@agent-score/commerce 2.4.0 → 2.6.0

package/dist/identity/policy.d.mts

@@ -1,4 +1,5 @@
 import { DenialReason, AgentScoreCoreOptions } from '../core.mjs';
+import '@agent-score/sdk';
 import '../signer-3FAit11j.mjs';
 
 /**
@@ -7,7 +8,7 @@ import '../signer-3FAit11j.mjs';
  * A *policy* is a small bag of fields describing what identity the merchant wants
  * verified for a given resource:
  *
- * - `enforcement`: `"hard"` (today's wine path — 403 on miss) or `"soft"` (gate
+ * - `enforcement`: `"hard"` (the regulated-goods path — 403 on miss) or `"soft"` (gate
  *   denial is swallowed; the order completes with a degraded `identity_status`).
  *   `null` / absent = no gate at all.
  * - `requireKyc` / `requireSanctionsClear` / `minAge`: passed through to the
@@ -41,6 +42,8 @@ interface PolicyBlock {
     requireKyc?: boolean;
     requireSanctionsClear?: boolean;
     minAge?: number;
+    /** Buyer-verified country blocklist (`["RU", "KP", ...]`) — these jurisdictions are denied. */
+    blockedJurisdictions?: readonly string[];
     allowedJurisdictions?: readonly string[];
     allowedShippingCountries?: readonly string[];
     allowedShippingStates?: readonly string[];
@@ -76,6 +79,15 @@ declare function buildGateFromPolicy(policy: PolicyBlock | null | undefined, bas
     apiKey: string;
     baseUrl?: string;
 }): AgentScoreCoreOptions | null;
+/**
+ * True when a gate denial body indicates an OFAC SDN sanctions hit (or unavailable screen).
+ *
+ * Inspects the flat denial body emitted by `denialReasonToBody`: a `wallet_not_trusted`
+ * (or signer-sanctions) deny carries the sanctions reason in `reasons` / `decision_reasons`,
+ * or surfaces it as a top-level `error.code`. Used by {@link runGateWithEnforcement} so soft
+ * mode can downgrade non-sanctions denials while leaving a sanctions deny terminal.
+ */
+declare function isSanctionsDenial(body: Record<string, unknown> | null | undefined): boolean;
 /**
  * Run a per-framework gate middleware respecting the enforcement mode.
  *
@@ -93,6 +105,13 @@ declare function buildGateFromPolicy(policy: PolicyBlock | null | undefined, bas
  * - `enforcement="hard"` + denied: status="denied"; caller propagates denialStatus + denialBody.
  * - `enforcement="soft"` + denied: swallow; status="unverified".
  * - accepted: status="verified".
+ *
+ * **Sanctions are never swallowed.** Soft mode is a commercial knob — it lets a merchant
+ * accept an order from an agent that didn't satisfy KYC / age / jurisdiction (stamping a
+ * degraded `identity_status` for ops). But an OFAC SDN sanctions deny is strict-liability:
+ * settling for a sanctioned wallet is a violation regardless of the merchant's posture. So a
+ * denial whose body indicates sanctions ({@link isSanctionsDenial}) returns `status="denied"`
+ * even under `enforcement="soft"`; soft only downgrades the non-sanctions reasons.
  */
 declare function runGateWithEnforcement(enforcement: EnforcementMode | undefined, runGate: (() => Promise<{
     ok: true;
@@ -149,4 +168,4 @@ declare function validateShippingAgainstPolicy(opts: {
     stateMessage?: string;
 }): void;
 
-export { type EnforcementMode, type GateResult, type IdentityStatus, type PolicyBlock, buildGateFromPolicy, runGateWithEnforcement, shippingCountryAllowed, shippingStateAllowed, validateShippingAgainstPolicy };
+export { type EnforcementMode, type GateResult, type IdentityStatus, type PolicyBlock, buildGateFromPolicy, isSanctionsDenial, runGateWithEnforcement, shippingCountryAllowed, shippingStateAllowed, validateShippingAgainstPolicy };

package/dist/identity/policy.d.ts

@@ -1,4 +1,5 @@
 import { DenialReason, AgentScoreCoreOptions } from '../core.js';
+import '@agent-score/sdk';
 import '../signer-3FAit11j.js';
 
 /**
@@ -7,7 +8,7 @@ import '../signer-3FAit11j.js';
  * A *policy* is a small bag of fields describing what identity the merchant wants
  * verified for a given resource:
  *
- * - `enforcement`: `"hard"` (today's wine path — 403 on miss) or `"soft"` (gate
+ * - `enforcement`: `"hard"` (the regulated-goods path — 403 on miss) or `"soft"` (gate
  *   denial is swallowed; the order completes with a degraded `identity_status`).
  *   `null` / absent = no gate at all.
  * - `requireKyc` / `requireSanctionsClear` / `minAge`: passed through to the
@@ -41,6 +42,8 @@ interface PolicyBlock {
     requireKyc?: boolean;
     requireSanctionsClear?: boolean;
     minAge?: number;
+    /** Buyer-verified country blocklist (`["RU", "KP", ...]`) — these jurisdictions are denied. */
+    blockedJurisdictions?: readonly string[];
     allowedJurisdictions?: readonly string[];
     allowedShippingCountries?: readonly string[];
     allowedShippingStates?: readonly string[];
@@ -76,6 +79,15 @@ declare function buildGateFromPolicy(policy: PolicyBlock | null | undefined, bas
     apiKey: string;
     baseUrl?: string;
 }): AgentScoreCoreOptions | null;
+/**
+ * True when a gate denial body indicates an OFAC SDN sanctions hit (or unavailable screen).
+ *
+ * Inspects the flat denial body emitted by `denialReasonToBody`: a `wallet_not_trusted`
+ * (or signer-sanctions) deny carries the sanctions reason in `reasons` / `decision_reasons`,
+ * or surfaces it as a top-level `error.code`. Used by {@link runGateWithEnforcement} so soft
+ * mode can downgrade non-sanctions denials while leaving a sanctions deny terminal.
+ */
+declare function isSanctionsDenial(body: Record<string, unknown> | null | undefined): boolean;
 /**
  * Run a per-framework gate middleware respecting the enforcement mode.
  *
@@ -93,6 +105,13 @@ declare function buildGateFromPolicy(policy: PolicyBlock | null | undefined, bas
  * - `enforcement="hard"` + denied: status="denied"; caller propagates denialStatus + denialBody.
  * - `enforcement="soft"` + denied: swallow; status="unverified".
  * - accepted: status="verified".
+ *
+ * **Sanctions are never swallowed.** Soft mode is a commercial knob — it lets a merchant
+ * accept an order from an agent that didn't satisfy KYC / age / jurisdiction (stamping a
+ * degraded `identity_status` for ops). But an OFAC SDN sanctions deny is strict-liability:
+ * settling for a sanctioned wallet is a violation regardless of the merchant's posture. So a
+ * denial whose body indicates sanctions ({@link isSanctionsDenial}) returns `status="denied"`
+ * even under `enforcement="soft"`; soft only downgrades the non-sanctions reasons.
  */
 declare function runGateWithEnforcement(enforcement: EnforcementMode | undefined, runGate: (() => Promise<{
     ok: true;
@@ -149,4 +168,4 @@ declare function validateShippingAgainstPolicy(opts: {
     stateMessage?: string;
 }): void;
 
-export { type EnforcementMode, type GateResult, type IdentityStatus, type PolicyBlock, buildGateFromPolicy, runGateWithEnforcement, shippingCountryAllowed, shippingStateAllowed, validateShippingAgainstPolicy };
+export { type EnforcementMode, type GateResult, type IdentityStatus, type PolicyBlock, buildGateFromPolicy, isSanctionsDenial, runGateWithEnforcement, shippingCountryAllowed, shippingStateAllowed, validateShippingAgainstPolicy };

package/dist/identity/policy.js

@@ -21,6 +21,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var policy_exports = {};
 __export(policy_exports, {
   buildGateFromPolicy: () => buildGateFromPolicy,
+  isSanctionsDenial: () => isSanctionsDenial,
   runGateWithEnforcement: () => runGateWithEnforcement,
   shippingCountryAllowed: () => shippingCountryAllowed,
   shippingStateAllowed: () => shippingStateAllowed,
@@ -55,16 +56,35 @@ function buildGateFromPolicy(policy, base) {
       requireSanctionsClear: policy.requireSanctionsClear
     },
     ...policy.minAge !== void 0 && { minAge: policy.minAge },
+    ...policy.blockedJurisdictions !== void 0 && {
+      blockedJurisdictions: [...policy.blockedJurisdictions]
+    },
     ...policy.allowedJurisdictions !== void 0 && {
       allowedJurisdictions: [...policy.allowedJurisdictions]
     }
   };
 }
+var SANCTIONS_DENIAL_REASONS = /* @__PURE__ */ new Set([
+  "sanctions_flagged",
+  "sanctions_check_unavailable"
+]);
+function isSanctionsDenial(body) {
+  if (!body || typeof body !== "object") return false;
+  for (const key of ["reasons", "decision_reasons"]) {
+    const raw = body[key];
+    if (Array.isArray(raw) && raw.some((r) => typeof r === "string" && SANCTIONS_DENIAL_REASONS.has(r))) {
+      return true;
+    }
+  }
+  const error = body.error;
+  const code = error && typeof error === "object" ? error.code : void 0;
+  return typeof code === "string" && SANCTIONS_DENIAL_REASONS.has(code);
+}
 async function runGateWithEnforcement(enforcement, runGate) {
   if (!runGate || !enforcement) return { status: "anonymous" };
   const outcome = await runGate();
   if (outcome.ok) return { status: "verified" };
-  if (enforcement === "hard") {
+  if (enforcement === "hard" || isSanctionsDenial(outcome.body)) {
     return {
       status: "denied",
       denialStatus: outcome.status,
@@ -112,6 +132,7 @@ function validateShippingAgainstPolicy(opts) {
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   buildGateFromPolicy,
+  isSanctionsDenial,
   runGateWithEnforcement,
   shippingCountryAllowed,
   shippingStateAllowed,

package/dist/identity/policy.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/identity/policy.ts","../../src/errors.ts"],"sourcesContent":["/**\n * Per-product / per-tier compliance policy helpers.\n *\n * A *policy* is a small bag of fields describing what identity the merchant wants\n * verified for a given resource:\n *\n * - `enforcement`: `\"hard\"` (today's wine path — 403 on miss) or `\"soft\"` (gate\n *   denial is swallowed; the order completes with a degraded `identity_status`).\n *   `null` / absent = no gate at all.\n * - `requireKyc` / `requireSanctionsClear` / `minAge`: passed through to the\n *   per-framework `agentscoreGate(...)` factory.\n * - `allowedJurisdictions`: buyer-verified country list (`[\"US\", \"CA\", ...]`).\n * - `allowedShippingCountries` / `allowedShippingStates`: optional shipping\n *   allowlists. State list is only enforced for US shipments.\n *\n * This module ships three primitives:\n *\n * 1. {@link PolicyBlock} — the typed shape.\n * 2. {@link buildGateFromPolicy} — translate a block into the options object the\n *    per-framework `agentscoreGate(...)` accepts. Returns `null` when the policy\n *    has no enforcement (treat as \"no gate; anonymous OK\").\n * 3. {@link runGateWithEnforcement} — wrap a per-framework middleware in the\n *    hard/soft enforcement runner. The middleware is given an `onDenied` shim\n *    that captures the denial body and status; the runner returns a structured\n *    {@link GateResult} so the vendor decides how to surface it.\n *\n * All three are additive — vendors using `agentscoreGate(...)` directly are\n * unaffected.\n */\n\nimport { CheckoutValidationError } from '../errors';\nimport type { AgentScoreCoreOptions, DenialReason } from '../core.js';\n\n/** Hard = 403 propagates; soft = swallowed + identity_status=\"unverified\". */\nexport type EnforcementMode = 'hard' | 'soft';\n\n/** Per-order trust level captured at settle time. */\nexport type IdentityStatus = 'verified' | 'unverified' | 'anonymous' | 'denied';\n\n/** Compliance fields a merchant attaches per product / per tier. All optional. */\nexport interface PolicyBlock {\n  enforcement?: EnforcementMode;\n  requireKyc?: boolean;\n  requireSanctionsClear?: boolean;\n  minAge?: number;\n  allowedJurisdictions?: readonly string[];\n  allowedShippingCountries?: readonly string[];\n  allowedShippingStates?: readonly string[];\n}\n\n/**\n * Outcome of running a gate under an enforcement mode.\n *\n * - `verified`: gate accepted; identity is fully verified for the policy.\n * - `unverified`: soft mode swallowed a gate denial; the agent had *some*\n *   identity but didn't meet the policy. Stamp this on the order so\n *   ops/analytics can tell apart soft passes from hard passes.\n * - `anonymous`: no gate ran (policy was null / no enforcement).\n * - `denied`: hard mode rejected; the caller must propagate the 403. The\n *   `denialBody` and `denialStatus` carry the original gate response so the\n *   caller can return it as-is.\n */\nexport interface GateResult {\n  status: IdentityStatus;\n  denialStatus?: number;\n  denialBody?: Record<string, unknown>;\n  denialReason?: DenialReason;\n}\n\n/**\n * Translate a {@link PolicyBlock} into the options the per-framework\n * `agentscoreGate(...)` expects. Returns `null` when the block has no\n * `enforcement` set — the caller should treat that as \"no gate; anonymous OK\".\n *\n * Use a fresh gate per request rather than constructing once at module scope\n * when the policy varies per resource (e.g. per product). Each adapter's gate\n * is cheap to instantiate.\n */\nexport function buildGateFromPolicy(\n  policy: PolicyBlock | null | undefined,\n  base: { apiKey: string; baseUrl?: string },\n): AgentScoreCoreOptions | null {\n  if (!policy || !policy.enforcement) return null;\n  return {\n    apiKey: base.apiKey,\n    ...(base.baseUrl !== undefined && { baseUrl: base.baseUrl }),\n    ...(policy.requireKyc !== undefined && { requireKyc: policy.requireKyc }),\n    ...(policy.requireSanctionsClear !== undefined && {\n      requireSanctionsClear: policy.requireSanctionsClear,\n    }),\n    ...(policy.minAge !== undefined && { minAge: policy.minAge }),\n    ...(policy.allowedJurisdictions !== undefined && {\n      allowedJurisdictions: [...policy.allowedJurisdictions],\n    }),\n  };\n}\n\n/**\n * Run a per-framework gate middleware respecting the enforcement mode.\n *\n * The vendor passes:\n * - `gate`: their framework's middleware (Hono `MiddlewareHandler`, Express\n *   `(req, res, next) => void`, etc.) — anything that resolves on accept and\n *   throws or returns a `Response` on deny.\n * - `runGate`: a thin adapter that calls the middleware with the framework\n *   context and returns either `{ ok: true }` (gate accepted) or\n *   `{ ok: false, status, body, reason? }` (gate denied with details).\n *\n * `runGateWithEnforcement` wraps that in the hard/soft split:\n *\n * - `gate=null` or `enforcement=null`: no gate fires; status=\"anonymous\".\n * - `enforcement=\"hard\"` + denied: status=\"denied\"; caller propagates denialStatus + denialBody.\n * - `enforcement=\"soft\"` + denied: swallow; status=\"unverified\".\n * - accepted: status=\"verified\".\n */\nexport async function runGateWithEnforcement(\n  enforcement: EnforcementMode | undefined,\n  runGate: (() => Promise<{ ok: true } | { ok: false; status: number; body: Record<string, unknown>; reason?: DenialReason }>) | null,\n): Promise<GateResult> {\n  if (!runGate || !enforcement) return { status: 'anonymous' };\n\n  const outcome = await runGate();\n  if (outcome.ok) return { status: 'verified' };\n\n  if (enforcement === 'hard') {\n    return {\n      status: 'denied',\n      denialStatus: outcome.status,\n      denialBody: outcome.body,\n      ...(outcome.reason !== undefined && { denialReason: outcome.reason }),\n    };\n  }\n  return {\n    status: 'unverified',\n    denialStatus: outcome.status,\n    denialBody: outcome.body,\n    ...(outcome.reason !== undefined && { denialReason: outcome.reason }),\n  };\n}\n\n/** NULL policy / NULL allowlist → ship anywhere. Otherwise country must be in the list. */\nexport function shippingCountryAllowed(country: string, policy: PolicyBlock | null | undefined): boolean {\n  if (!policy?.allowedShippingCountries || policy.allowedShippingCountries.length === 0) return true;\n  const allowed = new Set(policy.allowedShippingCountries.map((c) => c.toUpperCase()));\n  return allowed.has(country.toUpperCase());\n}\n\n/**\n * US-state allowlist (e.g. wine).\n *\n * Only enforced for US shipments — non-US shipments are governed by\n * {@link shippingCountryAllowed} independently.\n */\nexport function shippingStateAllowed(\n  state: string,\n  country: string,\n  policy: PolicyBlock | null | undefined,\n): boolean {\n  if (!policy?.allowedShippingStates || policy.allowedShippingStates.length === 0) return true;\n  if (country.toUpperCase() !== 'US') return true;\n  const allowed = new Set(policy.allowedShippingStates.map((s) => s.toUpperCase()));\n  return allowed.has(state.toUpperCase());\n}\n\n/**\n * Throw {@link CheckoutValidationError} when shipping isn't allowed by the policy.\n *\n * One-call replacement for the\n *\n *     if (!shippingCountryAllowed(...)) throw new CheckoutValidationError(...);\n *     if (!shippingStateAllowed(...))   throw new CheckoutValidationError(...);\n *\n * boilerplate every goods merchant writes in their `preValidate` hook.\n *\n * `policy` is a {@link PolicyBlock} (or `null`/`undefined`); NULL policy means\n * \"ship anywhere\" and the function is a no-op. The reason a location is\n * excluded is **merchant-defined**: it might be regulatory (regulated goods\n * + state allowlist), operational (no fulfillment partner), or commercial\n * (fragility, fraud-rate-by-region, etc.) — the helper doesn't assume.\n *\n * `productName` is the user-facing item name surfaced in the error message\n * (\"Cannot ship 'Wine 2020' to NY ...\"). Omit for a generic message.\n *\n * `errorCode` and `errorAction` let merchants override the canonical denial\n * codes if their consumer agents expect different shapes.\n *\n * `countryMessage` / `stateMessage` override the default messages verbatim\n * (use these when the default phrasing isn't right for your consumer agents\n * — e.g. you want to surface the regulatory reason explicitly, or you want\n * the message in a different language).\n */\nexport function validateShippingAgainstPolicy(opts: {\n  country: string;\n  state: string;\n  policy: PolicyBlock | null | undefined;\n  productName?: string;\n  errorCode?: string;\n  errorAction?: string;\n  countryMessage?: string;\n  stateMessage?: string;\n}): void {\n  const code = opts.errorCode ?? 'unsupported_jurisdiction';\n  const action = opts.errorAction ?? 'change_shipping_state';\n  const item = opts.productName ? `'${opts.productName}'` : 'this item';\n  if (!shippingCountryAllowed(opts.country, opts.policy)) {\n    throw new CheckoutValidationError({\n      code,\n      message:\n        opts.countryMessage ??\n        `We can't ship ${item} to ${opts.country.toUpperCase() || '<unset>'}.`,\n      action,\n    });\n  }\n  if (!shippingStateAllowed(opts.state, opts.country, opts.policy)) {\n    throw new CheckoutValidationError({\n      code,\n      message:\n        opts.stateMessage ??\n        `We can't ship ${item} to ${opts.state.toUpperCase() || '<unset>'}.`,\n      action,\n    });\n  }\n}\n","/**\n * Cross-module typed errors.\n *\n * Lives in its own module so `payment/` and `stripe-multichain/` helpers can\n * throw `CheckoutValidationError` without importing from `checkout.ts` — this\n * also sidesteps tsup's per-entry class duplication.\n *\n * Re-exported from `checkout.ts` and the top-level entry to preserve the\n * public import path.\n */\n\n/**\n * Raised to short-circuit a Checkout flow with a 4xx/5xx envelope. The\n * framework catches this at request-flow boundaries (`preValidate`, recipient\n * minting, settlement dispatch) and emits `{ error, next_steps }` via\n * `buildValidationError` so merchants don't construct response bodies\n * themselves.\n */\nexport class CheckoutValidationError extends Error {\n  readonly code: string;\n  readonly action: string;\n  readonly status: number;\n  readonly extra: Record<string, unknown> | undefined;\n  constructor(opts: {\n    code: string;\n    message: string;\n    action?: string;\n    status?: number;\n    extra?: Record<string, unknown>;\n  }) {\n    super(opts.message);\n    this.name = 'CheckoutValidationError';\n    this.code = opts.code;\n    this.action = opts.action ?? 'fix_request';\n    this.status = opts.status ?? 400;\n    this.extra = opts.extra;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACkBO,IAAM,0BAAN,cAAsC,MAAM;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACT,YAAY,MAMT;AACD,UAAM,KAAK,OAAO;AAClB,SAAK,OAAO;AACZ,SAAK,OAAO,KAAK;AACjB,SAAK,SAAS,KAAK,UAAU;AAC7B,SAAK,SAAS,KAAK,UAAU;AAC7B,SAAK,QAAQ,KAAK;AAAA,EACpB;AACF;;;ADyCO,SAAS,oBACd,QACA,MAC8B;AAC9B,MAAI,CAAC,UAAU,CAAC,OAAO,YAAa,QAAO;AAC3C,SAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,GAAI,KAAK,YAAY,UAAa,EAAE,SAAS,KAAK,QAAQ;AAAA,IAC1D,GAAI,OAAO,eAAe,UAAa,EAAE,YAAY,OAAO,WAAW;AAAA,IACvE,GAAI,OAAO,0BAA0B,UAAa;AAAA,MAChD,uBAAuB,OAAO;AAAA,IAChC;AAAA,IACA,GAAI,OAAO,WAAW,UAAa,EAAE,QAAQ,OAAO,OAAO;AAAA,IAC3D,GAAI,OAAO,yBAAyB,UAAa;AAAA,MAC/C,sBAAsB,CAAC,GAAG,OAAO,oBAAoB;AAAA,IACvD;AAAA,EACF;AACF;AAoBA,eAAsB,uBACpB,aACA,SACqB;AACrB,MAAI,CAAC,WAAW,CAAC,YAAa,QAAO,EAAE,QAAQ,YAAY;AAE3D,QAAM,UAAU,MAAM,QAAQ;AAC9B,MAAI,QAAQ,GAAI,QAAO,EAAE,QAAQ,WAAW;AAE5C,MAAI,gBAAgB,QAAQ;AAC1B,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,MACpB,GAAI,QAAQ,WAAW,UAAa,EAAE,cAAc,QAAQ,OAAO;AAAA,IACrE;AAAA,EACF;AACA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,cAAc,QAAQ;AAAA,IACtB,YAAY,QAAQ;AAAA,IACpB,GAAI,QAAQ,WAAW,UAAa,EAAE,cAAc,QAAQ,OAAO;AAAA,EACrE;AACF;AAGO,SAAS,uBAAuB,SAAiB,QAAiD;AACvG,MAAI,CAAC,QAAQ,4BAA4B,OAAO,yBAAyB,WAAW,EAAG,QAAO;AAC9F,QAAM,UAAU,IAAI,IAAI,OAAO,yBAAyB,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AACnF,SAAO,QAAQ,IAAI,QAAQ,YAAY,CAAC;AAC1C;AAQO,SAAS,qBACd,OACA,SACA,QACS;AACT,MAAI,CAAC,QAAQ,yBAAyB,OAAO,sBAAsB,WAAW,EAAG,QAAO;AACxF,MAAI,QAAQ,YAAY,MAAM,KAAM,QAAO;AAC3C,QAAM,UAAU,IAAI,IAAI,OAAO,sBAAsB,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAChF,SAAO,QAAQ,IAAI,MAAM,YAAY,CAAC;AACxC;AA6BO,SAAS,8BAA8B,MASrC;AACP,QAAM,OAAO,KAAK,aAAa;AAC/B,QAAM,SAAS,KAAK,eAAe;AACnC,QAAM,OAAO,KAAK,cAAc,IAAI,KAAK,WAAW,MAAM;AAC1D,MAAI,CAAC,uBAAuB,KAAK,SAAS,KAAK,MAAM,GAAG;AACtD,UAAM,IAAI,wBAAwB;AAAA,MAChC;AAAA,MACA,SACE,KAAK,kBACL,iBAAiB,IAAI,OAAO,KAAK,QAAQ,YAAY,KAAK,SAAS;AAAA,MACrE;AAAA,IACF,CAAC;AAAA,EACH;AACA,MAAI,CAAC,qBAAqB,KAAK,OAAO,KAAK,SAAS,KAAK,MAAM,GAAG;AAChE,UAAM,IAAI,wBAAwB;AAAA,MAChC;AAAA,MACA,SACE,KAAK,gBACL,iBAAiB,IAAI,OAAO,KAAK,MAAM,YAAY,KAAK,SAAS;AAAA,MACnE;AAAA,IACF,CAAC;AAAA,EACH;AACF;","names":[]}
+{"version":3,"sources":["../../src/identity/policy.ts","../../src/errors.ts"],"sourcesContent":["/**\n * Per-product / per-tier compliance policy helpers.\n *\n * A *policy* is a small bag of fields describing what identity the merchant wants\n * verified for a given resource:\n *\n * - `enforcement`: `\"hard\"` (the regulated-goods path — 403 on miss) or `\"soft\"` (gate\n *   denial is swallowed; the order completes with a degraded `identity_status`).\n *   `null` / absent = no gate at all.\n * - `requireKyc` / `requireSanctionsClear` / `minAge`: passed through to the\n *   per-framework `agentscoreGate(...)` factory.\n * - `allowedJurisdictions`: buyer-verified country list (`[\"US\", \"CA\", ...]`).\n * - `allowedShippingCountries` / `allowedShippingStates`: optional shipping\n *   allowlists. State list is only enforced for US shipments.\n *\n * This module ships three primitives:\n *\n * 1. {@link PolicyBlock} — the typed shape.\n * 2. {@link buildGateFromPolicy} — translate a block into the options object the\n *    per-framework `agentscoreGate(...)` accepts. Returns `null` when the policy\n *    has no enforcement (treat as \"no gate; anonymous OK\").\n * 3. {@link runGateWithEnforcement} — wrap a per-framework middleware in the\n *    hard/soft enforcement runner. The middleware is given an `onDenied` shim\n *    that captures the denial body and status; the runner returns a structured\n *    {@link GateResult} so the vendor decides how to surface it.\n *\n * All three are additive — vendors using `agentscoreGate(...)` directly are\n * unaffected.\n */\n\nimport { CheckoutValidationError } from '../errors';\nimport type { AgentScoreCoreOptions, DenialReason } from '../core.js';\n\n/** Hard = 403 propagates; soft = swallowed + identity_status=\"unverified\". */\nexport type EnforcementMode = 'hard' | 'soft';\n\n/** Per-order trust level captured at settle time. */\nexport type IdentityStatus = 'verified' | 'unverified' | 'anonymous' | 'denied';\n\n/** Compliance fields a merchant attaches per product / per tier. All optional. */\nexport interface PolicyBlock {\n  enforcement?: EnforcementMode;\n  requireKyc?: boolean;\n  requireSanctionsClear?: boolean;\n  minAge?: number;\n  /** Buyer-verified country blocklist (`[\"RU\", \"KP\", ...]`) — these jurisdictions are denied. */\n  blockedJurisdictions?: readonly string[];\n  allowedJurisdictions?: readonly string[];\n  allowedShippingCountries?: readonly string[];\n  allowedShippingStates?: readonly string[];\n}\n\n/**\n * Outcome of running a gate under an enforcement mode.\n *\n * - `verified`: gate accepted; identity is fully verified for the policy.\n * - `unverified`: soft mode swallowed a gate denial; the agent had *some*\n *   identity but didn't meet the policy. Stamp this on the order so\n *   ops/analytics can tell apart soft passes from hard passes.\n * - `anonymous`: no gate ran (policy was null / no enforcement).\n * - `denied`: hard mode rejected; the caller must propagate the 403. The\n *   `denialBody` and `denialStatus` carry the original gate response so the\n *   caller can return it as-is.\n */\nexport interface GateResult {\n  status: IdentityStatus;\n  denialStatus?: number;\n  denialBody?: Record<string, unknown>;\n  denialReason?: DenialReason;\n}\n\n/**\n * Translate a {@link PolicyBlock} into the options the per-framework\n * `agentscoreGate(...)` expects. Returns `null` when the block has no\n * `enforcement` set — the caller should treat that as \"no gate; anonymous OK\".\n *\n * Use a fresh gate per request rather than constructing once at module scope\n * when the policy varies per resource (e.g. per product). Each adapter's gate\n * is cheap to instantiate.\n */\nexport function buildGateFromPolicy(\n  policy: PolicyBlock | null | undefined,\n  base: { apiKey: string; baseUrl?: string },\n): AgentScoreCoreOptions | null {\n  if (!policy || !policy.enforcement) return null;\n  return {\n    apiKey: base.apiKey,\n    ...(base.baseUrl !== undefined && { baseUrl: base.baseUrl }),\n    ...(policy.requireKyc !== undefined && { requireKyc: policy.requireKyc }),\n    ...(policy.requireSanctionsClear !== undefined && {\n      requireSanctionsClear: policy.requireSanctionsClear,\n    }),\n    ...(policy.minAge !== undefined && { minAge: policy.minAge }),\n    ...(policy.blockedJurisdictions !== undefined && {\n      blockedJurisdictions: [...policy.blockedJurisdictions],\n    }),\n    ...(policy.allowedJurisdictions !== undefined && {\n      allowedJurisdictions: [...policy.allowedJurisdictions],\n    }),\n  };\n}\n\n/**\n * OFAC SDN denial reasons. These are strict-liability: soft enforcement may\n * downgrade KYC / age / jurisdiction misses (the merchant accepts the order with a\n * degraded `identity_status`), but it must NEVER swallow a sanctions deny — falsely\n * settling for a sanctioned wallet is an OFAC violation regardless of the merchant's\n * soft posture. The API emits `sanctions_flagged` in `decision_reasons` for BOTH the\n * operator/wallet SDN hit and the payment-signer OFAC SDN hit;\n * `sanctions_check_unavailable` is the fail-closed unavailable-lookup variant (a\n * missing screen on a strict rail is also a hard deny). Match the canonical strings\n * from `the AgentScore API`.\n */\nconst SANCTIONS_DENIAL_REASONS: ReadonlySet<string> = new Set([\n  'sanctions_flagged',\n  'sanctions_check_unavailable',\n]);\n\n/**\n * True when a gate denial body indicates an OFAC SDN sanctions hit (or unavailable screen).\n *\n * Inspects the flat denial body emitted by `denialReasonToBody`: a `wallet_not_trusted`\n * (or signer-sanctions) deny carries the sanctions reason in `reasons` / `decision_reasons`,\n * or surfaces it as a top-level `error.code`. Used by {@link runGateWithEnforcement} so soft\n * mode can downgrade non-sanctions denials while leaving a sanctions deny terminal.\n */\nexport function isSanctionsDenial(body: Record<string, unknown> | null | undefined): boolean {\n  if (!body || typeof body !== 'object') return false;\n  for (const key of ['reasons', 'decision_reasons'] as const) {\n    const raw = body[key];\n    if (Array.isArray(raw) && raw.some((r) => typeof r === 'string' && SANCTIONS_DENIAL_REASONS.has(r))) {\n      return true;\n    }\n  }\n  // The signer-sanctions SDN deny may also surface as a top-level error code.\n  const error = body.error;\n  const code = error && typeof error === 'object' ? (error as Record<string, unknown>).code : undefined;\n  return typeof code === 'string' && SANCTIONS_DENIAL_REASONS.has(code);\n}\n\n/**\n * Run a per-framework gate middleware respecting the enforcement mode.\n *\n * The vendor passes:\n * - `gate`: their framework's middleware (Hono `MiddlewareHandler`, Express\n *   `(req, res, next) => void`, etc.) — anything that resolves on accept and\n *   throws or returns a `Response` on deny.\n * - `runGate`: a thin adapter that calls the middleware with the framework\n *   context and returns either `{ ok: true }` (gate accepted) or\n *   `{ ok: false, status, body, reason? }` (gate denied with details).\n *\n * `runGateWithEnforcement` wraps that in the hard/soft split:\n *\n * - `gate=null` or `enforcement=null`: no gate fires; status=\"anonymous\".\n * - `enforcement=\"hard\"` + denied: status=\"denied\"; caller propagates denialStatus + denialBody.\n * - `enforcement=\"soft\"` + denied: swallow; status=\"unverified\".\n * - accepted: status=\"verified\".\n *\n * **Sanctions are never swallowed.** Soft mode is a commercial knob — it lets a merchant\n * accept an order from an agent that didn't satisfy KYC / age / jurisdiction (stamping a\n * degraded `identity_status` for ops). But an OFAC SDN sanctions deny is strict-liability:\n * settling for a sanctioned wallet is a violation regardless of the merchant's posture. So a\n * denial whose body indicates sanctions ({@link isSanctionsDenial}) returns `status=\"denied\"`\n * even under `enforcement=\"soft\"`; soft only downgrades the non-sanctions reasons.\n */\nexport async function runGateWithEnforcement(\n  enforcement: EnforcementMode | undefined,\n  runGate: (() => Promise<{ ok: true } | { ok: false; status: number; body: Record<string, unknown>; reason?: DenialReason }>) | null,\n): Promise<GateResult> {\n  if (!runGate || !enforcement) return { status: 'anonymous' };\n\n  const outcome = await runGate();\n  if (outcome.ok) return { status: 'verified' };\n\n  // A sanctions deny stays terminal in BOTH modes — soft only downgrades non-sanctions reasons.\n  if (enforcement === 'hard' || isSanctionsDenial(outcome.body)) {\n    return {\n      status: 'denied',\n      denialStatus: outcome.status,\n      denialBody: outcome.body,\n      ...(outcome.reason !== undefined && { denialReason: outcome.reason }),\n    };\n  }\n  return {\n    status: 'unverified',\n    denialStatus: outcome.status,\n    denialBody: outcome.body,\n    ...(outcome.reason !== undefined && { denialReason: outcome.reason }),\n  };\n}\n\n/** NULL policy / NULL allowlist → ship anywhere. Otherwise country must be in the list. */\nexport function shippingCountryAllowed(country: string, policy: PolicyBlock | null | undefined): boolean {\n  if (!policy?.allowedShippingCountries || policy.allowedShippingCountries.length === 0) return true;\n  const allowed = new Set(policy.allowedShippingCountries.map((c) => c.toUpperCase()));\n  return allowed.has(country.toUpperCase());\n}\n\n/**\n * US-state allowlist (e.g. wine).\n *\n * Only enforced for US shipments — non-US shipments are governed by\n * {@link shippingCountryAllowed} independently.\n */\nexport function shippingStateAllowed(\n  state: string,\n  country: string,\n  policy: PolicyBlock | null | undefined,\n): boolean {\n  if (!policy?.allowedShippingStates || policy.allowedShippingStates.length === 0) return true;\n  if (country.toUpperCase() !== 'US') return true;\n  const allowed = new Set(policy.allowedShippingStates.map((s) => s.toUpperCase()));\n  return allowed.has(state.toUpperCase());\n}\n\n/**\n * Throw {@link CheckoutValidationError} when shipping isn't allowed by the policy.\n *\n * One-call replacement for the\n *\n *     if (!shippingCountryAllowed(...)) throw new CheckoutValidationError(...);\n *     if (!shippingStateAllowed(...))   throw new CheckoutValidationError(...);\n *\n * boilerplate every goods merchant writes in their `preValidate` hook.\n *\n * `policy` is a {@link PolicyBlock} (or `null`/`undefined`); NULL policy means\n * \"ship anywhere\" and the function is a no-op. The reason a location is\n * excluded is **merchant-defined**: it might be regulatory (regulated goods\n * + state allowlist), operational (no fulfillment partner), or commercial\n * (fragility, fraud-rate-by-region, etc.) — the helper doesn't assume.\n *\n * `productName` is the user-facing item name surfaced in the error message\n * (\"Cannot ship 'Wine 2020' to NY ...\"). Omit for a generic message.\n *\n * `errorCode` and `errorAction` let merchants override the canonical denial\n * codes if their consumer agents expect different shapes.\n *\n * `countryMessage` / `stateMessage` override the default messages verbatim\n * (use these when the default phrasing isn't right for your consumer agents\n * — e.g. you want to surface the regulatory reason explicitly, or you want\n * the message in a different language).\n */\nexport function validateShippingAgainstPolicy(opts: {\n  country: string;\n  state: string;\n  policy: PolicyBlock | null | undefined;\n  productName?: string;\n  errorCode?: string;\n  errorAction?: string;\n  countryMessage?: string;\n  stateMessage?: string;\n}): void {\n  const code = opts.errorCode ?? 'unsupported_jurisdiction';\n  const action = opts.errorAction ?? 'change_shipping_state';\n  const item = opts.productName ? `'${opts.productName}'` : 'this item';\n  if (!shippingCountryAllowed(opts.country, opts.policy)) {\n    throw new CheckoutValidationError({\n      code,\n      message:\n        opts.countryMessage ??\n        `We can't ship ${item} to ${opts.country.toUpperCase() || '<unset>'}.`,\n      action,\n    });\n  }\n  if (!shippingStateAllowed(opts.state, opts.country, opts.policy)) {\n    throw new CheckoutValidationError({\n      code,\n      message:\n        opts.stateMessage ??\n        `We can't ship ${item} to ${opts.state.toUpperCase() || '<unset>'}.`,\n      action,\n    });\n  }\n}\n","/**\n * Cross-module typed errors.\n *\n * Lives in its own module so `payment/` and `stripe-multichain/` helpers can\n * throw `CheckoutValidationError` without importing from `checkout.ts` — this\n * also sidesteps tsup's per-entry class duplication.\n *\n * Re-exported from `checkout.ts` and the top-level entry to preserve the\n * public import path.\n */\n\n/**\n * Raised to short-circuit a Checkout flow with a 4xx/5xx envelope. The\n * framework catches this at request-flow boundaries (`preValidate`, recipient\n * minting, settlement dispatch) and emits `{ error, next_steps }` via\n * `buildValidationError` so merchants don't construct response bodies\n * themselves.\n */\nexport class CheckoutValidationError extends Error {\n  readonly code: string;\n  readonly action: string;\n  readonly status: number;\n  readonly extra: Record<string, unknown> | undefined;\n  constructor(opts: {\n    code: string;\n    message: string;\n    action?: string;\n    status?: number;\n    extra?: Record<string, unknown>;\n  }) {\n    super(opts.message);\n    this.name = 'CheckoutValidationError';\n    this.code = opts.code;\n    this.action = opts.action ?? 'fix_request';\n    this.status = opts.status ?? 400;\n    this.extra = opts.extra;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACkBO,IAAM,0BAAN,cAAsC,MAAM;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACT,YAAY,MAMT;AACD,UAAM,KAAK,OAAO;AAClB,SAAK,OAAO;AACZ,SAAK,OAAO,KAAK;AACjB,SAAK,SAAS,KAAK,UAAU;AAC7B,SAAK,SAAS,KAAK,UAAU;AAC7B,SAAK,QAAQ,KAAK;AAAA,EACpB;AACF;;;AD2CO,SAAS,oBACd,QACA,MAC8B;AAC9B,MAAI,CAAC,UAAU,CAAC,OAAO,YAAa,QAAO;AAC3C,SAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,GAAI,KAAK,YAAY,UAAa,EAAE,SAAS,KAAK,QAAQ;AAAA,IAC1D,GAAI,OAAO,eAAe,UAAa,EAAE,YAAY,OAAO,WAAW;AAAA,IACvE,GAAI,OAAO,0BAA0B,UAAa;AAAA,MAChD,uBAAuB,OAAO;AAAA,IAChC;AAAA,IACA,GAAI,OAAO,WAAW,UAAa,EAAE,QAAQ,OAAO,OAAO;AAAA,IAC3D,GAAI,OAAO,yBAAyB,UAAa;AAAA,MAC/C,sBAAsB,CAAC,GAAG,OAAO,oBAAoB;AAAA,IACvD;AAAA,IACA,GAAI,OAAO,yBAAyB,UAAa;AAAA,MAC/C,sBAAsB,CAAC,GAAG,OAAO,oBAAoB;AAAA,IACvD;AAAA,EACF;AACF;AAaA,IAAM,2BAAgD,oBAAI,IAAI;AAAA,EAC5D;AAAA,EACA;AACF,CAAC;AAUM,SAAS,kBAAkB,MAA2D;AAC3F,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,aAAW,OAAO,CAAC,WAAW,kBAAkB,GAAY;AAC1D,UAAM,MAAM,KAAK,GAAG;AACpB,QAAI,MAAM,QAAQ,GAAG,KAAK,IAAI,KAAK,CAAC,MAAM,OAAO,MAAM,YAAY,yBAAyB,IAAI,CAAC,CAAC,GAAG;AACnG,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,QAAQ,KAAK;AACnB,QAAM,OAAO,SAAS,OAAO,UAAU,WAAY,MAAkC,OAAO;AAC5F,SAAO,OAAO,SAAS,YAAY,yBAAyB,IAAI,IAAI;AACtE;AA2BA,eAAsB,uBACpB,aACA,SACqB;AACrB,MAAI,CAAC,WAAW,CAAC,YAAa,QAAO,EAAE,QAAQ,YAAY;AAE3D,QAAM,UAAU,MAAM,QAAQ;AAC9B,MAAI,QAAQ,GAAI,QAAO,EAAE,QAAQ,WAAW;AAG5C,MAAI,gBAAgB,UAAU,kBAAkB,QAAQ,IAAI,GAAG;AAC7D,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,MACpB,GAAI,QAAQ,WAAW,UAAa,EAAE,cAAc,QAAQ,OAAO;AAAA,IACrE;AAAA,EACF;AACA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,cAAc,QAAQ;AAAA,IACtB,YAAY,QAAQ;AAAA,IACpB,GAAI,QAAQ,WAAW,UAAa,EAAE,cAAc,QAAQ,OAAO;AAAA,EACrE;AACF;AAGO,SAAS,uBAAuB,SAAiB,QAAiD;AACvG,MAAI,CAAC,QAAQ,4BAA4B,OAAO,yBAAyB,WAAW,EAAG,QAAO;AAC9F,QAAM,UAAU,IAAI,IAAI,OAAO,yBAAyB,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AACnF,SAAO,QAAQ,IAAI,QAAQ,YAAY,CAAC;AAC1C;AAQO,SAAS,qBACd,OACA,SACA,QACS;AACT,MAAI,CAAC,QAAQ,yBAAyB,OAAO,sBAAsB,WAAW,EAAG,QAAO;AACxF,MAAI,QAAQ,YAAY,MAAM,KAAM,QAAO;AAC3C,QAAM,UAAU,IAAI,IAAI,OAAO,sBAAsB,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAChF,SAAO,QAAQ,IAAI,MAAM,YAAY,CAAC;AACxC;AA6BO,SAAS,8BAA8B,MASrC;AACP,QAAM,OAAO,KAAK,aAAa;AAC/B,QAAM,SAAS,KAAK,eAAe;AACnC,QAAM,OAAO,KAAK,cAAc,IAAI,KAAK,WAAW,MAAM;AAC1D,MAAI,CAAC,uBAAuB,KAAK,SAAS,KAAK,MAAM,GAAG;AACtD,UAAM,IAAI,wBAAwB;AAAA,MAChC;AAAA,MACA,SACE,KAAK,kBACL,iBAAiB,IAAI,OAAO,KAAK,QAAQ,YAAY,KAAK,SAAS;AAAA,MACrE;AAAA,IACF,CAAC;AAAA,EACH;AACA,MAAI,CAAC,qBAAqB,KAAK,OAAO,KAAK,SAAS,KAAK,MAAM,GAAG;AAChE,UAAM,IAAI,wBAAwB;AAAA,MAChC;AAAA,MACA,SACE,KAAK,gBACL,iBAAiB,IAAI,OAAO,KAAK,MAAM,YAAY,KAAK,SAAS;AAAA,MACnE;AAAA,IACF,CAAC;AAAA,EACH;AACF;","names":[]}

package/dist/identity/policy.mjs

@@ -25,16 +25,35 @@ function buildGateFromPolicy(policy, base) {
       requireSanctionsClear: policy.requireSanctionsClear
     },
     ...policy.minAge !== void 0 && { minAge: policy.minAge },
+    ...policy.blockedJurisdictions !== void 0 && {
+      blockedJurisdictions: [...policy.blockedJurisdictions]
+    },
     ...policy.allowedJurisdictions !== void 0 && {
       allowedJurisdictions: [...policy.allowedJurisdictions]
     }
   };
 }
+var SANCTIONS_DENIAL_REASONS = /* @__PURE__ */ new Set([
+  "sanctions_flagged",
+  "sanctions_check_unavailable"
+]);
+function isSanctionsDenial(body) {
+  if (!body || typeof body !== "object") return false;
+  for (const key of ["reasons", "decision_reasons"]) {
+    const raw = body[key];
+    if (Array.isArray(raw) && raw.some((r) => typeof r === "string" && SANCTIONS_DENIAL_REASONS.has(r))) {
+      return true;
+    }
+  }
+  const error = body.error;
+  const code = error && typeof error === "object" ? error.code : void 0;
+  return typeof code === "string" && SANCTIONS_DENIAL_REASONS.has(code);
+}
 async function runGateWithEnforcement(enforcement, runGate) {
   if (!runGate || !enforcement) return { status: "anonymous" };
   const outcome = await runGate();
   if (outcome.ok) return { status: "verified" };
-  if (enforcement === "hard") {
+  if (enforcement === "hard" || isSanctionsDenial(outcome.body)) {
     return {
       status: "denied",
       denialStatus: outcome.status,
@@ -81,6 +100,7 @@ function validateShippingAgainstPolicy(opts) {
 }
 export {
   buildGateFromPolicy,
+  isSanctionsDenial,
   runGateWithEnforcement,
   shippingCountryAllowed,
   shippingStateAllowed,

package/dist/identity/policy.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/errors.ts","../../src/identity/policy.ts"],"sourcesContent":["/**\n * Cross-module typed errors.\n *\n * Lives in its own module so `payment/` and `stripe-multichain/` helpers can\n * throw `CheckoutValidationError` without importing from `checkout.ts` — this\n * also sidesteps tsup's per-entry class duplication.\n *\n * Re-exported from `checkout.ts` and the top-level entry to preserve the\n * public import path.\n */\n\n/**\n * Raised to short-circuit a Checkout flow with a 4xx/5xx envelope. The\n * framework catches this at request-flow boundaries (`preValidate`, recipient\n * minting, settlement dispatch) and emits `{ error, next_steps }` via\n * `buildValidationError` so merchants don't construct response bodies\n * themselves.\n */\nexport class CheckoutValidationError extends Error {\n  readonly code: string;\n  readonly action: string;\n  readonly status: number;\n  readonly extra: Record<string, unknown> | undefined;\n  constructor(opts: {\n    code: string;\n    message: string;\n    action?: string;\n    status?: number;\n    extra?: Record<string, unknown>;\n  }) {\n    super(opts.message);\n    this.name = 'CheckoutValidationError';\n    this.code = opts.code;\n    this.action = opts.action ?? 'fix_request';\n    this.status = opts.status ?? 400;\n    this.extra = opts.extra;\n  }\n}\n","/**\n * Per-product / per-tier compliance policy helpers.\n *\n * A *policy* is a small bag of fields describing what identity the merchant wants\n * verified for a given resource:\n *\n * - `enforcement`: `\"hard\"` (today's wine path — 403 on miss) or `\"soft\"` (gate\n *   denial is swallowed; the order completes with a degraded `identity_status`).\n *   `null` / absent = no gate at all.\n * - `requireKyc` / `requireSanctionsClear` / `minAge`: passed through to the\n *   per-framework `agentscoreGate(...)` factory.\n * - `allowedJurisdictions`: buyer-verified country list (`[\"US\", \"CA\", ...]`).\n * - `allowedShippingCountries` / `allowedShippingStates`: optional shipping\n *   allowlists. State list is only enforced for US shipments.\n *\n * This module ships three primitives:\n *\n * 1. {@link PolicyBlock} — the typed shape.\n * 2. {@link buildGateFromPolicy} — translate a block into the options object the\n *    per-framework `agentscoreGate(...)` accepts. Returns `null` when the policy\n *    has no enforcement (treat as \"no gate; anonymous OK\").\n * 3. {@link runGateWithEnforcement} — wrap a per-framework middleware in the\n *    hard/soft enforcement runner. The middleware is given an `onDenied` shim\n *    that captures the denial body and status; the runner returns a structured\n *    {@link GateResult} so the vendor decides how to surface it.\n *\n * All three are additive — vendors using `agentscoreGate(...)` directly are\n * unaffected.\n */\n\nimport { CheckoutValidationError } from '../errors';\nimport type { AgentScoreCoreOptions, DenialReason } from '../core.js';\n\n/** Hard = 403 propagates; soft = swallowed + identity_status=\"unverified\". */\nexport type EnforcementMode = 'hard' | 'soft';\n\n/** Per-order trust level captured at settle time. */\nexport type IdentityStatus = 'verified' | 'unverified' | 'anonymous' | 'denied';\n\n/** Compliance fields a merchant attaches per product / per tier. All optional. */\nexport interface PolicyBlock {\n  enforcement?: EnforcementMode;\n  requireKyc?: boolean;\n  requireSanctionsClear?: boolean;\n  minAge?: number;\n  allowedJurisdictions?: readonly string[];\n  allowedShippingCountries?: readonly string[];\n  allowedShippingStates?: readonly string[];\n}\n\n/**\n * Outcome of running a gate under an enforcement mode.\n *\n * - `verified`: gate accepted; identity is fully verified for the policy.\n * - `unverified`: soft mode swallowed a gate denial; the agent had *some*\n *   identity but didn't meet the policy. Stamp this on the order so\n *   ops/analytics can tell apart soft passes from hard passes.\n * - `anonymous`: no gate ran (policy was null / no enforcement).\n * - `denied`: hard mode rejected; the caller must propagate the 403. The\n *   `denialBody` and `denialStatus` carry the original gate response so the\n *   caller can return it as-is.\n */\nexport interface GateResult {\n  status: IdentityStatus;\n  denialStatus?: number;\n  denialBody?: Record<string, unknown>;\n  denialReason?: DenialReason;\n}\n\n/**\n * Translate a {@link PolicyBlock} into the options the per-framework\n * `agentscoreGate(...)` expects. Returns `null` when the block has no\n * `enforcement` set — the caller should treat that as \"no gate; anonymous OK\".\n *\n * Use a fresh gate per request rather than constructing once at module scope\n * when the policy varies per resource (e.g. per product). Each adapter's gate\n * is cheap to instantiate.\n */\nexport function buildGateFromPolicy(\n  policy: PolicyBlock | null | undefined,\n  base: { apiKey: string; baseUrl?: string },\n): AgentScoreCoreOptions | null {\n  if (!policy || !policy.enforcement) return null;\n  return {\n    apiKey: base.apiKey,\n    ...(base.baseUrl !== undefined && { baseUrl: base.baseUrl }),\n    ...(policy.requireKyc !== undefined && { requireKyc: policy.requireKyc }),\n    ...(policy.requireSanctionsClear !== undefined && {\n      requireSanctionsClear: policy.requireSanctionsClear,\n    }),\n    ...(policy.minAge !== undefined && { minAge: policy.minAge }),\n    ...(policy.allowedJurisdictions !== undefined && {\n      allowedJurisdictions: [...policy.allowedJurisdictions],\n    }),\n  };\n}\n\n/**\n * Run a per-framework gate middleware respecting the enforcement mode.\n *\n * The vendor passes:\n * - `gate`: their framework's middleware (Hono `MiddlewareHandler`, Express\n *   `(req, res, next) => void`, etc.) — anything that resolves on accept and\n *   throws or returns a `Response` on deny.\n * - `runGate`: a thin adapter that calls the middleware with the framework\n *   context and returns either `{ ok: true }` (gate accepted) or\n *   `{ ok: false, status, body, reason? }` (gate denied with details).\n *\n * `runGateWithEnforcement` wraps that in the hard/soft split:\n *\n * - `gate=null` or `enforcement=null`: no gate fires; status=\"anonymous\".\n * - `enforcement=\"hard\"` + denied: status=\"denied\"; caller propagates denialStatus + denialBody.\n * - `enforcement=\"soft\"` + denied: swallow; status=\"unverified\".\n * - accepted: status=\"verified\".\n */\nexport async function runGateWithEnforcement(\n  enforcement: EnforcementMode | undefined,\n  runGate: (() => Promise<{ ok: true } | { ok: false; status: number; body: Record<string, unknown>; reason?: DenialReason }>) | null,\n): Promise<GateResult> {\n  if (!runGate || !enforcement) return { status: 'anonymous' };\n\n  const outcome = await runGate();\n  if (outcome.ok) return { status: 'verified' };\n\n  if (enforcement === 'hard') {\n    return {\n      status: 'denied',\n      denialStatus: outcome.status,\n      denialBody: outcome.body,\n      ...(outcome.reason !== undefined && { denialReason: outcome.reason }),\n    };\n  }\n  return {\n    status: 'unverified',\n    denialStatus: outcome.status,\n    denialBody: outcome.body,\n    ...(outcome.reason !== undefined && { denialReason: outcome.reason }),\n  };\n}\n\n/** NULL policy / NULL allowlist → ship anywhere. Otherwise country must be in the list. */\nexport function shippingCountryAllowed(country: string, policy: PolicyBlock | null | undefined): boolean {\n  if (!policy?.allowedShippingCountries || policy.allowedShippingCountries.length === 0) return true;\n  const allowed = new Set(policy.allowedShippingCountries.map((c) => c.toUpperCase()));\n  return allowed.has(country.toUpperCase());\n}\n\n/**\n * US-state allowlist (e.g. wine).\n *\n * Only enforced for US shipments — non-US shipments are governed by\n * {@link shippingCountryAllowed} independently.\n */\nexport function shippingStateAllowed(\n  state: string,\n  country: string,\n  policy: PolicyBlock | null | undefined,\n): boolean {\n  if (!policy?.allowedShippingStates || policy.allowedShippingStates.length === 0) return true;\n  if (country.toUpperCase() !== 'US') return true;\n  const allowed = new Set(policy.allowedShippingStates.map((s) => s.toUpperCase()));\n  return allowed.has(state.toUpperCase());\n}\n\n/**\n * Throw {@link CheckoutValidationError} when shipping isn't allowed by the policy.\n *\n * One-call replacement for the\n *\n *     if (!shippingCountryAllowed(...)) throw new CheckoutValidationError(...);\n *     if (!shippingStateAllowed(...))   throw new CheckoutValidationError(...);\n *\n * boilerplate every goods merchant writes in their `preValidate` hook.\n *\n * `policy` is a {@link PolicyBlock} (or `null`/`undefined`); NULL policy means\n * \"ship anywhere\" and the function is a no-op. The reason a location is\n * excluded is **merchant-defined**: it might be regulatory (regulated goods\n * + state allowlist), operational (no fulfillment partner), or commercial\n * (fragility, fraud-rate-by-region, etc.) — the helper doesn't assume.\n *\n * `productName` is the user-facing item name surfaced in the error message\n * (\"Cannot ship 'Wine 2020' to NY ...\"). Omit for a generic message.\n *\n * `errorCode` and `errorAction` let merchants override the canonical denial\n * codes if their consumer agents expect different shapes.\n *\n * `countryMessage` / `stateMessage` override the default messages verbatim\n * (use these when the default phrasing isn't right for your consumer agents\n * — e.g. you want to surface the regulatory reason explicitly, or you want\n * the message in a different language).\n */\nexport function validateShippingAgainstPolicy(opts: {\n  country: string;\n  state: string;\n  policy: PolicyBlock | null | undefined;\n  productName?: string;\n  errorCode?: string;\n  errorAction?: string;\n  countryMessage?: string;\n  stateMessage?: string;\n}): void {\n  const code = opts.errorCode ?? 'unsupported_jurisdiction';\n  const action = opts.errorAction ?? 'change_shipping_state';\n  const item = opts.productName ? `'${opts.productName}'` : 'this item';\n  if (!shippingCountryAllowed(opts.country, opts.policy)) {\n    throw new CheckoutValidationError({\n      code,\n      message:\n        opts.countryMessage ??\n        `We can't ship ${item} to ${opts.country.toUpperCase() || '<unset>'}.`,\n      action,\n    });\n  }\n  if (!shippingStateAllowed(opts.state, opts.country, opts.policy)) {\n    throw new CheckoutValidationError({\n      code,\n      message:\n        opts.stateMessage ??\n        `We can't ship ${item} to ${opts.state.toUpperCase() || '<unset>'}.`,\n      action,\n    });\n  }\n}\n"],"mappings":";AAkBO,IAAM,0BAAN,cAAsC,MAAM;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACT,YAAY,MAMT;AACD,UAAM,KAAK,OAAO;AAClB,SAAK,OAAO;AACZ,SAAK,OAAO,KAAK;AACjB,SAAK,SAAS,KAAK,UAAU;AAC7B,SAAK,SAAS,KAAK,UAAU;AAC7B,SAAK,QAAQ,KAAK;AAAA,EACpB;AACF;;;ACyCO,SAAS,oBACd,QACA,MAC8B;AAC9B,MAAI,CAAC,UAAU,CAAC,OAAO,YAAa,QAAO;AAC3C,SAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,GAAI,KAAK,YAAY,UAAa,EAAE,SAAS,KAAK,QAAQ;AAAA,IAC1D,GAAI,OAAO,eAAe,UAAa,EAAE,YAAY,OAAO,WAAW;AAAA,IACvE,GAAI,OAAO,0BAA0B,UAAa;AAAA,MAChD,uBAAuB,OAAO;AAAA,IAChC;AAAA,IACA,GAAI,OAAO,WAAW,UAAa,EAAE,QAAQ,OAAO,OAAO;AAAA,IAC3D,GAAI,OAAO,yBAAyB,UAAa;AAAA,MAC/C,sBAAsB,CAAC,GAAG,OAAO,oBAAoB;AAAA,IACvD;AAAA,EACF;AACF;AAoBA,eAAsB,uBACpB,aACA,SACqB;AACrB,MAAI,CAAC,WAAW,CAAC,YAAa,QAAO,EAAE,QAAQ,YAAY;AAE3D,QAAM,UAAU,MAAM,QAAQ;AAC9B,MAAI,QAAQ,GAAI,QAAO,EAAE,QAAQ,WAAW;AAE5C,MAAI,gBAAgB,QAAQ;AAC1B,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,MACpB,GAAI,QAAQ,WAAW,UAAa,EAAE,cAAc,QAAQ,OAAO;AAAA,IACrE;AAAA,EACF;AACA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,cAAc,QAAQ;AAAA,IACtB,YAAY,QAAQ;AAAA,IACpB,GAAI,QAAQ,WAAW,UAAa,EAAE,cAAc,QAAQ,OAAO;AAAA,EACrE;AACF;AAGO,SAAS,uBAAuB,SAAiB,QAAiD;AACvG,MAAI,CAAC,QAAQ,4BAA4B,OAAO,yBAAyB,WAAW,EAAG,QAAO;AAC9F,QAAM,UAAU,IAAI,IAAI,OAAO,yBAAyB,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AACnF,SAAO,QAAQ,IAAI,QAAQ,YAAY,CAAC;AAC1C;AAQO,SAAS,qBACd,OACA,SACA,QACS;AACT,MAAI,CAAC,QAAQ,yBAAyB,OAAO,sBAAsB,WAAW,EAAG,QAAO;AACxF,MAAI,QAAQ,YAAY,MAAM,KAAM,QAAO;AAC3C,QAAM,UAAU,IAAI,IAAI,OAAO,sBAAsB,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAChF,SAAO,QAAQ,IAAI,MAAM,YAAY,CAAC;AACxC;AA6BO,SAAS,8BAA8B,MASrC;AACP,QAAM,OAAO,KAAK,aAAa;AAC/B,QAAM,SAAS,KAAK,eAAe;AACnC,QAAM,OAAO,KAAK,cAAc,IAAI,KAAK,WAAW,MAAM;AAC1D,MAAI,CAAC,uBAAuB,KAAK,SAAS,KAAK,MAAM,GAAG;AACtD,UAAM,IAAI,wBAAwB;AAAA,MAChC;AAAA,MACA,SACE,KAAK,kBACL,iBAAiB,IAAI,OAAO,KAAK,QAAQ,YAAY,KAAK,SAAS;AAAA,MACrE;AAAA,IACF,CAAC;AAAA,EACH;AACA,MAAI,CAAC,qBAAqB,KAAK,OAAO,KAAK,SAAS,KAAK,MAAM,GAAG;AAChE,UAAM,IAAI,wBAAwB;AAAA,MAChC;AAAA,MACA,SACE,KAAK,gBACL,iBAAiB,IAAI,OAAO,KAAK,MAAM,YAAY,KAAK,SAAS;AAAA,MACnE;AAAA,IACF,CAAC;AAAA,EACH;AACF;","names":[]}
+{"version":3,"sources":["../../src/errors.ts","../../src/identity/policy.ts"],"sourcesContent":["/**\n * Cross-module typed errors.\n *\n * Lives in its own module so `payment/` and `stripe-multichain/` helpers can\n * throw `CheckoutValidationError` without importing from `checkout.ts` — this\n * also sidesteps tsup's per-entry class duplication.\n *\n * Re-exported from `checkout.ts` and the top-level entry to preserve the\n * public import path.\n */\n\n/**\n * Raised to short-circuit a Checkout flow with a 4xx/5xx envelope. The\n * framework catches this at request-flow boundaries (`preValidate`, recipient\n * minting, settlement dispatch) and emits `{ error, next_steps }` via\n * `buildValidationError` so merchants don't construct response bodies\n * themselves.\n */\nexport class CheckoutValidationError extends Error {\n  readonly code: string;\n  readonly action: string;\n  readonly status: number;\n  readonly extra: Record<string, unknown> | undefined;\n  constructor(opts: {\n    code: string;\n    message: string;\n    action?: string;\n    status?: number;\n    extra?: Record<string, unknown>;\n  }) {\n    super(opts.message);\n    this.name = 'CheckoutValidationError';\n    this.code = opts.code;\n    this.action = opts.action ?? 'fix_request';\n    this.status = opts.status ?? 400;\n    this.extra = opts.extra;\n  }\n}\n","/**\n * Per-product / per-tier compliance policy helpers.\n *\n * A *policy* is a small bag of fields describing what identity the merchant wants\n * verified for a given resource:\n *\n * - `enforcement`: `\"hard\"` (the regulated-goods path — 403 on miss) or `\"soft\"` (gate\n *   denial is swallowed; the order completes with a degraded `identity_status`).\n *   `null` / absent = no gate at all.\n * - `requireKyc` / `requireSanctionsClear` / `minAge`: passed through to the\n *   per-framework `agentscoreGate(...)` factory.\n * - `allowedJurisdictions`: buyer-verified country list (`[\"US\", \"CA\", ...]`).\n * - `allowedShippingCountries` / `allowedShippingStates`: optional shipping\n *   allowlists. State list is only enforced for US shipments.\n *\n * This module ships three primitives:\n *\n * 1. {@link PolicyBlock} — the typed shape.\n * 2. {@link buildGateFromPolicy} — translate a block into the options object the\n *    per-framework `agentscoreGate(...)` accepts. Returns `null` when the policy\n *    has no enforcement (treat as \"no gate; anonymous OK\").\n * 3. {@link runGateWithEnforcement} — wrap a per-framework middleware in the\n *    hard/soft enforcement runner. The middleware is given an `onDenied` shim\n *    that captures the denial body and status; the runner returns a structured\n *    {@link GateResult} so the vendor decides how to surface it.\n *\n * All three are additive — vendors using `agentscoreGate(...)` directly are\n * unaffected.\n */\n\nimport { CheckoutValidationError } from '../errors';\nimport type { AgentScoreCoreOptions, DenialReason } from '../core.js';\n\n/** Hard = 403 propagates; soft = swallowed + identity_status=\"unverified\". */\nexport type EnforcementMode = 'hard' | 'soft';\n\n/** Per-order trust level captured at settle time. */\nexport type IdentityStatus = 'verified' | 'unverified' | 'anonymous' | 'denied';\n\n/** Compliance fields a merchant attaches per product / per tier. All optional. */\nexport interface PolicyBlock {\n  enforcement?: EnforcementMode;\n  requireKyc?: boolean;\n  requireSanctionsClear?: boolean;\n  minAge?: number;\n  /** Buyer-verified country blocklist (`[\"RU\", \"KP\", ...]`) — these jurisdictions are denied. */\n  blockedJurisdictions?: readonly string[];\n  allowedJurisdictions?: readonly string[];\n  allowedShippingCountries?: readonly string[];\n  allowedShippingStates?: readonly string[];\n}\n\n/**\n * Outcome of running a gate under an enforcement mode.\n *\n * - `verified`: gate accepted; identity is fully verified for the policy.\n * - `unverified`: soft mode swallowed a gate denial; the agent had *some*\n *   identity but didn't meet the policy. Stamp this on the order so\n *   ops/analytics can tell apart soft passes from hard passes.\n * - `anonymous`: no gate ran (policy was null / no enforcement).\n * - `denied`: hard mode rejected; the caller must propagate the 403. The\n *   `denialBody` and `denialStatus` carry the original gate response so the\n *   caller can return it as-is.\n */\nexport interface GateResult {\n  status: IdentityStatus;\n  denialStatus?: number;\n  denialBody?: Record<string, unknown>;\n  denialReason?: DenialReason;\n}\n\n/**\n * Translate a {@link PolicyBlock} into the options the per-framework\n * `agentscoreGate(...)` expects. Returns `null` when the block has no\n * `enforcement` set — the caller should treat that as \"no gate; anonymous OK\".\n *\n * Use a fresh gate per request rather than constructing once at module scope\n * when the policy varies per resource (e.g. per product). Each adapter's gate\n * is cheap to instantiate.\n */\nexport function buildGateFromPolicy(\n  policy: PolicyBlock | null | undefined,\n  base: { apiKey: string; baseUrl?: string },\n): AgentScoreCoreOptions | null {\n  if (!policy || !policy.enforcement) return null;\n  return {\n    apiKey: base.apiKey,\n    ...(base.baseUrl !== undefined && { baseUrl: base.baseUrl }),\n    ...(policy.requireKyc !== undefined && { requireKyc: policy.requireKyc }),\n    ...(policy.requireSanctionsClear !== undefined && {\n      requireSanctionsClear: policy.requireSanctionsClear,\n    }),\n    ...(policy.minAge !== undefined && { minAge: policy.minAge }),\n    ...(policy.blockedJurisdictions !== undefined && {\n      blockedJurisdictions: [...policy.blockedJurisdictions],\n    }),\n    ...(policy.allowedJurisdictions !== undefined && {\n      allowedJurisdictions: [...policy.allowedJurisdictions],\n    }),\n  };\n}\n\n/**\n * OFAC SDN denial reasons. These are strict-liability: soft enforcement may\n * downgrade KYC / age / jurisdiction misses (the merchant accepts the order with a\n * degraded `identity_status`), but it must NEVER swallow a sanctions deny — falsely\n * settling for a sanctioned wallet is an OFAC violation regardless of the merchant's\n * soft posture. The API emits `sanctions_flagged` in `decision_reasons` for BOTH the\n * operator/wallet SDN hit and the payment-signer OFAC SDN hit;\n * `sanctions_check_unavailable` is the fail-closed unavailable-lookup variant (a\n * missing screen on a strict rail is also a hard deny). Match the canonical strings\n * from `the AgentScore API`.\n */\nconst SANCTIONS_DENIAL_REASONS: ReadonlySet<string> = new Set([\n  'sanctions_flagged',\n  'sanctions_check_unavailable',\n]);\n\n/**\n * True when a gate denial body indicates an OFAC SDN sanctions hit (or unavailable screen).\n *\n * Inspects the flat denial body emitted by `denialReasonToBody`: a `wallet_not_trusted`\n * (or signer-sanctions) deny carries the sanctions reason in `reasons` / `decision_reasons`,\n * or surfaces it as a top-level `error.code`. Used by {@link runGateWithEnforcement} so soft\n * mode can downgrade non-sanctions denials while leaving a sanctions deny terminal.\n */\nexport function isSanctionsDenial(body: Record<string, unknown> | null | undefined): boolean {\n  if (!body || typeof body !== 'object') return false;\n  for (const key of ['reasons', 'decision_reasons'] as const) {\n    const raw = body[key];\n    if (Array.isArray(raw) && raw.some((r) => typeof r === 'string' && SANCTIONS_DENIAL_REASONS.has(r))) {\n      return true;\n    }\n  }\n  // The signer-sanctions SDN deny may also surface as a top-level error code.\n  const error = body.error;\n  const code = error && typeof error === 'object' ? (error as Record<string, unknown>).code : undefined;\n  return typeof code === 'string' && SANCTIONS_DENIAL_REASONS.has(code);\n}\n\n/**\n * Run a per-framework gate middleware respecting the enforcement mode.\n *\n * The vendor passes:\n * - `gate`: their framework's middleware (Hono `MiddlewareHandler`, Express\n *   `(req, res, next) => void`, etc.) — anything that resolves on accept and\n *   throws or returns a `Response` on deny.\n * - `runGate`: a thin adapter that calls the middleware with the framework\n *   context and returns either `{ ok: true }` (gate accepted) or\n *   `{ ok: false, status, body, reason? }` (gate denied with details).\n *\n * `runGateWithEnforcement` wraps that in the hard/soft split:\n *\n * - `gate=null` or `enforcement=null`: no gate fires; status=\"anonymous\".\n * - `enforcement=\"hard\"` + denied: status=\"denied\"; caller propagates denialStatus + denialBody.\n * - `enforcement=\"soft\"` + denied: swallow; status=\"unverified\".\n * - accepted: status=\"verified\".\n *\n * **Sanctions are never swallowed.** Soft mode is a commercial knob — it lets a merchant\n * accept an order from an agent that didn't satisfy KYC / age / jurisdiction (stamping a\n * degraded `identity_status` for ops). But an OFAC SDN sanctions deny is strict-liability:\n * settling for a sanctioned wallet is a violation regardless of the merchant's posture. So a\n * denial whose body indicates sanctions ({@link isSanctionsDenial}) returns `status=\"denied\"`\n * even under `enforcement=\"soft\"`; soft only downgrades the non-sanctions reasons.\n */\nexport async function runGateWithEnforcement(\n  enforcement: EnforcementMode | undefined,\n  runGate: (() => Promise<{ ok: true } | { ok: false; status: number; body: Record<string, unknown>; reason?: DenialReason }>) | null,\n): Promise<GateResult> {\n  if (!runGate || !enforcement) return { status: 'anonymous' };\n\n  const outcome = await runGate();\n  if (outcome.ok) return { status: 'verified' };\n\n  // A sanctions deny stays terminal in BOTH modes — soft only downgrades non-sanctions reasons.\n  if (enforcement === 'hard' || isSanctionsDenial(outcome.body)) {\n    return {\n      status: 'denied',\n      denialStatus: outcome.status,\n      denialBody: outcome.body,\n      ...(outcome.reason !== undefined && { denialReason: outcome.reason }),\n    };\n  }\n  return {\n    status: 'unverified',\n    denialStatus: outcome.status,\n    denialBody: outcome.body,\n    ...(outcome.reason !== undefined && { denialReason: outcome.reason }),\n  };\n}\n\n/** NULL policy / NULL allowlist → ship anywhere. Otherwise country must be in the list. */\nexport function shippingCountryAllowed(country: string, policy: PolicyBlock | null | undefined): boolean {\n  if (!policy?.allowedShippingCountries || policy.allowedShippingCountries.length === 0) return true;\n  const allowed = new Set(policy.allowedShippingCountries.map((c) => c.toUpperCase()));\n  return allowed.has(country.toUpperCase());\n}\n\n/**\n * US-state allowlist (e.g. wine).\n *\n * Only enforced for US shipments — non-US shipments are governed by\n * {@link shippingCountryAllowed} independently.\n */\nexport function shippingStateAllowed(\n  state: string,\n  country: string,\n  policy: PolicyBlock | null | undefined,\n): boolean {\n  if (!policy?.allowedShippingStates || policy.allowedShippingStates.length === 0) return true;\n  if (country.toUpperCase() !== 'US') return true;\n  const allowed = new Set(policy.allowedShippingStates.map((s) => s.toUpperCase()));\n  return allowed.has(state.toUpperCase());\n}\n\n/**\n * Throw {@link CheckoutValidationError} when shipping isn't allowed by the policy.\n *\n * One-call replacement for the\n *\n *     if (!shippingCountryAllowed(...)) throw new CheckoutValidationError(...);\n *     if (!shippingStateAllowed(...))   throw new CheckoutValidationError(...);\n *\n * boilerplate every goods merchant writes in their `preValidate` hook.\n *\n * `policy` is a {@link PolicyBlock} (or `null`/`undefined`); NULL policy means\n * \"ship anywhere\" and the function is a no-op. The reason a location is\n * excluded is **merchant-defined**: it might be regulatory (regulated goods\n * + state allowlist), operational (no fulfillment partner), or commercial\n * (fragility, fraud-rate-by-region, etc.) — the helper doesn't assume.\n *\n * `productName` is the user-facing item name surfaced in the error message\n * (\"Cannot ship 'Wine 2020' to NY ...\"). Omit for a generic message.\n *\n * `errorCode` and `errorAction` let merchants override the canonical denial\n * codes if their consumer agents expect different shapes.\n *\n * `countryMessage` / `stateMessage` override the default messages verbatim\n * (use these when the default phrasing isn't right for your consumer agents\n * — e.g. you want to surface the regulatory reason explicitly, or you want\n * the message in a different language).\n */\nexport function validateShippingAgainstPolicy(opts: {\n  country: string;\n  state: string;\n  policy: PolicyBlock | null | undefined;\n  productName?: string;\n  errorCode?: string;\n  errorAction?: string;\n  countryMessage?: string;\n  stateMessage?: string;\n}): void {\n  const code = opts.errorCode ?? 'unsupported_jurisdiction';\n  const action = opts.errorAction ?? 'change_shipping_state';\n  const item = opts.productName ? `'${opts.productName}'` : 'this item';\n  if (!shippingCountryAllowed(opts.country, opts.policy)) {\n    throw new CheckoutValidationError({\n      code,\n      message:\n        opts.countryMessage ??\n        `We can't ship ${item} to ${opts.country.toUpperCase() || '<unset>'}.`,\n      action,\n    });\n  }\n  if (!shippingStateAllowed(opts.state, opts.country, opts.policy)) {\n    throw new CheckoutValidationError({\n      code,\n      message:\n        opts.stateMessage ??\n        `We can't ship ${item} to ${opts.state.toUpperCase() || '<unset>'}.`,\n      action,\n    });\n  }\n}\n"],"mappings":";AAkBO,IAAM,0BAAN,cAAsC,MAAM;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACT,YAAY,MAMT;AACD,UAAM,KAAK,OAAO;AAClB,SAAK,OAAO;AACZ,SAAK,OAAO,KAAK;AACjB,SAAK,SAAS,KAAK,UAAU;AAC7B,SAAK,SAAS,KAAK,UAAU;AAC7B,SAAK,QAAQ,KAAK;AAAA,EACpB;AACF;;;AC2CO,SAAS,oBACd,QACA,MAC8B;AAC9B,MAAI,CAAC,UAAU,CAAC,OAAO,YAAa,QAAO;AAC3C,SAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,GAAI,KAAK,YAAY,UAAa,EAAE,SAAS,KAAK,QAAQ;AAAA,IAC1D,GAAI,OAAO,eAAe,UAAa,EAAE,YAAY,OAAO,WAAW;AAAA,IACvE,GAAI,OAAO,0BAA0B,UAAa;AAAA,MAChD,uBAAuB,OAAO;AAAA,IAChC;AAAA,IACA,GAAI,OAAO,WAAW,UAAa,EAAE,QAAQ,OAAO,OAAO;AAAA,IAC3D,GAAI,OAAO,yBAAyB,UAAa;AAAA,MAC/C,sBAAsB,CAAC,GAAG,OAAO,oBAAoB;AAAA,IACvD;AAAA,IACA,GAAI,OAAO,yBAAyB,UAAa;AAAA,MAC/C,sBAAsB,CAAC,GAAG,OAAO,oBAAoB;AAAA,IACvD;AAAA,EACF;AACF;AAaA,IAAM,2BAAgD,oBAAI,IAAI;AAAA,EAC5D;AAAA,EACA;AACF,CAAC;AAUM,SAAS,kBAAkB,MAA2D;AAC3F,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,aAAW,OAAO,CAAC,WAAW,kBAAkB,GAAY;AAC1D,UAAM,MAAM,KAAK,GAAG;AACpB,QAAI,MAAM,QAAQ,GAAG,KAAK,IAAI,KAAK,CAAC,MAAM,OAAO,MAAM,YAAY,yBAAyB,IAAI,CAAC,CAAC,GAAG;AACnG,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,QAAQ,KAAK;AACnB,QAAM,OAAO,SAAS,OAAO,UAAU,WAAY,MAAkC,OAAO;AAC5F,SAAO,OAAO,SAAS,YAAY,yBAAyB,IAAI,IAAI;AACtE;AA2BA,eAAsB,uBACpB,aACA,SACqB;AACrB,MAAI,CAAC,WAAW,CAAC,YAAa,QAAO,EAAE,QAAQ,YAAY;AAE3D,QAAM,UAAU,MAAM,QAAQ;AAC9B,MAAI,QAAQ,GAAI,QAAO,EAAE,QAAQ,WAAW;AAG5C,MAAI,gBAAgB,UAAU,kBAAkB,QAAQ,IAAI,GAAG;AAC7D,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,MACpB,GAAI,QAAQ,WAAW,UAAa,EAAE,cAAc,QAAQ,OAAO;AAAA,IACrE;AAAA,EACF;AACA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,cAAc,QAAQ;AAAA,IACtB,YAAY,QAAQ;AAAA,IACpB,GAAI,QAAQ,WAAW,UAAa,EAAE,cAAc,QAAQ,OAAO;AAAA,EACrE;AACF;AAGO,SAAS,uBAAuB,SAAiB,QAAiD;AACvG,MAAI,CAAC,QAAQ,4BAA4B,OAAO,yBAAyB,WAAW,EAAG,QAAO;AAC9F,QAAM,UAAU,IAAI,IAAI,OAAO,yBAAyB,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AACnF,SAAO,QAAQ,IAAI,QAAQ,YAAY,CAAC;AAC1C;AAQO,SAAS,qBACd,OACA,SACA,QACS;AACT,MAAI,CAAC,QAAQ,yBAAyB,OAAO,sBAAsB,WAAW,EAAG,QAAO;AACxF,MAAI,QAAQ,YAAY,MAAM,KAAM,QAAO;AAC3C,QAAM,UAAU,IAAI,IAAI,OAAO,sBAAsB,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAChF,SAAO,QAAQ,IAAI,MAAM,YAAY,CAAC;AACxC;AA6BO,SAAS,8BAA8B,MASrC;AACP,QAAM,OAAO,KAAK,aAAa;AAC/B,QAAM,SAAS,KAAK,eAAe;AACnC,QAAM,OAAO,KAAK,cAAc,IAAI,KAAK,WAAW,MAAM;AAC1D,MAAI,CAAC,uBAAuB,KAAK,SAAS,KAAK,MAAM,GAAG;AACtD,UAAM,IAAI,wBAAwB;AAAA,MAChC;AAAA,MACA,SACE,KAAK,kBACL,iBAAiB,IAAI,OAAO,KAAK,QAAQ,YAAY,KAAK,SAAS;AAAA,MACrE;AAAA,IACF,CAAC;AAAA,EACH;AACA,MAAI,CAAC,qBAAqB,KAAK,OAAO,KAAK,SAAS,KAAK,MAAM,GAAG;AAChE,UAAM,IAAI,wBAAwB;AAAA,MAChC;AAAA,MACA,SACE,KAAK,gBACL,iBAAiB,IAAI,OAAO,KAAK,MAAM,YAAY,KAAK,SAAS;AAAA,MACnE;AAAA,IACF,CAAC;AAAA,EACH;AACF;","names":[]}

package/dist/identity/web.d.mts

@@ -1,4 +1,8 @@
+import { d as AipGateOptions, o as buildAipErrorBody, V as VerifiedAit } from '../gate-GCXy4FHI.mjs';
 import { AgentScoreCoreOptions, AgentIdentity, DenialReason, CreateSessionOnMissing, AssessResult, SignerVerdict, FailOpenInfraReason, GateQuotaInfo } from '../core.mjs';
+import '../types-D1slMt0H.mjs';
+import 'jose';
+import '@agent-score/sdk';
 import '../signer-3FAit11j.mjs';
 
 interface AgentScoreGateOptions extends Omit<AgentScoreCoreOptions, 'createSessionOnMissing'> {
@@ -96,5 +100,26 @@ declare function createConditionalAgentScoreGate(options: AgentScoreGateOptions)
 /** Wrapper variant matching `withAgentScoreGate(opts, handler)` that only
  *  invokes the gate when a payment credential is attached. */
 declare function withConditionalAgentScoreGate<TCtx = unknown>(options: AgentScoreGateOptions, handler: Parameters<typeof withAgentScoreGate<TCtx>>[1]): (req: Request, ctx: TCtx) => Promise<Response>;
+type AipGuardResult = {
+    allowed: true;
+    ait: VerifiedAit;
+} | {
+    allowed: false;
+    response: Response;
+};
+interface AipGateWebOptions extends AipGateOptions {
+    /** Custom denial responder. Defaults to a 401/403 `application/problem+json` Response. */
+    onDenied?: (req: Request, body: ReturnType<typeof buildAipErrorBody>) => Response | Promise<Response>;
+}
+/** Create a Web Fetch AIP guard: returns `{ allowed, ait }` or `{ allowed: false, response }`. */
+declare function createAipGate(options: AipGateWebOptions): (req: Request) => Promise<AipGuardResult>;
+/** Wrap a Web Fetch handler with the AIP gate. Denied requests return the problem+json Response. */
+declare function withAipGate<TCtx = unknown>(options: AipGateWebOptions, handler: (req: Request, gate: {
+    ait: VerifiedAit;
+}, ctx?: TCtx) => Response | Promise<Response>): (req: Request, ctx?: TCtx) => Promise<Response>;
+/** Conditional variant: only runs the AIP gate when an `Agent-Identity` header is present. */
+declare function withConditionalAipGate<TCtx = unknown>(options: AipGateWebOptions, handler: (req: Request, gate: {
+    ait?: VerifiedAit;
+}, ctx?: TCtx) => Response | Promise<Response>): (req: Request, ctx?: TCtx) => Promise<Response>;
 
-export { type GuardResult, createAgentScoreGate, createConditionalAgentScoreGate, withAgentScoreGate, withConditionalAgentScoreGate };
+export { type AipGateWebOptions, type AipGuardResult, type GuardResult, createAgentScoreGate, createAipGate, createConditionalAgentScoreGate, withAgentScoreGate, withAipGate, withConditionalAgentScoreGate, withConditionalAipGate };

package/dist/identity/web.d.ts

@@ -1,4 +1,8 @@
+import { d as AipGateOptions, o as buildAipErrorBody, V as VerifiedAit } from '../gate-D2RP6bZg.js';
 import { AgentScoreCoreOptions, AgentIdentity, DenialReason, CreateSessionOnMissing, AssessResult, SignerVerdict, FailOpenInfraReason, GateQuotaInfo } from '../core.js';
+import '../types-D1slMt0H.js';
+import 'jose';
+import '@agent-score/sdk';
 import '../signer-3FAit11j.js';
 
 interface AgentScoreGateOptions extends Omit<AgentScoreCoreOptions, 'createSessionOnMissing'> {
@@ -96,5 +100,26 @@ declare function createConditionalAgentScoreGate(options: AgentScoreGateOptions)
 /** Wrapper variant matching `withAgentScoreGate(opts, handler)` that only
  *  invokes the gate when a payment credential is attached. */
 declare function withConditionalAgentScoreGate<TCtx = unknown>(options: AgentScoreGateOptions, handler: Parameters<typeof withAgentScoreGate<TCtx>>[1]): (req: Request, ctx: TCtx) => Promise<Response>;
+type AipGuardResult = {
+    allowed: true;
+    ait: VerifiedAit;
+} | {
+    allowed: false;
+    response: Response;
+};
+interface AipGateWebOptions extends AipGateOptions {
+    /** Custom denial responder. Defaults to a 401/403 `application/problem+json` Response. */
+    onDenied?: (req: Request, body: ReturnType<typeof buildAipErrorBody>) => Response | Promise<Response>;
+}
+/** Create a Web Fetch AIP guard: returns `{ allowed, ait }` or `{ allowed: false, response }`. */
+declare function createAipGate(options: AipGateWebOptions): (req: Request) => Promise<AipGuardResult>;
+/** Wrap a Web Fetch handler with the AIP gate. Denied requests return the problem+json Response. */
+declare function withAipGate<TCtx = unknown>(options: AipGateWebOptions, handler: (req: Request, gate: {
+    ait: VerifiedAit;
+}, ctx?: TCtx) => Response | Promise<Response>): (req: Request, ctx?: TCtx) => Promise<Response>;
+/** Conditional variant: only runs the AIP gate when an `Agent-Identity` header is present. */
+declare function withConditionalAipGate<TCtx = unknown>(options: AipGateWebOptions, handler: (req: Request, gate: {
+    ait?: VerifiedAit;
+}, ctx?: TCtx) => Response | Promise<Response>): (req: Request, ctx?: TCtx) => Promise<Response>;
 
-export { type GuardResult, createAgentScoreGate, createConditionalAgentScoreGate, withAgentScoreGate, withConditionalAgentScoreGate };
+export { type AipGateWebOptions, type AipGuardResult, type GuardResult, createAgentScoreGate, createAipGate, createConditionalAgentScoreGate, withAgentScoreGate, withAipGate, withConditionalAgentScoreGate, withConditionalAipGate };