@belticlabs/agent-risk-sdk 0.3.0 → 0.5.0

package/dist/chunk-OKC6VMFH.js

@@ -1,84 +0,0 @@
-import {
-  SESSION_HEADER,
-  decisionIdOf,
-  sessionIdOf
-} from "./chunk-FAQ442YH.js";
-import {
-  payloadDigest
-} from "./chunk-X3W2Z5GC.js";
-import {
-  x402Moments
-} from "./chunk-LM4NIYE5.js";
-
-// src/x402/adapter.ts
-function attachX402(beltic, server, http, opts = {}) {
-  const inFlight = /* @__PURE__ */ new Map();
-  const resolveSession = async (bound, ctx) => {
-    const key = opts.correlate?.(ctx) ?? null;
-    return bound ?? (key ? await beltic.correlation.resolve(key) : null);
-  };
-  http?.onProtectedRequest(async (ctx, route) => {
-    if (ctx.paymentHeader) return;
-    const bound = ctx.adapter.getHeader(SESSION_HEADER) ?? ctx.adapter.getHeader(SESSION_HEADER.toLowerCase());
-    const sessionId = await resolveSession(bound ?? null, {
-      path: ctx.path,
-      method: ctx.method,
-      header: (n) => ctx.adapter.getHeader(n)
-    });
-    if (!sessionId) return;
-    const session = await beltic.sessions.ensure(sessionId);
-    const accepts = Array.isArray(route.accepts) ? route.accepts[0] : route.accepts;
-    await session.emit(
-      "payment.requested",
-      x402Moments.route(accepts, {
-        path: ctx.path,
-        method: ctx.method,
-        route: JSON.parse(JSON.stringify(route))
-      })
-    );
-  });
-  server.onBeforeVerify(async (ctx) => {
-    const payload = ctx.paymentPayload;
-    const requirements = ctx.requirements;
-    const sessionId = await resolveSession(sessionIdOf(payload.extensions), {
-      path: payload.resource?.url ?? "",
-      method: "PAY",
-      header: () => void 0
-    });
-    const session = await beltic.sessions.ensure(sessionId);
-    if (session.born === "seller")
-      await session.emit("payment.requested", x402Moments.requirements(requirements));
-    const presented = x402Moments.payload(payload);
-    await session.emit("payment.presented", presented);
-    inFlight.set(payloadDigest(payload), session);
-    const out = await beltic.evaluate(session.id, presented);
-    if (!out) return;
-    opts.onDecision?.({
-      sessionId: session.id,
-      decision: out.decision,
-      reasonCodes: out.reasonCodes,
-      born: session.born,
-      buyerDecisionId: decisionIdOf(payload.extensions)
-    });
-    if (out.verdict.blocks(beltic.onReview)) {
-      return {
-        abort: true,
-        reason: `BELTIC_${out.verdict.value}`,
-        message: out.reasonCodes.join(",")
-      };
-    }
-    return;
-  });
-  server.onAfterSettle(async (ctx) => {
-    const key = payloadDigest(ctx.paymentPayload);
-    const session = inFlight.get(key);
-    if (!session) return;
-    inFlight.delete(key);
-    if (ctx.result.success) await session.close("settled", { transaction: ctx.result.transaction });
-  });
-  return { inFlight };
-}
-
-export {
-  attachX402
-};

package/dist/mcp/index.d.ts

@@ -1,58 +0,0 @@
-import { a as PaymentSummary, P as PaymentMomentPayload } from '../verdict-6vCyoAHE.js';
-import { B as Beltic, S as SessionSource } from '../session-DsBWEP8d.js';
-import 'zod';
-
-interface CallToolParams {
-    name: string;
-    arguments?: Record<string, unknown> | undefined;
-    _meta?: Record<string, unknown> | undefined;
-}
-/** Structural: `Client` from `@modelcontextprotocol/sdk/client` satisfies it. */
-interface McpClientLike {
-    callTool(params: CallToolParams, ...rest: unknown[]): Promise<unknown>;
-}
-declare function wrapClient<C extends McpClientLike>(source: SessionSource, client: C, opts?: {
-    server?: string;
-}): C;
-/**
- * An in-band payment ask: any object in the result carrying an x402-style
- * `accepts` array (MRTR `input_required`, or a `_meta` envelope). One
- * moment, two artifacts — either becomes the same `payment.requested`.
- */
-declare function findPaymentAsk(result: unknown): PaymentMomentPayload | null;
-interface ServerCallExtra {
-    _meta?: Record<string, unknown> | undefined;
-    sessionId?: string | undefined;
-}
-interface WithBelticOptions<Args> {
-    toolName: string;
-    /** Return the payment this call moves, or null when the call is not value-moving. */
-    valueMoving?: (args: Args) => PaymentSummary | null;
-    gateway?: string;
-}
-type ToolHandler<Args, R> = (args: Args, extra: ServerCallExtra) => Promise<R> | R;
-interface McpErrorResult {
-    isError: true;
-    content: Array<{
-        type: 'text';
-        text: string;
-    }>;
-}
-/**
- * Wraps a tool handler on the seller side. Value-moving calls are evaluated
- * synchronously (DENY ⇒ isError result); every decided call is recorded
- * as `gateway.decision` in the buyer's session, or a seller-born one.
- */
-declare function withBeltic<Args, R>(beltic: Beltic, handler: ToolHandler<Args, R>, opts: WithBelticOptions<Args>): ToolHandler<Args, R | McpErrorResult>;
-/** Structural: `McpServer` from `@modelcontextprotocol/sdk/server/mcp` satisfies it. */
-interface McpServerLike {
-    registerTool(name: string, config: unknown, cb: (...a: never[]) => unknown): unknown;
-}
-interface WrapServerOptions {
-    valueMoving?: (toolName: string, args: unknown) => PaymentSummary | null;
-    gateway?: string;
-}
-/** Patches `registerTool` so every tool goes through `withBeltic`; `valueMoving` decides per tool. */
-declare function wrapServer<S extends McpServerLike>(beltic: Beltic, server: S, opts?: WrapServerOptions): S;
-
-export { type CallToolParams, type McpClientLike, type McpErrorResult, type McpServerLike, type ServerCallExtra, type ToolHandler, type WithBelticOptions, type WrapServerOptions, findPaymentAsk, withBeltic, wrapClient, wrapServer };

package/dist/mcp/index.js

@@ -1,135 +0,0 @@
-import {
-  Sessions,
-  recordCall
-} from "../chunk-4MG6VNAU.js";
-import {
-  SESSION_EXTENSION
-} from "../chunk-FAQ442YH.js";
-import {
-  uuidv7
-} from "../chunk-X3W2Z5GC.js";
-import {
-  Verdict
-} from "../chunk-46QN2KEZ.js";
-import {
-  presentedFrom
-} from "../chunk-7G5EHNVW.js";
-import {
-  x402Moments
-} from "../chunk-LM4NIYE5.js";
-import {
-  toJson,
-  toJsonObject
-} from "../chunk-FQDHFTVR.js";
-
-// src/mcp/index.ts
-function wrapClient(source, client, opts = {}) {
-  if (!source) return client;
-  const original = client.callTool.bind(client);
-  const callTool = async (params, ...rest) => {
-    const session = await Sessions.resolve(source);
-    if (!session) return original(params, ...rest);
-    return recordCall(
-      session,
-      "tool_call",
-      uuidv7(),
-      {
-        toolName: params.name,
-        input: toJson(params.arguments ?? {}),
-        transport: "mcp",
-        ...opts.server ? { server: opts.server } : {}
-      },
-      async () => {
-        await session.flush();
-        return original(
-          { ...params, _meta: { ...params._meta ?? {}, [SESSION_EXTENSION]: session.id } },
-          ...rest
-        );
-      },
-      async (result) => {
-        const ask = findPaymentAsk(result);
-        if (ask) await session.emit("payment.requested", ask);
-        return { output: toJson(result) };
-      }
-    );
-  };
-  return new Proxy(client, {
-    get(target, prop, receiver) {
-      return prop === "callTool" ? callTool : Reflect.get(target, prop, receiver);
-    }
-  });
-}
-function findPaymentAsk(result) {
-  const seen = /* @__PURE__ */ new Set();
-  const walk = (v, depth) => {
-    if (!v || typeof v !== "object" || seen.has(v) || depth > 6) return null;
-    seen.add(v);
-    const o = v;
-    const first = Array.isArray(o.accepts) ? o.accepts[0] : void 0;
-    if (typeof first?.payTo === "string") {
-      return x402Moments.ask(first, toJsonObject(o));
-    }
-    for (const child of Array.isArray(o) ? o : Object.values(o)) {
-      const hit = walk(child, depth + 1);
-      if (hit) return hit;
-    }
-    return null;
-  };
-  return walk(result, 0);
-}
-function withBeltic(beltic, handler, opts) {
-  const gateway = opts.gateway ?? "sdk-mcp";
-  return async (args, extra) => {
-    const bound = extra?._meta?.[SESSION_EXTENSION];
-    const session = await beltic.sessions.ensure(typeof bound === "string" ? bound : null);
-    const payment = opts.valueMoving?.(args) ?? null;
-    let verdict = Verdict.ALLOW;
-    let reasonCodes = [];
-    if (payment) {
-      await session.emit(
-        "payment.presented",
-        presentedFrom(payment, { tool: opts.toolName, args: toJson(args) })
-      );
-      const out = await beltic.evaluate(session.id, payment);
-      if (out) {
-        verdict = out.verdict;
-        reasonCodes = out.reasonCodes;
-      }
-    }
-    await session.emit("gateway.decision", {
-      gateway,
-      call: { tool: opts.toolName, args: toJson(args) },
-      decision: verdict.effective(beltic.onReview),
-      reasonCodes,
-      record: { valueMoving: payment !== null, bound: typeof bound === "string" }
-    });
-    if (verdict.blocks(beltic.onReview)) {
-      return {
-        isError: true,
-        content: [
-          { type: "text", text: `Beltic ${verdict.value}: ${reasonCodes.join(",") || "denied"}` }
-        ]
-      };
-    }
-    return handler(args, extra);
-  };
-}
-function wrapServer(beltic, server, opts = {}) {
-  const original = server.registerTool.bind(server);
-  server.registerTool = ((name, config, cb) => original(
-    name,
-    config,
-    withBeltic(beltic, cb, {
-      toolName: name,
-      ...opts.gateway ? { gateway: opts.gateway } : {},
-      valueMoving: (args) => opts.valueMoving?.(name, args) ?? null
-    })
-  ));
-  return server;
-}
-export {
-  findPaymentAsk,
-  withBeltic,
-  wrapClient,
-  wrapServer
-};

package/dist/middleware-9gI0ou2i.d.ts

@@ -1,15 +0,0 @@
-import { PaywallConfig } from '@x402/core/server';
-import { A as AttachOptions } from './adapter-BEpzr2R3.js';
-
-/**
- * The seller half as one middleware: the framework's `@x402/*` payment
- * middleware over an `x402HTTPResourceServer` with the Beltic hooks
- * attached. `@belticlabs/agent-risk-sdk/hono` and `@belticlabs/agent-risk-sdk/express` differ only in
- * which `paymentMiddlewareFromHTTPServer` they hand in.
- */
-
-type GuardedMiddlewareOptions = AttachOptions & {
-    paywall?: PaywallConfig | undefined;
-};
-
-export type { GuardedMiddlewareOptions as G };

package/dist/seller/anti-fraud-gateway.d.ts

@@ -1,40 +0,0 @@
-import { B as Beltic } from '../session-DsBWEP8d.js';
-import '../verdict-6vCyoAHE.js';
-import 'zod';
-
-/**
- * Adapter for the anti-fraud port already in Beltic's `platform` monorepo
- * (`x402-core/gateways/anti-fraud.gateway.interface.ts`), GAP-37. That
- * port is binary and session-less; the mapping is lossy by construction:
- * `REVIEW` becomes a deny unless `onReview` says otherwise, and reason
- * codes travel joined in `reason`. The structural type is copied so this
- * module needs no dependency on `platform`.
- */
-
-interface PaymentRiskContext {
-    wallet: string;
-    resource: string;
-    amountAtomic: string;
-    asset: string;
-    network: string;
-    paymentIdentifier?: string;
-    /** Not in the platform port yet — pass it when you have it. */
-    sessionId?: string;
-    payTo?: string;
-}
-type RiskDecision = {
-    allow: true;
-} | {
-    allow: false;
-    reason: string;
-};
-interface AntiFraudGateway {
-    assess(context: PaymentRiskContext): Promise<RiskDecision>;
-}
-declare class BelticAntiFraudGateway implements AntiFraudGateway {
-    private readonly beltic;
-    constructor(beltic: Beltic);
-    assess(ctx: PaymentRiskContext): Promise<RiskDecision>;
-}
-
-export { type AntiFraudGateway, BelticAntiFraudGateway, type PaymentRiskContext, type RiskDecision };

package/dist/seller/anti-fraud-gateway.js

@@ -1,38 +0,0 @@
-import {
-  presentedFrom
-} from "../chunk-7G5EHNVW.js";
-import {
-  x402Summary
-} from "../chunk-LM4NIYE5.js";
-import "../chunk-FQDHFTVR.js";
-
-// src/seller/anti-fraud-gateway.ts
-var BelticAntiFraudGateway = class {
-  constructor(beltic) {
-    this.beltic = beltic;
-  }
-  async assess(ctx) {
-    const session = await this.beltic.sessions.ensure(ctx.sessionId ?? null);
-    const payment = x402Summary(
-      {
-        payTo: ctx.payTo ?? ctx.resource,
-        amount: ctx.amountAtomic,
-        network: ctx.network,
-        asset: ctx.asset
-      },
-      { payer: ctx.wallet }
-    );
-    await session.emit(
-      "payment.presented",
-      presentedFrom(payment, {
-        resource: ctx.resource,
-        ...ctx.paymentIdentifier ? { paymentIdentifier: ctx.paymentIdentifier } : {}
-      })
-    );
-    const out = await this.beltic.evaluate(session.id, payment);
-    return out?.verdict.blocks(this.beltic.onReview) ? { allow: false, reason: `${out.decision}:${out.reasonCodes.join(",")}` } : { allow: true };
-  }
-};
-export {
-  BelticAntiFraudGateway
-};

package/dist/x402/express.d.ts

@@ -1,13 +0,0 @@
-import { RoutesConfig, x402ResourceServer } from '@x402/core/server';
-import { RequestHandler } from 'express';
-import { B as Beltic } from '../session-DsBWEP8d.js';
-import { G as GuardedMiddlewareOptions } from '../middleware-9gI0ou2i.js';
-export { a as attachX402 } from '../adapter-BEpzr2R3.js';
-import '../verdict-6vCyoAHE.js';
-import 'zod';
-
-/** Seller half for express: `@x402/express`'s payment middleware with the Beltic hooks attached. */
-
-declare function belticPaymentMiddleware(beltic: Beltic, routes: RoutesConfig, server: x402ResourceServer, opts?: GuardedMiddlewareOptions): RequestHandler;
-
-export { belticPaymentMiddleware };

package/dist/x402/express.js

@@ -1,27 +0,0 @@
-import {
-  guardedPaymentMiddleware
-} from "../chunk-NJVO2WIV.js";
-import {
-  attachX402
-} from "../chunk-OKC6VMFH.js";
-import "../chunk-FAQ442YH.js";
-import "../chunk-X3W2Z5GC.js";
-import "../chunk-46QN2KEZ.js";
-import "../chunk-LM4NIYE5.js";
-import "../chunk-FQDHFTVR.js";
-
-// src/x402/express.ts
-import { paymentMiddlewareFromHTTPServer } from "@x402/express";
-function belticPaymentMiddleware(beltic, routes, server, opts) {
-  return guardedPaymentMiddleware(
-    paymentMiddlewareFromHTTPServer,
-    beltic,
-    routes,
-    server,
-    opts
-  );
-}
-export {
-  attachX402,
-  belticPaymentMiddleware
-};