@isnad-isn/guard 1.0.0

package/README.md

@@ -0,0 +1,46 @@
+# ISNAD Security SDK 🛡️⚙️
+
+Official TypeScript/JavaScript SDK for the ISNAD Protocol. Secure your autonomous AI agents with semantic intent verification, dry-run simulations, and cryptographic code audits.
+
+## Installation
+
+```bash
+npm install @isnad/guard
+```
+
+## Features
+
+- **Intent Verification:** Cross-reference agent reasoning with raw blockchain calldata.
+- **Simulation Oracle:** Dry-run transactions to see balance changes before signing.
+- **Reputation Check:** Access the ISNAD Intelligence DB for wallet risk scoring.
+- **ISNAD Handshake:** Middleware to enforce zero-trust interactions between agents.
+
+## Usage
+
+```typescript
+import { IsnadClient, IsnadHandshake } from '@isnad/guard';
+
+const isnad = new IsnadClient({
+  apiUrl: "https://api.isnad.io/v1", // Default to local node
+});
+
+// 1. Verify Intent
+const tx = { to: "0x...", data: "0x..." };
+const reasoning = "I am swapping 1 ETH for USDC.";
+const result = await isnad.verifyIntent(reasoning, tx);
+
+if (result.verdict === "REJECTED") {
+  console.error("Hijack attempt blocked!");
+}
+
+// 2. Enforce Handshake
+const handshake = new IsnadHandshake(isnad);
+await handshake.enforce("0xCounterpartyAddress");
+```
+
+## Roadmap
+- [ ] Python SDK (@isnad-py)
+- [ ] Native LangChain Middleware
+- [ ] MPC (Multi-Party Computation) Signature Guard
+
+*Built by LeoAGI. Architecting the Immune System of the Agentic Web.*

package/handshake.ts

@@ -0,0 +1,34 @@
+import { IsnadClient } from './index';
+
+/**
+ * ISNAD Handshake Middleware
+ * Viral Growth Engine: Rejects agents that haven't been audited.
+ */
+export class IsnadHandshake {
+  private isnad: IsnadClient;
+
+  constructor(isnadClient: IsnadClient) {
+    this.isnad = isnadClient;
+  }
+
+  /**
+   * Gates an interaction with another agent.
+   * @param counterpartyAddress The wallet address of the other agent.
+   */
+  async enforce(counterpartyAddress: string) {
+    console.log(`[ISNAD] Enforcing handshake for ${counterpartyAddress}...`);
+    
+    const reputation = await this.isnad.checkReputation(counterpartyAddress);
+    
+    if (reputation.status === "flagged") {
+      throw new Error(`ISNAD_REJECTED: Counterparty ${counterpartyAddress} is blacklisted. Reason: ${reputation.reason}`);
+    }
+
+    if (reputation.score > 50) {
+      throw new Error(`ISNAD_REJECTED: Counterparty risk score too high (${reputation.score}).`);
+    }
+
+    console.log(`✅ ISNAD Handshake successful for ${counterpartyAddress}.`);
+    return true;
+  }
+}

package/index.ts

@@ -0,0 +1,57 @@
+import axios from 'axios';
+
+export interface AuditConfig {
+  apiUrl?: string;
+  apiKey?: string;
+}
+
+export class IsnadClient {
+  private apiUrl: string;
+
+  constructor(config: AuditConfig = {}) {
+    this.apiUrl = config.apiUrl || "http://localhost:3000/api/v1";
+  }
+
+  /**
+   * Performs a semantic intent verification on a transaction.
+   */
+  async verifyIntent(intent: string, txData: any, componentName = "SDK-Client") {
+    try {
+      const response = await axios.post(`${this.apiUrl}/audit/intent`, {
+        stated_intent: intent,
+        tx_data: txData,
+        component_name: componentName
+      });
+      return response.data;
+    } catch (error: any) {
+      throw new Error(`ISNAD SDK Error: ${error.response?.data?.error || error.message}`);
+    }
+  }
+
+  /**
+   * Checks the reputation of an address.
+   */
+  async checkReputation(address: string) {
+    const response = await axios.get(`${this.apiUrl}/intelligence/reputation/${address}`);
+    return response.data;
+  }
+
+  /**
+   * Dry-runs a transaction to see asset changes.
+   */
+  async simulateTransaction(params: { from: string, to: string, data?: string, value?: string }) {
+    const response = await axios.post(`${this.apiUrl}/audit/simulate`, params);
+    return response.data;
+  }
+
+  /**
+   * Verifies an approval calldata.
+   */
+  async verifyApproval(calldata: string, chainId: number = 1) {
+    const response = await axios.post(`${this.apiUrl}/audit/approval`, {
+      calldata,
+      chain_id: chainId
+    });
+    return response.data;
+  }
+}

package/package.json

@@ -0,0 +1,17 @@
+{
+  "name": "@isnad-isn/guard",
+  "version": "1.0.0",
+  "description": "Official security SDK for the ISNAD Protocol. Provides intent verification and simulation guards for AI agents.",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "author": "LeoAGI",
+  "license": "MIT",
+  "dependencies": {
+    "axios": "^1.6.0",
+    "zod": "^3.22.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/LeoAGI/isnad-sdk"
+  }
+}