@decentrys/protect 0.1.0

package/dist/client.js

@@ -0,0 +1,307 @@
+"use strict";
+/**
+ * The client an integrator installs.
+ *
+ * Its contract is narrow and absolute: **every method returns, and none of
+ * them throws.** This code sits between a user and a signing screen. A wallet
+ * that shows an error dialog because a security service had a bad minute has
+ * made the user's day worse for no security benefit, and the user learns to
+ * dismiss the dialog — which is the outcome the whole product exists to avoid.
+ *
+ * So an unreachable Decentrys produces an assessment that says exactly that,
+ * in `unknowns` and in `explanation`, and the configured `failMode` decides
+ * what the integrator does about it. Nothing is invented, and nothing is
+ * silently reported as clean.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Decentrys = exports.SDK_VERSION = void 0;
+const classify_1 = require("./classify");
+const transport_1 = require("./transport");
+const cache_1 = require("./cache");
+const wire_1 = require("./wire");
+const simulation_1 = require("./simulation");
+exports.SDK_VERSION = '0.1.0';
+const DEFAULT_BASE_URL = 'https://api.decentrys.com';
+const DEFAULT_TIMEOUT_MS = 4_000;
+const DEFAULT_CACHE_TTL_MS = 120_000;
+const DEFAULT_CACHE_ENTRIES = 500;
+class Decentrys {
+    transport;
+    failMode;
+    policy;
+    cache;
+    constructor(config) {
+        if (!config.apiKey || !config.apiKey.trim()) {
+            // Thrown at construction, which is a developer error at wiring time —
+            // as opposed to anything at call time, which is a user's transaction.
+            throw new Error('Decentrys: an apiKey is required. Create one at https://decentrys.com/developers.');
+        }
+        this.failMode = config.failMode ?? 'warn';
+        this.policy = config.policy ?? {};
+        this.cache = new cache_1.TtlCache({
+            ttlMs: config.cacheTtlMs ?? DEFAULT_CACHE_TTL_MS,
+            maxEntries: config.cacheMaxEntries ?? DEFAULT_CACHE_ENTRIES,
+        });
+        this.transport = config.transport ?? new transport_1.HttpTransport({
+            baseUrl: config.baseUrl ?? DEFAULT_BASE_URL,
+            apiKey: config.apiKey,
+            timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,
+            retries: config.retries ?? 1,
+            fetch: config.fetch ?? resolveFetch(),
+            userAgent: `decentrys-protect/${exports.SDK_VERSION}`,
+        });
+    }
+    // -------------------------------------------------------------------------
+    // Assessments
+    // -------------------------------------------------------------------------
+    /** Pre-sign analysis of a transaction the user is about to approve. */
+    async assessTransaction(tx, options = {}) {
+        return this.assess({
+            path: '/v1/protect/transaction',
+            body: tx,
+            subject: { kind: 'transaction', chain: tx.chain, identifier: tx.to ?? tx.from },
+            // A transaction's assessment depends on its calldata and its moment.
+            // Caching one would serve a stale answer for a different transaction.
+            cacheable: false,
+            idempotent: true,
+            options,
+        });
+    }
+    /** What a contract *can* do — capabilities, proxy status, admin controls. */
+    async scanContract(request, options = {}) {
+        return this.assess({
+            path: '/v1/protect/contract',
+            body: request,
+            subject: { kind: 'contract', chain: request.chain, identifier: request.address },
+            cacheable: true,
+            idempotent: true,
+            options,
+        });
+    }
+    async screenAddress(request, options = {}) {
+        return this.assess({
+            path: '/v1/protect/address',
+            body: request,
+            subject: { kind: 'address', chain: request.chain, identifier: request.address },
+            cacheable: true,
+            idempotent: true,
+            options,
+        });
+    }
+    async screenToken(request, options = {}) {
+        return this.assess({
+            path: '/v1/protect/token',
+            body: request,
+            subject: { kind: 'token', chain: request.chain, identifier: request.address },
+            cacheable: true,
+            idempotent: true,
+            options,
+        });
+    }
+    /**
+     * An approval is assessed on the spender and the allowance together.
+     *
+     * Not cached: the same spender with an unlimited allowance and with a
+     * one-off allowance are different decisions, and the amount is the part a
+     * user most needs told.
+     */
+    async screenApproval(request, options = {}) {
+        return this.assess({
+            path: '/v1/protect/approval',
+            body: request,
+            subject: { kind: 'approval', chain: request.chain, identifier: request.spender },
+            cacheable: false,
+            idempotent: true,
+            options,
+        });
+    }
+    async assessDapp(request, options = {}) {
+        return this.assess({
+            path: '/v1/protect/dapp',
+            body: request,
+            subject: { kind: 'dapp', chain: request.chain ?? 'multi', identifier: request.origin },
+            cacheable: true,
+            idempotent: true,
+            options,
+        });
+    }
+    /**
+     * The threat signals on a subject, without a classification.
+     *
+     * For integrators building their own presentation. An empty array means no
+     * signals were found — which is not the same as safe, and the SDK will not
+     * pretend otherwise on their behalf.
+     */
+    async getThreatSignals(request, options = {}) {
+        try {
+            const raw = await this.transport.request({
+                path: '/v1/protect/signals',
+                body: request,
+                idempotent: true,
+                signal: options.signal,
+            });
+            return (0, wire_1.normalizeEvidence)(raw, {
+                kind: 'address', chain: request.chain, identifier: request.address,
+            }).threatSignals;
+        }
+        catch {
+            // No signals is the only honest answer when we could not look. The
+            // caller distinguishes it from a real empty result by asking for a full
+            // assessment, whose `unknowns` say so explicitly.
+            return [];
+        }
+    }
+    // -------------------------------------------------------------------------
+    // Decoding and simulation
+    // -------------------------------------------------------------------------
+    /** What this transaction does, in the words a user would use. */
+    async explainTransaction(tx, options = {}) {
+        try {
+            const raw = await this.transport.request({
+                path: '/v1/protect/explain',
+                body: tx,
+                idempotent: true,
+                signal: options.signal,
+            });
+            return {
+                summary: typeof raw?.summary === 'string' && raw.summary
+                    ? raw.summary
+                    : 'This transaction could not be decoded.',
+                actions: stringList(raw?.actions),
+                exposure: stringList(raw?.exposure),
+                undecoded: stringList(raw?.undecoded),
+            };
+        }
+        catch (error) {
+            return {
+                summary: 'This transaction could not be decoded.',
+                actions: [],
+                exposure: [],
+                undecoded: [`Decentrys could not be reached: ${describe(error)}.`],
+            };
+        }
+    }
+    /** Execute the transaction against a fork and report what would change. */
+    async simulateTransaction(tx, options = {}) {
+        try {
+            const raw = await this.transport.request({
+                path: '/v1/protect/simulate',
+                body: tx,
+                idempotent: true,
+                signal: options.signal,
+            });
+            return normalizeSimulation(raw);
+        }
+        catch (error) {
+            return (0, simulation_1.unavailableSimulation)(describe(error));
+        }
+    }
+    // -------------------------------------------------------------------------
+    // Cache control
+    // -------------------------------------------------------------------------
+    /** Drop cached evidence. Call after a user reports a stale result. */
+    clearCache() {
+        this.cache.clear();
+    }
+    // -------------------------------------------------------------------------
+    // Internals
+    // -------------------------------------------------------------------------
+    async assess(params) {
+        const key = params.cacheable
+            ? (0, cache_1.cacheKey)(params.subject.kind, [params.subject.chain, params.subject.identifier])
+            : null;
+        if (key && !params.options.skipCache) {
+            const hit = this.cache.get(key);
+            if (hit)
+                return this.finish(hit, true);
+        }
+        let evidence;
+        try {
+            const raw = await this.transport.request({
+                path: params.path,
+                body: params.body,
+                idempotent: params.idempotent,
+                signal: params.options.signal,
+            });
+            evidence = (0, wire_1.normalizeEvidence)(raw, params.subject);
+        }
+        catch (error) {
+            return {
+                subject: params.subject,
+                assessment: (0, classify_1.unavailableAssessment)(this.failMode, describe(error)),
+                decision: {
+                    // `closed` is the only mode where unavailability is itself a stop.
+                    // The others must not fabricate a risk level to justify blocking.
+                    action: this.failMode === 'closed' ? 'block' : 'warn',
+                    reason: `Decentrys could not be reached: ${describe(error)}.`,
+                },
+                cached: false,
+                demotedSignals: [],
+            };
+        }
+        if (key)
+            this.cache.set(key, evidence);
+        return this.finish(evidence, false);
+    }
+    finish(evidence, cached) {
+        // Classification happens here, on the client, from evidence — not read
+        // off a server response. That is what makes the rule auditable by the
+        // integrator rather than a promise made in a marketing page.
+        const assessment = (0, classify_1.classify)({
+            facts: evidence.facts,
+            capabilities: evidence.capabilities,
+            threatSignals: evidence.threatSignals,
+            unknowns: evidence.unknowns,
+            historyStatus: evidence.historyStatus,
+            historyConfidence: evidence.historyConfidence,
+        });
+        return {
+            subject: evidence.subject,
+            assessment,
+            decision: (0, classify_1.applyPolicy)(assessment, this.policy),
+            cached,
+            demotedSignals: evidence.demotedSignals,
+        };
+    }
+}
+exports.Decentrys = Decentrys;
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function resolveFetch() {
+    const candidate = globalThis.fetch;
+    if (typeof candidate !== 'function') {
+        throw new Error('Decentrys: no global fetch was found. Pass one via `new Decentrys({ fetch })` '
+            + '(Node 18+, modern browsers and React Native provide one).');
+    }
+    return candidate.bind(globalThis);
+}
+function describe(error) {
+    if (error instanceof transport_1.TransportError)
+        return error.message;
+    if (error instanceof Error)
+        return error.message;
+    return 'unknown error';
+}
+function stringList(value) {
+    return Array.isArray(value) ? value.filter((v) => typeof v === 'string' && v.length > 0) : [];
+}
+function normalizeSimulation(raw) {
+    const body = (typeof raw === 'object' && raw !== null ? raw : {});
+    const outcomes = ['SUCCESS', 'REVERT', 'NOT_SUPPORTED', 'UNAVAILABLE'];
+    return {
+        // An unrecognised outcome is not a success. Defaulting the other way would
+        // let a malformed response read as "this transaction is fine".
+        outcome: outcomes.includes(body.outcome)
+            ? body.outcome
+            : 'UNAVAILABLE',
+        revertReason: typeof body.revertReason === 'string' ? body.revertReason : undefined,
+        balanceChanges: Array.isArray(body.balanceChanges) ? body.balanceChanges : [],
+        approvalChanges: Array.isArray(body.approvalChanges) ? body.approvalChanges : [],
+        contractsCalled: stringList(body.contractsCalled),
+        gasUsed: typeof body.gasUsed === 'string' ? body.gasUsed : undefined,
+        unavailableReason: typeof body.unavailableReason === 'string' ? body.unavailableReason : undefined,
+        simulatedAt: typeof body.simulatedAt === 'string' ? body.simulatedAt : new Date().toISOString(),
+    };
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAGH,yCAAyH;AACzH,2CAA4F;AAC5F,mCAA6C;AAC7C,iCAAqF;AACrF,6CAEsB;AAET,QAAA,WAAW,GAAG,OAAO,CAAC;AAEnC,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AACrD,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,oBAAoB,GAAG,OAAO,CAAC;AACrC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAyElC,MAAa,SAAS;IACH,SAAS,CAAY;IACrB,QAAQ,CAAW;IACnB,MAAM,CAAS;IACf,KAAK,CAA+B;IAErD,YAAY,MAAuB;QACjC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5C,sEAAsE;YACtE,sEAAsE;YACtE,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;QACvG,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,IAAI,gBAAQ,CAAqB;YAC5C,KAAK,EAAE,MAAM,CAAC,UAAU,IAAI,oBAAoB;YAChD,UAAU,EAAE,MAAM,CAAC,eAAe,IAAI,qBAAqB;SAC5D,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,yBAAa,CAAC;YACrD,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,gBAAgB;YAC3C,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,kBAAkB;YACjD,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC;YAC5B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,YAAY,EAAE;YACrC,SAAS,EAAE,qBAAqB,mBAAW,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,cAAc;IACd,4EAA4E;IAE5E,uEAAuE;IACvE,KAAK,CAAC,iBAAiB,CAAC,EAAsB,EAAE,UAAuB,EAAE;QACvE,OAAO,IAAI,CAAC,MAAM,CAAC;YACjB,IAAI,EAAE,yBAAyB;YAC/B,IAAI,EAAE,EAAE;YACR,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE;YAC/E,qEAAqE;YACrE,sEAAsE;YACtE,SAAS,EAAE,KAAK;YAChB,UAAU,EAAE,IAAI;YAChB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,YAAY,CAAC,OAAuB,EAAE,UAAuB,EAAE;QACnE,OAAO,IAAI,CAAC,MAAM,CAAC;YACjB,IAAI,EAAE,sBAAsB;YAC5B,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE;YAChF,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,IAAI;YAChB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAuB,EAAE,UAAuB,EAAE;QACpE,OAAO,IAAI,CAAC,MAAM,CAAC;YACjB,IAAI,EAAE,qBAAqB;YAC3B,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE;YAC/E,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,IAAI;YAChB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAuB,EAAE,UAAuB,EAAE;QAClE,OAAO,IAAI,CAAC,MAAM,CAAC;YACjB,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE;YAC7E,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,IAAI;YAChB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,cAAc,CAAC,OAAwB,EAAE,UAAuB,EAAE;QACtE,OAAO,IAAI,CAAC,MAAM,CAAC;YACjB,IAAI,EAAE,sBAAsB;YAC5B,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE;YAChF,SAAS,EAAE,KAAK;YAChB,UAAU,EAAE,IAAI;YAChB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAoB,EAAE,UAAuB,EAAE;QAC9D,OAAO,IAAI,CAAC,MAAM,CAAC;YACjB,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE;YACtF,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,IAAI;YAChB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CAAC,OAAuB,EAAE,UAAuB,EAAE;QACvE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAU;gBAChD,IAAI,EAAE,qBAAqB;gBAC3B,IAAI,EAAE,OAAO;gBACb,UAAU,EAAE,IAAI;gBAChB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,OAAO,IAAA,wBAAiB,EAAC,GAAG,EAAE;gBAC5B,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO;aACnE,CAAC,CAAC,aAAa,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,wEAAwE;YACxE,kDAAkD;YAClD,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,0BAA0B;IAC1B,4EAA4E;IAE5E,iEAAiE;IACjE,KAAK,CAAC,kBAAkB,CACtB,EAAsB,EAAE,UAAuB,EAAE;QAEjD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAkC;gBACxE,IAAI,EAAE,qBAAqB;gBAC3B,IAAI,EAAE,EAAE;gBACR,UAAU,EAAE,IAAI;gBAChB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO;oBACtD,CAAC,CAAC,GAAG,CAAC,OAAO;oBACb,CAAC,CAAC,wCAAwC;gBAC5C,OAAO,EAAE,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;gBACjC,QAAQ,EAAE,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC;gBACnC,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC;aACtC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,wCAAwC;gBACjD,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE,EAAE;gBACZ,SAAS,EAAE,CAAC,mCAAmC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;aACnE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,mBAAmB,CACvB,EAAsB,EAAE,UAAuB,EAAE;QAEjD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAmB;gBACzD,IAAI,EAAE,sBAAsB;gBAC5B,IAAI,EAAE,EAAE;gBACR,UAAU,EAAE,IAAI;gBAChB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAA,kCAAqB,EAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,gBAAgB;IAChB,4EAA4E;IAE5E,sEAAsE;IACtE,UAAU;QACR,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,4EAA4E;IAC5E,YAAY;IACZ,4EAA4E;IAEpE,KAAK,CAAC,MAAM,CAAC,MAOpB;QACC,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS;YAC1B,CAAC,CAAC,IAAA,gBAAQ,EAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAClF,CAAC,CAAC,IAAI,CAAC;QAET,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,GAAG;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,QAA4B,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAU;gBAChD,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;aAC9B,CAAC,CAAC;YACH,QAAQ,GAAG,IAAA,wBAAiB,EAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,UAAU,EAAE,IAAA,gCAAqB,EAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACjE,QAAQ,EAAE;oBACR,mEAAmE;oBACnE,kEAAkE;oBAClE,MAAM,EAAE,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;oBACrD,MAAM,EAAE,mCAAmC,QAAQ,CAAC,KAAK,CAAC,GAAG;iBAC9D;gBACD,MAAM,EAAE,KAAK;gBACb,cAAc,EAAE,EAAE;aACnB,CAAC;QACJ,CAAC;QAED,IAAI,GAAG;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IAEO,MAAM,CAAC,QAA4B,EAAE,MAAe;QAC1D,uEAAuE;QACvE,sEAAsE;QACtE,6DAA6D;QAC7D,MAAM,UAAU,GAAG,IAAA,mBAAQ,EAAC;YAC1B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;SAC9C,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,UAAU;YACV,QAAQ,EAAE,IAAA,sBAAW,EAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YAC9C,MAAM;YACN,cAAc,EAAE,QAAQ,CAAC,cAAc;SACxC,CAAC;IACJ,CAAC;CACF;AA1QD,8BA0QC;AAQD,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,YAAY;IACnB,MAAM,SAAS,GAAI,UAAkC,CAAC,KAAK,CAAC;IAC5D,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,gFAAgF;cAC9E,2DAA2D,CAC9D,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,UAAU,CAAc,CAAC;AACjD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,YAAY,0BAAc;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IAC1D,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACjD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7G,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAY;IACvC,MAAM,IAAI,GAAG,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAA8B,CAAC;IAC/F,MAAM,QAAQ,GAAkC,CAAC,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;IAEtG,OAAO;QACL,2EAA2E;QAC3E,+DAA+D;QAC/D,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAsC,CAAC;YACrE,CAAC,CAAE,IAAI,CAAC,OAAuC;YAC/C,CAAC,CAAC,aAAa;QACjB,YAAY,EAAE,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QACnF,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE;QAC7E,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE;QAChF,eAAe,EAAE,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC;QACjD,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QACpE,iBAAiB,EAAE,OAAO,IAAI,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;QAClG,WAAW,EAAE,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAChG,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export * from './model';
+export * from './classify';
+export * from './wire';
+export * from './simulation';
+export * from './transport';
+export * from './cache';
+export * from './client';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC;AAC3B,cAAc,QAAQ,CAAC;AACvB,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC"}

package/dist/index.js

@@ -0,0 +1,24 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./model"), exports);
+__exportStar(require("./classify"), exports);
+__exportStar(require("./wire"), exports);
+__exportStar(require("./simulation"), exports);
+__exportStar(require("./transport"), exports);
+__exportStar(require("./cache"), exports);
+__exportStar(require("./client"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAwB;AACxB,6CAA2B;AAC3B,yCAAuB;AACvB,+CAA6B;AAC7B,8CAA4B;AAC5B,0CAAwB;AACxB,2CAAyB"}

package/dist/model.d.ts

@@ -0,0 +1,156 @@
+/**
+ * The Decentrys risk model.
+ *
+ * One rule governs this file, and every other decision follows from it:
+ *
+ *   **LACK OF EVIDENCE IS NOT EVIDENCE OF MALICE.**
+ *
+ * A contract deployed two hours ago by an anonymous wallet with no audit and
+ * thin liquidity is *unknown*, not dangerous. The industry habit of scoring
+ * those facts as risk produces a system that protects incumbents and taxes
+ * every new project — which is a gatekeeping product, not a security one.
+ *
+ * The model therefore separates four things that are usually collapsed:
+ *
+ *  - **Facts** — directly verifiable, carrying no accusation.
+ *  - **Capabilities** — what the code *can* do. A mint authority is a
+ *    capability, not a vulnerability; it becomes one when behaviour or context
+ *    shows it being abused.
+ *  - **Threat signals** — require actual technical or behavioural evidence.
+ *    These, and only these, can raise a risk level.
+ *  - **Unknowns** — stated as unknown. Never silently converted to risk.
+ *
+ * `historyConfidence` exists to express how much Decentrys knows. It is
+ * deliberately not part of the risk computation: it is a measure of our
+ * coverage, not of the subject's danger.
+ */
+/**
+ * Deliberately not SAFE/SCAM.
+ *
+ * "Safe" is a claim no analysis can support, and "scam" is an accusation that
+ * needs evidence. The scale runs from "we found no critical threat evidence"
+ * to "confirmed malicious infrastructure", and every step above CAUTION
+ * requires a threat signal to reach it.
+ */
+export declare const RISK_LEVELS: readonly ["NO_CRITICAL_RISK_DETECTED", "INFORMATIONAL", "CAUTION", "ELEVATED_RISK", "HIGH_RISK", "CRITICAL_THREAT", "KNOWN_MALICIOUS"];
+export type RiskLevel = (typeof RISK_LEVELS)[number];
+export declare function isAtLeast(level: RiskLevel, floor: RiskLevel): boolean;
+/** What each level is allowed to mean, in the words an integrator may show. */
+export declare const RISK_LEVEL_MEANING: Record<RiskLevel, string>;
+export type FactValue = string | number | boolean | null;
+/**
+ * Something directly verifiable.
+ *
+ * Facts carry no severity. "Deployed two hours ago" and "mint authority
+ * present" are both simply true; what they mean is the integrator's call and,
+ * where it matters, the threat signals' job to establish.
+ */
+export interface ObservedFact {
+    type: string;
+    value: FactValue;
+    /** Plain language, shown to a user as-is. Never accusatory. */
+    statement: string;
+    /** Where the fact came from, so it can be checked. */
+    source: string;
+    observedAt: string;
+}
+/**
+ * `INFO` is the default and the common case.
+ *
+ * A capability's severity describes how much power it confers, not how likely
+ * it is to be abused. Nothing here alone can push a subject past CAUTION.
+ */
+export type CapabilitySeverity = 'INFO' | 'NOTABLE' | 'SIGNIFICANT';
+export interface TechnicalCapability {
+    type: string;
+    severity: CapabilitySeverity;
+    /** What the contract *can* do, phrased as capability, never as accusation. */
+    statement: string;
+    /** The function, role or storage slot that grants it. */
+    grantedBy?: string;
+}
+export interface Evidence {
+    id: string;
+    type: string;
+    source: string;
+    chain?: string;
+    txHash?: string;
+    contract?: string;
+    address?: string;
+    observedAt: string;
+    confidence: number;
+    /** True when a human analyst confirmed it. Required for KNOWN_MALICIOUS. */
+    analystVerified: boolean;
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Signals decay.
+ *
+ * A low-confidence association from three years ago must not poison an address
+ * permanently. A signal that is STALE still appears — suppressing it would
+ * hide a real observation — but it cannot raise the risk level.
+ */
+export type SignalStatus = 'ACTIVE' | 'STALE' | 'RESOLVED' | 'DISPUTED_FACT' | 'REMOVED';
+export type ThreatSeverity = 'LOW' | 'MEDIUM' | 'HIGH' | 'CRITICAL';
+export interface ThreatSignal {
+    type: string;
+    severity: ThreatSeverity;
+    /** 0–1. Presented alongside the signal, never rounded away. */
+    confidence: number;
+    /** Why this signal exists, in language a user can act on. */
+    explanation: string;
+    /** Hops from the subject. 0 is direct; anything above is inference. */
+    hops: number;
+    evidence: Evidence[];
+    status: SignalStatus;
+    createdAt: string;
+    lastSeen: string;
+    expiresAt?: string;
+}
+export type UnknownReason = 'UNKNOWN' | 'INSUFFICIENT_DATA' | 'PROVIDER_UNAVAILABLE' | 'NOT_APPLICABLE';
+export interface UnknownField {
+    field: string;
+    reason: UnknownReason;
+    /** Says plainly that we do not know, rather than implying anything. */
+    statement: string;
+}
+/**
+ * How much Decentrys knows about a subject — never how dangerous it is.
+ *
+ * `LIMITED` is the correct and expected state for anything new, and it must
+ * never be rendered as a warning.
+ */
+export type HistoryStatus = 'ESTABLISHED' | 'MODERATE' | 'LIMITED' | 'NONE';
+export declare const HISTORY_STATUS_MEANING: Record<HistoryStatus, string>;
+export interface RiskComponents {
+    /** From capabilities the code genuinely holds. Never inflated by age. */
+    technicalRisk: number;
+    /** From observed behaviour. */
+    behavioralRisk: number;
+    /** From confirmed threat intelligence. */
+    threatIntelligenceRisk: number;
+    /**
+     * How much we know, 0–100. **Not a danger score.** A low value means thin
+     * coverage on our side, and it is reported separately so no integrator can
+     * accidentally add it to a risk total.
+     */
+    historyConfidence: number;
+}
+export interface Assessment {
+    riskLevel: RiskLevel;
+    /** True only with analyst-verified evidence. Never inferred. */
+    confirmedMalicious: boolean;
+    confidence: number;
+    historyStatus: HistoryStatus;
+    facts: ObservedFact[];
+    capabilities: TechnicalCapability[];
+    threatSignals: ThreatSignal[];
+    unknowns: UnknownField[];
+    components: RiskComponents;
+    /** Why this level was reached. Never empty — no black-box classifications. */
+    explanation: string[];
+    modelVersion: string;
+    assessedAt: string;
+}
+export declare const PROTECT_MODEL_VERSION = "protect-1.0.0";
+//# sourceMappingURL=model.d.ts.map

package/dist/model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAMH;;;;;;;GAOG;AACH,eAAO,MAAM,WAAW,wIAQd,CAAC;AACX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAYrD,wBAAgB,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAErE;AAED,+EAA+E;AAC/E,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAexD,CAAC;AAMF,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,SAAS,CAAC;IACjB,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,SAAS,GAAG,aAAa,CAAC;AAEpE,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,eAAe,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,GAAG,eAAe,GAAG,SAAS,CAAC;AAEzF,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAEpE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,cAAc,CAAC;IACzB,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,mBAAmB,GAAG,sBAAsB,GAAG,gBAAgB,CAAC;AAExG,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,aAAa,CAAC;IACtB,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;AAE5E,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAKhE,CAAC;AAMF,MAAM,WAAW,cAAc;IAC7B,yEAAyE;IACzE,aAAa,EAAE,MAAM,CAAC;IACtB,+BAA+B;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,0CAA0C;IAC1C,sBAAsB,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,SAAS,CAAC;IACrB,gEAAgE;IAChE,kBAAkB,EAAE,OAAO,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,aAAa,CAAC;IAC7B,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,YAAY,EAAE,mBAAmB,EAAE,CAAC;IACpC,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,UAAU,EAAE,cAAc,CAAC;IAC3B,8EAA8E;IAC9E,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,qBAAqB,kBAAkB,CAAC"}

package/dist/model.js

@@ -0,0 +1,80 @@
+"use strict";
+/**
+ * The Decentrys risk model.
+ *
+ * One rule governs this file, and every other decision follows from it:
+ *
+ *   **LACK OF EVIDENCE IS NOT EVIDENCE OF MALICE.**
+ *
+ * A contract deployed two hours ago by an anonymous wallet with no audit and
+ * thin liquidity is *unknown*, not dangerous. The industry habit of scoring
+ * those facts as risk produces a system that protects incumbents and taxes
+ * every new project — which is a gatekeeping product, not a security one.
+ *
+ * The model therefore separates four things that are usually collapsed:
+ *
+ *  - **Facts** — directly verifiable, carrying no accusation.
+ *  - **Capabilities** — what the code *can* do. A mint authority is a
+ *    capability, not a vulnerability; it becomes one when behaviour or context
+ *    shows it being abused.
+ *  - **Threat signals** — require actual technical or behavioural evidence.
+ *    These, and only these, can raise a risk level.
+ *  - **Unknowns** — stated as unknown. Never silently converted to risk.
+ *
+ * `historyConfidence` exists to express how much Decentrys knows. It is
+ * deliberately not part of the risk computation: it is a measure of our
+ * coverage, not of the subject's danger.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PROTECT_MODEL_VERSION = exports.HISTORY_STATUS_MEANING = exports.RISK_LEVEL_MEANING = exports.RISK_LEVELS = void 0;
+exports.isAtLeast = isAtLeast;
+// ---------------------------------------------------------------------------
+// Risk levels
+// ---------------------------------------------------------------------------
+/**
+ * Deliberately not SAFE/SCAM.
+ *
+ * "Safe" is a claim no analysis can support, and "scam" is an accusation that
+ * needs evidence. The scale runs from "we found no critical threat evidence"
+ * to "confirmed malicious infrastructure", and every step above CAUTION
+ * requires a threat signal to reach it.
+ */
+exports.RISK_LEVELS = [
+    'NO_CRITICAL_RISK_DETECTED',
+    'INFORMATIONAL',
+    'CAUTION',
+    'ELEVATED_RISK',
+    'HIGH_RISK',
+    'CRITICAL_THREAT',
+    'KNOWN_MALICIOUS',
+];
+const RISK_ORDER = {
+    NO_CRITICAL_RISK_DETECTED: 0,
+    INFORMATIONAL: 1,
+    CAUTION: 2,
+    ELEVATED_RISK: 3,
+    HIGH_RISK: 4,
+    CRITICAL_THREAT: 5,
+    KNOWN_MALICIOUS: 6,
+};
+function isAtLeast(level, floor) {
+    return RISK_ORDER[level] >= RISK_ORDER[floor];
+}
+/** What each level is allowed to mean, in the words an integrator may show. */
+exports.RISK_LEVEL_MEANING = {
+    NO_CRITICAL_RISK_DETECTED: 'No known critical threat evidence was identified. This is not an assurance of safety.',
+    INFORMATIONAL: 'Facts worth knowing before proceeding. Nothing here indicates danger.',
+    CAUTION: 'A security-sensitive capability or behaviour exists that deserves attention.',
+    ELEVATED_RISK: 'Several meaningful risk signals are present together.',
+    HIGH_RISK: 'Strong technical or behavioural evidence of significant danger.',
+    CRITICAL_THREAT: 'Severe threat supported by concrete evidence.',
+    KNOWN_MALICIOUS: 'Confirmed malicious infrastructure or behaviour, verified against evidence.',
+};
+exports.HISTORY_STATUS_MEANING = {
+    ESTABLISHED: 'Substantial on-chain history is available.',
+    MODERATE: 'Some history is available.',
+    LIMITED: 'Little history is available yet. This is normal for anything recently deployed and is not a risk finding.',
+    NONE: 'No history is available. This is not a risk finding.',
+};
+exports.PROTECT_MODEL_VERSION = 'protect-1.0.0';
+//# sourceMappingURL=model.js.map

package/dist/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;;;AAmCH,8BAEC;AAnCD,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E;;;;;;;GAOG;AACU,QAAA,WAAW,GAAG;IACzB,2BAA2B;IAC3B,eAAe;IACf,SAAS;IACT,eAAe;IACf,WAAW;IACX,iBAAiB;IACjB,iBAAiB;CACT,CAAC;AAGX,MAAM,UAAU,GAA8B;IAC5C,yBAAyB,EAAE,CAAC;IAC5B,aAAa,EAAE,CAAC;IAChB,OAAO,EAAE,CAAC;IACV,aAAa,EAAE,CAAC;IAChB,SAAS,EAAE,CAAC;IACZ,eAAe,EAAE,CAAC;IAClB,eAAe,EAAE,CAAC;CACnB,CAAC;AAEF,SAAgB,SAAS,CAAC,KAAgB,EAAE,KAAgB;IAC1D,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,+EAA+E;AAClE,QAAA,kBAAkB,GAA8B;IAC3D,yBAAyB,EACvB,uFAAuF;IACzF,aAAa,EACX,uEAAuE;IACzE,OAAO,EACL,8EAA8E;IAChF,aAAa,EACX,uDAAuD;IACzD,SAAS,EACP,iEAAiE;IACnE,eAAe,EACb,+CAA+C;IACjD,eAAe,EACb,6EAA6E;CAChF,CAAC;AAiHW,QAAA,sBAAsB,GAAkC;IACnE,WAAW,EAAE,4CAA4C;IACzD,QAAQ,EAAE,4BAA4B;IACtC,OAAO,EAAE,2GAA2G;IACpH,IAAI,EAAE,sDAAsD;CAC7D,CAAC;AAsCW,QAAA,qBAAqB,GAAG,eAAe,CAAC"}