@belticlabs/agent-risk-sdk 0.3.0 → 0.5.0

package/dist/index.js

@@ -1,10 +1,15 @@
 import {
-  BelticDisabledError,
-  DEFAULT_OPEN_RETRY_MS,
+  Verdict
+} from "./chunk-4BUUPU3O.js";
+import {
+  ApiClient,
+  BelticApiError,
+  BelticConfigError,
+  ChainRejectedError,
   Session,
   Sessions,
-  recordCall
-} from "./chunk-4MG6VNAU.js";
+  Transport
+} from "./chunk-JSE6JQJC.js";
 import {
   canonicalBytes,
   canonicalize,
@@ -14,134 +19,22 @@ import {
   sha256,
   toHex
 } from "./chunk-X3W2Z5GC.js";
-import {
-  Verdict
-} from "./chunk-46QN2KEZ.js";
-import {
-  presentedFrom,
-  summaryOf
-} from "./chunk-7G5EHNVW.js";
-
-// src/core/api-client.ts
-var BelticApiError = class extends Error {
-  constructor(status, code, message, details, requestId) {
-    super(message);
-    this.status = status;
-    this.code = code;
-    this.details = details;
-    this.requestId = requestId;
-    this.name = "BelticApiError";
-  }
-  /** 5xx and network failures are retried by the transport; 4xx are not. */
-  get retryable() {
-    return this.status === 0 || this.status >= 500 || this.status === 429;
-  }
-};
-var ApiClient = class {
-  baseUrl;
-  fetchImpl;
-  timeoutMs;
-  headers;
-  constructor(opts) {
-    this.baseUrl = opts.baseUrl.replace(/\/+$/, "");
-    this.fetchImpl = opts.fetch ?? globalThis.fetch.bind(globalThis);
-    this.timeoutMs = opts.timeoutMs ?? 1e4;
-    this.headers = {
-      authorization: `Bearer ${opts.apiKey}`,
-      "content-type": "application/json",
-      "user-agent": opts.userAgent ?? "@belticlabs/agent-risk-sdk"
-    };
-  }
-  post(path, body, headers = {}) {
-    return this.request("POST", path, JSON.stringify(body), headers);
-  }
-  get(path, query = {}) {
-    const qs = Object.entries(query).filter((e) => e[1] !== void 0).map(([k, v]) => `${encodeURIComponent(k)}=${encodeURIComponent(v)}`).join("&");
-    return this.request("GET", qs ? `${path}?${qs}` : path, void 0, {});
-  }
-  async request(method, path, body, extra) {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), this.timeoutMs);
-    let res;
-    try {
-      res = await this.fetchImpl(`${this.baseUrl}${path}`, {
-        method,
-        headers: { ...this.headers, ...extra },
-        ...body !== void 0 ? { body } : {},
-        signal: controller.signal
-      });
-    } catch (err) {
-      throw new BelticApiError(
-        0,
-        "NETWORK",
-        `request to ${path} failed: ${err.message}`
-      );
-    } finally {
-      clearTimeout(timer);
-    }
-    const text = await res.text();
-    let json = null;
-    try {
-      json = text ? JSON.parse(text) : null;
-    } catch {
-      json = null;
-    }
-    if (!res.ok) {
-      const e = json?.error;
-      throw new BelticApiError(
-        res.status,
-        e?.code ?? `HTTP_${res.status}`,
-        e?.message ?? res.statusText,
-        e?.details,
-        e?.request_id
-      );
-    }
-    return json;
-  }
-};
-
-// src/core/correlation.ts
-var MemoryCorrelationStore = class {
-  constructor(defaultTtlMs = 60 * 60 * 1e3) {
-    this.defaultTtlMs = defaultTtlMs;
-  }
-  entries = /* @__PURE__ */ new Map();
-  async bind(key, sessionId, ttlMs = this.defaultTtlMs) {
-    this.entries.set(key, { sessionId, expiresAt: Date.now() + ttlMs });
-  }
-  async resolve(key) {
-    const e = this.entries.get(key);
-    if (!e) return null;
-    if (e.expiresAt < Date.now()) {
-      this.entries.delete(key);
-      return null;
-    }
-    return e.sessionId;
-  }
-};
 
 // src/core/identity.ts
-import { mkdirSync, readFileSync, writeFileSync } from "fs";
-import { dirname } from "path";
 function identityFromSeed(seed, credential) {
   const signer = memorySigner(seed);
   const did = didKeyFromEd25519(signer.publicKey);
   return { did, signer: { ...signer, keyId: did }, ...credential ? { credential } : {} };
 }
-function ephemeralIdentity(credential) {
-  return identityFromSeed(memorySigner().seed, credential);
-}
-function fileIdentity(path, credential) {
-  let seed;
-  try {
-    seed = fromHex(JSON.parse(readFileSync(path, "utf8")).seed);
-  } catch {
-    seed = memorySigner().seed;
-    mkdirSync(dirname(path), { recursive: true });
-    writeFileSync(path, `${JSON.stringify({ seed: toHex(seed) })}
-`, { mode: 384 });
-  }
-  return identityFromSeed(seed, credential);
+
+// src/core/payment-moment.ts
+function summaryOf(m) {
+  return {
+    protocol: m.protocol,
+    payee: m.payee,
+    amount: { value: m.amount.value, currency: m.amount.currency },
+    ...m.payer ? { payer: m.payer } : {}
+  };
 }
 
 // src/core/decision.ts
@@ -373,238 +266,65 @@ var Run = class _Run {
   }
 };
 
-// src/core/transport.ts
-var DEFAULT_TRANSPORT = {
-  maxBatch: 50,
-  flushMs: 1e3,
-  maxBuffered: 5e3,
-  backoff: { baseMs: 200, maxMs: 3e4, maxAttempts: Number.POSITIVE_INFINITY }
-};
-var ChainRejectedError = class extends Error {
-  constructor(sessionId, source, result) {
-    super(
-      `chain ${sessionId}:${source} halted at seq ${result.seq}: ${result.status}${result.code ? ` ${result.code}` : ""}`
-    );
-    this.sessionId = sessionId;
-    this.source = source;
-    this.result = result;
-    this.name = "ChainRejectedError";
-  }
-};
-var TransportClosedError = class extends Error {
-  constructor() {
-    super("transport is closed");
-    this.name = "TransportClosedError";
-  }
-};
-var Transport = class {
-  constructor(api, opts = {}) {
-    this.api = api;
-    this.opts = {
-      ...DEFAULT_TRANSPORT,
-      ...opts,
-      backoff: { ...DEFAULT_TRANSPORT.backoff, ...opts.backoff }
-    };
-  }
-  opts;
-  chains = /* @__PURE__ */ new Map();
-  buffered = 0;
-  timer = null;
-  closed = false;
-  inFlightCount = 0;
-  drainWaiters = [];
-  get size() {
-    return this.buffered;
-  }
-  hasRoom() {
-    return !this.closed && this.buffered < this.opts.maxBuffered;
-  }
-  haltedError(sessionId, source) {
-    return this.chains.get(`${sessionId}:${source}`)?.halted ?? null;
-  }
-  /** Callers check `hasRoom()` first and assign `seq` only then (GAP-38). */
-  enqueue(ev) {
-    if (this.closed) throw new TransportClosedError();
-    const key = `${ev.sessionId}:${ev.source}`;
-    let chain = this.chains.get(key);
-    if (!chain) {
-      chain = { key, pending: [], inFlight: null, attempts: 0, halted: null };
-      this.chains.set(key, chain);
-    }
-    if (chain.halted) throw chain.halted;
-    if (!this.hasRoom()) throw new Error("transport buffer is full");
-    chain.pending.push(ev);
-    this.buffered++;
-    if (chain.pending.length >= this.opts.maxBatch) void this.flushChain(chain);
-    else this.schedule();
-  }
-  /** Send everything pending and wait for every in-flight batch to settle (ack or halt). */
-  async flush() {
-    this.unschedule();
-    for (const chain of this.chains.values()) void this.flushChain(chain);
-    await this.drained();
-  }
-  async close() {
-    await this.flush();
-    this.closed = true;
-  }
-  schedule() {
-    if (this.timer) return;
-    const st = this.opts.setTimeout ?? globalThis.setTimeout;
-    this.timer = st(() => {
-      this.timer = null;
-      for (const chain of this.chains.values()) void this.flushChain(chain);
-    }, this.opts.flushMs);
-    this.timer.unref?.();
-  }
-  unschedule() {
-    if (!this.timer) return;
-    (this.opts.clearTimeout ?? globalThis.clearTimeout)(this.timer);
-    this.timer = null;
-  }
-  drained() {
-    if (this.inFlightCount === 0 && [...this.chains.values()].every((c) => c.pending.length === 0 || c.halted)) {
-      return Promise.resolve();
-    }
-    return new Promise((resolve) => this.drainWaiters.push(resolve));
-  }
-  settleWaiters() {
-    if (this.inFlightCount > 0) return;
-    if (![...this.chains.values()].every((c) => c.pending.length === 0 || c.halted)) return;
-    const waiters = this.drainWaiters;
-    this.drainWaiters = [];
-    for (const w of waiters) w();
-  }
-  async flushChain(chain) {
-    if (chain.inFlight || chain.halted || chain.pending.length === 0) {
-      this.settleWaiters();
-      return;
-    }
-    const batch = chain.pending.splice(0, this.opts.maxBatch);
-    chain.inFlight = batch;
-    this.inFlightCount++;
-    try {
-      const ack = await this.send(chain, batch);
-      this.buffered -= batch.length;
-      this.opts.onAck?.(ack);
-      const bad = ack.results.find((r) => r.status === "fork" || r.status === "rejected");
-      if (bad) {
-        const first = batch[0];
-        chain.halted = new ChainRejectedError(first.sessionId, first.source, bad);
-        this.buffered -= chain.pending.length;
-        chain.pending = [];
-        this.opts.onChainHalted?.(chain.halted);
-      }
-    } catch (err) {
-      this.buffered -= batch.length + chain.pending.length;
-      chain.pending = [];
-      const first = batch[0];
-      chain.halted = new ChainRejectedError(first.sessionId, first.source, {
-        index: 0,
-        sessionId: first.sessionId,
-        source: first.source,
-        seq: first.seq,
-        status: "rejected",
-        code: "DELIVERY_FAILED"
-      });
-      this.opts.onError?.(err);
-      this.opts.onChainHalted?.(chain.halted);
-    } finally {
-      chain.inFlight = null;
-      this.inFlightCount--;
-    }
-    if (chain.pending.length > 0 && !chain.halted) void this.flushChain(chain);
-    else this.settleWaiters();
-  }
-  async send(chain, batch) {
-    const { baseMs, maxMs, maxAttempts } = this.opts.backoff;
-    for (let attempt = 0; ; attempt++) {
-      try {
-        const ack = await this.api.post("/v1/evidence", batch);
-        chain.attempts = 0;
-        return ack;
-      } catch (err) {
-        const retryable = err instanceof BelticApiError ? err.retryable : true;
-        if (!retryable || attempt + 1 >= maxAttempts) throw err;
-        this.opts.onError?.(err);
-        const delay = Math.min(maxMs, baseMs * 2 ** attempt) * (0.5 + Math.random() / 2);
-        await new Promise((r) => (this.opts.setTimeout ?? globalThis.setTimeout)(r, delay));
-      }
-    }
-  }
-};
-
 // src/client.ts
-var SDK_VERSION = "0.3.0";
+var SDK_VERSION = "0.5.0";
 var ENV_REQUIRED = ["BELTIC_API_KEY", "BELTIC_BASE_URL", "BELTIC_AGENT_SEED"];
 var ENV_CREDENTIAL = "BELTIC_AGENT_CREDENTIAL";
 var Beltic = class _Beltic {
-  api;
   transport;
   sessions;
   identity;
-  correlation;
   onReview;
   failOpen;
-  /** `false` for a disabled client (GAP-78): nothing is posted, `run`/`sessions.open` answer without a session. */
-  enabled;
+  api;
   onError;
   runs = /* @__PURE__ */ new Map();
   /**
    * The client the environment describes: `BELTIC_API_KEY`,
    * `BELTIC_BASE_URL`, `BELTIC_AGENT_SEED` (64 hex) and optionally
-   * `BELTIC_AGENT_CREDENTIAL`, fail-open by default. None set → a disabled
-   * client; some set → a configuration error, thrown (GAP-78).
+   * `BELTIC_AGENT_CREDENTIAL`. Any of the three missing is a configuration
+   * error, thrown (GAP-78).
    */
   static fromEnv(env = _Beltic.processEnv(), opts = {}) {
     const missing = ENV_REQUIRED.filter((name) => !env[name]);
-    if (missing.length === ENV_REQUIRED.length) return _Beltic.disabled(opts);
     if (missing.length > 0)
-      throw new Error(
-        `Beltic.fromEnv: ${missing.join(", ")} missing \u2014 set all of ${ENV_REQUIRED.join(", ")}, or none to disable`
+      throw new BelticConfigError(
+        `${missing.join(", ")} missing \u2014 fromEnv needs ${ENV_REQUIRED.join(", ")}`
       );
     return new _Beltic({
-      failOpen: true,
       ...opts,
       apiKey: env.BELTIC_API_KEY,
       baseUrl: env.BELTIC_BASE_URL,
       identity: identityFromSeed(fromHex(env.BELTIC_AGENT_SEED), env[ENV_CREDENTIAL])
     });
   }
-  /** A client that records nothing and never throws into the work: the null object for "no evidence stream" (GAP-78). */
-  static disabled(opts = {}) {
-    return new _Beltic({
-      ...opts,
-      apiKey: "",
-      baseUrl: "http://beltic.disabled.invalid",
-      failOpen: true,
-      enabled: false
-    });
-  }
   constructor(opts) {
-    this.enabled = opts.enabled ?? true;
+    if (!opts.apiKey) throw new BelticConfigError("apiKey is required");
+    if (!URL.canParse(opts.baseUrl))
+      throw new BelticConfigError(`baseUrl is not a URL: ${JSON.stringify(opts.baseUrl)}`);
     this.failOpen = opts.failOpen ?? false;
     this.onError = opts.onError ?? ((err) => console.error("[beltic]", err));
-    this.api = new ApiClient({ ...opts, userAgent: `@belticlabs/agent-risk-sdk/${SDK_VERSION}` });
+    this.api = new ApiClient({
+      baseUrl: opts.baseUrl,
+      apiKey: opts.apiKey,
+      fetch: opts.fetch,
+      userAgent: `@belticlabs/agent-risk-sdk/${SDK_VERSION}`
+    });
     this.transport = new Transport(this.api, {
+      ...opts.transport,
       onError: this.onError,
-      onChainHalted: this.onError,
-      ...opts.transport
+      onChainHalted: this.onError
     });
     this.sessions = new Sessions({
       api: this.api,
       transport: this.transport,
       sdkVersion: SDK_VERSION,
       identity: opts.identity,
-      redact: opts.redact,
-      now: opts.now,
       failOpen: this.failOpen,
       onError: this.onError,
-      openRetryMs: opts.openRetryMs,
-      enabled: this.enabled
+      openRetryMs: opts.openRetryMs
     });
     this.identity = opts.identity;
-    this.correlation = opts.correlation ?? new MemoryCorrelationStore();
     this.onReview = opts.onReview ?? "abort";
   }
   /**
@@ -613,15 +333,14 @@ var Beltic = class _Beltic {
    * is flushed first so the platform judges what the caller already saw
    * (GAP-16). A recorded moment is accepted as is: only its comparable core
    * (payee, amount, payer) is sent. `null` only under `failOpen`, when the
-   * platform could not be asked.
+   * platform could not be reached.
    */
   async evaluate(sessionId, payment) {
-    if (!this.enabled) return null;
     const input = { sessionId, payment: summaryOf(payment) };
-    if (!this.failOpen) return this.decide(input);
     try {
       return await this.decide(input);
     } catch (err) {
+      if (!this.failOpen || !Transport.outage(err)) throw err;
       this.onError(err);
       return null;
     }
@@ -663,30 +382,16 @@ var Beltic = class _Beltic {
     return globalThis.process?.env ?? {};
   }
 };
-function createBeltic(opts) {
-  return new Beltic(opts);
-}
 export {
   ApiClient,
   Beltic,
   BelticApiError,
-  BelticDisabledError,
+  BelticConfigError,
   ChainRejectedError,
-  DEFAULT_OPEN_RETRY_MS,
-  DEFAULT_TRANSPORT,
   Decision,
-  MemoryCorrelationStore,
   Run,
   SDK_VERSION,
   Session,
-  Sessions,
   Transport,
-  TransportClosedError,
-  createBeltic,
-  ephemeralIdentity,
-  fileIdentity,
-  identityFromSeed,
-  presentedFrom,
-  recordCall,
-  summaryOf
+  identityFromSeed
 };

package/dist/protocol/index.d.ts

@@ -1,5 +1,5 @@
-import { b as JsonValue, E as EvidenceSourceAll } from '../verdict-6vCyoAHE.js';
-export { A as ALL_SOURCES, c as ANOMALY_TYPES, d as Amount, e as AmountSchema, f as AnchorEntry, g as AnchorEntrySchema, h as AnchorsOutput, i as AnchorsOutputSchema, j as ApiError, k as ApiErrorSchema, C as ChainHead, l as ChainHeadSchema, m as CreatePolicyInput, n as CreatePolicyInputSchema, o as CreatePolicyOutput, p as CreatePolicyOutputSchema, q as CreateSessionInput, r as CreateSessionInputSchema, s as CreateSessionOutput, t as CreateSessionOutputSchema, D as Decision, u as DecisionSchema, v as DeclaredIntent, w as DeclaredIntentSchema, x as DigestedEnvelope, y as EvaluateInput, z as EvaluateInputSchema, B as EvaluateOutput, F as EvaluateOutputSchema, G as EventResult, H as EventResultSchema, I as EventResultStatus, K as EventResultStatusSchema, L as EvidenceAck, M as EvidenceAckSchema, N as EvidenceBatchInput, O as EvidenceBatchInputSchema, Q as EvidenceEnvelope, R as EvidenceEvent, S as EvidenceEventSchema, T as EvidenceKind, U as EvidenceKindSchema, V as EvidenceSource, W as EvidenceSourceAllSchema, X as EvidenceSourceSchema, Y as GatewayDecisionPayload, Z as GatewayDecisionPayloadSchema, _ as Hex64, $ as Hex64Schema, a0 as IntentDeclaredPayload, a1 as IntentDeclaredPayloadSchema, J as JsonObject, a2 as JsonValueSchema, a3 as LlmCallEndPayload, a4 as LlmCallEndPayloadSchema, a5 as LlmCallStartPayload, a6 as LlmCallStartPayloadSchema, a7 as MAX_BATCH_EVENTS, a8 as OnReview, a9 as PAYMENT_ARTIFACTS, aa as PLATFORM_KINDS, ab as PayloadByKind, P as PaymentMomentPayload, ac as PaymentMomentPayloadSchema, a as PaymentSummary, ad as PaymentSummarySchema, ae as PlatformAnomalyPayload, af as PlatformAnomalyPayloadSchema, ag as PlatformEvidenceKind, ah as PlatformEvidenceKindSchema, ai as PlatformObservationPayload, aj as PlatformObservationPayloadSchema, ak as SESSION_CLOSE_REASONS, al as SOURCE_ORDER, am as SeqSchema, an as SessionClosePayload, ao as SessionClosePayloadSchema, ap as SessionIdSchema, aq as SessionOpenPayload, ar as SessionOpenPayloadSchema, as as Sig, at as SigSchema, au as TimestampSchema, av as ToolCallEndPayload, aw as ToolCallEndPayloadSchema, ax as ToolCallStartPayload, ay as ToolCallStartPayloadSchema, az as TransportGapPayload, aA as TransportGapPayloadSchema, aB as Verdict, aC as WIRE_KINDS, aD as WIRE_SOURCES, aE as WireEvidenceKind, aF as WireEvidenceKindSchema, aG as compareBySessionSource, aH as compareBySourceSeq, aI as isPlatformKind, aJ as isWireKind, aK as payloadSchemaFor } from '../verdict-6vCyoAHE.js';
+import { J as JsonValue, E as EvidenceSourceAll } from '../verdict-DMnbFuS5.js';
+export { A as ALL_SOURCES, a as ANOMALY_TYPES, b as Amount, c as AmountSchema, d as ApiError, e as ApiErrorSchema, C as ChainHead, f as ChainHeadSchema, g as CreatePolicyInput, h as CreatePolicyInputSchema, i as CreatePolicyOutput, j as CreatePolicyOutputSchema, k as CreateSessionInput, l as CreateSessionInputSchema, m as CreateSessionOutput, n as CreateSessionOutputSchema, D as Decision, o as DecisionSchema, p as DeclaredIntent, q as DeclaredIntentSchema, r as DigestedEnvelope, s as EvaluateInput, t as EvaluateInputSchema, u as EvaluateOutput, v as EvaluateOutputSchema, w as EventResult, x as EventResultSchema, y as EventResultStatus, z as EventResultStatusSchema, B as EvidenceAck, F as EvidenceAckSchema, G as EvidenceBatchInput, H as EvidenceBatchInputSchema, I as EvidenceEnvelope, K as EvidenceEvent, L as EvidenceEventSchema, M as EvidenceKind, N as EvidenceKindSchema, O as EvidenceSource, Q as EvidenceSourceAllSchema, R as EvidenceSourceSchema, S as GatewayDecisionPayload, T as GatewayDecisionPayloadSchema, U as Hex64, V as Hex64Schema, W as IntentDeclaredPayload, X as IntentDeclaredPayloadSchema, Y as JsonObject, Z as JsonValueSchema, _ as LlmCallEndPayload, $ as LlmCallEndPayloadSchema, a0 as LlmCallStartPayload, a1 as LlmCallStartPayloadSchema, a2 as MAX_BATCH_EVENTS, a3 as OnReview, a4 as PAYMENT_ARTIFACTS, a5 as PLATFORM_KINDS, a6 as PayloadByKind, P as PaymentMomentPayload, a7 as PaymentMomentPayloadSchema, a8 as PaymentSummary, a9 as PaymentSummarySchema, aa as PlatformAnomalyPayload, ab as PlatformAnomalyPayloadSchema, ac as PlatformEvidenceKind, ad as PlatformEvidenceKindSchema, ae as PlatformObservationPayload, af as PlatformObservationPayloadSchema, ag as SESSION_CLOSE_REASONS, ah as SOURCE_ORDER, ai as SeqSchema, aj as SessionClosePayload, ak as SessionClosePayloadSchema, al as SessionIdSchema, am as SessionOpenPayload, an as SessionOpenPayloadSchema, ao as Sig, ap as SigSchema, aq as TimestampSchema, ar as ToolCallEndPayload, as as ToolCallEndPayloadSchema, at as ToolCallStartPayload, au as ToolCallStartPayloadSchema, av as TransportGapPayload, aw as TransportGapPayloadSchema, ax as Verdict, ay as WIRE_KINDS, az as WIRE_SOURCES, aA as WireEvidenceKind, aB as WireEvidenceKindSchema, aC as compareBySessionSource, aD as compareBySourceSeq, aE as isPlatformKind, aF as isWireKind, aG as payloadSchemaFor } from '../verdict-DMnbFuS5.js';
 import { z } from 'zod';
 
 declare const PRIMITIVES: readonly ["THRESHOLD", "MEMBERSHIP", "MATCH", "PRESENCE", "FRESHNESS"];

package/dist/protocol/index.js

@@ -3,8 +3,6 @@ import {
   ANNOTATION_CODES,
   ANOMALY_TYPES,
   AmountSchema,
-  AnchorEntrySchema,
-  AnchorsOutputSchema,
   ApiErrorSchema,
   COLLECTOR_CODES,
   ChainHeadSchema,
@@ -73,14 +71,12 @@ import {
   parseSelectorRef,
   payloadSchemaFor,
   walkPath
-} from "../chunk-46QN2KEZ.js";
+} from "../chunk-4BUUPU3O.js";
 export {
   ALL_SOURCES,
   ANNOTATION_CODES,
   ANOMALY_TYPES,
   AmountSchema,
-  AnchorEntrySchema,
-  AnchorsOutputSchema,
   ApiErrorSchema,
   COLLECTOR_CODES,
   ChainHeadSchema,