@decentrys/agent 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Decentrys Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,62 @@
+# @decentrys/agent
+
+AgentGuard: policy enforcement in front of an autonomous on-chain agent.
+
+## Install
+
+```bash
+npm install @decentrys/agent @decentrys/protect
+```
+
+## Why this is not @decentrys/protect
+
+Protect informs a human, who then decides. An agent has no judgement and will
+do exactly what it is told, at machine speed, repeatedly. A person seeing
+"unlimited approval requested" may reconsider; an agent will not.
+
+So where Protect warns and never blocks, AgentGuard exists to be able to
+**stop** an action — under a policy its operator set in advance.
+
+```ts
+const policy = sealPolicy({
+  maxValuePerActionUsd: 5_000,
+  cumulative: [{ windowMs: 86_400_000, maxUsd: 25_000 }],
+  allowedActions: ['swap'],          // may swap, may not approve
+  allowUnlimitedApproval: false,
+});
+
+const guard = new AgentGuard({ apiKey: 'dk_live_...', policy });
+const decision = await guard.assessAgentTransaction(action);
+
+decision.verdict      // 'allow' | 'require_human_approval' | 'deny'
+decision.evaluations  // every rule considered, passes included
+```
+
+## The agent cannot widen its own limits
+
+A sealed policy is branded with a runtime symbol and deep-frozen, with your
+arrays cloned away. There is **no widening function in this package** —
+`narrowPolicy` only ever tightens.
+
+## `failMode` defaults to `escalate`
+
+`open` signs unscreened during exactly the window an attacker would choose.
+`closed` halts the agent entirely, which for a liquidation agent is its own
+loss and pressures operators into choosing `open`. `escalate` spends a human's
+attention instead of the treasury. An outage removes one input but never
+suspends your limits.
+
+## Known limit, stated plainly
+
+The bundled spend ledger is **in-process**. Two replicas each enforcing
+$10,000/day enforce $20,000, and a restart resets the window. Swap in shared
+storage via the two-method `AgentUsage` interface before running a fleet.
+
+## Licence
+
+MIT © Decentrys Labs
+
+## Links
+
+- [decentrys.com](https://decentrys.com) · [SDK overview](https://decentrys.com/sdk) · [Developer API](https://decentrys.com/developers)
+- Source: [github.com/teamdecentrys-byte/Decentrys](https://github.com/teamdecentrys-byte/Decentrys)