@clanker-chain/clanker-cli 2026.9.7 → 2026.9.8-2

package/bin/clanker.mjs

@@ -1,14 +1,13 @@
 #!/usr/bin/env node
 
 import { spawnSync } from "node:child_process";
-import { existsSync, writeFileSync, mkdirSync } from "node:fs";
+import { existsSync, mkdirSync } from "node:fs";
 import { dirname, join } from "node:path";
 import os from "node:os";
 import process from "node:process";
 import { getAddress } from "viem";
 import {
   ANVIL_DEFAULT_PRIVATE_KEY,
-  harnessSnippet,
   initProfile,
   isLocalRpc,
   loadConfig,
@@ -23,7 +22,21 @@ import {
   readBot,
   resolvePreferredOperator,
 } from "../lib/identity-query.mjs";
-import { resolveForRead, resolveOperatorKey } from "../lib/resolve.mjs";
+import { resolveForRead, resolveOperatorKey, resolveReadIdentity } from "../lib/resolve.mjs";
+import { runSetup } from "../lib/setup.mjs";
+import { runDoctor } from "../lib/doctor.mjs";
+import {
+  botIdentityCard,
+  botIdentityJson,
+  hubConnectChecklist,
+  wireOpenClawMqtt,
+} from "../lib/openclaw-wire.mjs";
+import {
+  c,
+  confirmPlan,
+  exitCliError,
+  nextHint,
+} from "../lib/ui.mjs";
 
 function resolveFoundryBinary(name) {
   const home = os.homedir();
@@ -144,16 +157,18 @@ function usage() {
   console.log(`clanker - clanker-chain helper CLI
 
 Usage:
+  clanker setup [--preset sepolia|local] [--operator <label>] [--address 0x…] [--key-file path] [--force]
+  clanker doctor [--json]
   clanker init --preset sepolia|local [--force]
-  clanker whoami [--json] [--operator <label>] [--address 0x…]
-  clanker operator mint <label> [--json]
-  clanker operator transfer propose <label> <newOwner>
-  clanker operator transfer accept <label>
-  clanker bot mint <label> [operator] [--json]
+  clanker whoami [--json] [--operator <label>] [--address 0x…] [--with-bots]
+  clanker operator mint <label> [--json] [--yes]
+  clanker operator transfer propose <label> <newOwner> [--yes]
+  clanker operator transfer accept <label> [--yes]
+  clanker bot mint <label> [operator] [--json] [--yes]
   clanker bots [--json] [--operator <label>] [--address 0x…]
   clanker bot status <label> [--json]
-  clanker bot revoke <label> [--json]
-  clanker bot rotate <label> <newKeyAddress> [--json]
+  clanker bot revoke <label> [--json] [--yes]
+  clanker bot rotate <label> <newKeyAddress> [--json] [--yes]
   clanker init-openclaw
   clanker chain up|deploy|mint-operator|mint-bot|rotate-bot-key|revoke-bot ...
   clanker check mqtt <bot_id> <operator_id>
@@ -161,12 +176,12 @@ Usage:
 
 Profile:
   ~/.clanker/config.json     network preset (registry, RPC, broker URLs)
-  ~/.clanker/operator.json   label + owner + key pointer (never raw hex)
+  ~/.clanker/operator.json   label + owner + optional key pointer (never raw hex)
   ~/.clanker/keys/           bot keys (also written to ~/.openclaw/keys/)
 
-Key resolution (mutating commands):
-  --key > --key-file > OPERATOR_PRIVATE_KEY > profile keyFile > profile env
-  Anvil account #0 is allowed only on localhost RPC.
+Humans: \`clanker setup\` then \`clanker doctor\` / \`whoami\`.
+Mutates print a plan and confirm unless --yes or --json.
+whoami is fast by default; pass --with-bots to enrich child bots (or use \`clanker bots\`).
 
 See docs/operator-cli.md.
 `);
@@ -213,18 +228,20 @@ async function cmdWhoami(argv) {
   let address;
   let source;
   let network;
-  const addressFlag = flagValue(argv, "--address");
-  if (addressFlag) {
-    network = resolveForRead(argv);
-    address = getAddress(addressFlag);
-    source = "--address";
-  } else {
-    const resolved = resolveOperatorKey(argv);
+  try {
+    const resolved = resolveReadIdentity(argv);
     address = resolved.address;
     source = resolved.source;
     network = resolved.network;
+  } catch (err) {
+    exitCliError({
+      error: err.message,
+      because: "whoami needs an owner address from --address, a key, or operator.json",
+      try: ["clanker setup", "clanker doctor", "clanker whoami --address 0x…"],
+    });
   }
 
+  const withBots = hasFlag(argv, "--with-bots");
   const pub = await publicClientFromRpc(network.rpc);
   const preferred =
     flagValue(argv, "--operator") ?? loadOperator(network.home)?.label ?? null;
@@ -237,9 +254,14 @@ async function cmdWhoami(argv) {
       owner: getAddress(address),
     });
     if (resolved.error) {
-      const err = new Error(resolved.error);
-      err.candidates = resolved.candidates;
-      throw err;
+      exitCliError({
+        error: resolved.error,
+        because: "preferred operator label did not match this owner on-chain",
+        try: [
+          "clanker whoami --address 0x…",
+          "clanker setup --force   # fix label/owner",
+        ],
+      });
     }
     selected = [resolved.operator];
   } else {
@@ -250,12 +272,14 @@ async function cmdWhoami(argv) {
     });
   }
 
-  for (const op of selected) {
-    op.bots = await findBotsByOperator(pub, {
-      registry: network.registry,
-      operatorId: op.id,
-      fromBlock: network.fromBlock,
-    });
+  if (withBots) {
+    for (const op of selected) {
+      op.bots = await findBotsByOperator(pub, {
+        registry: network.registry,
+        operatorId: op.id,
+        fromBlock: network.fromBlock,
+      });
+    }
   }
 
   const data = {
@@ -271,31 +295,38 @@ async function cmdWhoami(argv) {
       active: o.active,
       registeredAt: o.registeredAt.toString(),
       revokedAt: o.revokedAt.toString(),
-      bots: (o.bots ?? []).map((b) => ({
-        label: b.label,
-        botKey: b.botKey,
-        active: b.active,
-        registeredAt: b.registeredAt.toString(),
-        revokedAt: b.revokedAt.toString(),
-      })),
+      bots: withBots
+        ? (o.bots ?? []).map((b) => ({
+            label: b.label,
+            botKey: b.botKey,
+            active: b.active,
+            registeredAt: b.registeredAt.toString(),
+            revokedAt: b.revokedAt.toString(),
+          }))
+        : [],
     })),
   };
 
   if (hasFlag(argv, "--json")) printJson(data);
-  else printHumanWhoami(data);
+  else {
+    printHumanWhoami(data);
+    if (!withBots && data.operators.length) {
+      console.log(c.dim("(bots omitted — pass --with-bots or run clanker bots)"));
+    }
+    nextHint(["clanker bots", "clanker doctor"]);
+  }
 }
 
 async function cmdBots(argv) {
   let address;
   let network;
-  const addressFlag = flagValue(argv, "--address");
-  if (addressFlag) {
-    network = resolveForRead(argv);
-    address = getAddress(addressFlag);
-  } else {
-    const resolved = resolveOperatorKey(argv);
+  try {
+    const resolved = resolveReadIdentity(argv);
     address = resolved.address;
     network = resolved.network;
+  } catch (err) {
+    console.error(err.message);
+    process.exit(1);
   }
   const { label, pub } = await resolveOperatorLabel(argv, address, network);
   const bots = await findBotsByOperator(pub, {
@@ -357,6 +388,27 @@ async function main() {
 
   const repoRoot = findRepoRoot();
 
+  if (cmd === "setup") {
+    try {
+      await runSetup(rest);
+    } catch (err) {
+      exitCliError({
+        error: err.message,
+        because: "setup could not write a valid local profile",
+        try: [
+          "clanker setup --preset sepolia --operator org.you --address 0x… --yes --force",
+          "clanker doctor",
+        ],
+      });
+    }
+    return;
+  }
+
+  if (cmd === "doctor") {
+    const { exitCode } = await runDoctor(rest);
+    process.exit(exitCode);
+  }
+
   if (cmd === "init") {
     const preset = flagValue(rest, "--preset") ?? rest.find((a) => !a.startsWith("--"));
     if (!preset || preset === "init") {
@@ -403,13 +455,38 @@ async function main() {
         console.error("Usage: clanker operator mint <label>");
         process.exit(1);
       }
+      let planRows;
+      try {
+        const preview = resolveOperatorKey(flags);
+        planRows = [
+          ["action", "registerOperator"],
+          ["label", label],
+          ["owner", preview.address],
+          ["rpc", preview.network.rpc],
+          ["registry", preview.network.registry ?? "(none)"],
+          ["key", preview.source],
+        ];
+      } catch (err) {
+        exitCliError({
+          error: err.message,
+          because: "operator mint needs a signing key on this network",
+          try: [
+            "export OPERATOR_PRIVATE_KEY=0x…",
+            "clanker operator mint " + label + " --key-file ~/.clanker/op.key --yes",
+            "clanker doctor",
+          ],
+        });
+      }
+      const ok = await confirmPlan(flags, planRows, `Mint operator ${label}?`);
+      if (!ok) process.exit(0);
       const result = await chainMintOperator(label, flags);
       if (hasFlag(flags, "--json") || hasFlag(opArgv, "--json")) printJson(result);
       else {
-        console.log(`Minted operator ${label}`);
+        console.log(c.green(`Minted operator ${label}`));
         console.log(`owner: ${result.owner}`);
         console.log(`tx:    ${result.tx}`);
         console.log(`Wrote ~/.clanker/operator.json`);
+        nextHint([`clanker bot mint <bot_label>`, "clanker whoami"]);
       }
       return;
     }
@@ -421,9 +498,23 @@ async function main() {
           console.error("Usage: clanker operator transfer propose <label> <newOwner>");
           process.exit(1);
         }
+        const ok = await confirmPlan(
+          flags,
+          [
+            ["action", "proposeOperatorTransfer"],
+            ["label", label],
+            ["newOwner", getAddress(newOwner)],
+          ],
+          `Propose transfer of ${label}?`,
+        );
+        if (!ok) process.exit(0);
         const result = await chainProposeOperatorTransfer(label, getAddress(newOwner), flags);
         if (hasFlag(flags, "--json")) printJson(result);
-        else console.log(`Proposed transfer of ${label} → ${newOwner}\ntx: ${result.tx}`);
+        else {
+          console.log(c.green(`Proposed transfer of ${label} → ${newOwner}`));
+          console.log(`tx: ${result.tx}`);
+          nextHint([`clanker operator transfer accept ${label}   # as new owner`]);
+        }
         return;
       }
       if (action === "accept") {
@@ -431,9 +522,23 @@ async function main() {
           console.error("Usage: clanker operator transfer accept <label>");
           process.exit(1);
         }
+        const ok = await confirmPlan(
+          flags,
+          [
+            ["action", "acceptOperatorTransfer"],
+            ["label", label],
+          ],
+          `Accept transfer of ${label}?`,
+        );
+        if (!ok) process.exit(0);
         const result = await chainAcceptOperatorTransfer(label, flags);
         if (hasFlag(flags, "--json")) printJson(result);
-        else console.log(`Accepted transfer of ${label}\nowner: ${result.owner}\ntx: ${result.tx}`);
+        else {
+          console.log(c.green(`Accepted transfer of ${label}`));
+          console.log(`owner: ${result.owner}`);
+          console.log(`tx: ${result.tx}`);
+          nextHint(["clanker whoami", "clanker bots"]);
+        }
         return;
       }
       console.error("Usage: clanker operator transfer propose|accept ...");
@@ -473,20 +578,76 @@ async function main() {
       }
       let operatorLabel = operatorArg ?? flagValue(flags, "--operator") ?? null;
       if (!operatorLabel) {
-        const { address, network } = resolveOperatorKey(flags);
-        const inferred = await resolveOperatorLabel(flags, address, network);
-        operatorLabel = inferred.label;
+        try {
+          const { address, network } = resolveOperatorKey(flags);
+          const inferred = await resolveOperatorLabel(flags, address, network);
+          operatorLabel = inferred.label;
+        } catch (err) {
+          exitCliError({
+            error: err.message,
+            because: "bot mint needs an operator label or a resolvable signing key",
+            try: [
+              `clanker bot mint ${botLabel} <operator_label> --yes`,
+              "clanker setup",
+            ],
+          });
+        }
       }
+      const ok = await confirmPlan(
+        flags,
+        [
+          ["action", "registerBot"],
+          ["bot", botLabel],
+          ["operator", operatorLabel],
+        ],
+        `Mint bot ${botLabel} under ${operatorLabel}?`,
+      );
+      if (!ok) process.exit(0);
       const result = await chainMintBot(botLabel, operatorLabel, flags);
-      if (hasFlag(flags, "--json")) printJson(result);
-      else {
-        console.log(`Minted bot ${botLabel} under ${operatorLabel}`);
+      const mqtt = result.channels_mqtt ?? {};
+      const wire = wireOpenClawMqtt({
+        botId: botLabel,
+        operatorId: operatorLabel,
+        network: {
+          rpc: mqtt.chainRpcUrl,
+          registry: mqtt.registryAddress,
+          brokerUrl: mqtt.brokerUrl,
+          mqttAuthServiceUrl: mqtt.mqttAuthServiceUrl,
+        },
+        keyPath: result.key_path,
+      });
+      if (hasFlag(flags, "--json")) {
+        printJson({
+          ...result,
+          openclaw: wire,
+          bot_identity: botIdentityJson({
+            botId: botLabel,
+            keyPath: result.key_path,
+            openclawConfigPath: wire.path,
+          }),
+        });
+      } else {
+        console.log(c.green(`Minted bot ${botLabel} under ${operatorLabel}`));
         console.log(`botKey:   ${result.bot_key}`);
-        console.log(`key file: ${result.key_path}`);
-        console.log(`also:     ${result.clanker_key_path}`);
         console.log(`tx:       ${result.tx}`);
-        console.log("\nchannels.mqtt stub:");
-        console.log(JSON.stringify(result.channels_mqtt, null, 2));
+        console.log(c.dim(`also:     ${result.clanker_key_path}`));
+        console.log("");
+        for (const line of botIdentityCard({
+          botId: botLabel,
+          operatorId: operatorLabel,
+          keyPath: result.key_path,
+          openclawPath: wire.path,
+          created: wire.created,
+        })) {
+          console.log(line);
+        }
+        nextHint(
+          hubConnectChecklist({
+            botId: botLabel,
+            channelsMqtt: wire.channelsMqtt,
+            pluginPin: wire.pluginPin,
+          }),
+        );
       }
       return;
     }
@@ -497,9 +658,22 @@ async function main() {
         console.error("Usage: clanker bot revoke <label>");
         process.exit(1);
       }
+      const ok = await confirmPlan(
+        flags,
+        [
+          ["action", "revokeBot"],
+          ["bot", botLabel],
+        ],
+        `Revoke bot ${botLabel}?`,
+      );
+      if (!ok) process.exit(0);
       const result = await chainRevokeBot(botLabel, flags);
       if (hasFlag(flags, "--json")) printJson(result);
-      else console.log(`Revoked ${botLabel}\ntx: ${result.tx}`);
+      else {
+        console.log(c.yellow(`Revoked ${botLabel}`));
+        console.log(`tx: ${result.tx}`);
+        nextHint(["clanker bots", "clanker bot status " + botLabel]);
+      }
       return;
     }
 
@@ -509,9 +683,23 @@ async function main() {
         console.error("Usage: clanker bot rotate <label> <newKeyAddress>");
         process.exit(1);
       }
+      const ok = await confirmPlan(
+        flags,
+        [
+          ["action", "rotateBotKey"],
+          ["bot", botLabel],
+          ["newKey", getAddress(newKey)],
+        ],
+        `Rotate key for ${botLabel}?`,
+      );
+      if (!ok) process.exit(0);
       const result = await chainRotateBotKey(botLabel, getAddress(newKey), flags);
       if (hasFlag(flags, "--json")) printJson(result);
-      else console.log(`Rotated ${botLabel} → ${newKey}\ntx: ${result.tx}`);
+      else {
+        console.log(c.green(`Rotated ${botLabel} → ${newKey}`));
+        console.log(`tx: ${result.tx}`);
+        nextHint(["Update ~/.openclaw/keys/" + botLabel + ".key", "clanker bot status " + botLabel]);
+      }
       return;
     }
 
@@ -717,22 +905,6 @@ async function main() {
   }
 
   if (cmd === "init-openclaw") {
-    const home = os.homedir();
-    const openclawDir = join(home, ".openclaw");
-    const cfgPath = join(openclawDir, "openclaw.json");
-    if (!existsSync(openclawDir)) {
-      mkdirSync(openclawDir, { recursive: true });
-    }
-
-    if (existsSync(cfgPath)) {
-      console.log(`${cfgPath} already exists.`);
-      console.log(
-        'Ensure plugins.enabled includes "mqtt" and "mqtt-tools", and channels.mqtt has botId, operatorId, brokerUrl, chainRpcUrl, registryAddress.',
-      );
-      console.log("See SETUP.md and docs/operator-cli.md.");
-      process.exit(0);
-    }
-
     const profile = loadConfig();
     const operator = loadOperator();
     // No profile: local defaults only — do not mix Sepolia registry with localhost MQTT.
@@ -750,27 +922,21 @@ async function main() {
           mqttAuthServiceUrl: "http://localhost:9090",
         };
 
-    const mqtt = harnessSnippet({
+    const wire = wireOpenClawMqtt({
       botId: "openclaw.your-bot.local",
       operatorId: operator?.label ?? "org.openclaw.your-operator",
       network,
     });
-    if (!mqtt.registryAddress) {
-      mqtt.registryAddress = "0x0000000000000000000000000000000000000000";
-    }
-
-    const cfg = {
-      plugins: {
-        enabled: ["mqtt", "mqtt-tools"],
-      },
-      channels: {
-        mqtt,
-      },
-    };
-    writeFileSync(cfgPath, JSON.stringify(cfg, null, 2), "utf8");
-    console.log(`Created ${cfgPath} with mqtt + mqtt-tools from ${profile ? "active" : "default"} preset.`);
-    console.log("Next: clanker bot mint <label>, then set channels.mqtt.botId / operatorId.");
-    console.log("See docs/operator-cli.md and SETUP.md.");
+    console.log(
+      wire.created
+        ? `Created ${wire.path} with mqtt + mqtt-tools from ${profile ? "active" : "default"} preset.`
+        : `Updated channels.mqtt in ${wire.path} (plugins mqtt + mqtt-tools ensured).`,
+    );
+    nextHint([
+      "clanker bot mint <label>",
+      "Then channels.mqtt.botId / operatorId / privateKeyFile update automatically",
+      "See docs/operator-cli.md and docs/closed-beta-invite.md",
+    ]);
     process.exit(0);
   }