@belticlabs/agent-risk-sdk 0.3.0 → 0.4.0

package/dist/x402/index.js

@@ -1,71 +1,55 @@
-import {
-  attachX402
-} from "../chunk-OKC6VMFH.js";
 import {
   Session,
   Sessions
 } from "../chunk-4MG6VNAU.js";
 import {
   DECISION_EXTENSION,
-  DECISION_HEADER,
   SESSION_EXTENSION,
   SESSION_HEADER,
+  attachX402,
   decisionIdOf,
-  sessionIdOf
-} from "../chunk-FAQ442YH.js";
-import "../chunk-X3W2Z5GC.js";
-import "../chunk-46QN2KEZ.js";
-import {
   payerOf,
+  sessionIdOf,
   x402Currency,
   x402Moments,
   x402Summary
-} from "../chunk-LM4NIYE5.js";
+} from "../chunk-WY5ZX4BD.js";
 import "../chunk-FQDHFTVR.js";
+import "../chunk-X3W2Z5GC.js";
 
 // src/x402/fetch.ts
 var BASE64 = /^[A-Za-z0-9+/]*={0,2}$/;
-var CHALLENGE_MEMORY = 32;
 function belticFetch(source, inner = globalThis.fetch) {
   if (!source) return inner;
   const run = source instanceof Session ? null : source;
-  const challenges = /* @__PURE__ */ new Map();
   return async (input, init) => {
     const session = await Sessions.resolve(source);
     if (!session) return inner(input, init);
-    const url = urlOf(input);
     const headers = new Headers(
       init?.headers ?? (input instanceof Request ? input.headers : void 0)
     );
     headers.set(SESSION_HEADER, session.id);
     const signature = headers.get("PAYMENT-SIGNATURE");
-    const presented = signature ?? headers.get("X-PAYMENT");
-    const payload = presented ? decodeHeader(presented) : null;
+    const payload = signature ? decodeHeader(signature) : null;
     if (payload) {
-      const accepts = payload.accepted ?? answeredAccepts(challenges.get(url), payload);
-      const decision = run?.decisionFor(x402Moments.payload(payload, accepts));
+      const decision = run?.decisionFor(x402Moments.payload(payload));
       const decisionId = decision && !decision.absent ? decision.decisionId : null;
-      const bound = signature ? {
+      const bound = {
         ...payload,
         extensions: {
           ...payload.extensions,
           [SESSION_EXTENSION]: session.id,
           ...decisionId ? { [DECISION_EXTENSION]: decisionId } : {}
         }
-      } : payload;
-      if (signature) headers.set("PAYMENT-SIGNATURE", encodeHeader(bound));
-      else if (decisionId) headers.set(DECISION_HEADER, decisionId);
-      await session.emit("payment.presented", x402Moments.payload(bound, accepts));
+      };
+      headers.set("PAYMENT-SIGNATURE", encodeHeader(bound));
+      await session.emit("payment.presented", x402Moments.payload(bound));
       await session.flush();
     }
     const res = await inner(input, { ...init, headers });
     if (res.status !== 402) return res;
-    const required = await challengeOf(res);
-    if (required) {
-      challenges.set(url, required);
-      if (challenges.size > CHALLENGE_MEMORY) challenges.delete(challenges.keys().next().value);
-      await session.emit("payment.requested", x402Moments.required(required));
-    }
+    const required = challengeOf(res);
+    if (required) await session.emit("payment.requested", x402Moments.required(required));
     return res;
   };
 }
@@ -81,35 +65,9 @@ function decodeHeader(value) {
 function encodeHeader(value) {
   return Buffer.from(JSON.stringify(value), "utf8").toString("base64");
 }
-function urlOf(input) {
-  return typeof input === "string" ? input : input instanceof URL ? input.toString() : input.url;
-}
-async function challengeOf(res) {
+function challengeOf(res) {
   const header = res.headers.get("PAYMENT-REQUIRED");
-  if (header) return decodeHeader(header);
-  if (!/json/i.test(res.headers.get("content-type") ?? "")) return null;
-  try {
-    const body = await res.clone().json();
-    return Array.isArray(body?.accepts) ? body : null;
-  } catch {
-    return null;
-  }
-}
-function answeredAccepts(required, payload) {
-  const auth = payload.payload?.authorization;
-  const payTo = typeof auth?.to === "string" ? auth.to : void 0;
-  const amount = typeof auth?.value === "string" ? auth.value : void 0;
-  const options = required?.accepts ?? [];
-  const answered = options.find(
-    (a) => a.payTo?.toLowerCase() === payTo?.toLowerCase() && (a.amount ?? a.maxAmountRequired) === amount
-  ) ?? options[0];
-  if (answered) return answered;
-  if (!payTo && !amount) return void 0;
-  return {
-    ...payTo ? { payTo } : {},
-    ...amount ? { amount } : {},
-    ...payload.network ? { network: payload.network } : {}
-  };
+  return header ? decodeHeader(header) : null;
 }
 
 // src/x402/intent.ts
@@ -126,7 +84,6 @@ function x402Intent(input) {
 }
 export {
   DECISION_EXTENSION,
-  DECISION_HEADER,
   SESSION_EXTENSION,
   SESSION_HEADER,
   attachX402,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@belticlabs/agent-risk-sdk",
-  "version": "0.3.0",
-  "description": "The Beltic Agent Risk SDK — one client, two halves: instrument the buyer agent (AI SDK, x402 fetch, MCP client) and guard the seller boundary (x402, MCP server, evaluate).",
+  "version": "0.4.0",
+  "description": "The Beltic Agent Risk SDK — one client, two halves: instrument the buyer agent (AI SDK, x402 fetch) and guard the seller boundary (x402 over hono, evaluate).",
   "license": "UNLICENSED",
   "repository": {
     "type": "git",
@@ -32,18 +32,6 @@
       "types": "./dist/x402/hono.d.ts",
       "default": "./dist/x402/hono.js"
     },
-    "./express": {
-      "types": "./dist/x402/express.d.ts",
-      "default": "./dist/x402/express.js"
-    },
-    "./mcp": {
-      "types": "./dist/mcp/index.d.ts",
-      "default": "./dist/mcp/index.js"
-    },
-    "./platform-adapter": {
-      "types": "./dist/seller/anti-fraud-gateway.d.ts",
-      "default": "./dist/seller/anti-fraud-gateway.js"
-    },
     "./package.json": "./package.json"
   },
   "files": [
@@ -57,45 +45,29 @@
     "zod": "^4.6.5"
   },
   "peerDependencies": {
-    "@modelcontextprotocol/sdk": "^1.30.0",
     "@x402/core": "^2.25.0",
-    "@x402/express": "^2.25.0",
     "@x402/hono": "^2.25.0",
     "ai": "^7.0.0",
-    "express": "^5.0.0",
     "hono": "^4.0.0"
   },
   "peerDependenciesMeta": {
-    "@modelcontextprotocol/sdk": {
-      "optional": true
-    },
     "@x402/core": {
       "optional": true
     },
-    "@x402/express": {
-      "optional": true
-    },
     "@x402/hono": {
       "optional": true
     },
     "ai": {
       "optional": true
     },
-    "express": {
-      "optional": true
-    },
     "hono": {
       "optional": true
     }
   },
   "devDependencies": {
-    "@modelcontextprotocol/sdk": "^1.30.0",
-    "@types/express": "^5.0.6",
     "@x402/core": "^2.25.0",
-    "@x402/express": "^2.25.0",
     "@x402/hono": "^2.25.0",
     "ai": "^7.0.100",
-    "express": "^5.2.1",
     "hono": "^4.13.7",
     "tsup": "8.5.1",
     "typescript": "5.9.3",

package/dist/chunk-7G5EHNVW.js

@@ -1,17 +0,0 @@
-// src/core/payment-moment.ts
-function summaryOf(m) {
-  return {
-    protocol: m.protocol,
-    payee: m.payee,
-    amount: { value: m.amount.value, currency: m.amount.currency },
-    ...m.payer ? { payer: m.payer } : {}
-  };
-}
-function presentedFrom(summary, raw) {
-  return { ...summary, artifact: "payment-signature", raw };
-}
-
-export {
-  summaryOf,
-  presentedFrom
-};

package/dist/chunk-FAQ442YH.js

@@ -1,24 +0,0 @@
-// src/x402/binding.ts
-var SESSION_EXTENSION = "beltic.sessionId";
-var SESSION_HEADER = "Beltic-Session-Id";
-var DECISION_EXTENSION = "beltic.decisionId";
-var DECISION_HEADER = "Beltic-Decision-Id";
-function sessionIdOf(extensions) {
-  return stringAt(extensions, SESSION_EXTENSION);
-}
-function decisionIdOf(extensions) {
-  return stringAt(extensions, DECISION_EXTENSION);
-}
-function stringAt(extensions, key) {
-  const v = extensions?.[key];
-  return typeof v === "string" && v.length > 0 ? v : null;
-}
-
-export {
-  SESSION_EXTENSION,
-  SESSION_HEADER,
-  DECISION_EXTENSION,
-  DECISION_HEADER,
-  sessionIdOf,
-  decisionIdOf
-};

package/dist/chunk-LM4NIYE5.js

@@ -1,92 +0,0 @@
-import {
-  toJsonObject
-} from "./chunk-FQDHFTVR.js";
-
-// src/x402/moments.ts
-function x402Currency(network, asset) {
-  return `${network}/${asset}`;
-}
-function x402Summary(accepts, opts = {}) {
-  const payer = opts.payer?.toLowerCase();
-  return {
-    protocol: "x402",
-    payee: accepts?.payTo ?? "unknown",
-    amount: {
-      value: accepts?.amount ?? accepts?.maxAmountRequired ?? "0",
-      currency: accepts ? x402Currency(accepts.network ?? "unknown", accepts.asset ?? "unknown") : "unknown"
-    },
-    ...payer ? { payer } : {}
-  };
-}
-function fromAccepts(a, artifact, raw, payer) {
-  return { ...x402Summary(a, { payer }), artifact, raw };
-}
-function payerOf(payload) {
-  const p = payload.payload ?? {};
-  const auth = p.authorization;
-  const candidates = [
-    auth?.from,
-    p.from,
-    p.payer,
-    p.signer,
-    p.permit?.owner
-  ];
-  const hit = candidates.find((c) => typeof c === "string" && c.length > 0);
-  return typeof hit === "string" ? hit.toLowerCase() : void 0;
-}
-var x402Moments = {
-  /** The 402 challenge as the buyer saw it, v2 header or v1 body. */
-  required(required) {
-    return fromAccepts(required.accepts?.[0], "http-402", toJsonObject(required));
-  },
-  /** The requirements the seller's resource server resolved for a request. */
-  requirements(req) {
-    return fromAccepts(req, "http-402", toJsonObject(req));
-  },
-  /** A route's static `accepts` config, before any payment header exists. */
-  route(route, raw) {
-    const accepts = route ?? {};
-    const extra = accepts.extra;
-    return fromAccepts(
-      {
-        payTo: typeof accepts.payTo === "string" ? accepts.payTo : "dynamic",
-        amount: priceValue(accepts.price),
-        network: accepts.network,
-        asset: extra?.asset ?? "route"
-      },
-      "http-402",
-      raw
-    );
-  },
-  /** An in-band ask (MRTR `input_required` or a `_meta` envelope) carrying an x402-style `accepts`. */
-  ask(first, raw) {
-    return fromAccepts(first, "mrtr-input-required", raw);
-  },
-  /**
-   * The signed payment the buyer presented. A v2 payload carries the
-   * requirement it accepted; a v1 payload does not, so the caller passes
-   * the `accepts` entry it answered.
-   */
-  payload(payload, accepts) {
-    return fromAccepts(
-      accepts ?? payload.accepted,
-      "payment-signature",
-      toJsonObject(payload),
-      payerOf(payload)
-    );
-  }
-};
-function priceValue(price) {
-  if (typeof price === "string") return price.replace(/[^0-9.]/g, "") || "0";
-  if (typeof price === "number") return String(price);
-  if (price && typeof price === "object" && typeof price.amount === "string")
-    return price.amount;
-  return "0";
-}
-
-export {
-  x402Currency,
-  x402Summary,
-  payerOf,
-  x402Moments
-};

package/dist/chunk-NJVO2WIV.js

@@ -1,17 +0,0 @@
-import {
-  attachX402
-} from "./chunk-OKC6VMFH.js";
-
-// src/x402/middleware.ts
-import {
-  x402HTTPResourceServer
-} from "@x402/core/server";
-function guardedPaymentMiddleware(fromHTTPServer, beltic, routes, server, opts = {}) {
-  const http = new x402HTTPResourceServer(server, routes);
-  attachX402(beltic, server, http, opts);
-  return fromHTTPServer(http, opts.paywall);
-}
-
-export {
-  guardedPaymentMiddleware
-};

package/dist/chunk-OKC6VMFH.js

@@ -1,84 +0,0 @@
-import {
-  SESSION_HEADER,
-  decisionIdOf,
-  sessionIdOf
-} from "./chunk-FAQ442YH.js";
-import {
-  payloadDigest
-} from "./chunk-X3W2Z5GC.js";
-import {
-  x402Moments
-} from "./chunk-LM4NIYE5.js";
-
-// src/x402/adapter.ts
-function attachX402(beltic, server, http, opts = {}) {
-  const inFlight = /* @__PURE__ */ new Map();
-  const resolveSession = async (bound, ctx) => {
-    const key = opts.correlate?.(ctx) ?? null;
-    return bound ?? (key ? await beltic.correlation.resolve(key) : null);
-  };
-  http?.onProtectedRequest(async (ctx, route) => {
-    if (ctx.paymentHeader) return;
-    const bound = ctx.adapter.getHeader(SESSION_HEADER) ?? ctx.adapter.getHeader(SESSION_HEADER.toLowerCase());
-    const sessionId = await resolveSession(bound ?? null, {
-      path: ctx.path,
-      method: ctx.method,
-      header: (n) => ctx.adapter.getHeader(n)
-    });
-    if (!sessionId) return;
-    const session = await beltic.sessions.ensure(sessionId);
-    const accepts = Array.isArray(route.accepts) ? route.accepts[0] : route.accepts;
-    await session.emit(
-      "payment.requested",
-      x402Moments.route(accepts, {
-        path: ctx.path,
-        method: ctx.method,
-        route: JSON.parse(JSON.stringify(route))
-      })
-    );
-  });
-  server.onBeforeVerify(async (ctx) => {
-    const payload = ctx.paymentPayload;
-    const requirements = ctx.requirements;
-    const sessionId = await resolveSession(sessionIdOf(payload.extensions), {
-      path: payload.resource?.url ?? "",
-      method: "PAY",
-      header: () => void 0
-    });
-    const session = await beltic.sessions.ensure(sessionId);
-    if (session.born === "seller")
-      await session.emit("payment.requested", x402Moments.requirements(requirements));
-    const presented = x402Moments.payload(payload);
-    await session.emit("payment.presented", presented);
-    inFlight.set(payloadDigest(payload), session);
-    const out = await beltic.evaluate(session.id, presented);
-    if (!out) return;
-    opts.onDecision?.({
-      sessionId: session.id,
-      decision: out.decision,
-      reasonCodes: out.reasonCodes,
-      born: session.born,
-      buyerDecisionId: decisionIdOf(payload.extensions)
-    });
-    if (out.verdict.blocks(beltic.onReview)) {
-      return {
-        abort: true,
-        reason: `BELTIC_${out.verdict.value}`,
-        message: out.reasonCodes.join(",")
-      };
-    }
-    return;
-  });
-  server.onAfterSettle(async (ctx) => {
-    const key = payloadDigest(ctx.paymentPayload);
-    const session = inFlight.get(key);
-    if (!session) return;
-    inFlight.delete(key);
-    if (ctx.result.success) await session.close("settled", { transaction: ctx.result.transaction });
-  });
-  return { inFlight };
-}
-
-export {
-  attachX402
-};

package/dist/mcp/index.d.ts

@@ -1,58 +0,0 @@
-import { a as PaymentSummary, P as PaymentMomentPayload } from '../verdict-6vCyoAHE.js';
-import { B as Beltic, S as SessionSource } from '../session-DsBWEP8d.js';
-import 'zod';
-
-interface CallToolParams {
-    name: string;
-    arguments?: Record<string, unknown> | undefined;
-    _meta?: Record<string, unknown> | undefined;
-}
-/** Structural: `Client` from `@modelcontextprotocol/sdk/client` satisfies it. */
-interface McpClientLike {
-    callTool(params: CallToolParams, ...rest: unknown[]): Promise<unknown>;
-}
-declare function wrapClient<C extends McpClientLike>(source: SessionSource, client: C, opts?: {
-    server?: string;
-}): C;
-/**
- * An in-band payment ask: any object in the result carrying an x402-style
- * `accepts` array (MRTR `input_required`, or a `_meta` envelope). One
- * moment, two artifacts — either becomes the same `payment.requested`.
- */
-declare function findPaymentAsk(result: unknown): PaymentMomentPayload | null;
-interface ServerCallExtra {
-    _meta?: Record<string, unknown> | undefined;
-    sessionId?: string | undefined;
-}
-interface WithBelticOptions<Args> {
-    toolName: string;
-    /** Return the payment this call moves, or null when the call is not value-moving. */
-    valueMoving?: (args: Args) => PaymentSummary | null;
-    gateway?: string;
-}
-type ToolHandler<Args, R> = (args: Args, extra: ServerCallExtra) => Promise<R> | R;
-interface McpErrorResult {
-    isError: true;
-    content: Array<{
-        type: 'text';
-        text: string;
-    }>;
-}
-/**
- * Wraps a tool handler on the seller side. Value-moving calls are evaluated
- * synchronously (DENY ⇒ isError result); every decided call is recorded
- * as `gateway.decision` in the buyer's session, or a seller-born one.
- */
-declare function withBeltic<Args, R>(beltic: Beltic, handler: ToolHandler<Args, R>, opts: WithBelticOptions<Args>): ToolHandler<Args, R | McpErrorResult>;
-/** Structural: `McpServer` from `@modelcontextprotocol/sdk/server/mcp` satisfies it. */
-interface McpServerLike {
-    registerTool(name: string, config: unknown, cb: (...a: never[]) => unknown): unknown;
-}
-interface WrapServerOptions {
-    valueMoving?: (toolName: string, args: unknown) => PaymentSummary | null;
-    gateway?: string;
-}
-/** Patches `registerTool` so every tool goes through `withBeltic`; `valueMoving` decides per tool. */
-declare function wrapServer<S extends McpServerLike>(beltic: Beltic, server: S, opts?: WrapServerOptions): S;
-
-export { type CallToolParams, type McpClientLike, type McpErrorResult, type McpServerLike, type ServerCallExtra, type ToolHandler, type WithBelticOptions, type WrapServerOptions, findPaymentAsk, withBeltic, wrapClient, wrapServer };

package/dist/mcp/index.js

@@ -1,135 +0,0 @@
-import {
-  Sessions,
-  recordCall
-} from "../chunk-4MG6VNAU.js";
-import {
-  SESSION_EXTENSION
-} from "../chunk-FAQ442YH.js";
-import {
-  uuidv7
-} from "../chunk-X3W2Z5GC.js";
-import {
-  Verdict
-} from "../chunk-46QN2KEZ.js";
-import {
-  presentedFrom
-} from "../chunk-7G5EHNVW.js";
-import {
-  x402Moments
-} from "../chunk-LM4NIYE5.js";
-import {
-  toJson,
-  toJsonObject
-} from "../chunk-FQDHFTVR.js";
-
-// src/mcp/index.ts
-function wrapClient(source, client, opts = {}) {
-  if (!source) return client;
-  const original = client.callTool.bind(client);
-  const callTool = async (params, ...rest) => {
-    const session = await Sessions.resolve(source);
-    if (!session) return original(params, ...rest);
-    return recordCall(
-      session,
-      "tool_call",
-      uuidv7(),
-      {
-        toolName: params.name,
-        input: toJson(params.arguments ?? {}),
-        transport: "mcp",
-        ...opts.server ? { server: opts.server } : {}
-      },
-      async () => {
-        await session.flush();
-        return original(
-          { ...params, _meta: { ...params._meta ?? {}, [SESSION_EXTENSION]: session.id } },
-          ...rest
-        );
-      },
-      async (result) => {
-        const ask = findPaymentAsk(result);
-        if (ask) await session.emit("payment.requested", ask);
-        return { output: toJson(result) };
-      }
-    );
-  };
-  return new Proxy(client, {
-    get(target, prop, receiver) {
-      return prop === "callTool" ? callTool : Reflect.get(target, prop, receiver);
-    }
-  });
-}
-function findPaymentAsk(result) {
-  const seen = /* @__PURE__ */ new Set();
-  const walk = (v, depth) => {
-    if (!v || typeof v !== "object" || seen.has(v) || depth > 6) return null;
-    seen.add(v);
-    const o = v;
-    const first = Array.isArray(o.accepts) ? o.accepts[0] : void 0;
-    if (typeof first?.payTo === "string") {
-      return x402Moments.ask(first, toJsonObject(o));
-    }
-    for (const child of Array.isArray(o) ? o : Object.values(o)) {
-      const hit = walk(child, depth + 1);
-      if (hit) return hit;
-    }
-    return null;
-  };
-  return walk(result, 0);
-}
-function withBeltic(beltic, handler, opts) {
-  const gateway = opts.gateway ?? "sdk-mcp";
-  return async (args, extra) => {
-    const bound = extra?._meta?.[SESSION_EXTENSION];
-    const session = await beltic.sessions.ensure(typeof bound === "string" ? bound : null);
-    const payment = opts.valueMoving?.(args) ?? null;
-    let verdict = Verdict.ALLOW;
-    let reasonCodes = [];
-    if (payment) {
-      await session.emit(
-        "payment.presented",
-        presentedFrom(payment, { tool: opts.toolName, args: toJson(args) })
-      );
-      const out = await beltic.evaluate(session.id, payment);
-      if (out) {
-        verdict = out.verdict;
-        reasonCodes = out.reasonCodes;
-      }
-    }
-    await session.emit("gateway.decision", {
-      gateway,
-      call: { tool: opts.toolName, args: toJson(args) },
-      decision: verdict.effective(beltic.onReview),
-      reasonCodes,
-      record: { valueMoving: payment !== null, bound: typeof bound === "string" }
-    });
-    if (verdict.blocks(beltic.onReview)) {
-      return {
-        isError: true,
-        content: [
-          { type: "text", text: `Beltic ${verdict.value}: ${reasonCodes.join(",") || "denied"}` }
-        ]
-      };
-    }
-    return handler(args, extra);
-  };
-}
-function wrapServer(beltic, server, opts = {}) {
-  const original = server.registerTool.bind(server);
-  server.registerTool = ((name, config, cb) => original(
-    name,
-    config,
-    withBeltic(beltic, cb, {
-      toolName: name,
-      ...opts.gateway ? { gateway: opts.gateway } : {},
-      valueMoving: (args) => opts.valueMoving?.(name, args) ?? null
-    })
-  ));
-  return server;
-}
-export {
-  findPaymentAsk,
-  withBeltic,
-  wrapClient,
-  wrapServer
-};

package/dist/middleware-9gI0ou2i.d.ts

@@ -1,15 +0,0 @@
-import { PaywallConfig } from '@x402/core/server';
-import { A as AttachOptions } from './adapter-BEpzr2R3.js';
-
-/**
- * The seller half as one middleware: the framework's `@x402/*` payment
- * middleware over an `x402HTTPResourceServer` with the Beltic hooks
- * attached. `@belticlabs/agent-risk-sdk/hono` and `@belticlabs/agent-risk-sdk/express` differ only in
- * which `paymentMiddlewareFromHTTPServer` they hand in.
- */
-
-type GuardedMiddlewareOptions = AttachOptions & {
-    paywall?: PaywallConfig | undefined;
-};
-
-export type { GuardedMiddlewareOptions as G };

package/dist/seller/anti-fraud-gateway.d.ts

@@ -1,40 +0,0 @@
-import { B as Beltic } from '../session-DsBWEP8d.js';
-import '../verdict-6vCyoAHE.js';
-import 'zod';
-
-/**
- * Adapter for the anti-fraud port already in Beltic's `platform` monorepo
- * (`x402-core/gateways/anti-fraud.gateway.interface.ts`), GAP-37. That
- * port is binary and session-less; the mapping is lossy by construction:
- * `REVIEW` becomes a deny unless `onReview` says otherwise, and reason
- * codes travel joined in `reason`. The structural type is copied so this
- * module needs no dependency on `platform`.
- */
-
-interface PaymentRiskContext {
-    wallet: string;
-    resource: string;
-    amountAtomic: string;
-    asset: string;
-    network: string;
-    paymentIdentifier?: string;
-    /** Not in the platform port yet — pass it when you have it. */
-    sessionId?: string;
-    payTo?: string;
-}
-type RiskDecision = {
-    allow: true;
-} | {
-    allow: false;
-    reason: string;
-};
-interface AntiFraudGateway {
-    assess(context: PaymentRiskContext): Promise<RiskDecision>;
-}
-declare class BelticAntiFraudGateway implements AntiFraudGateway {
-    private readonly beltic;
-    constructor(beltic: Beltic);
-    assess(ctx: PaymentRiskContext): Promise<RiskDecision>;
-}
-
-export { type AntiFraudGateway, BelticAntiFraudGateway, type PaymentRiskContext, type RiskDecision };