// Express.js with Policy Pack middleware
const { requirePolicy } = require("@aporthq/middleware-express-express");

// Apply policy enforcement to refunds endpoint
app.post("/api/refunds", 
  requirePolicy("finance.payment.refund.v1", "agt_inst_xyz789"),
  async (req, res) => {
    // Your business logic - policy already verified!
    const refund = await processRefund(req.body);
    res.json({ success: true, refund });
  }
);

// Express.js with Policy Pack middleware
const { requirePolicy } = require("@aporthq/middleware-express-express");

app.post("/api/refunds", 
  requirePolicy("finance.payment.refund.v1", "agt_inst_xyz789"),
  async (req, res) => {
    // Policy already verified! Check specific limits
    const passport = req.policyResult.passport;
    
    if (req.body.amount > passport.limits.refund_amount_max_per_tx) {
      return res.status(403).json({
        error: "Refund exceeds limit",
        requested: req.body.amount,
        limit: passport.limits.refund_amount_max_per_tx
      });
    }

    // Process refund safely
    const refund = await stripe.refunds.create({
      amount: req.body.amount,
      payment_intent: req.body.payment_intent
    });
    
    res.json({ success: true, refund });
  }
);

// FastAPI with Policy Pack middleware
from fastapi import FastAPI, Request
from aport.middleware import require_policy

@app.post("/api/data/export")
@require_policy("data.export.create.v1", "agt_inst_xyz789")
async def export_data(request: Request, export_data: dict):
    passport = request.state.policy_result.passport
    
    # Check PII permission
    if export_data.get("include_pii") and not passport.limits.allow_pii:
        raise HTTPException(403, {
            "error": "PII export not allowed",
            "agent_id": passport.agent_id,
            "upgrade_instructions": "Request PII export capability from your administrator"
        })
    
    # Check row limit
    if export_data["rows"] > passport.limits.max_rows_per_export:
        raise HTTPException(403, {
            "error": "Export exceeds row limit",
            "requested": export_data["rows"],
            "limit": passport.limits.max_rows_per_export
        })
    
    # Process export safely
    return {"success": True, "export_id": f"exp_{int(time.time())}"}

// Express.js middleware
const { requirePolicy } = require("@aporthq/middleware-express-express");

app.post("/api/refunds", 
  requirePolicy("finance.payment.refund.v1", "agt_inst_xyz789"),
  async (req, res) => {
    // Policy already verified!
    res.json({ success: true, refund: await processRefund(req.body) });
  }
);