@belticlabs/agent-risk-sdk 0.6.0 → 0.8.0

package/dist/chunk-IUWC6HT5.js

@@ -1,144 +0,0 @@
-import {
-  summaryOf
-} from "./chunk-M4I3FGZG.js";
-import {
-  toJsonObject
-} from "./chunk-FQDHFTVR.js";
-import {
-  payloadDigest
-} from "./chunk-77D74TWX.js";
-
-// src/x402/binding.ts
-var SESSION_EXTENSION = "beltic.sessionId";
-var SESSION_HEADER = "Beltic-Session-Id";
-function sessionIdOf(extensions) {
-  const v = extensions?.[SESSION_EXTENSION];
-  return typeof v === "string" && v.length > 0 ? v : null;
-}
-
-// src/x402/moments.ts
-function x402Currency(network, asset) {
-  return `${network}/${asset}`;
-}
-function x402Summary(accepts, opts = {}) {
-  const payer = opts.payer?.toLowerCase();
-  return {
-    protocol: "x402",
-    payee: accepts?.payTo ?? "unknown",
-    amount: {
-      value: accepts?.amount ?? "0",
-      currency: accepts ? x402Currency(accepts.network ?? "unknown", accepts.asset ?? "unknown") : "unknown"
-    },
-    ...payer ? { payer } : {}
-  };
-}
-function fromAccepts(a, artifact, raw, payer) {
-  return { ...x402Summary(a, { payer }), artifact, raw };
-}
-function payerOf(payload) {
-  const p = payload.payload ?? {};
-  const auth = p.authorization;
-  const candidates = [
-    auth?.from,
-    p.from,
-    p.payer,
-    p.signer,
-    p.permit?.owner
-  ];
-  const hit = candidates.find((c) => typeof c === "string" && c.length > 0);
-  return typeof hit === "string" ? hit.toLowerCase() : void 0;
-}
-var x402Moments = {
-  /** The 402 challenge as the buyer saw it, from the `PAYMENT-REQUIRED` header. */
-  required(required) {
-    return fromAccepts(required.accepts?.[0], "http-402", toJsonObject(required));
-  },
-  /** The requirements the seller's resource server resolved for a request. */
-  requirements(req) {
-    return fromAccepts(req, "http-402", toJsonObject(req));
-  },
-  /** A route's static `accepts` config, before any payment header exists. */
-  route(route, raw) {
-    const accepts = route ?? {};
-    const extra = accepts.extra;
-    return fromAccepts(
-      {
-        payTo: typeof accepts.payTo === "string" ? accepts.payTo : "dynamic",
-        amount: priceValue(accepts.price),
-        network: accepts.network,
-        asset: extra?.asset ?? "route"
-      },
-      "http-402",
-      raw
-    );
-  },
-  /** The signed payment the buyer presented, with the requirement it accepted. */
-  payload(payload) {
-    return fromAccepts(
-      payload.accepted,
-      "payment-signature",
-      toJsonObject(payload),
-      payerOf(payload)
-    );
-  }
-};
-function priceValue(price) {
-  if (typeof price === "string") return price.replace(/[^0-9.]/g, "") || "0";
-  if (typeof price === "number") return String(price);
-  if (price && typeof price === "object" && typeof price.amount === "string")
-    return price.amount;
-  return "0";
-}
-
-// src/x402/adapter.ts
-function attachX402(beltic, server, http) {
-  const inFlight = /* @__PURE__ */ new Map();
-  http?.onProtectedRequest(async (ctx, route) => {
-    if (ctx.paymentHeader) return;
-    const bound = ctx.adapter.getHeader(SESSION_HEADER) ?? ctx.adapter.getHeader(SESSION_HEADER.toLowerCase());
-    if (!bound) return;
-    const stream = await beltic.streams.ensure(bound);
-    const accepts = Array.isArray(route.accepts) ? route.accepts[0] : route.accepts;
-    await stream.emit(
-      "payment.requested",
-      x402Moments.route(accepts, {
-        path: ctx.path,
-        method: ctx.method,
-        route: JSON.parse(JSON.stringify(route))
-      })
-    );
-  });
-  server.onBeforeVerify(async (ctx) => {
-    const payload = ctx.paymentPayload;
-    const requirements = ctx.requirements;
-    const stream = await beltic.streams.ensure(sessionIdOf(payload.extensions));
-    if (stream.born === "seller")
-      await stream.emit("payment.requested", x402Moments.requirements(requirements));
-    const presented = x402Moments.payload(payload);
-    await stream.emit("payment.presented", presented);
-    inFlight.set(payloadDigest(payload), stream);
-    const decision = await beltic.evaluate(stream.id, summaryOf(presented));
-    if (decision.absent || decision.allowed) return;
-    return {
-      abort: true,
-      reason: `BELTIC_${decision.value}`,
-      message: decision.reasonCodes.join(",")
-    };
-  });
-  server.onAfterSettle(async (ctx) => {
-    const key = payloadDigest(ctx.paymentPayload);
-    const stream = inFlight.get(key);
-    if (!stream) return;
-    inFlight.delete(key);
-    if (ctx.result.success) await stream.close("settled", { transaction: ctx.result.transaction });
-  });
-}
-
-export {
-  SESSION_EXTENSION,
-  SESSION_HEADER,
-  x402Currency,
-  x402Summary,
-  x402Moments,
-  attachX402
-};

package/dist/chunk-M4I3FGZG.js

@@ -1,13 +0,0 @@
-// src/core/payment-moment.ts
-function summaryOf(m) {
-  return {
-    protocol: m.protocol,
-    payee: m.payee,
-    amount: { value: m.amount.value, currency: m.amount.currency },
-    ...m.payer ? { payer: m.payer } : {}
-  };
-}
-
-export {
-  summaryOf
-};

package/dist/client-CgCjOrRP.d.ts

@@ -1,65 +0,0 @@
-import { a7 as PaymentSummary } from './index-IfY4XCvJ.js';
-import { b as SessionOptions, S as Session, a as Decision } from './session-Dcof4UIn.js';
-
-/**
- * One SDK, two halves (Fraud SDK RFC › Summary). `Beltic` is the single
- * client: `session` for the buyer half, `evaluate` for whichever half is
- * about to let a payment through. Protocol integrations are plain
- * functions behind subpath exports, each pulling exactly one optional peer:
- *
- *   @belticlabs/agent-risk-sdk/ai    → middleware(session), wrapTools(session, …)
- *   @belticlabs/agent-risk-sdk/x402  → belticFetch(session), x402Summary(…), attachX402(beltic, …)
- *   @belticlabs/agent-risk-sdk/hono  → belticPaymentMiddleware(beltic, …)
- *
- * Neither half decides risk locally: verdicts are platform-side.
- *
- * A client is configured or it is not constructed — `Beltic.fromEnv()`
- * reads `BELTIC_*`, and there is no disabled client (GAP-78). Evidence is
- * a side channel of the work it observes, so a platform outage never
- * throws into that work (GAP-70): the transport waits it out, `session`
- * runs without a stream, `evaluate` answers `Decision.absent()` — never an
- * invented verdict. What the platform *rejects* (a 4xx, a forked chain)
- * is the client's fault and throws.
- */
-
-declare const SDK_VERSION = "0.6.0";
-interface BelticOptions {
-    apiKey: string;
-    baseUrl: string;
-    /** The agent's 32-byte Ed25519 seed as 64 hex — the buyer half. Without it, `session` is unavailable; the seller half works. */
-    agentSeed?: string | undefined;
-}
-declare class Beltic {
-    private readonly api;
-    private readonly transport;
-    private readonly sessions;
-    /**
-     * The client the environment describes: `BELTIC_API_KEY` and
-     * `BELTIC_BASE_URL`, both required, and `BELTIC_AGENT_SEED` (64 hex) for
-     * the buyer half. A missing required variable is a configuration error,
-     * thrown (GAP-78).
-     */
-    static fromEnv(env?: Record<string, string | undefined>): Beltic;
-    constructor(opts: BelticOptions);
-    /**
-     * The session for a key of the host's own (its session, run or
-     * conversation id) — one object per key until it closes; the options
-     * count on the first call only. See `Session`.
-     */
-    session(key: string, opts?: SessionOptions): Session;
-    /**
-     * The platform's verdict on a payment — the seller's before it verifies,
-     * the buyer's before it presents (Fraud SDK RFC › Evaluation Client).
-     * Read-your-writes: the buffered evidence is flushed first so the
-     * platform judges what the caller already saw (GAP-16). Absent when the
-     * platform could not be reached (GAP-70).
-     */
-    evaluate(sessionId: string, payment: PaymentSummary): Promise<Decision>;
-    /** Send everything buffered now and wait for that attempt. */
-    flush(): Promise<void>;
-    shutdown(): Promise<void>;
-    /** `process.env` where there is a `process` (Node); `{}` on workerd, where the shell passes its `env`. */
-    private static processEnv;
-}
-
-export { Beltic as B, SDK_VERSION as S, type BelticOptions as a };