@kya-os/checkpoint-express 1.1.2 → 1.1.3

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @kya-os/checkpoint-express
 
+## 1.1.3 — 2026-05-18
+
+Companion patch for `@kya-os/checkpoint-wasm-runtime@1.2.0`.
+
+### Changed
+
+- Session persistence and enforcement compatibility logic now consume
+  `VerifyResult.decision` plus `VerifyResult.detectionDetail`.
+
+---
+
 ## 1.1.2 — 2026-05-17
 
 **Critical rebuild.** 1.1.1 shipped with `engineVerify` bundled inline

package/dist/index.d.mts

@@ -1,7 +1,7 @@
 import { Request, RequestHandler, Response, NextFunction } from 'express';
 import { DidResolverAdapter, StatusListCacheAdapter, ReputationOracleAdapter, PolicyEvaluatorAdapter } from '@kya-os/checkpoint-wasm-runtime/adapters';
 import { EnforcementMode, VerifyResult } from '@kya-os/checkpoint-wasm-runtime/engine';
-import { DetectionResult, AgentShieldConfig } from '@kya-os/checkpoint-shared';
+import { DetectionResult, AgentShieldConfig, DetectionDetail } from '@kya-os/checkpoint-shared';
 export { DEFAULT_POLICY, ENFORCEMENT_ACTIONS, PolicyConfig, PolicyEvaluationContext, PolicyEvaluationResult, createEvaluationContext, evaluatePolicy } from '@kya-os/checkpoint-shared';
 export { PolicyMiddlewareConfig, applyPolicy, createContextFromDetection, evaluatePolicyForDetection, getPolicy, handlePolicyDecision, sendBlockedResponse, sendRedirectResponse } from './policy.mjs';
 
@@ -230,7 +230,7 @@ declare class ExpressSessionTracker {
     /**
      * Track a new session in Express response
      */
-    track(res: Response, result: DetectionResult): void;
+    track(res: Response, result: DetectionDetail): void;
     /**
      * Generate a simple ID without crypto dependency
      */

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import { Request, RequestHandler, Response, NextFunction } from 'express';
 import { DidResolverAdapter, StatusListCacheAdapter, ReputationOracleAdapter, PolicyEvaluatorAdapter } from '@kya-os/checkpoint-wasm-runtime/adapters';
 import { EnforcementMode, VerifyResult } from '@kya-os/checkpoint-wasm-runtime/engine';
-import { DetectionResult, AgentShieldConfig } from '@kya-os/checkpoint-shared';
+import { DetectionResult, AgentShieldConfig, DetectionDetail } from '@kya-os/checkpoint-shared';
 export { DEFAULT_POLICY, ENFORCEMENT_ACTIONS, PolicyConfig, PolicyEvaluationContext, PolicyEvaluationResult, createEvaluationContext, evaluatePolicy } from '@kya-os/checkpoint-shared';
 export { PolicyMiddlewareConfig, applyPolicy, createContextFromDetection, evaluatePolicyForDetection, getPolicy, handlePolicyDecision, sendBlockedResponse, sendRedirectResponse } from './policy.js';
 
@@ -230,7 +230,7 @@ declare class ExpressSessionTracker {
     /**
      * Track a new session in Express response
      */
-    track(res: Response, result: DetectionResult): void;
+    track(res: Response, result: DetectionDetail): void;
     /**
      * Generate a simple ID without crypto dependency
      */

package/dist/index.js

@@ -5369,7 +5369,10 @@ var ExpressSessionTracker = class {
    */
   track(res, result) {
     try {
-      if (!checkpointShared.shouldEnforce(result)) return;
+      const detectedName = result.detectedAgent?.name;
+      if (!result.isAgent && !result.isAiCrawler && !checkpointShared.isKnownAiCrawler(detectedName)) {
+        return;
+      }
       const session = {
         id: this.generateId(),
         agent: result.detectedAgent?.name || "unknown",

package/dist/index.mjs

@@ -1,7 +1,7 @@
 import nodeCrypto from 'crypto';
 import { verifyRequest, renderDecisionAsResponse } from '@kya-os/checkpoint-wasm-runtime/orchestrator';
 import { makeSystemClock, makePolicyEvaluator, makeReputationOracle, makeStatusListCache, makeDidResolver } from '@kya-os/checkpoint-wasm-runtime/adapters';
-import { shouldEnforce, acceptsHtml, encodeVerdictCookie, classifyResponseShape, BLOCKED_PATH, VERDICT_COOKIE_NAME } from '@kya-os/checkpoint-shared';
+import { isKnownAiCrawler, acceptsHtml, encodeVerdictCookie, classifyResponseShape, BLOCKED_PATH, VERDICT_COOKIE_NAME } from '@kya-os/checkpoint-shared';
 export { DEFAULT_POLICY, ENFORCEMENT_ACTIONS, createEvaluationContext, evaluatePolicy } from '@kya-os/checkpoint-shared';
 
 var __defProp = Object.defineProperty;
@@ -5364,7 +5364,10 @@ var ExpressSessionTracker = class {
    */
   track(res, result) {
     try {
-      if (!shouldEnforce(result)) return;
+      const detectedName = result.detectedAgent?.name;
+      if (!result.isAgent && !result.isAiCrawler && !isKnownAiCrawler(detectedName)) {
+        return;
+      }
       const session = {
         id: this.generateId(),
         agent: result.detectedAgent?.name || "unknown",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/checkpoint-express",
-  "version": "1.1.2",
+  "version": "1.1.3",
   "description": "Express.js middleware for Checkpoint — engine-backed AI agent detection and MCP-I verification",
   "keywords": [
     "express",
@@ -68,9 +68,9 @@
   },
   "sideEffects": false,
   "dependencies": {
-    "@kya-os/checkpoint": "1.0.0",
-    "@kya-os/checkpoint-shared": "1.0.0",
-    "@kya-os/checkpoint-wasm-runtime": "^1.1.2"
+    "@kya-os/checkpoint-shared": "1.1.0",
+    "@kya-os/checkpoint-wasm-runtime": "^1.2.0",
+    "@kya-os/checkpoint": "1.0.1"
   },
   "optionalDependencies": {
     "@upstash/redis": "^1.35.0"