@ckb-firewall/cli 0.1.0

package/dist/lib/witness.d.ts

@@ -0,0 +1,22 @@
+export declare function ckbBlake2b(data: Uint8Array): Uint8Array;
+export interface Gov1Params {
+    proposalIdHash: Uint8Array;
+    voteDigestHash: Uint8Array;
+    oldRoot: Uint8Array;
+    newRoot: Uint8Array;
+    signers: Array<{
+        index: number;
+        sig: Uint8Array;
+    }>;
+}
+export declare function buildGov1Witness(params: Gov1Params): Uint8Array;
+export declare function buildWitnessArgs(params: {
+    lock?: Uint8Array;
+    inputType?: Uint8Array;
+    outputType?: Uint8Array;
+}): Uint8Array;
+export declare function placeholderSigners(count?: 3 | 4 | 5): Array<{
+    index: number;
+    sig: Uint8Array;
+}>;
+//# sourceMappingURL=witness.d.ts.map

package/dist/lib/witness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"witness.d.ts","sourceRoot":"","sources":["../../src/lib/witness.ts"],"names":[],"mappings":"AAIA,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAEvD;AAED,MAAM,WAAW,UAAU;IACzB,cAAc,EAAE,UAAU,CAAC;IAC3B,cAAc,EAAE,UAAU,CAAC;IAC3B,OAAO,EAAE,UAAU,CAAC;IACpB,OAAO,EAAE,UAAU,CAAC;IAEpB,OAAO,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;CACpD;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,UAAU,GAAG,UAAU,CA+B/D;AAmBD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IACvC,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,SAAS,CAAC,EAAE,UAAU,CAAC;IACvB,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,GAAG,UAAU,CAqBb;AAID,wBAAgB,kBAAkB,CAAC,KAAK,GAAE,CAAC,GAAG,CAAC,GAAG,CAAK,GAAG,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,UAAU,CAAA;CAAE,CAAC,CAUlG"}

package/dist/lib/witness.js

@@ -0,0 +1,82 @@
+import { blake2b } from "@noble/hashes/blake2b";
+const CKB_PERSONALIZATION = new TextEncoder().encode("ckb-default-hash");
+export function ckbBlake2b(data) {
+    return blake2b(data, { personalization: CKB_PERSONALIZATION, dkLen: 32 });
+}
+export function buildGov1Witness(params) {
+    const signerCount = params.signers.length;
+    // 4 magic + 1 version + 32*4 hashes + 1 count + signerCount * (1 index + 65 sig)
+    const size = 4 + 1 + 32 + 32 + 32 + 32 + 1 + signerCount * 66;
+    const buf = new Uint8Array(size);
+    let off = 0;
+    // "GOV1"
+    buf[off++] = 0x47;
+    buf[off++] = 0x4f;
+    buf[off++] = 0x56;
+    buf[off++] = 0x31;
+    buf[off++] = 0x01; // version
+    buf.set(params.proposalIdHash, off);
+    off += 32;
+    buf.set(params.voteDigestHash, off);
+    off += 32;
+    buf.set(params.oldRoot, off);
+    off += 32;
+    buf.set(params.newRoot, off);
+    off += 32;
+    buf[off++] = signerCount;
+    for (const s of params.signers) {
+        buf[off++] = s.index;
+        buf.set(s.sig, off);
+        off += 65;
+    }
+    return buf;
+}
+function writeU32LE(buf, offset, value) {
+    buf[offset] = value & 0xff;
+    buf[offset + 1] = (value >> 8) & 0xff;
+    buf[offset + 2] = (value >> 16) & 0xff;
+    buf[offset + 3] = (value >> 24) & 0xff;
+}
+function bytesOpt(data) {
+    if (!data)
+        return new Uint8Array(0);
+    const buf = new Uint8Array(4 + data.length);
+    writeU32LE(buf, 0, data.length);
+    buf.set(data, 4);
+    return buf;
+}
+// Molecule-encodes a WitnessArgs table (lock, input_type, output_type).
+// The lock field is a 65-byte zero placeholder that ckb-cli sign-tx fills in.
+export function buildWitnessArgs(params) {
+    const lockOpt = bytesOpt(params.lock);
+    const inputTypeOpt = bytesOpt(params.inputType);
+    const outputTypeOpt = bytesOpt(params.outputType);
+    const HEADER = 16; // 4 total_size + 3 * 4 offsets
+    const offLock = HEADER;
+    const offInputType = offLock + lockOpt.length;
+    const offOutputType = offInputType + inputTypeOpt.length;
+    const totalSize = offOutputType + outputTypeOpt.length;
+    const buf = new Uint8Array(totalSize);
+    writeU32LE(buf, 0, totalSize);
+    writeU32LE(buf, 4, offLock);
+    writeU32LE(buf, 8, offInputType);
+    writeU32LE(buf, 12, offOutputType);
+    buf.set(lockOpt, offLock);
+    buf.set(inputTypeOpt, offInputType);
+    buf.set(outputTypeOpt, offOutputType);
+    return buf;
+}
+// Placeholder signatures (3-of-5) for testnet where on-chain sig verification is off.
+// Replace with real governance signatures for production use.
+export function placeholderSigners(count = 3) {
+    return Array.from({ length: count }, (_, i) => ({
+        index: i,
+        sig: new Uint8Array(65).fill(0x11), // non-zero placeholder; recovery id corrected to 0x00 below
+    })).map((s) => {
+        // Recovery id must be 0-3. Set last byte to 0.
+        const sig = new Uint8Array(s.sig);
+        sig[64] = 0x00;
+        return { index: s.index, sig };
+    });
+}
+//# sourceMappingURL=witness.js.map

package/dist/lib/witness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"witness.js","sourceRoot":"","sources":["../../src/lib/witness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAEhD,MAAM,mBAAmB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;AAEzE,MAAM,UAAU,UAAU,CAAC,IAAgB;IACzC,OAAO,OAAO,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;AAC5E,CAAC;AAWD,MAAM,UAAU,gBAAgB,CAAC,MAAkB;IACjD,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;IAC1C,iFAAiF;IACjF,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,WAAW,GAAG,EAAE,CAAC;IAC9D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,GAAG,GAAG,CAAC,CAAC;IAEZ,SAAS;IACT,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;IAClB,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;IAClB,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;IAClB,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;IAClB,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,UAAU;IAE7B,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACpC,GAAG,IAAI,EAAE,CAAC;IACV,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACpC,GAAG,IAAI,EAAE,CAAC;IACV,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC7B,GAAG,IAAI,EAAE,CAAC;IACV,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC7B,GAAG,IAAI,EAAE,CAAC;IAEV,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,WAAW,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QACrB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpB,GAAG,IAAI,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,GAAe,EAAE,MAAc,EAAE,KAAa;IAChE,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC;IAC3B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IACtC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IACvC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;AACzC,CAAC;AAED,SAAS,QAAQ,CAAC,IAA4B;IAC5C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5C,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACjB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wEAAwE;AACxE,8EAA8E;AAC9E,MAAM,UAAU,gBAAgB,CAAC,MAIhC;IACC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAElD,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,+BAA+B;IAClD,MAAM,OAAO,GAAG,MAAM,CAAC;IACvB,MAAM,YAAY,GAAG,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9C,MAAM,aAAa,GAAG,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC;IACzD,MAAM,SAAS,GAAG,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC;IAEvD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;IACtC,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IAC9B,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5B,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;IACjC,UAAU,CAAC,GAAG,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC;IACnC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1B,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IACpC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IAEtC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sFAAsF;AACtF,8DAA8D;AAC9D,MAAM,UAAU,kBAAkB,CAAC,QAAmB,CAAC;IACrD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9C,KAAK,EAAE,CAAC;QACR,GAAG,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,4DAA4D;KACjG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACZ,+CAA+C;QAC/C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAClC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;QACf,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -0,0 +1,63 @@
+{
+  "name": "@ckb-firewall/cli",
+  "version": "0.1.0",
+  "description": "CLI for managing the CKB Transaction Firewall blacklist registry",
+  "type": "module",
+  "license": "MIT",
+  "author": "digitaldrreamer and contributors",
+  "bin": {
+    "ckb-firewall": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "postbuild": "chmod +x dist/index.js",
+    "prepack": "npm run build",
+    "typecheck": "tsc --noEmit",
+    "dev": "tsc --watch -p tsconfig.build.json"
+  },
+  "dependencies": {
+    "@ckb-firewall/sdk": "^0.2.3",
+    "@noble/curves": "^2.2.0",
+    "@noble/hashes": "^1.5.0",
+    "cfonts": "^3.3.0",
+    "chalk": "^5.3.0",
+    "cli-table3": "^0.6.5",
+    "commander": "^12.1.0",
+    "inquirer": "^10.2.2",
+    "log-symbols": "^6.0.0",
+    "ora": "^8.1.1"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.6.3"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "keywords": [
+    "ckb",
+    "nervos",
+    "blockchain",
+    "security",
+    "blacklist",
+    "cli",
+    "governance"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/digitaldrreamer/ckb-transaction-firewall.git",
+    "directory": "sdk/cli"
+  },
+  "bugs": {
+    "url": "https://github.com/digitaldrreamer/ckb-transaction-firewall/issues"
+  },
+  "homepage": "https://github.com/digitaldrreamer/ckb-transaction-firewall#readme",
+  "publishConfig": {
+    "access": "public"
+  }
+}