web3guard-cli 1.0.0

package/dist/api.js

@@ -0,0 +1,88 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scanContract = scanContract;
+exports.getTrustScore = getTrustScore;
+exports.findContracts = findContracts;
+const axios_1 = __importDefault(require("axios"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const config_1 = require("./config");
+// Note: Replace with actual deployed URL in production or read from env.
+const config = (0, config_1.readConfig)();
+const API_URL = process.env.WEB3GUARD_API_URL || config.api_url || 'https://stellar-submission-v2-backend.up.railway.app';
+const API_URL_LOCAL = process.env.WEB3GUARD_API_URL_LOCAL || 'http://localhost:8000';
+const client = axios_1.default.create({
+    baseURL: API_URL, // Default to production URL
+});
+async function scanContract(filePath) {
+    const absolutePath = path.resolve(filePath);
+    if (!fs.existsSync(absolutePath)) {
+        throw new Error(`File not found: ${absolutePath}`);
+    }
+    const sourceCode = fs.readFileSync(absolutePath, 'utf8');
+    const ecosystem = absolutePath.endsWith('.sol') ? 'Solidity' : 'Rust';
+    const response = await client.post('/scan', {
+        source_code: sourceCode,
+        ecosystem: ecosystem,
+    });
+    return response.data;
+}
+async function getTrustScore(address) {
+    const response = await client.get(`/api/v1/trust/${address}`);
+    return response.data;
+}
+function findContracts(dir) {
+    let results = [];
+    const list = fs.readdirSync(dir);
+    list.forEach((file) => {
+        const filePath = path.resolve(dir, file);
+        const stat = fs.statSync(filePath);
+        if (stat && stat.isDirectory()) {
+            if (file !== 'node_modules' && file !== 'target' && file !== 'dist' && !file.startsWith('.')) {
+                results = results.concat(findContracts(filePath));
+            }
+        }
+        else {
+            if (filePath.endsWith('.rs') || filePath.endsWith('.sol')) {
+                results.push(filePath);
+            }
+        }
+    });
+    return results;
+}

package/dist/cli.js

@@ -0,0 +1,184 @@
+#!/usr/bin/env node
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const commander_1 = require("commander");
+const chalk_1 = __importDefault(require("chalk"));
+const ora_1 = __importDefault(require("ora"));
+const fs = __importStar(require("fs"));
+const api_1 = require("./api");
+const config_1 = require("./config");
+const program = new commander_1.Command();
+program
+    .name('web3guard')
+    .description('CLI for Web3 Guard - Intelligent Multi-Chain Auditing & Security Oracle')
+    .version('1.0.0');
+program
+    .command('scan <path>')
+    .description('Scan a local smart contract file or directory for vulnerabilities')
+    .option('--json', 'Output result in JSON format')
+    .option('--out <file>', 'Save output to a file (JSON format)')
+    .action(async (scanPath, options) => {
+    let filesToScan = [];
+    try {
+        const stat = fs.statSync(scanPath);
+        if (stat.isDirectory()) {
+            filesToScan = (0, api_1.findContracts)(scanPath);
+        }
+        else {
+            filesToScan = [scanPath];
+        }
+    }
+    catch (e) {
+        console.error(chalk_1.default.red(`Error accessing path: ${e.message}`));
+        return;
+    }
+    if (filesToScan.length === 0) {
+        console.log(chalk_1.default.yellow('No .rs or .sol files found to scan.'));
+        return;
+    }
+    let allResults = [];
+    const spinner = options.json ? null : (0, ora_1.default)(`Scanning ${filesToScan.length} contract(s)...`).start();
+    for (const file of filesToScan) {
+        if (spinner)
+            spinner.text = `Scanning ${file}...`;
+        try {
+            const result = await (0, api_1.scanContract)(file);
+            allResults.push({ file, result });
+        }
+        catch (error) {
+            allResults.push({ file, error: error.message || String(error) });
+        }
+    }
+    if (spinner)
+        spinner.succeed(`Scan completed for ${filesToScan.length} file(s)!`);
+    if (options.json || options.out) {
+        const outputJson = JSON.stringify(allResults, null, 2);
+        if (options.out) {
+            fs.writeFileSync(options.out, outputJson, 'utf8');
+            if (!options.json)
+                console.log(chalk_1.default.green(`\nResults saved to ${options.out}`));
+        }
+        if (options.json) {
+            console.log(outputJson);
+        }
+    }
+    else {
+        allResults.forEach(({ file, result, error }) => {
+            console.log(`\n${chalk_1.default.cyan.bold(file)}:`);
+            if (error) {
+                console.log(chalk_1.default.red(`Error: ${error}`));
+                return;
+            }
+            if (result.vulnerabilities && result.vulnerabilities.length > 0) {
+                console.log(chalk_1.default.red.bold(`Found ${result.vulnerabilities.length} vulnerabilities:\n`));
+                result.vulnerabilities.forEach((v, index) => {
+                    console.log(chalk_1.default.yellow(`[${index + 1}] ${v.type} (${v.severity})`));
+                    if (v.line_number)
+                        console.log(chalk_1.default.gray(`Line: ${v.line_number}`));
+                    console.log(`Description: ${v.description}`);
+                    if (v.remediation) {
+                        console.log(chalk_1.default.green(`Remediation: ${v.remediation}`));
+                    }
+                    console.log('---');
+                });
+            }
+            else {
+                console.log(chalk_1.default.green('Web3 Guard: All Clear! ✅ No vulnerabilities found.'));
+            }
+            if (result.hash_key) {
+                console.log(chalk_1.default.cyan(`Audit Hash: ${result.hash_key}`));
+            }
+        });
+    }
+});
+program
+    .command('score <address>')
+    .description('Check the live security trust score of a deployed contract')
+    .option('--json', 'Output result in JSON format')
+    .action(async (address, options) => {
+    const spinner = options.json ? null : (0, ora_1.default)('Fetching trust score...').start();
+    try {
+        const result = await (0, api_1.getTrustScore)(address);
+        if (spinner)
+            spinner.succeed('Score fetched successfully!');
+        if (options.json) {
+            console.log(JSON.stringify(result, null, 2));
+        }
+        else {
+            console.log(`\nAddress: ${chalk_1.default.cyan(address)}`);
+            let scoreColor = chalk_1.default.green;
+            if (result.grade === 'D' || result.grade === 'F')
+                scoreColor = chalk_1.default.red;
+            else if (result.grade === 'C')
+                scoreColor = chalk_1.default.yellow;
+            console.log(`Score: ${scoreColor.bold(result.score)}`);
+            console.log(`Grade: ${scoreColor.bold(result.grade)}`);
+            if (result.factors && result.factors.length > 0) {
+                console.log('\nFactors:');
+                result.factors.forEach((f) => {
+                    const pointsStr = f.points > 0 ? `+${f.points}` : `${f.points}`;
+                    console.log(`- ${f.reason} (${pointsStr})`);
+                });
+            }
+        }
+    }
+    catch (error) {
+        if (spinner)
+            spinner.fail('Failed to fetch score.');
+        if (options.json) {
+            console.log(JSON.stringify({ error: error.message || String(error) }, null, 2));
+        }
+        else {
+            console.error(chalk_1.default.red(error.message || error));
+        }
+    }
+});
+program
+    .command('config <action> [key] [value]')
+    .description('Manage CLI configuration (e.g., config set api-url http://localhost:8000)')
+    .action((action, key, value) => {
+    if (action === 'set' && key === 'api-url' && value) {
+        (0, config_1.writeConfig)({ api_url: value });
+        console.log(chalk_1.default.green(`Configuration updated: api_url = ${value}`));
+    }
+    else {
+        console.log(chalk_1.default.yellow('Usage: web3guard config set api-url <url>'));
+    }
+});
+program.parse(process.argv);

package/dist/config.js

@@ -0,0 +1,59 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readConfig = readConfig;
+exports.writeConfig = writeConfig;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const CONFIG_PATH = path.join(os.homedir(), '.web3guardrc');
+function readConfig() {
+    if (!fs.existsSync(CONFIG_PATH)) {
+        return {};
+    }
+    try {
+        const raw = fs.readFileSync(CONFIG_PATH, 'utf8');
+        return JSON.parse(raw);
+    }
+    catch (error) {
+        console.warn(`Warning: Could not parse config at ${CONFIG_PATH}`);
+        return {};
+    }
+}
+function writeConfig(config) {
+    const current = readConfig();
+    const updated = { ...current, ...config };
+    fs.writeFileSync(CONFIG_PATH, JSON.stringify(updated, null, 2), 'utf8');
+}

package/dist/index.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./api"), exports);

package/dist/mcp.js

@@ -0,0 +1,178 @@
+#!/usr/bin/env node
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const index_js_1 = require("@modelcontextprotocol/sdk/server/index.js");
+const stdio_js_1 = require("@modelcontextprotocol/sdk/server/stdio.js");
+const types_js_1 = require("@modelcontextprotocol/sdk/types.js");
+const api_1 = require("./api");
+const fs = __importStar(require("fs"));
+// Initialize the MCP Server
+const server = new index_js_1.Server({
+    name: "web3guard-mcp-server",
+    version: "1.0.0",
+}, {
+    capabilities: {
+        tools: {},
+    },
+});
+// Define available tools
+server.setRequestHandler(types_js_1.ListToolsRequestSchema, async () => {
+    return {
+        tools: [
+            {
+                name: "scan_local_contract",
+                description: "Scans a local smart contract file or directory (Solidity or Rust) for security vulnerabilities using Web3 Guard's AI engine.",
+                inputSchema: {
+                    type: "object",
+                    properties: {
+                        path: {
+                            type: "string",
+                            description: "The absolute or relative path to the local smart contract file or directory.",
+                        },
+                    },
+                    required: ["path"],
+                },
+            },
+            {
+                name: "get_contract_score",
+                description: "Gets the live security trust score and grade of a deployed smart contract.",
+                inputSchema: {
+                    type: "object",
+                    properties: {
+                        address: {
+                            type: "string",
+                            description: "The blockchain address of the deployed smart contract.",
+                        },
+                    },
+                    required: ["address"],
+                },
+            },
+        ],
+    };
+});
+// Handle tool execution
+server.setRequestHandler(types_js_1.CallToolRequestSchema, async (request) => {
+    const { name, arguments: args } = request.params;
+    if (name === "scan_local_contract") {
+        const scanPath = String(args?.path || args?.filePath || "");
+        if (!scanPath || scanPath === "undefined") {
+            throw new Error("path is required");
+        }
+        try {
+            let filesToScan = [];
+            const stat = fs.statSync(scanPath);
+            if (stat.isDirectory()) {
+                filesToScan = (0, api_1.findContracts)(scanPath);
+            }
+            else {
+                filesToScan = [scanPath];
+            }
+            if (filesToScan.length === 0) {
+                return {
+                    content: [{ type: "text", text: "No .rs or .sol files found." }]
+                };
+            }
+            let allResults = [];
+            for (const file of filesToScan) {
+                try {
+                    const result = await (0, api_1.scanContract)(file);
+                    allResults.push({ file, result });
+                }
+                catch (error) {
+                    allResults.push({ file, error: error.message || String(error) });
+                }
+            }
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify(allResults, null, 2),
+                    },
+                ],
+            };
+        }
+        catch (error) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Error scanning contract(s): ${error.message}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+    }
+    if (name === "get_contract_score") {
+        const address = String(args?.address);
+        if (!address) {
+            throw new Error("address is required");
+        }
+        try {
+            const result = await (0, api_1.getTrustScore)(address);
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify(result, null, 2),
+                    },
+                ],
+            };
+        }
+        catch (error) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Error fetching contract score: ${error.message}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+    }
+    throw new Error(`Unknown tool: ${name}`);
+});
+// Start the server using stdio transport
+async function run() {
+    const transport = new stdio_js_1.StdioServerTransport();
+    await server.connect(transport);
+    console.error("Web3 Guard MCP Server running on stdio");
+}
+run().catch((error) => {
+    console.error("Fatal error running MCP Server:", error);
+    process.exit(1);
+});

package/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "web3guard-cli",
+  "version": "1.0.0",
+  "description": "Web3 Guard CLI and MCP Server",
+  "main": "dist/index.js",
+  "files": [
+    "dist"
+  ],
+  "bin": {
+    "web3guard": "./dist/cli.js",
+    "web3guard-mcp": "./dist/mcp.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "prepare": "npm run build",
+    "start:cli": "node ./dist/cli.js",
+    "start:mcp": "node ./dist/mcp.js"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.6.1",
+    "axios": "^1.6.7",
+    "commander": "^12.0.0",
+    "chalk": "^4.1.2",
+    "ora": "^5.4.1"
+  },
+  "devDependencies": {
+    "@types/node": "^20.11.24",
+    "ts-node": "^10.9.2",
+    "typescript": "^5.3.3"
+  }
+}