@saviours/check 0.1.0

package/README.md

@@ -0,0 +1,53 @@
+# `@saviours/check`
+
+Two-line counterparty check. Default path talks to Sepolia ENS only — **zero** `@saviours/core`, **$0**, no our server.
+
+```ts
+import { check } from "@saviours/check";
+
+const r = await check("0x935bfb495e33f74d2e9735df1da66ace442ede48");
+if (r.decision === "BLOCK") throw new Error("counterparty is named TAINTED");
+```
+
+| Mode | Path | Cost | Our server? |
+|---|---|---|---|
+| `ens` (default) | PermissionedResolver.text | $0 | No |
+| `shield` | `POST /api/shield/check` | $0 | Gateway |
+| `full` | `POST /api/investigate` | ~USDC on miss | Gateway |
+
+Also: `guard(address)`, `castCommand(address)`.
+
+## Install
+
+### From git (works today)
+
+```bash
+pnpm add github:devhb1/Saviour#path:packages/check
+# or
+npm install github:devhb1/Saviour#path:packages/check
+```
+
+`prepare` runs `tsc` on install so `dist/` is built (it is gitignored in the monorepo).
+
+### From npm (after publish)
+
+```bash
+pnpm add @saviours/check
+```
+
+Requires the npm org `@saviours` and:
+
+```bash
+cd packages/check
+npm login
+npm publish --access public
+```
+
+## Smoke
+
+```bash
+node --input-type=module -e "
+import { check } from '@saviours/check';
+console.log(await check('0x935bfb495e33f74d2e9735df1da66ace442ede48'));
+"
+```

package/dist/castCommand.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Verifiable one-liner — same path as Identity / live-agent (no our server).
+ */
+export declare function castCommand(address: string, opts?: {
+    resolver?: string;
+    parent?: string;
+    key?: string;
+}): string;
+//# sourceMappingURL=castCommand.d.ts.map

package/dist/castCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"castCommand.d.ts","sourceRoot":"","sources":["../src/castCommand.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1D,MAAM,CAUR"}

package/dist/castCommand.js

@@ -0,0 +1,16 @@
+const DEFAULT_RESOLVER = "0xF479306621F718F7d76875f67506ceD33717751c";
+/**
+ * Verifiable one-liner — same path as Identity / live-agent (no our server).
+ */
+export function castCommand(address, opts) {
+    const a = address.trim().toLowerCase();
+    if (!/^0x[a-f0-9]{40}$/.test(a)) {
+        throw new Error(`Invalid address: ${address}`);
+    }
+    const parent = opts?.parent ?? "saviours.eth";
+    const resolver = opts?.resolver ?? DEFAULT_RESOLVER;
+    const key = opts?.key ?? "saviours.status";
+    const ens = `${a}.${parent}`;
+    return `cast call ${resolver} "text(bytes32,string)(string)" $(cast namehash ${ens}) "${key}"`;
+}
+//# sourceMappingURL=castCommand.js.map

package/dist/castCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"castCommand.js","sourceRoot":"","sources":["../src/castCommand.ts"],"names":[],"mappings":"AAAA,MAAM,gBAAgB,GACpB,4CAAqD,CAAC;AAExD;;GAEG;AACH,MAAM,UAAU,WAAW,CACzB,OAAe,EACf,IAA2D;IAE3D,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,cAAc,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,gBAAgB,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,IAAI,iBAAiB,CAAC;IAC3C,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;IAC7B,OAAO,aAAa,QAAQ,mDAAmD,GAAG,MAAM,GAAG,GAAG,CAAC;AACjG,CAAC"}

package/dist/check.d.ts

@@ -0,0 +1,10 @@
+import type { CheckOptions, CheckResult } from "./types.js";
+/**
+ * Counterparty check.
+ *
+ * - `ens` (default): Sepolia PermissionedResolver · $0 · no our server
+ * - `shield`: POST /api/shield/check · $0 · gateway
+ * - `full`: POST /api/investigate · ~$0.01 on miss · gateway
+ */
+export declare function check(address: string, opts?: CheckOptions): Promise<CheckResult>;
+//# sourceMappingURL=check.d.ts.map

package/dist/check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../src/check.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE5D;;;;;;GAMG;AACH,wBAAsB,KAAK,CACzB,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,WAAW,CAAC,CAKtB"}

package/dist/check.js

@@ -0,0 +1,18 @@
+import { checkEns } from "./ens.js";
+import { checkFull, checkShield } from "./gateway.js";
+/**
+ * Counterparty check.
+ *
+ * - `ens` (default): Sepolia PermissionedResolver · $0 · no our server
+ * - `shield`: POST /api/shield/check · $0 · gateway
+ * - `full`: POST /api/investigate · ~$0.01 on miss · gateway
+ */
+export async function check(address, opts = {}) {
+    const mode = opts.mode ?? "ens";
+    if (mode === "shield")
+        return checkShield(address, opts);
+    if (mode === "full")
+        return checkFull(address, opts);
+    return checkEns(address, opts);
+}
+//# sourceMappingURL=check.js.map

package/dist/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../src/check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGtD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CACzB,OAAe,EACf,OAAqB,EAAE;IAEvB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;IAChC,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACzD,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrD,OAAO,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AACjC,CAAC"}

package/dist/ens.d.ts

@@ -0,0 +1,7 @@
+/**
+ * ENS-only check — imports nothing from @saviours/core.
+ * Mirror of consumers/live-agent/src/ensShield.ts.
+ */
+import type { CheckOptions, CheckResult } from "./types.js";
+export declare function checkEns(address: string, opts?: CheckOptions): Promise<CheckResult>;
+//# sourceMappingURL=ens.d.ts.map

package/dist/ens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ens.d.ts","sourceRoot":"","sources":["../src/ens.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAY,MAAM,YAAY,CAAC;AAkCtE,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,WAAW,CAAC,CAyDtB"}

package/dist/ens.js

@@ -0,0 +1,89 @@
+/**
+ * ENS-only check — imports nothing from @saviours/core.
+ * Mirror of consumers/live-agent/src/ensShield.ts.
+ */
+import { createPublicClient, http } from "viem";
+import { namehash } from "viem/ens";
+import { sepolia } from "viem/chains";
+const DEFAULT_RESOLVER = "0xF479306621F718F7d76875f67506ceD33717751c";
+const textAbi = [
+    {
+        name: "text",
+        type: "function",
+        stateMutability: "view",
+        inputs: [
+            { name: "node", type: "bytes32" },
+            { name: "key", type: "string" },
+        ],
+        outputs: [{ name: "", type: "string" }],
+    },
+];
+function requireAddress(address) {
+    const a = address.trim().toLowerCase();
+    if (!/^0x[a-f0-9]{40}$/.test(a)) {
+        throw new Error(`Invalid address: ${address}`);
+    }
+    return a;
+}
+function decisionFromStatus(status) {
+    const s = status.toUpperCase();
+    if (s === "TAINTED")
+        return "BLOCK";
+    if (s === "WATCH")
+        return "WARN";
+    if (s === "SAFE")
+        return "ALLOW";
+    return "ESCALATE";
+}
+export async function checkEns(address, opts = {}) {
+    const addr = requireAddress(address);
+    const parent = opts.parent ?? "saviours.eth";
+    const resolver = (opts.resolver ?? DEFAULT_RESOLVER);
+    const rpcUrl = opts.rpcUrl ??
+        process.env.SEPOLIA_RPC_URL ??
+        "https://ethereum-sepolia-rpc.publicnode.com";
+    const ensName = `${addr}.${parent}`;
+    const t0 = Date.now();
+    const client = createPublicClient({
+        chain: sepolia,
+        transport: http(rpcUrl),
+    });
+    const node = namehash(ensName);
+    const readText = (key) => client.readContract({
+        address: resolver,
+        abi: textAbi,
+        functionName: "text",
+        args: [node, key],
+    });
+    const status = (await readText("saviours.status")).trim();
+    if (!status) {
+        return {
+            decision: "ESCALATE",
+            status: "UNKNOWN",
+            ensName,
+            source: "none",
+            reason: "No saviours.status on ENS",
+            latencyMs: Date.now() - t0,
+            cost: { graph: 0, ai: 0, usd: 0 },
+            mode: "ens",
+        };
+    }
+    const [threat, evidenceHash, atomicTx] = await Promise.all([
+        readText("saviours.threat"),
+        readText("saviours.evidenceHash"),
+        readText("saviours.atomicTx"),
+    ]);
+    return {
+        decision: decisionFromStatus(status),
+        status,
+        ensName,
+        source: "ens",
+        threat: threat || undefined,
+        evidenceHash: evidenceHash || undefined,
+        atomicTx: atomicTx || undefined,
+        latencyMs: Date.now() - t0,
+        cost: { graph: 0, ai: 0, usd: 0 },
+        mode: "ens",
+    };
+}
+//# sourceMappingURL=ens.js.map

package/dist/ens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ens.js","sourceRoot":"","sources":["../src/ens.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAY,MAAM,MAAM,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAGtC,MAAM,gBAAgB,GACpB,4CAAmD,CAAC;AAEtD,MAAM,OAAO,GAAG;IACd;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,UAAU;QAChB,eAAe,EAAE,MAAM;QACvB,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE;YACjC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE;SAChC;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;KACxC;CACO,CAAC;AAEX,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,CAAkB,CAAC;AAC5B,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc;IACxC,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACpC,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IACjC,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC;IACjC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAe,EACf,OAAqB,EAAE;IAEvB,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC;IAC7C,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,gBAAgB,CAAQ,CAAC;IAC5D,MAAM,MAAM,GACV,IAAI,CAAC,MAAM;QACX,OAAO,CAAC,GAAG,CAAC,eAAe;QAC3B,6CAA6C,CAAC;IAEhD,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC;IACpC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAChC,KAAK,EAAE,OAAO;QACd,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC;KACxB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAQ,CAAC;IAEtC,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,EAAE,CAC/B,MAAM,CAAC,YAAY,CAAC;QAClB,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,OAAO;QACZ,YAAY,EAAE,MAAM;QACpB,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC;KAClB,CAAC,CAAC;IAEL,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,QAAQ,EAAE,UAAU;YACpB,MAAM,EAAE,SAAS;YACjB,OAAO;YACP,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,2BAA2B;YACnC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;YAC1B,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE;YACjC,IAAI,EAAE,KAAK;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzD,QAAQ,CAAC,iBAAiB,CAAC;QAC3B,QAAQ,CAAC,uBAAuB,CAAC;QACjC,QAAQ,CAAC,mBAAmB,CAAC;KAC9B,CAAC,CAAC;IAEH,OAAO;QACL,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC;QACpC,MAAM;QACN,OAAO;QACP,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,MAAM,IAAI,SAAS;QAC3B,YAAY,EAAE,YAAY,IAAI,SAAS;QACvC,QAAQ,EAAE,QAAQ,IAAI,SAAS;QAC/B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;QAC1B,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE;QACjC,IAAI,EAAE,KAAK;KACZ,CAAC;AACJ,CAAC"}

package/dist/gateway.d.ts

@@ -0,0 +1,4 @@
+import type { CheckOptions, CheckResult } from "./types.js";
+export declare function checkShield(address: string, opts?: CheckOptions): Promise<CheckResult>;
+export declare function checkFull(address: string, opts?: CheckOptions): Promise<CheckResult>;
+//# sourceMappingURL=gateway.d.ts.map

package/dist/gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAY,MAAM,YAAY,CAAC;AAqBtE,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,WAAW,CAAC,CA4DtB;AAED,wBAAsB,SAAS,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,WAAW,CAAC,CA0DtB"}

package/dist/gateway.js

@@ -0,0 +1,110 @@
+const DEFAULT_BASE = "https://www.saviours.xyz";
+function requireAddress(address) {
+    const a = address.trim().toLowerCase();
+    if (!/^0x[a-f0-9]{40}$/.test(a)) {
+        throw new Error(`Invalid address: ${address}`);
+    }
+    return a;
+}
+function baseUrl(opts) {
+    return (opts.baseUrl ??
+        process.env.SAVIOURS_BASE_URL ??
+        process.env.PUBLIC_APP_URL ??
+        DEFAULT_BASE).replace(/\/$/, "");
+}
+export async function checkShield(address, opts = {}) {
+    const addr = requireAddress(address);
+    const t0 = Date.now();
+    const res = await fetch(`${baseUrl(opts)}/api/shield/check`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({
+            chainId: opts.chainId ?? 1,
+            address: addr,
+            registryNetwork: opts.registryNetwork ?? "sepolia",
+        }),
+    });
+    const json = (await res.json());
+    if (!res.ok || !json.check?.decision) {
+        throw new Error(json.error || `shield/check HTTP ${res.status}`);
+    }
+    const sourceRaw = (json.check.source ?? "none").toLowerCase();
+    const source = sourceRaw === "ens" || sourceRaw === "registry"
+        ? sourceRaw === "ens"
+            ? "ens"
+            : "shield"
+        : "none";
+    return {
+        decision: json.check.decision,
+        status: json.check.decision === "BLOCK"
+            ? "TAINTED"
+            : json.check.decision === "WARN"
+                ? "WATCH"
+                : json.check.decision === "ALLOW"
+                    ? "SAFE"
+                    : "UNKNOWN",
+        ensName: json.check.ensName ??
+            `${addr}.saviours.eth`,
+        source: source === "none" && json.check.decision === "ESCALATE" ? "none" : source === "ens" ? "ens" : "shield",
+        reason: json.check.reason,
+        latencyMs: typeof json.check.latencyMs === "number"
+            ? json.check.latencyMs
+            : Date.now() - t0,
+        cost: {
+            graph: json.memoryHit?.graphQueries ?? 0,
+            ai: json.memoryHit?.aiCalls ?? 0,
+            usd: 0,
+        },
+        mode: "shield",
+    };
+}
+export async function checkFull(address, opts = {}) {
+    const addr = requireAddress(address);
+    const t0 = Date.now();
+    const res = await fetch(`${baseUrl(opts)}/api/investigate`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({
+            chainId: opts.chainId ?? 1,
+            address: addr,
+            persist: opts.persist ?? false,
+            forceFresh: opts.forceFresh ?? false,
+            registryNetwork: opts.registryNetwork ?? "sepolia",
+        }),
+    });
+    const json = (await res.json());
+    if (!res.ok) {
+        throw new Error(json.error || `investigate HTTP ${res.status}`);
+    }
+    const status = (json.assessment?.status ?? "UNKNOWN").toUpperCase();
+    let decision = "ESCALATE";
+    if (status === "TAINTED")
+        decision = "BLOCK";
+    else if (status === "WATCH")
+        decision = "WARN";
+    else if (status === "SAFE")
+        decision = "ALLOW";
+    else if (json.shield?.decision)
+        decision = json.shield.decision;
+    const graph = json.cost?.graphQueries ?? 0;
+    const ai = json.cost?.aiCalls ?? 0;
+    const hit = Boolean(json.memoryHit ?? json.cost?.memoryHit);
+    return {
+        decision,
+        status,
+        ensName: `${addr}.saviours.eth`,
+        source: hit ? "shield" : "investigate",
+        threat: json.assessment?.threatTypes?.join(" ∧ "),
+        latencyMs: json.cost?.latencyMs ?? Date.now() - t0,
+        cost: {
+            graph,
+            ai,
+            usd: hit ? 0 : 0.01,
+        },
+        mode: "full",
+        reason: hit
+            ? "MEMORY HIT short-circuit"
+            : "Fresh investigation (Graph + AI cite + validator)",
+    };
+}
+//# sourceMappingURL=gateway.js.map

package/dist/gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAEA,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAEhD,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,OAAO,CAAC,IAAkB;IACjC,OAAO,CACL,IAAI,CAAC,OAAO;QACZ,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC7B,OAAO,CAAC,GAAG,CAAC,cAAc;QAC1B,YAAY,CACb,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAe,EACf,OAAqB,EAAE;IAEvB,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE;QAC3D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC;YAC1B,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,SAAS;SACnD,CAAC;KACH,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAU7B,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,qBAAqB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9D,MAAM,MAAM,GACV,SAAS,KAAK,KAAK,IAAI,SAAS,KAAK,UAAU;QAC7C,CAAC,CAAC,SAAS,KAAK,KAAK;YACnB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,QAAQ;QACZ,CAAC,CAAC,MAAM,CAAC;IAEb,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;QAC7B,MAAM,EACJ,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO;YAC7B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,MAAM;gBAC9B,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO;oBAC/B,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,SAAS;QACnB,OAAO,EACL,IAAI,CAAC,KAAK,CAAC,OAAO;YAClB,GAAG,IAAI,eAAe;QACxB,MAAM,EAAE,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;QAC9G,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;QACzB,SAAS,EACP,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,KAAK,QAAQ;YACtC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS;YACtB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;QACrB,IAAI,EAAE;YACJ,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,IAAI,CAAC;YACxC,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,IAAI,CAAC;YAChC,GAAG,EAAE,CAAC;SACP;QACD,IAAI,EAAE,QAAQ;KACf,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAe,EACf,OAAqB,EAAE;IAEvB,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE;QAC1D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC;YAC1B,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK;YAC9B,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,KAAK;YACpC,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,SAAS;SACnD,CAAC;KACH,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAW7B,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,oBAAoB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,IAAI,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IACpE,IAAI,QAAQ,GAAa,UAAU,CAAC;IACpC,IAAI,MAAM,KAAK,SAAS;QAAE,QAAQ,GAAG,OAAO,CAAC;SACxC,IAAI,MAAM,KAAK,OAAO;QAAE,QAAQ,GAAG,MAAM,CAAC;SAC1C,IAAI,MAAM,KAAK,MAAM;QAAE,QAAQ,GAAG,OAAO,CAAC;SAC1C,IAAI,IAAI,CAAC,MAAM,EAAE,QAAQ;QAAE,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IAEhE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,IAAI,CAAC,CAAC;IAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAE5D,OAAO;QACL,QAAQ;QACR,MAAM;QACN,OAAO,EAAE,GAAG,IAAI,eAAe;QAC/B,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa;QACtC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC;QACjD,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;QAClD,IAAI,EAAE;YACJ,KAAK;YACL,EAAE;YACF,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;SACpB;QACD,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,GAAG;YACT,CAAC,CAAC,0BAA0B;YAC5B,CAAC,CAAC,mDAAmD;KACxD,CAAC;AACJ,CAAC"}

package/dist/guard.d.ts

@@ -0,0 +1,11 @@
+import type { CheckOptions, CheckResult } from "./types.js";
+export declare class SavioursBlockedError extends Error {
+    readonly result: CheckResult;
+    constructor(result: CheckResult);
+}
+/**
+ * Drop-in for signer middleware: throws on BLOCK, returns result on WARN/ALLOW/ESCALATE.
+ * WARN is returned (not thrown) so callers can reduce size — never silent.
+ */
+export declare function guard(address: string, opts?: CheckOptions): Promise<CheckResult>;
+//# sourceMappingURL=guard.d.ts.map

package/dist/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE5D,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;gBACjB,MAAM,EAAE,WAAW;CAQhC;AAED;;;GAGG;AACH,wBAAsB,KAAK,CACzB,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,WAAW,CAAC,CAMtB"}

package/dist/guard.js

@@ -0,0 +1,22 @@
+import { check } from "./check.js";
+export class SavioursBlockedError extends Error {
+    result;
+    constructor(result) {
+        super(`SAVIOURS BLOCK: ${result.ensName} status=${result.status}` +
+            (result.threat ? ` threat=${result.threat}` : ""));
+        this.name = "SavioursBlockedError";
+        this.result = result;
+    }
+}
+/**
+ * Drop-in for signer middleware: throws on BLOCK, returns result on WARN/ALLOW/ESCALATE.
+ * WARN is returned (not thrown) so callers can reduce size — never silent.
+ */
+export async function guard(address, opts = {}) {
+    const result = await check(address, opts);
+    if (result.decision === "BLOCK") {
+        throw new SavioursBlockedError(result);
+    }
+    return result;
+}
+//# sourceMappingURL=guard.js.map

package/dist/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAGnC,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,MAAM,CAAc;IAC7B,YAAY,MAAmB;QAC7B,KAAK,CACH,mBAAmB,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC,MAAM,EAAE;YACzD,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACpD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CACzB,OAAe,EACf,OAAqB,EAAE;IAEvB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export { check } from "./check.js";
+export { guard, SavioursBlockedError } from "./guard.js";
+export { castCommand } from "./castCommand.js";
+export { checkEns } from "./ens.js";
+export { checkShield, checkFull } from "./gateway.js";
+export type { CheckCost, CheckMode, CheckOptions, CheckResult, Decision, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACtD,YAAY,EACV,SAAS,EACT,SAAS,EACT,YAAY,EACZ,WAAW,EACX,QAAQ,GACT,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,6 @@
+export { check } from "./check.js";
+export { guard, SavioursBlockedError } from "./guard.js";
+export { castCommand } from "./castCommand.js";
+export { checkEns } from "./ens.js";
+export { checkShield, checkFull } from "./gateway.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC"}

package/dist/react.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Optional React entry — peer-free types; apps re-export a fetch-based hook.
+ * Node agents should use `check()` / `guard()` from the main entry (viem ENS).
+ */
+export { check, guard, castCommand } from "./index.js";
+export type { CheckResult, CheckOptions, Decision } from "./types.js";
+//# sourceMappingURL=react.d.ts.map

package/dist/react.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../src/react.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACvD,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC"}

package/dist/react.js

@@ -0,0 +1,6 @@
+/**
+ * Optional React entry — peer-free types; apps re-export a fetch-based hook.
+ * Node agents should use `check()` / `guard()` from the main entry (viem ENS).
+ */
+export { check, guard, castCommand } from "./index.js";
+//# sourceMappingURL=react.js.map

package/dist/react.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"react.js","sourceRoot":"","sources":["../src/react.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,39 @@
+export type Decision = "BLOCK" | "WARN" | "ALLOW" | "ESCALATE";
+export type CheckMode = "ens" | "shield" | "full";
+export type CheckCost = {
+    graph: number;
+    ai: number;
+    usd: number;
+};
+export type CheckResult = {
+    decision: Decision;
+    status: string;
+    ensName: string;
+    source: "ens" | "shield" | "investigate" | "none";
+    threat?: string;
+    evidenceHash?: string;
+    atomicTx?: string;
+    reason?: string;
+    latencyMs: number;
+    cost: CheckCost;
+    mode: CheckMode;
+};
+export type CheckOptions = {
+    /** ens (default) | shield | full */
+    mode?: CheckMode;
+    /** Sepolia RPC for mode=ens. Defaults to publicnode. */
+    rpcUrl?: string;
+    /** PermissionedResolver proxy. */
+    resolver?: `0x${string}`;
+    /** Parent name, default saviours.eth */
+    parent?: string;
+    /** Gateway / app origin for shield + full. */
+    baseUrl?: string;
+    chainId?: number;
+    registryNetwork?: "sepolia" | "anvil";
+    /** full mode only — force Graph path */
+    forceFresh?: boolean;
+    /** full mode only — attempt Remember (usually false on public) */
+    persist?: boolean;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC;AAE/D,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAElD,MAAM,MAAM,SAAS,GAAG;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,aAAa,GAAG,MAAM,CAAC;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE,SAAS,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,oCAAoC;IACpC,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IACzB,wCAAwC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;IACtC,wCAAwC;IACxC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,kEAAkE;IAClE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/examples/basic.ts

@@ -0,0 +1,15 @@
+import { check, castCommand, guard } from "@saviours/check";
+
+const ATTACK_1 = "0x935bfb495e33f74d2e9735df1da66ace442ede48";
+
+const r = await check(ATTACK_1);
+console.log(r);
+// { decision: "BLOCK", status: "TAINTED", source: "ens", cost: { graph: 0, ai: 0, usd: 0 }, … }
+
+console.log(castCommand(ATTACK_1));
+
+try {
+  await guard(ATTACK_1);
+} catch (e) {
+  console.error(String(e));
+}

package/examples/viem-hook.ts

@@ -0,0 +1,21 @@
+/**
+ * Example — wrap a viem wallet client sendTransaction with guard().
+ * Not shipped as a dependency; copy into your agent.
+ */
+import { guard, SavioursBlockedError } from "@saviours/check";
+
+export async function sendWithSavioursGuard(
+  to: `0x${string}`,
+  send: () => Promise<`0x${string}`>,
+): Promise<`0x${string}`> {
+  const r = await guard(to, { mode: "ens" });
+  if (r.decision === "WARN") {
+    console.warn(`[saviours] WARN ${r.ensName} — reduce size`);
+  }
+  try {
+    return await send();
+  } catch (e) {
+    if (e instanceof SavioursBlockedError) throw e;
+    throw e;
+  }
+}

package/package.json

@@ -0,0 +1,66 @@
+{
+  "name": "@saviours/check",
+  "version": "0.1.0",
+  "description": "Two-line counterparty check — ENS first, optional Shield/investigate gateway",
+  "type": "module",
+  "license": "MIT",
+  "author": "SAVIOURS",
+  "homepage": "https://www.saviours.xyz",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/devhb1/Saviour.git",
+    "directory": "packages/check"
+  },
+  "bugs": {
+    "url": "https://github.com/devhb1/Saviour/issues"
+  },
+  "keywords": [
+    "ethereum",
+    "ens",
+    "security",
+    "wallet",
+    "agent",
+    "saviours"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./react": {
+      "types": "./dist/react.d.ts",
+      "import": "./dist/react.js"
+    }
+  },
+  "files": [
+    "dist",
+    "examples",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "prepare": "tsc -p tsconfig.json",
+    "prepublishOnly": "tsc -p tsconfig.json"
+  },
+  "peerDependencies": {
+    "react": ">=18"
+  },
+  "peerDependenciesMeta": {
+    "react": {
+      "optional": true
+    }
+  },
+  "dependencies": {
+    "viem": "^2.56.3"
+  },
+  "devDependencies": {
+    "typescript": "^5.7.2"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}