feat: SECURITY.md

Author: thearyanag

SECURITY.md

@@ -2,4 +2,62 @@
 
 ## Reporting a Vulnerability
 
-Report the bug to aryan@sendai.fun and dev@sendai.fun with full details, do not create an issue for it
+We take the security of our software seriously. If you believe you have found a security vulnerability, please report it to us following these guidelines:
+
+### Reporting Process
+
+1. **DO NOT** create a public GitHub issue for the vulnerability
+2. Email your findings to:
+   - Primary: aryan@sendai.fun
+   - Secondary: dev@sendai.fun
+
+### What to Include
+
+Please include the following information in your report:
+
+- A clear description of the vulnerability
+- Steps to reproduce the issue
+- Affected versions
+- Any potential impacts
+- Optional: Suggested fixes or mitigations
+
+### Response Timeline
+
+- We will acknowledge receipt of your vulnerability report within 48 hours
+- We aim to send a more detailed response within 5 business days
+- We will keep you informed of our progress throughout the process
+
+### Security Updates
+
+Security updates will be released as soon as possible after we have confirmed and fixed the vulnerability. Updates will be published through:
+
+- GitHub releases
+- Security advisories
+- Email notifications to affected parties (if applicable)
+
+## Supported Versions
+
+As an open-source project under the Apache 2.0 license, we focus our security updates on the latest stable release. While you're free to use any version as per the Apache 2.0 license terms, we strongly recommend using the most recent version for the best security posture.
+
+| Version | Security Updates |
+| ------- | --------------- |
+| Latest Release | ✅ Active |
+| Previous Releases | ⚠️ Use at your own risk |
+
+Note: The Apache 2.0 license comes with NO WARRANTIES or CONDITIONS of any kind, either express or implied. Users are responsible for their own security assessment when using any version of this software.
+
+## Security Best Practices
+
+When using this software, please follow these security best practices:
+- Keep your private keys secure and never share them
+- Regularly update to the latest version
+- Review transaction details before signing
+- Use appropriate access controls in production environments
+
+## Bug Bounty Program
+
+Currently, we do not offer a bug bounty program. However, we greatly appreciate responsible disclosure of security vulnerabilities.
+
+## License
+
+This security policy is part of our project licensed under [Apache 2.0](LICENSE).

src/langchain/index.ts

@@ -9,7 +9,6 @@ import {
 import { create_image } from "../tools/create_image";
 import { BN } from "@coral-xyz/anchor";
 import { FEE_TIERS } from "../tools";
-import { toJSON } from "../utils/toJSON";
 
 export class SolanaBalanceTool extends Tool {
   name = "solana_balance";
@@ -318,7 +317,7 @@ export class SolanaRegisterDomainTool extends Tool {
 
   protected async _call(input: string): Promise<string> {
     try {
-      const parsedInput = toJSON(input);
+      const parsedInput = JSON.parse(input);
       this.validateInput(parsedInput);
 
       const tx = await this.solanaKit.registerDomain(
@@ -1255,7 +1254,7 @@ export class SolanaRockPaperScissorsTool extends Tool {
 
   protected async _call(input: string): Promise<string> {
     try {
-      const parsedInput = toJSON(input);
+      const parsedInput = JSON.parse(input);
       this.validateInput(parsedInput);
       const result = await this.solanaKit.rockPaperScissors(
         Number(parsedInput['"amount"']),