fizzl-langchain 0.2.0 → 0.4.0

package/README.md

@@ -10,6 +10,9 @@ Five LangChain tools you pass to `createAgent`, `createReactAgent` or `model.bin
 |---|---|---|---|
 | `check_before_signing` | a transaction, token approval or signature **before signing it**: green / orange / red with reason codes (drainers, unlimited approvals to unknown spenders, look-alike tokens, Permit/Permit2/Seaport signatures that hand over tokens). With `from` (the agent's wallet) a transaction is simulated, so a hidden approval, an NFT leaving or a transaction that would fail shows up; with `intent` (one sentence) signing something else than meant is caught; with `x402` (the accepts entry being paid) a payment that pays more or someone else is red | [presign-guard](https://presign-guard.fizzl.eu) | $0.01 |
 | `check_xrpl_transaction` | an **XRP Ledger** transaction before signing it: account takeover (SetRegularKey, SignerListSet, master key off), AccountDelete, fake RLUSD (red); partial payments, destinations that refuse or need a tag, risky issuers, DEX orders far below the order book or AMM price (orange) | presign-guard | $0.01 |
+| `check_solana_transaction` | a **Solana** transaction before signing it: every instruction is read and the transaction simulated. Token account takeover (SetAuthority), System Assign (red); unlimited delegates, durable nonces, closing to someone else, hidden owner or delegate changes, a failing transaction (orange) | presign-guard | $0.01 |
+| `check_message` | a plain message before `personal_sign` / `eth_sign`: eth_sign, a Sign-In with Ethereum message for another site (red); unreadable bytes, a sign-in for another URI, address or chain (orange) | presign-guard | $0.01 |
+| `check_algorand_transaction` | an **Algorand** transaction or atomic group before signing it: every transaction your account sends is read and the group simulated. Rekey to another key, closing the account or an asset holding to someone else, fake USDC (red); clawbacks, risky opt-ins, app update/delete/clear-state, a partial group, a group that would fail (orange) | presign-guard | $0.01 |
 | `check_token` | a token **before buying or accepting it**: honeypot, rug-pull signs, look-alikes (Solana, EVM, and XRPL tokens as `CURRENCY.rIssuer`: clawback, freeze, transfer fee, fake RLUSD) | presign-guard | $0.01 |
 | `check_wallet_approvals` | every open approval of a wallet and which to revoke | presign-guard | $0.02 |
 | `check_endpoint_before_paying` | an x402 or MPP paid API **before paying it**: go / caution / no_go, the cheapest option that settles, budget, track record, bait signs (fake brands, airdrop lures, output that doesn't match) | [x402 Doctor](https://x402-doctor.fizzl.eu) | $0.001 |
@@ -33,7 +36,7 @@ console.log(await checkToken.invoke({ chain: "base", address: "0x833589fCD6eDb6E
 // {"verdict":"green","grade":"SAFE","free":true,"note":"Free quick check: the verdict only, a few per hour. ..."}
 ```
 
-With no paying fetch and no credit keys, `check_token`, `check_before_signing` and `check_endpoint_before_paying` fall back to the free quick checks: the verdict only (green / orange / red, or go / caution / no_go with the problems found), a few per hour, marked `free: true` with a note on what the full check costs. `check_wallet_approvals` and `check_xrpl_transaction` have no free version. Pass `free: false` to get `payment_required` instead.
+With no paying fetch and no credit keys, `check_token`, `check_before_signing`, `check_solana_transaction`, `check_algorand_transaction`, `check_message` and `check_endpoint_before_paying` fall back to the free quick checks: the verdict only (green / orange / red, or go / caution / no_go with the problems found), a few per hour, marked `free: true` with a note on what the full check costs. `check_wallet_approvals` and `check_xrpl_transaction` have no free version. Pass `free: false` to get `payment_required` instead.
 
 ## Use in an agent
 
@@ -74,7 +77,7 @@ fizzlTools({ creditKeys: { presign: process.env.PRESIGN_CREDIT_KEY, doctor: proc
 |---|---|---|
 | `fetch` | global `fetch` | An x402-paying fetch (`wrapFetchWithPayment` from `@x402/fetch`), or plain fetch with credit keys |
 | `creditKeys` | none | `{ presign, doctor }`, sent as `x-credit-key` |
-| `only` | all five | Tool names to include |
+| `only` | all eight | Tool names to include |
 | `free` | `true` | Fall back to the free quick check (verdict only) when a check can't be paid |
 | `timeoutMs` | 30000 | Per check |
 | `presignUrl`, `doctorUrl` | the fizzl.eu services | For tests or self-hosting |

package/index.d.ts

@@ -5,14 +5,14 @@ export declare const PRESIGN_URL: string;
 export declare const DOCTOR_URL: string;
 export declare const PRICES: Record<FizzlToolName, string>;
 
-export type FizzlToolName = "check_before_signing" | "check_xrpl_transaction" | "check_token" | "check_wallet_approvals" | "check_endpoint_before_paying";
+export type FizzlToolName = "check_before_signing" | "check_xrpl_transaction" | "check_solana_transaction" | "check_algorand_transaction" | "check_message" | "check_token" | "check_wallet_approvals" | "check_endpoint_before_paying";
 
 export interface FizzlToolsOptions {
   /** fetch that pays x402 (wrapFetchWithPayment from @x402/fetch); plain fetch works with credit keys. */
   fetch?: typeof fetch;
   /** Prepaid credit keys (sent as x-credit-key), per service. */
   creditKeys?: { presign?: string; doctor?: string };
-  /** The tools to include (default: all five). */
+  /** The tools to include (default: all eight). */
   only?: FizzlToolName[];
   /** Fall back to the free quick check (verdict only, a few per hour) when a check can't be paid. Default true. */
   free?: boolean;

package/index.js

@@ -9,7 +9,7 @@
 import { tool } from "@langchain/core/tools";
 import { fizzlTools as checks, PRICES, PRESIGN_URL, DOCTOR_URL } from "presign-guard-ai-sdk";
 
-export const VERSION = "0.2.0";
+export const VERSION = "0.4.0";
 export { PRICES, PRESIGN_URL, DOCTOR_URL };
 
 // The same checks as presign-guard-ai-sdk; only the user agent says where the call came from.
@@ -22,7 +22,7 @@ function withUserAgent(fetchImpl) {
  * @param {object} [options]
  * @param {typeof fetch} [options.fetch] fetch that pays x402 (wrapFetchWithPayment from @x402/fetch); plain fetch works with credit keys
  * @param {{ presign?: string, doctor?: string }} [options.creditKeys] prepaid credit keys (x-credit-key) per service
- * @param {string[]} [options.only] the tool names to include (default: all five)
+ * @param {string[]} [options.only] the tool names to include (default: all eight)
  * @param {boolean} [options.free] fall back to the free quick checks when a check can't be paid (default true)
  * @param {string} [options.presignUrl] @param {string} [options.doctorUrl] @param {number} [options.timeoutMs]
  */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fizzl-langchain",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "description": "Safety checks for LangChain.js and LangGraph.js agents that pay: tools to check a transaction or signature before signing, a token before buying, a wallet's open approvals, and an x402 endpoint before paying it (presign-guard and x402 Doctor, paid per call over x402, with a free quick check to try them).",
   "type": "module",
   "exports": {
@@ -11,14 +11,57 @@
   },
   "main": "./index.js",
   "types": "./index.d.ts",
-  "files": ["index.js", "index.d.ts", "README.md", "LICENSE"],
-  "engines": { "node": ">=20" },
-  "scripts": { "test": "node --test test/*.test.mjs", "example": "node example/agent.mjs" },
-  "dependencies": { "presign-guard-ai-sdk": "^0.4.0" },
-  "peerDependencies": { "@langchain/core": ">=0.3.58 <2.0.0", "zod": "^3.25.0 || ^4.0.0" },
-  "devDependencies": { "@langchain/core": "^1.2.0", "@langchain/langgraph": "^1.0.0", "zod": "^4.0.0" },
-  "keywords": ["langchain", "langchainjs", "langgraph", "tools", "agents", "x402", "mpp", "wallet", "security", "presign", "token-check", "honeypot", "approvals", "permit2", "usdc", "base", "solana", "xrpl", "rlusd"],
-  "repository": { "type": "git", "url": "git+https://github.com/Fizzl13/x402-examples.git", "directory": "fizzl-langchain" },
+  "files": [
+    "index.js",
+    "index.d.ts",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "test": "node --test test/*.test.mjs",
+    "example": "node example/agent.mjs"
+  },
+  "dependencies": {
+    "presign-guard-ai-sdk": "^0.6.0"
+  },
+  "peerDependencies": {
+    "@langchain/core": ">=0.3.58 <2.0.0",
+    "zod": "^3.25.0 || ^4.0.0"
+  },
+  "devDependencies": {
+    "@langchain/core": "^1.2.0",
+    "@langchain/langgraph": "^1.0.0",
+    "zod": "^4.0.0"
+  },
+  "keywords": [
+    "langchain",
+    "langchainjs",
+    "langgraph",
+    "tools",
+    "agents",
+    "x402",
+    "mpp",
+    "wallet",
+    "security",
+    "presign",
+    "token-check",
+    "honeypot",
+    "approvals",
+    "permit2",
+    "usdc",
+    "base",
+    "solana",
+    "xrpl",
+    "rlusd"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Fizzl13/x402-examples.git",
+    "directory": "fizzl-langchain"
+  },
   "homepage": "https://github.com/Fizzl13/x402-examples/tree/main/fizzl-langchain#readme",
   "license": "MIT"
 }