@belticlabs/agent-risk-sdk 0.4.0 → 0.5.0

package/dist/index.js

@@ -2,12 +2,14 @@ import {
   Verdict
 } from "./chunk-4BUUPU3O.js";
 import {
-  BelticDisabledError,
-  DEFAULT_OPEN_RETRY_MS,
+  ApiClient,
+  BelticApiError,
+  BelticConfigError,
+  ChainRejectedError,
   Session,
   Sessions,
-  recordCall
-} from "./chunk-4MG6VNAU.js";
+  Transport
+} from "./chunk-JSE6JQJC.js";
 import {
   canonicalBytes,
   canonicalize,
@@ -18,127 +20,12 @@ import {
   toHex
 } from "./chunk-X3W2Z5GC.js";
 
-// src/core/api-client.ts
-var BelticApiError = class extends Error {
-  constructor(status, code, message, details, requestId) {
-    super(message);
-    this.status = status;
-    this.code = code;
-    this.details = details;
-    this.requestId = requestId;
-    this.name = "BelticApiError";
-  }
-  /** 5xx and network failures are retried by the transport; 4xx are not. */
-  get retryable() {
-    return this.status === 0 || this.status >= 500 || this.status === 429;
-  }
-};
-var ApiClient = class {
-  baseUrl;
-  fetchImpl;
-  timeoutMs;
-  headers;
-  constructor(opts) {
-    this.baseUrl = opts.baseUrl.replace(/\/+$/, "");
-    this.fetchImpl = opts.fetch ?? globalThis.fetch.bind(globalThis);
-    this.timeoutMs = opts.timeoutMs ?? 1e4;
-    this.headers = {
-      authorization: `Bearer ${opts.apiKey}`,
-      "content-type": "application/json",
-      "user-agent": opts.userAgent ?? "@belticlabs/agent-risk-sdk"
-    };
-  }
-  post(path, body, headers = {}) {
-    return this.request("POST", path, JSON.stringify(body), headers);
-  }
-  get(path, query = {}) {
-    const qs = Object.entries(query).filter((e) => e[1] !== void 0).map(([k, v]) => `${encodeURIComponent(k)}=${encodeURIComponent(v)}`).join("&");
-    return this.request("GET", qs ? `${path}?${qs}` : path, void 0, {});
-  }
-  async request(method, path, body, extra) {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), this.timeoutMs);
-    let res;
-    try {
-      res = await this.fetchImpl(`${this.baseUrl}${path}`, {
-        method,
-        headers: { ...this.headers, ...extra },
-        ...body !== void 0 ? { body } : {},
-        signal: controller.signal
-      });
-    } catch (err) {
-      throw new BelticApiError(
-        0,
-        "NETWORK",
-        `request to ${path} failed: ${err.message}`
-      );
-    } finally {
-      clearTimeout(timer);
-    }
-    const text = await res.text();
-    let json = null;
-    try {
-      json = text ? JSON.parse(text) : null;
-    } catch {
-      json = null;
-    }
-    if (!res.ok) {
-      const e = json?.error;
-      throw new BelticApiError(
-        res.status,
-        e?.code ?? `HTTP_${res.status}`,
-        e?.message ?? res.statusText,
-        e?.details,
-        e?.request_id
-      );
-    }
-    return json;
-  }
-};
-
-// src/core/correlation.ts
-var MemoryCorrelationStore = class {
-  constructor(defaultTtlMs = 60 * 60 * 1e3) {
-    this.defaultTtlMs = defaultTtlMs;
-  }
-  entries = /* @__PURE__ */ new Map();
-  async bind(key, sessionId, ttlMs = this.defaultTtlMs) {
-    this.entries.set(key, { sessionId, expiresAt: Date.now() + ttlMs });
-  }
-  async resolve(key) {
-    const e = this.entries.get(key);
-    if (!e) return null;
-    if (e.expiresAt < Date.now()) {
-      this.entries.delete(key);
-      return null;
-    }
-    return e.sessionId;
-  }
-};
-
 // src/core/identity.ts
-import { mkdirSync, readFileSync, writeFileSync } from "fs";
-import { dirname } from "path";
 function identityFromSeed(seed, credential) {
   const signer = memorySigner(seed);
   const did = didKeyFromEd25519(signer.publicKey);
   return { did, signer: { ...signer, keyId: did }, ...credential ? { credential } : {} };
 }
-function ephemeralIdentity(credential) {
-  return identityFromSeed(memorySigner().seed, credential);
-}
-function fileIdentity(path, credential) {
-  let seed;
-  try {
-    seed = fromHex(JSON.parse(readFileSync(path, "utf8")).seed);
-  } catch {
-    seed = memorySigner().seed;
-    mkdirSync(dirname(path), { recursive: true });
-    writeFileSync(path, `${JSON.stringify({ seed: toHex(seed) })}
-`, { mode: 384 });
-  }
-  return identityFromSeed(seed, credential);
-}
 
 // src/core/payment-moment.ts
 function summaryOf(m) {
@@ -149,9 +36,6 @@ function summaryOf(m) {
     ...m.payer ? { payer: m.payer } : {}
   };
 }
-function presentedFrom(summary, raw) {
-  return { ...summary, artifact: "payment-signature", raw };
-}
 
 // src/core/decision.ts
 var Decision = class _Decision {
@@ -382,238 +266,65 @@ var Run = class _Run {
   }
 };
 
-// src/core/transport.ts
-var DEFAULT_TRANSPORT = {
-  maxBatch: 50,
-  flushMs: 1e3,
-  maxBuffered: 5e3,
-  backoff: { baseMs: 200, maxMs: 3e4, maxAttempts: Number.POSITIVE_INFINITY }
-};
-var ChainRejectedError = class extends Error {
-  constructor(sessionId, source, result) {
-    super(
-      `chain ${sessionId}:${source} halted at seq ${result.seq}: ${result.status}${result.code ? ` ${result.code}` : ""}`
-    );
-    this.sessionId = sessionId;
-    this.source = source;
-    this.result = result;
-    this.name = "ChainRejectedError";
-  }
-};
-var TransportClosedError = class extends Error {
-  constructor() {
-    super("transport is closed");
-    this.name = "TransportClosedError";
-  }
-};
-var Transport = class {
-  constructor(api, opts = {}) {
-    this.api = api;
-    this.opts = {
-      ...DEFAULT_TRANSPORT,
-      ...opts,
-      backoff: { ...DEFAULT_TRANSPORT.backoff, ...opts.backoff }
-    };
-  }
-  opts;
-  chains = /* @__PURE__ */ new Map();
-  buffered = 0;
-  timer = null;
-  closed = false;
-  inFlightCount = 0;
-  drainWaiters = [];
-  get size() {
-    return this.buffered;
-  }
-  hasRoom() {
-    return !this.closed && this.buffered < this.opts.maxBuffered;
-  }
-  haltedError(sessionId, source) {
-    return this.chains.get(`${sessionId}:${source}`)?.halted ?? null;
-  }
-  /** Callers check `hasRoom()` first and assign `seq` only then (GAP-38). */
-  enqueue(ev) {
-    if (this.closed) throw new TransportClosedError();
-    const key = `${ev.sessionId}:${ev.source}`;
-    let chain = this.chains.get(key);
-    if (!chain) {
-      chain = { key, pending: [], inFlight: null, attempts: 0, halted: null };
-      this.chains.set(key, chain);
-    }
-    if (chain.halted) throw chain.halted;
-    if (!this.hasRoom()) throw new Error("transport buffer is full");
-    chain.pending.push(ev);
-    this.buffered++;
-    if (chain.pending.length >= this.opts.maxBatch) void this.flushChain(chain);
-    else this.schedule();
-  }
-  /** Send everything pending and wait for every in-flight batch to settle (ack or halt). */
-  async flush() {
-    this.unschedule();
-    for (const chain of this.chains.values()) void this.flushChain(chain);
-    await this.drained();
-  }
-  async close() {
-    await this.flush();
-    this.closed = true;
-  }
-  schedule() {
-    if (this.timer) return;
-    const st = this.opts.setTimeout ?? globalThis.setTimeout;
-    this.timer = st(() => {
-      this.timer = null;
-      for (const chain of this.chains.values()) void this.flushChain(chain);
-    }, this.opts.flushMs);
-    this.timer.unref?.();
-  }
-  unschedule() {
-    if (!this.timer) return;
-    (this.opts.clearTimeout ?? globalThis.clearTimeout)(this.timer);
-    this.timer = null;
-  }
-  drained() {
-    if (this.inFlightCount === 0 && [...this.chains.values()].every((c) => c.pending.length === 0 || c.halted)) {
-      return Promise.resolve();
-    }
-    return new Promise((resolve) => this.drainWaiters.push(resolve));
-  }
-  settleWaiters() {
-    if (this.inFlightCount > 0) return;
-    if (![...this.chains.values()].every((c) => c.pending.length === 0 || c.halted)) return;
-    const waiters = this.drainWaiters;
-    this.drainWaiters = [];
-    for (const w of waiters) w();
-  }
-  async flushChain(chain) {
-    if (chain.inFlight || chain.halted || chain.pending.length === 0) {
-      this.settleWaiters();
-      return;
-    }
-    const batch = chain.pending.splice(0, this.opts.maxBatch);
-    chain.inFlight = batch;
-    this.inFlightCount++;
-    try {
-      const ack = await this.send(chain, batch);
-      this.buffered -= batch.length;
-      this.opts.onAck?.(ack);
-      const bad = ack.results.find((r) => r.status === "fork" || r.status === "rejected");
-      if (bad) {
-        const first = batch[0];
-        chain.halted = new ChainRejectedError(first.sessionId, first.source, bad);
-        this.buffered -= chain.pending.length;
-        chain.pending = [];
-        this.opts.onChainHalted?.(chain.halted);
-      }
-    } catch (err) {
-      this.buffered -= batch.length + chain.pending.length;
-      chain.pending = [];
-      const first = batch[0];
-      chain.halted = new ChainRejectedError(first.sessionId, first.source, {
-        index: 0,
-        sessionId: first.sessionId,
-        source: first.source,
-        seq: first.seq,
-        status: "rejected",
-        code: "DELIVERY_FAILED"
-      });
-      this.opts.onError?.(err);
-      this.opts.onChainHalted?.(chain.halted);
-    } finally {
-      chain.inFlight = null;
-      this.inFlightCount--;
-    }
-    if (chain.pending.length > 0 && !chain.halted) void this.flushChain(chain);
-    else this.settleWaiters();
-  }
-  async send(chain, batch) {
-    const { baseMs, maxMs, maxAttempts } = this.opts.backoff;
-    for (let attempt = 0; ; attempt++) {
-      try {
-        const ack = await this.api.post("/v1/evidence", batch);
-        chain.attempts = 0;
-        return ack;
-      } catch (err) {
-        const retryable = err instanceof BelticApiError ? err.retryable : true;
-        if (!retryable || attempt + 1 >= maxAttempts) throw err;
-        this.opts.onError?.(err);
-        const delay = Math.min(maxMs, baseMs * 2 ** attempt) * (0.5 + Math.random() / 2);
-        await new Promise((r) => (this.opts.setTimeout ?? globalThis.setTimeout)(r, delay));
-      }
-    }
-  }
-};
-
 // src/client.ts
-var SDK_VERSION = "0.4.0";
+var SDK_VERSION = "0.5.0";
 var ENV_REQUIRED = ["BELTIC_API_KEY", "BELTIC_BASE_URL", "BELTIC_AGENT_SEED"];
 var ENV_CREDENTIAL = "BELTIC_AGENT_CREDENTIAL";
 var Beltic = class _Beltic {
-  api;
   transport;
   sessions;
   identity;
-  correlation;
   onReview;
   failOpen;
-  /** `false` for a disabled client (GAP-78): nothing is posted, `run`/`sessions.open` answer without a session. */
-  enabled;
+  api;
   onError;
   runs = /* @__PURE__ */ new Map();
   /**
    * The client the environment describes: `BELTIC_API_KEY`,
    * `BELTIC_BASE_URL`, `BELTIC_AGENT_SEED` (64 hex) and optionally
-   * `BELTIC_AGENT_CREDENTIAL`, fail-open by default. None set → a disabled
-   * client; some set → a configuration error, thrown (GAP-78).
+   * `BELTIC_AGENT_CREDENTIAL`. Any of the three missing is a configuration
+   * error, thrown (GAP-78).
    */
   static fromEnv(env = _Beltic.processEnv(), opts = {}) {
     const missing = ENV_REQUIRED.filter((name) => !env[name]);
-    if (missing.length === ENV_REQUIRED.length) return _Beltic.disabled(opts);
     if (missing.length > 0)
-      throw new Error(
-        `Beltic.fromEnv: ${missing.join(", ")} missing \u2014 set all of ${ENV_REQUIRED.join(", ")}, or none to disable`
+      throw new BelticConfigError(
+        `${missing.join(", ")} missing \u2014 fromEnv needs ${ENV_REQUIRED.join(", ")}`
       );
     return new _Beltic({
-      failOpen: true,
       ...opts,
       apiKey: env.BELTIC_API_KEY,
       baseUrl: env.BELTIC_BASE_URL,
       identity: identityFromSeed(fromHex(env.BELTIC_AGENT_SEED), env[ENV_CREDENTIAL])
     });
   }
-  /** A client that records nothing and never throws into the work: the null object for "no evidence stream" (GAP-78). */
-  static disabled(opts = {}) {
-    return new _Beltic({
-      ...opts,
-      apiKey: "",
-      baseUrl: "http://beltic.disabled.invalid",
-      failOpen: true,
-      enabled: false
-    });
-  }
   constructor(opts) {
-    this.enabled = opts.enabled ?? true;
+    if (!opts.apiKey) throw new BelticConfigError("apiKey is required");
+    if (!URL.canParse(opts.baseUrl))
+      throw new BelticConfigError(`baseUrl is not a URL: ${JSON.stringify(opts.baseUrl)}`);
     this.failOpen = opts.failOpen ?? false;
     this.onError = opts.onError ?? ((err) => console.error("[beltic]", err));
-    this.api = new ApiClient({ ...opts, userAgent: `@belticlabs/agent-risk-sdk/${SDK_VERSION}` });
+    this.api = new ApiClient({
+      baseUrl: opts.baseUrl,
+      apiKey: opts.apiKey,
+      fetch: opts.fetch,
+      userAgent: `@belticlabs/agent-risk-sdk/${SDK_VERSION}`
+    });
     this.transport = new Transport(this.api, {
+      ...opts.transport,
       onError: this.onError,
-      onChainHalted: this.onError,
-      ...opts.transport
+      onChainHalted: this.onError
     });
     this.sessions = new Sessions({
       api: this.api,
       transport: this.transport,
       sdkVersion: SDK_VERSION,
       identity: opts.identity,
-      redact: opts.redact,
-      now: opts.now,
       failOpen: this.failOpen,
       onError: this.onError,
-      openRetryMs: opts.openRetryMs,
-      enabled: this.enabled
+      openRetryMs: opts.openRetryMs
     });
     this.identity = opts.identity;
-    this.correlation = opts.correlation ?? new MemoryCorrelationStore();
     this.onReview = opts.onReview ?? "abort";
   }
   /**
@@ -622,15 +333,14 @@ var Beltic = class _Beltic {
    * is flushed first so the platform judges what the caller already saw
    * (GAP-16). A recorded moment is accepted as is: only its comparable core
    * (payee, amount, payer) is sent. `null` only under `failOpen`, when the
-   * platform could not be asked.
+   * platform could not be reached.
    */
   async evaluate(sessionId, payment) {
-    if (!this.enabled) return null;
     const input = { sessionId, payment: summaryOf(payment) };
-    if (!this.failOpen) return this.decide(input);
     try {
       return await this.decide(input);
     } catch (err) {
+      if (!this.failOpen || !Transport.outage(err)) throw err;
       this.onError(err);
       return null;
     }
@@ -672,30 +382,16 @@ var Beltic = class _Beltic {
     return globalThis.process?.env ?? {};
   }
 };
-function createBeltic(opts) {
-  return new Beltic(opts);
-}
 export {
   ApiClient,
   Beltic,
   BelticApiError,
-  BelticDisabledError,
+  BelticConfigError,
   ChainRejectedError,
-  DEFAULT_OPEN_RETRY_MS,
-  DEFAULT_TRANSPORT,
   Decision,
-  MemoryCorrelationStore,
   Run,
   SDK_VERSION,
   Session,
-  Sessions,
   Transport,
-  TransportClosedError,
-  createBeltic,
-  ephemeralIdentity,
-  fileIdentity,
-  identityFromSeed,
-  presentedFrom,
-  recordCall,
-  summaryOf
+  identityFromSeed
 };

package/dist/protocol/index.d.ts

@@ -1,5 +1,5 @@
-import { b as JsonValue, E as EvidenceSourceAll } from '../verdict-CDAsxktI.js';
-export { A as ALL_SOURCES, c as ANOMALY_TYPES, d as Amount, e as AmountSchema, f as ApiError, g as ApiErrorSchema, C as ChainHead, h as ChainHeadSchema, i as CreatePolicyInput, j as CreatePolicyInputSchema, k as CreatePolicyOutput, l as CreatePolicyOutputSchema, m as CreateSessionInput, n as CreateSessionInputSchema, o as CreateSessionOutput, p as CreateSessionOutputSchema, D as Decision, q as DecisionSchema, r as DeclaredIntent, s as DeclaredIntentSchema, t as DigestedEnvelope, u as EvaluateInput, v as EvaluateInputSchema, w as EvaluateOutput, x as EvaluateOutputSchema, y as EventResult, z as EventResultSchema, B as EventResultStatus, F as EventResultStatusSchema, G as EvidenceAck, H as EvidenceAckSchema, I as EvidenceBatchInput, K as EvidenceBatchInputSchema, L as EvidenceEnvelope, M as EvidenceEvent, N as EvidenceEventSchema, O as EvidenceKind, Q as EvidenceKindSchema, R as EvidenceSource, S as EvidenceSourceAllSchema, T as EvidenceSourceSchema, U as GatewayDecisionPayload, V as GatewayDecisionPayloadSchema, W as Hex64, X as Hex64Schema, Y as IntentDeclaredPayload, Z as IntentDeclaredPayloadSchema, J as JsonObject, _ as JsonValueSchema, $ as LlmCallEndPayload, a0 as LlmCallEndPayloadSchema, a1 as LlmCallStartPayload, a2 as LlmCallStartPayloadSchema, a3 as MAX_BATCH_EVENTS, a4 as OnReview, a5 as PAYMENT_ARTIFACTS, a6 as PLATFORM_KINDS, a7 as PayloadByKind, P as PaymentMomentPayload, a8 as PaymentMomentPayloadSchema, a as PaymentSummary, a9 as PaymentSummarySchema, aa as PlatformAnomalyPayload, ab as PlatformAnomalyPayloadSchema, ac as PlatformEvidenceKind, ad as PlatformEvidenceKindSchema, ae as PlatformObservationPayload, af as PlatformObservationPayloadSchema, ag as SESSION_CLOSE_REASONS, ah as SOURCE_ORDER, ai as SeqSchema, aj as SessionClosePayload, ak as SessionClosePayloadSchema, al as SessionIdSchema, am as SessionOpenPayload, an as SessionOpenPayloadSchema, ao as Sig, ap as SigSchema, aq as TimestampSchema, ar as ToolCallEndPayload, as as ToolCallEndPayloadSchema, at as ToolCallStartPayload, au as ToolCallStartPayloadSchema, av as TransportGapPayload, aw as TransportGapPayloadSchema, ax as Verdict, ay as WIRE_KINDS, az as WIRE_SOURCES, aA as WireEvidenceKind, aB as WireEvidenceKindSchema, aC as compareBySessionSource, aD as compareBySourceSeq, aE as isPlatformKind, aF as isWireKind, aG as payloadSchemaFor } from '../verdict-CDAsxktI.js';
+import { J as JsonValue, E as EvidenceSourceAll } from '../verdict-DMnbFuS5.js';
+export { A as ALL_SOURCES, a as ANOMALY_TYPES, b as Amount, c as AmountSchema, d as ApiError, e as ApiErrorSchema, C as ChainHead, f as ChainHeadSchema, g as CreatePolicyInput, h as CreatePolicyInputSchema, i as CreatePolicyOutput, j as CreatePolicyOutputSchema, k as CreateSessionInput, l as CreateSessionInputSchema, m as CreateSessionOutput, n as CreateSessionOutputSchema, D as Decision, o as DecisionSchema, p as DeclaredIntent, q as DeclaredIntentSchema, r as DigestedEnvelope, s as EvaluateInput, t as EvaluateInputSchema, u as EvaluateOutput, v as EvaluateOutputSchema, w as EventResult, x as EventResultSchema, y as EventResultStatus, z as EventResultStatusSchema, B as EvidenceAck, F as EvidenceAckSchema, G as EvidenceBatchInput, H as EvidenceBatchInputSchema, I as EvidenceEnvelope, K as EvidenceEvent, L as EvidenceEventSchema, M as EvidenceKind, N as EvidenceKindSchema, O as EvidenceSource, Q as EvidenceSourceAllSchema, R as EvidenceSourceSchema, S as GatewayDecisionPayload, T as GatewayDecisionPayloadSchema, U as Hex64, V as Hex64Schema, W as IntentDeclaredPayload, X as IntentDeclaredPayloadSchema, Y as JsonObject, Z as JsonValueSchema, _ as LlmCallEndPayload, $ as LlmCallEndPayloadSchema, a0 as LlmCallStartPayload, a1 as LlmCallStartPayloadSchema, a2 as MAX_BATCH_EVENTS, a3 as OnReview, a4 as PAYMENT_ARTIFACTS, a5 as PLATFORM_KINDS, a6 as PayloadByKind, P as PaymentMomentPayload, a7 as PaymentMomentPayloadSchema, a8 as PaymentSummary, a9 as PaymentSummarySchema, aa as PlatformAnomalyPayload, ab as PlatformAnomalyPayloadSchema, ac as PlatformEvidenceKind, ad as PlatformEvidenceKindSchema, ae as PlatformObservationPayload, af as PlatformObservationPayloadSchema, ag as SESSION_CLOSE_REASONS, ah as SOURCE_ORDER, ai as SeqSchema, aj as SessionClosePayload, ak as SessionClosePayloadSchema, al as SessionIdSchema, am as SessionOpenPayload, an as SessionOpenPayloadSchema, ao as Sig, ap as SigSchema, aq as TimestampSchema, ar as ToolCallEndPayload, as as ToolCallEndPayloadSchema, at as ToolCallStartPayload, au as ToolCallStartPayloadSchema, av as TransportGapPayload, aw as TransportGapPayloadSchema, ax as Verdict, ay as WIRE_KINDS, az as WIRE_SOURCES, aA as WireEvidenceKind, aB as WireEvidenceKindSchema, aC as compareBySessionSource, aD as compareBySourceSeq, aE as isPlatformKind, aF as isWireKind, aG as payloadSchemaFor } from '../verdict-DMnbFuS5.js';
 import { z } from 'zod';
 
 declare const PRIMITIVES: readonly ["THRESHOLD", "MEMBERSHIP", "MATCH", "PRESENCE", "FRESHNESS"];