@belticlabs/agent-risk-sdk 0.3.0 → 0.5.0

package/dist/x402/index.js

@@ -1,71 +1,54 @@
-import {
-  attachX402
-} from "../chunk-OKC6VMFH.js";
 import {
   Session,
   Sessions
-} from "../chunk-4MG6VNAU.js";
+} from "../chunk-JSE6JQJC.js";
 import {
   DECISION_EXTENSION,
-  DECISION_HEADER,
   SESSION_EXTENSION,
   SESSION_HEADER,
+  attachX402,
   decisionIdOf,
-  sessionIdOf
-} from "../chunk-FAQ442YH.js";
-import "../chunk-X3W2Z5GC.js";
-import "../chunk-46QN2KEZ.js";
-import {
   payerOf,
+  sessionIdOf,
   x402Currency,
   x402Moments,
   x402Summary
-} from "../chunk-LM4NIYE5.js";
+} from "../chunk-GM4KEEZB.js";
 import "../chunk-FQDHFTVR.js";
+import "../chunk-X3W2Z5GC.js";
 
 // src/x402/fetch.ts
 var BASE64 = /^[A-Za-z0-9+/]*={0,2}$/;
-var CHALLENGE_MEMORY = 32;
 function belticFetch(source, inner = globalThis.fetch) {
-  if (!source) return inner;
   const run = source instanceof Session ? null : source;
-  const challenges = /* @__PURE__ */ new Map();
   return async (input, init) => {
     const session = await Sessions.resolve(source);
     if (!session) return inner(input, init);
-    const url = urlOf(input);
     const headers = new Headers(
       init?.headers ?? (input instanceof Request ? input.headers : void 0)
     );
     headers.set(SESSION_HEADER, session.id);
     const signature = headers.get("PAYMENT-SIGNATURE");
-    const presented = signature ?? headers.get("X-PAYMENT");
-    const payload = presented ? decodeHeader(presented) : null;
+    const payload = signature ? decodeHeader(signature) : null;
     if (payload) {
-      const accepts = payload.accepted ?? answeredAccepts(challenges.get(url), payload);
-      const decision = run?.decisionFor(x402Moments.payload(payload, accepts));
+      const decision = run?.decisionFor(x402Moments.payload(payload));
       const decisionId = decision && !decision.absent ? decision.decisionId : null;
-      const bound = signature ? {
+      const bound = {
         ...payload,
         extensions: {
           ...payload.extensions,
           [SESSION_EXTENSION]: session.id,
           ...decisionId ? { [DECISION_EXTENSION]: decisionId } : {}
         }
-      } : payload;
-      if (signature) headers.set("PAYMENT-SIGNATURE", encodeHeader(bound));
-      else if (decisionId) headers.set(DECISION_HEADER, decisionId);
-      await session.emit("payment.presented", x402Moments.payload(bound, accepts));
+      };
+      headers.set("PAYMENT-SIGNATURE", encodeHeader(bound));
+      await session.emit("payment.presented", x402Moments.payload(bound));
       await session.flush();
     }
     const res = await inner(input, { ...init, headers });
     if (res.status !== 402) return res;
-    const required = await challengeOf(res);
-    if (required) {
-      challenges.set(url, required);
-      if (challenges.size > CHALLENGE_MEMORY) challenges.delete(challenges.keys().next().value);
-      await session.emit("payment.requested", x402Moments.required(required));
-    }
+    const required = challengeOf(res);
+    if (required) await session.emit("payment.requested", x402Moments.required(required));
     return res;
   };
 }
@@ -81,35 +64,9 @@ function decodeHeader(value) {
 function encodeHeader(value) {
   return Buffer.from(JSON.stringify(value), "utf8").toString("base64");
 }
-function urlOf(input) {
-  return typeof input === "string" ? input : input instanceof URL ? input.toString() : input.url;
-}
-async function challengeOf(res) {
+function challengeOf(res) {
   const header = res.headers.get("PAYMENT-REQUIRED");
-  if (header) return decodeHeader(header);
-  if (!/json/i.test(res.headers.get("content-type") ?? "")) return null;
-  try {
-    const body = await res.clone().json();
-    return Array.isArray(body?.accepts) ? body : null;
-  } catch {
-    return null;
-  }
-}
-function answeredAccepts(required, payload) {
-  const auth = payload.payload?.authorization;
-  const payTo = typeof auth?.to === "string" ? auth.to : void 0;
-  const amount = typeof auth?.value === "string" ? auth.value : void 0;
-  const options = required?.accepts ?? [];
-  const answered = options.find(
-    (a) => a.payTo?.toLowerCase() === payTo?.toLowerCase() && (a.amount ?? a.maxAmountRequired) === amount
-  ) ?? options[0];
-  if (answered) return answered;
-  if (!payTo && !amount) return void 0;
-  return {
-    ...payTo ? { payTo } : {},
-    ...amount ? { amount } : {},
-    ...payload.network ? { network: payload.network } : {}
-  };
+  return header ? decodeHeader(header) : null;
 }
 
 // src/x402/intent.ts
@@ -126,7 +83,6 @@ function x402Intent(input) {
 }
 export {
   DECISION_EXTENSION,
-  DECISION_HEADER,
   SESSION_EXTENSION,
   SESSION_HEADER,
   attachX402,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@belticlabs/agent-risk-sdk",
-  "version": "0.3.0",
-  "description": "The Beltic Agent Risk SDK — one client, two halves: instrument the buyer agent (AI SDK, x402 fetch, MCP client) and guard the seller boundary (x402, MCP server, evaluate).",
+  "version": "0.5.0",
+  "description": "The Beltic Agent Risk SDK — one client, two halves: instrument the buyer agent (AI SDK, x402 fetch) and guard the seller boundary (x402 over hono, evaluate).",
   "license": "UNLICENSED",
   "repository": {
     "type": "git",
@@ -32,18 +32,6 @@
       "types": "./dist/x402/hono.d.ts",
       "default": "./dist/x402/hono.js"
     },
-    "./express": {
-      "types": "./dist/x402/express.d.ts",
-      "default": "./dist/x402/express.js"
-    },
-    "./mcp": {
-      "types": "./dist/mcp/index.d.ts",
-      "default": "./dist/mcp/index.js"
-    },
-    "./platform-adapter": {
-      "types": "./dist/seller/anti-fraud-gateway.d.ts",
-      "default": "./dist/seller/anti-fraud-gateway.js"
-    },
     "./package.json": "./package.json"
   },
   "files": [
@@ -57,45 +45,29 @@
     "zod": "^4.6.5"
   },
   "peerDependencies": {
-    "@modelcontextprotocol/sdk": "^1.30.0",
     "@x402/core": "^2.25.0",
-    "@x402/express": "^2.25.0",
     "@x402/hono": "^2.25.0",
     "ai": "^7.0.0",
-    "express": "^5.0.0",
     "hono": "^4.0.0"
   },
   "peerDependenciesMeta": {
-    "@modelcontextprotocol/sdk": {
-      "optional": true
-    },
     "@x402/core": {
       "optional": true
     },
-    "@x402/express": {
-      "optional": true
-    },
     "@x402/hono": {
       "optional": true
     },
     "ai": {
       "optional": true
     },
-    "express": {
-      "optional": true
-    },
     "hono": {
       "optional": true
     }
   },
   "devDependencies": {
-    "@modelcontextprotocol/sdk": "^1.30.0",
-    "@types/express": "^5.0.6",
     "@x402/core": "^2.25.0",
-    "@x402/express": "^2.25.0",
     "@x402/hono": "^2.25.0",
     "ai": "^7.0.100",
-    "express": "^5.2.1",
     "hono": "^4.13.7",
     "tsup": "8.5.1",
     "typescript": "5.9.3",

package/dist/chunk-4MG6VNAU.js

@@ -1,276 +0,0 @@
-import {
-  Chain
-} from "./chunk-X3W2Z5GC.js";
-
-// src/core/disabled-error.ts
-var BelticDisabledError = class extends Error {
-  code = "SDK_DISABLED";
-  constructor(entry) {
-    super(`${entry} needs a configured client: this Beltic is disabled (no BELTIC_* configured)`);
-    this.name = "BelticDisabledError";
-  }
-};
-
-// src/core/record.ts
-function errorOf(err) {
-  const e = err;
-  return { name: String(e?.name ?? "Error"), message: String(e?.message ?? err) };
-}
-function openCall(session, kind, callId, start) {
-  const started = Date.now();
-  const opened = session.emit(`${kind}.start`, { callId, ...start });
-  const close = async (outcome) => {
-    await opened;
-    return session.emit(
-      `${kind}.end`,
-      { callId, ...outcome, durationMs: Date.now() - started }
-    );
-  };
-  return {
-    callId,
-    opened,
-    end: (outcome = {}) => close(outcome),
-    fail: (error, outcome = {}) => close({ error: errorOf(error), ...outcome })
-  };
-}
-async function recordCall(session, kind, callId, start, run, end = () => ({})) {
-  const span = openCall(session, kind, callId, start);
-  await span.opened;
-  try {
-    const result = await run();
-    await span.end(await end(result));
-    return result;
-  } catch (err) {
-    await span.fail(err);
-    throw err;
-  }
-}
-
-// src/core/session.ts
-var Session = class {
-  constructor(deps, id, source, expiresAt, born) {
-    this.deps = deps;
-    this.id = id;
-    this.source = source;
-    this.expiresAt = expiresAt;
-    this.born = born;
-    this.chain = Chain.genesis(id, source);
-    this.now = deps.now ?? (() => /* @__PURE__ */ new Date());
-  }
-  chain;
-  building = Promise.resolve();
-  dropped = 0;
-  droppedFirstTs = null;
-  droppedLastTs = null;
-  closed = false;
-  now;
-  get head() {
-    return this.chain.head;
-  }
-  get droppedCount() {
-    return this.dropped;
-  }
-  get isClosed() {
-    return this.closed;
-  }
-  /**
-   * Resolves once the event is sequenced and buffered — not once it is
-   * acknowledged. `false` when the event was dropped, or (fail-open) when
-   * the chain can no longer take it.
-   */
-  async emit(kind, payload) {
-    if (!this.deps.failOpen) return this.chainEvent(kind, payload);
-    try {
-      return await this.chainEvent(kind, payload);
-    } catch (err) {
-      this.deps.onError?.(err);
-      return false;
-    }
-  }
-  /** The tool call whose `execute` the host runs itself; see `ToolCallSpan`. */
-  toolCall(call) {
-    const { callId, ...start } = call;
-    return openCall(this, "tool_call", callId, { transport: "local", ...start });
-  }
-  async chainEvent(kind, payload) {
-    const halted = this.deps.transport.haltedError(this.id, this.source);
-    if (halted) throw halted;
-    const ts = this.now().toISOString();
-    if (!this.deps.transport.hasRoom()) {
-      this.dropped++;
-      this.droppedFirstTs ??= ts;
-      this.droppedLastTs = ts;
-      return false;
-    }
-    if (this.dropped > 0) {
-      this.deps.transport.enqueue(
-        await this.next(
-          "transport.gap",
-          { dropped: this.dropped, firstTs: this.droppedFirstTs, lastTs: this.droppedLastTs },
-          ts
-        )
-      );
-      this.dropped = 0;
-      this.droppedFirstTs = this.droppedLastTs = null;
-    }
-    const body = payload;
-    this.deps.transport.enqueue(
-      await this.next(kind, this.deps.redact ? this.deps.redact(kind, body) : body, ts)
-    );
-    return true;
-  }
-  async close(reason = "completed", extra = {}) {
-    if (this.closed) return;
-    this.closed = true;
-    await this.emit("session.close", { reason, ...extra });
-    await this.flush();
-    this.deps.onClosed?.(this);
-  }
-  /** Read-your-writes: the platform must hold the evidence before anyone judges it (GAP-16/66). */
-  flush() {
-    return this.deps.transport.flush();
-  }
-  /** Serialized: two concurrent emits get consecutive seqs, never the same one. */
-  next(kind, payload, ts) {
-    const run = this.building.then(async () => {
-      const built = await this.chain.append({ ts, kind, payload }, this.deps.signer);
-      this.chain = built.chain;
-      return built.event;
-    });
-    this.building = run.catch(() => void 0);
-    return run;
-  }
-};
-var DEFAULT_OPEN_RETRY_MS = 6e4;
-var Sessions = class {
-  constructor(deps) {
-    this.deps = deps;
-  }
-  /**
-   * One session object per (session, source) per process: a chain's head
-   * lives in it, so two objects for the same chain would both start at
-   * seq 0 and fork it. Closed sessions are forgotten; a process restart
-   * mid-session still loses the head (GAP-67).
-   */
-  attached = /* @__PURE__ */ new Map();
-  /** Buyer sessions by the host's own key (GAP-71). */
-  opened = /* @__PURE__ */ new Map();
-  retryAt = 0;
-  /** The session behind a source: itself, or the one the run opens (null when there is none). */
-  static resolve(source) {
-    if (!source) return Promise.resolve(null);
-    return source instanceof Session ? Promise.resolve(source) : source.session();
-  }
-  /**
-   * Buyer half: the evidence session for a key of the host's own (its
-   * session, run or conversation id), opened on first use and reused
-   * after. A halted chain is reopened as a fresh session that continues
-   * the same key; a closed key is forgotten. When the platform refuses to
-   * open one, a fail-open client resolves null — the host runs without
-   * evidence — until `openRetryMs` has passed (GAP-71); otherwise the
-   * refusal is thrown and the next call tries again. The identity is
-   * required either way: that is configuration.
-   */
-  open(key, input = {}) {
-    if (this.deps.enabled === false) return Promise.resolve(null);
-    const prior = this.opened.get(key) ?? Promise.resolve(null);
-    const next = prior.catch(() => null).then(
-      (session) => session && !session.isClosed && !this.deps.transport.haltedError(session.id, session.source) ? session : this.openFresh(input, () => this.forget(key, next))
-    );
-    this.opened.set(key, next);
-    next.catch(() => this.forget(key, next));
-    return next;
-  }
-  forget(key, entry) {
-    if (this.opened.get(key) === entry) this.opened.delete(key);
-  }
-  async openFresh(input, onClosed) {
-    this.identityFor("open");
-    const create = async () => this.create(typeof input === "function" ? await input() : input, onClosed);
-    if (!this.deps.failOpen) return create();
-    if (Date.now() < this.retryAt) return null;
-    try {
-      const session = await create();
-      this.retryAt = 0;
-      return session;
-    } catch (err) {
-      this.retryAt = Date.now() + (this.deps.openRetryMs ?? DEFAULT_OPEN_RETRY_MS);
-      this.deps.onError?.(err);
-      return null;
-    }
-  }
-  /** Buyer half: create an AGENT_TRACE session bound to the agent identity, then announce it on the chain. */
-  start(input = {}) {
-    if (this.deps.enabled === false)
-      return Promise.reject(new BelticDisabledError("sessions.start"));
-    return this.create(input);
-  }
-  identityFor(entry) {
-    const identity = this.deps.identity;
-    if (!identity)
-      throw new Error(`sessions.${entry} needs an agent identity (createBeltic({ identity }))`);
-    return identity;
-  }
-  async create(input, onClosed) {
-    const identity = this.identityFor("start");
-    const body = {
-      source: "AGENT_TRACE",
-      agent: { did: identity.did, credential: identity.credential ?? identity.did },
-      ...input.intent ? { intent: input.intent } : {}
-    };
-    const out = await this.deps.api.post("/v1/sessions", body);
-    const session = this.attach(out.sessionId, "AGENT_TRACE", out.expiresAt, "buyer", onClosed);
-    await session.emit("session.open", {
-      runtime: {
-        sdk: "@belticlabs/agent-risk-sdk",
-        version: this.deps.sdkVersion,
-        ...input.runtime
-      },
-      ...input.attestations ? { attestations: input.attestations } : {}
-    });
-    if (input.intent) await session.emit("intent.declared", input.intent);
-    return session;
-  }
-  /** Seller half: emit INTERNAL_NETWORK evidence into a session the buyer bound, or open a seller-born one. */
-  async ensure(sessionId) {
-    if (this.deps.enabled === false) throw new BelticDisabledError("sessions.ensure");
-    if (sessionId) return this.attach(sessionId, "INTERNAL_NETWORK", null, "buyer");
-    const out = await this.deps.api.post("/v1/sessions", {
-      source: "INTERNAL_NETWORK"
-    });
-    return this.attach(out.sessionId, "INTERNAL_NETWORK", out.expiresAt, "seller");
-  }
-  attach(id, source, expiresAt, born, onClosed) {
-    const key = `${id}:${source}`;
-    const existing = this.attached.get(key);
-    if (existing) return existing;
-    const session = new Session(
-      {
-        transport: this.deps.transport,
-        signer: source === "AGENT_TRACE" ? this.deps.identity?.signer : void 0,
-        redact: this.deps.redact,
-        now: this.deps.now,
-        failOpen: this.deps.failOpen,
-        onError: this.deps.onError,
-        onClosed: () => {
-          this.attached.delete(key);
-          onClosed?.();
-        }
-      },
-      id,
-      source,
-      expiresAt,
-      born
-    );
-    this.attached.set(key, session);
-    return session;
-  }
-};
-
-export {
-  BelticDisabledError,
-  recordCall,
-  Session,
-  DEFAULT_OPEN_RETRY_MS,
-  Sessions
-};

package/dist/chunk-7G5EHNVW.js

@@ -1,17 +0,0 @@
-// src/core/payment-moment.ts
-function summaryOf(m) {
-  return {
-    protocol: m.protocol,
-    payee: m.payee,
-    amount: { value: m.amount.value, currency: m.amount.currency },
-    ...m.payer ? { payer: m.payer } : {}
-  };
-}
-function presentedFrom(summary, raw) {
-  return { ...summary, artifact: "payment-signature", raw };
-}
-
-export {
-  summaryOf,
-  presentedFrom
-};

package/dist/chunk-FAQ442YH.js

@@ -1,24 +0,0 @@
-// src/x402/binding.ts
-var SESSION_EXTENSION = "beltic.sessionId";
-var SESSION_HEADER = "Beltic-Session-Id";
-var DECISION_EXTENSION = "beltic.decisionId";
-var DECISION_HEADER = "Beltic-Decision-Id";
-function sessionIdOf(extensions) {
-  return stringAt(extensions, SESSION_EXTENSION);
-}
-function decisionIdOf(extensions) {
-  return stringAt(extensions, DECISION_EXTENSION);
-}
-function stringAt(extensions, key) {
-  const v = extensions?.[key];
-  return typeof v === "string" && v.length > 0 ? v : null;
-}
-
-export {
-  SESSION_EXTENSION,
-  SESSION_HEADER,
-  DECISION_EXTENSION,
-  DECISION_HEADER,
-  sessionIdOf,
-  decisionIdOf
-};

package/dist/chunk-LM4NIYE5.js

@@ -1,92 +0,0 @@
-import {
-  toJsonObject
-} from "./chunk-FQDHFTVR.js";
-
-// src/x402/moments.ts
-function x402Currency(network, asset) {
-  return `${network}/${asset}`;
-}
-function x402Summary(accepts, opts = {}) {
-  const payer = opts.payer?.toLowerCase();
-  return {
-    protocol: "x402",
-    payee: accepts?.payTo ?? "unknown",
-    amount: {
-      value: accepts?.amount ?? accepts?.maxAmountRequired ?? "0",
-      currency: accepts ? x402Currency(accepts.network ?? "unknown", accepts.asset ?? "unknown") : "unknown"
-    },
-    ...payer ? { payer } : {}
-  };
-}
-function fromAccepts(a, artifact, raw, payer) {
-  return { ...x402Summary(a, { payer }), artifact, raw };
-}
-function payerOf(payload) {
-  const p = payload.payload ?? {};
-  const auth = p.authorization;
-  const candidates = [
-    auth?.from,
-    p.from,
-    p.payer,
-    p.signer,
-    p.permit?.owner
-  ];
-  const hit = candidates.find((c) => typeof c === "string" && c.length > 0);
-  return typeof hit === "string" ? hit.toLowerCase() : void 0;
-}
-var x402Moments = {
-  /** The 402 challenge as the buyer saw it, v2 header or v1 body. */
-  required(required) {
-    return fromAccepts(required.accepts?.[0], "http-402", toJsonObject(required));
-  },
-  /** The requirements the seller's resource server resolved for a request. */
-  requirements(req) {
-    return fromAccepts(req, "http-402", toJsonObject(req));
-  },
-  /** A route's static `accepts` config, before any payment header exists. */
-  route(route, raw) {
-    const accepts = route ?? {};
-    const extra = accepts.extra;
-    return fromAccepts(
-      {
-        payTo: typeof accepts.payTo === "string" ? accepts.payTo : "dynamic",
-        amount: priceValue(accepts.price),
-        network: accepts.network,
-        asset: extra?.asset ?? "route"
-      },
-      "http-402",
-      raw
-    );
-  },
-  /** An in-band ask (MRTR `input_required` or a `_meta` envelope) carrying an x402-style `accepts`. */
-  ask(first, raw) {
-    return fromAccepts(first, "mrtr-input-required", raw);
-  },
-  /**
-   * The signed payment the buyer presented. A v2 payload carries the
-   * requirement it accepted; a v1 payload does not, so the caller passes
-   * the `accepts` entry it answered.
-   */
-  payload(payload, accepts) {
-    return fromAccepts(
-      accepts ?? payload.accepted,
-      "payment-signature",
-      toJsonObject(payload),
-      payerOf(payload)
-    );
-  }
-};
-function priceValue(price) {
-  if (typeof price === "string") return price.replace(/[^0-9.]/g, "") || "0";
-  if (typeof price === "number") return String(price);
-  if (price && typeof price === "object" && typeof price.amount === "string")
-    return price.amount;
-  return "0";
-}
-
-export {
-  x402Currency,
-  x402Summary,
-  payerOf,
-  x402Moments
-};

package/dist/chunk-NJVO2WIV.js

@@ -1,17 +0,0 @@
-import {
-  attachX402
-} from "./chunk-OKC6VMFH.js";
-
-// src/x402/middleware.ts
-import {
-  x402HTTPResourceServer
-} from "@x402/core/server";
-function guardedPaymentMiddleware(fromHTTPServer, beltic, routes, server, opts = {}) {
-  const http = new x402HTTPResourceServer(server, routes);
-  attachX402(beltic, server, http, opts);
-  return fromHTTPServer(http, opts.paywall);
-}
-
-export {
-  guardedPaymentMiddleware
-};