PDLSSLimits, type PDLSSPurpose, type PDLSSScope, type PDLSSSelfInstantiation, PLATFORM_AGENT_SIGNATURES, type PendingRegistrationResponse, type PlatformAgentVendor, type PlatformDetectionInput, type PlatformFingerprint, type PlatformSignatureDef, type PollRegistrationResult, type ProtocolTransport, RUNTIME_SIGNATURES, type RegisterOptions, type RegisterResult, RegistrationDeniedError, RegistrationExpiredError, type RegistrationResponse, RegistrationTimeoutError, type RouteAccessConfig, type RuntimeChallengeResult, type RuntimeSignature, type SDKOptions, SDK_USER_AGENT, type SanitizeHeadersResult, type SettlementArtifact, type SettlementArtifactBinding, type SettlementArtifactBindingBase, type SettlementDecision, type SettlementOutcomeInfo, type SettlementRequest, type StablecoinSettlementBinding, type StepUpApprovalInfo, type StepUpApprovalStatus, type StepUpOutcome, TRUST_LEVEL_RANGES, type TokenGuidance, type ToolGate, type ToolGateConfig, type TrustLevel, SDK_VERSION as VERSION, type VerificationInterstitialProps, type VerificationRequest, type VerificationResult, type VerifiedAgent, type VerifiedDeveloper, type VerifiedHopMarker, type VerifiedOrganization, type VerifyOptions, type VerifyResponse, type WaitForApprovalOptions, type WellKnownAgenticCommerce, _resetEdgeConfigCache, index as agent, authorizeSettlement, awaitStepUpApproval, buildGuidance, buildSdkObservedMetadata, clearCache, createMcpMiddleware, degradeToObserve, deriveConnectionFromHeaders, detectPlatformFingerprint, detectRuntime, express, extractApiKeyFormat, extractCredentials, extractMcpCredentials, extractPlatformHeaders, fetchEdgeConfig, fetchRoutes, getCachedWellKnownUrls, getEdgeConfig, getTrustLevel, getWellKnownUrls, hasCredentials, isEdgeConfig, isVerifiedHopValidFor, matchEdgePathRule, matchPlatformSignature, nextjs, parseVerifiedHop, pollStepUpStatus, prefetchWellKnown, quickVerify, recordDecision, reportAttempt, reportUnregisteredAttempt, sanitizeHeaders, sdk, sdkFetch, serializeVerifiedHop, setMcpMeta, index$1 as transport, verify };

package/dist/index.d.ts

@@ -653,11 +653,48 @@ interface VerificationResult {
      * instrument on file (steer the user to add one via onboarding).
      */
     settlementOutcome?: SettlementOutcomeInfo;
+    /**
+     * 5.5.0 (astra-pay): interim merchant self-settlement token. Present ONLY
+     * for firstParty merchants opted into settlement_mode='self_settle' on the
+     * confirm leg — YOUR server charges with this material on the shared Stripe
+     * account and reports the outcome via `client.reportSettlement()`.
+     * MERCHANT-ONLY lane: never expose it to the agent plane, never log it,
+     * never echo it back over the bridge handoff (the bridge strips it
+     * defensively). Charge with idempotency key `voucher:<jti>` and
+     * `metadata.jti` — that lets the platform webhook auto-reconcile even if
+     * your report never arrives.
+     */
+    settlementToken?: MerchantSettlementToken;
     /** Timestamp of verification */
     verifiedAt: Date;
     /** TTL for this result (seconds) */
     cacheTtl?: number;
 }
+/**
+ * 5.5.0 (astra-pay): agent-blind settlement token for self-settling
+ * first-party merchants. Self-describing via `type`, so a Stripe Shared
+ * Payment Token can replace the raw customer/payment-method pair without a
+ * contract change.
+ */
+interface MerchantSettlementToken {
+    type: 'stripe_delegated_charge';
+    stripeCustomerId: string;
+    stripePaymentMethodId: string;
+    /** Integer minor units — money is never a float on the wire. */
+    amountMinor: number;
+    /** Upper-case ISO-4217. */
+    currency: string;
+    /** Verification session id — the report-back key. */
+    sessionId: string | null;
+    /** The pending kya_shop_order row your report resolves. */
+    orderId: string;
+    /** Settlement spine: charge with Stripe idempotency key `voucher:<jti>`
+     * and set `metadata.jti` on the PaymentIntent. */
+    jti: string;
+    statementSuffix: string | null;
+    /** Advisory charge-by bound (ISO); stuck orders are ops-swept after it. */
+    expiresAt: string;
+}
 /**
  * 5.3.0 (astra-pay): sanitized outcome of first-party charge-at-redeem
  * settlement. Carries NO voucher/instrument material — the settlement channel
@@ -668,9 +705,16 @@ interface VerificationResult {
  * approves, the platform re-drives the confirm with the SAME
  * checkoutSessionId and that re-drive carries the settling outcome
  * (one order row per session — the re-drive claims the same row).
+ *
+ * 5.5.0: OPEN union — the platform may introduce statuses (e.g.
+ * `pending_merchant` for self-settling merchants) ahead of your SDK version.
+ * Rule: treat any status you don't recognize as PENDING, never as failed.
+ * Also 5.5.0: `no_instrument` on a held/approved session is NON-terminal —
+ * the human's approval is NOT consumed; a re-drive with the same
+ * checkoutSessionId settles once a card is on file.
  */
 interface SettlementOutcomeInfo {
-    status: 'settled' | 'failed' | 'requires_action' | 'no_instrument' | 'requires_approval';
+    status: 'settled' | 'failed' | 'requires_action' | 'no_instrument' | 'requires_approval' | 'pending_merchant' | (string & {});
     /** First-party order id — the buyer sees the purchase in their AstraSync
      * dashboard orders view (no public receipt page). */
     orderId?: string;
@@ -1685,6 +1729,13 @@ declare class VerificationGatewayClient {
      * settled/failed/requires_action/no_instrument outcome (+ `orderId`), and the
      * identity/policy/`failures` fields for a denial. On any non-`confirm`/first-
      * party path `settlementOutcome` is simply absent — no money moves.
+     *
+     * 5.5.0 self-settling merchants (settlement_mode='self_settle'): the result
+     * carries `.settlementToken` instead of a completed charge. Charge on your
+     * own integration with Stripe idempotency key `voucher:<token.jti>` and
+     * `metadata: { jti: token.jti, sessionId: token.sessionId }`, then call
+     * `reportSettlement()` with the outcome. Treat any `settlementOutcome.status`
+     * you don't recognize (e.g. `pending_merchant`) as PENDING, never failed.
      */
     confirmCheckout(options: {
         astraId?: string;
@@ -1699,6 +1750,28 @@ declare class VerificationGatewayClient {
         counterpartyUrl?: string;
         counterpartyType?: string;
     }): Promise<VerificationResult>;
+    /**
+     * 5.5.0 (astra-pay): report a self-settled charge outcome back to the
+     * platform — the other half of the `settlementToken` contract. Call after
+     * your PaymentIntent reaches a terminal state so the buyer's dashboard,
+     * /orders and the agent's poll surface reconcile. Authenticated with this
+     * client's api key (must be the merchant's own). Amounts must match the
+     * order EXACTLY (integer minor units) or the report is rejected whole
+     * (409 amount_mismatch). Replays of the same terminal state are safe.
+     */
+    reportSettlement(options: {
+        sessionId: string;
+        status: 'settled' | 'declined' | 'failed';
+        amountMinor: number;
+        currency: string;
+        /** Stripe PaymentIntent id — REQUIRED when status is 'settled'. */
+        processorRef?: string;
+        failureCode?: string;
+    }): Promise<{
+        orderId: string;
+        status: string;
+        alreadySettled?: boolean;
+    }>;
     /**
      * Quick verification — checks credentials and policy in one call.
      *
@@ -4641,7 +4714,7 @@ declare function detectRuntime(userAgent: string | undefined | null): string | u
  * silently (never throwing), so this is a no-op there — which is correct:
  * in a browser the page's real UA is the honest identity.
  */
-declare const SDK_USER_AGENT = "astrasync-sdk/5.4.1";
+declare const SDK_USER_AGENT = "astrasync-sdk/5.5.0";
 declare const sdkFetch: typeof fetch;
 
 /**
@@ -4662,6 +4735,6 @@ declare const sdkFetch: typeof fetch;
  * is fine — bumping both in the release-ceremony commit keeps them
  * lockstep.
  */
-declare const SDK_VERSION = "5.4.1";
+declare const SDK_VERSION = "5.5.0";
 
-export { AgentClient, type AgentCredentials, type AgentProtocol, type AgentRecord, AstraSync, type AstraSyncConfig, type AstraSyncCredentials, AstraSyncError, type AttemptOutcome, type AttemptReport, AuthenticationError, type BuildGuidanceParams, CAPTURE_SCHEMA_VERSION, type CallerMetadata, ChallengeHandler, type CommerceArtifactsPayload, type CommerceContext, type CommercePipelineInput, type CommerceShieldProps, type ConsiderationItem, type ConsiderationSet, type CounterpartyType, DEFAULT_EDGE_CONFIG, type DynamicPlatformFingerprint, type EdgeConfig, type EdgeMode, type EdgePathRule, type EdgeVerificationDepth, type EnhancedVerificationResult, type ExpressMiddlewareOptions, type FetchEdgeConfigResult, type FetchEdgeConfigSuccess, type FiatSettlementBinding, type FrameworkConfig, type GatewayConfig, type GuidanceEnvelope, type GuidanceInfo, type HealthResponse, KYDRequiredError, MAX_HEADERS, MAX_HEADER_VALUE_BYTES, MAX_TOTAL_BYTES, MCP_VERIFIED_HOP_HEADER, MCP_VERIFIED_HOP_MAX_AGE_MS, type McpMiddlewareOptions, type ModelConfig, type NextJsMiddlewareOptions, type ObservedMetadata, type PDLSSConfig$1 as PDLSSConfig, type PDLSSDuration, type PDLSSInfo, type PDLSSLimits, type PDLSSPurpose, type PDLSSScope, type PDLSSSelfInstantiation, PLATFORM_AGENT_SIGNATURES, type PendingRegistrationResponse, type PlatformAgentVendor, type PlatformDetectionInput, type PlatformFingerprint, type PlatformSignatureDef, type PollRegistrationResult, type ProtocolTransport, RUNTIME_SIGNATURES, type RegisterOptions, type RegisterResult, RegistrationDeniedError, RegistrationExpiredError, type RegistrationResponse, RegistrationTimeoutError, type RouteAccessConfig, type RuntimeChallengeResult, type RuntimeSignature, type SDKOptions, SDK_USER_AGENT, type SanitizeHeadersResult, type SettlementArtifact, type SettlementArtifactBinding, type SettlementArtifactBindingBase, type SettlementDecision, type SettlementOutcomeInfo, type SettlementRequest, type StablecoinSettlementBinding, type StepUpApprovalInfo, type StepUpApprovalStatus, type StepUpOutcome, TRUST_LEVEL_RANGES, type TokenGuidance, type ToolGate, type ToolGateConfig, type TrustLevel, SDK_VERSION as VERSION, type VerificationInterstitialProps, type VerificationRequest, type VerificationResult, type VerifiedAgent, type VerifiedDeveloper, type VerifiedHopMarker, type VerifiedOrganization, type VerifyOptions, type VerifyResponse, type WaitForApprovalOptions, type WellKnownAgenticCommerce, _resetEdgeConfigCache, index as agent, authorizeSettlement, awaitStepUpApproval, buildGuidance, buildSdkObservedMetadata, clearCache, createMcpMiddleware, degradeToObserve, deriveConnectionFromHeaders, detectPlatformFingerprint, detectRuntime, express, extractApiKeyFormat, extractCredentials, extractMcpCredentials, extractPlatformHeaders, fetchEdgeConfig, fetchRoutes, getCachedWellKnownUrls, getEdgeConfig, getTrustLevel, getWellKnownUrls, hasCredentials, isEdgeConfig, isVerifiedHopValidFor, matchEdgePathRule, matchPlatformSignature, nextjs, parseVerifiedHop, pollStepUpStatus, prefetchWellKnown, quickVerify, recordDecision, reportAttempt, reportUnregisteredAttempt, sanitizeHeaders, sdk, sdkFetch, serializeVerifiedHop, setMcpMeta, index$1 as transport, verify };
+export { AgentClient, type AgentCredentials, type AgentProtocol, type AgentRecord, AstraSync, type AstraSyncConfig, type AstraSyncCredentials, AstraSyncError, type AttemptOutcome, type AttemptReport, AuthenticationError, type BuildGuidanceParams, CAPTURE_SCHEMA_VERSION, type CallerMetadata, ChallengeHandler, type CommerceArtifactsPayload, type CommerceContext, type CommercePipelineInput, type CommerceShieldProps, type ConsiderationItem, type ConsiderationSet, type CounterpartyType, DEFAULT_EDGE_CONFIG, type DynamicPlatformFingerprint, type EdgeConfig, type EdgeMode, type EdgePathRule, type EdgeVerificationDepth, type EnhancedVerificationResult, type ExpressMiddlewareOptions, type FetchEdgeConfigResult, type FetchEdgeConfigSuccess, type FiatSettlementBinding, type FrameworkConfig, type GatewayConfig, type GuidanceEnvelope, type GuidanceInfo, type HealthResponse, KYDRequiredError, MAX_HEADERS, MAX_HEADER_VALUE_BYTES, MAX_TOTAL_BYTES, MCP_VERIFIED_HOP_HEADER, MCP_VERIFIED_HOP_MAX_AGE_MS, type McpMiddlewareOptions, type MerchantSettlementToken, type ModelConfig, type NextJsMiddlewareOptions, type ObservedMetadata, type PDLSSConfig$1 as PDLSSConfig, type PDLSSDuration, type PDLSSInfo, type PDLSSLimits, type PDLSSPurpose, type PDLSSScope, type PDLSSSelfInstantiation, PLATFORM_AGENT_SIGNATURES, type PendingRegistrationResponse, type PlatformAgentVendor, type PlatformDetectionInput, type PlatformFingerprint, type PlatformSignatureDef, type PollRegistrationResult, type ProtocolTransport, RUNTIME_SIGNATURES, type RegisterOptions, type RegisterResult, RegistrationDeniedError, RegistrationExpiredError, type RegistrationResponse, RegistrationTimeoutError, type RouteAccessConfig, type RuntimeChallengeResult, type RuntimeSignature, type SDKOptions, SDK_USER_AGENT, type SanitizeHeadersResult, type SettlementArtifact, type SettlementArtifactBinding, type SettlementArtifactBindingBase, type SettlementDecision, type SettlementOutcomeInfo, type SettlementRequest, type StablecoinSettlementBinding, type StepUpApprovalInfo, type StepUpApprovalStatus, type StepUpOutcome, TRUST_LEVEL_RANGES, type TokenGuidance, type ToolGate, type ToolGateConfig, type TrustLevel, SDK_VERSION as VERSION, type VerificationInterstitialProps, type VerificationRequest, type VerificationResult, type VerifiedAgent, type VerifiedDeveloper, type VerifiedHopMarker, type VerifiedOrganization, type VerifyOptions, type VerifyResponse, type WaitForApprovalOptions, type WellKnownAgenticCommerce, _resetEdgeConfigCache, index as agent, authorizeSettlement, awaitStepUpApproval, buildGuidance, buildSdkObservedMetadata, clearCache, createMcpMiddleware, degradeToObserve, deriveConnectionFromHeaders, detectPlatformFingerprint, detectRuntime, express, extractApiKeyFormat, extractCredentials, extractMcpCredentials, extractPlatformHeaders, fetchEdgeConfig, fetchRoutes, getCachedWellKnownUrls, getEdgeConfig, getTrustLevel, getWellKnownUrls, hasCredentials, isEdgeConfig, isVerifiedHopValidFor, matchEdgePathRule, matchPlatformSignature, nextjs, parseVerifiedHop, pollStepUpStatus, prefetchWellKnown, quickVerify, recordDecision, reportAttempt, reportUnregisteredAttempt, sanitizeHeaders, sdk, sdkFetch, serializeVerifiedHop, setMcpMeta, index$1 as transport, verify };

package/dist/index.js

@@ -112,7 +112,7 @@ function getTrustLevel(score) {
 }
 
 // src/version.ts
-var SDK_VERSION = "5.4.1";
+var SDK_VERSION = "5.5.0";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;
@@ -647,7 +647,10 @@ async function verify(config, request, options) {
       recommendationReasons: apiResponse.recommendationReasons,
       stepUpApproval: apiResponse.stepUpApproval,
       settlement: apiResponse.settlement,
-      settlementOutcome: apiResponse.settlementOutcome
+      settlementOutcome: apiResponse.settlementOutcome,
+      // 5.5.0 self-settlement: merchant-only material — passes through to the
+      // MERCHANT caller only (bridge callers strip it before the agent plane).
+      settlementToken: apiResponse.settlementToken
     };
     return result2;
   }
@@ -705,7 +708,8 @@ async function verify(config, request, options) {
     warningHeader: apiResponse.warningHeader,
     stepUpApproval: apiResponse.stepUpApproval,
     settlement: apiResponse.settlement,
-    settlementOutcome: apiResponse.settlementOutcome
+    settlementOutcome: apiResponse.settlementOutcome,
+    settlementToken: apiResponse.settlementToken
   };
   if (result.recommendation === "deny") {
     result.policyAllowed = false;
@@ -2737,6 +2741,13 @@ var VerificationGatewayClient = class {
    * settled/failed/requires_action/no_instrument outcome (+ `orderId`), and the
    * identity/policy/`failures` fields for a denial. On any non-`confirm`/first-
    * party path `settlementOutcome` is simply absent — no money moves.
+   *
+   * 5.5.0 self-settling merchants (settlement_mode='self_settle'): the result
+   * carries `.settlementToken` instead of a completed charge. Charge on your
+   * own integration with Stripe idempotency key `voucher:<token.jti>` and
+   * `metadata: { jti: token.jti, sessionId: token.sessionId }`, then call
+   * `reportSettlement()` with the outcome. Treat any `settlementOutcome.status`
+   * you don't recognize (e.g. `pending_merchant`) as PENDING, never failed.
    */
   async confirmCheckout(options) {
     const credentials = {
@@ -2766,6 +2777,32 @@ var VerificationGatewayClient = class {
       )
     );
   }
+  /**
+   * 5.5.0 (astra-pay): report a self-settled charge outcome back to the
+   * platform — the other half of the `settlementToken` contract. Call after
+   * your PaymentIntent reaches a terminal state so the buyer's dashboard,
+   * /orders and the agent's poll surface reconcile. Authenticated with this
+   * client's api key (must be the merchant's own). Amounts must match the
+   * order EXACTLY (integer minor units) or the report is rejected whole
+   * (409 amount_mismatch). Replays of the same terminal state are safe.
+   */
+  async reportSettlement(options) {
+    const base = this.config.apiBaseUrl.replace(/\/+$/, "");
+    const res = await sdkFetch(`${base}/merchant/settlements/report`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        // Same auth pair as every backend call the SDK makes (verify.ts).
+        ...this.config.apiKey ? { Authorization: `Bearer ${this.config.apiKey}`, "X-API-Key": this.config.apiKey } : {}
+      },
+      body: JSON.stringify(options)
+    });
+    const json = await res.json().catch(() => ({}));
+    if (!res.ok || !json.success || !json.data) {
+      throw new Error(`reportSettlement failed (${res.status}): ${json.error ?? "unknown error"}`);
+    }
+    return json.data;
+  }
   /**
    * Quick verification — checks credentials and policy in one call.
    *