/* global React */ // WalletConnect is exported to window by components.jsx (loaded first). const { useState: useStateL, useEffect: useEffectL } = React; /* =================================================================== */ /* HERO */ /* =================================================================== */ function Hero({ setPage }) { return (
{/* Top label row */}
Guardrails for AI wallets
{/* Headline — reduced from clamp(80px,14vw,220px) */}

Your AI agent
can't
overspend.

{/* Floating doodles */}
← the whole product, in five words
{/* Sub + CTAs row */}

Beni deploys guarded wallets for AI agents, with spending limits enforced by the Cardano ledger itself.

); } /* Marquee removed — no real partnerships to list yet */ /* =================================================================== */ /* PROBLEM */ /* =================================================================== */ function Problem() { return (
01 · The problem {/* Reduced from 80px */}

AI agents
can move money.
nothing
can stop them.

Autonomous agents already trade, pay, and route funds, usually unsupervised. When the model hallucinates, or a prompt gets exploited, or a key leaks, there is no enforced ceiling between the agent and your treasury.

and "trust me" is not a security model.
); } function StatPanel({ n, lead, tail, accent, rot = 0 }) { return (
{/* Reduced from 140px */}
{n}
{lead}
· {tail}
); } /* =================================================================== */ /* HOW IT WORKS */ /* =================================================================== */ function HowItWorks() { return (
02 · How it works {/* Reduced from 96px */}

Every transaction
passes through Beni.

Your agent signs as usual. Our validator looks at the transaction, checks it against your rules, and either lets it through or it doesn't.

{[ { n: "01", t: "Agent builds the transaction", d: "Beni's SDK wraps your agent's wallet provider. The agent's code does not change." }, { n: "02", t: "Rules evaluate on-chain", d: "An Aiken validator checks caps, whitelists, daily limits, and the thread-token signature." }, { n: "03", t: "Humans gate the edge cases", d: "Anything above your threshold pauses in the approvals queue for a signed owner approval." }, { n: "04", t: "Settle, or revert", d: "Cardano either accepts the whole thing, or rejects it. No half-baked state to clean up." }, ].map(s => (
{s.n}
{s.t}

{s.d}

))}
and that's basically the whole thing.
); } /* =================================================================== */ /* THE RULES (features) */ /* =================================================================== */ function Rules() { const items = [ { n: "I.", t: "A ceiling on every spend", d: "Set the maximum size of any single transaction. The agent cannot exceed it.", doodle: "cap" }, { n: "II.", t: "A rolling daily budget", d: "A time-windowed allowance tracked on-chain. No end-of-day cliff, no off-chain timer to trust.", doodle: "clock" }, { n: "III.", t: "Trusted addresses bypass review", d: "Pre-approve who the agent can pay freely. Everything else stops at the gate.", doodle: "list" }, { n: "IV.", t: "Human-in-the-loop approvals", d: "Anything above your threshold pauses for your signature before it can settle.", doodle: "hand" }, { n: "V.", t: "Emergency freeze", d: "One owner action halts every outbound transaction within a block.", doodle: "freeze" }, { n: "VI.", t: "Thread-token integrity", d: "A non-fungible thread token anchors the wallet's state so a forged datum can't slip in.", doodle: "shield" }, ]; return (
{/* Reduced from 120px */}

Five guardrails,
one thread token.

A small kit of rules, all enforced by the Cardano ledger. Compose them into any policy, from a single trading bot to a shared treasury. A live dashboard and an AI assistant sit on top.

{items.map((x, i) => (
{x.n}
{x.t}

{x.d}

))}
); } function RuleDoodle({ kind }) { const map = { cap: , clock: , list: , hand: , freeze: , eye: , chat: , shield: , }; return {map[kind]}; } /* =================================================================== */ /* SDK SECTION */ /* =================================================================== */ function SdkSection({ setPage }) { return (
03 · Integration {/* Reduced from 88px */}

A few lines
to deploy a
guarded wallet.

Set your rules, create the wallet on-chain, and let the agent spend through it. The Aiken validator does the enforcing, so there's no service in the middle to trust or pay.

built with AIKEN TYPESCRIPT BLOCKFROST
); } function CodeCard() { return (
AGENT.TS COPY 
{`// Deploy a guarded agent wallet on-chain.
`}import{` { makeLucid, createAgentWallet, agentSpend, freezeWallet } `}from{` `}"beni-sdk"{`

`}const{` lucid = `}await{` makeLucid({ network: `}"Mainnet"{`, blockfrostApiKey })
lucid.selectWalletFromPrivateKey(agentPrivateKey)

`}const{` wallet = `}await{` createAgentWallet(lucid, {
  perTxCapLovelace:  `}2_000_000n{`,   `}// 2 ADA per-tx cap{`
  dailyCapLovelace:  `}10_000_000n{`,  `}// 10 ADA daily limit{`
  allowedCredentialHashes: [],           `}// whitelist{`
  ownerPkh: ownerPubKeyHash,
  isFrozen: `}false{`,
})

`}await{` agentSpend(lucid, wallet, `}"addr1..."{`, `}1_000_000n{`)
`}await{` freezeWallet(lucid, wallet)   `}// one call, one block
); } /* Testimonial removed — no real users yet */ /* =================================================================== */ /* TELEGRAM BOT */ /* =================================================================== */ function TelegramSection() { const chatLines = [ { from: "user", text: "/pay addr_test1qz… 5 server invoice" }, { from: "bot", text: "🔔 Above your per-tx cap — approval required.\n₳5 → addr_test1qz…\nserver invoice" }, { from: "bot", text: "✅ Approve ❌ Reject", buttons: true }, { from: "bot", text: "✅ Approved & sent — view transaction" }, ]; return (
04 · Telegram

Your agent's wallet,
in your pocket.

Message @Beniwallet_bot and get your own guarded agent wallet in two commands. Under-cap spends go through instantly; anything above your cap lands on your phone with Approve / Reject buttons. Approving co-signs on-chain. Rejecting costs nothing.

The agent proposes. The chain constrains. You decide.

TELEGRAM · @BENIWALLET_BOT
{chatLines.map((m, i) => (
{m.text}
))}
); } /* =================================================================== */ /* FAQ */ /* =================================================================== */ function FAQ({ setPage }) { const items = [ { q: "Where do the rules actually run?", a: "Inside an Aiken validator on Cardano. Beni's off-chain services help you author and observe, but enforcement happens on-chain. No off-chain dependency can override a deployed cap." }, { q: "Does Beni hold my funds?", a: "No. Beni never takes custody. Your wallet still signs every transaction; the validator simply refuses to settle anything that violates your rules." }, { q: "What happens during an emergency freeze?", a: "A single signed action burns the agent's spend permission until you re-issue it. The freeze takes one block to finalize and cannot be bypassed off-chain." }, { q: "Which agents and frameworks are supported?", a: "Anything that constructs Cardano transactions: LangChain, AutoGen, custom Python or TypeScript bots, internal trading services. Beni wraps the wallet, not the agent." }, { q: "How is this different from a multisig?", a: "Multisigs gate signatures. Beni gates behavior. Per-tx caps, rolling budgets, whitelists, and approval thresholds are policies a multisig cannot express." }, { q: "What does it cost?", a: "Deploying a guarded wallet costs a one-time 2 ADA fee, paid from your connected wallet as part of the deployment flow. The SDK is free and open source; there are no subscriptions and no per-transaction charges." }, { q: "Has this run on mainnet?", aNode: ( <> Yes. The dashboard and bot connect to Cardano mainnet directly. The currently live contract was deployed there with real ADA in{" "} this transaction, publicly verifiable on Cardanoscan. An earlier version of the contract was also deployed and exercised with a{" "} wallet deploy {" "}and a{" "} guarded spend, before a fix to the FreezeWallet redeemer required a redeploy — kept here as a historical record under the pre-fix validator. ) }, { q: "Is the contract audited?", a: "Not yet. Beni is a hackathon project built for Gimbalabs Piece of Pie 2026. A small mainnet deployment above verifies real functionality, but a formal audit is planned before onboarding real user funds at scale." }, { q: "In the live dashboard, is the agent a different key from mine?", a: "Not by default. Since the deploy where the connected wallet became the agent, the dashboard registers your own key as both owner and agent — so the caps you set are a self-imposed rate limit, not a demonstration of a separate, less-trusted key being constrained. The validator supports a distinct agent_pkh and owner_pkh — this is how you'd deploy for a real autonomous agent with its own restricted key, holding less power than the owner — but the flagship mainnet proof above uses one key for both roles for a simpler, non-custodial first run. Use ownerAction() from the SDK to set a separate agent_pkh if you want the real separation demonstrated." }, ]; const [open, setOpen] = useStateL(0); return (
05 · FAQ {/* Reduced from 88px */}

Questions,
answered.

For everything else, the docs go deeper.

{items.map((it, i) => (
{open === i && (
{it.aNode ?? it.a}
)}
))}
); } /* =================================================================== */ /* FINAL CTA — giant mural */ /* =================================================================== */ function FinalCTA({ setPage }) { return (
Get started
{/* Reduced from clamp(80px,12vw,180px) */}

Give your
agents a leash.

A hackathon project, live on Cardano mainnet. Beni never takes custody. (your keys stay yours.)

); } /* =================================================================== */ /* ROOT */ /* =================================================================== */ function Landing({ setPage }) { return (
); } Object.assign(window, { Landing });