@belticlabs/agent-risk-sdk 0.2.0 → 0.4.0

package/dist/x402/index.d.ts

@@ -1,45 +1,30 @@
-export { A as AttachOptions, b as AttachedX402, C as CorrelationContext, a as attachX402 } from '../adapter-CF-cUYSA.js';
-import { S as Session } from '../session-5TClPLI4.js';
-import { v as DeclaredIntent, P as PaymentMomentPayload, J as JsonObject, a as PaymentSummary } from '../index-Bjs3BPPU.js';
+export { A as AttachOptions, b as AttachedX402, C as CorrelationContext, a as attachX402 } from '../adapter-CLy44CD2.js';
+import { S as SessionSource } from '../session-gK51QVAM.js';
+import { r as DeclaredIntent, P as PaymentMomentPayload, J as JsonObject, a as PaymentSummary } from '../verdict-CDAsxktI.js';
 import '@x402/core/server';
-import '../client-C-mV_3A0.js';
-import '../verdict-BAahb5po.js';
 import 'zod';
 
 /**
  * Session binding on the x402 rail (Fraud SDK RFC › Protocol Adapter — x402:
  * "`PAYMENT-SIGNATURE` extension `beltic.sessionId`"). Where exactly it
  * lives is GAP-30; that it is outside the wallet-signed payload is GAP-56.
+ * A presentation the buyer had evaluated first also carries the
+ * `decisionId` the platform answered with, next to the session (GAP-80).
  */
 declare const SESSION_EXTENSION = "beltic.sessionId";
 declare const SESSION_HEADER = "Beltic-Session-Id";
+declare const DECISION_EXTENSION = "beltic.decisionId";
 declare function sessionIdOf(extensions: Readonly<Record<string, unknown>> | undefined): string | null;
+declare function decisionIdOf(extensions: Readonly<Record<string, unknown>> | undefined): string | null;
 
 /**
- * Buyer half › the x402 fetch wrapper. Sits *inside* the agent's paying
- * fetch (e.g. `wrapFetchWithPayment(belticFetch(session))`), so it sees the
- * 402 challenge → `payment.requested`, and the retry carrying the payment
- * → `payment.presented`, into which it injects the session binding
- * (GAP-30). It never pays and never decides.
- *
- * Before a request that presents payment leaves, the buffered evidence is
- * flushed: the seller will evaluate as soon as it sees the payment, and
- * the platform must already hold the buyer's side of the story (GAP-66).
- *
- * Both x402 generations are read: v2 (`PAYMENT-REQUIRED` header,
- * `PAYMENT-SIGNATURE` retry, binding in `extensions`) and v1 (challenge in
- * the 402 body, `X-PAYMENT` retry, binding by header only — a v1 payload
- * has no extensions and names no asset, so the challenge this wrapper saw
- * for the same URL supplies it; GAP-72). The header codec is base64 JSON,
- * kept here so a buyer needs no `@x402/*` package to be observed.
+ * The paying fetch, observed. Takes a session or the run that owns one;
+ * without either (the evidence stream is not configured, or the platform
+ * refused to open one) the inner fetch is returned as is — or runs as is
+ * per request when the run has no session yet — so a host wires it
+ * unconditionally.
  */
-
-/**
- * The paying fetch, observed. Without a session (the evidence stream is
- * not configured, or the platform refused to open one) the inner fetch is
- * returned as is, so a host wires it unconditionally.
- */
-declare function belticFetch(session: Session | null | undefined, inner?: typeof globalThis.fetch): typeof globalThis.fetch;
+declare function belticFetch(source: SessionSource, inner?: typeof globalThis.fetch): typeof globalThis.fetch;
 
 /**
  * The declared intent for an x402 mandate (Fraud SDK RFC › Session ›
@@ -73,20 +58,19 @@ declare function x402Intent(input: X402IntentInput): DeclaredIntent;
 declare function x402Currency(network: string, asset: string): string;
 /**
  * The minimum an `accepts` entry needs to become a moment; unknown parts
- * are named, never dropped. v1 spells the amount `maxAmountRequired`.
+ * are named, never dropped.
  */
 interface AcceptsLike {
     payTo?: string | undefined;
     amount?: string | undefined;
-    maxAmountRequired?: string | undefined;
     network?: string | undefined;
     asset?: string | undefined;
 }
 /**
- * A 402 challenge and a presented payment of either generation, as far as
- * a moment needs them. `@x402/core`'s `PaymentRequired` and
- * `PaymentPayload` satisfy these structurally, so the seller adapter
- * passes its typed values through and the buyer needs no `@x402/*` types.
+ * A 402 challenge and a presented payment, as far as a moment needs them.
+ * `@x402/core`'s `PaymentRequired` and `PaymentPayload` satisfy these
+ * structurally, so the seller adapter passes its typed values through and
+ * the buyer needs no `@x402/*` types.
  */
 interface PaymentRequiredLike {
     x402Version?: number | undefined;
@@ -95,8 +79,6 @@ interface PaymentRequiredLike {
 interface PaymentPayloadLike {
     x402Version?: number | undefined;
     accepted?: AcceptsLike | undefined;
-    /** v1 names the network here, beside the payload, and nowhere else. */
-    network?: string | undefined;
     payload?: Readonly<Record<string, unknown>> | undefined;
     extensions?: Readonly<Record<string, unknown>> | undefined;
 }
@@ -111,20 +93,14 @@ declare function x402Summary(accepts: AcceptsLike | undefined, opts?: {
 /** The payer is scheme-specific; the common EVM shapes are read, anything else stays in `raw`. */
 declare function payerOf(payload: PaymentPayloadLike): string | undefined;
 declare const x402Moments: {
-    /** The 402 challenge as the buyer saw it, v2 header or v1 body. */
+    /** The 402 challenge as the buyer saw it, from the `PAYMENT-REQUIRED` header. */
     required(required: PaymentRequiredLike): PaymentMomentPayload;
     /** The requirements the seller's resource server resolved for a request. */
     requirements(req: AcceptsLike): PaymentMomentPayload;
     /** A route's static `accepts` config, before any payment header exists. */
     route(route: unknown, raw: JsonObject): PaymentMomentPayload;
-    /** An in-band ask (MRTR `input_required` or a `_meta` envelope) carrying an x402-style `accepts`. */
-    ask(first: AcceptsLike, raw: JsonObject): PaymentMomentPayload;
-    /**
-     * The signed payment the buyer presented. A v2 payload carries the
-     * requirement it accepted; a v1 payload does not, so the caller passes
-     * the `accepts` entry it answered.
-     */
-    payload(payload: PaymentPayloadLike, accepts?: AcceptsLike | undefined): PaymentMomentPayload;
+    /** The signed payment the buyer presented, with the requirement it accepted. */
+    payload(payload: PaymentPayloadLike): PaymentMomentPayload;
 };
 
-export { type AcceptsLike, type PaymentPayloadLike, type PaymentRequiredLike, SESSION_EXTENSION, SESSION_HEADER, type X402IntentInput, belticFetch, payerOf, sessionIdOf, x402Currency, x402Intent, x402Moments, x402Summary };
+export { type AcceptsLike, DECISION_EXTENSION, type PaymentPayloadLike, type PaymentRequiredLike, SESSION_EXTENSION, SESSION_HEADER, type X402IntentInput, belticFetch, decisionIdOf, payerOf, sessionIdOf, x402Currency, x402Intent, x402Moments, x402Summary };

package/dist/x402/index.js

@@ -1,51 +1,55 @@
 import {
-  attachX402
-} from "../chunk-SO6HPRJT.js";
+  Session,
+  Sessions
+} from "../chunk-4MG6VNAU.js";
 import {
+  DECISION_EXTENSION,
   SESSION_EXTENSION,
   SESSION_HEADER,
-  sessionIdOf
-} from "../chunk-VM7MK43J.js";
-import "../chunk-SFGM7KOG.js";
-import "../chunk-46QN2KEZ.js";
-import {
+  attachX402,
+  decisionIdOf,
   payerOf,
+  sessionIdOf,
   x402Currency,
   x402Moments,
   x402Summary
-} from "../chunk-LM4NIYE5.js";
+} from "../chunk-WY5ZX4BD.js";
 import "../chunk-FQDHFTVR.js";
+import "../chunk-X3W2Z5GC.js";
 
 // src/x402/fetch.ts
 var BASE64 = /^[A-Za-z0-9+/]*={0,2}$/;
-var CHALLENGE_MEMORY = 32;
-function belticFetch(session, inner = globalThis.fetch) {
-  if (!session) return inner;
-  const challenges = /* @__PURE__ */ new Map();
+function belticFetch(source, inner = globalThis.fetch) {
+  if (!source) return inner;
+  const run = source instanceof Session ? null : source;
   return async (input, init) => {
-    const url = urlOf(input);
+    const session = await Sessions.resolve(source);
+    if (!session) return inner(input, init);
     const headers = new Headers(
       init?.headers ?? (input instanceof Request ? input.headers : void 0)
     );
     headers.set(SESSION_HEADER, session.id);
     const signature = headers.get("PAYMENT-SIGNATURE");
-    const presented = signature ?? headers.get("X-PAYMENT");
-    const payload = presented ? decodeHeader(presented) : null;
+    const payload = signature ? decodeHeader(signature) : null;
     if (payload) {
-      const bound = signature ? { ...payload, extensions: { ...payload.extensions, [SESSION_EXTENSION]: session.id } } : payload;
-      if (signature) headers.set("PAYMENT-SIGNATURE", encodeHeader(bound));
-      const accepts = bound.accepted ?? answeredAccepts(challenges.get(url), bound);
-      await session.emit("payment.presented", x402Moments.payload(bound, accepts));
+      const decision = run?.decisionFor(x402Moments.payload(payload));
+      const decisionId = decision && !decision.absent ? decision.decisionId : null;
+      const bound = {
+        ...payload,
+        extensions: {
+          ...payload.extensions,
+          [SESSION_EXTENSION]: session.id,
+          ...decisionId ? { [DECISION_EXTENSION]: decisionId } : {}
+        }
+      };
+      headers.set("PAYMENT-SIGNATURE", encodeHeader(bound));
+      await session.emit("payment.presented", x402Moments.payload(bound));
       await session.flush();
     }
     const res = await inner(input, { ...init, headers });
     if (res.status !== 402) return res;
-    const required = await challengeOf(res);
-    if (required) {
-      challenges.set(url, required);
-      if (challenges.size > CHALLENGE_MEMORY) challenges.delete(challenges.keys().next().value);
-      await session.emit("payment.requested", x402Moments.required(required));
-    }
+    const required = challengeOf(res);
+    if (required) await session.emit("payment.requested", x402Moments.required(required));
     return res;
   };
 }
@@ -61,35 +65,9 @@ function decodeHeader(value) {
 function encodeHeader(value) {
   return Buffer.from(JSON.stringify(value), "utf8").toString("base64");
 }
-function urlOf(input) {
-  return typeof input === "string" ? input : input instanceof URL ? input.toString() : input.url;
-}
-async function challengeOf(res) {
+function challengeOf(res) {
   const header = res.headers.get("PAYMENT-REQUIRED");
-  if (header) return decodeHeader(header);
-  if (!/json/i.test(res.headers.get("content-type") ?? "")) return null;
-  try {
-    const body = await res.clone().json();
-    return Array.isArray(body?.accepts) ? body : null;
-  } catch {
-    return null;
-  }
-}
-function answeredAccepts(required, payload) {
-  const auth = payload.payload?.authorization;
-  const payTo = typeof auth?.to === "string" ? auth.to : void 0;
-  const amount = typeof auth?.value === "string" ? auth.value : void 0;
-  const options = required?.accepts ?? [];
-  const answered = options.find(
-    (a) => a.payTo?.toLowerCase() === payTo?.toLowerCase() && (a.amount ?? a.maxAmountRequired) === amount
-  ) ?? options[0];
-  if (answered) return answered;
-  if (!payTo && !amount) return void 0;
-  return {
-    ...payTo ? { payTo } : {},
-    ...amount ? { amount } : {},
-    ...payload.network ? { network: payload.network } : {}
-  };
+  return header ? decodeHeader(header) : null;
 }
 
 // src/x402/intent.ts
@@ -105,10 +83,12 @@ function x402Intent(input) {
   };
 }
 export {
+  DECISION_EXTENSION,
   SESSION_EXTENSION,
   SESSION_HEADER,
   attachX402,
   belticFetch,
+  decisionIdOf,
   payerOf,
   sessionIdOf,
   x402Currency,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@belticlabs/agent-risk-sdk",
-  "version": "0.2.0",
-  "description": "The Beltic Agent Risk SDK — one client, two halves: instrument the buyer agent (AI SDK, x402 fetch, MCP client) and guard the seller boundary (x402, MCP server, evaluate).",
+  "version": "0.4.0",
+  "description": "The Beltic Agent Risk SDK — one client, two halves: instrument the buyer agent (AI SDK, x402 fetch) and guard the seller boundary (x402 over hono, evaluate).",
   "license": "UNLICENSED",
   "repository": {
     "type": "git",
@@ -32,18 +32,6 @@
       "types": "./dist/x402/hono.d.ts",
       "default": "./dist/x402/hono.js"
     },
-    "./express": {
-      "types": "./dist/x402/express.d.ts",
-      "default": "./dist/x402/express.js"
-    },
-    "./mcp": {
-      "types": "./dist/mcp/index.d.ts",
-      "default": "./dist/mcp/index.js"
-    },
-    "./platform-adapter": {
-      "types": "./dist/seller/anti-fraud-gateway.d.ts",
-      "default": "./dist/seller/anti-fraud-gateway.js"
-    },
     "./package.json": "./package.json"
   },
   "files": [
@@ -57,45 +45,29 @@
     "zod": "^4.6.5"
   },
   "peerDependencies": {
-    "@modelcontextprotocol/sdk": "^1.30.0",
     "@x402/core": "^2.25.0",
-    "@x402/express": "^2.25.0",
     "@x402/hono": "^2.25.0",
     "ai": "^7.0.0",
-    "express": "^5.0.0",
     "hono": "^4.0.0"
   },
   "peerDependenciesMeta": {
-    "@modelcontextprotocol/sdk": {
-      "optional": true
-    },
     "@x402/core": {
       "optional": true
     },
-    "@x402/express": {
-      "optional": true
-    },
     "@x402/hono": {
       "optional": true
     },
     "ai": {
       "optional": true
     },
-    "express": {
-      "optional": true
-    },
     "hono": {
       "optional": true
     }
   },
   "devDependencies": {
-    "@modelcontextprotocol/sdk": "^1.30.0",
-    "@types/express": "^5.0.6",
     "@x402/core": "^2.25.0",
-    "@x402/express": "^2.25.0",
     "@x402/hono": "^2.25.0",
     "ai": "^7.0.100",
-    "express": "^5.2.1",
     "hono": "^4.13.7",
     "tsup": "8.5.1",
     "typescript": "5.9.3",

package/dist/chunk-7G5EHNVW.js

@@ -1,17 +0,0 @@
-// src/core/payment-moment.ts
-function summaryOf(m) {
-  return {
-    protocol: m.protocol,
-    payee: m.payee,
-    amount: { value: m.amount.value, currency: m.amount.currency },
-    ...m.payer ? { payer: m.payer } : {}
-  };
-}
-function presentedFrom(summary, raw) {
-  return { ...summary, artifact: "payment-signature", raw };
-}
-
-export {
-  summaryOf,
-  presentedFrom
-};

package/dist/chunk-GSH5APZW.js

@@ -1,39 +0,0 @@
-// src/core/record.ts
-function errorOf(err) {
-  const e = err;
-  return { name: String(e?.name ?? "Error"), message: String(e?.message ?? err) };
-}
-function openCall(session, kind, callId, start) {
-  const started = Date.now();
-  const opened = session.emit(`${kind}.start`, { callId, ...start });
-  const close = async (outcome) => {
-    await opened;
-    return session.emit(
-      `${kind}.end`,
-      { callId, ...outcome, durationMs: Date.now() - started }
-    );
-  };
-  return {
-    callId,
-    opened,
-    end: (outcome = {}) => close(outcome),
-    fail: (error, outcome = {}) => close({ error: errorOf(error), ...outcome })
-  };
-}
-async function recordCall(session, kind, callId, start, run, end = () => ({})) {
-  const span = openCall(session, kind, callId, start);
-  await span.opened;
-  try {
-    const result = await run();
-    await span.end(await end(result));
-    return result;
-  } catch (err) {
-    await span.fail(err);
-    throw err;
-  }
-}
-
-export {
-  openCall,
-  recordCall
-};

package/dist/chunk-LM4NIYE5.js

@@ -1,92 +0,0 @@
-import {
-  toJsonObject
-} from "./chunk-FQDHFTVR.js";
-
-// src/x402/moments.ts
-function x402Currency(network, asset) {
-  return `${network}/${asset}`;
-}
-function x402Summary(accepts, opts = {}) {
-  const payer = opts.payer?.toLowerCase();
-  return {
-    protocol: "x402",
-    payee: accepts?.payTo ?? "unknown",
-    amount: {
-      value: accepts?.amount ?? accepts?.maxAmountRequired ?? "0",
-      currency: accepts ? x402Currency(accepts.network ?? "unknown", accepts.asset ?? "unknown") : "unknown"
-    },
-    ...payer ? { payer } : {}
-  };
-}
-function fromAccepts(a, artifact, raw, payer) {
-  return { ...x402Summary(a, { payer }), artifact, raw };
-}
-function payerOf(payload) {
-  const p = payload.payload ?? {};
-  const auth = p.authorization;
-  const candidates = [
-    auth?.from,
-    p.from,
-    p.payer,
-    p.signer,
-    p.permit?.owner
-  ];
-  const hit = candidates.find((c) => typeof c === "string" && c.length > 0);
-  return typeof hit === "string" ? hit.toLowerCase() : void 0;
-}
-var x402Moments = {
-  /** The 402 challenge as the buyer saw it, v2 header or v1 body. */
-  required(required) {
-    return fromAccepts(required.accepts?.[0], "http-402", toJsonObject(required));
-  },
-  /** The requirements the seller's resource server resolved for a request. */
-  requirements(req) {
-    return fromAccepts(req, "http-402", toJsonObject(req));
-  },
-  /** A route's static `accepts` config, before any payment header exists. */
-  route(route, raw) {
-    const accepts = route ?? {};
-    const extra = accepts.extra;
-    return fromAccepts(
-      {
-        payTo: typeof accepts.payTo === "string" ? accepts.payTo : "dynamic",
-        amount: priceValue(accepts.price),
-        network: accepts.network,
-        asset: extra?.asset ?? "route"
-      },
-      "http-402",
-      raw
-    );
-  },
-  /** An in-band ask (MRTR `input_required` or a `_meta` envelope) carrying an x402-style `accepts`. */
-  ask(first, raw) {
-    return fromAccepts(first, "mrtr-input-required", raw);
-  },
-  /**
-   * The signed payment the buyer presented. A v2 payload carries the
-   * requirement it accepted; a v1 payload does not, so the caller passes
-   * the `accepts` entry it answered.
-   */
-  payload(payload, accepts) {
-    return fromAccepts(
-      accepts ?? payload.accepted,
-      "payment-signature",
-      toJsonObject(payload),
-      payerOf(payload)
-    );
-  }
-};
-function priceValue(price) {
-  if (typeof price === "string") return price.replace(/[^0-9.]/g, "") || "0";
-  if (typeof price === "number") return String(price);
-  if (price && typeof price === "object" && typeof price.amount === "string")
-    return price.amount;
-  return "0";
-}
-
-export {
-  x402Currency,
-  x402Summary,
-  payerOf,
-  x402Moments
-};

package/dist/chunk-SO6HPRJT.js

@@ -1,82 +0,0 @@
-import {
-  SESSION_HEADER,
-  sessionIdOf
-} from "./chunk-VM7MK43J.js";
-import {
-  payloadDigest
-} from "./chunk-SFGM7KOG.js";
-import {
-  x402Moments
-} from "./chunk-LM4NIYE5.js";
-
-// src/x402/adapter.ts
-function attachX402(beltic, server, http, opts = {}) {
-  const inFlight = /* @__PURE__ */ new Map();
-  const resolveSession = async (bound, ctx) => {
-    const key = opts.correlate?.(ctx) ?? null;
-    return bound ?? (key ? await beltic.correlation.resolve(key) : null);
-  };
-  http?.onProtectedRequest(async (ctx, route) => {
-    if (ctx.paymentHeader) return;
-    const bound = ctx.adapter.getHeader(SESSION_HEADER) ?? ctx.adapter.getHeader(SESSION_HEADER.toLowerCase());
-    const sessionId = await resolveSession(bound ?? null, {
-      path: ctx.path,
-      method: ctx.method,
-      header: (n) => ctx.adapter.getHeader(n)
-    });
-    if (!sessionId) return;
-    const session = await beltic.sessions.ensure(sessionId);
-    const accepts = Array.isArray(route.accepts) ? route.accepts[0] : route.accepts;
-    await session.emit(
-      "payment.requested",
-      x402Moments.route(accepts, {
-        path: ctx.path,
-        method: ctx.method,
-        route: JSON.parse(JSON.stringify(route))
-      })
-    );
-  });
-  server.onBeforeVerify(async (ctx) => {
-    const payload = ctx.paymentPayload;
-    const requirements = ctx.requirements;
-    const sessionId = await resolveSession(sessionIdOf(payload.extensions), {
-      path: payload.resource?.url ?? "",
-      method: "PAY",
-      header: () => void 0
-    });
-    const session = await beltic.sessions.ensure(sessionId);
-    if (session.born === "seller")
-      await session.emit("payment.requested", x402Moments.requirements(requirements));
-    const presented = x402Moments.payload(payload);
-    await session.emit("payment.presented", presented);
-    inFlight.set(payloadDigest(payload), session);
-    const out = await beltic.evaluate(session.id, presented);
-    if (!out) return;
-    opts.onDecision?.({
-      sessionId: session.id,
-      decision: out.decision,
-      reasonCodes: out.reasonCodes,
-      born: session.born
-    });
-    if (out.verdict.blocks(beltic.onReview)) {
-      return {
-        abort: true,
-        reason: `BELTIC_${out.verdict.value}`,
-        message: out.reasonCodes.join(",")
-      };
-    }
-    return;
-  });
-  server.onAfterSettle(async (ctx) => {
-    const key = payloadDigest(ctx.paymentPayload);
-    const session = inFlight.get(key);
-    if (!session) return;
-    inFlight.delete(key);
-    if (ctx.result.success) await session.close("settled", { transaction: ctx.result.transaction });
-  });
-  return { inFlight };
-}
-
-export {
-  attachX402
-};

package/dist/chunk-U7HM37CB.js

@@ -1,17 +0,0 @@
-import {
-  attachX402
-} from "./chunk-SO6HPRJT.js";
-
-// src/x402/middleware.ts
-import {
-  x402HTTPResourceServer
-} from "@x402/core/server";
-function guardedPaymentMiddleware(fromHTTPServer, beltic, routes, server, opts = {}) {
-  const http = new x402HTTPResourceServer(server, routes);
-  attachX402(beltic, server, http, opts);
-  return fromHTTPServer(http, opts.paywall);
-}
-
-export {
-  guardedPaymentMiddleware
-};

package/dist/chunk-VM7MK43J.js

@@ -1,13 +0,0 @@
-// src/x402/binding.ts
-var SESSION_EXTENSION = "beltic.sessionId";
-var SESSION_HEADER = "Beltic-Session-Id";
-function sessionIdOf(extensions) {
-  const v = extensions?.[SESSION_EXTENSION];
-  return typeof v === "string" && v.length > 0 ? v : null;
-}
-
-export {
-  SESSION_EXTENSION,
-  SESSION_HEADER,
-  sessionIdOf
-};