@agent-score/commerce 1.5.1 → 1.7.0

package/dist/identity/policy.d.ts

@@ -18,7 +18,7 @@ import { DenialReason, AgentScoreCoreOptions } from '../core.js';
  * This module ships three primitives:
  *
  * 1. {@link PolicyBlock} — the typed shape.
- * 2. {@link policyToGateOptions} — translate a block into the options object the
+ * 2. {@link buildGateOptionsFromPolicy} — translate a block into the options object the
  *    per-framework `agentscoreGate(...)` accepts. Returns `null` when the policy
  *    has no enforcement (treat as "no gate; anonymous OK").
  * 3. {@link runGateWithEnforcement} — wrap a per-framework middleware in the
@@ -71,7 +71,7 @@ interface GateResult {
  * when the policy varies per resource (e.g. per product). Each adapter's gate
  * is cheap to instantiate.
  */
-declare function policyToGateOptions(policy: PolicyBlock | null | undefined, base: {
+declare function buildGateOptionsFromPolicy(policy: PolicyBlock | null | undefined, base: {
     apiKey: string;
     baseUrl?: string;
 }): AgentScoreCoreOptions | null;
@@ -111,4 +111,4 @@ declare function shippingCountryAllowed(country: string, policy: PolicyBlock | n
  */
 declare function shippingStateAllowed(state: string, country: string, policy: PolicyBlock | null | undefined): boolean;
 
-export { type EnforcementMode, type GateResult, type IdentityStatus, type PolicyBlock, policyToGateOptions, runGateWithEnforcement, shippingCountryAllowed, shippingStateAllowed };
+export { type EnforcementMode, type GateResult, type IdentityStatus, type PolicyBlock, buildGateOptionsFromPolicy, runGateWithEnforcement, shippingCountryAllowed, shippingStateAllowed };

package/dist/identity/policy.js

@@ -20,13 +20,13 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/identity/policy.ts
 var policy_exports = {};
 __export(policy_exports, {
-  policyToGateOptions: () => policyToGateOptions,
+  buildGateOptionsFromPolicy: () => buildGateOptionsFromPolicy,
   runGateWithEnforcement: () => runGateWithEnforcement,
   shippingCountryAllowed: () => shippingCountryAllowed,
   shippingStateAllowed: () => shippingStateAllowed
 });
 module.exports = __toCommonJS(policy_exports);
-function policyToGateOptions(policy, base) {
+function buildGateOptionsFromPolicy(policy, base) {
   if (!policy || !policy.enforcement) return null;
   return {
     apiKey: base.apiKey,
@@ -73,7 +73,7 @@ function shippingStateAllowed(state, country, policy) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  policyToGateOptions,
+  buildGateOptionsFromPolicy,
   runGateWithEnforcement,
   shippingCountryAllowed,
   shippingStateAllowed

package/dist/identity/policy.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/identity/policy.ts"],"sourcesContent":["/**\n * Per-product / per-tier compliance policy helpers.\n *\n * A *policy* is a small bag of fields describing what identity the merchant wants\n * verified for a given resource:\n *\n * - `enforcement`: `\"hard\"` (today's wine path — 403 on miss) or `\"soft\"` (gate\n *   denial is swallowed; the order completes with a degraded `identity_status`).\n *   `null` / absent = no gate at all.\n * - `requireKyc` / `requireSanctionsClear` / `minAge`: passed through to the\n *   per-framework `agentscoreGate(...)` factory.\n * - `allowedJurisdictions`: buyer-verified country list (`[\"US\", \"CA\", ...]`).\n * - `allowedShippingCountries` / `allowedShippingStates`: optional shipping\n *   allowlists. State list is only enforced for US shipments.\n *\n * This module ships three primitives:\n *\n * 1. {@link PolicyBlock} — the typed shape.\n * 2. {@link policyToGateOptions} — translate a block into the options object the\n *    per-framework `agentscoreGate(...)` accepts. Returns `null` when the policy\n *    has no enforcement (treat as \"no gate; anonymous OK\").\n * 3. {@link runGateWithEnforcement} — wrap a per-framework middleware in the\n *    hard/soft enforcement runner. The middleware is given an `onDenied` shim\n *    that captures the denial body and status; the runner returns a structured\n *    {@link GateResult} so the vendor decides how to surface it.\n *\n * All three are additive — vendors using `agentscoreGate(...)` directly are\n * unaffected.\n */\n\nimport type { AgentScoreCoreOptions, DenialReason } from '../core.js';\n\n/** Hard = 403 propagates; soft = swallowed + identity_status=\"unverified\". */\nexport type EnforcementMode = 'hard' | 'soft';\n\n/** Per-order trust level captured at settle time. */\nexport type IdentityStatus = 'verified' | 'unverified' | 'anonymous' | 'denied';\n\n/** Compliance fields a merchant attaches per product / per tier. All optional. */\nexport interface PolicyBlock {\n  enforcement?: EnforcementMode;\n  requireKyc?: boolean;\n  requireSanctionsClear?: boolean;\n  minAge?: number;\n  allowedJurisdictions?: readonly string[];\n  allowedShippingCountries?: readonly string[];\n  allowedShippingStates?: readonly string[];\n}\n\n/**\n * Outcome of running a gate under an enforcement mode.\n *\n * - `verified`: gate accepted; identity is fully verified for the policy.\n * - `unverified`: soft mode swallowed a gate denial; the agent had *some*\n *   identity but didn't meet the policy. Stamp this on the order so\n *   ops/analytics can tell apart soft passes from hard passes.\n * - `anonymous`: no gate ran (policy was null / no enforcement).\n * - `denied`: hard mode rejected; the caller must propagate the 403. The\n *   `denialBody` and `denialStatus` carry the original gate response so the\n *   caller can return it as-is.\n */\nexport interface GateResult {\n  status: IdentityStatus;\n  denialStatus?: number;\n  denialBody?: Record<string, unknown>;\n  denialReason?: DenialReason;\n}\n\n/**\n * Translate a {@link PolicyBlock} into the options the per-framework\n * `agentscoreGate(...)` expects. Returns `null` when the block has no\n * `enforcement` set — the caller should treat that as \"no gate; anonymous OK\".\n *\n * Use a fresh gate per request rather than constructing once at module scope\n * when the policy varies per resource (e.g. per product). Each adapter's gate\n * is cheap to instantiate.\n */\nexport function policyToGateOptions(\n  policy: PolicyBlock | null | undefined,\n  base: { apiKey: string; baseUrl?: string },\n): AgentScoreCoreOptions | null {\n  if (!policy || !policy.enforcement) return null;\n  return {\n    apiKey: base.apiKey,\n    ...(base.baseUrl !== undefined && { baseUrl: base.baseUrl }),\n    ...(policy.requireKyc !== undefined && { requireKyc: policy.requireKyc }),\n    ...(policy.requireSanctionsClear !== undefined && {\n      requireSanctionsClear: policy.requireSanctionsClear,\n    }),\n    ...(policy.minAge !== undefined && { minAge: policy.minAge }),\n    ...(policy.allowedJurisdictions !== undefined && {\n      allowedJurisdictions: [...policy.allowedJurisdictions],\n    }),\n  };\n}\n\n/**\n * Run a per-framework gate middleware respecting the enforcement mode.\n *\n * The vendor passes:\n * - `gate`: their framework's middleware (Hono `MiddlewareHandler`, Express\n *   `(req, res, next) => void`, etc.) — anything that resolves on accept and\n *   throws or returns a `Response` on deny.\n * - `runGate`: a thin adapter that calls the middleware with the framework\n *   context and returns either `{ ok: true }` (gate accepted) or\n *   `{ ok: false, status, body, reason? }` (gate denied with details).\n *\n * `runGateWithEnforcement` wraps that in the hard/soft split:\n *\n * - `gate=null` or `enforcement=null`: no gate fires; status=\"anonymous\".\n * - `enforcement=\"hard\"` + denied: status=\"denied\"; caller propagates denialStatus + denialBody.\n * - `enforcement=\"soft\"` + denied: swallow; status=\"unverified\".\n * - accepted: status=\"verified\".\n */\nexport async function runGateWithEnforcement(\n  enforcement: EnforcementMode | undefined,\n  runGate: (() => Promise<{ ok: true } | { ok: false; status: number; body: Record<string, unknown>; reason?: DenialReason }>) | null,\n): Promise<GateResult> {\n  if (!runGate || !enforcement) return { status: 'anonymous' };\n\n  const outcome = await runGate();\n  if (outcome.ok) return { status: 'verified' };\n\n  if (enforcement === 'hard') {\n    return {\n      status: 'denied',\n      denialStatus: outcome.status,\n      denialBody: outcome.body,\n      ...(outcome.reason !== undefined && { denialReason: outcome.reason }),\n    };\n  }\n  return {\n    status: 'unverified',\n    denialStatus: outcome.status,\n    denialBody: outcome.body,\n    ...(outcome.reason !== undefined && { denialReason: outcome.reason }),\n  };\n}\n\n/** NULL policy / NULL allowlist → ship anywhere. Otherwise country must be in the list. */\nexport function shippingCountryAllowed(country: string, policy: PolicyBlock | null | undefined): boolean {\n  if (!policy?.allowedShippingCountries || policy.allowedShippingCountries.length === 0) return true;\n  const allowed = new Set(policy.allowedShippingCountries.map((c) => c.toUpperCase()));\n  return allowed.has(country.toUpperCase());\n}\n\n/**\n * US-state allowlist (e.g. wine).\n *\n * Only enforced for US shipments — non-US shipments are governed by\n * {@link shippingCountryAllowed} independently.\n */\nexport function shippingStateAllowed(\n  state: string,\n  country: string,\n  policy: PolicyBlock | null | undefined,\n): boolean {\n  if (!policy?.allowedShippingStates || policy.allowedShippingStates.length === 0) return true;\n  if (country.toUpperCase() !== 'US') return true;\n  const allowed = new Set(policy.allowedShippingStates.map((s) => s.toUpperCase()));\n  return allowed.has(state.toUpperCase());\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA6EO,SAAS,oBACd,QACA,MAC8B;AAC9B,MAAI,CAAC,UAAU,CAAC,OAAO,YAAa,QAAO;AAC3C,SAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,GAAI,KAAK,YAAY,UAAa,EAAE,SAAS,KAAK,QAAQ;AAAA,IAC1D,GAAI,OAAO,eAAe,UAAa,EAAE,YAAY,OAAO,WAAW;AAAA,IACvE,GAAI,OAAO,0BAA0B,UAAa;AAAA,MAChD,uBAAuB,OAAO;AAAA,IAChC;AAAA,IACA,GAAI,OAAO,WAAW,UAAa,EAAE,QAAQ,OAAO,OAAO;AAAA,IAC3D,GAAI,OAAO,yBAAyB,UAAa;AAAA,MAC/C,sBAAsB,CAAC,GAAG,OAAO,oBAAoB;AAAA,IACvD;AAAA,EACF;AACF;AAoBA,eAAsB,uBACpB,aACA,SACqB;AACrB,MAAI,CAAC,WAAW,CAAC,YAAa,QAAO,EAAE,QAAQ,YAAY;AAE3D,QAAM,UAAU,MAAM,QAAQ;AAC9B,MAAI,QAAQ,GAAI,QAAO,EAAE,QAAQ,WAAW;AAE5C,MAAI,gBAAgB,QAAQ;AAC1B,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,MACpB,GAAI,QAAQ,WAAW,UAAa,EAAE,cAAc,QAAQ,OAAO;AAAA,IACrE;AAAA,EACF;AACA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,cAAc,QAAQ;AAAA,IACtB,YAAY,QAAQ;AAAA,IACpB,GAAI,QAAQ,WAAW,UAAa,EAAE,cAAc,QAAQ,OAAO;AAAA,EACrE;AACF;AAGO,SAAS,uBAAuB,SAAiB,QAAiD;AACvG,MAAI,CAAC,QAAQ,4BAA4B,OAAO,yBAAyB,WAAW,EAAG,QAAO;AAC9F,QAAM,UAAU,IAAI,IAAI,OAAO,yBAAyB,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AACnF,SAAO,QAAQ,IAAI,QAAQ,YAAY,CAAC;AAC1C;AAQO,SAAS,qBACd,OACA,SACA,QACS;AACT,MAAI,CAAC,QAAQ,yBAAyB,OAAO,sBAAsB,WAAW,EAAG,QAAO;AACxF,MAAI,QAAQ,YAAY,MAAM,KAAM,QAAO;AAC3C,QAAM,UAAU,IAAI,IAAI,OAAO,sBAAsB,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAChF,SAAO,QAAQ,IAAI,MAAM,YAAY,CAAC;AACxC;","names":[]}
+{"version":3,"sources":["../../src/identity/policy.ts"],"sourcesContent":["/**\n * Per-product / per-tier compliance policy helpers.\n *\n * A *policy* is a small bag of fields describing what identity the merchant wants\n * verified for a given resource:\n *\n * - `enforcement`: `\"hard\"` (today's wine path — 403 on miss) or `\"soft\"` (gate\n *   denial is swallowed; the order completes with a degraded `identity_status`).\n *   `null` / absent = no gate at all.\n * - `requireKyc` / `requireSanctionsClear` / `minAge`: passed through to the\n *   per-framework `agentscoreGate(...)` factory.\n * - `allowedJurisdictions`: buyer-verified country list (`[\"US\", \"CA\", ...]`).\n * - `allowedShippingCountries` / `allowedShippingStates`: optional shipping\n *   allowlists. State list is only enforced for US shipments.\n *\n * This module ships three primitives:\n *\n * 1. {@link PolicyBlock} — the typed shape.\n * 2. {@link buildGateOptionsFromPolicy} — translate a block into the options object the\n *    per-framework `agentscoreGate(...)` accepts. Returns `null` when the policy\n *    has no enforcement (treat as \"no gate; anonymous OK\").\n * 3. {@link runGateWithEnforcement} — wrap a per-framework middleware in the\n *    hard/soft enforcement runner. The middleware is given an `onDenied` shim\n *    that captures the denial body and status; the runner returns a structured\n *    {@link GateResult} so the vendor decides how to surface it.\n *\n * All three are additive — vendors using `agentscoreGate(...)` directly are\n * unaffected.\n */\n\nimport type { AgentScoreCoreOptions, DenialReason } from '../core.js';\n\n/** Hard = 403 propagates; soft = swallowed + identity_status=\"unverified\". */\nexport type EnforcementMode = 'hard' | 'soft';\n\n/** Per-order trust level captured at settle time. */\nexport type IdentityStatus = 'verified' | 'unverified' | 'anonymous' | 'denied';\n\n/** Compliance fields a merchant attaches per product / per tier. All optional. */\nexport interface PolicyBlock {\n  enforcement?: EnforcementMode;\n  requireKyc?: boolean;\n  requireSanctionsClear?: boolean;\n  minAge?: number;\n  allowedJurisdictions?: readonly string[];\n  allowedShippingCountries?: readonly string[];\n  allowedShippingStates?: readonly string[];\n}\n\n/**\n * Outcome of running a gate under an enforcement mode.\n *\n * - `verified`: gate accepted; identity is fully verified for the policy.\n * - `unverified`: soft mode swallowed a gate denial; the agent had *some*\n *   identity but didn't meet the policy. Stamp this on the order so\n *   ops/analytics can tell apart soft passes from hard passes.\n * - `anonymous`: no gate ran (policy was null / no enforcement).\n * - `denied`: hard mode rejected; the caller must propagate the 403. The\n *   `denialBody` and `denialStatus` carry the original gate response so the\n *   caller can return it as-is.\n */\nexport interface GateResult {\n  status: IdentityStatus;\n  denialStatus?: number;\n  denialBody?: Record<string, unknown>;\n  denialReason?: DenialReason;\n}\n\n/**\n * Translate a {@link PolicyBlock} into the options the per-framework\n * `agentscoreGate(...)` expects. Returns `null` when the block has no\n * `enforcement` set — the caller should treat that as \"no gate; anonymous OK\".\n *\n * Use a fresh gate per request rather than constructing once at module scope\n * when the policy varies per resource (e.g. per product). Each adapter's gate\n * is cheap to instantiate.\n */\nexport function buildGateOptionsFromPolicy(\n  policy: PolicyBlock | null | undefined,\n  base: { apiKey: string; baseUrl?: string },\n): AgentScoreCoreOptions | null {\n  if (!policy || !policy.enforcement) return null;\n  return {\n    apiKey: base.apiKey,\n    ...(base.baseUrl !== undefined && { baseUrl: base.baseUrl }),\n    ...(policy.requireKyc !== undefined && { requireKyc: policy.requireKyc }),\n    ...(policy.requireSanctionsClear !== undefined && {\n      requireSanctionsClear: policy.requireSanctionsClear,\n    }),\n    ...(policy.minAge !== undefined && { minAge: policy.minAge }),\n    ...(policy.allowedJurisdictions !== undefined && {\n      allowedJurisdictions: [...policy.allowedJurisdictions],\n    }),\n  };\n}\n\n/**\n * Run a per-framework gate middleware respecting the enforcement mode.\n *\n * The vendor passes:\n * - `gate`: their framework's middleware (Hono `MiddlewareHandler`, Express\n *   `(req, res, next) => void`, etc.) — anything that resolves on accept and\n *   throws or returns a `Response` on deny.\n * - `runGate`: a thin adapter that calls the middleware with the framework\n *   context and returns either `{ ok: true }` (gate accepted) or\n *   `{ ok: false, status, body, reason? }` (gate denied with details).\n *\n * `runGateWithEnforcement` wraps that in the hard/soft split:\n *\n * - `gate=null` or `enforcement=null`: no gate fires; status=\"anonymous\".\n * - `enforcement=\"hard\"` + denied: status=\"denied\"; caller propagates denialStatus + denialBody.\n * - `enforcement=\"soft\"` + denied: swallow; status=\"unverified\".\n * - accepted: status=\"verified\".\n */\nexport async function runGateWithEnforcement(\n  enforcement: EnforcementMode | undefined,\n  runGate: (() => Promise<{ ok: true } | { ok: false; status: number; body: Record<string, unknown>; reason?: DenialReason }>) | null,\n): Promise<GateResult> {\n  if (!runGate || !enforcement) return { status: 'anonymous' };\n\n  const outcome = await runGate();\n  if (outcome.ok) return { status: 'verified' };\n\n  if (enforcement === 'hard') {\n    return {\n      status: 'denied',\n      denialStatus: outcome.status,\n      denialBody: outcome.body,\n      ...(outcome.reason !== undefined && { denialReason: outcome.reason }),\n    };\n  }\n  return {\n    status: 'unverified',\n    denialStatus: outcome.status,\n    denialBody: outcome.body,\n    ...(outcome.reason !== undefined && { denialReason: outcome.reason }),\n  };\n}\n\n/** NULL policy / NULL allowlist → ship anywhere. Otherwise country must be in the list. */\nexport function shippingCountryAllowed(country: string, policy: PolicyBlock | null | undefined): boolean {\n  if (!policy?.allowedShippingCountries || policy.allowedShippingCountries.length === 0) return true;\n  const allowed = new Set(policy.allowedShippingCountries.map((c) => c.toUpperCase()));\n  return allowed.has(country.toUpperCase());\n}\n\n/**\n * US-state allowlist (e.g. wine).\n *\n * Only enforced for US shipments — non-US shipments are governed by\n * {@link shippingCountryAllowed} independently.\n */\nexport function shippingStateAllowed(\n  state: string,\n  country: string,\n  policy: PolicyBlock | null | undefined,\n): boolean {\n  if (!policy?.allowedShippingStates || policy.allowedShippingStates.length === 0) return true;\n  if (country.toUpperCase() !== 'US') return true;\n  const allowed = new Set(policy.allowedShippingStates.map((s) => s.toUpperCase()));\n  return allowed.has(state.toUpperCase());\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA6EO,SAAS,2BACd,QACA,MAC8B;AAC9B,MAAI,CAAC,UAAU,CAAC,OAAO,YAAa,QAAO;AAC3C,SAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,GAAI,KAAK,YAAY,UAAa,EAAE,SAAS,KAAK,QAAQ;AAAA,IAC1D,GAAI,OAAO,eAAe,UAAa,EAAE,YAAY,OAAO,WAAW;AAAA,IACvE,GAAI,OAAO,0BAA0B,UAAa;AAAA,MAChD,uBAAuB,OAAO;AAAA,IAChC;AAAA,IACA,GAAI,OAAO,WAAW,UAAa,EAAE,QAAQ,OAAO,OAAO;AAAA,IAC3D,GAAI,OAAO,yBAAyB,UAAa;AAAA,MAC/C,sBAAsB,CAAC,GAAG,OAAO,oBAAoB;AAAA,IACvD;AAAA,EACF;AACF;AAoBA,eAAsB,uBACpB,aACA,SACqB;AACrB,MAAI,CAAC,WAAW,CAAC,YAAa,QAAO,EAAE,QAAQ,YAAY;AAE3D,QAAM,UAAU,MAAM,QAAQ;AAC9B,MAAI,QAAQ,GAAI,QAAO,EAAE,QAAQ,WAAW;AAE5C,MAAI,gBAAgB,QAAQ;AAC1B,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,MACpB,GAAI,QAAQ,WAAW,UAAa,EAAE,cAAc,QAAQ,OAAO;AAAA,IACrE;AAAA,EACF;AACA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,cAAc,QAAQ;AAAA,IACtB,YAAY,QAAQ;AAAA,IACpB,GAAI,QAAQ,WAAW,UAAa,EAAE,cAAc,QAAQ,OAAO;AAAA,EACrE;AACF;AAGO,SAAS,uBAAuB,SAAiB,QAAiD;AACvG,MAAI,CAAC,QAAQ,4BAA4B,OAAO,yBAAyB,WAAW,EAAG,QAAO;AAC9F,QAAM,UAAU,IAAI,IAAI,OAAO,yBAAyB,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AACnF,SAAO,QAAQ,IAAI,QAAQ,YAAY,CAAC;AAC1C;AAQO,SAAS,qBACd,OACA,SACA,QACS;AACT,MAAI,CAAC,QAAQ,yBAAyB,OAAO,sBAAsB,WAAW,EAAG,QAAO;AACxF,MAAI,QAAQ,YAAY,MAAM,KAAM,QAAO;AAC3C,QAAM,UAAU,IAAI,IAAI,OAAO,sBAAsB,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAChF,SAAO,QAAQ,IAAI,MAAM,YAAY,CAAC;AACxC;","names":[]}

package/dist/identity/policy.mjs

@@ -1,5 +1,5 @@
 // src/identity/policy.ts
-function policyToGateOptions(policy, base) {
+function buildGateOptionsFromPolicy(policy, base) {
   if (!policy || !policy.enforcement) return null;
   return {
     apiKey: base.apiKey,
@@ -45,7 +45,7 @@ function shippingStateAllowed(state, country, policy) {
   return allowed.has(state.toUpperCase());
 }
 export {
-  policyToGateOptions,
+  buildGateOptionsFromPolicy,
   runGateWithEnforcement,
   shippingCountryAllowed,
   shippingStateAllowed

package/dist/identity/policy.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/identity/policy.ts"],"sourcesContent":["/**\n * Per-product / per-tier compliance policy helpers.\n *\n * A *policy* is a small bag of fields describing what identity the merchant wants\n * verified for a given resource:\n *\n * - `enforcement`: `\"hard\"` (today's wine path — 403 on miss) or `\"soft\"` (gate\n *   denial is swallowed; the order completes with a degraded `identity_status`).\n *   `null` / absent = no gate at all.\n * - `requireKyc` / `requireSanctionsClear` / `minAge`: passed through to the\n *   per-framework `agentscoreGate(...)` factory.\n * - `allowedJurisdictions`: buyer-verified country list (`[\"US\", \"CA\", ...]`).\n * - `allowedShippingCountries` / `allowedShippingStates`: optional shipping\n *   allowlists. State list is only enforced for US shipments.\n *\n * This module ships three primitives:\n *\n * 1. {@link PolicyBlock} — the typed shape.\n * 2. {@link policyToGateOptions} — translate a block into the options object the\n *    per-framework `agentscoreGate(...)` accepts. Returns `null` when the policy\n *    has no enforcement (treat as \"no gate; anonymous OK\").\n * 3. {@link runGateWithEnforcement} — wrap a per-framework middleware in the\n *    hard/soft enforcement runner. The middleware is given an `onDenied` shim\n *    that captures the denial body and status; the runner returns a structured\n *    {@link GateResult} so the vendor decides how to surface it.\n *\n * All three are additive — vendors using `agentscoreGate(...)` directly are\n * unaffected.\n */\n\nimport type { AgentScoreCoreOptions, DenialReason } from '../core.js';\n\n/** Hard = 403 propagates; soft = swallowed + identity_status=\"unverified\". */\nexport type EnforcementMode = 'hard' | 'soft';\n\n/** Per-order trust level captured at settle time. */\nexport type IdentityStatus = 'verified' | 'unverified' | 'anonymous' | 'denied';\n\n/** Compliance fields a merchant attaches per product / per tier. All optional. */\nexport interface PolicyBlock {\n  enforcement?: EnforcementMode;\n  requireKyc?: boolean;\n  requireSanctionsClear?: boolean;\n  minAge?: number;\n  allowedJurisdictions?: readonly string[];\n  allowedShippingCountries?: readonly string[];\n  allowedShippingStates?: readonly string[];\n}\n\n/**\n * Outcome of running a gate under an enforcement mode.\n *\n * - `verified`: gate accepted; identity is fully verified for the policy.\n * - `unverified`: soft mode swallowed a gate denial; the agent had *some*\n *   identity but didn't meet the policy. Stamp this on the order so\n *   ops/analytics can tell apart soft passes from hard passes.\n * - `anonymous`: no gate ran (policy was null / no enforcement).\n * - `denied`: hard mode rejected; the caller must propagate the 403. The\n *   `denialBody` and `denialStatus` carry the original gate response so the\n *   caller can return it as-is.\n */\nexport interface GateResult {\n  status: IdentityStatus;\n  denialStatus?: number;\n  denialBody?: Record<string, unknown>;\n  denialReason?: DenialReason;\n}\n\n/**\n * Translate a {@link PolicyBlock} into the options the per-framework\n * `agentscoreGate(...)` expects. Returns `null` when the block has no\n * `enforcement` set — the caller should treat that as \"no gate; anonymous OK\".\n *\n * Use a fresh gate per request rather than constructing once at module scope\n * when the policy varies per resource (e.g. per product). Each adapter's gate\n * is cheap to instantiate.\n */\nexport function policyToGateOptions(\n  policy: PolicyBlock | null | undefined,\n  base: { apiKey: string; baseUrl?: string },\n): AgentScoreCoreOptions | null {\n  if (!policy || !policy.enforcement) return null;\n  return {\n    apiKey: base.apiKey,\n    ...(base.baseUrl !== undefined && { baseUrl: base.baseUrl }),\n    ...(policy.requireKyc !== undefined && { requireKyc: policy.requireKyc }),\n    ...(policy.requireSanctionsClear !== undefined && {\n      requireSanctionsClear: policy.requireSanctionsClear,\n    }),\n    ...(policy.minAge !== undefined && { minAge: policy.minAge }),\n    ...(policy.allowedJurisdictions !== undefined && {\n      allowedJurisdictions: [...policy.allowedJurisdictions],\n    }),\n  };\n}\n\n/**\n * Run a per-framework gate middleware respecting the enforcement mode.\n *\n * The vendor passes:\n * - `gate`: their framework's middleware (Hono `MiddlewareHandler`, Express\n *   `(req, res, next) => void`, etc.) — anything that resolves on accept and\n *   throws or returns a `Response` on deny.\n * - `runGate`: a thin adapter that calls the middleware with the framework\n *   context and returns either `{ ok: true }` (gate accepted) or\n *   `{ ok: false, status, body, reason? }` (gate denied with details).\n *\n * `runGateWithEnforcement` wraps that in the hard/soft split:\n *\n * - `gate=null` or `enforcement=null`: no gate fires; status=\"anonymous\".\n * - `enforcement=\"hard\"` + denied: status=\"denied\"; caller propagates denialStatus + denialBody.\n * - `enforcement=\"soft\"` + denied: swallow; status=\"unverified\".\n * - accepted: status=\"verified\".\n */\nexport async function runGateWithEnforcement(\n  enforcement: EnforcementMode | undefined,\n  runGate: (() => Promise<{ ok: true } | { ok: false; status: number; body: Record<string, unknown>; reason?: DenialReason }>) | null,\n): Promise<GateResult> {\n  if (!runGate || !enforcement) return { status: 'anonymous' };\n\n  const outcome = await runGate();\n  if (outcome.ok) return { status: 'verified' };\n\n  if (enforcement === 'hard') {\n    return {\n      status: 'denied',\n      denialStatus: outcome.status,\n      denialBody: outcome.body,\n      ...(outcome.reason !== undefined && { denialReason: outcome.reason }),\n    };\n  }\n  return {\n    status: 'unverified',\n    denialStatus: outcome.status,\n    denialBody: outcome.body,\n    ...(outcome.reason !== undefined && { denialReason: outcome.reason }),\n  };\n}\n\n/** NULL policy / NULL allowlist → ship anywhere. Otherwise country must be in the list. */\nexport function shippingCountryAllowed(country: string, policy: PolicyBlock | null | undefined): boolean {\n  if (!policy?.allowedShippingCountries || policy.allowedShippingCountries.length === 0) return true;\n  const allowed = new Set(policy.allowedShippingCountries.map((c) => c.toUpperCase()));\n  return allowed.has(country.toUpperCase());\n}\n\n/**\n * US-state allowlist (e.g. wine).\n *\n * Only enforced for US shipments — non-US shipments are governed by\n * {@link shippingCountryAllowed} independently.\n */\nexport function shippingStateAllowed(\n  state: string,\n  country: string,\n  policy: PolicyBlock | null | undefined,\n): boolean {\n  if (!policy?.allowedShippingStates || policy.allowedShippingStates.length === 0) return true;\n  if (country.toUpperCase() !== 'US') return true;\n  const allowed = new Set(policy.allowedShippingStates.map((s) => s.toUpperCase()));\n  return allowed.has(state.toUpperCase());\n}\n"],"mappings":";AA6EO,SAAS,oBACd,QACA,MAC8B;AAC9B,MAAI,CAAC,UAAU,CAAC,OAAO,YAAa,QAAO;AAC3C,SAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,GAAI,KAAK,YAAY,UAAa,EAAE,SAAS,KAAK,QAAQ;AAAA,IAC1D,GAAI,OAAO,eAAe,UAAa,EAAE,YAAY,OAAO,WAAW;AAAA,IACvE,GAAI,OAAO,0BAA0B,UAAa;AAAA,MAChD,uBAAuB,OAAO;AAAA,IAChC;AAAA,IACA,GAAI,OAAO,WAAW,UAAa,EAAE,QAAQ,OAAO,OAAO;AAAA,IAC3D,GAAI,OAAO,yBAAyB,UAAa;AAAA,MAC/C,sBAAsB,CAAC,GAAG,OAAO,oBAAoB;AAAA,IACvD;AAAA,EACF;AACF;AAoBA,eAAsB,uBACpB,aACA,SACqB;AACrB,MAAI,CAAC,WAAW,CAAC,YAAa,QAAO,EAAE,QAAQ,YAAY;AAE3D,QAAM,UAAU,MAAM,QAAQ;AAC9B,MAAI,QAAQ,GAAI,QAAO,EAAE,QAAQ,WAAW;AAE5C,MAAI,gBAAgB,QAAQ;AAC1B,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,MACpB,GAAI,QAAQ,WAAW,UAAa,EAAE,cAAc,QAAQ,OAAO;AAAA,IACrE;AAAA,EACF;AACA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,cAAc,QAAQ;AAAA,IACtB,YAAY,QAAQ;AAAA,IACpB,GAAI,QAAQ,WAAW,UAAa,EAAE,cAAc,QAAQ,OAAO;AAAA,EACrE;AACF;AAGO,SAAS,uBAAuB,SAAiB,QAAiD;AACvG,MAAI,CAAC,QAAQ,4BAA4B,OAAO,yBAAyB,WAAW,EAAG,QAAO;AAC9F,QAAM,UAAU,IAAI,IAAI,OAAO,yBAAyB,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AACnF,SAAO,QAAQ,IAAI,QAAQ,YAAY,CAAC;AAC1C;AAQO,SAAS,qBACd,OACA,SACA,QACS;AACT,MAAI,CAAC,QAAQ,yBAAyB,OAAO,sBAAsB,WAAW,EAAG,QAAO;AACxF,MAAI,QAAQ,YAAY,MAAM,KAAM,QAAO;AAC3C,QAAM,UAAU,IAAI,IAAI,OAAO,sBAAsB,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAChF,SAAO,QAAQ,IAAI,MAAM,YAAY,CAAC;AACxC;","names":[]}
+{"version":3,"sources":["../../src/identity/policy.ts"],"sourcesContent":["/**\n * Per-product / per-tier compliance policy helpers.\n *\n * A *policy* is a small bag of fields describing what identity the merchant wants\n * verified for a given resource:\n *\n * - `enforcement`: `\"hard\"` (today's wine path — 403 on miss) or `\"soft\"` (gate\n *   denial is swallowed; the order completes with a degraded `identity_status`).\n *   `null` / absent = no gate at all.\n * - `requireKyc` / `requireSanctionsClear` / `minAge`: passed through to the\n *   per-framework `agentscoreGate(...)` factory.\n * - `allowedJurisdictions`: buyer-verified country list (`[\"US\", \"CA\", ...]`).\n * - `allowedShippingCountries` / `allowedShippingStates`: optional shipping\n *   allowlists. State list is only enforced for US shipments.\n *\n * This module ships three primitives:\n *\n * 1. {@link PolicyBlock} — the typed shape.\n * 2. {@link buildGateOptionsFromPolicy} — translate a block into the options object the\n *    per-framework `agentscoreGate(...)` accepts. Returns `null` when the policy\n *    has no enforcement (treat as \"no gate; anonymous OK\").\n * 3. {@link runGateWithEnforcement} — wrap a per-framework middleware in the\n *    hard/soft enforcement runner. The middleware is given an `onDenied` shim\n *    that captures the denial body and status; the runner returns a structured\n *    {@link GateResult} so the vendor decides how to surface it.\n *\n * All three are additive — vendors using `agentscoreGate(...)` directly are\n * unaffected.\n */\n\nimport type { AgentScoreCoreOptions, DenialReason } from '../core.js';\n\n/** Hard = 403 propagates; soft = swallowed + identity_status=\"unverified\". */\nexport type EnforcementMode = 'hard' | 'soft';\n\n/** Per-order trust level captured at settle time. */\nexport type IdentityStatus = 'verified' | 'unverified' | 'anonymous' | 'denied';\n\n/** Compliance fields a merchant attaches per product / per tier. All optional. */\nexport interface PolicyBlock {\n  enforcement?: EnforcementMode;\n  requireKyc?: boolean;\n  requireSanctionsClear?: boolean;\n  minAge?: number;\n  allowedJurisdictions?: readonly string[];\n  allowedShippingCountries?: readonly string[];\n  allowedShippingStates?: readonly string[];\n}\n\n/**\n * Outcome of running a gate under an enforcement mode.\n *\n * - `verified`: gate accepted; identity is fully verified for the policy.\n * - `unverified`: soft mode swallowed a gate denial; the agent had *some*\n *   identity but didn't meet the policy. Stamp this on the order so\n *   ops/analytics can tell apart soft passes from hard passes.\n * - `anonymous`: no gate ran (policy was null / no enforcement).\n * - `denied`: hard mode rejected; the caller must propagate the 403. The\n *   `denialBody` and `denialStatus` carry the original gate response so the\n *   caller can return it as-is.\n */\nexport interface GateResult {\n  status: IdentityStatus;\n  denialStatus?: number;\n  denialBody?: Record<string, unknown>;\n  denialReason?: DenialReason;\n}\n\n/**\n * Translate a {@link PolicyBlock} into the options the per-framework\n * `agentscoreGate(...)` expects. Returns `null` when the block has no\n * `enforcement` set — the caller should treat that as \"no gate; anonymous OK\".\n *\n * Use a fresh gate per request rather than constructing once at module scope\n * when the policy varies per resource (e.g. per product). Each adapter's gate\n * is cheap to instantiate.\n */\nexport function buildGateOptionsFromPolicy(\n  policy: PolicyBlock | null | undefined,\n  base: { apiKey: string; baseUrl?: string },\n): AgentScoreCoreOptions | null {\n  if (!policy || !policy.enforcement) return null;\n  return {\n    apiKey: base.apiKey,\n    ...(base.baseUrl !== undefined && { baseUrl: base.baseUrl }),\n    ...(policy.requireKyc !== undefined && { requireKyc: policy.requireKyc }),\n    ...(policy.requireSanctionsClear !== undefined && {\n      requireSanctionsClear: policy.requireSanctionsClear,\n    }),\n    ...(policy.minAge !== undefined && { minAge: policy.minAge }),\n    ...(policy.allowedJurisdictions !== undefined && {\n      allowedJurisdictions: [...policy.allowedJurisdictions],\n    }),\n  };\n}\n\n/**\n * Run a per-framework gate middleware respecting the enforcement mode.\n *\n * The vendor passes:\n * - `gate`: their framework's middleware (Hono `MiddlewareHandler`, Express\n *   `(req, res, next) => void`, etc.) — anything that resolves on accept and\n *   throws or returns a `Response` on deny.\n * - `runGate`: a thin adapter that calls the middleware with the framework\n *   context and returns either `{ ok: true }` (gate accepted) or\n *   `{ ok: false, status, body, reason? }` (gate denied with details).\n *\n * `runGateWithEnforcement` wraps that in the hard/soft split:\n *\n * - `gate=null` or `enforcement=null`: no gate fires; status=\"anonymous\".\n * - `enforcement=\"hard\"` + denied: status=\"denied\"; caller propagates denialStatus + denialBody.\n * - `enforcement=\"soft\"` + denied: swallow; status=\"unverified\".\n * - accepted: status=\"verified\".\n */\nexport async function runGateWithEnforcement(\n  enforcement: EnforcementMode | undefined,\n  runGate: (() => Promise<{ ok: true } | { ok: false; status: number; body: Record<string, unknown>; reason?: DenialReason }>) | null,\n): Promise<GateResult> {\n  if (!runGate || !enforcement) return { status: 'anonymous' };\n\n  const outcome = await runGate();\n  if (outcome.ok) return { status: 'verified' };\n\n  if (enforcement === 'hard') {\n    return {\n      status: 'denied',\n      denialStatus: outcome.status,\n      denialBody: outcome.body,\n      ...(outcome.reason !== undefined && { denialReason: outcome.reason }),\n    };\n  }\n  return {\n    status: 'unverified',\n    denialStatus: outcome.status,\n    denialBody: outcome.body,\n    ...(outcome.reason !== undefined && { denialReason: outcome.reason }),\n  };\n}\n\n/** NULL policy / NULL allowlist → ship anywhere. Otherwise country must be in the list. */\nexport function shippingCountryAllowed(country: string, policy: PolicyBlock | null | undefined): boolean {\n  if (!policy?.allowedShippingCountries || policy.allowedShippingCountries.length === 0) return true;\n  const allowed = new Set(policy.allowedShippingCountries.map((c) => c.toUpperCase()));\n  return allowed.has(country.toUpperCase());\n}\n\n/**\n * US-state allowlist (e.g. wine).\n *\n * Only enforced for US shipments — non-US shipments are governed by\n * {@link shippingCountryAllowed} independently.\n */\nexport function shippingStateAllowed(\n  state: string,\n  country: string,\n  policy: PolicyBlock | null | undefined,\n): boolean {\n  if (!policy?.allowedShippingStates || policy.allowedShippingStates.length === 0) return true;\n  if (country.toUpperCase() !== 'US') return true;\n  const allowed = new Set(policy.allowedShippingStates.map((s) => s.toUpperCase()));\n  return allowed.has(state.toUpperCase());\n}\n"],"mappings":";AA6EO,SAAS,2BACd,QACA,MAC8B;AAC9B,MAAI,CAAC,UAAU,CAAC,OAAO,YAAa,QAAO;AAC3C,SAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,GAAI,KAAK,YAAY,UAAa,EAAE,SAAS,KAAK,QAAQ;AAAA,IAC1D,GAAI,OAAO,eAAe,UAAa,EAAE,YAAY,OAAO,WAAW;AAAA,IACvE,GAAI,OAAO,0BAA0B,UAAa;AAAA,MAChD,uBAAuB,OAAO;AAAA,IAChC;AAAA,IACA,GAAI,OAAO,WAAW,UAAa,EAAE,QAAQ,OAAO,OAAO;AAAA,IAC3D,GAAI,OAAO,yBAAyB,UAAa;AAAA,MAC/C,sBAAsB,CAAC,GAAG,OAAO,oBAAoB;AAAA,IACvD;AAAA,EACF;AACF;AAoBA,eAAsB,uBACpB,aACA,SACqB;AACrB,MAAI,CAAC,WAAW,CAAC,YAAa,QAAO,EAAE,QAAQ,YAAY;AAE3D,QAAM,UAAU,MAAM,QAAQ;AAC9B,MAAI,QAAQ,GAAI,QAAO,EAAE,QAAQ,WAAW;AAE5C,MAAI,gBAAgB,QAAQ;AAC1B,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,MACpB,GAAI,QAAQ,WAAW,UAAa,EAAE,cAAc,QAAQ,OAAO;AAAA,IACrE;AAAA,EACF;AACA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,cAAc,QAAQ;AAAA,IACtB,YAAY,QAAQ;AAAA,IACpB,GAAI,QAAQ,WAAW,UAAa,EAAE,cAAc,QAAQ,OAAO;AAAA,EACrE;AACF;AAGO,SAAS,uBAAuB,SAAiB,QAAiD;AACvG,MAAI,CAAC,QAAQ,4BAA4B,OAAO,yBAAyB,WAAW,EAAG,QAAO;AAC9F,QAAM,UAAU,IAAI,IAAI,OAAO,yBAAyB,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AACnF,SAAO,QAAQ,IAAI,QAAQ,YAAY,CAAC;AAC1C;AAQO,SAAS,qBACd,OACA,SACA,QACS;AACT,MAAI,CAAC,QAAQ,yBAAyB,OAAO,sBAAsB,WAAW,EAAG,QAAO;AACxF,MAAI,QAAQ,YAAY,MAAM,KAAM,QAAO;AAC3C,QAAM,UAAU,IAAI,IAAI,OAAO,sBAAsB,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAChF,SAAO,QAAQ,IAAI,MAAM,YAAY,CAAC;AACxC;","names":[]}

package/dist/identity/web.d.mts

@@ -1,6 +1,6 @@
 export { F as FIXABLE_DENIAL_REASONS, b as buildContactSupportNextSteps, a as buildSignerMismatchBody, d as denialReasonStatus, c as denialReasonToBody, i as isFixableDenial, v as verificationAgentInstructions } from '../_response-DpB-cm2c.mjs';
 export { e as extractPaymentSignerAddress, r as readX402PaymentHeader } from '../signer-kCAJUZwp.mjs';
-import { AgentScoreCoreOptions, AgentIdentity, DenialReason, CreateSessionOnMissing, AgentScoreData, VerifyWalletSignerResult, FailOpenInfraReason, GateQuotaInfo } from '../core.mjs';
+import { AgentScoreCoreOptions, AgentIdentity, DenialReason, CreateSessionOnMissing, AssessResult, VerifyWalletSignerResult, FailOpenInfraReason, GateQuotaInfo } from '../core.mjs';
 
 interface AgentScoreGateOptions extends Omit<AgentScoreCoreOptions, 'createSessionOnMissing'> {
     /** Custom function to extract agent identity from a Request. */
@@ -21,7 +21,7 @@ interface AgentScoreGateOptions extends Omit<AgentScoreCoreOptions, 'createSessi
  */
 type GuardResult = {
     allowed: true;
-    data?: AgentScoreData;
+    data?: AssessResult;
     captureWallet?: (opts: {
         walletAddress: string;
         network: 'evm' | 'solana';
@@ -74,7 +74,7 @@ declare function createAgentScoreGate(options: AgentScoreGateOptions): (req: Req
  * ```
  */
 declare function withAgentScoreGate<TCtx = unknown>(options: AgentScoreGateOptions, handler: (req: Request, gate: {
-    data?: AgentScoreData;
+    data?: AssessResult;
     captureWallet?: (opts: {
         walletAddress: string;
         network: 'evm' | 'solana';

package/dist/identity/web.d.ts

@@ -1,6 +1,6 @@
 export { F as FIXABLE_DENIAL_REASONS, b as buildContactSupportNextSteps, a as buildSignerMismatchBody, d as denialReasonStatus, c as denialReasonToBody, i as isFixableDenial, v as verificationAgentInstructions } from '../_response-C2yFQoIA.js';
 export { e as extractPaymentSignerAddress, r as readX402PaymentHeader } from '../signer-kCAJUZwp.js';
-import { AgentScoreCoreOptions, AgentIdentity, DenialReason, CreateSessionOnMissing, AgentScoreData, VerifyWalletSignerResult, FailOpenInfraReason, GateQuotaInfo } from '../core.js';
+import { AgentScoreCoreOptions, AgentIdentity, DenialReason, CreateSessionOnMissing, AssessResult, VerifyWalletSignerResult, FailOpenInfraReason, GateQuotaInfo } from '../core.js';
 
 interface AgentScoreGateOptions extends Omit<AgentScoreCoreOptions, 'createSessionOnMissing'> {
     /** Custom function to extract agent identity from a Request. */
@@ -21,7 +21,7 @@ interface AgentScoreGateOptions extends Omit<AgentScoreCoreOptions, 'createSessi
  */
 type GuardResult = {
     allowed: true;
-    data?: AgentScoreData;
+    data?: AssessResult;
     captureWallet?: (opts: {
         walletAddress: string;
         network: 'evm' | 'solana';
@@ -74,7 +74,7 @@ declare function createAgentScoreGate(options: AgentScoreGateOptions): (req: Req
  * ```
  */
 declare function withAgentScoreGate<TCtx = unknown>(options: AgentScoreGateOptions, handler: (req: Request, gate: {
-    data?: AgentScoreData;
+    data?: AssessResult;
     captureWallet?: (opts: {
         walletAddress: string;
         network: 'evm' | 'solana';

package/dist/identity/web.js

@@ -361,7 +361,7 @@ function createAgentScoreCore(options) {
   } = options;
   const baseUrl = stripTrailingSlashes(rawBaseUrl);
   const agentMemoryHint = buildAgentMemoryHint();
-  const defaultUa = `@agent-score/commerce@${"1.5.1"}`;
+  const defaultUa = `@agent-score/commerce@${"1.7.0"}`;
   const userAgentHeader = userAgent ? `${userAgent} (${defaultUa})` : defaultUa;
   const sdk = new import_sdk.AgentScore({ apiKey, baseUrl, userAgent: userAgentHeader });
   const sessionSdkCache = /* @__PURE__ */ new Map();