@clanker-chain/clanker-cli 2026.9.7-3 → 2026.9.7

package/bin/clanker.mjs

@@ -23,8 +23,7 @@ import {
   readBot,
   resolvePreferredOperator,
 } from "../lib/identity-query.mjs";
-import { resolveForRead, resolveOperatorKey, resolveReadIdentity } from "../lib/resolve.mjs";
-import { runSetup } from "../lib/setup.mjs";
+import { resolveForRead, resolveOperatorKey } from "../lib/resolve.mjs";
 
 function resolveFoundryBinary(name) {
   const home = os.homedir();
@@ -145,7 +144,6 @@ function usage() {
   console.log(`clanker - clanker-chain helper CLI
 
 Usage:
-  clanker setup [--preset sepolia|local] [--operator <label>] [--address 0x…] [--key-file path] [--force]
   clanker init --preset sepolia|local [--force]
   clanker whoami [--json] [--operator <label>] [--address 0x…]
   clanker operator mint <label> [--json]
@@ -163,14 +161,12 @@ Usage:
 
 Profile:
   ~/.clanker/config.json     network preset (registry, RPC, broker URLs)
-  ~/.clanker/operator.json   label + owner + optional key pointer (never raw hex)
+  ~/.clanker/operator.json   label + owner + key pointer (never raw hex)
   ~/.clanker/keys/           bot keys (also written to ~/.openclaw/keys/)
 
-Humans: prefer \`clanker setup\` (detects Foundry/OpenClaw hints, writes profile).
 Key resolution (mutating commands):
   --key > --key-file > OPERATOR_PRIVATE_KEY > profile keyFile > profile env
   Anvil account #0 is allowed only on localhost RPC.
-  Reads (whoami/bots) can use profile owner without a signing key.
 
 See docs/operator-cli.md.
 `);
@@ -217,14 +213,16 @@ async function cmdWhoami(argv) {
   let address;
   let source;
   let network;
-  try {
-    const resolved = resolveReadIdentity(argv);
+  const addressFlag = flagValue(argv, "--address");
+  if (addressFlag) {
+    network = resolveForRead(argv);
+    address = getAddress(addressFlag);
+    source = "--address";
+  } else {
+    const resolved = resolveOperatorKey(argv);
     address = resolved.address;
     source = resolved.source;
     network = resolved.network;
-  } catch (err) {
-    console.error(err.message);
-    process.exit(1);
   }
 
   const pub = await publicClientFromRpc(network.rpc);
@@ -290,13 +288,14 @@ async function cmdWhoami(argv) {
 async function cmdBots(argv) {
   let address;
   let network;
-  try {
-    const resolved = resolveReadIdentity(argv);
+  const addressFlag = flagValue(argv, "--address");
+  if (addressFlag) {
+    network = resolveForRead(argv);
+    address = getAddress(addressFlag);
+  } else {
+    const resolved = resolveOperatorKey(argv);
     address = resolved.address;
     network = resolved.network;
-  } catch (err) {
-    console.error(err.message);
-    process.exit(1);
   }
   const { label, pub } = await resolveOperatorLabel(argv, address, network);
   const bots = await findBotsByOperator(pub, {
@@ -358,16 +357,6 @@ async function main() {
 
   const repoRoot = findRepoRoot();
 
-  if (cmd === "setup") {
-    try {
-      await runSetup(rest);
-    } catch (err) {
-      console.error(err.message);
-      process.exit(1);
-    }
-    return;
-  }
-
   if (cmd === "init") {
     const preset = flagValue(rest, "--preset") ?? rest.find((a) => !a.startsWith("--"));
     if (!preset || preset === "init") {

package/lib/profile.mjs

@@ -63,7 +63,7 @@ export function openclawKeysDir() {
 
 /**
  * @param {string} presetName
- * @param {{ force?: boolean, registryAddress?: string|null, home?: string, fromBlock?: bigint|string|number }} [opts]
+ * @param {{ force?: boolean, registryAddress?: string|null, home?: string }} [opts]
  */
 export function initProfile(presetName, opts = {}) {
   const name = String(presetName || "").toLowerCase();
@@ -79,15 +79,13 @@ export function initProfile(presetName, opts = {}) {
   }
   mkdirSync(home, { recursive: true });
   const preset = PRESETS[name];
-  const fromBlock =
-    opts.fromBlock != null ? BigInt(opts.fromBlock) : preset.fromBlock;
   const config = {
     preset: preset.preset,
     registryAddress: opts.registryAddress ?? preset.registryAddress,
     chainRpcUrl: preset.chainRpcUrl,
     brokerUrl: preset.brokerUrl,
     mqttAuthServiceUrl: preset.mqttAuthServiceUrl,
-    fromBlock: fromBlock.toString(),
+    fromBlock: preset.fromBlock.toString(),
   };
   if (name === "local" && !config.registryAddress) {
     // Placeholder until chain deploy; operator must set after forge deploy.
@@ -122,9 +120,8 @@ export function loadOperator(home = clankerHome()) {
 }
 
 /**
- * Write operator profile (label + owner + optional key pointer). Never stores hex keys.
- * Omit `key` (or pass null) for a read-only profile; mint/revoke still need a pointer later.
- * @param {{ label: string, owner: string, key?: { type: 'env'|'keyFile', value?: string }|null }} op
+ * Write operator profile (label + owner + key pointer). Never stores hex keys.
+ * @param {{ label: string, owner: string, key?: { type: 'env'|'keyFile', value?: string } }} op
  * @param {string} [home]
  */
 export function writeOperator(op, home = clankerHome()) {
@@ -133,10 +130,8 @@ export function writeOperator(op, home = clankerHome()) {
   const out = {
     label: op.label,
     owner: op.owner,
+    key: op.key ?? { type: "env", value: "OPERATOR_PRIVATE_KEY" },
   };
-  if (op.key != null) {
-    out.key = op.key;
-  }
   writeFileSync(path, `${JSON.stringify(out, null, 2)}\n`, { mode: 0o600 });
   return { path, operator: out };
 }

package/lib/resolve.mjs

@@ -3,7 +3,6 @@
  */
 
 import { existsSync, readFileSync } from "node:fs";
-import { getAddress } from "viem";
 import { privateKeyToAccount } from "viem/accounts";
 import {
   ANVIL_DEFAULT_PRIVATE_KEY,
@@ -175,63 +174,8 @@ export function resolveForRead(argv = [], opts = {}) {
   if (!network.registry || !/^0x[0-9a-fA-F]{40}$/.test(network.registry)) {
     throw new Error(
       "REGISTRY_ADDRESS or --registry is required (0x + 40 hex). " +
-        "Run `clanker init --preset sepolia` or `clanker setup`, or set registry after deploy.",
+        "Run `clanker init --preset sepolia` or set registry after `clanker chain deploy`.",
     );
   }
   return network;
 }
-
-/**
- * Resolve address for read-only commands.
- * Order: --address > signing key > operator.json owner > error (point at setup).
- *
- * @param {string[]} argv
- * @param {{ home?: string, env?: NodeJS.ProcessEnv }} [opts]
- * @returns {{ address: string, source: string, network: object }}
- */
-export function resolveReadIdentity(argv = [], opts = {}) {
-  const network = resolveForRead(argv, opts);
-  const home = opts.home ?? network.home;
-
-  let addressFlag = null;
-  for (let i = 0; i < argv.length; i += 1) {
-    if (argv[i] === "--address" && argv[i + 1] && !argv[i + 1].startsWith("--")) {
-      addressFlag = argv[++i];
-    }
-  }
-  if (addressFlag) {
-    return {
-      address: getAddress(addressFlag),
-      source: "--address",
-      network,
-    };
-  }
-
-  try {
-    const resolved = resolveOperatorKey(argv, { ...opts, home });
-    return {
-      address: resolved.address,
-      source: resolved.source,
-      network: resolved.network,
-    };
-  } catch (err) {
-    const msg = err?.message ?? String(err);
-    if (!/private key required|Anvil account #0|Key file not found|Profile keyFile/i.test(msg)) {
-      throw err;
-    }
-  }
-
-  const operator = loadOperator(home);
-  if (operator?.owner && /^0x[0-9a-fA-F]{40}$/.test(operator.owner)) {
-    return {
-      address: getAddress(operator.owner),
-      source: "profile owner",
-      network,
-    };
-  }
-
-  throw new Error(
-    "No operator identity configured. Run `clanker setup`, pass --address 0x…, " +
-      "or set a signing key (OPERATOR_PRIVATE_KEY / --key-file / operator.json key pointer).",
-  );
-}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clanker-chain/clanker-cli",
-  "version": "2026.9.7-3",
+  "version": "2026.9.7",
   "description": "CLI for wiring clanker-chain identity and MQTT into OpenClaw and other agentic stacks.",
   "type": "module",
   "bin": {

package/lib/setup-detect.mjs

@@ -1,224 +0,0 @@
-/**
- * Local identity hints for `clanker setup` (no secrets printed).
- */
-
-import { existsSync, readdirSync, readFileSync } from "node:fs";
-import { basename, join } from "node:path";
-import { spawnSync } from "node:child_process";
-import { privateKeyToAccount } from "viem/accounts";
-import {
-  ANVIL_DEFAULT_ADDRESS,
-  clankerHome,
-  loadConfig,
-  loadOperator,
-  openclawKeysDir,
-} from "./profile.mjs";
-import { normalizePrivateKey } from "./resolve.mjs";
-
-/** Faster Sepolia log floor for public RPC (registry floor remains SEPOLIA_FROM_BLOCK). */
-export const SEPOLIA_FAST_FROM_BLOCK = 46_000_000n;
-
-/**
- * Parse `cast wallet list` stdout into account names.
- * @param {string} stdout
- * @returns {string[]}
- */
-export function parseCastWalletList(stdout) {
-  const names = [];
-  for (const line of String(stdout ?? "").split(/\r?\n/)) {
-    const trimmed = line.trim();
-    if (!trimmed) continue;
-    // Formats: "name (Local)" or "0xname (Local)" or just "name"
-    const m = trimmed.match(/^(\S+)/);
-    if (!m) continue;
-    let name = m[1];
-    if (name.startsWith("0x") && name.length > 2 && !/^0x[a-fA-F0-9]{40}$/.test(name)) {
-      // cast sometimes prefixes 0x to the account name display
-      name = name.slice(2);
-    }
-    if (/^0x[a-fA-F0-9]{40}$/.test(name)) continue;
-    names.push(name);
-  }
-  return [...new Set(names)];
-}
-
-/**
- * @param {{ castBin?: string, spawn?: typeof spawnSync }} [opts]
- * @returns {{ available: boolean, accounts: string[] }}
- */
-export function listFoundryAccounts(opts = {}) {
-  const spawn = opts.spawn ?? spawnSync;
-  const castBin = opts.castBin ?? "cast";
-  const result = spawn(castBin, ["wallet", "list"], {
-    encoding: "utf8",
-    shell: false,
-  });
-  if (result.error || result.status !== 0) {
-    return { available: false, accounts: [] };
-  }
-  return { available: true, accounts: parseCastWalletList(result.stdout ?? "") };
-}
-
-/**
- * Bot key basenames under ~/.openclaw/keys (context only).
- * @param {{ openclawDir?: string }} [opts]
- * @returns {string[]}
- */
-export function listOpenclawBotKeys(opts = {}) {
-  const dir = opts.openclawDir ?? openclawKeysDir();
-  if (!existsSync(dir)) return [];
-  return readdirSync(dir)
-    .filter((f) => f.endsWith(".key"))
-    .map((f) => basename(f, ".key"))
-    .sort();
-}
-
-/**
- * Derive address from a key file (first line). Does not log the key.
- * @param {string} path
- * @returns {string}
- */
-export function addressFromKeyFile(path) {
-  if (!existsSync(path)) throw new Error(`Key file not found: ${path}`);
-  const key = normalizePrivateKey(readFileSync(path, "utf8").split(/\r?\n/)[0]);
-  return privateKeyToAccount(key).address;
-}
-
-/**
- * Derive address from OPERATOR_PRIVATE_KEY (or named env).
- * @param {NodeJS.ProcessEnv} [env]
- * @param {string} [envName]
- * @returns {string|null}
- */
-export function addressFromEnv(env = process.env, envName = "OPERATOR_PRIVATE_KEY") {
-  const raw = env[envName];
-  if (!raw) return null;
-  const key = normalizePrivateKey(raw);
-  return privateKeyToAccount(key).address;
-}
-
-/**
- * Snapshot of local hints for setup UX.
- * @param {{ home?: string, env?: NodeJS.ProcessEnv, openclawDir?: string, castBin?: string, spawn?: typeof spawnSync }} [opts]
- */
-export function detectSetupHints(opts = {}) {
-  const env = opts.env ?? process.env;
-  const home = opts.home ?? clankerHome(env);
-  const config = loadConfig(home);
-  const operator = loadOperator(home);
-  const foundry = listFoundryAccounts({
-    castBin: opts.castBin,
-    spawn: opts.spawn,
-  });
-  const openclawBots = listOpenclawBotKeys({ openclawDir: opts.openclawDir });
-  let envAddress = null;
-  try {
-    envAddress = addressFromEnv(env);
-  } catch {
-    envAddress = null;
-  }
-
-  return {
-    home,
-    configPath: join(home, "config.json"),
-    operatorPath: join(home, "operator.json"),
-    hasConfig: Boolean(config),
-    hasOperator: Boolean(operator),
-    config,
-    operator,
-    hasOperatorPrivateKeyEnv: Boolean(env.OPERATOR_PRIVATE_KEY),
-    envAddress,
-    foundryAvailable: foundry.available,
-    foundryAccounts: foundry.accounts,
-    openclawBots,
-    anvilDefaultAddress: ANVIL_DEFAULT_ADDRESS,
-  };
-}
-
-/**
- * Pad string to width (truncate with … if longer).
- * @param {string} s
- * @param {number} width
- */
-function cell(s, width) {
-  const t = String(s ?? "");
-  if (t.length === width) return t;
-  if (t.length < width) return t + " ".repeat(width - t.length);
-  if (width <= 1) return "…";
-  return `${t.slice(0, width - 1)}…`;
-}
-
-/**
- * Render detection hints as an aligned two-column table for the terminal.
- * @param {ReturnType<typeof detectSetupHints>} hints
- * @returns {string}
- */
-export function formatSetupDetectTable(hints) {
-  /** @type {[string, string][]} */
-  const rows = [];
-  rows.push(["Profile dir", hints.home]);
-
-  if (hints.hasConfig) {
-    rows.push(["config.json", `present · preset=${hints.config?.preset ?? "?"}`]);
-    rows.push([
-      "registry",
-      hints.config?.registryAddress ? String(hints.config.registryAddress) : "(none)",
-    ]);
-  } else {
-    rows.push(["config.json", "missing · will create"]);
-  }
-
-  if (hints.hasOperator) {
-    rows.push([
-      "operator.json",
-      `present · ${hints.operator?.label ?? "?"} · ${hints.operator?.owner ?? "?"}`,
-    ]);
-  } else {
-    rows.push(["operator.json", "missing · needed for whoami"]);
-  }
-
-  if (hints.foundryAvailable && hints.foundryAccounts.length) {
-    rows.push([
-      "Foundry accounts",
-      `${hints.foundryAccounts.length}: ${hints.foundryAccounts.join(", ")}`,
-    ]);
-  } else if (hints.foundryAvailable) {
-    rows.push(["Foundry accounts", "none listed"]);
-  } else {
-    rows.push(["Foundry cast", "not on PATH"]);
-  }
-
-  if (hints.openclawBots.length) {
-    rows.push([
-      "OpenClaw bot keys",
-      `${hints.openclawBots.length} files (bot signing only)`,
-    ]);
-    for (const b of hints.openclawBots) {
-      rows.push(["  ·", b]);
-    }
-  } else {
-    rows.push(["OpenClaw bot keys", "none"]);
-  }
-
-  if (hints.hasOperatorPrivateKeyEnv) {
-    rows.push([
-      "OPERATOR_PRIVATE_KEY",
-      hints.envAddress ? `set · ${hints.envAddress}` : "set · (invalid)",
-    ]);
-  } else {
-    rows.push(["OPERATOR_PRIVATE_KEY", "unset"]);
-  }
-
-  const col0 = Math.min(
-    22,
-    Math.max(4, ...rows.map(([k]) => k.length)),
-  );
-  const lines = [
-    `${cell("What", col0)}  Value`,
-    `${"-".repeat(col0)}  ${"-".repeat(48)}`,
-  ];
-  for (const [k, v] of rows) {
-    lines.push(`${cell(k, col0)}  ${v}`);
-  }
-  return lines.join("\n");
-}

package/lib/setup.mjs

@@ -1,527 +0,0 @@
-/**
- * Interactive / flag-driven `clanker setup`.
- */
-
-import { createInterface } from "node:readline/promises";
-import { stdin as input, stdout as output } from "node:process";
-import { existsSync } from "node:fs";
-import { getAddress } from "viem";
-import {
-  ANVIL_DEFAULT_ADDRESS,
-  PRESETS,
-  clankerHome,
-  configPath,
-  initProfile,
-  isLocalRpc,
-  operatorPath,
-  writeOperator,
-} from "./profile.mjs";
-import {
-  publicClientFromRpc,
-  readOperator,
-  resolvePreferredOperator,
-} from "./identity-query.mjs";
-import {
-  SEPOLIA_FAST_FROM_BLOCK,
-  addressFromEnv,
-  addressFromKeyFile,
-  detectSetupHints,
-  formatSetupDetectTable,
-} from "./setup-detect.mjs";
-
-/**
- * @param {string[]} argv
- */
-export function parseSetupFlags(argv) {
-  let preset = null;
-  let operator = null;
-  let address = null;
-  let keyFile = null;
-  let keyEnv = null;
-  let fromBlock = null;
-  let force = false;
-  let yes = false;
-  let skipKey = false;
-  let skipChainCheck = false;
-
-  for (let i = 0; i < argv.length; i += 1) {
-    const a = argv[i];
-    if (a === "--preset" && argv[i + 1]) preset = argv[++i];
-    else if (a === "--operator" && argv[i + 1]) operator = argv[++i];
-    else if (a === "--address" && argv[i + 1]) address = argv[++i];
-    else if (a === "--key-file" && argv[i + 1]) keyFile = argv[++i];
-    else if (a === "--key-env" && argv[i + 1]) keyEnv = argv[++i];
-    else if (a === "--from-block" && argv[i + 1]) fromBlock = BigInt(argv[++i]);
-    else if (a === "--force") force = true;
-    else if (a === "--yes" || a === "-y") yes = true;
-    else if (a === "--skip-key") skipKey = true;
-    else if (a === "--skip-chain-check") skipChainCheck = true;
-  }
-
-  return {
-    preset,
-    operator,
-    address,
-    keyFile,
-    keyEnv,
-    fromBlock,
-    force,
-    yes,
-    skipKey,
-    skipChainCheck,
-  };
-}
-
-/**
- * Validate address + label against registry (and Anvil-on-public).
- * @param {{ rpc: string, registry: string, label: string, address: string, skipChainCheck?: boolean }} opts
- */
-export async function assertSetupIdentity(opts) {
-  const address = getAddress(opts.address);
-  const local = isLocalRpc(opts.rpc);
-
-  if (!local && address.toLowerCase() === ANVIL_DEFAULT_ADDRESS.toLowerCase()) {
-    throw new Error(
-      "Refusing Anvil account #0 address on a non-local RPC. Use your real operator owner address.",
-    );
-  }
-
-  if (opts.skipChainCheck) {
-    return { address, operator: null, skipped: true };
-  }
-
-  if (!opts.registry || !/^0x[0-9a-fA-F]{40}$/.test(opts.registry)) {
-    if (local) {
-      return { address, operator: null, skipped: true };
-    }
-    throw new Error("Registry address required for chain check on public RPC.");
-  }
-
-  const pub = await publicClientFromRpc(opts.rpc);
-  const op = await readOperator(pub, opts.registry, opts.label);
-
-  if (op.registeredAt === 0n) {
-    // New operator — fine; mint later
-    return { address, operator: op, skipped: false, unregistered: true };
-  }
-
-  const resolved = await resolvePreferredOperator(pub, {
-    registry: opts.registry,
-    label: opts.label,
-    owner: address,
-  });
-  if (resolved.error) {
-    throw new Error(resolved.error);
-  }
-  return { address, operator: resolved.operator, skipped: false, unregistered: false };
-}
-
-/**
- * Build key pointer from flags / choices.
- * @returns {{ type: 'env'|'keyFile', value: string }|null}
- */
-export function buildKeyPointer({ keyFile, keyEnv, skipKey, env = process.env }) {
-  if (skipKey) return null;
-  if (keyFile) {
-    if (!existsSync(keyFile)) throw new Error(`Key file not found: ${keyFile}`);
-    // validate readable
-    addressFromKeyFile(keyFile);
-    return { type: "keyFile", value: keyFile };
-  }
-  if (keyEnv) {
-    return { type: "env", value: keyEnv };
-  }
-  if (env.OPERATOR_PRIVATE_KEY) {
-    return { type: "env", value: "OPERATOR_PRIVATE_KEY" };
-  }
-  return null;
-}
-
-/**
- * Apply setup choices to disk.
- */
-export function applySetup(choices, opts = {}) {
-  const home = opts.home ?? clankerHome(opts.env);
-  const force = Boolean(choices.force);
-
-  if (existsSync(configPath(home)) && !force) {
-    throw new Error(
-      `Profile already exists at ${configPath(home)}. Pass --force to overwrite.`,
-    );
-  }
-  if (existsSync(operatorPath(home)) && !force) {
-    throw new Error(
-      `Operator profile already exists at ${operatorPath(home)}. Pass --force to overwrite.`,
-    );
-  }
-
-  const { path: configFile, config } = initProfile(choices.preset, {
-    force: true,
-    home,
-    registryAddress: choices.registryAddress,
-    fromBlock: choices.fromBlock,
-  });
-
-  const { path: opFile, operator } = writeOperator(
-    {
-      label: choices.label,
-      owner: getAddress(choices.address),
-      key: choices.key,
-    },
-    home,
-  );
-
-  return { configPath: configFile, config, operatorPath: opFile, operator };
-}
-
-/**
- * Non-interactive setup (agents / CI).
- * @param {string[]} argv
- * @param {{ home?: string, env?: NodeJS.ProcessEnv, skipChainCheck?: boolean }} [opts]
- */
-export async function runSetupNonInteractive(argv, opts = {}) {
-  const flags = parseSetupFlags(argv);
-  const env = opts.env ?? process.env;
-  const home = opts.home ?? clankerHome(env);
-
-  if (!flags.preset || !PRESETS[flags.preset]) {
-    throw new Error(
-      "Non-interactive setup requires --preset sepolia|local (stdin is not a TTY). " +
-        "Also pass --operator <label> and --address 0x…",
-    );
-  }
-  if (!flags.operator) {
-    throw new Error("Non-interactive setup requires --operator <label>");
-  }
-  if (!flags.address && !flags.keyFile && !env.OPERATOR_PRIVATE_KEY) {
-    throw new Error(
-      "Non-interactive setup requires --address 0x…, --key-file, or OPERATOR_PRIVATE_KEY",
-    );
-  }
-
-  let address = flags.address;
-  if (!address && flags.keyFile) address = addressFromKeyFile(flags.keyFile);
-  if (!address && env.OPERATOR_PRIVATE_KEY) address = addressFromEnv(env);
-
-  const preset = PRESETS[flags.preset];
-  let fromBlock = flags.fromBlock;
-  if (fromBlock == null && flags.preset === "sepolia") {
-    fromBlock = SEPOLIA_FAST_FROM_BLOCK;
-  }
-
-  const rpc = preset.chainRpcUrl;
-  const registry = preset.registryAddress;
-
-  await assertSetupIdentity({
-    rpc,
-    registry,
-    label: flags.operator,
-    address,
-    skipChainCheck: flags.skipChainCheck || opts.skipChainCheck || !registry,
-  });
-
-  const key = buildKeyPointer({
-    keyFile: flags.keyFile,
-    keyEnv: flags.keyEnv,
-    skipKey: flags.skipKey,
-    env,
-  });
-
-  // Address from key must match --address when both set
-  if (flags.keyFile && flags.address) {
-    const fromKey = getAddress(addressFromKeyFile(flags.keyFile));
-    if (fromKey !== getAddress(flags.address)) {
-      throw new Error(
-        `Key file address ${fromKey} does not match --address ${getAddress(flags.address)}`,
-      );
-    }
-  }
-
-  return applySetup(
-    {
-      preset: flags.preset,
-      force: flags.force || flags.yes,
-      fromBlock,
-      registryAddress: registry,
-      label: flags.operator,
-      address,
-      key,
-    },
-    { home, env },
-  );
-}
-
-/**
- * Interactive wizard when stdin is a TTY.
- */
-export async function runSetupInteractive(argv, opts = {}) {
-  const flags = parseSetupFlags(argv);
-  const env = opts.env ?? process.env;
-  const home = opts.home ?? clankerHome(env);
-  const hints = detectSetupHints({
-    home,
-    env,
-    castBin: opts.castBin,
-    spawn: opts.spawn,
-    openclawDir: opts.openclawDir,
-  });
-
-  const rl =
-    opts.rl ??
-    createInterface({ input, output });
-  const ask = async (q, def) => {
-    const suffix = def != null && def !== "" ? ` [${def}]` : "";
-    const ans = (await rl.question(`${q}${suffix}: `)).trim();
-    return ans || def || "";
-  };
-  const askYesNo = async (q, defaultYes = true) => {
-    const def = defaultYes ? "Y/n" : "y/N";
-    const ans = (await rl.question(`${q} (${def}): `)).trim().toLowerCase();
-    if (!ans) return defaultYes;
-    return ans === "y" || ans === "yes";
-  };
-
-  try {
-    console.log("");
-    console.log("clanker setup — create your local operator profile");
-    console.log("");
-    console.log(
-      "This writes ~/.clanker/config.json (network) and operator.json (who you are).",
-    );
-    console.log(
-      "Reads like `clanker whoami` can use the owner address without a private key;",
-    );
-    console.log("mint/revoke still need a key file or OPERATOR_PRIVATE_KEY later.");
-    console.log("");
-    console.log(`Profile directory: ${home}`);
-    console.log("");
-    console.log(formatSetupDetectTable(hints));
-    console.log("");
-
-    if ((hints.hasConfig || hints.hasOperator) && !flags.force) {
-      if (hints.hasConfig && !hints.hasOperator) {
-        console.log(
-          "You already have network settings from `clanker init`, but no operator identity.",
-        );
-        console.log(
-          "Continuing will refresh config.json if needed and create operator.json.",
-        );
-        const cont = await askYesNo("Continue setup?", true);
-        if (!cont) {
-          throw new Error("Aborted. Re-run `clanker setup` when ready.");
-        }
-        flags.force = true;
-      } else {
-        console.log(
-          "A full profile already exists. Continuing will REPLACE config.json and/or operator.json",
-        );
-        console.log("with the answers you give next (same files, new contents).");
-        const overwrite = await askYesNo("Replace existing profile files?", false);
-        if (!overwrite) {
-          throw new Error(
-            "Aborted. Pass --force to replace, or edit ~/.clanker/*.json by hand.",
-          );
-        }
-        flags.force = true;
-      }
-      console.log("");
-    }
-
-    console.log("— Network —");
-    let preset =
-      flags.preset ||
-      hints.config?.preset ||
-      (await ask("Which network? sepolia (public hub) or local (Anvil)", "sepolia"));
-    preset = String(preset).toLowerCase();
-    if (!PRESETS[preset]) throw new Error(`Unknown preset "${preset}"`);
-
-    let fromBlock = flags.fromBlock;
-    if (preset === "sepolia") {
-      const useFast =
-        fromBlock != null
-          ? false
-          : await askYesNo(
-              `Speed up chain scans? Use fromBlock ${SEPOLIA_FAST_FROM_BLOCK} (recommended on public RPC)`,
-              true,
-            );
-      if (fromBlock == null) {
-        fromBlock = useFast ? SEPOLIA_FAST_FROM_BLOCK : PRESETS.sepolia.fromBlock;
-      }
-    }
-
-    console.log("");
-    console.log("— Operator identity —");
-    console.log(
-      "We need the wallet address that owns (or will own) your on-chain operator label.",
-    );
-    let address = flags.address ?? null;
-    if (!address && flags.keyFile) {
-      address = addressFromKeyFile(flags.keyFile);
-      console.log(`Using address from --key-file: ${address}`);
-    }
-    if (!address && hints.envAddress) {
-      const useEnv = await askYesNo(
-        `Use address from OPERATOR_PRIVATE_KEY (${hints.envAddress})?`,
-        true,
-      );
-      if (useEnv) address = hints.envAddress;
-    }
-    if (!address && hints.operator?.owner) {
-      const useOp = await askYesNo(
-        `Keep existing operator.json owner (${hints.operator.owner})?`,
-        true,
-      );
-      if (useOp) address = hints.operator.owner;
-    }
-    if (!address && hints.foundryAccounts.length) {
-      console.log("");
-      console.log("Foundry accounts on this machine (passwords are never stored here):");
-      hints.foundryAccounts.forEach((n, i) => console.log(`  ${i + 1}. ${n}`));
-      const pick = await ask(
-        "Type a Foundry account name to use, or leave blank to paste an address",
-        hints.foundryAccounts[0] ?? "",
-      );
-      if (pick) {
-        address = await ask(
-          `Paste the 0x address for "${pick}" (cast wallet address ${pick} after unlock)`,
-          "",
-        );
-      }
-    }
-    if (!address) {
-      address = await ask("Operator owner address (0x…)", "");
-    }
-    if (!address || !/^0x[0-9a-fA-F]{40}$/.test(address)) {
-      throw new Error("A valid 0x operator address is required");
-    }
-    address = getAddress(address);
-
-    let label =
-      flags.operator ||
-      hints.operator?.label ||
-      (await ask("Operator label on-chain (e.g. org.openclaw.pat or org.you)", ""));
-    if (!label) throw new Error("Operator label is required");
-
-    const presetCfg = PRESETS[preset];
-    console.log("");
-    console.log("— Chain check —");
-    console.log(`Looking up "${label}" on ${preset}…`);
-    const check = await assertSetupIdentity({
-      rpc: presetCfg.chainRpcUrl,
-      registry: presetCfg.registryAddress,
-      label,
-      address,
-      skipChainCheck: flags.skipChainCheck || !presetCfg.registryAddress,
-    });
-    if (check.unregistered) {
-      console.log(
-        `OK: "${label}" is not registered yet — after setup, run: clanker operator mint ${label}`,
-      );
-    } else if (check.operator) {
-      console.log(`OK: "${label}" is active on-chain and owned by this address.`);
-    }
-
-    console.log("");
-    console.log("— Signing key (optional) —");
-    console.log(
-      "Only needed for mint/revoke/transfer. Skip for read-only whoami/bots.",
-    );
-    let keyFile = flags.keyFile;
-    let keyEnv = flags.keyEnv;
-    let skipKey = flags.skipKey;
-    if (!skipKey && !keyFile && !keyEnv) {
-      if (hints.hasOperatorPrivateKeyEnv) {
-        const use = await askYesNo(
-          "Remember OPERATOR_PRIVATE_KEY as the signing pointer in operator.json?",
-          true,
-        );
-        if (use) keyEnv = "OPERATOR_PRIVATE_KEY";
-        else skipKey = true;
-      } else {
-        const path = await ask(
-          "Path to operator private-key file (blank = read-only profile)",
-          "",
-        );
-        if (path) keyFile = path;
-        else skipKey = true;
-      }
-    }
-
-    const key = buildKeyPointer({ keyFile, keyEnv, skipKey, env });
-    if (key?.type === "keyFile") {
-      const fromKey = getAddress(addressFromKeyFile(key.value));
-      if (fromKey !== address) {
-        throw new Error(`Key file address ${fromKey} does not match chosen owner ${address}`);
-      }
-    }
-
-    console.log("");
-    console.log("— Summary (about to write) —");
-    console.log(`  network:  ${preset}`);
-    console.log(`  fromBlock:${fromBlock ?? presetCfg.fromBlock}`);
-    console.log(`  label:    ${label}`);
-    console.log(`  owner:    ${address}`);
-    console.log(
-      `  signing:  ${key ? `${key.type}=${key.value}` : "none (read-only whoami/bots)"}`,
-    );
-    const ok = flags.yes || (await askYesNo("Write these files now?", true));
-    if (!ok) throw new Error("Aborted");
-
-    const result = applySetup(
-      {
-        preset,
-        force: true,
-        fromBlock: fromBlock ?? undefined,
-        registryAddress: presetCfg.registryAddress,
-        label,
-        address,
-        key,
-      },
-      { home, env },
-    );
-
-    console.log("");
-    console.log(`Wrote ${result.configPath}`);
-    console.log(`Wrote ${result.operatorPath}`);
-    if (!key) {
-      console.log("");
-      console.log("Next: clanker whoami");
-      console.log(
-        "For mint/revoke later: re-run setup with a key file, or pass --key-file / OPERATOR_PRIVATE_KEY.",
-      );
-    } else {
-      console.log("");
-      console.log("Next: clanker whoami");
-    }
-    return result;
-  } finally {
-    if (!opts.rl) rl.close();
-  }
-}
-
-/**
- * Entry: interactive if TTY (unless --yes with full flags), else non-interactive.
- */
-export async function runSetup(argv, opts = {}) {
-  const flags = parseSetupFlags(argv);
-  const isTTY = opts.isTTY ?? Boolean(input.isTTY);
-
-  // Fully flagged non-interactive path
-  if (
-    !isTTY ||
-    (flags.yes && flags.preset && flags.operator && (flags.address || flags.keyFile))
-  ) {
-    if (!isTTY && !(flags.preset && flags.operator)) {
-      return runSetupNonInteractive(argv, opts);
-    }
-    if (flags.yes && flags.preset && flags.operator && (flags.address || flags.keyFile || opts.env?.OPERATOR_PRIVATE_KEY || process.env.OPERATOR_PRIVATE_KEY)) {
-      return runSetupNonInteractive(argv, opts);
-    }
-  }
-
-  if (!isTTY) {
-    return runSetupNonInteractive(argv, opts);
-  }
-
-  return runSetupInteractive(argv, opts);
-}