@belticlabs/agent-risk-sdk 0.1.0 → 0.1.1

package/dist/protocol/index.d.ts

@@ -0,0 +1,158 @@
+import { b as JsonValue, E as EvidenceSourceAll } from '../index-Bjs3BPPU.js';
+export { A as ALL_SOURCES, c as ANOMALY_TYPES, d as Amount, e as AmountSchema, f as AnchorEntry, g as AnchorEntrySchema, h as AnchorsOutput, i as AnchorsOutputSchema, j as ApiError, k as ApiErrorSchema, C as ChainHead, l as ChainHeadSchema, m as CreatePolicyInput, n as CreatePolicyInputSchema, o as CreatePolicyOutput, p as CreatePolicyOutputSchema, q as CreateSessionInput, r as CreateSessionInputSchema, s as CreateSessionOutput, t as CreateSessionOutputSchema, D as Decision, u as DecisionSchema, v as DeclaredIntent, w as DeclaredIntentSchema, x as DigestedEnvelope, y as EvaluateInput, z as EvaluateInputSchema, B as EvaluateOutput, F as EvaluateOutputSchema, G as EventResult, H as EventResultSchema, I as EventResultStatus, K as EventResultStatusSchema, L as EvidenceAck, M as EvidenceAckSchema, N as EvidenceBatchInput, O as EvidenceBatchInputSchema, Q as EvidenceEnvelope, R as EvidenceEvent, S as EvidenceEventSchema, T as EvidenceKind, U as EvidenceKindSchema, V as EvidenceSource, W as EvidenceSourceAllSchema, X as EvidenceSourceSchema, Y as GatewayDecisionPayload, Z as GatewayDecisionPayloadSchema, _ as Hex64, $ as Hex64Schema, a0 as IntentDeclaredPayload, a1 as IntentDeclaredPayloadSchema, J as JsonObject, a2 as JsonValueSchema, a3 as LlmCallEndPayload, a4 as LlmCallEndPayloadSchema, a5 as LlmCallStartPayload, a6 as LlmCallStartPayloadSchema, a7 as MAX_BATCH_EVENTS, a8 as PAYMENT_ARTIFACTS, a9 as PLATFORM_KINDS, aa as PayloadByKind, P as PaymentMomentPayload, ab as PaymentMomentPayloadSchema, a as PaymentSummary, ac as PaymentSummarySchema, ad as PlatformAnomalyPayload, ae as PlatformAnomalyPayloadSchema, af as PlatformEvidenceKind, ag as PlatformEvidenceKindSchema, ah as PlatformObservationPayload, ai as PlatformObservationPayloadSchema, aj as SESSION_CLOSE_REASONS, ak as SOURCE_ORDER, al as SeqSchema, am as SessionClosePayload, an as SessionClosePayloadSchema, ao as SessionIdSchema, ap as SessionOpenPayload, aq as SessionOpenPayloadSchema, ar as Sig, as as SigSchema, at as TimestampSchema, au as ToolCallEndPayload, av as ToolCallEndPayloadSchema, aw as ToolCallStartPayload, ax as ToolCallStartPayloadSchema, ay as TransportGapPayload, az as TransportGapPayloadSchema, aA as WIRE_KINDS, aB as WIRE_SOURCES, aC as WireEvidenceKind, aD as WireEvidenceKindSchema, aE as compareBySessionSource, aF as compareBySourceSeq, aG as isPlatformKind, aH as isWireKind, aI as payloadSchemaFor } from '../index-Bjs3BPPU.js';
+import { z } from 'zod';
+export { O as OnReview, V as Verdict } from '../verdict-BAahb5po.js';
+
+declare const PRIMITIVES: readonly ["THRESHOLD", "MEMBERSHIP", "MATCH", "PRESENCE", "FRESHNESS"];
+declare const PrimitiveSchema: z.ZodEnum<{
+    THRESHOLD: "THRESHOLD";
+    MEMBERSHIP: "MEMBERSHIP";
+    MATCH: "MATCH";
+    PRESENCE: "PRESENCE";
+    FRESHNESS: "FRESHNESS";
+}>;
+type Primitive = z.infer<typeof PrimitiveSchema>;
+declare const RuleVerdictSchema: z.ZodEnum<{
+    DENY: "DENY";
+    REVIEW: "REVIEW";
+}>;
+type RuleVerdict = z.infer<typeof RuleVerdictSchema>;
+/**
+ * Params are JSON; a string value of the form `@<selector>` is resolved
+ * against the session view before the primitive runs (GAP-24).
+ */
+declare const RuleSchema: z.ZodObject<{
+    id: z.ZodString;
+    primitive: z.ZodEnum<{
+        THRESHOLD: "THRESHOLD";
+        MEMBERSHIP: "MEMBERSHIP";
+        MATCH: "MATCH";
+        PRESENCE: "PRESENCE";
+        FRESHNESS: "FRESHNESS";
+    }>;
+    selector: z.ZodString;
+    params: z.ZodRecord<z.ZodString, z.ZodType<JsonValue, unknown, z.core.$ZodTypeInternals<JsonValue, unknown>>>;
+    onFail: z.ZodEnum<{
+        DENY: "DENY";
+        REVIEW: "REVIEW";
+    }>;
+    onMissing: z.ZodOptional<z.ZodEnum<{
+        DENY: "DENY";
+        REVIEW: "REVIEW";
+        skip: "skip";
+    }>>;
+    code: z.ZodString;
+}, z.core.$strict>;
+type Rule = z.infer<typeof RuleSchema>;
+declare const PolicyRulesSchema: z.ZodObject<{
+    rules: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        primitive: z.ZodEnum<{
+            THRESHOLD: "THRESHOLD";
+            MEMBERSHIP: "MEMBERSHIP";
+            MATCH: "MATCH";
+            PRESENCE: "PRESENCE";
+            FRESHNESS: "FRESHNESS";
+        }>;
+        selector: z.ZodString;
+        params: z.ZodRecord<z.ZodString, z.ZodType<JsonValue, unknown, z.core.$ZodTypeInternals<JsonValue, unknown>>>;
+        onFail: z.ZodEnum<{
+            DENY: "DENY";
+            REVIEW: "REVIEW";
+        }>;
+        onMissing: z.ZodOptional<z.ZodEnum<{
+            DENY: "DENY";
+            REVIEW: "REVIEW";
+            skip: "skip";
+        }>>;
+        code: z.ZodString;
+    }, z.core.$strict>>;
+    scoreThresholds: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNumber>>;
+}, z.core.$strict>;
+type PolicyRules = z.infer<typeof PolicyRulesSchema>;
+
+/**
+ * Reason codes are the only thing that crosses the verdict boundary besides
+ * the verdict itself (Fraud Engine RFC › API: "the seller receives a verdict
+ * and reasons — never the record"). Three families, kept separate so the
+ * type system knows which layer may emit which.
+ */
+/** Static platform policy — may DENY alone (Fraud Engine RFC › Fraud indicators). */
+declare const INDICATOR_CODES: readonly ["CHAIN_BROKEN", "EVIDENCE_MISMATCH", "CREDENTIAL_REVOKED", "SESSION_INVALID", "PRINCIPAL_FLAGGED"];
+type IndicatorCode = (typeof INDICATOR_CODES)[number];
+/**
+ * Annotations describe the floor the decision was made on. They never change
+ * a verdict by themselves — `NO_AGENT_TRACE` is "thinner evidence", priced by
+ * the owner's rules, not a denial (GAP-43).
+ */
+declare const ANNOTATION_CODES: readonly ["NO_AGENT_TRACE", "NO_POLICY"];
+type AnnotationCode = (typeof ANNOTATION_CODES)[number];
+/** Why the Collector refused or downgraded an event (per-event ack, GAP-17). */
+declare const COLLECTOR_CODES: readonly ["SCHEMA_INVALID", "SESSION_UNKNOWN", "SESSION_CLOSED", "SESSION_EXPIRED", "SOURCE_FORBIDDEN", "KIND_FORBIDDEN", "SEQ_GAP", "PREV_HASH_MISMATCH", "SIG_MISSING", "SIG_INVALID", "PAYLOAD_INVALID", "EVENT_TOO_LARGE"];
+type CollectorCode = (typeof COLLECTOR_CODES)[number];
+/** Codes the platform default policy uses; owners may define their own (GAP-44). */
+declare const DEFAULT_RULE_CODES: readonly ["CAP_EXCEEDED", "PAYEE_NOT_ALLOWED", "NO_INTENT", "INTENT_EXPIRED"];
+type DefaultRuleCode = (typeof DEFAULT_RULE_CODES)[number];
+type ReasonCode = IndicatorCode | AnnotationCode | DefaultRuleCode | (string & {});
+declare const REASON_CODE_PATTERN: RegExp;
+
+/**
+ * Selector language (GAP-24; answers Fraud Engine RFC › Open Questions ›
+ * "Selector language"). One grammar addresses everything a rule or a
+ * detector may read from the session's materialized view:
+ *
+ *   selector := root path?
+ *   root     := 'payment' | 'intent' | 'session'
+ *             | 'signal[name=' NAME ']'
+ *             | 'evidence[kind=' KIND (',source=' SOURCE)? ']' ('[*]')?
+ *             | 'evidence[*]'
+ *   path     := ('.' IDENT | '[' INT ']')*
+ *
+ *   payment.*            the payment under evaluation (EvaluateInput)
+ *   intent.*             the session's declared intent
+ *   session.<field>      id · status · agentDid · hasAgentTrace · expiresAt · sourceBorn
+ *   signal[name=N]       latest value of signal N (a detector's namespace, dotted)
+ *   evidence[kind=K]     latest payload of kind K (any source unless source= given)
+ *   evidence[kind=K][*]  every payload of kind K, in (source, seq) order
+ *   evidence[*]          every envelope (chain checks)
+ *
+ * Inside rule params, a string `@<selector>` is a reference resolved the
+ * same way. The grammar is deliberately not JSONPath: it names four roots
+ * and nothing else, so a policy cannot address what the RFC says the
+ * engine must not expose.
+ */
+
+type PathSegment = {
+    key: string;
+} | {
+    index: number;
+};
+type Selector = {
+    root: 'payment' | 'intent' | 'session';
+    path: PathSegment[];
+} | {
+    root: 'signal';
+    name: string;
+    path: PathSegment[];
+} | {
+    root: 'evidence';
+    kind: string | '*';
+    source?: EvidenceSourceAll;
+    all: boolean;
+    path: PathSegment[];
+};
+declare class SelectorSyntaxError extends Error {
+    readonly input: string;
+    readonly at: number;
+    readonly code = "SELECTOR_SYNTAX";
+    constructor(input: string, at: number, detail: string);
+}
+declare function parseSelector(input: string): Selector;
+declare function formatSelector(sel: Selector): string;
+declare function isSelectorRef(value: unknown): value is `@${string}`;
+declare function parseSelectorRef(ref: string): Selector;
+/** Walk a `path` over a value; `undefined` when any step is missing. */
+declare function walkPath(value: unknown, path: readonly PathSegment[]): unknown;
+declare const SelectorStringSchema: z.ZodString;
+
+export { ANNOTATION_CODES, type AnnotationCode, COLLECTOR_CODES, type CollectorCode, DEFAULT_RULE_CODES, type DefaultRuleCode, EvidenceSourceAll, INDICATOR_CODES, type IndicatorCode, JsonValue, PRIMITIVES, type PathSegment, type PolicyRules, PolicyRulesSchema, type Primitive, PrimitiveSchema, REASON_CODE_PATTERN, type ReasonCode, type Rule, RuleSchema, type RuleVerdict, RuleVerdictSchema, type Selector, SelectorStringSchema, SelectorSyntaxError, formatSelector, isSelectorRef, parseSelector, parseSelectorRef, walkPath };

package/dist/protocol/index.js

@@ -0,0 +1,152 @@
+import {
+  ALL_SOURCES,
+  ANNOTATION_CODES,
+  ANOMALY_TYPES,
+  AmountSchema,
+  AnchorEntrySchema,
+  AnchorsOutputSchema,
+  ApiErrorSchema,
+  COLLECTOR_CODES,
+  ChainHeadSchema,
+  CreatePolicyInputSchema,
+  CreatePolicyOutputSchema,
+  CreateSessionInputSchema,
+  CreateSessionOutputSchema,
+  DEFAULT_RULE_CODES,
+  DecisionSchema,
+  DeclaredIntentSchema,
+  EvaluateInputSchema,
+  EvaluateOutputSchema,
+  EventResultSchema,
+  EventResultStatusSchema,
+  EvidenceAckSchema,
+  EvidenceBatchInputSchema,
+  EvidenceEventSchema,
+  EvidenceKindSchema,
+  EvidenceSourceAllSchema,
+  EvidenceSourceSchema,
+  GatewayDecisionPayloadSchema,
+  Hex64Schema,
+  INDICATOR_CODES,
+  IntentDeclaredPayloadSchema,
+  JsonValueSchema,
+  LlmCallEndPayloadSchema,
+  LlmCallStartPayloadSchema,
+  MAX_BATCH_EVENTS,
+  PAYMENT_ARTIFACTS,
+  PLATFORM_KINDS,
+  PRIMITIVES,
+  PaymentMomentPayloadSchema,
+  PaymentSummarySchema,
+  PlatformAnomalyPayloadSchema,
+  PlatformEvidenceKindSchema,
+  PlatformObservationPayloadSchema,
+  PolicyRulesSchema,
+  PrimitiveSchema,
+  REASON_CODE_PATTERN,
+  RuleSchema,
+  RuleVerdictSchema,
+  SESSION_CLOSE_REASONS,
+  SOURCE_ORDER,
+  SelectorStringSchema,
+  SelectorSyntaxError,
+  SeqSchema,
+  SessionClosePayloadSchema,
+  SessionIdSchema,
+  SessionOpenPayloadSchema,
+  SigSchema,
+  TimestampSchema,
+  ToolCallEndPayloadSchema,
+  ToolCallStartPayloadSchema,
+  TransportGapPayloadSchema,
+  Verdict,
+  WIRE_KINDS,
+  WIRE_SOURCES,
+  WireEvidenceKindSchema,
+  compareBySessionSource,
+  compareBySourceSeq,
+  formatSelector,
+  isPlatformKind,
+  isSelectorRef,
+  isWireKind,
+  parseSelector,
+  parseSelectorRef,
+  payloadSchemaFor,
+  walkPath
+} from "../chunk-46QN2KEZ.js";
+export {
+  ALL_SOURCES,
+  ANNOTATION_CODES,
+  ANOMALY_TYPES,
+  AmountSchema,
+  AnchorEntrySchema,
+  AnchorsOutputSchema,
+  ApiErrorSchema,
+  COLLECTOR_CODES,
+  ChainHeadSchema,
+  CreatePolicyInputSchema,
+  CreatePolicyOutputSchema,
+  CreateSessionInputSchema,
+  CreateSessionOutputSchema,
+  DEFAULT_RULE_CODES,
+  DecisionSchema,
+  DeclaredIntentSchema,
+  EvaluateInputSchema,
+  EvaluateOutputSchema,
+  EventResultSchema,
+  EventResultStatusSchema,
+  EvidenceAckSchema,
+  EvidenceBatchInputSchema,
+  EvidenceEventSchema,
+  EvidenceKindSchema,
+  EvidenceSourceAllSchema,
+  EvidenceSourceSchema,
+  GatewayDecisionPayloadSchema,
+  Hex64Schema,
+  INDICATOR_CODES,
+  IntentDeclaredPayloadSchema,
+  JsonValueSchema,
+  LlmCallEndPayloadSchema,
+  LlmCallStartPayloadSchema,
+  MAX_BATCH_EVENTS,
+  PAYMENT_ARTIFACTS,
+  PLATFORM_KINDS,
+  PRIMITIVES,
+  PaymentMomentPayloadSchema,
+  PaymentSummarySchema,
+  PlatformAnomalyPayloadSchema,
+  PlatformEvidenceKindSchema,
+  PlatformObservationPayloadSchema,
+  PolicyRulesSchema,
+  PrimitiveSchema,
+  REASON_CODE_PATTERN,
+  RuleSchema,
+  RuleVerdictSchema,
+  SESSION_CLOSE_REASONS,
+  SOURCE_ORDER,
+  SelectorStringSchema,
+  SelectorSyntaxError,
+  SeqSchema,
+  SessionClosePayloadSchema,
+  SessionIdSchema,
+  SessionOpenPayloadSchema,
+  SigSchema,
+  TimestampSchema,
+  ToolCallEndPayloadSchema,
+  ToolCallStartPayloadSchema,
+  TransportGapPayloadSchema,
+  Verdict,
+  WIRE_KINDS,
+  WIRE_SOURCES,
+  WireEvidenceKindSchema,
+  compareBySessionSource,
+  compareBySourceSeq,
+  formatSelector,
+  isPlatformKind,
+  isSelectorRef,
+  isWireKind,
+  parseSelector,
+  parseSelectorRef,
+  payloadSchemaFor,
+  walkPath
+};

package/dist/seller/anti-fraud-gateway.d.ts

@@ -1,7 +1,8 @@
-import { B as Beltic } from '../client-CVx9LgJC.js';
-import './api.js';
-import '../session-BMNB1N1g.js';
-import './base58.js';
+import { B as Beltic } from '../client-NxpD_384.js';
+import '../index-Bjs3BPPU.js';
+import 'zod';
+import '../verdict-BAahb5po.js';
+import '../session-B2mfurae.js';
 
 interface PaymentRiskContext {
     wallet: string;

package/dist/seller/anti-fraud-gateway.js

@@ -7,7 +7,7 @@ import {
 import "../chunk-FQDHFTVR.js";
 import {
   Verdict
-} from "../chunk-GCKCAKHA.js";
+} from "../chunk-46QN2KEZ.js";
 
 // src/seller/anti-fraud-gateway.ts
 var BelticAntiFraudGateway = class {

package/dist/{session-BMNB1N1g.d.ts → session-B2mfurae.d.ts}

@@ -1,5 +1,17 @@
-import { Signer } from './base58.js';
-import { EvidenceAck, EventResult, EvidenceEvent, EvidenceSource, WireEvidenceKind, JsonObject, ChainHead, PayloadByKind, SessionClosePayload, DeclaredIntent } from './api.js';
+import { L as EvidenceAck, G as EventResult, R as EvidenceEvent, V as EvidenceSource, aC as WireEvidenceKind, J as JsonObject, C as ChainHead, aa as PayloadByKind, am as SessionClosePayload, v as DeclaredIntent } from './index-Bjs3BPPU.js';
+
+/**
+ * The edge signs event digests (Fraud SDK RFC › Modules › Identity Module);
+ * the platform signs its own PLATFORM chain and epoch anchors. Both are the
+ * same operation over different keys, so one interface.
+ */
+interface Signer {
+    /** Raw 32-byte Ed25519 public key. */
+    readonly publicKey: Uint8Array;
+    /** Stable identifier for logs and key rotation; `did:key` for agents. */
+    readonly keyId: string;
+    sign(message: Uint8Array): Promise<Uint8Array>;
+}
 
 interface ApiClientOptions {
     baseUrl: string;

package/dist/verdict-BAahb5po.d.ts

@@ -0,0 +1,26 @@
+import { D as Decision } from './index-Bjs3BPPU.js';
+
+/**
+ * The verdict as a value (Fraud Engine RFC › API: ALLOW | DENY | REVIEW).
+ * Layers combine by severity (GAP-45); a synchronous seller hook turns
+ * REVIEW into a stop or a pass according to its `onReview` (GAP-52). Both
+ * halves of the SDK and the engine share this one rule.
+ */
+
+type OnReview = 'abort' | 'allow';
+declare class Verdict {
+    readonly value: Decision;
+    private constructor();
+    static readonly ALLOW: Verdict;
+    static readonly REVIEW: Verdict;
+    static readonly DENY: Verdict;
+    static of(value: Decision): Verdict;
+    /** The more severe of the two. */
+    atLeast(other: Verdict | Decision): Verdict;
+    /** Whether a synchronous gate must stop the call (GAP-52). */
+    blocks(onReview: OnReview): boolean;
+    /** What the gate effectively did: DENY when it blocked, else the verdict itself. */
+    effective(onReview: OnReview): Decision;
+}
+
+export { type OnReview as O, Verdict as V };

package/dist/x402/express.d.ts

@@ -1,11 +1,12 @@
 import { RoutesConfig, x402ResourceServer } from '@x402/core/server';
 import { RequestHandler } from 'express';
-import { B as Beltic } from '../client-CVx9LgJC.js';
-import { G as GuardedMiddlewareOptions } from '../middleware-_DSwvNIx.js';
-export { a as attachX402 } from '../middleware-_DSwvNIx.js';
-import './api.js';
-import '../session-BMNB1N1g.js';
-import './base58.js';
+import { B as Beltic } from '../client-NxpD_384.js';
+import { G as GuardedMiddlewareOptions } from '../middleware-D-ejQIoE.js';
+export { a as attachX402 } from '../middleware-D-ejQIoE.js';
+import '../index-Bjs3BPPU.js';
+import 'zod';
+import '../verdict-BAahb5po.js';
+import '../session-B2mfurae.js';
 
 /** Seller half for express: `@x402/express`'s payment middleware with the Beltic hooks attached. */
 

package/dist/x402/express.js

@@ -1,13 +1,13 @@
 import {
   attachX402,
   guardedPaymentMiddleware
-} from "../chunk-YVMJ5CZX.js";
+} from "../chunk-W2OY7QXV.js";
 import "../chunk-VM7MK43J.js";
 import "../chunk-SFGM7KOG.js";
 import "../chunk-U5Z5Z2BQ.js";
 import "../chunk-7G5EHNVW.js";
 import "../chunk-FQDHFTVR.js";
-import "../chunk-GCKCAKHA.js";
+import "../chunk-46QN2KEZ.js";
 
 // src/x402/express.ts
 import { paymentMiddlewareFromHTTPServer } from "@x402/express";

package/dist/x402/hono.d.ts

@@ -1,11 +1,12 @@
 import { RoutesConfig, x402ResourceServer } from '@x402/core/server';
 import { MiddlewareHandler } from 'hono';
-import { B as Beltic } from '../client-CVx9LgJC.js';
-import { G as GuardedMiddlewareOptions } from '../middleware-_DSwvNIx.js';
-export { a as attachX402 } from '../middleware-_DSwvNIx.js';
-import './api.js';
-import '../session-BMNB1N1g.js';
-import './base58.js';
+import { B as Beltic } from '../client-NxpD_384.js';
+import { G as GuardedMiddlewareOptions } from '../middleware-D-ejQIoE.js';
+export { a as attachX402 } from '../middleware-D-ejQIoE.js';
+import '../index-Bjs3BPPU.js';
+import 'zod';
+import '../verdict-BAahb5po.js';
+import '../session-B2mfurae.js';
 
 /** Seller half for hono: `@x402/hono`'s payment middleware with the Beltic hooks attached. */
 

package/dist/x402/hono.js

@@ -1,13 +1,13 @@
 import {
   attachX402,
   guardedPaymentMiddleware
-} from "../chunk-YVMJ5CZX.js";
+} from "../chunk-W2OY7QXV.js";
 import "../chunk-VM7MK43J.js";
 import "../chunk-SFGM7KOG.js";
 import "../chunk-U5Z5Z2BQ.js";
 import "../chunk-7G5EHNVW.js";
 import "../chunk-FQDHFTVR.js";
-import "../chunk-GCKCAKHA.js";
+import "../chunk-46QN2KEZ.js";
 
 // src/x402/hono.ts
 import { paymentMiddlewareFromHTTPServer } from "@x402/hono";

package/dist/x402/index.d.ts

@@ -1,10 +1,11 @@
-export { A as AttachOptions, b as AttachedX402, C as CorrelationContext, G as GuardedMiddlewareOptions, a as attachX402, g as guardedPaymentMiddleware } from '../middleware-_DSwvNIx.js';
-import { S as Session } from '../session-BMNB1N1g.js';
-import { PaymentMomentPayload, JsonObject } from './api.js';
+export { A as AttachOptions, b as AttachedX402, C as CorrelationContext, G as GuardedMiddlewareOptions, a as attachX402, g as guardedPaymentMiddleware } from '../middleware-D-ejQIoE.js';
+import { S as Session } from '../session-B2mfurae.js';
+import { P as PaymentMomentPayload, J as JsonObject } from '../index-Bjs3BPPU.js';
 import { PaymentPayload, PaymentRequired, PaymentRequirements } from '@x402/core/types';
 import '@x402/core/server';
-import '../client-CVx9LgJC.js';
-import './base58.js';
+import '../client-NxpD_384.js';
+import '../verdict-BAahb5po.js';
+import 'zod';
 
 /**
  * Session binding on the x402 rail (Fraud SDK RFC › Protocol Adapter — x402:

package/dist/x402/index.js

@@ -1,7 +1,7 @@
 import {
   attachX402,
   guardedPaymentMiddleware
-} from "../chunk-YVMJ5CZX.js";
+} from "../chunk-W2OY7QXV.js";
 import {
   SESSION_EXTENSION,
   SESSION_HEADER,
@@ -15,7 +15,7 @@ import {
 } from "../chunk-U5Z5Z2BQ.js";
 import "../chunk-7G5EHNVW.js";
 import "../chunk-FQDHFTVR.js";
-import "../chunk-GCKCAKHA.js";
+import "../chunk-46QN2KEZ.js";
 
 // src/x402/fetch.ts
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@belticlabs/agent-risk-sdk",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "The Beltic Agent Risk SDK — one client, two halves: instrument the buyer agent (AI SDK, x402 fetch, MCP client) and guard the seller boundary (x402, MCP server, evaluate).",
   "license": "UNLICENSED",
   "repository": {
@@ -16,6 +16,10 @@
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
     },
+    "./protocol": {
+      "types": "./dist/protocol/index.d.ts",
+      "default": "./dist/protocol/index.js"
+    },
     "./ai": {
       "types": "./dist/ai/index.d.ts",
       "default": "./dist/ai/index.js"