server.js

const express = require('express');
const { scanPrompt } = require('./guardrails');
const { logSecurityIncidentOnChain } = require('./mantleLogger');

const app = express();
app.use(express.json());

const PORT = process.env.PORT || 3000;

// Security Guardrail Proxy Endpoint
app.post('/api/v1/chat', async (req, res) => {
    const { message } = req.body;

    // Execute real-time core guardrail inspection
    const securityCheck = scanPrompt(message);

    if (!securityCheck.isSafe) {
        console.warn(`[SECURITY ALERT]: Intervention triggered due to: ${securityCheck.reason}`);
        
        // Push threat telemetry to Mantle Network for unalterable compliance audit
        const txHash = await logSecurityIncidentOnChain("Prompt Injection", securityCheck.reason);

        return res.status(403).json({
            status: "blocked",
            error: "Security Policy Violation",
            reason: securityCheck.reason,
            blockchainAudit: txHash ? { network: "Mantle Testnet", txHash: txHash } : "Failed to establish audit log"
        });
    }

    // Input is verified safe; forward to target AI Agent execution loop
    res.json({
        status: "success",
        message: "Input verified as secure.",
        forwardedMessage: message
    });
});

app.listen(PORT, () => {
    console.log(`🛡️ AgentWatchdog Security Proxy active on port ${PORT}`);
});