@1sat/cli 0.0.117 → 0.0.119

package/dist/cli.js

@@ -825,12 +825,12 @@ var init_help = __esm(() => {
         { name: "balance", description: "Show wallet balance in satoshis" },
         {
           name: "address",
-          description: "Show BRC-29 deposit address(es)",
+          description: "Show P1SAT deposit address(es)",
           args: [
             {
               flag: "--prefix",
               values: "<p>",
-              description: "BRC-29 prefix (default: 1sat)"
+              description: "Deposit keyID prefix (default: 1sat)"
             },
             { flag: "--start-index", values: "<n>" },
             { flag: "--count", values: "<n>" }
@@ -857,7 +857,7 @@ var init_help = __esm(() => {
         },
         {
           name: "sync",
-          description: "Sync inbound payments at BRC-29 deposit addresses",
+          description: "Sync inbound payments at P1SAT deposit addresses",
           args: [
             { flag: "--prefix", values: "<p>" },
             { flag: "--start-index", values: "<n>" },
@@ -1387,7 +1387,11 @@ var init_help = __esm(() => {
           name: "wallet",
           description: "Wallet storage server only (BRC-100 HTTP)"
         },
-        { name: "monitor", description: "Monitor daemon only" }
+        { name: "monitor", description: "Monitor daemon only" },
+        {
+          name: "wallet-api",
+          description: "App-facing BRC-100 wallet endpoint only (headless, default port 3321)"
+        }
       ]
     },
     {
@@ -3539,7 +3543,8 @@ import {
   KnexHandleCertStore,
   KnexPendingStore,
   createHostServer,
-  createWalletServer
+  createWalletServer,
+  startBRC100Server
 } from "@1sat/wallet-server";
 import { initLogger as initLogger2 } from "evlog";
 import knexLib from "knex";
@@ -3574,6 +3579,7 @@ function resolveMode(subcommand) {
   switch (subcommand) {
     case "wallet":
     case "monitor":
+    case "wallet-api":
       return subcommand;
     default:
       return null;
@@ -3667,6 +3673,15 @@ async function runWithStorage(resolved, mode) {
     backups: resolved.backups,
     skipInitialMonitor: true
   });
+  if (mode === "wallet-api") {
+    const dapp = await startDappEndpoint(walletResult);
+    return {
+      stop: async () => {
+        await dapp.close();
+        await walletResult.destroy();
+      }
+    };
+  }
   const runMonitor = mode === "monitor" || mode === "all" && resolved.monitorEnabled;
   const accounts = mode === "monitor" ? undefined : await buildAccountsForServer(resolved, walletResult);
   const serverHandle = mode === "monitor" ? undefined : await startWalletServer(resolved, walletResult, accounts, mode);
@@ -3855,7 +3870,52 @@ function waitForShutdown() {
     process.once("SIGTERM", () => handler("SIGTERM"));
   });
 }
-var DEFAULT_HOST = "127.0.0.1", DEFAULT_PORT = 8100, DEFAULT_STACK_URL = "https://api.1sat.app", DEFAULT_BASELINE_BYTES, DEFAULT_PURCHASE_UNIT_BYTES = 1073741824, DEFAULT_SATS_PER_UNIT = 1e6, DEFAULT_DURATION_BLOCKS = 4383, DEFAULT_STORAGE_IDENTITY_KEY = "1sat-cli-default", DEFAULT_PG_SCHEMA = "messagebox";
+function walletApiHandle(wallet) {
+  return {
+    async call(method, args, origin) {
+      const iface = wallet;
+      const fn = iface[method];
+      if (typeof fn !== "function") {
+        throw new Error(`Method not available: ${method}`);
+      }
+      return await fn.call(iface, args, origin);
+    }
+  };
+}
+async function startDappEndpoint(walletResult) {
+  const config = loadConfig();
+  const dapp = config.server?.dapp ?? {};
+  const host = dapp.host ?? DEFAULT_DAPP_HOST;
+  const port = dapp.port ?? (process.env.ONESAT_DAPP_PORT ? Number(process.env.ONESAT_DAPP_PORT) : DEFAULT_DAPP_PORT);
+  const approve = dapp.approve === true;
+  const handle = await startBRC100Server({
+    host,
+    port,
+    wallet: walletApiHandle(walletResult.wallet),
+    approvalPolicy: approve ? async ({ method, origin, args }) => {
+      const { confirm, isCancel } = await import("@clack/prompts");
+      console.log(`
+[brc-100] ${method} requested by ${origin}`);
+      console.log(`          ${JSON.stringify(args).slice(0, 400)}`);
+      const ok = await confirm({
+        message: `Approve ${method}?`
+      });
+      if (isCancel(ok) || !ok) {
+        throw new Error("User denied permission");
+      }
+    } : undefined,
+    onEvent: (event) => {
+      if (event.event === "brc100_sensitive") {
+        const trustNote = event.trusted ? " (trusted)" : approve ? "" : " (auto-approved)";
+        console.log(`[brc-100] sensitive ${event.method} from ${event.origin}${trustNote}`);
+      }
+    }
+  });
+  console.log(`[wallet-api] BRC-100 app endpoint on http://${host}:${port}`);
+  console.log(approve ? "[wallet-api] sensitive methods require TTY confirmation" : "[wallet-api] sensitive methods are AUTO-APPROVED (headless). " + "Set server.dapp.approve=true to require confirmation.");
+  return { close: async () => await handle.close() };
+}
+var DEFAULT_HOST = "127.0.0.1", DEFAULT_PORT = 8100, DEFAULT_STACK_URL = "https://api.1sat.app", DEFAULT_BASELINE_BYTES, DEFAULT_PURCHASE_UNIT_BYTES = 1073741824, DEFAULT_SATS_PER_UNIT = 1e6, DEFAULT_DURATION_BLOCKS = 4383, DEFAULT_STORAGE_IDENTITY_KEY = "1sat-cli-default", DEFAULT_PG_SCHEMA = "messagebox", DEFAULT_DAPP_HOST = "127.0.0.1", DEFAULT_DAPP_PORT = 3321;
 var init_serve = __esm(() => {
   init_config();
   init_config();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1sat/cli",
-  "version": "0.0.117",
+  "version": "0.0.119",
   "description": "CLI for 1Sat Ordinals SDK",
   "type": "module",
   "main": "./dist/cli.js",
@@ -27,11 +27,11 @@
   ],
   "license": "MIT",
   "dependencies": {
-    "@1sat/actions": "0.0.221",
+    "@1sat/actions": "0.0.223",
     "@1sat/client": "0.0.55",
     "@1sat/types": "0.0.48",
-    "@1sat/wallet-node": "0.0.77",
-    "@1sat/wallet-server": "0.0.53",
+    "@1sat/wallet-node": "0.0.78",
+    "@1sat/wallet-server": "0.0.55",
     "@bopen-io/messagebox-server": "^1.3.2",
     "@bsv/sdk": "^2.6.0",
     "@bsv/wallet-toolbox": "npm:@bopen-io/wallet-toolbox@2.6.2-brc153.5",

package/src/commands/serve.ts

@@ -25,12 +25,15 @@ import {
 	createNodeWallet,
 } from '@1sat/wallet-node'
 import {
+	type BRC100WalletHandle,
 	KnexAccountStore,
 	KnexHandleCertStore,
 	KnexPendingStore,
 	createHostServer,
 	createWalletServer,
+	startBRC100Server,
 } from '@1sat/wallet-server'
+import type { Wallet, WalletInterface } from '@bsv/sdk'
 import type { PrivateKey } from '@bsv/sdk'
 import { initLogger } from 'evlog'
 import knexLib from 'knex'
@@ -64,7 +67,7 @@ const DEFAULT_SATS_PER_UNIT = 1_000_000
 const DEFAULT_DURATION_BLOCKS = 4383
 const DEFAULT_STORAGE_IDENTITY_KEY = '1sat-cli-default'
 
-type ServeMode = 'all' | 'wallet' | 'monitor'
+type ServeMode = 'all' | 'wallet' | 'monitor' | 'wallet-api'
 
 interface ResolvedServe {
 	chain: 'main' | 'test'
@@ -130,6 +133,7 @@ function resolveMode(subcommand: string | undefined): ServeMode | null {
 	switch (subcommand) {
 		case 'wallet':
 		case 'monitor':
+		case 'wallet-api':
 			return subcommand
 		default:
 			return null
@@ -269,6 +273,18 @@ async function runWithStorage(
 		skipInitialMonitor: true,
 	})
 
+	// wallet-api serves only the app-facing BRC-100 endpoint: no storage
+	// server, no accounts, no monitor.
+	if (mode === 'wallet-api') {
+		const dapp = await startDappEndpoint(walletResult)
+		return {
+			stop: async () => {
+				await dapp.close()
+				await walletResult.destroy()
+			},
+		}
+	}
+
 	// One active monitor per deployment: wallet mode never runs it, monitor
 	// mode always does, all mode runs it unless server.monitor.enabled=false
 	// (set on redundant host instances that share a dedicated serve monitor).
@@ -538,3 +554,94 @@ function waitForShutdown(): Promise<void> {
 		process.once('SIGTERM', () => handler('SIGTERM'))
 	})
 }
+
+// ---------------------------------------------------------------------------
+// wallet-api: application-facing BRC-100 endpoint (dApp connectivity)
+// ---------------------------------------------------------------------------
+
+const DEFAULT_DAPP_HOST = '127.0.0.1'
+const DEFAULT_DAPP_PORT = 3321
+
+/**
+ * Wrap the CLI's wallet (wallet-toolbox client) as a BRC100WalletHandle.
+ * The toolbox Wallet already implements the 28 BRC-100 methods with the
+ * `(args, originator)` signature the dApps send.
+ */
+function walletApiHandle(wallet: Wallet): BRC100WalletHandle {
+	return {
+		async call(method, args, origin) {
+			const iface = wallet as unknown as WalletInterface
+			const fn = (iface as unknown as Record<string, unknown>)[method] as (
+				a: unknown,
+				o: string,
+			) => Promise<unknown>
+			if (typeof fn !== 'function') {
+				throw new Error(`Method not available: ${method}`)
+			}
+			return await fn.call(iface, args, origin)
+		},
+	}
+}
+
+/**
+ * Start the app-facing BRC-100 HTTP endpoint (the interface dApps like
+ * wallet-desktop's :3321 server speak; see bitplan and other BRC-100
+ * clients). Headless by design: sensitive methods are auto-approved with a
+ * console line unless `server.dapp.approve` is set, in which case each one
+ * must be confirmed on the TTY.
+ */
+async function startDappEndpoint(
+	walletResult: NodeWalletResult,
+): Promise<{ close: () => Promise<void> }> {
+	const config = loadConfig()
+	const dapp = config.server?.dapp ?? {}
+	const host = dapp.host ?? DEFAULT_DAPP_HOST
+	const port =
+		dapp.port ??
+		(process.env.ONESAT_DAPP_PORT
+			? Number(process.env.ONESAT_DAPP_PORT)
+			: DEFAULT_DAPP_PORT)
+
+	const approve = dapp.approve === true
+
+	const handle = await startBRC100Server({
+		host,
+		port,
+		wallet: walletApiHandle(walletResult.wallet),
+		approvalPolicy: approve
+			? async ({ method, origin, args }) => {
+					const { confirm, isCancel } = await import('@clack/prompts')
+					console.log(`\n[brc-100] ${method} requested by ${origin}`)
+					console.log(`          ${JSON.stringify(args).slice(0, 400)}`)
+					const ok = await confirm({
+						message: `Approve ${method}?`,
+					})
+					if (isCancel(ok) || !ok) {
+						throw new Error('User denied permission')
+					}
+				}
+			: undefined,
+		onEvent: (event) => {
+			if (event.event === 'brc100_sensitive') {
+				const trustNote = event.trusted
+					? ' (trusted)'
+					: approve
+						? ''
+						: ' (auto-approved)'
+				console.log(
+					`[brc-100] sensitive ${event.method} from ${event.origin}${trustNote}`,
+				)
+			}
+		},
+	})
+
+	console.log(`[wallet-api] BRC-100 app endpoint on http://${host}:${port}`)
+	console.log(
+		approve
+			? '[wallet-api] sensitive methods require TTY confirmation'
+			: '[wallet-api] sensitive methods are AUTO-APPROVED (headless). ' +
+					'Set server.dapp.approve=true to require confirmation.',
+	)
+
+	return { close: async () => await handle.close() }
+}

package/src/config.ts

@@ -154,6 +154,17 @@ export interface ServerConfig {
 	accounts?: ServerAccountsConfig
 	/** Messagebox subcommand settings. */
 	messagebox?: ServerMessageboxConfig
+	/**
+	 * Application-facing BRC-100 endpoint (`1sat serve wallet-api`):
+	 * dApp connectivity for the CLI wallet (encrypt/decrypt/sign/create-action).
+	 * Defaults: 127.0.0.1:3321, headless auto-approval of sensitive methods.
+	 */
+	dapp?: {
+		host?: string
+		port?: number
+		/** Require TTY confirmation for sensitive methods. Default false. */
+		approve?: boolean
+	}
 	/** Paymail settings for the unified host. */
 	paymail?: ServerPaymailConfig
 	/** Shared BSV/USD repricer engine for the accounts storage price. */

package/src/help.ts

@@ -163,12 +163,12 @@ export const COMMANDS: CommandSpec[] = [
 			{ name: 'balance', description: 'Show wallet balance in satoshis' },
 			{
 				name: 'address',
-				description: 'Show BRC-29 deposit address(es)',
+				description: 'Show P1SAT deposit address(es)',
 				args: [
 					{
 						flag: '--prefix',
 						values: '<p>',
-						description: 'BRC-29 prefix (default: 1sat)',
+						description: 'Deposit keyID prefix (default: 1sat)',
 					},
 					{ flag: '--start-index', values: '<n>' },
 					{ flag: '--count', values: '<n>' },
@@ -196,7 +196,7 @@ export const COMMANDS: CommandSpec[] = [
 			},
 			{
 				name: 'sync',
-				description: 'Sync inbound payments at BRC-29 deposit addresses',
+				description: 'Sync inbound payments at P1SAT deposit addresses',
 				args: [
 					{ flag: '--prefix', values: '<p>' },
 					{ flag: '--start-index', values: '<n>' },
@@ -754,6 +754,11 @@ export const COMMANDS: CommandSpec[] = [
 				description: 'Wallet storage server only (BRC-100 HTTP)',
 			},
 			{ name: 'monitor', description: 'Monitor daemon only' },
+			{
+				name: 'wallet-api',
+				description:
+					'App-facing BRC-100 wallet endpoint only (headless, default port 3321)',
+			},
 		],
 	},
 	{