@belticlabs/agent-risk-sdk 0.3.0 → 0.4.0

package/dist/{adapter-BEpzr2R3.d.ts → adapter-CLy44CD2.d.ts}

@@ -1,6 +1,6 @@
-import { D as Decision } from './verdict-6vCyoAHE.js';
+import { D as Decision } from './verdict-CDAsxktI.js';
 import { x402ResourceServer, x402HTTPResourceServer } from '@x402/core/server';
-import { B as Beltic, n as SessionBorn, a as Session } from './session-DsBWEP8d.js';
+import { B as Beltic, n as SessionBorn, a as Session } from './session-gK51QVAM.js';
 
 interface CorrelationContext {
     path: string;

package/dist/ai/index.d.ts

@@ -1,6 +1,6 @@
-import { P as PaymentMomentPayload } from '../verdict-6vCyoAHE.js';
+import { P as PaymentMomentPayload } from '../verdict-CDAsxktI.js';
 import { LanguageModelMiddleware, Tool, ToolSet } from 'ai';
-import { S as SessionSource } from '../session-DsBWEP8d.js';
+import { S as SessionSource } from '../session-gK51QVAM.js';
 import 'zod';
 
 interface PaymentMoments {

package/dist/ai/index.js

@@ -2,14 +2,13 @@ import {
   Sessions,
   recordCall
 } from "../chunk-4MG6VNAU.js";
-import {
-  uuidv7
-} from "../chunk-X3W2Z5GC.js";
-import "../chunk-46QN2KEZ.js";
 import {
   toJson,
   toJsonObject
 } from "../chunk-FQDHFTVR.js";
+import {
+  uuidv7
+} from "../chunk-X3W2Z5GC.js";
 
 // src/ai/index.ts
 var PARAM_KEYS = [

package/dist/{chunk-46QN2KEZ.js → chunk-4BUUPU3O.js}

@@ -326,13 +326,6 @@ var EvaluateOutputSchema = z4.strictObject({
   /** Additive (GAP-21). */
   decisionId: z4.uuid()
 });
-var AnchorEntrySchema = z4.strictObject({
-  epoch: z4.string().min(1),
-  root: Hex64Schema,
-  sig: z4.string().min(1),
-  chainRef: z4.string().optional()
-});
-var AnchorsOutputSchema = z4.strictObject({ entries: z4.array(AnchorEntrySchema) });
 var CreatePolicyInputSchema = z4.strictObject({ rules: PolicyRulesSchema });
 var CreatePolicyOutputSchema = z4.strictObject({
   policyId: z4.uuid(),
@@ -542,8 +535,6 @@ export {
   EvaluateInputSchema,
   DecisionSchema,
   EvaluateOutputSchema,
-  AnchorEntrySchema,
-  AnchorsOutputSchema,
   CreatePolicyInputSchema,
   CreatePolicyOutputSchema,
   ApiErrorSchema,

package/dist/chunk-WY5ZX4BD.js

@@ -0,0 +1,177 @@
+import {
+  toJsonObject
+} from "./chunk-FQDHFTVR.js";
+import {
+  payloadDigest
+} from "./chunk-X3W2Z5GC.js";
+
+// src/x402/binding.ts
+var SESSION_EXTENSION = "beltic.sessionId";
+var SESSION_HEADER = "Beltic-Session-Id";
+var DECISION_EXTENSION = "beltic.decisionId";
+function sessionIdOf(extensions) {
+  return stringAt(extensions, SESSION_EXTENSION);
+}
+function decisionIdOf(extensions) {
+  return stringAt(extensions, DECISION_EXTENSION);
+}
+function stringAt(extensions, key) {
+  const v = extensions?.[key];
+  return typeof v === "string" && v.length > 0 ? v : null;
+}
+
+// src/x402/moments.ts
+function x402Currency(network, asset) {
+  return `${network}/${asset}`;
+}
+function x402Summary(accepts, opts = {}) {
+  const payer = opts.payer?.toLowerCase();
+  return {
+    protocol: "x402",
+    payee: accepts?.payTo ?? "unknown",
+    amount: {
+      value: accepts?.amount ?? "0",
+      currency: accepts ? x402Currency(accepts.network ?? "unknown", accepts.asset ?? "unknown") : "unknown"
+    },
+    ...payer ? { payer } : {}
+  };
+}
+function fromAccepts(a, artifact, raw, payer) {
+  return { ...x402Summary(a, { payer }), artifact, raw };
+}
+function payerOf(payload) {
+  const p = payload.payload ?? {};
+  const auth = p.authorization;
+  const candidates = [
+    auth?.from,
+    p.from,
+    p.payer,
+    p.signer,
+    p.permit?.owner
+  ];
+  const hit = candidates.find((c) => typeof c === "string" && c.length > 0);
+  return typeof hit === "string" ? hit.toLowerCase() : void 0;
+}
+var x402Moments = {
+  /** The 402 challenge as the buyer saw it, from the `PAYMENT-REQUIRED` header. */
+  required(required) {
+    return fromAccepts(required.accepts?.[0], "http-402", toJsonObject(required));
+  },
+  /** The requirements the seller's resource server resolved for a request. */
+  requirements(req) {
+    return fromAccepts(req, "http-402", toJsonObject(req));
+  },
+  /** A route's static `accepts` config, before any payment header exists. */
+  route(route, raw) {
+    const accepts = route ?? {};
+    const extra = accepts.extra;
+    return fromAccepts(
+      {
+        payTo: typeof accepts.payTo === "string" ? accepts.payTo : "dynamic",
+        amount: priceValue(accepts.price),
+        network: accepts.network,
+        asset: extra?.asset ?? "route"
+      },
+      "http-402",
+      raw
+    );
+  },
+  /** The signed payment the buyer presented, with the requirement it accepted. */
+  payload(payload) {
+    return fromAccepts(
+      payload.accepted,
+      "payment-signature",
+      toJsonObject(payload),
+      payerOf(payload)
+    );
+  }
+};
+function priceValue(price) {
+  if (typeof price === "string") return price.replace(/[^0-9.]/g, "") || "0";
+  if (typeof price === "number") return String(price);
+  if (price && typeof price === "object" && typeof price.amount === "string")
+    return price.amount;
+  return "0";
+}
+
+// src/x402/adapter.ts
+function attachX402(beltic, server, http, opts = {}) {
+  const inFlight = /* @__PURE__ */ new Map();
+  const resolveSession = async (bound, ctx) => {
+    const key = opts.correlate?.(ctx) ?? null;
+    return bound ?? (key ? await beltic.correlation.resolve(key) : null);
+  };
+  http?.onProtectedRequest(async (ctx, route) => {
+    if (ctx.paymentHeader) return;
+    const bound = ctx.adapter.getHeader(SESSION_HEADER) ?? ctx.adapter.getHeader(SESSION_HEADER.toLowerCase());
+    const sessionId = await resolveSession(bound ?? null, {
+      path: ctx.path,
+      method: ctx.method,
+      header: (n) => ctx.adapter.getHeader(n)
+    });
+    if (!sessionId) return;
+    const session = await beltic.sessions.ensure(sessionId);
+    const accepts = Array.isArray(route.accepts) ? route.accepts[0] : route.accepts;
+    await session.emit(
+      "payment.requested",
+      x402Moments.route(accepts, {
+        path: ctx.path,
+        method: ctx.method,
+        route: JSON.parse(JSON.stringify(route))
+      })
+    );
+  });
+  server.onBeforeVerify(async (ctx) => {
+    const payload = ctx.paymentPayload;
+    const requirements = ctx.requirements;
+    const sessionId = await resolveSession(sessionIdOf(payload.extensions), {
+      path: payload.resource?.url ?? "",
+      method: "PAY",
+      header: () => void 0
+    });
+    const session = await beltic.sessions.ensure(sessionId);
+    if (session.born === "seller")
+      await session.emit("payment.requested", x402Moments.requirements(requirements));
+    const presented = x402Moments.payload(payload);
+    await session.emit("payment.presented", presented);
+    inFlight.set(payloadDigest(payload), session);
+    const out = await beltic.evaluate(session.id, presented);
+    if (!out) return;
+    opts.onDecision?.({
+      sessionId: session.id,
+      decision: out.decision,
+      reasonCodes: out.reasonCodes,
+      born: session.born,
+      buyerDecisionId: decisionIdOf(payload.extensions)
+    });
+    if (out.verdict.blocks(beltic.onReview)) {
+      return {
+        abort: true,
+        reason: `BELTIC_${out.verdict.value}`,
+        message: out.reasonCodes.join(",")
+      };
+    }
+    return;
+  });
+  server.onAfterSettle(async (ctx) => {
+    const key = payloadDigest(ctx.paymentPayload);
+    const session = inFlight.get(key);
+    if (!session) return;
+    inFlight.delete(key);
+    if (ctx.result.success) await session.close("settled", { transaction: ctx.result.transaction });
+  });
+  return { inFlight };
+}
+
+export {
+  SESSION_EXTENSION,
+  SESSION_HEADER,
+  DECISION_EXTENSION,
+  sessionIdOf,
+  decisionIdOf,
+  x402Currency,
+  x402Summary,
+  payerOf,
+  x402Moments,
+  attachX402
+};

package/dist/index.d.ts

@@ -1,6 +1,6 @@
-import { a as Session } from './session-DsBWEP8d.js';
-export { A as AgentIdentity, b as ApiClient, c as ApiClientOptions, B as Beltic, d as BelticApiError, e as BelticOptions, C as ChainRejectedError, f as CorrelationStore, D as DEFAULT_OPEN_RETRY_MS, g as DEFAULT_TRANSPORT, h as DecideOptions, i as Decision, E as Env, j as Evaluation, H as HumanDecisionInput, M as MemoryCorrelationStore, O as OpenSessionInput, R as RedactFn, k as Run, l as RunOptions, m as SDK_VERSION, n as SessionBorn, S as SessionSource, o as Sessions, p as StartSessionInput, T as ToolCallSpan, q as Transport, r as TransportClosedError, s as TransportOptions, t as createBeltic, u as ephemeralIdentity, v as fileIdentity, w as identityFromSeed } from './session-DsBWEP8d.js';
-import { a as PaymentSummary, J as JsonObject, P as PaymentMomentPayload } from './verdict-6vCyoAHE.js';
+import { a as Session } from './session-gK51QVAM.js';
+export { A as AgentIdentity, b as ApiClient, c as ApiClientOptions, B as Beltic, d as BelticApiError, e as BelticOptions, C as ChainRejectedError, f as CorrelationStore, D as DEFAULT_OPEN_RETRY_MS, g as DEFAULT_TRANSPORT, h as DecideOptions, i as Decision, E as Env, j as Evaluation, H as HumanDecisionInput, M as MemoryCorrelationStore, O as OpenSessionInput, R as RedactFn, k as Run, l as RunOptions, m as SDK_VERSION, n as SessionBorn, S as SessionSource, o as Sessions, p as StartSessionInput, T as ToolCallSpan, q as Transport, r as TransportClosedError, s as TransportOptions, t as createBeltic, u as ephemeralIdentity, v as fileIdentity, w as identityFromSeed } from './session-gK51QVAM.js';
+import { a as PaymentSummary, J as JsonObject, P as PaymentMomentPayload } from './verdict-CDAsxktI.js';
 import 'zod';
 
 /**

package/dist/index.js

@@ -1,3 +1,6 @@
+import {
+  Verdict
+} from "./chunk-4BUUPU3O.js";
 import {
   BelticDisabledError,
   DEFAULT_OPEN_RETRY_MS,
@@ -14,13 +17,6 @@ import {
   sha256,
   toHex
 } from "./chunk-X3W2Z5GC.js";
-import {
-  Verdict
-} from "./chunk-46QN2KEZ.js";
-import {
-  presentedFrom,
-  summaryOf
-} from "./chunk-7G5EHNVW.js";
 
 // src/core/api-client.ts
 var BelticApiError = class extends Error {
@@ -144,6 +140,19 @@ function fileIdentity(path, credential) {
   return identityFromSeed(seed, credential);
 }
 
+// src/core/payment-moment.ts
+function summaryOf(m) {
+  return {
+    protocol: m.protocol,
+    payee: m.payee,
+    amount: { value: m.amount.value, currency: m.amount.currency },
+    ...m.payer ? { payer: m.payer } : {}
+  };
+}
+function presentedFrom(summary, raw) {
+  return { ...summary, artifact: "payment-signature", raw };
+}
+
 // src/core/decision.ts
 var Decision = class _Decision {
   constructor(evaluation) {
@@ -535,7 +544,7 @@ var Transport = class {
 };
 
 // src/client.ts
-var SDK_VERSION = "0.3.0";
+var SDK_VERSION = "0.4.0";
 var ENV_REQUIRED = ["BELTIC_API_KEY", "BELTIC_BASE_URL", "BELTIC_AGENT_SEED"];
 var ENV_CREDENTIAL = "BELTIC_AGENT_CREDENTIAL";
 var Beltic = class _Beltic {

package/dist/protocol/index.d.ts

@@ -1,5 +1,5 @@
-import { b as JsonValue, E as EvidenceSourceAll } from '../verdict-6vCyoAHE.js';
-export { A as ALL_SOURCES, c as ANOMALY_TYPES, d as Amount, e as AmountSchema, f as AnchorEntry, g as AnchorEntrySchema, h as AnchorsOutput, i as AnchorsOutputSchema, j as ApiError, k as ApiErrorSchema, C as ChainHead, l as ChainHeadSchema, m as CreatePolicyInput, n as CreatePolicyInputSchema, o as CreatePolicyOutput, p as CreatePolicyOutputSchema, q as CreateSessionInput, r as CreateSessionInputSchema, s as CreateSessionOutput, t as CreateSessionOutputSchema, D as Decision, u as DecisionSchema, v as DeclaredIntent, w as DeclaredIntentSchema, x as DigestedEnvelope, y as EvaluateInput, z as EvaluateInputSchema, B as EvaluateOutput, F as EvaluateOutputSchema, G as EventResult, H as EventResultSchema, I as EventResultStatus, K as EventResultStatusSchema, L as EvidenceAck, M as EvidenceAckSchema, N as EvidenceBatchInput, O as EvidenceBatchInputSchema, Q as EvidenceEnvelope, R as EvidenceEvent, S as EvidenceEventSchema, T as EvidenceKind, U as EvidenceKindSchema, V as EvidenceSource, W as EvidenceSourceAllSchema, X as EvidenceSourceSchema, Y as GatewayDecisionPayload, Z as GatewayDecisionPayloadSchema, _ as Hex64, $ as Hex64Schema, a0 as IntentDeclaredPayload, a1 as IntentDeclaredPayloadSchema, J as JsonObject, a2 as JsonValueSchema, a3 as LlmCallEndPayload, a4 as LlmCallEndPayloadSchema, a5 as LlmCallStartPayload, a6 as LlmCallStartPayloadSchema, a7 as MAX_BATCH_EVENTS, a8 as OnReview, a9 as PAYMENT_ARTIFACTS, aa as PLATFORM_KINDS, ab as PayloadByKind, P as PaymentMomentPayload, ac as PaymentMomentPayloadSchema, a as PaymentSummary, ad as PaymentSummarySchema, ae as PlatformAnomalyPayload, af as PlatformAnomalyPayloadSchema, ag as PlatformEvidenceKind, ah as PlatformEvidenceKindSchema, ai as PlatformObservationPayload, aj as PlatformObservationPayloadSchema, ak as SESSION_CLOSE_REASONS, al as SOURCE_ORDER, am as SeqSchema, an as SessionClosePayload, ao as SessionClosePayloadSchema, ap as SessionIdSchema, aq as SessionOpenPayload, ar as SessionOpenPayloadSchema, as as Sig, at as SigSchema, au as TimestampSchema, av as ToolCallEndPayload, aw as ToolCallEndPayloadSchema, ax as ToolCallStartPayload, ay as ToolCallStartPayloadSchema, az as TransportGapPayload, aA as TransportGapPayloadSchema, aB as Verdict, aC as WIRE_KINDS, aD as WIRE_SOURCES, aE as WireEvidenceKind, aF as WireEvidenceKindSchema, aG as compareBySessionSource, aH as compareBySourceSeq, aI as isPlatformKind, aJ as isWireKind, aK as payloadSchemaFor } from '../verdict-6vCyoAHE.js';
+import { b as JsonValue, E as EvidenceSourceAll } from '../verdict-CDAsxktI.js';
+export { A as ALL_SOURCES, c as ANOMALY_TYPES, d as Amount, e as AmountSchema, f as ApiError, g as ApiErrorSchema, C as ChainHead, h as ChainHeadSchema, i as CreatePolicyInput, j as CreatePolicyInputSchema, k as CreatePolicyOutput, l as CreatePolicyOutputSchema, m as CreateSessionInput, n as CreateSessionInputSchema, o as CreateSessionOutput, p as CreateSessionOutputSchema, D as Decision, q as DecisionSchema, r as DeclaredIntent, s as DeclaredIntentSchema, t as DigestedEnvelope, u as EvaluateInput, v as EvaluateInputSchema, w as EvaluateOutput, x as EvaluateOutputSchema, y as EventResult, z as EventResultSchema, B as EventResultStatus, F as EventResultStatusSchema, G as EvidenceAck, H as EvidenceAckSchema, I as EvidenceBatchInput, K as EvidenceBatchInputSchema, L as EvidenceEnvelope, M as EvidenceEvent, N as EvidenceEventSchema, O as EvidenceKind, Q as EvidenceKindSchema, R as EvidenceSource, S as EvidenceSourceAllSchema, T as EvidenceSourceSchema, U as GatewayDecisionPayload, V as GatewayDecisionPayloadSchema, W as Hex64, X as Hex64Schema, Y as IntentDeclaredPayload, Z as IntentDeclaredPayloadSchema, J as JsonObject, _ as JsonValueSchema, $ as LlmCallEndPayload, a0 as LlmCallEndPayloadSchema, a1 as LlmCallStartPayload, a2 as LlmCallStartPayloadSchema, a3 as MAX_BATCH_EVENTS, a4 as OnReview, a5 as PAYMENT_ARTIFACTS, a6 as PLATFORM_KINDS, a7 as PayloadByKind, P as PaymentMomentPayload, a8 as PaymentMomentPayloadSchema, a as PaymentSummary, a9 as PaymentSummarySchema, aa as PlatformAnomalyPayload, ab as PlatformAnomalyPayloadSchema, ac as PlatformEvidenceKind, ad as PlatformEvidenceKindSchema, ae as PlatformObservationPayload, af as PlatformObservationPayloadSchema, ag as SESSION_CLOSE_REASONS, ah as SOURCE_ORDER, ai as SeqSchema, aj as SessionClosePayload, ak as SessionClosePayloadSchema, al as SessionIdSchema, am as SessionOpenPayload, an as SessionOpenPayloadSchema, ao as Sig, ap as SigSchema, aq as TimestampSchema, ar as ToolCallEndPayload, as as ToolCallEndPayloadSchema, at as ToolCallStartPayload, au as ToolCallStartPayloadSchema, av as TransportGapPayload, aw as TransportGapPayloadSchema, ax as Verdict, ay as WIRE_KINDS, az as WIRE_SOURCES, aA as WireEvidenceKind, aB as WireEvidenceKindSchema, aC as compareBySessionSource, aD as compareBySourceSeq, aE as isPlatformKind, aF as isWireKind, aG as payloadSchemaFor } from '../verdict-CDAsxktI.js';
 import { z } from 'zod';
 
 declare const PRIMITIVES: readonly ["THRESHOLD", "MEMBERSHIP", "MATCH", "PRESENCE", "FRESHNESS"];

package/dist/protocol/index.js

@@ -3,8 +3,6 @@ import {
   ANNOTATION_CODES,
   ANOMALY_TYPES,
   AmountSchema,
-  AnchorEntrySchema,
-  AnchorsOutputSchema,
   ApiErrorSchema,
   COLLECTOR_CODES,
   ChainHeadSchema,
@@ -73,14 +71,12 @@ import {
   parseSelectorRef,
   payloadSchemaFor,
   walkPath
-} from "../chunk-46QN2KEZ.js";
+} from "../chunk-4BUUPU3O.js";
 export {
   ALL_SOURCES,
   ANNOTATION_CODES,
   ANOMALY_TYPES,
   AmountSchema,
-  AnchorEntrySchema,
-  AnchorsOutputSchema,
   ApiErrorSchema,
   COLLECTOR_CODES,
   ChainHeadSchema,

package/dist/{session-DsBWEP8d.d.ts → session-gK51QVAM.d.ts}

@@ -1,9 +1,9 @@
-import { L as EvidenceAck, G as EventResult, R as EvidenceEvent, B as EvaluateOutput, aB as Verdict, a8 as OnReview, a as PaymentSummary, P as PaymentMomentPayload, D as Decision$1, v as DeclaredIntent, ax as ToolCallStartPayload, b as JsonValue, J as JsonObject, an as SessionClosePayload, V as EvidenceSource, aE as WireEvidenceKind, C as ChainHead, ab as PayloadByKind } from './verdict-6vCyoAHE.js';
+import { G as EvidenceAck, y as EventResult, M as EvidenceEvent, w as EvaluateOutput, ax as Verdict, a4 as OnReview, a as PaymentSummary, P as PaymentMomentPayload, D as Decision$1, r as DeclaredIntent, at as ToolCallStartPayload, b as JsonValue, J as JsonObject, aj as SessionClosePayload, R as EvidenceSource, aA as WireEvidenceKind, C as ChainHead, a7 as PayloadByKind } from './verdict-CDAsxktI.js';
 
 /**
  * The edge signs event digests (Fraud SDK RFC › Modules › Identity Module);
- * the platform signs its own PLATFORM chain and epoch anchors. Both are the
- * same operation over different keys, so one interface.
+ * the platform signs its own PLATFORM chain. Both are the same operation
+ * over different keys, so one interface.
  */
 interface Signer {
     /** Raw 32-byte Ed25519 public key. */
@@ -139,8 +139,7 @@ declare class Transport {
  *
  *   @belticlabs/agent-risk-sdk/ai    → middleware(session), wrapTools(session, …)
  *   @belticlabs/agent-risk-sdk/x402  → belticFetch(session), x402Summary(…), attachX402(beltic, …)
- *   @belticlabs/agent-risk-sdk/hono  → belticPaymentMiddleware(beltic, …)   (and /express)
- *   @belticlabs/agent-risk-sdk/mcp   → wrapClient(session, …), wrapServer(beltic, …)
+ *   @belticlabs/agent-risk-sdk/hono  → belticPaymentMiddleware(beltic, …)
  *
  * Neither half decides risk locally: verdicts are platform-side.
  *
@@ -159,7 +158,7 @@ declare class Transport {
  * they are the primitives the fail-open entries are built on.
  */
 
-declare const SDK_VERSION = "0.3.0";
+declare const SDK_VERSION = "0.4.0";
 type Env = Record<string, string | undefined>;
 interface BelticOptions extends Omit<ApiClientOptions, 'userAgent'> {
     /** Buyer half. Without it, `sessions.start` is unavailable; the seller half works. */

package/dist/{verdict-6vCyoAHE.d.ts → verdict-CDAsxktI.d.ts}

@@ -318,22 +318,6 @@ declare const EvaluateOutputSchema: z.ZodObject<{
     decisionId: z.ZodUUID;
 }, z.core.$strict>;
 type EvaluateOutput = z.infer<typeof EvaluateOutputSchema>;
-declare const AnchorEntrySchema: z.ZodObject<{
-    epoch: z.ZodString;
-    root: z.ZodString;
-    sig: z.ZodString;
-    chainRef: z.ZodOptional<z.ZodString>;
-}, z.core.$strict>;
-type AnchorEntry = z.infer<typeof AnchorEntrySchema>;
-declare const AnchorsOutputSchema: z.ZodObject<{
-    entries: z.ZodArray<z.ZodObject<{
-        epoch: z.ZodString;
-        root: z.ZodString;
-        sig: z.ZodString;
-        chainRef: z.ZodOptional<z.ZodString>;
-    }, z.core.$strict>>;
-}, z.core.$strict>;
-type AnchorsOutput = z.infer<typeof AnchorsOutputSchema>;
 /** Non-RFC admin surface (GAP-53). */
 declare const CreatePolicyInputSchema: z.ZodObject<{
     rules: z.ZodObject<{
@@ -568,4 +552,4 @@ declare class Verdict {
     effective(onReview: OnReview): Decision;
 }
 
-export { Hex64Schema as $, ALL_SOURCES as A, type EvaluateOutput as B, type ChainHead as C, type Decision as D, type EvidenceSourceAll as E, EvaluateOutputSchema as F, type EventResult as G, EventResultSchema as H, type EventResultStatus as I, type JsonObject as J, EventResultStatusSchema as K, type EvidenceAck as L, EvidenceAckSchema as M, type EvidenceBatchInput as N, EvidenceBatchInputSchema as O, type PaymentMomentPayload as P, type EvidenceEnvelope as Q, type EvidenceEvent as R, EvidenceEventSchema as S, type EvidenceKind as T, EvidenceKindSchema as U, type EvidenceSource as V, EvidenceSourceAllSchema as W, EvidenceSourceSchema as X, type GatewayDecisionPayload as Y, GatewayDecisionPayloadSchema as Z, type Hex64 as _, type PaymentSummary as a, type IntentDeclaredPayload as a0, IntentDeclaredPayloadSchema as a1, JsonValueSchema as a2, type LlmCallEndPayload as a3, LlmCallEndPayloadSchema as a4, type LlmCallStartPayload as a5, LlmCallStartPayloadSchema as a6, MAX_BATCH_EVENTS as a7, type OnReview as a8, PAYMENT_ARTIFACTS as a9, TransportGapPayloadSchema as aA, Verdict as aB, WIRE_KINDS as aC, WIRE_SOURCES as aD, type WireEvidenceKind as aE, WireEvidenceKindSchema as aF, compareBySessionSource as aG, compareBySourceSeq as aH, isPlatformKind as aI, isWireKind as aJ, payloadSchemaFor as aK, PLATFORM_KINDS as aa, type PayloadByKind as ab, PaymentMomentPayloadSchema as ac, PaymentSummarySchema as ad, type PlatformAnomalyPayload as ae, PlatformAnomalyPayloadSchema as af, type PlatformEvidenceKind as ag, PlatformEvidenceKindSchema as ah, type PlatformObservationPayload as ai, PlatformObservationPayloadSchema as aj, SESSION_CLOSE_REASONS as ak, SOURCE_ORDER as al, SeqSchema as am, type SessionClosePayload as an, SessionClosePayloadSchema as ao, SessionIdSchema as ap, type SessionOpenPayload as aq, SessionOpenPayloadSchema as ar, type Sig as as, SigSchema as at, TimestampSchema as au, type ToolCallEndPayload as av, ToolCallEndPayloadSchema as aw, type ToolCallStartPayload as ax, ToolCallStartPayloadSchema as ay, type TransportGapPayload as az, type JsonValue as b, ANOMALY_TYPES as c, type Amount as d, AmountSchema as e, type AnchorEntry as f, AnchorEntrySchema as g, type AnchorsOutput as h, AnchorsOutputSchema as i, type ApiError as j, ApiErrorSchema as k, ChainHeadSchema as l, type CreatePolicyInput as m, CreatePolicyInputSchema as n, type CreatePolicyOutput as o, CreatePolicyOutputSchema as p, type CreateSessionInput as q, CreateSessionInputSchema as r, type CreateSessionOutput as s, CreateSessionOutputSchema as t, DecisionSchema as u, type DeclaredIntent as v, DeclaredIntentSchema as w, type DigestedEnvelope as x, type EvaluateInput as y, EvaluateInputSchema as z };
+export { type LlmCallEndPayload as $, ALL_SOURCES as A, type EventResultStatus as B, type ChainHead as C, type Decision as D, type EvidenceSourceAll as E, EventResultStatusSchema as F, type EvidenceAck as G, EvidenceAckSchema as H, type EvidenceBatchInput as I, type JsonObject as J, EvidenceBatchInputSchema as K, type EvidenceEnvelope as L, type EvidenceEvent as M, EvidenceEventSchema as N, type EvidenceKind as O, type PaymentMomentPayload as P, EvidenceKindSchema as Q, type EvidenceSource as R, EvidenceSourceAllSchema as S, EvidenceSourceSchema as T, type GatewayDecisionPayload as U, GatewayDecisionPayloadSchema as V, type Hex64 as W, Hex64Schema as X, type IntentDeclaredPayload as Y, IntentDeclaredPayloadSchema as Z, JsonValueSchema as _, type PaymentSummary as a, LlmCallEndPayloadSchema as a0, type LlmCallStartPayload as a1, LlmCallStartPayloadSchema as a2, MAX_BATCH_EVENTS as a3, type OnReview as a4, PAYMENT_ARTIFACTS as a5, PLATFORM_KINDS as a6, type PayloadByKind as a7, PaymentMomentPayloadSchema as a8, PaymentSummarySchema as a9, type WireEvidenceKind as aA, WireEvidenceKindSchema as aB, compareBySessionSource as aC, compareBySourceSeq as aD, isPlatformKind as aE, isWireKind as aF, payloadSchemaFor as aG, type PlatformAnomalyPayload as aa, PlatformAnomalyPayloadSchema as ab, type PlatformEvidenceKind as ac, PlatformEvidenceKindSchema as ad, type PlatformObservationPayload as ae, PlatformObservationPayloadSchema as af, SESSION_CLOSE_REASONS as ag, SOURCE_ORDER as ah, SeqSchema as ai, type SessionClosePayload as aj, SessionClosePayloadSchema as ak, SessionIdSchema as al, type SessionOpenPayload as am, SessionOpenPayloadSchema as an, type Sig as ao, SigSchema as ap, TimestampSchema as aq, type ToolCallEndPayload as ar, ToolCallEndPayloadSchema as as, type ToolCallStartPayload as at, ToolCallStartPayloadSchema as au, type TransportGapPayload as av, TransportGapPayloadSchema as aw, Verdict as ax, WIRE_KINDS as ay, WIRE_SOURCES as az, type JsonValue as b, ANOMALY_TYPES as c, type Amount as d, AmountSchema as e, type ApiError as f, ApiErrorSchema as g, ChainHeadSchema as h, type CreatePolicyInput as i, CreatePolicyInputSchema as j, type CreatePolicyOutput as k, CreatePolicyOutputSchema as l, type CreateSessionInput as m, CreateSessionInputSchema as n, type CreateSessionOutput as o, CreateSessionOutputSchema as p, DecisionSchema as q, type DeclaredIntent as r, DeclaredIntentSchema as s, type DigestedEnvelope as t, type EvaluateInput as u, EvaluateInputSchema as v, type EvaluateOutput as w, EvaluateOutputSchema as x, type EventResult as y, EventResultSchema as z };

package/dist/x402/hono.d.ts

@@ -1,11 +1,22 @@
-import { RoutesConfig, x402ResourceServer } from '@x402/core/server';
+import { PaywallConfig, RoutesConfig, x402ResourceServer } from '@x402/core/server';
 import { MiddlewareHandler } from 'hono';
-import { B as Beltic } from '../session-DsBWEP8d.js';
-import { G as GuardedMiddlewareOptions } from '../middleware-9gI0ou2i.js';
-export { a as attachX402 } from '../adapter-BEpzr2R3.js';
-import '../verdict-6vCyoAHE.js';
+import { B as Beltic } from '../session-gK51QVAM.js';
+import { A as AttachOptions } from '../adapter-CLy44CD2.js';
+export { a as attachX402 } from '../adapter-CLy44CD2.js';
+import '../verdict-CDAsxktI.js';
 import 'zod';
 
+/**
+ * The seller half as one middleware: the framework's `@x402/*` payment
+ * middleware over an `x402HTTPResourceServer` with the Beltic hooks
+ * attached. `@belticlabs/agent-risk-sdk/hono` hands in its framework's
+ * `paymentMiddlewareFromHTTPServer`.
+ */
+
+type GuardedMiddlewareOptions = AttachOptions & {
+    paywall?: PaywallConfig | undefined;
+};
+
 /** Seller half for hono: `@x402/hono`'s payment middleware with the Beltic hooks attached. */
 
 declare function belticPaymentMiddleware(beltic: Beltic, routes: RoutesConfig, server: x402ResourceServer, opts?: GuardedMiddlewareOptions): MiddlewareHandler;

package/dist/x402/hono.js

@@ -1,17 +1,23 @@
-import {
-  guardedPaymentMiddleware
-} from "../chunk-NJVO2WIV.js";
 import {
   attachX402
-} from "../chunk-OKC6VMFH.js";
-import "../chunk-FAQ442YH.js";
-import "../chunk-X3W2Z5GC.js";
-import "../chunk-46QN2KEZ.js";
-import "../chunk-LM4NIYE5.js";
+} from "../chunk-WY5ZX4BD.js";
 import "../chunk-FQDHFTVR.js";
+import "../chunk-X3W2Z5GC.js";
 
 // src/x402/hono.ts
 import { paymentMiddlewareFromHTTPServer } from "@x402/hono";
+
+// src/x402/middleware.ts
+import {
+  x402HTTPResourceServer
+} from "@x402/core/server";
+function guardedPaymentMiddleware(fromHTTPServer, beltic, routes, server, opts = {}) {
+  const http = new x402HTTPResourceServer(server, routes);
+  attachX402(beltic, server, http, opts);
+  return fromHTTPServer(http, opts.paywall);
+}
+
+// src/x402/hono.ts
 function belticPaymentMiddleware(beltic, routes, server, opts) {
   return guardedPaymentMiddleware(paymentMiddlewareFromHTTPServer, beltic, routes, server, opts);
 }

package/dist/x402/index.d.ts

@@ -1,6 +1,6 @@
-export { A as AttachOptions, b as AttachedX402, C as CorrelationContext, a as attachX402 } from '../adapter-BEpzr2R3.js';
-import { S as SessionSource } from '../session-DsBWEP8d.js';
-import { v as DeclaredIntent, P as PaymentMomentPayload, J as JsonObject, a as PaymentSummary } from '../verdict-6vCyoAHE.js';
+export { A as AttachOptions, b as AttachedX402, C as CorrelationContext, a as attachX402 } from '../adapter-CLy44CD2.js';
+import { S as SessionSource } from '../session-gK51QVAM.js';
+import { r as DeclaredIntent, P as PaymentMomentPayload, J as JsonObject, a as PaymentSummary } from '../verdict-CDAsxktI.js';
 import '@x402/core/server';
 import 'zod';
 
@@ -14,7 +14,6 @@ import 'zod';
 declare const SESSION_EXTENSION = "beltic.sessionId";
 declare const SESSION_HEADER = "Beltic-Session-Id";
 declare const DECISION_EXTENSION = "beltic.decisionId";
-declare const DECISION_HEADER = "Beltic-Decision-Id";
 declare function sessionIdOf(extensions: Readonly<Record<string, unknown>> | undefined): string | null;
 declare function decisionIdOf(extensions: Readonly<Record<string, unknown>> | undefined): string | null;
 
@@ -59,20 +58,19 @@ declare function x402Intent(input: X402IntentInput): DeclaredIntent;
 declare function x402Currency(network: string, asset: string): string;
 /**
  * The minimum an `accepts` entry needs to become a moment; unknown parts
- * are named, never dropped. v1 spells the amount `maxAmountRequired`.
+ * are named, never dropped.
  */
 interface AcceptsLike {
     payTo?: string | undefined;
     amount?: string | undefined;
-    maxAmountRequired?: string | undefined;
     network?: string | undefined;
     asset?: string | undefined;
 }
 /**
- * A 402 challenge and a presented payment of either generation, as far as
- * a moment needs them. `@x402/core`'s `PaymentRequired` and
- * `PaymentPayload` satisfy these structurally, so the seller adapter
- * passes its typed values through and the buyer needs no `@x402/*` types.
+ * A 402 challenge and a presented payment, as far as a moment needs them.
+ * `@x402/core`'s `PaymentRequired` and `PaymentPayload` satisfy these
+ * structurally, so the seller adapter passes its typed values through and
+ * the buyer needs no `@x402/*` types.
  */
 interface PaymentRequiredLike {
     x402Version?: number | undefined;
@@ -81,8 +79,6 @@ interface PaymentRequiredLike {
 interface PaymentPayloadLike {
     x402Version?: number | undefined;
     accepted?: AcceptsLike | undefined;
-    /** v1 names the network here, beside the payload, and nowhere else. */
-    network?: string | undefined;
     payload?: Readonly<Record<string, unknown>> | undefined;
     extensions?: Readonly<Record<string, unknown>> | undefined;
 }
@@ -97,20 +93,14 @@ declare function x402Summary(accepts: AcceptsLike | undefined, opts?: {
 /** The payer is scheme-specific; the common EVM shapes are read, anything else stays in `raw`. */
 declare function payerOf(payload: PaymentPayloadLike): string | undefined;
 declare const x402Moments: {
-    /** The 402 challenge as the buyer saw it, v2 header or v1 body. */
+    /** The 402 challenge as the buyer saw it, from the `PAYMENT-REQUIRED` header. */
     required(required: PaymentRequiredLike): PaymentMomentPayload;
     /** The requirements the seller's resource server resolved for a request. */
     requirements(req: AcceptsLike): PaymentMomentPayload;
     /** A route's static `accepts` config, before any payment header exists. */
     route(route: unknown, raw: JsonObject): PaymentMomentPayload;
-    /** An in-band ask (MRTR `input_required` or a `_meta` envelope) carrying an x402-style `accepts`. */
-    ask(first: AcceptsLike, raw: JsonObject): PaymentMomentPayload;
-    /**
-     * The signed payment the buyer presented. A v2 payload carries the
-     * requirement it accepted; a v1 payload does not, so the caller passes
-     * the `accepts` entry it answered.
-     */
-    payload(payload: PaymentPayloadLike, accepts?: AcceptsLike | undefined): PaymentMomentPayload;
+    /** The signed payment the buyer presented, with the requirement it accepted. */
+    payload(payload: PaymentPayloadLike): PaymentMomentPayload;
 };
 
-export { type AcceptsLike, DECISION_EXTENSION, DECISION_HEADER, type PaymentPayloadLike, type PaymentRequiredLike, SESSION_EXTENSION, SESSION_HEADER, type X402IntentInput, belticFetch, decisionIdOf, payerOf, sessionIdOf, x402Currency, x402Intent, x402Moments, x402Summary };
+export { type AcceptsLike, DECISION_EXTENSION, type PaymentPayloadLike, type PaymentRequiredLike, SESSION_EXTENSION, SESSION_HEADER, type X402IntentInput, belticFetch, decisionIdOf, payerOf, sessionIdOf, x402Currency, x402Intent, x402Moments, x402Summary };