agentshield-protocol 1.0.0 → 1.1.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentshield-protocol",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "Security protocol for autonomous AI agents — contract verification, wallet monitoring, freeze protection, and x402 machine payments.",
   "type": "module",
   "main": "sdk.js",

package/sdk.js

@@ -2,6 +2,9 @@
  * AgentShield SDK
  * Security protocol for autonomous AI agents
  * https://agentshield.workers.dev
+ *
+ * Auto-handles x402 payments — agents pay per call, no setup needed.
+ * Supports USDC on Base and SOL on Solana.
  */
 
 const BASE_URL = 'https://agentshield.workers.dev';
@@ -10,70 +13,137 @@ export class AgentShield {
   constructor(options = {}) {
     this.baseUrl = options.baseUrl || BASE_URL;
     this.wallet = options.wallet || null;
-    this.apiKey = options.apiKey || null;
+    // Payment options — provide one to enable auto-pay after free tier
+    this.privateKey = options.privateKey || null;      // EVM private key for USDC on Base
+    this.solanaKeypair = options.solanaKeypair || null; // Solana Keypair for SOL payments
+    this.maxPayPerCall = options.maxPayPerCall || 0.002; // max $ willing to pay per call
+    this._paid = 0; // total spent this session
   }
 
   _headers() {
     const h = { 'Content-Type': 'application/json' };
     if (this.wallet) h['X-Wallet'] = this.wallet;
-    if (this.apiKey) h['X-API-Key'] = this.apiKey;
     return h;
   }
 
   /**
-   * Verify a smart contract for safety risks
-   * @param {string} contract - Contract address (0x...)
+   * Pay x402 and retry the request automatically.
+   * Handles USDC on Base (EVM) or SOL on Solana.
+   */
+  async _payAndRetry(url, fetchOptions, paymentSpec) {
+    const accepts = paymentSpec.accepts || [];
+
+    // ── Try SOL payment if Solana keypair provided ──────────────
+    const solSpec = accepts.find(a => a.network === 'solana');
+    if (solSpec && this.solanaKeypair) {
+      try {
+        const { Connection, SystemProgram, Transaction,
+                sendAndConfirmTransaction, PublicKey, LAMPORTS_PER_SOL } = await import('@solana/web3.js');
+        const conn = new Connection('https://api.mainnet-beta.solana.com', 'confirmed');
+        const lamports = parseInt(solSpec.lamports || 500);
+        const recipient = new PublicKey(solSpec.payTo);
+        const tx = new Transaction().add(
+          SystemProgram.transfer({ fromPubkey: this.solanaKeypair.publicKey, toPubkey: recipient, lamports })
+        );
+        const sig = await sendAndConfirmTransaction(conn, tx, [this.solanaKeypair]);
+        this._paid += lamports / LAMPORTS_PER_SOL * 150; // approx USD
+        const payment = JSON.stringify({ network: 'solana', txSignature: sig });
+        const retryRes = await fetch(url, {
+          ...fetchOptions,
+          headers: { ...fetchOptions.headers, 'X-PAYMENT': payment }
+        });
+        return retryRes.json();
+      } catch (e) {
+        // fall through to EVM
+      }
+    }
+
+    // ── Try USDC on Base if EVM key provided ────────────────────
+    const evmSpec = accepts.find(a => a.network === 'base' || a.network === 'ethereum');
+    if (evmSpec && this.privateKey) {
+      try {
+        const { ethers } = await import('ethers');
+        const provider = new ethers.JsonRpcProvider('https://mainnet.base.org');
+        const signer = new ethers.Wallet(this.privateKey, provider);
+        const USDC = '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913';
+        const usdc = new ethers.Contract(USDC, [
+          'function transfer(address to, uint256 amount) returns (bool)'
+        ], signer);
+        const amount = ethers.parseUnits(evmSpec.maxAmountRequired || '0.001', 6);
+        const tx = await usdc.transfer(evmSpec.payTo, amount);
+        await tx.wait();
+        this._paid += parseFloat(evmSpec.maxAmountRequired || '0.001');
+        const payment = JSON.stringify({ network: 'base', txHash: tx.hash });
+        const retryRes = await fetch(url, {
+          ...fetchOptions,
+          headers: { ...fetchOptions.headers, 'X-PAYMENT': payment }
+        });
+        return retryRes.json();
+      } catch (e) {
+        throw new Error(`x402 payment failed: ${e.message}`);
+      }
+    }
+
+    // No payment method — return the 402 info so caller can handle it
+    return { error: 'payment_required', spec: paymentSpec, message: 'Provide privateKey or solanaKeypair to enable auto-payment' };
+  }
+
+  /**
+   * Make a request, auto-paying if a 402 is returned.
+   */
+  async _fetch(url, options = {}) {
+    const fetchOptions = { headers: this._headers(), ...options };
+    const res = await fetch(url, fetchOptions);
+    if (res.status === 402) {
+      const spec = await res.json().catch(() => ({}));
+      return this._payAndRetry(url, fetchOptions, spec);
+    }
+    return res.json();
+  }
+
+  /**
+   * Verify a smart contract for safety risks.
+   * Auto-pays $0.001 after free tier (5 calls).
+   * @param {string} contract - Contract address (0x... or Solana address)
    * @param {string} chain - Chain name (default: 'ethereum')
    */
   async verify(contract, chain = 'ethereum') {
-    const url = `${this.baseUrl}/verify?contract=${contract}&chain=${chain}`;
-    const res = await fetch(url, { headers: this._headers() });
-    return res.json();
+    return this._fetch(`${this.baseUrl}/verify?contract=${contract}&chain=${chain}`);
   }
 
   /**
-   * Monitor a wallet address for suspicious activity
-   * @param {string} wallet - Wallet address to monitor
+   * Monitor a wallet address for suspicious activity.
    */
   async monitor(wallet) {
-    const res = await fetch(`${this.baseUrl}/monitor`, {
+    return this._fetch(`${this.baseUrl}/monitor`, {
       method: 'POST',
-      headers: this._headers(),
       body: JSON.stringify({ wallet }),
     });
-    return res.json();
   }
 
   /**
-   * Freeze an agent's wallet to stop dangerous interactions
-   * @param {string} wallet - Wallet address to freeze
-   * @param {string} reason - Reason for freeze
+   * Freeze a wallet to stop dangerous interactions.
    */
   async freeze(wallet, reason) {
-    const res = await fetch(`${this.baseUrl}/freeze`, {
+    return this._fetch(`${this.baseUrl}/freeze`, {
       method: 'POST',
-      headers: this._headers(),
       body: JSON.stringify({ wallet, reason }),
     });
-    return res.json();
   }
 
-  /**
-   * Get agent context / manifest info
-   */
+  /** Get agent context / manifest. */
   async agentContext() {
-    const res = await fetch(`${this.baseUrl}/agent-context`, { headers: this._headers() });
-    return res.json();
+    return this._fetch(`${this.baseUrl}/agent-context`);
   }
 
-  /**
-   * Get OpenAPI spec
-   */
+  /** Get OpenAPI spec. */
   async openapi() {
     const res = await fetch(`${this.baseUrl}/openapi.json`);
     return res.json();
   }
+
+  /** Total USD paid this session. */
+  get totalPaid() { return this._paid; }
 }
 
-// CommonJS + ESM compat default export
 export default AgentShield;