@reinconsole/policy-engine 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Rein contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,35 @@
+# @reinconsole/policy-engine
+
+The rule engine of **[Rein](https://github.com/bugiiiii11/rein)** — the control plane for AI agent payments. A sandboxed, declarative policy engine that judges every payment intent (`deny > escalate > allow > default`), with every decision ed25519-signed and sha256 hash-chained into a tamper-evident audit log.
+
+> **Status: v0.1 — early open-source infrastructure, live on testnet.** APIs may change before 1.0. See it running: [Rein console](https://reinconsole-production.up.railway.app/).
+
+## Install & run
+
+```bash
+npm install @reinconsole/policy-engine
+# or just run it:
+npx -p @reinconsole/policy-engine rein-policy-engine   # HTTP API on :8787 (PORT/HOST env)
+```
+
+Point [`@reinconsole/sdk`](https://www.npmjs.com/package/@reinconsole/sdk)'s guard at it (`engineUrl`) and every x402 paywall your agent hits is evaluated here first.
+
+## In-process
+
+```ts
+import { PolicyEngine, buildServer } from '@reinconsole/policy-engine';
+
+const engine = new PolicyEngine();      // in-memory stores by default
+const app = buildServer(engine);        // Fastify instance (not yet listening)
+await app.listen({ port: 8787 });
+```
+
+## What it does
+
+- **Declarative policies** — budgets over rolling windows, per-tx caps, vendor allow/deny lists by glob, escalation, and reputation rules (`vendorReputationLt`, fed by [`@reinconsole/graph`](https://www.npmjs.com/package/@reinconsole/graph)). Precedence is `deny > escalate > allow > default`.
+- **Kill switch** — freeze an agent and there is no allow; the check happens before evaluation.
+- **Signed decisions** — each decision commits to the exact intent it judged (`intentHash`), is ed25519-signed, and links to the previous decision's hash. `verifyDecisionChain` validates the whole history offline; the `{intent, decision}` pair is a self-contained spend voucher downstream tiers verify without calling back.
+- **Store ports** — agents, policies, rolling spend, and the decision log sit behind injectable ports (`SpendStorePort`, `PolicyStorePort`, `AgentRegistryPort`). In-memory implementations ship here; the durable Postgres-backed variant lives in the [monorepo](https://github.com/bugiiiii11/rein) (`@reinconsole/store`) and keeps the hash chain continuous across restarts.
+- **HTTP API** — `POST /v1/evaluate`, agent + policy CRUD, decision reads. Zod-validated 400s, not 500s.
+
+MIT © Rein contributors · [Repository](https://github.com/bugiiiii11/rein) · [Issues](https://github.com/bugiiiii11/rein/issues)

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { A as AgentRegistryPort, D as DecisionInput, a as DecisionLog, b as DecisionLogKeyPair, c as DecisionLogOptions, E as EngineStores, d as EvaluateOutput, e as EvaluationResult, I as InMemoryAgentRegistry, f as InMemoryPolicyStore, g as InMemorySpendStore, h as IntentInput, M as MaybePromise, P as PolicyEngine, i as PolicyStorePort, S as SpendContext, j as SpendRecord, k as SpendStorePort, buildServer, l as conditionMatches, m as evaluate, p as parseWindowMs, n as policyApplies, v as verifyDecisionChain } from './server.js';
+export { globMatch, globMatchAny } from '@reinconsole/core';
+import 'zod';
+import 'node:crypto';
+import 'fastify';