@bitspark/archon-cli 0.6.1

package/dist/src/cmd/key.d.ts

@@ -0,0 +1 @@
+export declare function run(args: string[]): void;

package/dist/src/cmd/key.js

@@ -0,0 +1,138 @@
+// archon key — convert between raw key bytes and the canonical key text, or between raw
+// key/seed bytes and the standard PEM containers (PKCS#8 v1 / SPKI):
+//
+//   archon key encode <pubkey-hex>        -> prints encodeKey(bytes) to stdout
+//   archon key decode <ed25519:...>       -> prints the decoded bytes as hex to stdout
+//   archon key pkcs8 encode <seed-hex>    -> prints the PKCS#8 v1 PEM to stdout
+//   archon key pkcs8 decode               -> reads a PEM on stdin, prints the seed hex
+//   archon key spki encode <pubkey-hex>   -> prints the SPKI PEM to stdout
+//   archon key spki decode                -> reads a PEM on stdin, prints the pubkey hex
+//   archon key pub [...]                  -> the public key of a private key
+//
+// Every hex input goes through the floor's typed decoders (hexbytes), so a 31-byte
+// "public key" is refused here exactly as the library refuses it. PEM decode is total: a
+// malformed block throws a clean error (caught by main → exit non-zero), never garbage.
+import { decodeKey, encodeKey, getPublicKey, pkcs8PemToSeed, pubkeyFromHex, pubkeyToSpkiPem, seedFromHex, seedToPkcs8Pem, spkiPemToPubkey, toHex, } from "@bitspark/archon";
+import { readText, takeInFlag, wantsHelp } from "../io.js";
+import { parsePubFormat, renderPub } from "../pubrender.js";
+import * as store from "./key_store.js";
+const USAGE = "usage: archon key <encode <pubkey-hex>|decode <ed25519:...>|" +
+    "pkcs8 <encode <seed-hex>|decode>|spki <encode <pubkey-hex>|decode>|" +
+    "pub [--in <file>|--seed <hex>] [--format spki|text|hex]|" +
+    "add <name> [--seed <hex>|--seed-file <file>|--pkcs8 <file>]|list [--json]|" +
+    "rm <name> [--force]|default [<name>]|export <name> --reveal --out <file>>\n  " +
+    "pkcs8/spki decode read a PEM block on stdin (or --in <file>); " +
+    "pub derives the public key from a private key, default --format text.\n  " +
+    "add/list/rm/default/export are the password-protected seed store (ADR 0007 §A); " +
+    "keys live in $ARCHON_HOME/keys, default ~/.archon.";
+export function run(args) {
+    if (wantsHelp(args)) {
+        process.stdout.write(`${USAGE}\n`);
+        return;
+    }
+    const [op, ...rest] = args;
+    switch (op) {
+        // The store (ADR 0007 §A). Siblings of the codec cases below: `key encode`
+        // converts bytes it is handed, `key add` keeps a seed. Same noun, nothing else.
+        case "add":
+            store.runAdd(rest);
+            return;
+        case "list":
+            store.runList(rest);
+            return;
+        case "rm":
+            store.runRm(rest);
+            return;
+        case "default":
+            store.runDefault(rest);
+            return;
+        case "export":
+            store.runExport(rest);
+            return;
+        case "encode":
+            if (rest.length !== 1)
+                throw new Error(USAGE);
+            process.stdout.write(`${encodeKey(pubkeyFromHex(rest[0]))}\n`);
+            return;
+        case "decode":
+            if (rest.length !== 1)
+                throw new Error(USAGE);
+            process.stdout.write(`${toHex(decodeKey(rest[0]))}\n`);
+            return;
+        case "pkcs8":
+            pem(rest, "pkcs8");
+            return;
+        case "spki":
+            pem(rest, "spki");
+            return;
+        case "pub":
+            pub(rest);
+            return;
+        default:
+            throw new Error(USAGE);
+    }
+}
+// `pkcs8|spki <encode <hex>|decode>`: a 32-byte seed or public key <-> its PEM container.
+function pem(args, container) {
+    const [op, ...rest] = args;
+    if (op === "encode" && rest.length === 1) {
+        // keycodec emits the PEM with its own single trailing newline; write verbatim.
+        process.stdout.write(container === "pkcs8" ? seedToPkcs8Pem(seedFromHex(rest[0])) : pubkeyToSpkiPem(pubkeyFromHex(rest[0])));
+        return;
+    }
+    if (op === "decode") {
+        const [extra, inFile] = takeInFlag(rest);
+        if (extra.length !== 0)
+            throw new Error(USAGE);
+        const input = readText(inFile);
+        process.stdout.write(`${toHex(container === "pkcs8" ? pkcs8PemToSeed(input) : spkiPemToPubkey(input))}\n`);
+        return;
+    }
+    throw new Error(USAGE);
+}
+// `pub [--in <file>|--seed <hex>] [--format spki|text|hex]`: derive the public key from a
+// private key. --format is validated at parse time, so a bad format errors before any
+// input is read.
+function pub(args) {
+    let inFile;
+    let seedHex;
+    let fmt = "text";
+    for (let i = 0; i < args.length; i += 2) {
+        const flag = args[i];
+        if (i + 1 >= args.length)
+            throw new Error(`flag ${JSON.stringify(flag)} needs a value\n${USAGE}`);
+        const value = args[i + 1];
+        switch (flag) {
+            case "--in":
+                if (value === "")
+                    throw new Error(`flag ${JSON.stringify(flag)} needs a value\n${USAGE}`);
+                inFile = value;
+                break;
+            case "--seed":
+                seedHex = value;
+                break;
+            case "--format":
+                fmt = parsePubFormat(value);
+                break;
+            default:
+                throw new Error(`unknown flag ${JSON.stringify(flag)}\n${USAGE}`);
+        }
+    }
+    if (inFile !== undefined && seedHex !== undefined) {
+        throw new Error(`--in and --seed are mutually exclusive\n${USAGE}`);
+    }
+    let seed;
+    if (seedHex !== undefined) {
+        try {
+            seed = seedFromHex(seedHex);
+        }
+        catch (e) {
+            throw new Error(`--seed: ${e.message}`);
+        }
+    }
+    else {
+        seed = pkcs8PemToSeed(readText(inFile));
+    }
+    process.stdout.write(renderPub(getPublicKey(seed), fmt));
+}
+//# sourceMappingURL=key.js.map

package/dist/src/cmd/key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key.js","sourceRoot":"","sources":["../../../src/cmd/key.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,qEAAqE;AACrE,EAAE;AACF,+EAA+E;AAC/E,uFAAuF;AACvF,gFAAgF;AAChF,uFAAuF;AACvF,2EAA2E;AAC3E,yFAAyF;AACzF,6EAA6E;AAC7E,EAAE;AACF,mFAAmF;AACnF,yFAAyF;AACzF,wFAAwF;AACxF,OAAO,EACL,SAAS,EACT,SAAS,EACT,YAAY,EACZ,cAAc,EACd,aAAa,EACb,eAAe,EACf,WAAW,EACX,cAAc,EACd,eAAe,EACf,KAAK,GACN,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAkB,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,KAAK,KAAK,MAAM,gBAAgB,CAAC;AAExC,MAAM,KAAK,GACT,8DAA8D;IAC9D,qEAAqE;IACrE,0DAA0D;IAC1D,4EAA4E;IAC5E,+EAA+E;IAC/E,gEAAgE;IAChE,2EAA2E;IAC3E,kFAAkF;IAClF,oDAAoD,CAAC;AAEvD,MAAM,UAAU,GAAG,CAAC,IAAc;IAChC,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;QACnC,OAAO;IACT,CAAC;IACD,MAAM,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,EAAE,CAAC;QACX,2EAA2E;QAC3E,gFAAgF;QAChF,KAAK,KAAK;YACR,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO;QACT,KAAK,MAAM;YACT,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACpB,OAAO;QACT,KAAK,IAAI;YACP,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO;QACT,KAAK,SAAS;YACZ,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACvB,OAAO;QACT,KAAK,QAAQ;YACX,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACtB,OAAO;QACT,KAAK,QAAQ;YACX,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;YAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAChE,OAAO;QACT,KAAK,QAAQ;YACX,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;YAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACxD,OAAO;QACT,KAAK,OAAO;YACV,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACnB,OAAO;QACT,KAAK,MAAM;YACT,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAClB,OAAO;QACT,KAAK,KAAK;YACR,GAAG,CAAC,IAAI,CAAC,CAAC;YACV,OAAO;QACT;YACE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,SAAS,GAAG,CAAC,IAAc,EAAE,SAA2B;IACtD,MAAM,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,+EAA+E;QAC/E,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CACzG,CAAC;QACF,OAAO;IACT,CAAC;IACD,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;QACpB,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3G,OAAO;IACT,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,0FAA0F;AAC1F,sFAAsF;AACtF,iBAAiB;AACjB,SAAS,GAAG,CAAC,IAAc;IACzB,IAAI,MAA0B,CAAC;IAC/B,IAAI,OAA2B,CAAC;IAChC,IAAI,GAAG,GAAc,MAAM,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACtB,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;QAClG,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;QAC3B,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,MAAM;gBACT,IAAI,KAAK,KAAK,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;gBAC1F,MAAM,GAAG,KAAK,CAAC;gBACf,MAAM;YACR,KAAK,QAAQ;gBACX,OAAO,GAAG,KAAK,CAAC;gBAChB,MAAM;YACR,KAAK,UAAU;gBACb,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;gBAC5B,MAAM;YACR;gBACE,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,2CAA2C,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,IAAgB,CAAC;IACrB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,WAAY,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/src/cmd/key_store.d.ts

@@ -0,0 +1,84 @@
+export declare const USAGE: string;
+/**
+ * Scans for `--password-fd <n>` and removes it. The password never travels in argv, so
+ * this carries a descriptor number rather than the secret.
+ */
+export declare function takePasswordFd(args: string[]): {
+    rest: string[];
+    fd: number | undefined;
+};
+/**
+ * What a hidden prompt needs from the terminal. Injectable so the prompt PATH can be
+ * exercised by a test with no TTY — which is how the bare `require("node:fs")` this
+ * function used to reach for, inside an ESM package, would have been caught: the first
+ * interactive password prompt threw ReferenceError before reading a byte, and nothing ran
+ * the path to notice (lane A's, found while wiring `login --key`).
+ */
+export interface HiddenPromptIo {
+    setRawMode(raw: boolean): void;
+    /** One byte, or -1 at end of input. */
+    readByte(): number;
+    write(text: string): void;
+}
+/** The real terminal. The fd read is injectable too, so the byte-reading closure — the one
+ *  place this file touches fd 0 — can be exercised by a test without a TTY. */
+export declare const terminalIo: (readOne?: (into: Buffer) => number) => HiddenPromptIo;
+/** A prompt that does not echo. Node has no rpassword, so raw mode is done by hand. */
+export declare function promptHidden(label: string, io?: HiddenPromptIo): string;
+/**
+ * Sources the password: --password-fd, then ARCHON_KEY_PASSWORD, then an interactive
+ * prompt. `confirm` asks twice when a key is being created, where a typo would otherwise
+ * be discovered only at the next unlock.
+ */
+export declare function readPassword(fd: number | undefined, confirm: boolean): string;
+/**
+ * The store's own "is there a key called that": a validated name, then a stat — opening
+ * nothing, asking for no password. Shared by `key default <name>` and by `login`'s
+ * pre-network check, so both refuse a missing key with one wording.
+ */
+export declare function requireNamedKey(name: string): void;
+/**
+ * The ONE reader of the default pointer ($ARCHON_HOME/default), shared by `key default`
+ * and by `login`'s fallback so the two can never disagree about what "the default" is.
+ * Absent, unreadable, or present-but-empty all read as undefined — there is no default —
+ * and the caller says what that means for it.
+ */
+export declare function readDefaultKeyName(): string | undefined;
+/**
+ * Opens the key called `name`: the path, the file, the password — sourced the store's one
+ * way (--password-fd, then ARCHON_KEY_PASSWORD, then a prompt) — and the seal. It is the
+ * ONE unlock path, shared by `key export` and `login --key`, so no two commands can ask
+ * for a password differently.
+ */
+export declare function unlockNamedKey(name: string, fd: number | undefined): Uint8Array;
+/**
+ * The one place a key is written, shared by `key add` and `keygen --store` so the two
+ * cannot drift apart. Salt and nonce are drawn HERE, in the command: the format takes them
+ * as arguments and never sources randomness, which is what makes it pinnable.
+ */
+export declare function sealAndWrite(path: string, seed: Uint8Array, password: string): string;
+/** `keygen --store <name>`: the same seal path as `key add`. */
+export declare function storeGenerated(name: string, seed: Uint8Array, fd: number | undefined): void;
+export declare function runAdd(args: string[]): void;
+/**
+ * Prints what each header CLAIMS. The claim is only proven at unlock, which is why this
+ * never opens a key and never asks for a password.
+ */
+export declare function runList(args: string[]): void;
+/**
+ * Removes a key and says exactly what it removed, from where, and what it does NOT speak
+ * for. An unparsable file is refused unless --force: deleting an unrecognised file inside
+ * the store silently is what this rule exists to prevent.
+ */
+export declare function runRm(args: string[]): void;
+/**
+ * Sets or shows the default key. Selection is by NAME, never by principal text
+ * (ADR 0007 §A). The pointer lives beside keys/, not in it, so it can never collide with
+ * a key name.
+ */
+export declare function runDefault(args: string[]): void;
+/**
+ * Writes the seed out. Refuses without --reveal, and refuses stdout unless `--out -` says
+ * so: a seed should never land in a pipe by accident.
+ */
+export declare function runExport(args: string[]): void;