@belticlabs/agent-risk-sdk 0.1.1 → 0.3.0

package/dist/mcp/index.js

@@ -1,52 +1,58 @@
 import {
+  Sessions,
   recordCall
-} from "../chunk-5TWO73OD.js";
+} from "../chunk-4MG6VNAU.js";
 import {
   SESSION_EXTENSION
-} from "../chunk-VM7MK43J.js";
+} from "../chunk-FAQ442YH.js";
 import {
   uuidv7
-} from "../chunk-SFGM7KOG.js";
+} from "../chunk-X3W2Z5GC.js";
 import {
-  x402Moments
-} from "../chunk-U5Z5Z2BQ.js";
+  Verdict
+} from "../chunk-46QN2KEZ.js";
 import {
   presentedFrom
 } from "../chunk-7G5EHNVW.js";
+import {
+  x402Moments
+} from "../chunk-LM4NIYE5.js";
 import {
   toJson,
   toJsonObject
 } from "../chunk-FQDHFTVR.js";
-import {
-  Verdict
-} from "../chunk-46QN2KEZ.js";
 
 // src/mcp/index.ts
-function wrapClient(session, client, opts = {}) {
+function wrapClient(source, client, opts = {}) {
+  if (!source) return client;
   const original = client.callTool.bind(client);
-  const callTool = (params, ...rest) => recordCall(
-    session,
-    "tool_call",
-    uuidv7(),
-    {
-      toolName: params.name,
-      input: toJson(params.arguments ?? {}),
-      transport: "mcp",
-      ...opts.server ? { server: opts.server } : {}
-    },
-    async () => {
-      await session.flush();
-      return original(
-        { ...params, _meta: { ...params._meta ?? {}, [SESSION_EXTENSION]: session.id } },
-        ...rest
-      );
-    },
-    async (result) => {
-      const ask = findPaymentAsk(result);
-      if (ask) await session.emit("payment.requested", ask);
-      return { output: toJson(result) };
-    }
-  );
+  const callTool = async (params, ...rest) => {
+    const session = await Sessions.resolve(source);
+    if (!session) return original(params, ...rest);
+    return recordCall(
+      session,
+      "tool_call",
+      uuidv7(),
+      {
+        toolName: params.name,
+        input: toJson(params.arguments ?? {}),
+        transport: "mcp",
+        ...opts.server ? { server: opts.server } : {}
+      },
+      async () => {
+        await session.flush();
+        return original(
+          { ...params, _meta: { ...params._meta ?? {}, [SESSION_EXTENSION]: session.id } },
+          ...rest
+        );
+      },
+      async (result) => {
+        const ask = findPaymentAsk(result);
+        if (ask) await session.emit("payment.requested", ask);
+        return { output: toJson(result) };
+      }
+    );
+  };
   return new Proxy(client, {
     get(target, prop, receiver) {
       return prop === "callTool" ? callTool : Reflect.get(target, prop, receiver);
@@ -85,8 +91,10 @@ function withBeltic(beltic, handler, opts) {
         presentedFrom(payment, { tool: opts.toolName, args: toJson(args) })
       );
       const out = await beltic.evaluate(session.id, payment);
-      verdict = Verdict.of(out.decision);
-      reasonCodes = out.reasonCodes;
+      if (out) {
+        verdict = out.verdict;
+        reasonCodes = out.reasonCodes;
+      }
     }
     await session.emit("gateway.decision", {
       gateway,

package/dist/middleware-9gI0ou2i.d.ts

@@ -0,0 +1,15 @@
+import { PaywallConfig } from '@x402/core/server';
+import { A as AttachOptions } from './adapter-BEpzr2R3.js';
+
+/**
+ * The seller half as one middleware: the framework's `@x402/*` payment
+ * middleware over an `x402HTTPResourceServer` with the Beltic hooks
+ * attached. `@belticlabs/agent-risk-sdk/hono` and `@belticlabs/agent-risk-sdk/express` differ only in
+ * which `paymentMiddlewareFromHTTPServer` they hand in.
+ */
+
+type GuardedMiddlewareOptions = AttachOptions & {
+    paywall?: PaywallConfig | undefined;
+};
+
+export type { GuardedMiddlewareOptions as G };

package/dist/protocol/index.d.ts

@@ -1,7 +1,6 @@
-import { b as JsonValue, E as EvidenceSourceAll } from '../index-Bjs3BPPU.js';
-export { A as ALL_SOURCES, c as ANOMALY_TYPES, d as Amount, e as AmountSchema, f as AnchorEntry, g as AnchorEntrySchema, h as AnchorsOutput, i as AnchorsOutputSchema, j as ApiError, k as ApiErrorSchema, C as ChainHead, l as ChainHeadSchema, m as CreatePolicyInput, n as CreatePolicyInputSchema, o as CreatePolicyOutput, p as CreatePolicyOutputSchema, q as CreateSessionInput, r as CreateSessionInputSchema, s as CreateSessionOutput, t as CreateSessionOutputSchema, D as Decision, u as DecisionSchema, v as DeclaredIntent, w as DeclaredIntentSchema, x as DigestedEnvelope, y as EvaluateInput, z as EvaluateInputSchema, B as EvaluateOutput, F as EvaluateOutputSchema, G as EventResult, H as EventResultSchema, I as EventResultStatus, K as EventResultStatusSchema, L as EvidenceAck, M as EvidenceAckSchema, N as EvidenceBatchInput, O as EvidenceBatchInputSchema, Q as EvidenceEnvelope, R as EvidenceEvent, S as EvidenceEventSchema, T as EvidenceKind, U as EvidenceKindSchema, V as EvidenceSource, W as EvidenceSourceAllSchema, X as EvidenceSourceSchema, Y as GatewayDecisionPayload, Z as GatewayDecisionPayloadSchema, _ as Hex64, $ as Hex64Schema, a0 as IntentDeclaredPayload, a1 as IntentDeclaredPayloadSchema, J as JsonObject, a2 as JsonValueSchema, a3 as LlmCallEndPayload, a4 as LlmCallEndPayloadSchema, a5 as LlmCallStartPayload, a6 as LlmCallStartPayloadSchema, a7 as MAX_BATCH_EVENTS, a8 as PAYMENT_ARTIFACTS, a9 as PLATFORM_KINDS, aa as PayloadByKind, P as PaymentMomentPayload, ab as PaymentMomentPayloadSchema, a as PaymentSummary, ac as PaymentSummarySchema, ad as PlatformAnomalyPayload, ae as PlatformAnomalyPayloadSchema, af as PlatformEvidenceKind, ag as PlatformEvidenceKindSchema, ah as PlatformObservationPayload, ai as PlatformObservationPayloadSchema, aj as SESSION_CLOSE_REASONS, ak as SOURCE_ORDER, al as SeqSchema, am as SessionClosePayload, an as SessionClosePayloadSchema, ao as SessionIdSchema, ap as SessionOpenPayload, aq as SessionOpenPayloadSchema, ar as Sig, as as SigSchema, at as TimestampSchema, au as ToolCallEndPayload, av as ToolCallEndPayloadSchema, aw as ToolCallStartPayload, ax as ToolCallStartPayloadSchema, ay as TransportGapPayload, az as TransportGapPayloadSchema, aA as WIRE_KINDS, aB as WIRE_SOURCES, aC as WireEvidenceKind, aD as WireEvidenceKindSchema, aE as compareBySessionSource, aF as compareBySourceSeq, aG as isPlatformKind, aH as isWireKind, aI as payloadSchemaFor } from '../index-Bjs3BPPU.js';
+import { b as JsonValue, E as EvidenceSourceAll } from '../verdict-6vCyoAHE.js';
+export { A as ALL_SOURCES, c as ANOMALY_TYPES, d as Amount, e as AmountSchema, f as AnchorEntry, g as AnchorEntrySchema, h as AnchorsOutput, i as AnchorsOutputSchema, j as ApiError, k as ApiErrorSchema, C as ChainHead, l as ChainHeadSchema, m as CreatePolicyInput, n as CreatePolicyInputSchema, o as CreatePolicyOutput, p as CreatePolicyOutputSchema, q as CreateSessionInput, r as CreateSessionInputSchema, s as CreateSessionOutput, t as CreateSessionOutputSchema, D as Decision, u as DecisionSchema, v as DeclaredIntent, w as DeclaredIntentSchema, x as DigestedEnvelope, y as EvaluateInput, z as EvaluateInputSchema, B as EvaluateOutput, F as EvaluateOutputSchema, G as EventResult, H as EventResultSchema, I as EventResultStatus, K as EventResultStatusSchema, L as EvidenceAck, M as EvidenceAckSchema, N as EvidenceBatchInput, O as EvidenceBatchInputSchema, Q as EvidenceEnvelope, R as EvidenceEvent, S as EvidenceEventSchema, T as EvidenceKind, U as EvidenceKindSchema, V as EvidenceSource, W as EvidenceSourceAllSchema, X as EvidenceSourceSchema, Y as GatewayDecisionPayload, Z as GatewayDecisionPayloadSchema, _ as Hex64, $ as Hex64Schema, a0 as IntentDeclaredPayload, a1 as IntentDeclaredPayloadSchema, J as JsonObject, a2 as JsonValueSchema, a3 as LlmCallEndPayload, a4 as LlmCallEndPayloadSchema, a5 as LlmCallStartPayload, a6 as LlmCallStartPayloadSchema, a7 as MAX_BATCH_EVENTS, a8 as OnReview, a9 as PAYMENT_ARTIFACTS, aa as PLATFORM_KINDS, ab as PayloadByKind, P as PaymentMomentPayload, ac as PaymentMomentPayloadSchema, a as PaymentSummary, ad as PaymentSummarySchema, ae as PlatformAnomalyPayload, af as PlatformAnomalyPayloadSchema, ag as PlatformEvidenceKind, ah as PlatformEvidenceKindSchema, ai as PlatformObservationPayload, aj as PlatformObservationPayloadSchema, ak as SESSION_CLOSE_REASONS, al as SOURCE_ORDER, am as SeqSchema, an as SessionClosePayload, ao as SessionClosePayloadSchema, ap as SessionIdSchema, aq as SessionOpenPayload, ar as SessionOpenPayloadSchema, as as Sig, at as SigSchema, au as TimestampSchema, av as ToolCallEndPayload, aw as ToolCallEndPayloadSchema, ax as ToolCallStartPayload, ay as ToolCallStartPayloadSchema, az as TransportGapPayload, aA as TransportGapPayloadSchema, aB as Verdict, aC as WIRE_KINDS, aD as WIRE_SOURCES, aE as WireEvidenceKind, aF as WireEvidenceKindSchema, aG as compareBySessionSource, aH as compareBySourceSeq, aI as isPlatformKind, aJ as isWireKind, aK as payloadSchemaFor } from '../verdict-6vCyoAHE.js';
 import { z } from 'zod';
-export { O as OnReview, V as Verdict } from '../verdict-BAahb5po.js';
 
 declare const PRIMITIVES: readonly ["THRESHOLD", "MEMBERSHIP", "MATCH", "PRESENCE", "FRESHNESS"];
 declare const PrimitiveSchema: z.ZodEnum<{

package/dist/seller/anti-fraud-gateway.d.ts

@@ -1,8 +1,15 @@
-import { B as Beltic } from '../client-NxpD_384.js';
-import '../index-Bjs3BPPU.js';
+import { B as Beltic } from '../session-DsBWEP8d.js';
+import '../verdict-6vCyoAHE.js';
 import 'zod';
-import '../verdict-BAahb5po.js';
-import '../session-B2mfurae.js';
+
+/**
+ * Adapter for the anti-fraud port already in Beltic's `platform` monorepo
+ * (`x402-core/gateways/anti-fraud.gateway.interface.ts`), GAP-37. That
+ * port is binary and session-less; the mapping is lossy by construction:
+ * `REVIEW` becomes a deny unless `onReview` says otherwise, and reason
+ * codes travel joined in `reason`. The structural type is copied so this
+ * module needs no dependency on `platform`.
+ */
 
 interface PaymentRiskContext {
     wallet: string;

package/dist/seller/anti-fraud-gateway.js

@@ -1,13 +1,10 @@
-import {
-  x402Currency
-} from "../chunk-U5Z5Z2BQ.js";
 import {
   presentedFrom
 } from "../chunk-7G5EHNVW.js";
-import "../chunk-FQDHFTVR.js";
 import {
-  Verdict
-} from "../chunk-46QN2KEZ.js";
+  x402Summary
+} from "../chunk-LM4NIYE5.js";
+import "../chunk-FQDHFTVR.js";
 
 // src/seller/anti-fraud-gateway.ts
 var BelticAntiFraudGateway = class {
@@ -16,12 +13,15 @@ var BelticAntiFraudGateway = class {
   }
   async assess(ctx) {
     const session = await this.beltic.sessions.ensure(ctx.sessionId ?? null);
-    const payment = {
-      protocol: "x402",
-      payee: ctx.payTo ?? ctx.resource,
-      amount: { value: ctx.amountAtomic, currency: x402Currency(ctx.network, ctx.asset) },
-      payer: ctx.wallet.toLowerCase()
-    };
+    const payment = x402Summary(
+      {
+        payTo: ctx.payTo ?? ctx.resource,
+        amount: ctx.amountAtomic,
+        network: ctx.network,
+        asset: ctx.asset
+      },
+      { payer: ctx.wallet }
+    );
     await session.emit(
       "payment.presented",
       presentedFrom(payment, {
@@ -30,8 +30,7 @@ var BelticAntiFraudGateway = class {
       })
     );
     const out = await this.beltic.evaluate(session.id, payment);
-    const verdict = Verdict.of(out.decision);
-    return verdict.blocks(this.beltic.onReview) ? { allow: false, reason: `${out.decision}:${out.reasonCodes.join(",")}` } : { allow: true };
+    return out?.verdict.blocks(this.beltic.onReview) ? { allow: false, reason: `${out.decision}:${out.reasonCodes.join(",")}` } : { allow: true };
   }
 };
 export {