@belticlabs/agent-risk-sdk 0.1.0 → 0.2.0

package/dist/client-CVx9LgJC.d.ts

@@ -1,63 +0,0 @@
-import { OnReview, PaymentSummary, EvaluateOutput } from './api.js';
-import { a as ApiClient, T as Transport, d as Sessions, A as AgentIdentity, b as ApiClientOptions, g as TransportOptions, R as RedactFn } from './session-BMNB1N1g.js';
-
-/**
- * Correlation without binding (Fraud SDK RFC › Protocol Adapter — x402:
- * "binding travels on the call that initiates the purchase, not
- * necessarily on the payment artifact"). The merchant binds a key it will
- * see again (a checkout session id, a challenge nonce) to the buyer's
- * session; the adapter resolves it when the settlement arrives (GAP-31).
- */
-interface CorrelationStore {
-    bind(key: string, sessionId: string, ttlMs?: number): Promise<void>;
-    resolve(key: string): Promise<string | null>;
-}
-declare class MemoryCorrelationStore implements CorrelationStore {
-    private readonly defaultTtlMs;
-    private readonly entries;
-    constructor(defaultTtlMs?: number);
-    bind(key: string, sessionId: string, ttlMs?: number): Promise<void>;
-    resolve(key: string): Promise<string | null>;
-}
-
-/**
- * One SDK, two halves (Fraud SDK RFC › Summary). `Beltic` is the single
- * client: sessions and evidence for both halves, `evaluate` for the seller
- * half. Protocol integrations are plain functions behind subpath exports,
- * each pulling exactly one optional peer:
- *
- *   @belticlabs/agent-risk-sdk/ai    → middleware(session), wrapTools(session, …)
- *   @belticlabs/agent-risk-sdk/x402  → belticFetch(session), attachX402(beltic, …)
- *   @belticlabs/agent-risk-sdk/hono  → belticPaymentMiddleware(beltic, …)   (and /express)
- *   @belticlabs/agent-risk-sdk/mcp   → wrapClient(session, …), wrapServer(beltic, …)
- *
- * Neither half decides risk locally: verdicts are platform-side.
- */
-
-declare const SDK_VERSION = "0.1.0";
-interface BelticOptions extends Omit<ApiClientOptions, 'userAgent'> {
-    /** Buyer half. Without it, `sessions.start` is unavailable; the seller half works. */
-    identity?: AgentIdentity | undefined;
-    transport?: Partial<TransportOptions> | undefined;
-    /** What a synchronous seller hook does with REVIEW (GAP-52). */
-    onReview?: OnReview | undefined;
-    correlation?: CorrelationStore | undefined;
-    redact?: RedactFn | undefined;
-    now?: (() => Date) | undefined;
-}
-declare class Beltic {
-    readonly api: ApiClient;
-    readonly transport: Transport;
-    readonly sessions: Sessions;
-    readonly identity: AgentIdentity | undefined;
-    readonly correlation: CorrelationStore;
-    readonly onReview: OnReview;
-    constructor(opts: BelticOptions);
-    /** Read-your-writes: the platform must hold the evidence before it judges it (GAP-16). */
-    evaluate(sessionId: string, payment: PaymentSummary): Promise<EvaluateOutput>;
-    flush(): Promise<void>;
-    shutdown(): Promise<void>;
-}
-declare function createBeltic(opts: BelticOptions): Beltic;
-
-export { Beltic as B, type CorrelationStore as C, MemoryCorrelationStore as M, SDK_VERSION as S, type BelticOptions as a, createBeltic as c };

package/dist/middleware-_DSwvNIx.d.ts

@@ -1,40 +0,0 @@
-import { x402ResourceServer, x402HTTPResourceServer, PaywallConfig, RoutesConfig } from '@x402/core/server';
-import { B as Beltic } from './client-CVx9LgJC.js';
-import { Decision } from './api.js';
-import { c as SessionBorn, S as Session } from './session-BMNB1N1g.js';
-
-interface CorrelationContext {
-    path: string;
-    method: string;
-    header: (name: string) => string | undefined;
-}
-interface AttachOptions {
-    /** A key the merchant will see again at verify time, for delegated flows (GAP-31). */
-    correlate?: ((ctx: CorrelationContext) => string | null) | undefined;
-    /** Called with every decision; the default logs nothing. */
-    onDecision?: ((d: {
-        sessionId: string;
-        decision: Decision;
-        reasonCodes: string[];
-        born: SessionBorn;
-    }) => void) | undefined;
-}
-interface AttachedX402 {
-    /** Sessions resolved at verify time, keyed by payment digest — for tests and settle hooks. */
-    readonly inFlight: ReadonlyMap<string, Session>;
-}
-declare function attachX402(beltic: Beltic, server: x402ResourceServer, http?: x402HTTPResourceServer, opts?: AttachOptions): AttachedX402;
-
-/**
- * The seller half as one middleware: the framework's `@x402/*` payment
- * middleware over an `x402HTTPResourceServer` with the Beltic hooks
- * attached. `@belticlabs/agent-risk-sdk/hono` and `@belticlabs/agent-risk-sdk/express` differ only in
- * which `paymentMiddlewareFromHTTPServer` they hand in.
- */
-
-type GuardedMiddlewareOptions = AttachOptions & {
-    paywall?: PaywallConfig | undefined;
-};
-declare function guardedPaymentMiddleware<M>(fromHTTPServer: (http: x402HTTPResourceServer, paywall?: PaywallConfig) => M, beltic: Beltic, routes: RoutesConfig, server: x402ResourceServer, opts?: GuardedMiddlewareOptions): M;
-
-export { type AttachOptions as A, type CorrelationContext as C, type GuardedMiddlewareOptions as G, attachX402 as a, type AttachedX402 as b, guardedPaymentMiddleware as g };