@decentrys/agent 0.1.0

package/dist/client.d.ts

@@ -0,0 +1,194 @@
+/**
+ * AgentGuard — the client an operator wires in front of an agent.
+ *
+ * The contract differs from both of its neighbours, and the difference is the
+ * product.
+ *
+ *  - **Protect never throws and never blocks.** It sits between a person and a
+ *    signing screen; a security service having a bad minute must not cost
+ *    someone their transaction, and the person decides.
+ *  - **Sentinel throws.** It is management tooling, and an operator who
+ *    believes they are monitored when they are not is worse off than one who
+ *    saw an error.
+ *  - **AgentGuard returns a verdict, and the verdict can be `deny`.** Nothing
+ *    here throws on a call path either — an exception thrown at an agent is a
+ *    condition it will handle by retrying, or by taking the branch that skips
+ *    the guard. A decision object it must read is harder to route around.
+ *
+ * The one place this does throw is the constructor, on a missing credential or
+ * an unsealed policy. That is a wiring error made by a human at deploy time,
+ * not an event during an agent's run.
+ */
+import { Decentrys, type Assessment, type CallOptions, type FetchLike, type Transport } from '@decentrys/protect';
+import type { AgentAction, AgentDecision, AgentOutcomeRecord, AgentPolicy } from './model';
+import { type SealedPolicy } from './policy';
+import { type AgentUsage, type ReservationLedger } from './ledger';
+import { type AgentActionExplanation } from './explain';
+export declare const AGENT_SDK_VERSION = "0.1.0";
+export interface AgentGuardConfig {
+    /**
+     * The operator's policy, already sealed.
+     *
+     * Typed as `SealedPolicy`, so a plain object cannot be passed here — an
+     * agent that constructs its own limits and hands them over does not
+     * typecheck and would not survive `sealPolicy`'s cloning if it did.
+     */
+    policy: SealedPolicy;
+    /** An existing Protect client. Supply this or `apiKey`. */
+    protect?: Decentrys;
+    apiKey?: string;
+    baseUrl?: string;
+    timeoutMs?: number;
+    retries?: number;
+    fetch?: FetchLike;
+    /** For tests, and for operators routing through their own gateway. */
+    transport?: Transport;
+    /**
+     * Where cumulative spend and rate state lives. Defaults to an in-process
+     * `SpendLedger` — read its file comment before running more than one
+     * instance, because a per-process cap on N processes is an N-times cap.
+     *
+     * A source that can only be read (see `ReservationLedger`) disables holds;
+     * `reservesBudget` reports which of the two this guard got.
+     */
+    ledger?: AgentUsage | ReservationLedger;
+    /** How many decisions to keep in memory for `auditLog()` / `explain()`. */
+    auditLogEntries?: number;
+    /**
+     * Called with every decision, before it is returned.
+     *
+     * The in-memory log is a convenience, not an audit trail: it dies with the
+     * process. This hook is where a real one is written. It is invoked
+     * synchronously and its exceptions are swallowed — a logging sink must not
+     * be able to change a verdict, in either direction.
+     */
+    onDecision?: (decision: AgentDecision) => void;
+}
+export interface AssessAgentTransactionOptions extends CallOptions {
+    /**
+     * A per-call restriction. It can only *narrow* — see `narrowPolicy`. There
+     * is no parameter anywhere in this class that widens a policy, which is what
+     * makes "the agent cannot raise its own limits" a property of the code
+     * rather than a rule someone has to remember.
+     */
+    restrict?: AgentPolicy;
+    /** An assessment the caller already holds, to avoid a second round trip. */
+    assessment?: Assessment;
+    now?: Date;
+}
+interface AuditEntry {
+    decision: AgentDecision;
+    outcome?: AgentOutcomeRecord;
+}
+export declare class AgentGuard {
+    private readonly protect;
+    private readonly sealed;
+    private readonly ledgerImpl;
+    private readonly reserving;
+    private readonly auditEntries;
+    private readonly auditLimit;
+    private readonly onDecision;
+    constructor(config: AgentGuardConfig);
+    /** The policy in force. Frozen — reading it is safe, changing it is impossible. */
+    get policy(): SealedPolicy;
+    /** Configurations that are legal but worth an operator's attention. */
+    get policyWarnings(): readonly string[];
+    /**
+     * Whether admitted actions hold budget before they execute.
+     *
+     * False when the guard was given a read-only usage source. Cumulative caps
+     * then count settled history only, so two actions that each fit under the
+     * cap can both be admitted and together exceed it. Exposed rather than
+     * assumed, because the difference is invisible until it costs something.
+     */
+    get reservesBudget(): boolean;
+    /**
+     * Assess a proposed action and decide whether the agent may sign it.
+     *
+     * Screening happens first and always — including when a local rule has
+     * already failed. A record saying an action exceeded its value cap, while
+     * omitting that its counterparty was confirmed malicious, would send an
+     * operator to raise the cap and ship the same hole.
+     *
+     * On `allow` or `require_human_approval` the action's value and its slot in
+     * the rate window are held immediately; call `confirm()` when it lands or
+     * `release()` when it does not. The hold is taken synchronously in the same
+     * turn as the evaluation, so two concurrent calls in one process cannot both
+     * pass a cap that only one of them fits under. Across processes they can —
+     * see `ledger.ts`, which says so plainly.
+     */
+    assessAgentTransaction(action: AgentAction, options?: AssessAgentTransactionOptions): Promise<AgentDecision>;
+    /**
+     * Decide without going to the network.
+     *
+     * For an operator replaying a decision against a different policy, and for
+     * an agent runtime that already holds an assessment. It applies the same
+     * rules; what it cannot do is discover that a counterparty was labelled
+     * since the assessment was taken.
+     */
+    evaluate(action: AgentAction, options?: {
+        assessment?: Assessment;
+        assessmentUnavailable?: string;
+        restrict?: AgentPolicy;
+        now?: Date;
+    }): AgentDecision;
+    /** The agent signed and broadcast it. The held value becomes committed. */
+    confirm(decisionId: string, options?: {
+        txHash?: string;
+        now?: Date;
+    }): AgentOutcomeRecord | null;
+    /** The agent did not proceed. The held value returns to the budget. */
+    release(decisionId: string, options?: {
+        note?: string;
+        now?: Date;
+    }): AgentOutcomeRecord | null;
+    /**
+     * Explain a decision, by id or by value.
+     *
+     * Returns `null` for an id this process never made or no longer holds —
+     * stated rather than reconstructed, because an explanation assembled from a
+     * decision that is no longer in hand is a guess wearing a record's clothes.
+     */
+    explain(decision: AgentDecision | string): AgentActionExplanation | null;
+    /**
+     * Recent decisions, newest last.
+     *
+     * In memory and bounded; it does not survive a restart. Use `onDecision` for
+     * a trail that does. Saying which of the two this is matters — an operator
+     * who believes this is the audit log will discover otherwise at the worst
+     * possible moment.
+     */
+    auditLog(filter?: {
+        agentId?: string;
+        verdict?: AgentDecision['verdict'];
+    }): AuditEntry[];
+    /**
+     * A guard for a narrower task, sharing this one's ledger and client.
+     *
+     * The shared ledger is the point: a sub-task that spends against a tighter
+     * per-task cap still spends against the agent's daily one.
+     */
+    withPolicy(restriction: AgentPolicy): AgentGuard;
+    /**
+     * Route the action to the right Protect endpoint.
+     *
+     * An approval is assessed on its spender *and its allowance together*,
+     * which is a different question from "is this transaction dangerous" and
+     * the one an unlimited approval turns on.
+     */
+    private screen;
+    private record;
+    private attachOutcome;
+}
+/**
+ * Distinguish "Decentrys answered, and found nothing" from "Decentrys did not
+ * answer".
+ *
+ * Protect never throws: an unreachable service produces an assessment whose
+ * `unknowns` say so. Both of those are `NO_CRITICAL_RISK_DETECTED` on the
+ * surface, and for an autonomous signer treating the second as the first is
+ * the whole failure — it is a clean bill of health issued by an outage.
+ */
+export declare function unavailableReason(assessment: Assessment | undefined): string | undefined;
+export {};
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EACL,SAAS,EAAE,KAAK,UAAU,EAAE,KAAK,WAAW,EAAwB,KAAK,SAAS,EAClF,KAAK,SAAS,EACf,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3F,OAAO,EAAE,KAAK,YAAY,EAA+C,MAAM,UAAU,CAAC;AAC1F,OAAO,EAC6B,KAAK,UAAU,EAAE,KAAK,iBAAiB,EAC1E,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,KAAK,sBAAsB,EAAsB,MAAM,WAAW,CAAC;AAE5E,eAAO,MAAM,iBAAiB,UAAU,CAAC;AAIzC,MAAM,WAAW,gBAAgB;IAC/B;;;;;;OAMG;IACH,MAAM,EAAE,YAAY,CAAC;IACrB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,sEAAsE;IACtE,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,UAAU,GAAG,iBAAiB,CAAC;IACxC,2EAA2E;IAC3E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;CAChD;AAED,MAAM,WAAW,6BAA8B,SAAQ,WAAW;IAChE;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAED,UAAU,UAAU;IAClB,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,CAAC,EAAE,kBAAkB,CAAC;CAC9B;AAED,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAY;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAa;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2B;IACrD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkD;gBAEjE,MAAM,EAAE,gBAAgB;IAuCpC,mFAAmF;IACnF,IAAI,MAAM,IAAI,YAAY,CAEzB;IAED,uEAAuE;IACvE,IAAI,cAAc,IAAI,SAAS,MAAM,EAAE,CAEtC;IAED;;;;;;;OAOG;IACH,IAAI,cAAc,IAAI,OAAO,CAE5B;IAMD;;;;;;;;;;;;;;OAcG;IACG,sBAAsB,CAC1B,MAAM,EAAE,WAAW,EAAE,OAAO,GAAE,6BAAkC,GAC/D,OAAO,CAAC,aAAa,CAAC;IAwCzB;;;;;;;OAOG;IACH,QAAQ,CACN,MAAM,EAAE,WAAW,EACnB,OAAO,GAAE;QAAE,UAAU,CAAC,EAAE,UAAU,CAAC;QAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,WAAW,CAAC;QAAC,GAAG,CAAC,EAAE,IAAI,CAAA;KAAO,GAC5G,aAAa;IAoBhB,2EAA2E;IAC3E,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,IAAI,CAAA;KAAO,GAAG,kBAAkB,GAAG,IAAI;IAMrG,uEAAuE;IACvE,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,IAAI,CAAA;KAAO,GAAG,kBAAkB,GAAG,IAAI;IAUnG;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,GAAG,sBAAsB,GAAG,IAAI;IAMxE;;;;;;;OAOG;IACH,QAAQ,CAAC,MAAM,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,CAAA;KAAO,GAAG,UAAU,EAAE;IAO7F;;;;;OAKG;IACH,UAAU,CAAC,WAAW,EAAE,WAAW,GAAG,UAAU;IAchD;;;;;;OAMG;YACW,MAAM;IA6BpB,OAAO,CAAC,MAAM;IAYd,OAAO,CAAC,aAAa;CAItB;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,UAAU,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAIxF"}

package/dist/client.js

@@ -0,0 +1,303 @@
+"use strict";
+/**
+ * AgentGuard — the client an operator wires in front of an agent.
+ *
+ * The contract differs from both of its neighbours, and the difference is the
+ * product.
+ *
+ *  - **Protect never throws and never blocks.** It sits between a person and a
+ *    signing screen; a security service having a bad minute must not cost
+ *    someone their transaction, and the person decides.
+ *  - **Sentinel throws.** It is management tooling, and an operator who
+ *    believes they are monitored when they are not is worse off than one who
+ *    saw an error.
+ *  - **AgentGuard returns a verdict, and the verdict can be `deny`.** Nothing
+ *    here throws on a call path either — an exception thrown at an agent is a
+ *    condition it will handle by retrying, or by taking the branch that skips
+ *    the guard. A decision object it must read is harder to route around.
+ *
+ * The one place this does throw is the constructor, on a missing credential or
+ * an unsealed policy. That is a wiring error made by a human at deploy time,
+ * not an event during an agent's run.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentGuard = exports.AGENT_SDK_VERSION = void 0;
+exports.unavailableReason = unavailableReason;
+const protect_1 = require("@decentrys/protect");
+const policy_1 = require("./policy");
+const ledger_1 = require("./ledger");
+const explain_1 = require("./explain");
+exports.AGENT_SDK_VERSION = '0.1.0';
+const DEFAULT_AUDIT_LOG_ENTRIES = 1_000;
+class AgentGuard {
+    protect;
+    sealed;
+    ledgerImpl;
+    reserving;
+    auditEntries = [];
+    auditLimit;
+    onDecision;
+    constructor(config) {
+        if (!config.policy || typeof config.policy !== 'object' || typeof config.policy.fingerprint !== 'string') {
+            throw new Error('AgentGuard: a sealed policy is required. Build one with sealPolicy({ ... }) at wiring time, '
+                + 'from a human-owned configuration — not from anything the agent produces.');
+        }
+        if (config.protect) {
+            this.protect = config.protect;
+        }
+        else if (config.apiKey || config.transport) {
+            const protectConfig = {
+                apiKey: config.apiKey ?? 'transport-provided',
+                // Protect's own failMode only shapes the wording of an unavailable
+                // assessment; AgentGuard's `failMode` decides what actually happens.
+                // Pinning it to `open` keeps the two from being applied twice.
+                failMode: 'open',
+                ...(config.baseUrl === undefined ? {} : { baseUrl: config.baseUrl }),
+                ...(config.timeoutMs === undefined ? {} : { timeoutMs: config.timeoutMs }),
+                ...(config.retries === undefined ? {} : { retries: config.retries }),
+                ...(config.fetch === undefined ? {} : { fetch: config.fetch }),
+                ...(config.transport === undefined ? {} : { transport: config.transport }),
+            };
+            this.protect = new protect_1.Decentrys(protectConfig);
+        }
+        else {
+            throw new Error('AgentGuard: pass an apiKey or an existing Decentrys client. Screening a counterparty is the '
+                + 'part of this that no local policy can do — an allowlist cannot tell you the address on it '
+                + 'was labelled malicious yesterday.');
+        }
+        this.sealed = config.policy;
+        this.ledgerImpl = config.ledger ?? new ledger_1.SpendLedger();
+        this.reserving = (0, ledger_1.isReservationLedger)(this.ledgerImpl) ? this.ledgerImpl : null;
+        this.auditLimit = config.auditLogEntries ?? DEFAULT_AUDIT_LOG_ENTRIES;
+        this.onDecision = config.onDecision;
+    }
+    /** The policy in force. Frozen — reading it is safe, changing it is impossible. */
+    get policy() {
+        return this.sealed;
+    }
+    /** Configurations that are legal but worth an operator's attention. */
+    get policyWarnings() {
+        return this.sealed.warnings;
+    }
+    /**
+     * Whether admitted actions hold budget before they execute.
+     *
+     * False when the guard was given a read-only usage source. Cumulative caps
+     * then count settled history only, so two actions that each fit under the
+     * cap can both be admitted and together exceed it. Exposed rather than
+     * assumed, because the difference is invisible until it costs something.
+     */
+    get reservesBudget() {
+        return this.reserving !== null;
+    }
+    // -------------------------------------------------------------------------
+    // The main path
+    // -------------------------------------------------------------------------
+    /**
+     * Assess a proposed action and decide whether the agent may sign it.
+     *
+     * Screening happens first and always — including when a local rule has
+     * already failed. A record saying an action exceeded its value cap, while
+     * omitting that its counterparty was confirmed malicious, would send an
+     * operator to raise the cap and ship the same hole.
+     *
+     * On `allow` or `require_human_approval` the action's value and its slot in
+     * the rate window are held immediately; call `confirm()` when it lands or
+     * `release()` when it does not. The hold is taken synchronously in the same
+     * turn as the evaluation, so two concurrent calls in one process cannot both
+     * pass a cap that only one of them fits under. Across processes they can —
+     * see `ledger.ts`, which says so plainly.
+     */
+    async assessAgentTransaction(action, options = {}) {
+        const policy = options.restrict ? (0, policy_1.narrowPolicy)(this.sealed, options.restrict) : this.sealed;
+        const decisionId = (0, policy_1.newDecisionId)();
+        let assessment = options.assessment;
+        if (!assessment) {
+            assessment = await this.screen(action, options);
+        }
+        const unavailable = unavailableReason(assessment);
+        // Everything from here down is synchronous. That is deliberate: an `await`
+        // between the evaluation and the reservation is the gap through which an
+        // agent's parallel calls each see the same untouched budget.
+        const decision = (0, policy_1.evaluatePolicy)({
+            action,
+            policy,
+            assessment: unavailable ? null : assessment,
+            ...(unavailable === undefined ? {} : { assessmentUnavailable: unavailable }),
+            usage: this.ledgerImpl,
+            decisionId,
+            ...(options.now === undefined ? {} : { now: options.now }),
+        });
+        if (decision.verdict !== 'deny' && this.reserving) {
+            const reservation = this.reserving.reserve({
+                decisionId,
+                agentId: action.agentId,
+                // Reaching here with no stated value means no value-based rule was
+                // configured; if one had been, this would already be a denial.
+                valueUsd: action.valueUsd ?? 0,
+                ...(action.idempotencyKey === undefined ? {} : { idempotencyKey: action.idempotencyKey }),
+                ...(options.now === undefined ? {} : { now: options.now }),
+            });
+            decision.reservationId = reservation.decisionId;
+        }
+        this.record(decision);
+        return decision;
+    }
+    /**
+     * Decide without going to the network.
+     *
+     * For an operator replaying a decision against a different policy, and for
+     * an agent runtime that already holds an assessment. It applies the same
+     * rules; what it cannot do is discover that a counterparty was labelled
+     * since the assessment was taken.
+     */
+    evaluate(action, options = {}) {
+        const policy = options.restrict ? (0, policy_1.narrowPolicy)(this.sealed, options.restrict) : this.sealed;
+        const decision = (0, policy_1.evaluatePolicy)({
+            action,
+            policy,
+            assessment: options.assessment ?? null,
+            ...(options.assessment
+                ? {}
+                : { assessmentUnavailable: options.assessmentUnavailable ?? 'no assessment was supplied to evaluate()' }),
+            usage: this.ledgerImpl,
+            ...(options.now === undefined ? {} : { now: options.now }),
+        });
+        this.record(decision);
+        return decision;
+    }
+    // -------------------------------------------------------------------------
+    // Settling
+    // -------------------------------------------------------------------------
+    /** The agent signed and broadcast it. The held value becomes committed. */
+    confirm(decisionId, options = {}) {
+        const outcome = this.reserving?.confirm(decisionId, options) ?? null;
+        if (outcome)
+            this.attachOutcome(outcome);
+        return outcome;
+    }
+    /** The agent did not proceed. The held value returns to the budget. */
+    release(decisionId, options = {}) {
+        const outcome = this.reserving?.release(decisionId, options) ?? null;
+        if (outcome)
+            this.attachOutcome(outcome);
+        return outcome;
+    }
+    // -------------------------------------------------------------------------
+    // The trail
+    // -------------------------------------------------------------------------
+    /**
+     * Explain a decision, by id or by value.
+     *
+     * Returns `null` for an id this process never made or no longer holds —
+     * stated rather than reconstructed, because an explanation assembled from a
+     * decision that is no longer in hand is a guess wearing a record's clothes.
+     */
+    explain(decision) {
+        if (typeof decision !== 'string')
+            return (0, explain_1.explainAgentAction)(decision);
+        const entry = this.auditEntries.find((e) => e.decision.decisionId === decision);
+        return entry ? (0, explain_1.explainAgentAction)(entry.decision) : null;
+    }
+    /**
+     * Recent decisions, newest last.
+     *
+     * In memory and bounded; it does not survive a restart. Use `onDecision` for
+     * a trail that does. Saying which of the two this is matters — an operator
+     * who believes this is the audit log will discover otherwise at the worst
+     * possible moment.
+     */
+    auditLog(filter = {}) {
+        return this.auditEntries
+            .filter((e) => (!filter.agentId || e.decision.agentId === filter.agentId))
+            .filter((e) => (!filter.verdict || e.decision.verdict === filter.verdict))
+            .map((e) => ({ decision: e.decision, ...(e.outcome ? { outcome: e.outcome } : {}) }));
+    }
+    /**
+     * A guard for a narrower task, sharing this one's ledger and client.
+     *
+     * The shared ledger is the point: a sub-task that spends against a tighter
+     * per-task cap still spends against the agent's daily one.
+     */
+    withPolicy(restriction) {
+        return new AgentGuard({
+            policy: (0, policy_1.narrowPolicy)(this.sealed, restriction),
+            protect: this.protect,
+            ledger: this.ledgerImpl,
+            auditLogEntries: this.auditLimit,
+            ...(this.onDecision === undefined ? {} : { onDecision: this.onDecision }),
+        });
+    }
+    // -------------------------------------------------------------------------
+    // Internals
+    // -------------------------------------------------------------------------
+    /**
+     * Route the action to the right Protect endpoint.
+     *
+     * An approval is assessed on its spender *and its allowance together*,
+     * which is a different question from "is this transaction dangerous" and
+     * the one an unlimited approval turns on.
+     */
+    async screen(action, options) {
+        const call = {
+            ...(options.signal === undefined ? {} : { signal: options.signal }),
+            ...(options.skipCache === undefined ? {} : { skipCache: options.skipCache }),
+        };
+        if (action.type === 'approve' && action.token && action.to) {
+            const result = await this.protect.screenApproval({
+                chain: action.chain,
+                owner: action.from,
+                spender: action.to,
+                token: action.token,
+                ...(action.approvalAmount === undefined ? {} : { amount: action.approvalAmount }),
+            }, call);
+            return result.assessment;
+        }
+        const result = await this.protect.assessTransaction({
+            chain: action.chain,
+            from: action.from,
+            ...(action.to === undefined ? {} : { to: action.to }),
+            ...(action.value === undefined ? {} : { value: action.value }),
+            ...(action.data === undefined ? {} : { data: action.data }),
+            ...(action.raw === undefined ? {} : { raw: action.raw }),
+            ...(action.origin === undefined ? {} : { origin: action.origin }),
+        }, call);
+        return result.assessment;
+    }
+    record(decision) {
+        this.auditEntries.push({ decision });
+        while (this.auditEntries.length > this.auditLimit)
+            this.auditEntries.shift();
+        if (!this.onDecision)
+            return;
+        try {
+            this.onDecision(decision);
+        }
+        catch {
+            // A sink that throws must not turn a deny into an exception the agent
+            // handles by retrying, nor an allow into a failure. The decision stands.
+        }
+    }
+    attachOutcome(outcome) {
+        const entry = this.auditEntries.find((e) => e.decision.decisionId === outcome.decisionId);
+        if (entry)
+            entry.outcome = outcome;
+    }
+}
+exports.AgentGuard = AgentGuard;
+/**
+ * Distinguish "Decentrys answered, and found nothing" from "Decentrys did not
+ * answer".
+ *
+ * Protect never throws: an unreachable service produces an assessment whose
+ * `unknowns` say so. Both of those are `NO_CRITICAL_RISK_DETECTED` on the
+ * surface, and for an autonomous signer treating the second as the first is
+ * the whole failure — it is a clean bill of health issued by an outage.
+ */
+function unavailableReason(assessment) {
+    if (!assessment)
+        return 'no assessment was obtained';
+    const unknown = assessment.unknowns.find((u) => u.reason === 'PROVIDER_UNAVAILABLE');
+    return unknown ? unknown.statement : undefined;
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;AA+WH,8CAIC;AAjXD,gDAG4B;AAG5B,qCAA0F;AAC1F,qCAEkB;AAClB,uCAA4E;AAE/D,QAAA,iBAAiB,GAAG,OAAO,CAAC;AAEzC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AA4DxC,MAAa,UAAU;IACJ,OAAO,CAAY;IACnB,MAAM,CAAe;IACrB,UAAU,CAAa;IACvB,SAAS,CAA2B;IACpC,YAAY,GAAiB,EAAE,CAAC;IAChC,UAAU,CAAS;IACnB,UAAU,CAAkD;IAE7E,YAAY,MAAwB;QAClC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YACzG,MAAM,IAAI,KAAK,CACb,8FAA8F;kBAC5F,0EAA0E,CAC7E,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAChC,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YAC7C,MAAM,aAAa,GAAoB;gBACrC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,oBAAoB;gBAC7C,mEAAmE;gBACnE,qEAAqE;gBACrE,+DAA+D;gBAC/D,QAAQ,EAAE,MAAM;gBAChB,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpE,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC1E,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC9D,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;aAC3E,CAAC;YACF,IAAI,CAAC,OAAO,GAAG,IAAI,mBAAS,CAAC,aAAa,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CACb,8FAA8F;kBAC5F,4FAA4F;kBAC5F,mCAAmC,CACtC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,oBAAW,EAAE,CAAC;QACrD,IAAI,CAAC,SAAS,GAAG,IAAA,4BAAmB,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/E,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,eAAe,IAAI,yBAAyB,CAAC;QACtE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACtC,CAAC;IAED,mFAAmF;IACnF,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,uEAAuE;IACvE,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAED;;;;;;;OAOG;IACH,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;IACjC,CAAC;IAED,4EAA4E;IAC5E,gBAAgB;IAChB,4EAA4E;IAE5E;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,sBAAsB,CAC1B,MAAmB,EAAE,UAAyC,EAAE;QAEhE,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAA,qBAAY,EAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAC5F,MAAM,UAAU,GAAG,IAAA,sBAAa,GAAE,CAAC;QAEnC,IAAI,UAAU,GAA2B,OAAO,CAAC,UAAU,CAAC;QAC5D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,WAAW,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAElD,2EAA2E;QAC3E,yEAAyE;QACzE,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,IAAA,uBAAc,EAAC;YAC9B,MAAM;YACN,MAAM;YACN,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU;YAC3C,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,WAAW,EAAE,CAAC;YAC5E,KAAK,EAAE,IAAI,CAAC,UAAU;YACtB,UAAU;YACV,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;SAC3D,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAClD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBACzC,UAAU;gBACV,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,mEAAmE;gBACnE,+DAA+D;gBAC/D,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;gBAC9B,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;gBACzF,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;aAC3D,CAAC,CAAC;YACH,QAAQ,CAAC,aAAa,GAAG,WAAW,CAAC,UAAU,CAAC;QAClD,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;;OAOG;IACH,QAAQ,CACN,MAAmB,EACnB,UAA2G,EAAE;QAE7G,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAA,qBAAY,EAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAC5F,MAAM,QAAQ,GAAG,IAAA,uBAAc,EAAC;YAC9B,MAAM;YACN,MAAM;YACN,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI;YACtC,GAAG,CAAC,OAAO,CAAC,UAAU;gBACpB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,qBAAqB,EAAE,OAAO,CAAC,qBAAqB,IAAI,0CAA0C,EAAE,CAAC;YAC3G,KAAK,EAAE,IAAI,CAAC,UAAU;YACtB,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;SAC3D,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,4EAA4E;IAC5E,WAAW;IACX,4EAA4E;IAE5E,2EAA2E;IAC3E,OAAO,CAAC,UAAkB,EAAE,UAA2C,EAAE;QACvE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC;QACrE,IAAI,OAAO;YAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,uEAAuE;IACvE,OAAO,CAAC,UAAkB,EAAE,UAAyC,EAAE;QACrE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC;QACrE,IAAI,OAAO;YAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,4EAA4E;IAC5E,YAAY;IACZ,4EAA4E;IAE5E;;;;;;OAMG;IACH,OAAO,CAAC,QAAgC;QACtC,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,OAAO,IAAA,4BAAkB,EAAC,QAAQ,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC;QAChF,OAAO,KAAK,CAAC,CAAC,CAAC,IAAA,4BAAkB,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,CAAC;IAED;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAmE,EAAE;QAC5E,OAAO,IAAI,CAAC,YAAY;aACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC;aACzE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC;aACzE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,WAAwB;QACjC,OAAO,IAAI,UAAU,CAAC;YACpB,MAAM,EAAE,IAAA,qBAAY,EAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;YAC9C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,IAAI,CAAC,UAAU;YACvB,eAAe,EAAE,IAAI,CAAC,UAAU;YAChC,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;SAC1E,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,YAAY;IACZ,4EAA4E;IAE5E;;;;;;OAMG;IACK,KAAK,CAAC,MAAM,CAAC,MAAmB,EAAE,OAAoB;QAC5D,MAAM,IAAI,GAAgB;YACxB,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;YACnE,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;SAC7E,CAAC;QAEF,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;gBAC/C,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,KAAK,EAAE,MAAM,CAAC,IAAI;gBAClB,OAAO,EAAE,MAAM,CAAC,EAAE;gBAClB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;aAClF,EAAE,IAAI,CAAC,CAAC;YACT,OAAO,MAAM,CAAC,UAAU,CAAC;QAC3B,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;YAClD,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;YACrD,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;YAC9D,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;YAC3D,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;YACxD,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;SAClE,EAAE,IAAI,CAAC,CAAC;QACT,OAAO,MAAM,CAAC,UAAU,CAAC;IAC3B,CAAC;IAEO,MAAM,CAAC,QAAuB;QACpC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU;YAAE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC7E,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO;QAC7B,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,yEAAyE;QAC3E,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,OAA2B;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1F,IAAI,KAAK;YAAE,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;IACrC,CAAC;CACF;AAxRD,gCAwRC;AAED;;;;;;;;GAQG;AACH,SAAgB,iBAAiB,CAAC,UAAkC;IAClE,IAAI,CAAC,UAAU;QAAE,OAAO,4BAA4B,CAAC;IACrD,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,sBAAsB,CAAC,CAAC;IACrF,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC"}

package/dist/explain.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Turning a decision into something a person can be held to.
+ *
+ * The question this file exists to answer is not "why was that blocked" — a
+ * block explains itself, loudly, at the moment it happens. It is **"why was
+ * that allowed"**, asked weeks later by someone looking at a drained account.
+ * A record that lists only what went wrong cannot answer it, so
+ * `explainAgentAction` renders every rule that was applied, the bound it
+ * carried and the value it saw, alongside the axes on which the policy set no
+ * bound at all. An allow with nothing behind it reads, correctly, as an allow
+ * with nothing behind it.
+ *
+ * Nothing here recomputes anything. The explanation is a rendering of the
+ * decision record and cannot disagree with it — an explanation that is
+ * generated separately from the decision eventually explains a decision that
+ * was not made.
+ */
+import type { AgentDecision, AgentVerdict, RuleEvaluation } from './model';
+export interface AgentActionExplanation {
+    decisionId: string;
+    agentId: string;
+    verdict: AgentVerdict;
+    /** One sentence. What happened and, at the top level, why. */
+    headline: string;
+    /** The failing or escalating rules, in the words they recorded. */
+    because: string[];
+    /**
+     * Every rule that ran, passes included. This is the part that makes an
+     * allow explainable rather than merely unobjected-to.
+     */
+    rulesApplied: RuleEvaluation[];
+    /**
+     * Axes this policy left unbounded.
+     *
+     * An operator reading an allow deserves to know the difference between "the
+     * rate ceiling was checked and this was the third action this minute" and
+     * "there is no rate ceiling". Both produce a pass in the eyes of a summary;
+     * only one of them is a control.
+     */
+    unbounded: string[];
+    /**
+     * What would have to change for this to be permitted.
+     *
+     * Addressed to the operator, who is the only party that can change a sealed
+     * policy. The agent can read this and still cannot act on it, which is the
+     * point of `sealPolicy`.
+     */
+    toProceed: string[];
+    /** Enough to reproduce the decision against the same inputs. */
+    provenance: {
+        policyFingerprint: string;
+        policyVersion?: string;
+        actionDigest: string;
+        modelVersion: string;
+        riskModelVersion?: string;
+        riskLevel?: string;
+        decidedAt: string;
+    };
+    /** A plain-text rendering, for a log line, a ticket or a human review queue. */
+    text: string;
+}
+export declare function explainAgentAction(decision: AgentDecision): AgentActionExplanation;
+//# sourceMappingURL=explain.d.ts.map

package/dist/explain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"explain.d.ts","sourceRoot":"","sources":["../src/explain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAe,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAExF,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,YAAY,CAAC;IACtB,8DAA8D;IAC9D,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;;;OAGG;IACH,YAAY,EAAE,cAAc,EAAE,CAAC;IAC/B;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB;;;;;;OAMG;IACH,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,gEAAgE;IAChE,UAAU,EAAE;QACV,iBAAiB,EAAE,MAAM,CAAC;QAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,EAAE,MAAM,CAAC;QACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;CACd;AA8BD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,aAAa,GAAG,sBAAsB,CAyClF"}