@decentrys/sentinel-sdk 0.1.0

package/dist/client.js

@@ -0,0 +1,218 @@
+"use strict";
+/**
+ * The Sentinel client.
+ *
+ * The contract is the opposite of Protect's, and deliberately.
+ *
+ * Protect sits between a user and a signing screen, so it never throws: a
+ * security service having a bad minute must not cost someone their
+ * transaction. Sentinel is management and reporting — you are registering a
+ * contract, writing a rule, acknowledging an alert. Swallowing a failure
+ * there would leave an operator believing they are monitored when they are
+ * not, which is the more dangerous silence of the two.
+ *
+ * So Sentinel throws. Loudly, with the API's own message.
+ *
+ * The one exception is `reportEvent`, which runs on a hot path in a
+ * customer's own system and must never be able to break it.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Sentinel = exports.SentinelError = exports.SDK_VERSION = void 0;
+exports.SDK_VERSION = '0.1.0';
+const DEFAULT_BASE_URL = 'https://api.decentrys.com';
+const DEFAULT_TIMEOUT_MS = 10_000;
+class SentinelError extends Error {
+    status;
+    code;
+    constructor(status, message, code) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.name = 'SentinelError';
+    }
+}
+exports.SentinelError = SentinelError;
+class Sentinel {
+    baseUrl;
+    apiKey;
+    timeoutMs;
+    fetchImpl;
+    constructor(config) {
+        if (!config.apiKey?.trim()) {
+            throw new Error('Sentinel: an apiKey is required. Create one at https://decentrys.com/developers.');
+        }
+        // A publishable key is readable by anyone who downloads the app carrying
+        // it. Registering monitoring targets and writing detection rules is not
+        // something that credential may do, and saying so here is clearer than a
+        // 403 from the server later.
+        if (config.apiKey.startsWith('dk_pub_')) {
+            throw new Error('Sentinel: that is a publishable key. Monitoring is managed server-side with a secret key — a '
+                + 'publishable key ships inside clients and cannot be trusted to configure detection.');
+        }
+        this.apiKey = config.apiKey;
+        this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, '');
+        this.timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        this.fetchImpl = config.fetch ?? resolveFetch();
+    }
+    // --- Targets ------------------------------------------------------------
+    /** Watch a deployed contract. */
+    registerContract(input) {
+        return this.addTarget(input, 'CONTRACT');
+    }
+    registerWallet(input) {
+        return this.addTarget(input, 'WALLET');
+    }
+    registerTreasury(input) {
+        return this.addTarget(input, 'TREASURY');
+    }
+    registerTarget(input, targetType) {
+        return this.addTarget(input, targetType);
+    }
+    listTargets(projectId) {
+        const query = projectId ? `?projectId=${encodeURIComponent(projectId)}` : '';
+        return this.request('GET', `/v1/monitoring/targets${query}`);
+    }
+    async setTargetEnabled(targetId, enabled) {
+        return this.request('PATCH', `/v1/monitoring/targets/${targetId}`, { enabled });
+    }
+    async removeTarget(targetId) {
+        await this.request('DELETE', `/v1/monitoring/targets/${targetId}`);
+    }
+    // --- Rules --------------------------------------------------------------
+    createRule(input) {
+        return this.request('POST', '/v1/monitoring/rules', input);
+    }
+    updateRule(ruleId, changes) {
+        return this.request('PATCH', `/v1/monitoring/rules/${ruleId}`, changes);
+    }
+    async deleteRule(ruleId) {
+        await this.request('DELETE', `/v1/monitoring/rules/${ruleId}`);
+    }
+    listRules(projectId) {
+        const query = projectId ? `?projectId=${encodeURIComponent(projectId)}` : '';
+        return this.request('GET', `/v1/monitoring/rules${query}`);
+    }
+    /**
+     * Evaluate a rule against facts without arming it.
+     *
+     * A rule that has never been tested against a fact set is a rule nobody
+     * knows the behaviour of, and finding out during an incident is the worst
+     * possible time.
+     */
+    testRule(ruleId, facts) {
+        return this.request('POST', `/v1/monitoring/rules/${ruleId}/test`, { facts });
+    }
+    /** The vocabulary rules are built from: fields, operators, actions, templates. */
+    catalog() {
+        return this.request('GET', '/v1/monitoring/catalog');
+    }
+    // --- Alerts -------------------------------------------------------------
+    listAlerts(input = {}) {
+        const params = new URLSearchParams();
+        if (input.status)
+            params.set('status', input.status);
+        if (input.severity)
+            params.set('severity', input.severity);
+        if (input.limit)
+            params.set('limit', String(input.limit));
+        const query = params.toString();
+        return this.request('GET', `/v1/alerts${query ? `?${query}` : ''}`);
+    }
+    getAlert(alertId) {
+        return this.request('GET', `/v1/alerts/${alertId}`);
+    }
+    acknowledgeAlert(alertId, note) {
+        return this.request('PATCH', `/v1/alerts/${alertId}`, {
+            status: 'ACKNOWLEDGED',
+            ...(note ? { note } : {}),
+        });
+    }
+    // --- Reporting ----------------------------------------------------------
+    /**
+     * Report an event from your own system.
+     *
+     * The one method here that never throws. It is called from a customer's hot
+     * path — a deploy script, a treasury movement, a governance execution — and
+     * a monitoring call must not be able to fail the thing it is monitoring.
+     * The boolean says whether it was recorded, so a caller who cares can check.
+     */
+    async reportEvent(event) {
+        try {
+            await this.request('POST', '/v1/monitoring/events', event);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    // --- Internals ----------------------------------------------------------
+    addTarget(input, targetType) {
+        return this.request('POST', '/v1/monitoring/targets', {
+            projectId: input.projectId,
+            chainKey: input.chain,
+            address: input.address,
+            targetType,
+            ...(input.label ? { label: input.label } : {}),
+        });
+    }
+    async request(method, path, body) {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+        try {
+            const response = await this.fetchImpl(`${this.baseUrl}${path}`, {
+                method,
+                headers: {
+                    'content-type': 'application/json',
+                    'x-api-key': this.apiKey,
+                    'user-agent': `decentrys-sentinel/${exports.SDK_VERSION}`,
+                },
+                ...(body === undefined ? {} : { body: JSON.stringify(body) }),
+                signal: controller.signal,
+            });
+            const text = await response.text();
+            if (!response.ok) {
+                const parsed = safeParse(text);
+                throw new SentinelError(response.status, typeof parsed?.message === 'string' ? parsed.message : `Decentrys returned HTTP ${response.status}.`, typeof parsed?.code === 'string' ? parsed.code : undefined);
+            }
+            if (!text)
+                return undefined;
+            const parsed = safeParse(text);
+            if (parsed === null)
+                throw new SentinelError(response.status, 'The response was not valid JSON.');
+            // The platform wraps successful bodies as `{ data: ... }`, except for
+            // paginated responses which carry `data` alongside pagination fields.
+            return (('data' in parsed && !('total' in parsed) && !('page' in parsed))
+                ? parsed.data
+                : parsed);
+        }
+        catch (error) {
+            if (error instanceof SentinelError)
+                throw error;
+            if (controller.signal.aborted) {
+                throw new SentinelError(0, `No response within ${this.timeoutMs}ms.`);
+            }
+            throw new SentinelError(0, error instanceof Error ? error.message : 'Request failed.');
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+}
+exports.Sentinel = Sentinel;
+function safeParse(text) {
+    try {
+        const parsed = JSON.parse(text);
+        return typeof parsed === 'object' && parsed !== null ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+function resolveFetch() {
+    const candidate = globalThis.fetch;
+    if (typeof candidate !== 'function') {
+        throw new Error('Sentinel: no global fetch was found. Pass one via `new Sentinel({ fetch })`.');
+    }
+    return candidate.bind(globalThis);
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;;AAMU,QAAA,WAAW,GAAG,OAAO,CAAC;AAEnC,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AACrD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAOlC,MAAa,aAAc,SAAQ,KAAK;IACjB;IAA0C;IAA/D,YAAqB,MAAc,EAAE,OAAe,EAAW,IAAa;QAC1E,KAAK,CAAC,OAAO,CAAC,CAAC;QADI,WAAM,GAAN,MAAM,CAAQ;QAA4B,SAAI,GAAJ,IAAI,CAAS;QAE1E,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AALD,sCAKC;AAiCD,MAAa,QAAQ;IACF,OAAO,CAAS;IAChB,MAAM,CAAS;IACf,SAAS,CAAS;IAClB,SAAS,CAAY;IAEtC,YAAY,MAAsB;QAChC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;QACtG,CAAC;QACD,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,6BAA6B;QAC7B,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,+FAA+F;kBAC7F,oFAAoF,CACvF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACxD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,KAAK,IAAI,YAAY,EAAE,CAAC;IAClD,CAAC;IAED,2EAA2E;IAE3E,iCAAiC;IACjC,gBAAgB,CAAC,KAA0B;QACzC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED,cAAc,CAAC,KAA0B;QACvC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,gBAAgB,CAAC,KAA0B;QACzC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED,cAAc,CAAC,KAA0B,EAAE,UAAsB;QAC/D,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED,WAAW,CAAC,SAAkB;QAC5B,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,cAAc,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,OAAO,IAAI,CAAC,OAAO,CAAqB,KAAK,EAAE,yBAAyB,KAAK,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB,EAAE,OAAgB;QACvD,OAAO,IAAI,CAAC,OAAO,CAAmB,OAAO,EAAE,0BAA0B,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACpG,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,MAAM,IAAI,CAAC,OAAO,CAAU,QAAQ,EAAE,0BAA0B,QAAQ,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,2EAA2E;IAE3E,UAAU,CAAC,KAAsB;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAiB,MAAM,EAAE,sBAAsB,EAAE,KAAK,CAAC,CAAC;IAC7E,CAAC;IAED,UAAU,CAAC,MAAc,EAAE,OAAyD;QAClF,OAAO,IAAI,CAAC,OAAO,CAAiB,OAAO,EAAE,wBAAwB,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;IAC1F,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,MAAM,IAAI,CAAC,OAAO,CAAU,QAAQ,EAAE,wBAAwB,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,SAAS,CAAC,SAAkB;QAC1B,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,cAAc,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,OAAO,IAAI,CAAC,OAAO,CAA6B,KAAK,EAAE,uBAAuB,KAAK,EAAE,CAAC,CAAC;IACzF,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,MAAc,EAAE,KAA8B;QACrD,OAAO,IAAI,CAAC,OAAO,CAAiB,MAAM,EAAE,wBAAwB,MAAM,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,kFAAkF;IAClF,OAAO;QACL,OAAO,IAAI,CAAC,OAAO,CAA0B,KAAK,EAAE,wBAAwB,CAAC,CAAC;IAChF,CAAC;IAED,2EAA2E;IAE3E,UAAU,CAAC,QAAyB,EAAE;QACpC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,QAAQ;YAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,KAAK,CAAC,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,OAAO,CAAoB,KAAK,EAAE,aAAa,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,QAAQ,CAAC,OAAe;QACtB,OAAO,IAAI,CAAC,OAAO,CAAQ,KAAK,EAAE,cAAc,OAAO,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,gBAAgB,CAAC,OAAe,EAAE,IAAa;QAC7C,OAAO,IAAI,CAAC,OAAO,CAAQ,OAAO,EAAE,cAAc,OAAO,EAAE,EAAE;YAC3D,MAAM,EAAE,cAAc;YACtB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAE3E;;;;;;;OAOG;IACH,KAAK,CAAC,WAAW,CAAC,KAOjB;QACC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAU,MAAM,EAAE,uBAAuB,EAAE,KAAK,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,2EAA2E;IAEnE,SAAS,CAAC,KAA0B,EAAE,UAAsB;QAClE,OAAO,IAAI,CAAC,OAAO,CAAmB,MAAM,EAAE,wBAAwB,EAAE;YACtE,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,KAAK;YACrB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU;YACV,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/C,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;QACnE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;gBAC9D,MAAM;gBACN,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,WAAW,EAAE,IAAI,CAAC,MAAM;oBACxB,YAAY,EAAE,sBAAsB,mBAAW,EAAE;iBAClD;gBACD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7D,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAEnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC/B,MAAM,IAAI,aAAa,CACrB,QAAQ,CAAC,MAAM,EACf,OAAO,MAAM,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,QAAQ,CAAC,MAAM,GAAG,EACpG,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAC3D,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,IAAI;gBAAE,OAAO,SAAc,CAAC;YAEjC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,MAAM,KAAK,IAAI;gBAAE,MAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,kCAAkC,CAAC,CAAC;YAElG,sEAAsE;YACtE,sEAAsE;YACtE,OAAO,CAAC,CAAC,MAAM,IAAI,MAAM,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC;gBACvE,CAAC,CAAC,MAAM,CAAC,IAAI;gBACb,CAAC,CAAC,MAAM,CAAM,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,aAAa;gBAAE,MAAM,KAAK,CAAC;YAChD,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9B,MAAM,IAAI,aAAa,CAAC,CAAC,EAAE,sBAAsB,IAAI,CAAC,SAAS,KAAK,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,IAAI,aAAa,CAAC,CAAC,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACzF,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;CACF;AAzMD,4BAyMC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAC3C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,SAAS,GAAI,UAAkC,CAAC,KAAK,CAAC;IAC5D,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,UAAU,CAAc,CAAC;AACjD,CAAC"}

package/dist/from-audit.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Audit findings → monitoring rules.
+ *
+ * The single most valuable thing the platform does, and the reason Audit and
+ * Sentinel belong in one product.
+ *
+ * An audit ends with a report, and a report is a document. Two months later
+ * the upgrade path a reviewer spent a day understanding is a paragraph nobody
+ * has reopened, and the person who reads it next is reading it during an
+ * incident. This turns what the audit *learned* into what the system
+ * *watches*: the privileged functions a reviewer identified become the
+ * functions that page someone when they are called.
+ *
+ * Two constraints shape the output:
+ *
+ *  - **A capability is not a finding.** A contract being upgradeable is not a
+ *    vulnerability, and the generated rule does not say it is. It watches for
+ *    the upgrade *happening*, which is an event worth knowing about however
+ *    legitimate the protocol.
+ *  - **Every rule must be actionable.** A rule that fires on something nobody
+ *    can respond to trains a team to close alerts unread, and then the real
+ *    one is closed unread too. Nothing here generates a rule for an event
+ *    with no plausible response.
+ */
+import type { RuleAction } from './model';
+import type { CreateRuleInput } from './client';
+/** What an audit observed about a contract, in the shape Protect reports it. */
+export interface AuditCapability {
+    /** e.g. UPGRADEABLE, MINT_AUTHORITY, PAUSABLE, BLACKLIST, FEE_CONTROL. */
+    type: string;
+    statement?: string;
+    /** The function, role or slot that grants it, when known. */
+    grantedBy?: string;
+}
+export interface AuditHandoverInput {
+    projectId: string;
+    /** Capabilities the audit confirmed the deployed code holds. */
+    capabilities: AuditCapability[];
+    /** Where alerts go. At minimum an in-platform alert. */
+    actions?: RuleAction[];
+    /**
+     * Treasury alert threshold in USD. Omitted means no treasury rule is
+     * generated: a threshold guessed on a customer's behalf is either so low it
+     * pages constantly or so high it never fires, and both teach people to
+     * ignore it.
+     */
+    treasuryThresholdUsd?: number;
+}
+interface Generated {
+    capability: string;
+    rule: CreateRuleInput;
+}
+/**
+ * Turn confirmed capabilities into rules.
+ *
+ * Deduplicated: a contract with both a proxy and an upgrade authority holds
+ * one capability described twice, and generating two identical rules would
+ * page someone twice for one event.
+ */
+export declare function rulesFromAudit(input: AuditHandoverInput): Generated[];
+/**
+ * Which capabilities produced no rule.
+ *
+ * Returned rather than silently dropped: a customer handed six rules for nine
+ * capabilities should be told which three are unwatched, so the gap is a
+ * decision rather than an assumption.
+ */
+export declare function unmappedCapabilities(capabilities: AuditCapability[]): string[];
+export {};
+//# sourceMappingURL=from-audit.d.ts.map

package/dist/from-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"from-audit.d.ts","sourceRoot":"","sources":["../src/from-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAiB,UAAU,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAEhD,gFAAgF;AAChF,MAAM,WAAW,eAAe;IAC9B,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,wDAAwD;IACxD,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;IACvB;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,UAAU,SAAS;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,eAAe,CAAC;CACvB;AAuHD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,kBAAkB,GAAG,SAAS,EAAE,CA0DrE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,eAAe,EAAE,GAAG,MAAM,EAAE,CAI9E"}

package/dist/from-audit.js

@@ -0,0 +1,207 @@
+"use strict";
+/**
+ * Audit findings → monitoring rules.
+ *
+ * The single most valuable thing the platform does, and the reason Audit and
+ * Sentinel belong in one product.
+ *
+ * An audit ends with a report, and a report is a document. Two months later
+ * the upgrade path a reviewer spent a day understanding is a paragraph nobody
+ * has reopened, and the person who reads it next is reading it during an
+ * incident. This turns what the audit *learned* into what the system
+ * *watches*: the privileged functions a reviewer identified become the
+ * functions that page someone when they are called.
+ *
+ * Two constraints shape the output:
+ *
+ *  - **A capability is not a finding.** A contract being upgradeable is not a
+ *    vulnerability, and the generated rule does not say it is. It watches for
+ *    the upgrade *happening*, which is an event worth knowing about however
+ *    legitimate the protocol.
+ *  - **Every rule must be actionable.** A rule that fires on something nobody
+ *    can respond to trains a team to close alerts unread, and then the real
+ *    one is closed unread too. Nothing here generates a rule for an event
+ *    with no plausible response.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rulesFromAudit = rulesFromAudit;
+exports.unmappedCapabilities = unmappedCapabilities;
+const DEFAULT_ACTIONS = [{ type: 'ALERT', config: {} }];
+/**
+ * Capability → the event worth watching, and why.
+ *
+ * Severity reflects how hard the change is to reverse, not how suspicious it
+ * is. A logic replacement is CRITICAL because every assumption in the audit
+ * stops holding the moment it lands — not because upgrading is wrong.
+ */
+const RULES = {
+    UPGRADEABLE: {
+        name: 'Contract logic replaced',
+        description: 'The proxy now points at different code. Every finding in the audit describes the previous '
+            + 'implementation and stops applying the moment this fires.',
+        severity: 'CRITICAL',
+        triggerType: 'contract.upgraded',
+        conditions: { op: 'eq', field: 'upgrade.changed', value: true },
+    },
+    ADMIN_CONTROL: {
+        name: 'Admin address changed',
+        description: 'Whoever can upgrade or configure this contract is now a different account.',
+        severity: 'CRITICAL',
+        triggerType: 'contract.admin_changed',
+        conditions: { op: 'eq', field: 'admin.changed', value: true },
+    },
+    OWNERSHIP: {
+        name: 'Ownership transferred',
+        description: 'Owner-only functions identified during the audit are now controlled by someone else.',
+        severity: 'HIGH',
+        triggerType: 'contract.ownership_transferred',
+        conditions: { op: 'eq', field: 'ownership.changed', value: true },
+    },
+    MINT_AUTHORITY: {
+        name: 'Supply increased',
+        description: 'The mint authority the audit identified was used. Legitimate for many designs — this reports it '
+            + 'so holders are not the last to know.',
+        severity: 'HIGH',
+        triggerType: 'token.supply_changed',
+        conditions: {
+            op: 'AND',
+            conditions: [
+                { op: 'eq', field: 'token.supplyIncreased', value: true },
+                // A percentage rather than an absolute: a fixed figure is meaningless
+                // across tokens with different supplies and decimals.
+                { op: 'gt', field: 'token.supplyChangePercent', value: 1 },
+            ],
+        },
+    },
+    PAUSABLE: {
+        name: 'Pause state changed',
+        description: 'The contract was paused or unpaused. Pausing is usually a defence, and knowing it happened is '
+            + 'how you find out an incident started without you.',
+        severity: 'HIGH',
+        triggerType: 'contract.paused',
+        conditions: { op: 'eq', field: 'contract.pauseChanged', value: true },
+    },
+    BLACKLIST: {
+        name: 'Transfer restriction applied',
+        description: 'An address was restricted from transferring. Reported because it is invisible on-chain otherwise.',
+        severity: 'MEDIUM',
+        triggerType: 'contract.function_called',
+        conditions: { op: 'contains', field: 'event.types', value: 'BLACKLIST' },
+    },
+    FORCED_BALANCE_CHANGE: {
+        name: 'Balance moved without the holder acting',
+        description: 'A permanent delegate or equivalent authority moved tokens from an account that did not sign for it. '
+            + 'Legitimate for some regulated designs, and always worth knowing about.',
+        severity: 'CRITICAL',
+        triggerType: 'contract.function_called',
+        conditions: { op: 'contains', field: 'event.types', value: 'FORCED_TRANSFER' },
+    },
+    GOVERNANCE: {
+        name: 'Governance proposal executed',
+        description: 'An executed proposal can change anything the audit assumed was fixed.',
+        severity: 'HIGH',
+        triggerType: 'governance.executed',
+        conditions: { op: 'eq', field: 'governance.executed', value: true },
+    },
+};
+/** Capability names normalised, so an audit may say MINT or MINT_AUTHORITY. */
+const ALIASES = {
+    // The canonical names the Protect layer emits. Chain-specific spellings —
+    // Sui's TreasuryCap, Solana's mintAuthority, an EIP-1967 slot — are already
+    // normalised to these before an audit hands anything over, so mapping raw
+    // chain vocabulary here would be mapping names that never arrive.
+    UPGRADEABLE: 'UPGRADEABLE',
+    DELEGATED_EXECUTION: 'UPGRADEABLE',
+    MINT_AUTHORITY: 'MINT_AUTHORITY',
+    PAUSABLE: 'PAUSABLE',
+    ACCOUNT_FREEZE: 'BLACKLIST',
+    FORCED_BALANCE_CHANGE: 'FORCED_BALANCE_CHANGE',
+    GOVERNANCE: 'GOVERNANCE',
+    // Accepted because an audit report may use them in prose, and rejecting a
+    // reviewer's own wording would silently drop a rule they expected.
+    PROXY: 'UPGRADEABLE',
+    UPGRADE_AUTHORITY: 'UPGRADEABLE',
+    ADMIN: 'ADMIN_CONTROL',
+    ADMIN_CONTROL: 'ADMIN_CONTROL',
+    OWNER: 'OWNERSHIP',
+    OWNERSHIP: 'OWNERSHIP',
+    MINT: 'MINT_AUTHORITY',
+    PAUSE: 'PAUSABLE',
+    FREEZE_AUTHORITY: 'BLACKLIST',
+    BLACKLIST: 'BLACKLIST',
+};
+/**
+ * Turn confirmed capabilities into rules.
+ *
+ * Deduplicated: a contract with both a proxy and an upgrade authority holds
+ * one capability described twice, and generating two identical rules would
+ * page someone twice for one event.
+ */
+function rulesFromAudit(input) {
+    const actions = input.actions?.length ? input.actions : DEFAULT_ACTIONS;
+    const seen = new Set();
+    const generated = [];
+    for (const capability of input.capabilities) {
+        const key = ALIASES[capability.type.toUpperCase()];
+        if (!key || seen.has(key))
+            continue;
+        seen.add(key);
+        const template = RULES[key];
+        if (!template)
+            continue;
+        generated.push({
+            capability: capability.type,
+            rule: {
+                projectId: input.projectId,
+                name: template.name,
+                description: capability.grantedBy
+                    ? `${template.description} Granted by ${capability.grantedBy}, identified during the audit.`
+                    : `${template.description} Identified during the audit.`,
+                severity: template.severity,
+                triggerType: template.triggerType,
+                conditions: template.conditions,
+                actions,
+                // Five minutes. Long enough that one event in a loop does not page a
+                // team repeatedly, short enough that a second, genuinely separate
+                // occurrence still gets through.
+                cooldownSeconds: 300,
+            },
+        });
+    }
+    if (typeof input.treasuryThresholdUsd === 'number' && input.treasuryThresholdUsd > 0) {
+        generated.push({
+            capability: 'TREASURY',
+            rule: {
+                projectId: input.projectId,
+                name: 'Large treasury outflow',
+                description: `An outbound movement above $${input.treasuryThresholdUsd.toLocaleString()}, the threshold agreed `
+                    + 'during the audit.',
+                severity: 'HIGH',
+                triggerType: 'treasury.transfer',
+                conditions: {
+                    op: 'AND',
+                    conditions: [
+                        { op: 'eq', field: 'transfer.direction', value: 'OUT' },
+                        { op: 'gt', field: 'transfer.valueUsd', value: input.treasuryThresholdUsd },
+                    ],
+                },
+                actions,
+                cooldownSeconds: 300,
+            },
+        });
+    }
+    return generated;
+}
+/**
+ * Which capabilities produced no rule.
+ *
+ * Returned rather than silently dropped: a customer handed six rules for nine
+ * capabilities should be told which three are unwatched, so the gap is a
+ * decision rather than an assumption.
+ */
+function unmappedCapabilities(capabilities) {
+    return capabilities
+        .filter((capability) => !ALIASES[capability.type.toUpperCase()])
+        .map((capability) => capability.type);
+}
+//# sourceMappingURL=from-audit.js.map

package/dist/from-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"from-audit.js","sourceRoot":"","sources":["../src/from-audit.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;AA8JH,wCA0DC;AASD,oDAIC;AAnMD,MAAM,eAAe,GAAiB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;AAEtE;;;;;;GAMG;AACH,MAAM,KAAK,GAMN;IACH,WAAW,EAAE;QACX,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EACT,4FAA4F;cAC1F,0DAA0D;QAC9D,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,mBAAmB;QAChC,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,IAAI,EAAE;KAChE;IACD,aAAa,EAAE;QACb,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,4EAA4E;QACzF,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,wBAAwB;QACrC,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE;KAC9D;IACD,SAAS,EAAE;QACT,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,sFAAsF;QACnG,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,gCAAgC;QAC7C,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,IAAI,EAAE;KAClE;IACD,cAAc,EAAE;QACd,IAAI,EAAE,kBAAkB;QACxB,WAAW,EACT,kGAAkG;cAChG,sCAAsC;QAC1C,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,sBAAsB;QACnC,UAAU,EAAE;YACV,EAAE,EAAE,KAAK;YACT,UAAU,EAAE;gBACV,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,IAAI,EAAE;gBACzD,sEAAsE;gBACtE,sDAAsD;gBACtD,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,2BAA2B,EAAE,KAAK,EAAE,CAAC,EAAE;aAC3D;SACF;KACF;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EACT,gGAAgG;cAC9F,mDAAmD;QACvD,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,iBAAiB;QAC9B,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,IAAI,EAAE;KACtE;IACD,SAAS,EAAE;QACT,IAAI,EAAE,8BAA8B;QACpC,WAAW,EAAE,mGAAmG;QAChH,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,0BAA0B;QACvC,UAAU,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE;KACzE;IACD,qBAAqB,EAAE;QACrB,IAAI,EAAE,yCAAyC;QAC/C,WAAW,EACT,sGAAsG;cACpG,wEAAwE;QAC5E,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,0BAA0B;QACvC,UAAU,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,iBAAiB,EAAE;KAC/E;IACD,UAAU,EAAE;QACV,IAAI,EAAE,8BAA8B;QACpC,WAAW,EAAE,uEAAuE;QACpF,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,qBAAqB;QAClC,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,IAAI,EAAE;KACpE;CACF,CAAC;AAEF,+EAA+E;AAC/E,MAAM,OAAO,GAA2B;IACtC,0EAA0E;IAC1E,4EAA4E;IAC5E,0EAA0E;IAC1E,kEAAkE;IAClE,WAAW,EAAE,aAAa;IAC1B,mBAAmB,EAAE,aAAa;IAClC,cAAc,EAAE,gBAAgB;IAChC,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,WAAW;IAC3B,qBAAqB,EAAE,uBAAuB;IAC9C,UAAU,EAAE,YAAY;IACxB,0EAA0E;IAC1E,mEAAmE;IACnE,KAAK,EAAE,aAAa;IACpB,iBAAiB,EAAE,aAAa;IAChC,KAAK,EAAE,eAAe;IACtB,aAAa,EAAE,eAAe;IAC9B,KAAK,EAAE,WAAW;IAClB,SAAS,EAAE,WAAW;IACtB,IAAI,EAAE,gBAAgB;IACtB,KAAK,EAAE,UAAU;IACjB,gBAAgB,EAAE,WAAW;IAC7B,SAAS,EAAE,WAAW;CACvB,CAAC;AAEF;;;;;;GAMG;AACH,SAAgB,cAAc,CAAC,KAAyB;IACtD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;IACxE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,SAAS,GAAgB,EAAE,CAAC;IAElC,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACpC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,QAAQ;YAAE,SAAS;QAExB,SAAS,CAAC,IAAI,CAAC;YACb,UAAU,EAAE,UAAU,CAAC,IAAI;YAC3B,IAAI,EAAE;gBACJ,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,WAAW,EAAE,UAAU,CAAC,SAAS;oBAC/B,CAAC,CAAC,GAAG,QAAQ,CAAC,WAAW,eAAe,UAAU,CAAC,SAAS,gCAAgC;oBAC5F,CAAC,CAAC,GAAG,QAAQ,CAAC,WAAW,+BAA+B;gBAC1D,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,OAAO;gBACP,qEAAqE;gBACrE,kEAAkE;gBAClE,iCAAiC;gBACjC,eAAe,EAAE,GAAG;aACrB;SACF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,oBAAoB,KAAK,QAAQ,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,EAAE,CAAC;QACrF,SAAS,CAAC,IAAI,CAAC;YACb,UAAU,EAAE,UAAU;YACtB,IAAI,EAAE;gBACJ,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,IAAI,EAAE,wBAAwB;gBAC9B,WAAW,EACT,+BAA+B,KAAK,CAAC,oBAAoB,CAAC,cAAc,EAAE,yBAAyB;sBACjG,mBAAmB;gBACvB,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE,mBAAmB;gBAChC,UAAU,EAAE;oBACV,EAAE,EAAE,KAAK;oBACT,UAAU,EAAE;wBACV,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE;wBACvD,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,KAAK,CAAC,oBAAoB,EAAE;qBAC5E;iBACF;gBACD,OAAO;gBACP,eAAe,EAAE,GAAG;aACrB;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAAC,YAA+B;IAClE,OAAO,YAAY;SAChB,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;SAC/D,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export * from './model';
+export * from './client';
+export * from './from-audit';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./model"), exports);
+__exportStar(require("./client"), exports);
+__exportStar(require("./from-audit"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAwB;AACxB,2CAAyB;AACzB,+CAA6B"}

package/dist/model.d.ts

@@ -0,0 +1,77 @@
+/**
+ * The Sentinel model.
+ *
+ * Sentinel answers a different question from Protect. Protect asks "should I
+ * sign this?" about something a user is about to do; Sentinel asks "did
+ * something happen to what I own?" about systems already deployed. That
+ * changes what matters:
+ *
+ *  - **The subject is yours.** You register your own contracts, wallets and
+ *    treasuries. Nothing here classifies a third party, so none of Protect's
+ *    machinery for avoiding accusations applies — and neither does its
+ *    restraint about severity.
+ *  - **A rule is a statement about facts, not a score.** A rule fires or it
+ *    does not, and the alert says which fact made it fire. There is no
+ *    threshold model to argue with.
+ *  - **An alert must be actionable.** An alert nobody can act on trains
+ *    people to close alerts, which is worse than having none.
+ */
+export declare const ALERT_SEVERITIES: readonly ["INFO", "LOW", "MEDIUM", "HIGH", "CRITICAL"];
+export type AlertSeverity = (typeof ALERT_SEVERITIES)[number];
+/** What a monitored thing is. Determines which rules can apply to it. */
+export declare const TARGET_TYPES: readonly ["CONTRACT", "WALLET", "TREASURY", "MULTISIG", "LP_POOL", "ORACLE", "BRIDGE", "GOVERNANCE"];
+export type TargetType = (typeof TARGET_TYPES)[number];
+export interface MonitoringTarget {
+    id: string;
+    projectId: string;
+    chainKey: string;
+    address: string;
+    targetType: TargetType;
+    label: string | null;
+    enabled: boolean;
+    createdAt: string;
+}
+export interface RuleAction {
+    type: string;
+    config: Record<string, unknown>;
+}
+export interface MonitoringRule {
+    id: string;
+    projectId: string;
+    name: string;
+    description: string | null;
+    severity: AlertSeverity;
+    triggerType: string;
+    conditions: Record<string, unknown>;
+    actions: RuleAction[];
+    /**
+     * Suppression window. Without one, a contract emitting the same event in a
+     * loop pages someone a thousand times for one incident, and the thousandth
+     * page is less useful than the first.
+     */
+    cooldownSeconds: number;
+    enabled: boolean;
+    createdAt: string;
+}
+export interface Alert {
+    id: string;
+    ruleId: string | null;
+    ruleName: string | null;
+    severity: AlertSeverity;
+    title: string;
+    description: string | null;
+    chainKey: string | null;
+    address: string | null;
+    txHash: string | null;
+    /** The facts that made the rule fire. An alert without these is unactionable. */
+    facts: Record<string, unknown> | null;
+    status: string;
+    acknowledgedAt: string | null;
+    createdAt: string;
+}
+export interface RuleTestResult {
+    matched: boolean;
+    /** Which conditions passed and which did not, so a rule can be debugged. */
+    explanation: string[];
+}
+//# sourceMappingURL=model.d.ts.map

package/dist/model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,eAAO,MAAM,gBAAgB,wDAAyD,CAAC;AACvF,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D,yEAAyE;AACzE,eAAO,MAAM,YAAY,sGAEf,CAAC;AACX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,UAAU,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,aAAa,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB;;;;OAIG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,aAAa,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,iFAAiF;IACjF,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,4EAA4E;IAC5E,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB"}