
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@blockxai/camp-codegen
Advanced tools
Camp Codegen CLI & SDK — AI-powered smart contract generation with verification, security auditing, and compliance checking
Latest: v3.0.3 🎉
Camp Codegen CLI & SDK — AI-powered smart contract generation with verification, security auditing, and compliance checking. Interactive wizard with magical narrative logs and searchable preset library.
✨ NEW: Auto-verification prompt after deployments!
https://evi-v4-production.up.railway.appbasecampnpm install @blockxai/camp-codegen@latest
Node 18+ is required (native fetch).
Verify deployed contracts on block explorers (Etherscan, Basescan, etc.)
const result = await client.verify_by_job('job-id', 'basecamp');
console.log('Verified:', result.verified);
console.log('Explorer URL:', result.explorerUrl);
AI-powered vulnerability detection with severity levels
const audit = await client.audit_orchestrate({ jobId: 'job-id' });
const report = await client.get_audit_report('job-id');
console.log('Security Score:', report.score); // 0-100
console.log('Critical Issues:', report.summary?.critical);
Validate contracts against ERC standards (ERC-20, ERC-721, ERC-1155, DeFi, DAO)
const comp = await client.compliance_orchestrate({
jobId: 'job-id',
targetProfile: 'erc721',
strict: true
});
const report = await client.get_compliance_report('job-id');
console.log('Compliance Passed:', report.passed);
Complete workflow in one call: Generate → Deploy → Verify → Audit → Compliance
const result = await client.run_acv_pipeline({
prompt: 'ERC721 NFT with minting',
runVerify: true,
runAudit: true,
runCompliance: true,
complianceProfile: 'erc721'
});
See: QUICK_START_ACV.md for complete usage guide
No API key required
Optional overrides:
API_BASE_URL (or ACAD_BASE_URL)NETWORK (default: basecamp)MAX_ITERS (default: 11)NO_ANIMATION=1 (disable intro animation; colors still apply)Magical Logger (narrative logs → webhook):
MAGICAL_LOGS=1 (default on; set 0 to disable)MAGICAL_WEBHOOK_URL=https://your-bridge.example.com/magical (optional)MAGICAL_STREAM=1 (stream each event) or 0 (send one final summary)After install, you get two commands: camp and acad.
# 1) Generate from prompt and deploy
camp deploy:prompt --prompt "ERC20 with 1,000,000 supply" [--filename AIGenerated.sol] [--maxIters 11] [--arg value]*
# 2) Deploy from a local Solidity file
camp deploy:file --file ./MyToken.sol [--contractName MyToken] [--filename MyToken.sol] [--maxIters 11]
Just run camp with no arguments to launch a colorful, guided wizard. It asks what you want to do today, offers popular templates and a searchable preset library, collects minimal inputs, and streams logs live while saving everything locally.
camp # opens the interactive wizard
camp wizard # alias
camp interactive
ai_pipeline_runs/<prompt-slug>/pipeline/ for prompt-based runsai_pipeline_runs/<file-slug>/file/ for file-based runs-2, -3, … suffix is added.ai_pipeline_runs/erc721-with-minting-and-baseuri/pipeline/What you’ll see and where things are saved:
./ai_pipeline_runs/<name>/:
pipeline/ or file/job.id, final.status.jsonlogs.ndjsonartifacts/ with sources/, abis/, scripts/Examples:
# Generate and deploy from a prompt
camp deploy:prompt --prompt "ERC721 with minting and baseURI"
# Deploy from a local Solidity file
camp deploy:file --file ./contracts/MyNFT.sol --contractName MyNFT
The SDK exports AcadClient if you want to call the API directly.
import { AcadClient } from "@blockxai/camp-codegen";
const client = new AcadClient();
const jobId = await client.start_pipeline("ERC20 token", "basecamp", 11, "Token.sol", [1000000]);
const job = await client.wait_for_completion(jobId, { intervalSec: 2, timeoutSec: 2700 });
# inside camp-codegen-js/
npm install
npm run build
Outputs ESM to dist/.
In the wizard, pick “🔎 Browse preset library (search)” to choose from built-in and user-provided presets.
presets.user.json (array of { title, prompt })presets.user.txt (one preset per paragraph; first token before : is the title)src/presets.user.jsonExamples:
// presets.user.json
[
{ "title": "MessageBoard", "prompt": "MessageBoard: EMPTY CONSTRUCTOR. post(string message). Events: MessagePosted. No constructor args." },
{ "title": "SimpleBank", "prompt": "SimpleBank: EMPTY CONSTRUCTOR. deposit() payable. withdraw(uint256 amount). Events: Deposited, Withdrawn." }
]
MessageBoard: EMPTY CONSTRUCTOR. post(string message). Events: MessagePosted. No constructor args.
SimpleBank: EMPTY CONSTRUCTOR. deposit() payable. withdraw(uint256 amount). Events: Deposited, Withdrawn.
Search is fuzzy across title, description, and prompt text. If your prompts version lacks autocomplete, it falls back to a simple select list.
We emit a narrative alongside raw SSE logs to keep non-technical teammates engaged.
Categories: generation, compilation, errors, deployment, celebration, bonus, verification 🔍, audit 🛡️, compliance ✅
Configure via env vars:
MAGICAL_LOGS — enable/disable (default 1)MAGICAL_WEBHOOK_URL — optional webhook to receive eventsMAGICAL_STREAM — 1 to stream events, or 0 to receive one magical_log_summaryPayload fields include runLabel, jobId, network, prompt, filename, contractName, category, msg, and optional meta.
Tip: route the webhook to a tiny middleware (e.g., Cloudflare Worker, Vercel, Express) that transforms into Apollo.io Notes/Activities for GTM/CS visibility.
NO_ANIMATION=1)basecampNO_ANIMATION=1 is recommended for CI logsFAQs
Camp Codegen CLI & SDK — AI-powered smart contract generation with verification, security auditing, and compliance checking
We found that @blockxai/camp-codegen demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.