npm install qshield-sdk @solana/web3.js

import { QuantumShield } from 'qshield-sdk'
import { Connection } from '@solana/web3.js'

const connection = new Connection('https://api.mainnet-beta.solana.com')

const qs = new QuantumShield({
  connection,
  mode: 'monitor'  // 'monitor' warns, 'enforce' blocks
})

const analysis = await qs.analyze('7xKX...your-public-key...')

// analysis.totalTransactions → real on-chain tx count
// analysis.exposureLevel → 'fresh' | 'low' | 'moderate' | 'high' | 'critical'
// analysis.riskScore → 0–1 based on real data
// analysis.balanceSOL → SOL at risk
// analysis.recommendation → actionable next step

const result = await qs.scan(transaction)

// result.safe → boolean
// result.action → 'allow' | 'warn' | 'block'
// result.signers → per-signer risk breakdown
// result.riskScore → aggregate risk

interface QShieldConfig {
  connection: Connection   // Solana RPC connection
  mode: 'monitor' | 'enforce'
  policy?: {
    maxRiskScore: number     // Block/warn above this (default: 0.5)
    maxKeyExposureTx: number // Alert after N tx (default: 500)
    blockHighRisk: boolean   // Auto-block high risk (default: false)
    alertThreshold: number   // Monitor alert threshold (default: 0.6)
    onBlock?: (result) => void
    onWarn?: (result) => void
  }
}

interface KeyAnalysis {
  publicKey: string
  totalTransactions: number    // Real on-chain tx count
  recentTransactions: number   // Last 7 days
  balanceLamports: number
  balanceSOL: number
  programsInteracted: string[] // Token Program, Jupiter, etc.
  firstActivity: Date | null
  lastActivity: Date | null
  ageDays: number
  exposureLevel: 'fresh' | 'low' | 'moderate' | 'high' | 'critical'
  riskScore: number            // 0 (safe) to 1 (critical)
  riskLevel: 'safe' | 'low' | 'medium' | 'high' | 'critical'
  recommendation: string
}

interface ScanResult {
  safe: boolean
  action: 'allow' | 'warn' | 'block'
  riskScore: number
  riskLevel: string
  signers: {
    publicKey: string
    totalTransactions: number
    exposureLevel: string
    riskScore: number
  }[]
  recommendation: string
}

const plan = await qs.planMigration('source-public-key')

// plan.balanceToTransfer → SOL to move
// plan.tokenAccountsToMigrate → SPL token accounts found
// plan.estimatedCostLamports → total tx fees
// plan.steps → ordered migration instructions

import { Keypair } from '@solana/web3.js'

const source = Keypair.fromSecretKey(/* your key */)
const freshKey = Keypair.generate()

const result = await qs.migrate(source, freshKey.publicKey)

// result.success → boolean
// result.signatures → on-chain tx signatures
// result.errors → any failures

const monitor = qs.createMonitor(
  ['key1...', 'key2...'],
  (analysis) => {
    console.log(`Alert: ${analysis.publicKey}`)
    console.log(`Risk: ${analysis.riskScore}`)
    console.log(`Exposure: ${analysis.exposureLevel}`)
    console.log(analysis.recommendation)
  },
  60_000  // poll every 60 seconds
)

monitor.start()

// Add/remove keys dynamically
monitor.addKey('new-key...')
monitor.removeKey('old-key...')

// Stop monitoring
monitor.stop()

import { generatePQKeypair, createAttestation, verifyAttestation }
  from 'qshield-sdk'

// Generate a NIST-standard ML-DSA-65 keypair
const pqKeys = await generatePQKeypair()

// pqKeys.publicKey → Uint8Array (1952 bytes)
// pqKeys.secretKey → Uint8Array (4032 bytes)

// Bind your Solana key to your PQ key
const attestation = await createAttestation(
  'your-solana-public-key',
  pqKeys.secretKey,
  pqKeys.publicKey
)

// Verify the binding
const valid = await verifyAttestation(attestation)
// valid → true

// Transaction exposure (35%)
// More signatures = more public key material on-chain
// Keys with 1000+ tx are critically exposed

// Recent activity (20%)
// Active keys are higher priority targets

// Value at risk (30%)
// More SOL = more incentive for attack

// Key age (15%)
// Older keys have been exposed longer

'fresh'    → 0 transactions (never used)
'low'      → 1–10 transactions
'moderate' → 11–100 transactions
'high'     → 101–1000 transactions
'critical' → 1000+ transactions