@astrasyncai/verification-gateway 5.5.0 → 5.7.0

package/dist/index.mjs

@@ -19,7 +19,7 @@ function getTrustLevel(score) {
 }
 
 // src/version.ts
-var SDK_VERSION = "5.5.0";
+var SDK_VERSION = "5.7.0";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;
@@ -382,6 +382,7 @@ async function callVerifyAccessAPI(config, request) {
   if (requestData.commercePhase) body.commercePhase = requestData.commercePhase;
   if (requestData.checkoutSessionId) body.checkoutSessionId = requestData.checkoutSessionId;
   if (requestData.checkoutItems) body.checkoutItems = requestData.checkoutItems;
+  if (requestData.buyerEmail) body.buyerEmail = requestData.buyerEmail;
   if (requestData.commerceArtifacts) body.commerceArtifacts = requestData.commerceArtifacts;
   if (requestData.attemptId) body.attemptId = requestData.attemptId;
   if (requestData.considerationSet) body.considerationSet = requestData.considerationSet;
@@ -557,7 +558,9 @@ async function verify(config, request, options) {
       settlementOutcome: apiResponse.settlementOutcome,
       // 5.5.0 self-settlement: merchant-only material — passes through to the
       // MERCHANT caller only (bridge callers strip it before the agent plane).
-      settlementToken: apiResponse.settlementToken
+      settlementToken: apiResponse.settlementToken,
+      // 5.6.0: fulfilment contact — merchant-only lane, same strip rule.
+      fulfilment: apiResponse.fulfilment
     };
     return result2;
   }
@@ -616,7 +619,9 @@ async function verify(config, request, options) {
     stepUpApproval: apiResponse.stepUpApproval,
     settlement: apiResponse.settlement,
     settlementOutcome: apiResponse.settlementOutcome,
-    settlementToken: apiResponse.settlementToken
+    settlementToken: apiResponse.settlementToken,
+    // 5.6.0: fulfilment contact — merchant-only lane, same strip rule.
+    fulfilment: apiResponse.fulfilment
   };
   if (result.recommendation === "deny") {
     result.policyAllowed = false;
@@ -2655,6 +2660,14 @@ var VerificationGatewayClient = class {
    * `metadata: { jti: token.jti, sessionId: token.sessionId }`, then call
    * `reportSettlement()` with the outcome. Treat any `settlementOutcome.status`
    * you don't recognize (e.g. `pending_merchant`) as PENDING, never failed.
+   *
+   * 5.6.0 fulfilment contact: first-party confirm results carry
+   * `.fulfilment { email, emailSource }` — the buyer's receipt/delivery
+   * email. You always get one: the platform defaults to the buyer's account
+   * email when no `buyerEmail` was passed. Store it with the pending order;
+   * fulfil against it only once the order is settled / pending_merchant. An
+   * explicit `buyerEmail` (here or on the bridge handoff body) wins over the
+   * account default.
    */
   async confirmCheckout(options) {
     const credentials = {
@@ -2674,6 +2687,7 @@ var VerificationGatewayClient = class {
           commercePhase: "confirm",
           checkoutSessionId: options.checkoutSessionId,
           checkoutItems: options.checkoutItems,
+          buyerEmail: options.buyerEmail,
           counterpartyUrl: options.counterpartyUrl,
           counterpartyType: options.counterpartyType
         },