@decentrys/protect 0.1.0

package/dist/cache.d.ts

@@ -0,0 +1,41 @@
+/**
+ * A small TTL cache with a bounded size.
+ *
+ * Wallets call `screenAddress` on the same handful of addresses constantly —
+ * the token they always trade, the exchange they always withdraw to, the
+ * router every swap goes through. Serving those from memory is the difference
+ * between a signing screen that appears instantly and one that flashes a
+ * spinner every time.
+ *
+ * Two deliberate limits:
+ *
+ *  - **Bounded.** A long-lived extension background page would otherwise grow
+ *    without end. Eviction is oldest-first, which is right for this shape of
+ *    traffic and costs nothing to maintain.
+ *  - **Short.** Threat intelligence changes. A cached "no critical risk"
+ *    entry that outlives the discovery of a drainer is worse than no cache,
+ *    so the default TTL is measured in minutes, not hours.
+ */
+export interface CacheOptions {
+    ttlMs: number;
+    maxEntries: number;
+    now?: () => number;
+}
+export declare class TtlCache<T> {
+    private readonly options;
+    private readonly entries;
+    private readonly now;
+    constructor(options: CacheOptions);
+    get(key: string): T | undefined;
+    set(key: string, value: T, ttlMs?: number): void;
+    delete(key: string): void;
+    clear(): void;
+    get size(): number;
+}
+/**
+ * Cache keys are built from the request, never from a hash of a stringified
+ * object: two subjects that differ only in a field the key forgot would
+ * otherwise share an assessment, and one of them would be wrong.
+ */
+export declare function cacheKey(kind: string, parts: Array<string | number | undefined | null>): string;
+//# sourceMappingURL=cache.d.ts.map

package/dist/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../src/cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAOH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,qBAAa,QAAQ,CAAC,CAAC;IAIT,OAAO,CAAC,QAAQ,CAAC,OAAO;IAHpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+B;IACvD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAEN,OAAO,EAAE,YAAY;IAIlD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS;IAe/B,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,SAAqB,GAAG,IAAI;IAa5D,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIzB,KAAK,IAAI,IAAI;IAIb,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,GAAG,MAAM,CAE/F"}

package/dist/cache.js

@@ -0,0 +1,75 @@
+"use strict";
+/**
+ * A small TTL cache with a bounded size.
+ *
+ * Wallets call `screenAddress` on the same handful of addresses constantly —
+ * the token they always trade, the exchange they always withdraw to, the
+ * router every swap goes through. Serving those from memory is the difference
+ * between a signing screen that appears instantly and one that flashes a
+ * spinner every time.
+ *
+ * Two deliberate limits:
+ *
+ *  - **Bounded.** A long-lived extension background page would otherwise grow
+ *    without end. Eviction is oldest-first, which is right for this shape of
+ *    traffic and costs nothing to maintain.
+ *  - **Short.** Threat intelligence changes. A cached "no critical risk"
+ *    entry that outlives the discovery of a drainer is worse than no cache,
+ *    so the default TTL is measured in minutes, not hours.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TtlCache = void 0;
+exports.cacheKey = cacheKey;
+class TtlCache {
+    options;
+    entries = new Map();
+    now;
+    constructor(options) {
+        this.options = options;
+        this.now = options.now ?? (() => Date.now());
+    }
+    get(key) {
+        const entry = this.entries.get(key);
+        if (!entry)
+            return undefined;
+        if (entry.expiresAt <= this.now()) {
+            this.entries.delete(key);
+            return undefined;
+        }
+        // Re-insert so recency ordering reflects use, not just insertion.
+        this.entries.delete(key);
+        this.entries.set(key, entry);
+        return entry.value;
+    }
+    set(key, value, ttlMs = this.options.ttlMs) {
+        if (ttlMs <= 0 || this.options.maxEntries <= 0)
+            return;
+        this.entries.delete(key);
+        this.entries.set(key, { value, expiresAt: this.now() + ttlMs });
+        while (this.entries.size > this.options.maxEntries) {
+            const oldest = this.entries.keys().next();
+            if (oldest.done)
+                break;
+            this.entries.delete(oldest.value);
+        }
+    }
+    delete(key) {
+        this.entries.delete(key);
+    }
+    clear() {
+        this.entries.clear();
+    }
+    get size() {
+        return this.entries.size;
+    }
+}
+exports.TtlCache = TtlCache;
+/**
+ * Cache keys are built from the request, never from a hash of a stringified
+ * object: two subjects that differ only in a field the key forgot would
+ * otherwise share an assessment, and one of them would be wrong.
+ */
+function cacheKey(kind, parts) {
+    return [kind, ...parts.map((p) => (p === undefined || p === null ? '' : String(p)))].join('|');
+}
+//# sourceMappingURL=cache.js.map

package/dist/cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../src/cache.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;AAmEH,4BAEC;AAxDD,MAAa,QAAQ;IAIU;IAHZ,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IACtC,GAAG,CAAe;IAEnC,YAA6B,OAAqB;QAArB,YAAO,GAAP,OAAO,CAAc;QAChD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,GAAG,CAAC,GAAW;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAE7B,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,kEAAkE;QAClE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC,KAAK,CAAC;IACrB,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,KAAQ,EAAE,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK;QACnD,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC;YAAE,OAAO;QAEvD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QAEhE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;YAC1C,IAAI,MAAM,CAAC,IAAI;gBAAE,MAAM;YACvB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;CACF;AA/CD,4BA+CC;AAED;;;;GAIG;AACH,SAAgB,QAAQ,CAAC,IAAY,EAAE,KAAgD;IACrF,OAAO,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjG,CAAC"}

package/dist/classify.d.ts

@@ -0,0 +1,58 @@
+import { type Assessment, type HistoryStatus, type ObservedFact, type RiskLevel, type TechnicalCapability, type ThreatSignal, type UnknownField } from './model';
+/**
+ * Below this, a signal is reported but cannot raise the level on its own.
+ *
+ * A 30%-confidence four-hop association is a real observation and belongs in
+ * the response. It is not grounds for telling a user their transaction is
+ * dangerous.
+ */
+/**
+ * Exported so a renderer cannot drift from the classifier.
+ *
+ * `@decentrys/ui` decides whether to show a signal as one that counted, and
+ * it has to use the same floor the classifier used to decide whether it did.
+ * Two copies of this number that disagree would put a signal in the "did not
+ * raise the level" list while it was in fact raising it.
+ */
+export declare const MIN_RAISING_CONFIDENCE = 0.5;
+export interface ClassifyInput {
+    facts?: ObservedFact[];
+    capabilities?: TechnicalCapability[];
+    threatSignals?: ThreatSignal[];
+    unknowns?: UnknownField[];
+    historyStatus?: HistoryStatus;
+    /** 0–100. Coverage, not danger. */
+    historyConfidence?: number;
+    now?: Date;
+}
+export declare function classify(input: ClassifyInput): Assessment;
+/**
+ * How an integrator turns an assessment into behaviour.
+ *
+ * The SDK never blocks on its own. Decentrys returns intelligence; the wallet
+ * or exchange decides policy, and a consumer wallet and an institutional
+ * custodian will reasonably decide differently.
+ */
+export type PolicyAction = 'allow' | 'inform' | 'warn' | 'warn_strong' | 'require_confirmation' | 'block';
+export type Policy = Partial<Record<RiskLevel, PolicyAction>>;
+/**
+ * Transparency over blocking.
+ *
+ * The default blocks only what is confirmed malicious with analyst-verified
+ * evidence. Everything else informs or warns, leaving the decision with the
+ * person whose funds are at stake.
+ */
+export declare const DEFAULT_POLICY: Required<Policy>;
+export declare function applyPolicy(assessment: Assessment, policy?: Policy): {
+    action: PolicyAction;
+    reason: string;
+};
+/**
+ * What the SDK does when Decentrys is unreachable.
+ *
+ * A wallet must not become unusable because a security service is down.
+ * `warn` is the consumer default; an institution may choose `closed`.
+ */
+export type FailMode = 'open' | 'warn' | 'closed';
+export declare function unavailableAssessment(failMode: FailMode, reason: string, now?: Date): Assessment;
+//# sourceMappingURL=classify.d.ts.map

package/dist/classify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify.d.ts","sourceRoot":"","sources":["../src/classify.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,UAAU,EAAE,KAAK,aAAa,EAAE,KAAK,YAAY,EAAE,KAAK,SAAS,EACnD,KAAK,mBAAmB,EAAE,KAAK,YAAY,EAC9D,KAAK,YAAY,EAClB,MAAM,SAAS,CAAC;AAwBjB;;;;;;GAMG;AACH;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;IACvB,YAAY,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACrC,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC;IAC/B,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC;IAC1B,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,mCAAmC;IACnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,UAAU,CA2HzD;AAqED;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,aAAa,GAAG,sBAAsB,GAAG,OAAO,CAAC;AAE1G,MAAM,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AAE9D;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC,MAAM,CAQ3C,CAAC;AAEF,wBAAgB,WAAW,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,GAAE,MAAW,GAAG;IACxE,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB,CAMA;AAED;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAC;AAElD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAa,GAAG,UAAU,CA0BtG"}

package/dist/classify.js

@@ -0,0 +1,269 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_POLICY = exports.MIN_RAISING_CONFIDENCE = void 0;
+exports.classify = classify;
+exports.applyPolicy = applyPolicy;
+exports.unavailableAssessment = unavailableAssessment;
+const model_1 = require("./model");
+/**
+ * Classification.
+ *
+ * The whole point of this function is what it *refuses* to do. Age, audit
+ * status, liquidity, holder concentration, deployer history and anonymity are
+ * inputs to `facts` and to `historyConfidence` — and to nothing else. There is
+ * no path in this file by which any of them raises a risk level.
+ *
+ * Risk comes from two places only:
+ *
+ *  - **Capabilities**, which can reach CAUTION. A contract that can mint
+ *    unlimited supply deserves attention; it does not deserve an accusation.
+ *  - **Threat signals**, which are the only way past CAUTION, and which
+ *    require evidence.
+ *
+ * `KNOWN_MALICIOUS` additionally requires analyst-verified evidence, because
+ * it is the one output that is a public accusation about a third party.
+ */
+/** Signals that are no longer live cannot raise a level. */
+const RAISING_STATUSES = ['ACTIVE'];
+/**
+ * Below this, a signal is reported but cannot raise the level on its own.
+ *
+ * A 30%-confidence four-hop association is a real observation and belongs in
+ * the response. It is not grounds for telling a user their transaction is
+ * dangerous.
+ */
+/**
+ * Exported so a renderer cannot drift from the classifier.
+ *
+ * `@decentrys/ui` decides whether to show a signal as one that counted, and
+ * it has to use the same floor the classifier used to decide whether it did.
+ * Two copies of this number that disagree would put a signal in the "did not
+ * raise the level" list while it was in fact raising it.
+ */
+exports.MIN_RAISING_CONFIDENCE = 0.5;
+function classify(input) {
+    const now = input.now ?? new Date();
+    const facts = input.facts ?? [];
+    const capabilities = input.capabilities ?? [];
+    const unknowns = input.unknowns ?? [];
+    const historyStatus = input.historyStatus ?? 'LIMITED';
+    // Expiry is applied here rather than trusted from the caller, so a stale
+    // signal cannot keep raising a level because nobody re-ran a job.
+    const threatSignals = (input.threatSignals ?? []).map((signal) => applyDecay(signal, now));
+    const raising = threatSignals.filter((s) => RAISING_STATUSES.includes(s.status) && s.confidence >= exports.MIN_RAISING_CONFIDENCE);
+    const explanation = [];
+    let level = 'NO_CRITICAL_RISK_DETECTED';
+    // --- 1. Confirmed malicious -----------------------------------------------
+    // The only claim that accuses. It needs a human behind it.
+    const confirmed = raising.filter((s) => s.severity === 'CRITICAL' && s.evidence.some((e) => e.analystVerified));
+    const confirmedMalicious = confirmed.length > 0;
+    if (confirmedMalicious) {
+        level = 'KNOWN_MALICIOUS';
+        for (const signal of confirmed) {
+            explanation.push(`${signal.explanation} (verified by an analyst)`);
+        }
+    }
+    else {
+        // --- 2. Threat signals --------------------------------------------------
+        const critical = raising.filter((s) => s.severity === 'CRITICAL');
+        const high = raising.filter((s) => s.severity === 'HIGH');
+        const medium = raising.filter((s) => s.severity === 'MEDIUM');
+        if (critical.length > 0) {
+            level = 'CRITICAL_THREAT';
+            for (const s of critical)
+                explanation.push(s.explanation);
+        }
+        else if (high.length > 0) {
+            level = high.length > 1 ? 'HIGH_RISK' : 'ELEVATED_RISK';
+            for (const s of high)
+                explanation.push(s.explanation);
+        }
+        else if (medium.length > 1) {
+            level = 'ELEVATED_RISK';
+            for (const s of medium)
+                explanation.push(s.explanation);
+        }
+        else if (medium.length === 1) {
+            level = 'CAUTION';
+            explanation.push(medium[0].explanation);
+        }
+        // --- 3. Capabilities ----------------------------------------------------
+        // Can reach CAUTION and no further. A capability is what the code can do,
+        // not proof that it will.
+        const significant = capabilities.filter((c) => c.severity === 'SIGNIFICANT');
+        if (significant.length > 0 && rank(level) < rank('CAUTION')) {
+            level = 'CAUTION';
+            for (const c of significant)
+                explanation.push(c.statement);
+        }
+        else if (rank(level) < rank('INFORMATIONAL') && capabilities.length > 0) {
+            level = 'INFORMATIONAL';
+            for (const c of capabilities.slice(0, 3))
+                explanation.push(c.statement);
+        }
+    }
+    // Signals that exist but did not raise the level are still reported, and the
+    // explanation says why they did not — silence would look like we missed them.
+    for (const signal of threatSignals) {
+        if (raising.includes(signal))
+            continue;
+        if (signal.status !== 'ACTIVE') {
+            explanation.push(`${signal.explanation} — this signal is ${signal.status.toLowerCase()} and did not affect the assessment.`);
+        }
+        else if (signal.confidence < exports.MIN_RAISING_CONFIDENCE) {
+            explanation.push(`${signal.explanation} — reported at ${Math.round(signal.confidence * 100)}% confidence, which is too low `
+                + 'to raise the risk level on its own.');
+        }
+    }
+    // --- 4. Facts worth showing make it informational -----------------------
+    // Independent of history. Promoting only for LIMITED history would have made
+    // the level depend on how new the subject is, which is precisely the
+    // behaviour this model exists to refuse — and a test caught it.
+    if (level === 'NO_CRITICAL_RISK_DETECTED' && facts.length > 0) {
+        level = 'INFORMATIONAL';
+    }
+    // Limited history is stated, never scored.
+    if (historyStatus === 'LIMITED' || historyStatus === 'NONE') {
+        explanation.push(model_1.HISTORY_STATUS_MEANING[historyStatus]);
+    }
+    if (unknowns.length > 0) {
+        explanation.push(`${unknowns.length} ${unknowns.length === 1 ? 'attribute is' : 'attributes are'} unknown. `
+            + 'Unknown is reported as unknown; it does not contribute to risk.');
+    }
+    if (explanation.length === 0) {
+        explanation.push(model_1.RISK_LEVEL_MEANING[level]);
+    }
+    return {
+        riskLevel: level,
+        confirmedMalicious,
+        confidence: confidenceFor(level, raising, historyStatus),
+        historyStatus,
+        facts,
+        capabilities,
+        threatSignals,
+        unknowns,
+        components: {
+            technicalRisk: technicalRisk(capabilities),
+            behavioralRisk: behavioralRisk(raising),
+            threatIntelligenceRisk: threatIntelligenceRisk(raising),
+            // Coverage, reported separately so it cannot be summed into a risk total.
+            historyConfidence: input.historyConfidence ?? historyConfidenceFor(historyStatus),
+        },
+        explanation,
+        modelVersion: model_1.PROTECT_MODEL_VERSION,
+        assessedAt: now.toISOString(),
+    };
+}
+function rank(level) {
+    return [
+        'NO_CRITICAL_RISK_DETECTED', 'INFORMATIONAL', 'CAUTION',
+        'ELEVATED_RISK', 'HIGH_RISK', 'CRITICAL_THREAT', 'KNOWN_MALICIOUS',
+    ].indexOf(level);
+}
+/** Expire a signal whose window has passed, rather than trusting its status. */
+function applyDecay(signal, now) {
+    if (signal.status !== 'ACTIVE')
+        return signal;
+    if (!signal.expiresAt)
+        return signal;
+    return Date.parse(signal.expiresAt) <= now.getTime()
+        ? { ...signal, status: 'STALE' }
+        : signal;
+}
+/**
+ * How sure we are of the *classification*.
+ *
+ * Bounded by the evidence behind it. A clean result on thin history is a
+ * low-confidence clean result, and saying so is the honest thing — but note it
+ * lowers confidence, not raises risk.
+ */
+function confidenceFor(level, raising, history) {
+    if (raising.length > 0) {
+        const best = Math.max(...raising.map((s) => s.confidence));
+        return Number(best.toFixed(2));
+    }
+    switch (history) {
+        case 'ESTABLISHED': return 0.85;
+        case 'MODERATE': return 0.7;
+        case 'LIMITED': return 0.5;
+        default: return 0.35;
+    }
+}
+/** Capabilities only. Contract age contributes nothing, by construction. */
+function technicalRisk(capabilities) {
+    const weight = { INFO: 4, NOTABLE: 12, SIGNIFICANT: 25 };
+    return Math.min(100, capabilities.reduce((sum, c) => sum + weight[c.severity], 0));
+}
+function behavioralRisk(raising) {
+    const weight = { LOW: 5, MEDIUM: 20, HIGH: 40, CRITICAL: 70 };
+    return Math.min(100, raising
+        .filter((s) => s.hops === 0)
+        .reduce((sum, s) => sum + weight[s.severity] * s.confidence, 0));
+}
+function threatIntelligenceRisk(raising) {
+    const weight = { LOW: 5, MEDIUM: 15, HIGH: 35, CRITICAL: 60 };
+    return Math.min(100, raising.reduce((sum, s) => {
+        // Each hop is another inference; weight decays accordingly.
+        const decay = Math.pow(0.6, Math.max(0, s.hops));
+        return sum + weight[s.severity] * s.confidence * decay;
+    }, 0));
+}
+function historyConfidenceFor(status) {
+    switch (status) {
+        case 'ESTABLISHED': return 90;
+        case 'MODERATE': return 60;
+        case 'LIMITED': return 25;
+        default: return 5;
+    }
+}
+/**
+ * Transparency over blocking.
+ *
+ * The default blocks only what is confirmed malicious with analyst-verified
+ * evidence. Everything else informs or warns, leaving the decision with the
+ * person whose funds are at stake.
+ */
+exports.DEFAULT_POLICY = {
+    NO_CRITICAL_RISK_DETECTED: 'allow',
+    INFORMATIONAL: 'inform',
+    CAUTION: 'warn',
+    ELEVATED_RISK: 'warn_strong',
+    HIGH_RISK: 'require_confirmation',
+    CRITICAL_THREAT: 'require_confirmation',
+    KNOWN_MALICIOUS: 'block',
+};
+function applyPolicy(assessment, policy = {}) {
+    const action = policy[assessment.riskLevel] ?? exports.DEFAULT_POLICY[assessment.riskLevel];
+    return {
+        action,
+        reason: assessment.explanation[0] ?? model_1.RISK_LEVEL_MEANING[assessment.riskLevel],
+    };
+}
+function unavailableAssessment(failMode, reason, now = new Date()) {
+    return {
+        riskLevel: 'NO_CRITICAL_RISK_DETECTED',
+        confirmedMalicious: false,
+        confidence: 0,
+        historyStatus: 'NONE',
+        facts: [],
+        capabilities: [],
+        threatSignals: [],
+        unknowns: [{
+                field: 'assessment',
+                reason: 'PROVIDER_UNAVAILABLE',
+                statement: `Decentrys could not be reached: ${reason}. Nothing was checked.`,
+            }],
+        components: { technicalRisk: 0, behavioralRisk: 0, threatIntelligenceRisk: 0, historyConfidence: 0 },
+        explanation: [
+            `Decentrys could not be reached: ${reason}.`,
+            failMode === 'closed'
+                ? 'This deployment is configured to refuse unverified transactions.'
+                : failMode === 'warn'
+                    ? 'No security check was performed. Proceed with the care you would use without any tool.'
+                    : 'No security check was performed.',
+        ],
+        modelVersion: model_1.PROTECT_MODEL_VERSION,
+        assessedAt: now.toISOString(),
+    };
+}
+//# sourceMappingURL=classify.js.map

package/dist/classify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify.js","sourceRoot":"","sources":["../src/classify.ts"],"names":[],"mappings":";;;AAyDA,4BA2HC;AAiGD,kCASC;AAUD,sDA0BC;AAlUD,mCAKiB;AAEjB;;;;;;;;;;;;;;;;;GAiBG;AAEH,4DAA4D;AAC5D,MAAM,gBAAgB,GAAmB,CAAC,QAAQ,CAAC,CAAC;AAEpD;;;;;;GAMG;AACH;;;;;;;GAOG;AACU,QAAA,sBAAsB,GAAG,GAAG,CAAC;AAa1C,SAAgB,QAAQ,CAAC,KAAoB;IAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;IAChC,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;IACtC,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,IAAI,SAAS,CAAC;IAEvD,yEAAyE;IACzE,kEAAkE;IAClE,MAAM,aAAa,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAE3F,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,IAAI,8BAAsB,CACrF,CAAC;IAEF,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,KAAK,GAAc,2BAA2B,CAAC;IAEnD,6EAA6E;IAC7E,2DAA2D;IAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAC9E,CAAC;IACF,MAAM,kBAAkB,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IAEhD,IAAI,kBAAkB,EAAE,CAAC;QACvB,KAAK,GAAG,iBAAiB,CAAC;QAC1B,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;YAC/B,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,2BAA2B,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,2EAA2E;QAC3E,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAE9D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,KAAK,GAAG,iBAAiB,CAAC;YAC1B,KAAK,MAAM,CAAC,IAAI,QAAQ;gBAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAC5D,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC;YACxD,KAAK,MAAM,CAAC,IAAI,IAAI;gBAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACxD,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,KAAK,GAAG,eAAe,CAAC;YACxB,KAAK,MAAM,CAAC,IAAI,MAAM;gBAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,KAAK,GAAG,SAAS,CAAC;YAClB,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAC1C,CAAC;QAED,2EAA2E;QAC3E,0EAA0E;QAC1E,0BAA0B;QAC1B,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC;QAC7E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5D,KAAK,GAAG,SAAS,CAAC;YAClB,KAAK,MAAM,CAAC,IAAI,WAAW;gBAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7D,CAAC;aAAM,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1E,KAAK,GAAG,eAAe,CAAC;YACxB,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,8EAA8E;IAC9E,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,SAAS;QACvC,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,WAAW,CAAC,IAAI,CACd,GAAG,MAAM,CAAC,WAAW,qBAAqB,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,qCAAqC,CAC3G,CAAC;QACJ,CAAC;aAAM,IAAI,MAAM,CAAC,UAAU,GAAG,8BAAsB,EAAE,CAAC;YACtD,WAAW,CAAC,IAAI,CACd,GAAG,MAAM,CAAC,WAAW,kBAAkB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,iCAAiC;kBACzG,qCAAqC,CACxC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,6EAA6E;IAC7E,qEAAqE;IACrE,gEAAgE;IAChE,IAAI,KAAK,KAAK,2BAA2B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,KAAK,GAAG,eAAe,CAAC;IAC1B,CAAC;IAED,2CAA2C;IAC3C,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;QAC5D,WAAW,CAAC,IAAI,CAAC,8BAAsB,CAAC,aAAa,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,WAAW,CAAC,IAAI,CACd,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,gBAAgB,YAAY;cACzF,iEAAiE,CACpE,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,WAAW,CAAC,IAAI,CAAC,0BAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,kBAAkB;QAClB,UAAU,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC;QACxD,aAAa;QACb,KAAK;QACL,YAAY;QACZ,aAAa;QACb,QAAQ;QACR,UAAU,EAAE;YACV,aAAa,EAAE,aAAa,CAAC,YAAY,CAAC;YAC1C,cAAc,EAAE,cAAc,CAAC,OAAO,CAAC;YACvC,sBAAsB,EAAE,sBAAsB,CAAC,OAAO,CAAC;YACvD,0EAA0E;YAC1E,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,IAAI,oBAAoB,CAAC,aAAa,CAAC;SAClF;QACD,WAAW;QACX,YAAY,EAAE,6BAAqB;QACnC,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,KAAgB;IAC5B,OAAO;QACL,2BAA2B,EAAE,eAAe,EAAE,SAAS;QACvD,eAAe,EAAE,WAAW,EAAE,iBAAiB,EAAE,iBAAiB;KACnE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,gFAAgF;AAChF,SAAS,UAAU,CAAC,MAAoB,EAAE,GAAS;IACjD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,SAAS;QAAE,OAAO,MAAM,CAAC;IACrC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE;QAClD,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;QAChC,CAAC,CAAC,MAAM,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,KAAgB,EAAE,OAAuB,EAAE,OAAsB;IACtF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QAC3D,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,aAAa,CAAC,CAAC,OAAO,IAAI,CAAC;QAChC,KAAK,UAAU,CAAC,CAAC,OAAO,GAAG,CAAC;QAC5B,KAAK,SAAS,CAAC,CAAC,OAAO,GAAG,CAAC;QAC3B,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC;IACvB,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,aAAa,CAAC,YAAmC;IACxD,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAW,CAAC;IAClE,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,cAAc,CAAC,OAAuB;IAC7C,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAW,CAAC;IACvE,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO;SACzB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;SAC3B,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAuB;IACrD,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAW,CAAC;IACvE,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QAC7C,4DAA4D;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,OAAO,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,UAAU,GAAG,KAAK,CAAC;IACzD,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACT,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAqB;IACjD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC;QAC9B,KAAK,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;QAC3B,KAAK,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAaD;;;;;;GAMG;AACU,QAAA,cAAc,GAAqB;IAC9C,yBAAyB,EAAE,OAAO;IAClC,aAAa,EAAE,QAAQ;IACvB,OAAO,EAAE,MAAM;IACf,aAAa,EAAE,aAAa;IAC5B,SAAS,EAAE,sBAAsB;IACjC,eAAe,EAAE,sBAAsB;IACvC,eAAe,EAAE,OAAO;CACzB,CAAC;AAEF,SAAgB,WAAW,CAAC,UAAsB,EAAE,SAAiB,EAAE;IAIrE,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,sBAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACpF,OAAO;QACL,MAAM;QACN,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,0BAAkB,CAAC,UAAU,CAAC,SAAS,CAAC;KAC9E,CAAC;AACJ,CAAC;AAUD,SAAgB,qBAAqB,CAAC,QAAkB,EAAE,MAAc,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IACxF,OAAO;QACL,SAAS,EAAE,2BAA2B;QACtC,kBAAkB,EAAE,KAAK;QACzB,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,MAAM;QACrB,KAAK,EAAE,EAAE;QACT,YAAY,EAAE,EAAE;QAChB,aAAa,EAAE,EAAE;QACjB,QAAQ,EAAE,CAAC;gBACT,KAAK,EAAE,YAAY;gBACnB,MAAM,EAAE,sBAAsB;gBAC9B,SAAS,EAAE,mCAAmC,MAAM,wBAAwB;aAC7E,CAAC;QACF,UAAU,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,sBAAsB,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE;QACpG,WAAW,EAAE;YACX,mCAAmC,MAAM,GAAG;YAC5C,QAAQ,KAAK,QAAQ;gBACnB,CAAC,CAAC,kEAAkE;gBACpE,CAAC,CAAC,QAAQ,KAAK,MAAM;oBACnB,CAAC,CAAC,wFAAwF;oBAC1F,CAAC,CAAC,kCAAkC;SACzC;QACD,YAAY,EAAE,6BAAqB;QACnC,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE;KAC9B,CAAC;AACJ,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,132 @@
+/**
+ * The client an integrator installs.
+ *
+ * Its contract is narrow and absolute: **every method returns, and none of
+ * them throws.** This code sits between a user and a signing screen. A wallet
+ * that shows an error dialog because a security service had a bad minute has
+ * made the user's day worse for no security benefit, and the user learns to
+ * dismiss the dialog — which is the outcome the whole product exists to avoid.
+ *
+ * So an unreachable Decentrys produces an assessment that says exactly that,
+ * in `unknowns` and in `explanation`, and the configured `failMode` decides
+ * what the integrator does about it. Nothing is invented, and nothing is
+ * silently reported as clean.
+ */
+import { type Assessment, type ThreatSignal } from './model';
+import { type FailMode, type Policy, type PolicyAction } from './classify';
+import { type FetchLike, type Transport } from './transport';
+import { type SubjectRef } from './wire';
+import { type SimulationResult, type TransactionExplanation } from './simulation';
+export declare const SDK_VERSION = "0.1.0";
+export interface DecentrysConfig {
+    apiKey: string;
+    baseUrl?: string;
+    /**
+     * What the integrator does when Decentrys is unreachable. `warn` is the
+     * consumer default; `closed` is for deployments that would rather stop.
+     */
+    failMode?: FailMode;
+    /**
+     * A deadline, not a target. Exceeding it returns an unavailable assessment
+     * rather than leaving the user on a spinner holding a signature.
+     */
+    timeoutMs?: number;
+    /** Retries apply to idempotent lookups only. */
+    retries?: number;
+    policy?: Policy;
+    cacheTtlMs?: number;
+    cacheMaxEntries?: number;
+    /** Injected so the SDK works in a browser, an extension, RN and Node alike. */
+    fetch?: FetchLike;
+    /** For tests and for integrators who route through their own gateway. */
+    transport?: Transport;
+}
+export interface TransactionRequest {
+    chain: string;
+    from: string;
+    to?: string;
+    /** Base units, as a string. Numbers lose precision at these magnitudes. */
+    value?: string;
+    /** EVM calldata. */
+    data?: string;
+    /** Non-EVM families carry their serialized payload here instead. */
+    raw?: string;
+    /** The site requesting the signature, when there is one. */
+    origin?: string;
+}
+export interface AddressRequest {
+    chain: string;
+    address: string;
+}
+export interface ApprovalRequest {
+    chain: string;
+    owner: string;
+    spender: string;
+    token: string;
+    /** Base units, or `unlimited`. */
+    amount?: string;
+}
+export interface DappRequest {
+    origin: string;
+    chain?: string;
+}
+export interface ProtectResult {
+    subject: SubjectRef;
+    assessment: Assessment;
+    /** What the integrator's policy says to do. Advice — never enforced here. */
+    decision: {
+        action: PolicyAction;
+        reason: string;
+    };
+    /** True when served from the local cache rather than the network. */
+    cached: boolean;
+    /**
+     * Coverage signals the SDK refused to treat as risk. Surfaced rather than
+     * hidden: an integrator should be able to see the rule being applied.
+     */
+    demotedSignals: string[];
+}
+export declare class Decentrys {
+    private readonly transport;
+    private readonly failMode;
+    private readonly policy;
+    private readonly cache;
+    constructor(config: DecentrysConfig);
+    /** Pre-sign analysis of a transaction the user is about to approve. */
+    assessTransaction(tx: TransactionRequest, options?: CallOptions): Promise<ProtectResult>;
+    /** What a contract *can* do — capabilities, proxy status, admin controls. */
+    scanContract(request: AddressRequest, options?: CallOptions): Promise<ProtectResult>;
+    screenAddress(request: AddressRequest, options?: CallOptions): Promise<ProtectResult>;
+    screenToken(request: AddressRequest, options?: CallOptions): Promise<ProtectResult>;
+    /**
+     * An approval is assessed on the spender and the allowance together.
+     *
+     * Not cached: the same spender with an unlimited allowance and with a
+     * one-off allowance are different decisions, and the amount is the part a
+     * user most needs told.
+     */
+    screenApproval(request: ApprovalRequest, options?: CallOptions): Promise<ProtectResult>;
+    assessDapp(request: DappRequest, options?: CallOptions): Promise<ProtectResult>;
+    /**
+     * The threat signals on a subject, without a classification.
+     *
+     * For integrators building their own presentation. An empty array means no
+     * signals were found — which is not the same as safe, and the SDK will not
+     * pretend otherwise on their behalf.
+     */
+    getThreatSignals(request: AddressRequest, options?: CallOptions): Promise<ThreatSignal[]>;
+    /** What this transaction does, in the words a user would use. */
+    explainTransaction(tx: TransactionRequest, options?: CallOptions): Promise<TransactionExplanation>;
+    /** Execute the transaction against a fork and report what would change. */
+    simulateTransaction(tx: TransactionRequest, options?: CallOptions): Promise<SimulationResult>;
+    /** Drop cached evidence. Call after a user reports a stale result. */
+    clearCache(): void;
+    private assess;
+    private finish;
+}
+export interface CallOptions {
+    signal?: AbortSignal;
+    /** Bypass the cache for this call. The result still populates it. */
+    skipCache?: boolean;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,YAAY,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,KAAK,QAAQ,EAAE,KAAK,MAAM,EAAE,KAAK,YAAY,EAAgD,MAAM,YAAY,CAAC;AACzH,OAAO,EAAiB,KAAK,SAAS,EAAE,KAAK,SAAS,EAAkB,MAAM,aAAa,CAAC;AAE5F,OAAO,EAA2B,KAAK,UAAU,EAAqB,MAAM,QAAQ,CAAC;AACrF,OAAO,EACL,KAAK,gBAAgB,EAAE,KAAK,sBAAsB,EACnD,MAAM,cAAc,CAAC;AAEtB,eAAO,MAAM,WAAW,UAAU,CAAC;AAOnC,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,yEAAyE;IACzE,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oBAAoB;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,UAAU,CAAC;IACpB,UAAU,EAAE,UAAU,CAAC;IACvB,6EAA6E;IAC7E,QAAQ,EAAE;QAAE,MAAM,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,qEAAqE;IACrE,MAAM,EAAE,OAAO,CAAC;IAChB;;;OAGG;IACH,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+B;gBAEzC,MAAM,EAAE,eAAe;IA4BnC,uEAAuE;IACjE,iBAAiB,CAAC,EAAE,EAAE,kBAAkB,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,aAAa,CAAC;IAalG,6EAA6E;IACvE,YAAY,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,aAAa,CAAC;IAWxF,aAAa,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,aAAa,CAAC;IAWzF,WAAW,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,aAAa,CAAC;IAW7F;;;;;;OAMG;IACG,cAAc,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,aAAa,CAAC;IAW3F,UAAU,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,aAAa,CAAC;IAWzF;;;;;;OAMG;IACG,gBAAgB,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAuBnG,iEAAiE;IAC3D,kBAAkB,CACtB,EAAE,EAAE,kBAAkB,EAAE,OAAO,GAAE,WAAgB,GAChD,OAAO,CAAC,sBAAsB,CAAC;IA0BlC,2EAA2E;IACrE,mBAAmB,CACvB,EAAE,EAAE,kBAAkB,EAAE,OAAO,GAAE,WAAgB,GAChD,OAAO,CAAC,gBAAgB,CAAC;IAkB5B,sEAAsE;IACtE,UAAU,IAAI,IAAI;YAQJ,MAAM;IA6CpB,OAAO,CAAC,MAAM;CAqBf;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,qEAAqE;IACrE,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB"}