@belticlabs/agent-risk-sdk 0.1.0 → 0.1.1

package/dist/ai/index.d.ts

@@ -1,7 +1,7 @@
-import { PaymentMomentPayload } from './api.js';
+import { P as PaymentMomentPayload } from '../index-Bjs3BPPU.js';
 import { LanguageModelMiddleware, Tool, ToolSet } from 'ai';
-import { S as Session } from '../session-BMNB1N1g.js';
-import './base58.js';
+import { S as Session } from '../session-B2mfurae.js';
+import 'zod';
 
 interface PaymentMoments {
     requested?: PaymentMomentPayload;

package/dist/ai/index.js

@@ -8,7 +8,7 @@ import {
   toJson,
   toJsonObject
 } from "../chunk-FQDHFTVR.js";
-import "../chunk-GCKCAKHA.js";
+import "../chunk-46QN2KEZ.js";
 
 // src/ai/index.ts
 var PARAM_KEYS = [

package/dist/{chunk-GCKCAKHA.js → chunk-46QN2KEZ.js}

@@ -1,39 +1,20 @@
-// ../protocol/src/verdict.ts
-var SEVERITY = { ALLOW: 0, REVIEW: 1, DENY: 2 };
-var Verdict = class _Verdict {
-  constructor(value) {
-    this.value = value;
-  }
-  static ALLOW = new _Verdict("ALLOW");
-  static REVIEW = new _Verdict("REVIEW");
-  static DENY = new _Verdict("DENY");
-  static of(value) {
-    return value === "DENY" ? _Verdict.DENY : value === "REVIEW" ? _Verdict.REVIEW : _Verdict.ALLOW;
-  }
-  /** The more severe of the two. */
-  atLeast(other) {
-    const o = typeof other === "string" ? _Verdict.of(other) : other;
-    return SEVERITY[o.value] > SEVERITY[this.value] ? o : this;
-  }
-  /** Whether a synchronous gate must stop the call (GAP-52). */
-  blocks(onReview) {
-    return this.value === "DENY" || this.value === "REVIEW" && onReview === "abort";
-  }
-  /** What the gate effectively did: DENY when it blocked, else the verdict itself. */
-  effective(onReview) {
-    return this.blocks(onReview) ? "DENY" : this.value;
-  }
-};
-
-// ../protocol/src/api.ts
-import { z as z4 } from "zod";
-
 // ../protocol/src/evidence.ts
 import { z } from "zod";
 var WIRE_SOURCES = ["AGENT_TRACE", "INTERNAL_NETWORK"];
 var ALL_SOURCES = ["AGENT_TRACE", "INTERNAL_NETWORK", "PLATFORM"];
 var EvidenceSourceSchema = z.enum(WIRE_SOURCES);
 var EvidenceSourceAllSchema = z.enum(ALL_SOURCES);
+var SOURCE_ORDER = {
+  AGENT_TRACE: 0,
+  INTERNAL_NETWORK: 1,
+  PLATFORM: 2
+};
+function compareBySourceSeq(a, b) {
+  return SOURCE_ORDER[a.source] - SOURCE_ORDER[b.source] || a.seq - b.seq;
+}
+function compareBySessionSource(a, b) {
+  return a.sessionId < b.sessionId ? -1 : a.sessionId > b.sessionId ? 1 : SOURCE_ORDER[a.source] - SOURCE_ORDER[b.source];
+}
 var WIRE_KINDS = [
   "session.open",
   "session.close",
@@ -76,11 +57,42 @@ var EvidenceEventSchema = z.strictObject({
   prevHash: Hex64Schema,
   sig: SigSchema.optional()
 });
-
-// ../protocol/src/policy.ts
-import { z as z3 } from "zod";
+function isWireKind(kind) {
+  return WIRE_KINDS.includes(kind);
+}
+function isPlatformKind(kind) {
+  return PLATFORM_KINDS.includes(kind);
+}
 
 // ../protocol/src/reason-codes.ts
+var INDICATOR_CODES = [
+  "CHAIN_BROKEN",
+  "EVIDENCE_MISMATCH",
+  "CREDENTIAL_REVOKED",
+  "SESSION_INVALID",
+  "PRINCIPAL_FLAGGED"
+];
+var ANNOTATION_CODES = ["NO_AGENT_TRACE", "NO_POLICY"];
+var COLLECTOR_CODES = [
+  "SCHEMA_INVALID",
+  "SESSION_UNKNOWN",
+  "SESSION_CLOSED",
+  "SESSION_EXPIRED",
+  "SOURCE_FORBIDDEN",
+  "KIND_FORBIDDEN",
+  "SEQ_GAP",
+  "PREV_HASH_MISMATCH",
+  "SIG_MISSING",
+  "SIG_INVALID",
+  "PAYLOAD_INVALID",
+  "EVENT_TOO_LARGE"
+];
+var DEFAULT_RULE_CODES = [
+  "CAP_EXCEEDED",
+  "PAYEE_NOT_ALLOWED",
+  "NO_INTENT",
+  "INTENT_EXPIRED"
+];
 var REASON_CODE_PATTERN = /^[A-Z][A-Z0-9_]{1,63}$/;
 
 // ../protocol/src/selector.ts
@@ -180,6 +192,40 @@ function parseSelector(input) {
     "unknown root (payment | intent | session | signal[name=\u2026] | evidence[\u2026])"
   );
 }
+function formatSelector(sel) {
+  const path = sel.path.map((p) => "key" in p ? `.${p.key}` : `[${p.index}]`).join("");
+  switch (sel.root) {
+    case "payment":
+    case "intent":
+    case "session":
+      return `${sel.root}${path}`;
+    case "signal":
+      return `signal[name=${sel.name}]${path}`;
+    case "evidence":
+      if (sel.kind === "*") return `evidence[*]${path}`;
+      return `evidence[kind=${sel.kind}${sel.source ? `,source=${sel.source}` : ""}]${sel.all ? "[*]" : ""}${path}`;
+  }
+}
+function isSelectorRef(value) {
+  return typeof value === "string" && value.startsWith("@") && value.length > 1;
+}
+function parseSelectorRef(ref) {
+  return parseSelector(ref.slice(1));
+}
+function walkPath(value, path) {
+  let cur = value;
+  for (const seg of path) {
+    if (cur === null || cur === void 0) return void 0;
+    if ("key" in seg) {
+      if (typeof cur !== "object" || Array.isArray(cur)) return void 0;
+      cur = cur[seg.key];
+    } else {
+      if (!Array.isArray(cur)) return void 0;
+      cur = cur[seg.index];
+    }
+  }
+  return cur;
+}
 var SelectorStringSchema = z2.string().refine(
   (s) => {
     try {
@@ -193,6 +239,7 @@ var SelectorStringSchema = z2.string().refine(
 );
 
 // ../protocol/src/policy.ts
+import { z as z3 } from "zod";
 var PRIMITIVES = ["THRESHOLD", "MEMBERSHIP", "MATCH", "PRESENCE", "FRESHNESS"];
 var PrimitiveSchema = z3.enum(PRIMITIVES);
 var RuleVerdictSchema = z3.enum(["DENY", "REVIEW"]);
@@ -216,6 +263,7 @@ var PolicyRulesSchema = z3.strictObject({
 });
 
 // ../protocol/src/api.ts
+import { z as z4 } from "zod";
 var AmountSchema = z4.strictObject({
   /** Decimal string — never a float. For x402 this is the atomic amount (GAP-49). */
   value: z4.string().regex(/^\d+(\.\d+)?$/, "expected a decimal string"),
@@ -395,7 +443,125 @@ var PlatformAnomalyPayloadSchema = z5.looseObject({
   seq: z5.number().int().min(0).nullable(),
   detail: JsonRecord
 });
+var REGISTRY = {
+  "session.open": SessionOpenPayloadSchema,
+  "session.close": SessionClosePayloadSchema,
+  "intent.declared": IntentDeclaredPayloadSchema,
+  "llm_call.start": LlmCallStartPayloadSchema,
+  "llm_call.end": LlmCallEndPayloadSchema,
+  "tool_call.start": ToolCallStartPayloadSchema,
+  "tool_call.end": ToolCallEndPayloadSchema,
+  "payment.requested": PaymentMomentPayloadSchema,
+  "payment.presented": PaymentMomentPayloadSchema,
+  "gateway.decision": GatewayDecisionPayloadSchema,
+  "transport.gap": TransportGapPayloadSchema,
+  "platform.observation": PlatformObservationPayloadSchema,
+  "platform.anomaly": PlatformAnomalyPayloadSchema
+};
+function payloadSchemaFor(kind) {
+  return REGISTRY[kind];
+}
+
+// ../protocol/src/verdict.ts
+var SEVERITY = { ALLOW: 0, REVIEW: 1, DENY: 2 };
+var Verdict = class _Verdict {
+  constructor(value) {
+    this.value = value;
+  }
+  static ALLOW = new _Verdict("ALLOW");
+  static REVIEW = new _Verdict("REVIEW");
+  static DENY = new _Verdict("DENY");
+  static of(value) {
+    return value === "DENY" ? _Verdict.DENY : value === "REVIEW" ? _Verdict.REVIEW : _Verdict.ALLOW;
+  }
+  /** The more severe of the two. */
+  atLeast(other) {
+    const o = typeof other === "string" ? _Verdict.of(other) : other;
+    return SEVERITY[o.value] > SEVERITY[this.value] ? o : this;
+  }
+  /** Whether a synchronous gate must stop the call (GAP-52). */
+  blocks(onReview) {
+    return this.value === "DENY" || this.value === "REVIEW" && onReview === "abort";
+  }
+  /** What the gate effectively did: DENY when it blocked, else the verdict itself. */
+  effective(onReview) {
+    return this.blocks(onReview) ? "DENY" : this.value;
+  }
+};
 
 export {
+  WIRE_SOURCES,
+  ALL_SOURCES,
+  EvidenceSourceSchema,
+  EvidenceSourceAllSchema,
+  SOURCE_ORDER,
+  compareBySourceSeq,
+  compareBySessionSource,
+  WIRE_KINDS,
+  PLATFORM_KINDS,
+  WireEvidenceKindSchema,
+  PlatformEvidenceKindSchema,
+  EvidenceKindSchema,
+  Hex64Schema,
+  SigSchema,
+  SessionIdSchema,
+  SeqSchema,
+  TimestampSchema,
+  JsonValueSchema,
+  EvidenceEventSchema,
+  isWireKind,
+  isPlatformKind,
+  INDICATOR_CODES,
+  ANNOTATION_CODES,
+  COLLECTOR_CODES,
+  DEFAULT_RULE_CODES,
+  REASON_CODE_PATTERN,
+  SelectorSyntaxError,
+  parseSelector,
+  formatSelector,
+  isSelectorRef,
+  parseSelectorRef,
+  walkPath,
+  SelectorStringSchema,
+  PRIMITIVES,
+  PrimitiveSchema,
+  RuleVerdictSchema,
+  RuleSchema,
+  PolicyRulesSchema,
+  AmountSchema,
+  DeclaredIntentSchema,
+  CreateSessionInputSchema,
+  CreateSessionOutputSchema,
+  MAX_BATCH_EVENTS,
+  EvidenceBatchInputSchema,
+  EventResultStatusSchema,
+  EventResultSchema,
+  ChainHeadSchema,
+  EvidenceAckSchema,
+  PaymentSummarySchema,
+  EvaluateInputSchema,
+  DecisionSchema,
+  EvaluateOutputSchema,
+  AnchorEntrySchema,
+  AnchorsOutputSchema,
+  CreatePolicyInputSchema,
+  CreatePolicyOutputSchema,
+  ApiErrorSchema,
+  SessionOpenPayloadSchema,
+  SESSION_CLOSE_REASONS,
+  SessionClosePayloadSchema,
+  IntentDeclaredPayloadSchema,
+  LlmCallStartPayloadSchema,
+  LlmCallEndPayloadSchema,
+  ToolCallStartPayloadSchema,
+  ToolCallEndPayloadSchema,
+  PAYMENT_ARTIFACTS,
+  PaymentMomentPayloadSchema,
+  GatewayDecisionPayloadSchema,
+  TransportGapPayloadSchema,
+  PlatformObservationPayloadSchema,
+  ANOMALY_TYPES,
+  PlatformAnomalyPayloadSchema,
+  payloadSchemaFor,
   Verdict
 };

package/dist/{chunk-YVMJ5CZX.js → chunk-W2OY7QXV.js}

@@ -13,7 +13,7 @@ import {
 } from "./chunk-7G5EHNVW.js";
 import {
   Verdict
-} from "./chunk-GCKCAKHA.js";
+} from "./chunk-46QN2KEZ.js";
 
 // src/x402/adapter.ts
 function attachX402(beltic, server, http, opts = {}) {

package/dist/{client-CVx9LgJC.d.ts → client-NxpD_384.d.ts}

@@ -1,5 +1,6 @@
-import { OnReview, PaymentSummary, EvaluateOutput } from './api.js';
-import { a as ApiClient, T as Transport, d as Sessions, A as AgentIdentity, b as ApiClientOptions, g as TransportOptions, R as RedactFn } from './session-BMNB1N1g.js';
+import { a as PaymentSummary, B as EvaluateOutput } from './index-Bjs3BPPU.js';
+import { O as OnReview } from './verdict-BAahb5po.js';
+import { a as ApiClient, T as Transport, d as Sessions, A as AgentIdentity, b as ApiClientOptions, g as TransportOptions, R as RedactFn } from './session-B2mfurae.js';
 
 /**
  * Correlation without binding (Fraud SDK RFC › Protocol Adapter — x402:
@@ -34,7 +35,7 @@ declare class MemoryCorrelationStore implements CorrelationStore {
  * Neither half decides risk locally: verdicts are platform-side.
  */
 
-declare const SDK_VERSION = "0.1.0";
+declare const SDK_VERSION = "0.1.1";
 interface BelticOptions extends Omit<ApiClientOptions, 'userAgent'> {
     /** Buyer half. Without it, `sessions.start` is unavailable; the seller half works. */
     identity?: AgentIdentity | undefined;