Metadata-Version: 2.4
Name: orderstream-ai-contract-auditor
Version: 0.1.0
Summary: Automated static analysis and AST invariant checker for Soroban smart contracts
Author-email: OrderStream <healthdecoded77@gmail.com>
Requires-Python: >=3.10
Description-Content-Type: text/markdown

# ai-contract-auditor

Automated static analysis and AST invariant checker for Stellar Soroban smart contracts.

## Detection Rules
- **Missing Authorization & Replay (`SOROBAN-AUTH-001`)**: Pinpoints state mutations without `.require_auth()`.
- **Checks-Effects-Interactions Reentrancy (`SOROBAN-REENT-001`)**: Identifies external contract invocations prior to persistent state updates.
- **Unchecked Arithmetic (`SOROBAN-MATH-001`)**: Flags raw arithmetic operators vulnerable to overflow/underflow.
- **TTL Eviction Neglect (`SOROBAN-TTL-001`)**: Warns on persistent storage mutations without accompanying TTL bump/extension calls.

## CLI Usage
```bash
# Scan a Soroban contract workspace
ai-contract-auditor audit path/to/contracts --report AUDIT.md --sarif results.sarif --fail-on HIGH
```
