@bitspark/archon-cli 0.6.1

package/dist/src/main.js

@@ -0,0 +1,51 @@
+#!/usr/bin/env node
+// archon — the human-facing CLI for the TS lane. A thin presentation + I/O layer over the
+// public @bitspark/archon API. The shape is fixed: `archon <subcommand> [args]`. Each
+// subcommand lives in its own cmd/*.ts behind a single run(args); this dispatch only
+// routes the name. Results go to stdout; diagnostics, usage, and the keygen secret
+// warning go to stderr; any error exits non-zero. Three native binaries (cli/rs, cli/go,
+// cli/ts) build the SAME `archon` command with byte-identical stdout (cli/smoke.mjs).
+//
+// `key` and `keygen` were carved out of thesmos's CLI on 2026-09-09 (docs/growth-plan.md
+// §8.2). `sign` and `verify` are new: raw bytes, domain-aware.
+import { run as key } from "./cmd/key.js";
+import { run as login } from "./cmd/login.js";
+import { run as keygen } from "./cmd/keygen.js";
+import { run as sign } from "./cmd/sign.js";
+import { run as verify } from "./cmd/verify.js";
+import { run as version, versionLine } from "./cmd/version.js";
+import { Verdict } from "./io.js";
+const USAGE = "usage: archon <keygen|key|login|sign|verify|version> [args]";
+// login is async (it makes HTTP requests), so a handler may return a promise and this
+// dispatch awaits it. Without the await, a rejected promise would escape the try/catch
+// below and Node would report an unhandled rejection instead of `archon login: <reason>`.
+const dispatch = { keygen, key, login, sign, verify, version };
+const [command, ...rest] = process.argv.slice(2);
+if (command === undefined) {
+    process.stderr.write(`${USAGE}\n`);
+    process.exit(2);
+}
+if (command === "--help" || command === "-h") {
+    process.stdout.write(`${USAGE}\n`);
+    process.exit(0);
+}
+if (command === "--version") {
+    process.stdout.write(`${versionLine()}\n`);
+    process.exit(0);
+}
+const handler = dispatch[command];
+if (handler === undefined) {
+    process.stderr.write(`archon: unknown subcommand ${JSON.stringify(command)}\n${USAGE}\n`);
+    process.exit(2);
+}
+try {
+    await handler(rest);
+}
+catch (err) {
+    // A verdict (`invalid`) is already on stdout: exit 1 with nothing on stderr.
+    if (!(err instanceof Verdict)) {
+        process.stderr.write(`archon ${command}: ${err instanceof Error ? err.message : String(err)}\n`);
+    }
+    process.exit(1);
+}
+//# sourceMappingURL=main.js.map

package/dist/src/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/main.ts"],"names":[],"mappings":";AACA,0FAA0F;AAC1F,sFAAsF;AACtF,qFAAqF;AACrF,mFAAmF;AACnF,yFAAyF;AACzF,sFAAsF;AACtF,EAAE;AACF,yFAAyF;AACzF,+DAA+D;AAC/D,OAAO,EAAE,GAAG,IAAI,GAAG,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,GAAG,IAAI,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,GAAG,IAAI,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,GAAG,IAAI,IAAI,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,GAAG,IAAI,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,GAAG,IAAI,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,MAAM,KAAK,GAAG,6DAA6D,CAAC;AAE5E,sFAAsF;AACtF,uFAAuF;AACvF,0FAA0F;AAC1F,MAAM,QAAQ,GAA6D,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAEzH,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACjD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;IAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;IACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;IAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;IACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;IAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,EAAE,IAAI,CAAC,CAAC;IAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;AAClC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;IAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAC1F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,IAAI,CAAC;IACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AAAC,OAAO,GAAG,EAAE,CAAC;IACb,6EAA6E;IAC7E,IAAI,CAAC,CAAC,GAAG,YAAY,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,OAAO,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/src/pubrender.d.ts

@@ -0,0 +1,5 @@
+export type PubFormat = "spki" | "text" | "hex";
+/** Parse a `--format` value; the message is byte-identical across the three lanes. */
+export declare function parsePubFormat(s: string): PubFormat;
+/** Render a 32-byte public key; the returned string is the EXACT bytes to write. */
+export declare function renderPub(pub: Uint8Array, fmt: PubFormat): string;

package/dist/src/pubrender.js

@@ -0,0 +1,30 @@
+// Public-key rendering in the shared CLI formats — used by `key pub` and `keygen
+// --pub-out`, so every entry point that emits a public key agrees byte-for-byte across
+// the three lanes (pinned by cli/smoke.mjs):
+//   - spki: the keycodec SPKI PEM, VERBATIM (it carries its own single trailing newline)
+//   - text: the canonical key text `ed25519:<hex>` + "\n"
+//   - hex:  the raw 32-byte pubkey as lowercase hex + "\n"
+import { encodeKey, pubkeyToSpkiPem, toHex } from "@bitspark/archon";
+/** Parse a `--format` value; the message is byte-identical across the three lanes. */
+export function parsePubFormat(s) {
+    switch (s) {
+        case "spki":
+        case "text":
+        case "hex":
+            return s;
+        default:
+            throw new Error(`unknown --format ${JSON.stringify(s)} (want spki|text|hex)`);
+    }
+}
+/** Render a 32-byte public key; the returned string is the EXACT bytes to write. */
+export function renderPub(pub, fmt) {
+    switch (fmt) {
+        case "spki":
+            return pubkeyToSpkiPem(pub);
+        case "text":
+            return `${encodeKey(pub)}\n`;
+        case "hex":
+            return `${toHex(pub)}\n`;
+    }
+}
+//# sourceMappingURL=pubrender.js.map

package/dist/src/pubrender.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pubrender.js","sourceRoot":"","sources":["../../src/pubrender.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,uFAAuF;AACvF,6CAA6C;AAC7C,yFAAyF;AACzF,0DAA0D;AAC1D,2DAA2D;AAC3D,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAIrE,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAAC,CAAS;IACtC,QAAQ,CAAC,EAAE,CAAC;QACV,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC;QACZ,KAAK,KAAK;YACR,OAAO,CAAC,CAAC;QACX;YACE,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,SAAS,CAAC,GAAe,EAAE,GAAc;IACvD,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM;YACT,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;QAC9B,KAAK,MAAM;YACT,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;QAC/B,KAAK,KAAK;YACR,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;IAC7B,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,34 @@
+{
+  "name": "@bitspark/archon-cli",
+  "version": "0.6.1",
+  "description": "archon CLI: key / keygen / sign / verify over the identity floor.",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Bitspark/archon"
+  },
+  "type": "module",
+  "bin": {
+    "archon": "dist/src/main.js"
+  },
+  "files": [
+    "dist/src"
+  ],
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "test": "tsc -p tsconfig.json && node --test dist/test/*.test.js"
+  },
+  "dependencies": {
+    "@bitspark/archon": "^0.6.1",
+    "@bitspark/archon-sdk": "^0.6.1",
+    "@noble/ciphers": "^2.4.0",
+    "@noble/hashes": "^2.4.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22",
+    "typescript": "^5.7"
+  }
+}