@agent-score/commerce 2.4.0 → 2.5.0

package/dist/identity/web.d.mts

@@ -1,4 +1,6 @@
+import { b as AipGateOptions, r as buildAipErrorBody, V as VerifiedAit } from '../gate-CWP10xPQ.mjs';
 import { AgentScoreCoreOptions, AgentIdentity, DenialReason, CreateSessionOnMissing, AssessResult, SignerVerdict, FailOpenInfraReason, GateQuotaInfo } from '../core.mjs';
+import 'jose';
 import '../signer-3FAit11j.mjs';
 
 interface AgentScoreGateOptions extends Omit<AgentScoreCoreOptions, 'createSessionOnMissing'> {
@@ -96,5 +98,26 @@ declare function createConditionalAgentScoreGate(options: AgentScoreGateOptions)
 /** Wrapper variant matching `withAgentScoreGate(opts, handler)` that only
  *  invokes the gate when a payment credential is attached. */
 declare function withConditionalAgentScoreGate<TCtx = unknown>(options: AgentScoreGateOptions, handler: Parameters<typeof withAgentScoreGate<TCtx>>[1]): (req: Request, ctx: TCtx) => Promise<Response>;
+type AipGuardResult = {
+    allowed: true;
+    ait: VerifiedAit;
+} | {
+    allowed: false;
+    response: Response;
+};
+interface AipGateWebOptions extends AipGateOptions {
+    /** Custom denial responder. Defaults to a 401/403 `application/problem+json` Response. */
+    onDenied?: (req: Request, body: ReturnType<typeof buildAipErrorBody>) => Response | Promise<Response>;
+}
+/** Create a Web Fetch AIP guard: returns `{ allowed, ait }` or `{ allowed: false, response }`. */
+declare function createAipGate(options: AipGateWebOptions): (req: Request) => Promise<AipGuardResult>;
+/** Wrap a Web Fetch handler with the AIP gate. Denied requests return the problem+json Response. */
+declare function withAipGate<TCtx = unknown>(options: AipGateWebOptions, handler: (req: Request, gate: {
+    ait: VerifiedAit;
+}, ctx?: TCtx) => Response | Promise<Response>): (req: Request, ctx?: TCtx) => Promise<Response>;
+/** Conditional variant: only runs the AIP gate when an `Agent-Identity` header is present. */
+declare function withConditionalAipGate<TCtx = unknown>(options: AipGateWebOptions, handler: (req: Request, gate: {
+    ait?: VerifiedAit;
+}, ctx?: TCtx) => Response | Promise<Response>): (req: Request, ctx?: TCtx) => Promise<Response>;
 
-export { type GuardResult, createAgentScoreGate, createConditionalAgentScoreGate, withAgentScoreGate, withConditionalAgentScoreGate };
+export { type AipGateWebOptions, type AipGuardResult, type GuardResult, createAgentScoreGate, createAipGate, createConditionalAgentScoreGate, withAgentScoreGate, withAipGate, withConditionalAgentScoreGate, withConditionalAipGate };

package/dist/identity/web.d.ts

@@ -1,4 +1,6 @@
+import { b as AipGateOptions, r as buildAipErrorBody, V as VerifiedAit } from '../gate-CWP10xPQ.js';
 import { AgentScoreCoreOptions, AgentIdentity, DenialReason, CreateSessionOnMissing, AssessResult, SignerVerdict, FailOpenInfraReason, GateQuotaInfo } from '../core.js';
+import 'jose';
 import '../signer-3FAit11j.js';
 
 interface AgentScoreGateOptions extends Omit<AgentScoreCoreOptions, 'createSessionOnMissing'> {
@@ -96,5 +98,26 @@ declare function createConditionalAgentScoreGate(options: AgentScoreGateOptions)
 /** Wrapper variant matching `withAgentScoreGate(opts, handler)` that only
  *  invokes the gate when a payment credential is attached. */
 declare function withConditionalAgentScoreGate<TCtx = unknown>(options: AgentScoreGateOptions, handler: Parameters<typeof withAgentScoreGate<TCtx>>[1]): (req: Request, ctx: TCtx) => Promise<Response>;
+type AipGuardResult = {
+    allowed: true;
+    ait: VerifiedAit;
+} | {
+    allowed: false;
+    response: Response;
+};
+interface AipGateWebOptions extends AipGateOptions {
+    /** Custom denial responder. Defaults to a 401/403 `application/problem+json` Response. */
+    onDenied?: (req: Request, body: ReturnType<typeof buildAipErrorBody>) => Response | Promise<Response>;
+}
+/** Create a Web Fetch AIP guard: returns `{ allowed, ait }` or `{ allowed: false, response }`. */
+declare function createAipGate(options: AipGateWebOptions): (req: Request) => Promise<AipGuardResult>;
+/** Wrap a Web Fetch handler with the AIP gate. Denied requests return the problem+json Response. */
+declare function withAipGate<TCtx = unknown>(options: AipGateWebOptions, handler: (req: Request, gate: {
+    ait: VerifiedAit;
+}, ctx?: TCtx) => Response | Promise<Response>): (req: Request, ctx?: TCtx) => Promise<Response>;
+/** Conditional variant: only runs the AIP gate when an `Agent-Identity` header is present. */
+declare function withConditionalAipGate<TCtx = unknown>(options: AipGateWebOptions, handler: (req: Request, gate: {
+    ait?: VerifiedAit;
+}, ctx?: TCtx) => Response | Promise<Response>): (req: Request, ctx?: TCtx) => Promise<Response>;
 
-export { type GuardResult, createAgentScoreGate, createConditionalAgentScoreGate, withAgentScoreGate, withConditionalAgentScoreGate };
+export { type AipGateWebOptions, type AipGuardResult, type GuardResult, createAgentScoreGate, createAipGate, createConditionalAgentScoreGate, withAgentScoreGate, withAipGate, withConditionalAgentScoreGate, withConditionalAipGate };