safehands-pharos 1.5.0 → 2.6.0

package/docs/SAFEHANDS_REVIEWER_DEMO_SCRIPT.md

@@ -0,0 +1,228 @@
+# SafeHands Reviewer Demo Script
+
+Current as of v2.6.0: Pharos Pacific Mainnet (chain `1672`), Anvita Flow hosted agent, live contracts.
+
+## 1. Project one-liner
+
+SafeHands is the transaction firewall for AI agent finance on Pharos Pacific Mainnet: a deterministic policy engine that evaluates every agent action (payments, approvals, swaps, x402 calls, tokenized-asset moves) *before* the signature and returns `ALLOW` / `BLOCK` / `REQUIRE_CONFIRMATION` / `PREPARE_ONLY` with a plain-English reason. The hosted deployment is **read-only and zero-custody**: it holds no keys, signs nothing, and broadcasts nothing on its own.
+
+For the Real-Fi & RWA angle (how the attestation ledger, risk registry, token verification, and USDC settlement rails serve tokenized real-world assets), see [REALFI_RWA_ALIGNMENT.md](./REALFI_RWA_ALIGNMENT.md).
+
+## 2. Fastest paths for a reviewer
+
+### No-install path: Anvita Flow hosted agent
+
+The fully-hosted, zero-custody agent is live on [Anvita Flow](https://flow.anvita.xyz/home) as `safehands` (Agent Carnival Phase 2). Any Steward Agent on the marketplace can discover and call it: no server, no keys, no custody. To try the engine on your own machine without cloning:
+
+```bash
+npx -y github:SZtch/safehands-pharos --demo
+```
+
+### Self-host the HTTP API (read-only; no keys, no tx)
+
+Run the read-only reference backend locally, then hit it over HTTP:
+
+```bash
+npm ci && npm run build
+node dist/api/server.js   # read-only API on http://localhost:4022
+
+# Service health
+curl -s http://localhost:4022/health
+
+# Public network config (chain 1672)
+curl -s http://localhost:4022/public-config
+
+# A real preflight decision: unlimited approval → BLOCK
+curl -s -X POST http://localhost:4022/tools/safehands_preflight_check \
+  -H "content-type: application/json" \
+  -d '{"actionType":"approve_token","chainId":1672,"approvalToken":"USDC","spender":"0x000000000000000000000000000000000000dEaD","approvalAmount":"max"}'
+
+# On-chain reputation of the deployer (live attestation contract)
+curl -s -X POST http://localhost:4022/tools/get_agent_reputation \
+  -H "content-type: application/json" \
+  -d '{"address":"0x6730d3a2A217108AB53CCFe60ffdAd05D3C124e5"}'
+
+# x402 paid endpoint. Fail-closed by default: without x402 config this returns 503.
+# With X402_PAY_TO and a reachable external X402_FACILITATOR_URL set, it returns a
+# real HTTP 402 challenge (mainnet USDC, eip155:1672).
+curl -s -i http://localhost:4022/paid/risk-report
+```
+
+Interactive browser demo (while the local API runs): **http://localhost:4022/demo**.
+
+## 3. Why SafeHands matters
+
+AI agents making on-chain transactions need guardrails. Without safety checks, an agent could:
+
+- Send funds to the wrong address or chain
+- Approve unlimited token spending
+- Sign drainer-crafted calldata it never actually decoded
+- Execute swaps above policy limits
+- Pay x402 invoices to SSRF targets
+- Move a tokenized asset to an unvetted counterparty with no audit trail
+
+SafeHands sits between the agent and the blockchain. Every action goes through preflight, risk scoring, policy checks, and authorization gates before execution is allowed; and, on the opt-in relayed-broadcast path (off by default), the broadcasts it relays are attested on-chain.
+
+## 4. Execution modes
+
+| Mode | Wallet | Where | Use case |
+|------|--------|-------|----------|
+| Read-only preflight *(default)* | none | hosted or local | Safety checks, risk analysis, demos |
+| User-signed | user's own | anywhere | SafeHands validates; user signs externally; verified broadcast + attestation |
+| Managed execution | local encrypted wallet | self-hosted only | Full agent autonomy, opt-in; refused on public hosts by a boot guard |
+| Env wallet (advanced) | `PRIVATE_KEY` in env | local dev | Local mainnet development |
+
+## 5. Live contracts: Pharos Pacific Mainnet
+
+```
+Network:      Pharos Pacific Mainnet
+Chain ID:     1672
+Registry:     0x428e02bf85412e7242d991cd6725ec59e8b06c8d
+Attestation:  0x71a7a87b3b1ab6d86204cad691bb32fd75b4588c
+Owner:        0x6730d3a2a217108ab53ccfe60ffdad05d3c124e5
+Explorer:     https://www.pharosscan.xyz
+```
+
+- **SafeHandsRegistry**: authorized operators, Merkle risk roots, `verifyRiskRecord` on-chain view.
+- **SafeHandsAttestation**: immutable, privacy-preserving verified-safe records plus `reputationOf()` per-address reputation. Only hashed context is published (`preparedTransactionHash`, `policyHash`, `metadataHash`, `txHash`); never raw calldata, amounts, recipients, or keys.
+
+Both are verifiable on the explorer; the reputation oracle has live attestations recorded by a dedicated attester key (`0xe9F1d28C7136BbB1a57DA9852F216b8Cb39Eb888`) that never signs user transactions.
+
+## 6. Demo commands
+
+### Quick demo (no setup required)
+
+```bash
+npm ci && npm run build
+npm run demo          # or: npx -y github:SZtch/safehands-pharos --demo
+```
+
+### The firewall reading raw calldata (v2.4.0, 60-second demonstration)
+
+The hosted engine decodes approval/transfer/admin calldata **offline**: no simulation service, no third-party API. Feed it a drainer-style transaction and watch it block from the raw bytes:
+
+```bash
+# Unlimited approve to an unknown spender, hidden inside a "vault deposit": BLOCK
+node anvita/safehands/scripts/safehands-engine.js analyze '{
+  "subjectType":"intent","action":"vault_deposit",
+  "walletAddress":"0x1111111111111111111111111111111111111111",
+  "vault":"0xcA11bde05977b3631167028862bE2a173976CA11",
+  "to":"0xc879C018Db60520f4355C26eD1a6D572CDAC1815",
+  "data":"0x095ea7b3000000000000000000000000000000000000000000000000000000000000deadffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"}'
+# -> recommendation: block, riskScore >= 90
+# -> "UNLIMITED approve to an UNKNOWN spender (0x…dead); the spender could move the entire … balance"
+```
+
+Contrast with a **registry-verified** protocol: trust comes only from first-party evidence (the project's own docs + on-chain checks, cited in the registry):
+
+```bash
+# Morpho Blue on Pharos, verified 2026-07-11 from Morpho's own addresses page
+node anvita/safehands/scripts/safehands-engine.js analyze '{"subjectType":"contract","address":"0x18573fA18fd17dDfD790B4a5B5b2977aad3b4Efb"}'
+# -> recommendation: allow, riskScore 5
+# -> "Canonical registry contract: Morpho Blue (verified via official-docs citation + on-chain check)"
+```
+
+Ecosystem names the registry recognizes but whose addresses are **not** yet published in their own docs (FaroSwap, Stargate, …) stay fail-closed: an unlimited approval to them blocks. That is policy, not a bug: recognition is never proof.
+
+### Test suites
+
+```bash
+npm test               # hermetic deterministic suite (no wallet, no RPC, no network needed)
+npm run demo           # 12 non-destructive demo scenarios
+npm run test:contracts # 25 Hardhat Solidity tests (offline smoke fallback without a compiler)
+npm run test:all       # all combined
+```
+
+Focused suites also exist: `test/x402-gate.test.ts` (x402 payment gate with a mock facilitator) and `test/risk-inclusion.test.ts` (Merkle inclusion proof path), runnable via `tsx --test <file>`.
+
+## 7. Expected outputs
+
+### Safe small payment → ALLOW
+
+```
+Action: send_payment
+Chain ID: 1672 (Pharos Pacific Mainnet)
+Amount: 0.001 PROS
+-> Decision: ALLOW
+```
+
+### Non-Pharos chain → BLOCK
+
+```
+Action: send_payment
+Chain ID: 1 (Ethereum Mainnet)
+-> Decision: BLOCK
+-> Reason: chain 1 is not the configured Pharos target
+```
+
+### Unlimited approval → BLOCK
+
+```
+Action: approve_token
+Amount: unlimited / max
+-> Decision: BLOCK
+-> Reason: Unlimited approvals are blocked by default
+```
+
+### Unknown / unregistered token → REQUIRE_CONFIRMATION
+
+```
+Action: approve_token (finite amount, token not in the active registry)
+-> Decision: REQUIRE_CONFIRMATION
+-> tokenRegistry.status: unknown; human confirmation required
+```
+
+### x402 SSRF / invalid amount → BLOCK
+
+```
+Action: x402_pay_and_fetch
+URL: http://169.254.169.254/metadata (internal IP)
+-> SSRF_BLOCKED
+
+Action: x402_pay_and_fetch
+Amount: -1 USDC
+-> VALIDATION_ERROR
+```
+
+### Policy: advanced allows a large swap, conservative does not
+
+```
+Policy: advanced
+Action: swap 1000 PROS
+-> within advanced maxSwapPROS: 1000
+
+Policy: conservative
+Action: swap 1000 PROS
+-> exceeds conservative maxSwapPROS: 1
+```
+
+### Hard safety rules override any policy
+
+```
+Policy: advanced · Action: payment on chainId 1  -> BLOCK (non-Pharos chain, regardless of policy)
+Policy: advanced · Action: unlimited approval    -> BLOCK (regardless of policy)
+Policy: advanced · Action: x402 to internal IP   -> BLOCK (SSRF, regardless of policy)
+```
+
+## 8. The 33 tools (grouped)
+
+| Category | Tools |
+|----------|-------|
+| Safety preflight | `safehands_preflight_check`, `safehands_x402_preflight`, `safehands_risk_report`, `safehands_wallet_health`, `explain_risk`, `token_registry_status` |
+| Risk registry (on-chain) | `publish_risk_score`, `query_risk_registry`, `verify_risk_inclusion`, `get_agent_reputation` |
+| Risk + analysis | `assess_risk`, `check_token_security`, `simulate_transaction`, `estimate_gas`, `check_allowance` |
+| Market + chain data | `get_token_price`, `get_wallet_balance`, `get_gas_price`, `get_pool_info`, `get_transaction_status`, `get_execution_history`, `query_goldsky_subgraph`, `get_spv_proof` |
+| Execution (gated) | `safehands_safe_execute`, `execute_swap`, `send_payment`, `approve_token`, `x402_pay_and_fetch` |
+| Agent policy | `get_agent_policy`, `set_agent_policy` |
+| Managed wallet | `create_agent_wallet`, `get_agent_wallet`, `get_agent_wallet_balance` |
+
+All 33 are exposed identically across MCP, HTTP, and CLI.
+
+## 9. Limitations (honest)
+
+- Hosted mode (Anvita Flow) and the self-hosted read-only backend are zero-custody; execution, signing, managed wallets, and on-chain publishing are gated and disabled by default. A boot guard refuses managed/write execution on a public host.
+- Managed-wallet encryption is AES-256-GCM, not KMS/Vault-grade; not intended for custody of large amounts, and not audited for production custody.
+- GoPlus token security does not cover Pharos Atlantic Testnet (`688689`).
+- DODO reverse routes can occasionally lack liquidity for exotic pairs.
+- L1 risk-root committer automation and the DA-serving endpoint are roadmap; the on-chain read/verify path (`verify_risk_inclusion`) is live.
+- The risk-root pipeline (queue, batch flush, `commitRiskRoot`, inclusion verify) is functional end to end and the first production batch is committed on-chain: a registry `query` reports `hasCommittedRoot:true` and returns a risk record sourced from the committed data-availability pointer. The attestation contract also has live on-chain usage.

package/package.json

@@ -1,73 +1,130 @@
-{
-  "name": "safehands-pharos",
-  "version": "1.5.0",
-  "description": "Pharos Skill Engine-compatible transaction safety firewall for AI agents.",
-  "type": "module",
-  "main": "dist/index.js",
-  "types": "dist/index.d.ts",
-  "exports": {
-    ".": "./dist/index.js"
-  },
-  "bin": {
-    "safehands-pharos": "dist/index.js"
-  },
-  "files": [
-    "dist",
-    "contracts",
-    "README.md",
-    ".env.example",
-    "LICENSE"
-  ],
-  "scripts": {
-    "build": "tsc",
-    "start": "node dist/index.js",
-    "dev": "tsx src/index.ts",
-    "x402-server": "tsx src/x402Server.ts",
-    "demo": "tsx src/demo.ts"
-  },
-  "keywords": [
-    "pharos",
-    "mcp",
-    "mcp-skill",
-    "defi",
-    "risk-engine",
-    "ai-agent",
-    "farodex",
-    "viem",
-    "atlantic-testnet",
-    "web3",
-    "pharos-skill-engine",
-    "guardrail",
-    "transaction-safety",
-    "transaction-firewall",
-    "x402",
-    "agent-safety",
-    "safehands"
-  ],
-  "author": "SZtch",
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/SZtch/safehands-pharos.git"
-  },
-  "homepage": "https://github.com/SZtch/safehands-pharos#readme",
-  "engines": {
-    "node": ">=18.0.0"
-  },
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.12.1",
-    "@x402/core": "^2.15.0",
-    "@x402/evm": "^2.15.0",
-    "@x402/express": "^2.15.0",
-    "@x402/fetch": "^2.15.0",
-    "express": "^5.2.1",
-    "viem": "^2.31.3",
-    "zod": "^3.25.67"
-  },
-  "devDependencies": {
-    "@types/express": "^5.0.6",
-    "@types/node": "^22.15.0",
-    "tsx": "^4.20.3",
-    "typescript": "^5.8.3"
-  }
-}
+{
+  "name": "safehands-pharos",
+  "version": "2.6.0",
+  "description": "Open-source reusable Pharos Skill, the transaction firewall for AI agent finance on Pharos Pacific Mainnet: deterministic safety verdicts before any wallet signs. Read-only by default; write tools optional, gated, off by default.",
+  "type": "module",
+  "main": "dist/sdk.js",
+  "types": "dist/sdk.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/sdk.d.ts",
+      "import": "./dist/sdk.js"
+    }
+  },
+  "bin": {
+    "safehands-pharos": "dist/index.js",
+    "safehands": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "contracts",
+    "README.md",
+    "SECURITY.md",
+    ".env.example",
+    "LICENSE",
+    "SKILL.md",
+    ".agents/policies/default.json",
+    "docs/REVIEWER_QUICKSTART.md",
+    "docs/SAFEHANDS_REVIEWER_DEMO_SCRIPT.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "prepack": "npm run build",
+    "prepublishOnly": "npm run build && npm test",
+    "start": "node dist/api/server.js",
+    "start:api": "node dist/api/server.js",
+    "start:mcp": "node dist/index.js",
+    "dev": "tsx src/index.ts",
+    "x402-server": "node dist/x402Server.js",
+    "guardian-api": "tsx src/api/server.ts",
+    "agent:demo": "tsx examples/agent-arena/guardian-agent-demo.ts",
+    "agent:x402": "tsx examples/agent-arena/payment-agent-x402.ts",
+    "agent:defi": "tsx examples/agent-arena/defi-agent-approval.ts",
+    "demo": "tsx src/index.ts --demo",
+    "test": "tsx --test test/policy-suite.test.ts test/action-policy.test.ts test/calldata-decoder.test.ts test/risk-inclusion.test.ts test/risk-engine.test.ts test/http-ssrf.test.ts test/x402-gate.test.ts test/x402-daily-cap.test.ts test/write-auth.test.ts test/write-path-gates.test.ts test/write-tools-risk-gate.test.ts test/attestation-publisher.test.ts test/spv-verifier.test.ts test/agent-policy-guard.test.ts test/sdk-exports.test.ts test/wallet-crypto.test.ts test/execution-hardening.test.ts test/input-hardening.test.ts test/token-security-failclosed.test.ts test/token-registry-metadata.test.ts test/price-resolver.test.ts test/price-tools.test.ts test/ecosystem-registry.test.ts test/registry-defaults.test.ts test/truth-model.test.ts test/ecosystem-registry-schema.test.ts test/anvita-asset-sync.test.ts test/registry-failclosed.test.ts test/okx-dex-api.test.ts test/anvita-engine.test.mjs test/anvita-engine-calldata.test.mjs test/anvita-engine-composition.test.mjs test/anvita-engine-alias.test.mjs",
+    "test:live": "tsx --test test/live-smoke.test.ts",
+    "typecheck:test": "tsc -p tsconfig.test.json",
+    "lint": "eslint .",
+    "test:contracts": "node scripts/run-contract-tests.mjs",
+    "test:live-broadcast": "node scripts/live-broadcast-test.mjs",
+    "test:all": "npm run build && npm run typecheck:test && npm run lint && npm test && npm run demo && npm run test:contracts",
+    "package:anvita": "node scripts/package-anvita-safehands.mjs",
+    "sync:anvita": "tsx scripts/sync-anvita-assets.ts",
+    "sync:anvita:check": "tsx scripts/sync-anvita-assets.ts --check",
+    "test:contracts:hardhat": "npx hardhat test test/contracts/SafeHandsRegistry.ts test/contracts/SafeHandsAttestation.ts",
+    "x402-server:dev": "tsx src/x402Server.ts",
+    "start:x402": "node dist/x402Server.js",
+    "start:worker": "node dist/worker.js",
+    "worker": "tsx src/worker.ts",
+    "start:full-local": "node scripts/start-full-local.mjs",
+    "prepare": "npm run build"
+  },
+  "keywords": [
+    "pharos",
+    "mcp",
+    "mcp-skill",
+    "defi",
+    "risk-engine",
+    "ai-agent",
+    "faroswap",
+    "viem",
+    "pharos-pacific",
+    "mainnet",
+    "web3",
+    "pharos-skill-engine",
+    "guardrail",
+    "transaction-safety",
+    "transaction-firewall",
+    "x402",
+    "agent-safety",
+    "safehands",
+    "rwa",
+    "real-fi",
+    "realfi",
+    "real-world-assets",
+    "attestation"
+  ],
+  "author": "SZtch",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/SZtch/safehands-pharos.git"
+  },
+  "homepage": "https://github.com/SZtch/safehands-pharos#readme",
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@x402/core": "^2.15.0",
+    "@x402/evm": "^2.15.0",
+    "@x402/express": "^2.15.0",
+    "@x402/fetch": "^2.15.0",
+    "express": "^5.2.1",
+    "merkletreejs": "^0.6.0",
+    "viem": "^2.31.3",
+    "zod": "^3.25.67"
+  },
+  "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@nomicfoundation/hardhat-toolbox": "^7.0.0",
+    "@nomicfoundation/hardhat-toolbox-viem": "^5.0.7",
+    "@openzeppelin/contracts": "^5.6.1",
+    "@types/chai": "^5.2.3",
+    "@types/express": "^5.0.6",
+    "@types/mocha": "^10.0.10",
+    "@types/node": "^22.15.0",
+    "chai": "^6.2.2",
+    "dotenv": "^17.4.2",
+    "eslint": "^10.7.0",
+    "hardhat": "^3.9.0",
+    "mocha": "^11.7.6",
+    "tsx": "^4.20.3",
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.63.0"
+  },
+  "overrides": {
+    "ws": "^8.21.0",
+    "undici": "^6.24.0"
+  }
+}

package/contracts/RiskRegistry.json

@@ -1,223 +0,0 @@
-{
-  "abi": [
-    {
-      "inputs": [],
-      "stateMutability": "nonpayable",
-      "type": "constructor"
-    },
-    {
-      "anonymous": false,
-      "inputs": [
-        {
-          "indexed": true,
-          "internalType": "address",
-          "name": "agent",
-          "type": "address"
-        },
-        {
-          "indexed": false,
-          "internalType": "bool",
-          "name": "status",
-          "type": "bool"
-        }
-      ],
-      "name": "AgentAuthorized",
-      "type": "event"
-    },
-    {
-      "anonymous": false,
-      "inputs": [
-        {
-          "indexed": true,
-          "internalType": "address",
-          "name": "wallet",
-          "type": "address"
-        },
-        {
-          "indexed": false,
-          "internalType": "uint256",
-          "name": "score",
-          "type": "uint256"
-        },
-        {
-          "indexed": false,
-          "internalType": "string",
-          "name": "riskLevel",
-          "type": "string"
-        },
-        {
-          "indexed": false,
-          "internalType": "address",
-          "name": "assessedBy",
-          "type": "address"
-        }
-      ],
-      "name": "RiskPublished",
-      "type": "event"
-    },
-    {
-      "inputs": [
-        {
-          "internalType": "address",
-          "name": "",
-          "type": "address"
-        }
-      ],
-      "name": "authorizedAgents",
-      "outputs": [
-        {
-          "internalType": "bool",
-          "name": "",
-          "type": "bool"
-        }
-      ],
-      "stateMutability": "view",
-      "type": "function"
-    },
-    {
-      "inputs": [],
-      "name": "owner",
-      "outputs": [
-        {
-          "internalType": "address",
-          "name": "",
-          "type": "address"
-        }
-      ],
-      "stateMutability": "view",
-      "type": "function"
-    },
-    {
-      "inputs": [
-        {
-          "internalType": "address",
-          "name": "wallet",
-          "type": "address"
-        },
-        {
-          "internalType": "uint256",
-          "name": "score",
-          "type": "uint256"
-        },
-        {
-          "internalType": "string",
-          "name": "riskLevel",
-          "type": "string"
-        },
-        {
-          "internalType": "string",
-          "name": "recommendation",
-          "type": "string"
-        }
-      ],
-      "name": "publish",
-      "outputs": [],
-      "stateMutability": "nonpayable",
-      "type": "function"
-    },
-    {
-      "inputs": [
-        {
-          "internalType": "address",
-          "name": "wallet",
-          "type": "address"
-        }
-      ],
-      "name": "query",
-      "outputs": [
-        {
-          "components": [
-            {
-              "internalType": "uint256",
-              "name": "score",
-              "type": "uint256"
-            },
-            {
-              "internalType": "string",
-              "name": "riskLevel",
-              "type": "string"
-            },
-            {
-              "internalType": "string",
-              "name": "recommendation",
-              "type": "string"
-            },
-            {
-              "internalType": "uint256",
-              "name": "timestamp",
-              "type": "uint256"
-            },
-            {
-              "internalType": "address",
-              "name": "assessedBy",
-              "type": "address"
-            }
-          ],
-          "internalType": "struct RiskRegistry.RiskRecord",
-          "name": "",
-          "type": "tuple"
-        }
-      ],
-      "stateMutability": "view",
-      "type": "function"
-    },
-    {
-      "inputs": [
-        {
-          "internalType": "address",
-          "name": "",
-          "type": "address"
-        }
-      ],
-      "name": "registry",
-      "outputs": [
-        {
-          "internalType": "uint256",
-          "name": "score",
-          "type": "uint256"
-        },
-        {
-          "internalType": "string",
-          "name": "riskLevel",
-          "type": "string"
-        },
-        {
-          "internalType": "string",
-          "name": "recommendation",
-          "type": "string"
-        },
-        {
-          "internalType": "uint256",
-          "name": "timestamp",
-          "type": "uint256"
-        },
-        {
-          "internalType": "address",
-          "name": "assessedBy",
-          "type": "address"
-        }
-      ],
-      "stateMutability": "view",
-      "type": "function"
-    },
-    {
-      "inputs": [
-        {
-          "internalType": "address",
-          "name": "agent",
-          "type": "address"
-        },
-        {
-          "internalType": "bool",
-          "name": "status",
-          "type": "bool"
-        }
-      ],
-      "name": "setAuthorizedAgent",
-      "outputs": [],
-      "stateMutability": "nonpayable",
-      "type": "function"
-    }
-  ],
-  "bytecode": "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"
-}