@agent-score/commerce 2.4.0 → 2.5.0

package/dist/identity/hono.d.mts

@@ -1,5 +1,7 @@
+import { b as AipGateOptions, r as buildAipErrorBody, V as VerifiedAit } from '../gate-CWP10xPQ.mjs';
 import { AgentScoreCoreOptions, AgentIdentity, DenialReason, CreateSessionOnMissing, AssessResult, FailOpenInfraReason, GateQuotaInfo, SignerVerdict } from '../core.mjs';
 import { Context, MiddlewareHandler } from 'hono';
+import 'jose';
 import '../signer-3FAit11j.mjs';
 
 interface AgentScoreGateOptions extends Omit<AgentScoreCoreOptions, 'createSessionOnMissing'> {
@@ -93,5 +95,28 @@ declare function getSignerVerdict(c: Context): SignerVerdict | undefined;
  *  wrap pattern in consumer codebases.
  */
 declare function conditionalAgentscoreGate(options: AgentScoreGateOptions): MiddlewareHandler;
+interface AipGateHonoOptions extends AipGateOptions {
+    /** Custom denial responder. Defaults to a 401/403 `application/problem+json` Response. */
+    onDenied?: (c: Context, body: ReturnType<typeof buildAipErrorBody>) => Response | Promise<Response>;
+}
+/**
+ * Hono middleware that requires a valid AIT on every request it guards.
+ *
+ * ```ts
+ * import { JwksCache } from '@agent-score/commerce';
+ * import { aipGate, getVerifiedAit } from '@agent-score/commerce/identity/hono';
+ *
+ * const jwks = new JwksCache({ trustedIssuers: ['https://issuer.example'] }); // AgentScore always trusted
+ * app.post('/checkout', aipGate({ jwks }), (c) => {
+ *   const ait = getVerifiedAit(c)!;
+ *   return c.json({ buyer: ait.payload.identity?.email });
+ * });
+ * ```
+ */
+declare function aipGate(options: AipGateHonoOptions): MiddlewareHandler;
+/** Wrap {@link aipGate} so it only runs when an `Agent-Identity` header is present. */
+declare function conditionalAipGate(options: AipGateHonoOptions): MiddlewareHandler;
+/** Read the verified AIT attached to a Hono `Context` by {@link aipGate}. */
+declare function getVerifiedAit(c: Context): VerifiedAit | undefined;
 
-export { agentscoreGate, captureWallet, conditionalAgentscoreGate, getAgentScoreData, getGateDegradedState, getGateQuotaInfo, getSignerVerdict };
+export { type AipGateHonoOptions, agentscoreGate, aipGate, captureWallet, conditionalAgentscoreGate, conditionalAipGate, getAgentScoreData, getGateDegradedState, getGateQuotaInfo, getSignerVerdict, getVerifiedAit };

package/dist/identity/hono.d.ts

@@ -1,5 +1,7 @@
+import { b as AipGateOptions, r as buildAipErrorBody, V as VerifiedAit } from '../gate-CWP10xPQ.js';
 import { AgentScoreCoreOptions, AgentIdentity, DenialReason, CreateSessionOnMissing, AssessResult, FailOpenInfraReason, GateQuotaInfo, SignerVerdict } from '../core.js';
 import { Context, MiddlewareHandler } from 'hono';
+import 'jose';
 import '../signer-3FAit11j.js';
 
 interface AgentScoreGateOptions extends Omit<AgentScoreCoreOptions, 'createSessionOnMissing'> {
@@ -93,5 +95,28 @@ declare function getSignerVerdict(c: Context): SignerVerdict | undefined;
  *  wrap pattern in consumer codebases.
  */
 declare function conditionalAgentscoreGate(options: AgentScoreGateOptions): MiddlewareHandler;
+interface AipGateHonoOptions extends AipGateOptions {
+    /** Custom denial responder. Defaults to a 401/403 `application/problem+json` Response. */
+    onDenied?: (c: Context, body: ReturnType<typeof buildAipErrorBody>) => Response | Promise<Response>;
+}
+/**
+ * Hono middleware that requires a valid AIT on every request it guards.
+ *
+ * ```ts
+ * import { JwksCache } from '@agent-score/commerce';
+ * import { aipGate, getVerifiedAit } from '@agent-score/commerce/identity/hono';
+ *
+ * const jwks = new JwksCache({ trustedIssuers: ['https://issuer.example'] }); // AgentScore always trusted
+ * app.post('/checkout', aipGate({ jwks }), (c) => {
+ *   const ait = getVerifiedAit(c)!;
+ *   return c.json({ buyer: ait.payload.identity?.email });
+ * });
+ * ```
+ */
+declare function aipGate(options: AipGateHonoOptions): MiddlewareHandler;
+/** Wrap {@link aipGate} so it only runs when an `Agent-Identity` header is present. */
+declare function conditionalAipGate(options: AipGateHonoOptions): MiddlewareHandler;
+/** Read the verified AIT attached to a Hono `Context` by {@link aipGate}. */
+declare function getVerifiedAit(c: Context): VerifiedAit | undefined;
 
-export { agentscoreGate, captureWallet, conditionalAgentscoreGate, getAgentScoreData, getGateDegradedState, getGateQuotaInfo, getSignerVerdict };
+export { type AipGateHonoOptions, agentscoreGate, aipGate, captureWallet, conditionalAgentscoreGate, conditionalAipGate, getAgentScoreData, getGateDegradedState, getGateQuotaInfo, getSignerVerdict, getVerifiedAit };