@continuumdao/continuum-node-sdk 1.2.13 → 1.2.16

package/dist/detops/management-keys.js

@@ -0,0 +1,216 @@
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import { generateKeyPairSync } from 'node:crypto';
+import { MPA_HOME_DIR } from '../config/paths.js';
+import { managementGet, managementPost } from '../api/management-api.js';
+import { EdDSAPubKeySchema, NodeIdSchema, NonceSchema } from '../schemas/extended.js';
+import { ensureLocalKeyPairForPublicKey, getPrivateKeyStatus, listLocalManagementPublicKeys, normalizeEd25519PublicKeyToHex, } from '../internal/ed25519/management-signing.js';
+import { buildClientSigManagementPostBody, fetchManagementKeyOptions, getPreferredManagementKeyHex, prepareSignedManagementRequest, } from '../internal/management-request-signing.js';
+function toError(reason) {
+    return new Error(reason);
+}
+export async function hasManagementSigner(config) {
+    const result = await managementGet(config, '/hasPublicMgtKey');
+    if (!result.ok) {
+        return result;
+    }
+    return { ok: true, data: { hasEdDSAKey: Boolean(result.data) } };
+}
+export async function listManagementSignersDetailed(config) {
+    const [keyOptions, preferred] = await Promise.all([
+        fetchManagementKeyOptions(config),
+        getPreferredManagementKeyHex(config),
+    ]);
+    if (!keyOptions.ok) {
+        return keyOptions;
+    }
+    const preferredSigner = preferred.ok ? preferred.data.publicKeyHex : undefined;
+    const localKeys = await listLocalManagementPublicKeys(MPA_HOME_DIR, toError);
+    const localFileByPub = new Map(localKeys
+        .filter(k => k.publicKeyHex)
+        .map(k => [k.publicKeyHex, k.fileName]));
+    const keys = await Promise.all(keyOptions.data.map(async (key) => {
+        const privateKeyStatus = await getPrivateKeyStatus(key, {
+            keyRoot: MPA_HOME_DIR,
+            toMcpApiError: toError,
+        });
+        const normalizedPublic = normalizeEd25519PublicKeyToHex(key.value, toError);
+        return {
+            ...key,
+            localFileName: localFileByPub.get(normalizedPublic),
+            localPrivateKeyAvailable: privateKeyStatus.available,
+            localPrivateKeyError: privateKeyStatus.reason,
+        };
+    }));
+    return { ok: true, data: { preferredSigner, keys } };
+}
+export async function createManagementSignerKeypair(config) {
+    const configured = await managementGet(config, '/getAllowedEd25519MgtKeys');
+    const currentKeyCount = configured.ok ? configured.data.length : 0;
+    const fileName = `added_key_${currentKeyCount}`;
+    const keyDir = path.join(MPA_HOME_DIR, 'management_keys');
+    await fs.mkdir(keyDir, { recursive: true });
+    const privateKeyPath = path.join(keyDir, fileName);
+    const publicKeyPath = `${privateKeyPath}.pub`;
+    try {
+        await fs.access(privateKeyPath);
+        return { ok: false, reason: 'Private key file already exists.' };
+    }
+    catch {
+        // expected
+    }
+    const { privateKey, publicKey } = generateKeyPairSync('ed25519');
+    const privatePem = privateKey.export({ format: 'pem', type: 'pkcs8' }).toString();
+    const publicJwk = publicKey.export({ format: 'jwk' });
+    if (!publicJwk.x) {
+        return {
+            ok: false,
+            reason: 'Failed to derive Ed25519 raw public key from generated keypair.',
+        };
+    }
+    const newPublicKey = Buffer.from(publicJwk.x, 'base64url').toString('hex');
+    const parsed = EdDSAPubKeySchema.safeParse(newPublicKey);
+    if (!parsed.success) {
+        return { ok: false, reason: 'Generated public key failed validation.' };
+    }
+    await fs.writeFile(privateKeyPath, privatePem, { mode: 0o600 });
+    await fs.writeFile(publicKeyPath, `${parsed.data}\n`, { mode: 0o644 });
+    return {
+        ok: true,
+        data: {
+            success: true,
+            fileName,
+            publicKey: parsed.data,
+            privateKeyPath,
+            publicKeyPath,
+        },
+    };
+}
+export async function addManagementSigner(config, input) {
+    let normalizedNewPublicKey;
+    try {
+        normalizedNewPublicKey = normalizeEd25519PublicKeyToHex(input.newPublicKey, toError);
+    }
+    catch (error) {
+        return {
+            ok: false,
+            reason: error instanceof Error ? error.message : String(error),
+        };
+    }
+    const parsedKey = EdDSAPubKeySchema.safeParse(normalizedNewPublicKey);
+    if (!parsedKey.success) {
+        return { ok: false, reason: 'Invalid new public key.' };
+    }
+    const signed = await prepareSignedManagementRequest(config, async ({ selectedSigningKey }) => {
+        if (normalizeEd25519PublicKeyToHex(selectedSigningKey.value, toError) ===
+            parsedKey.data) {
+            throw toError('Signer key cannot be the newly created key being added.');
+        }
+        const nodeKeyResult = await managementGet(config, '/getNodeKey');
+        if (!nodeKeyResult.ok) {
+            throw toError(nodeKeyResult.reason);
+        }
+        const nodeKeyParsed = NodeIdSchema.safeParse(nodeKeyResult.data);
+        if (!nodeKeyParsed.success) {
+            throw toError('Node ID response failed validation.');
+        }
+        return {
+            newPublicKey: parsedKey.data,
+            nodeKey: nodeKeyParsed.data,
+            Nonce: selectedSigningKey.nonce,
+            Sig: '',
+        };
+    });
+    if (!signed.ok) {
+        return signed;
+    }
+    const posted = await managementPost(config, '/addManagementKey', signed.data.body);
+    if (!posted.ok) {
+        return posted;
+    }
+    return {
+        ok: true,
+        data: {
+            success: true,
+            publicKey: parsedKey.data,
+            nodeKey: String(signed.data.unsignedBody.nodeKey),
+        },
+    };
+}
+export async function setPreferredManagementSigner(config, input) {
+    let normalized;
+    try {
+        normalized = normalizeEd25519PublicKeyToHex(input.publicKeyHex, toError);
+    }
+    catch (error) {
+        return {
+            ok: false,
+            reason: error instanceof Error ? error.message : String(error),
+        };
+    }
+    const parsedKey = EdDSAPubKeySchema.safeParse(normalized);
+    if (!parsedKey.success) {
+        return { ok: false, reason: 'Invalid public key hex.' };
+    }
+    const keyOptions = await fetchManagementKeyOptions(config);
+    if (!keyOptions.ok) {
+        return keyOptions;
+    }
+    const allowed = keyOptions.data.some(k => normalizeEd25519PublicKeyToHex(k.value, toError) === parsedKey.data);
+    if (!allowed) {
+        return {
+            ok: false,
+            reason: 'Preferred signer must already be in allowed management keys.',
+        };
+    }
+    let localMatch;
+    try {
+        localMatch = await ensureLocalKeyPairForPublicKey(parsedKey.data, {
+            keyRoot: MPA_HOME_DIR,
+            toMcpApiError: toError,
+        });
+    }
+    catch (error) {
+        return {
+            ok: false,
+            reason: error instanceof Error ? error.message : String(error),
+        };
+    }
+    const nodeKeyResult = await managementGet(config, '/getNodeKey');
+    if (!nodeKeyResult.ok) {
+        return nodeKeyResult;
+    }
+    const nodeKeyParsed = NodeIdSchema.safeParse(nodeKeyResult.data);
+    if (!nodeKeyParsed.success) {
+        return { ok: false, reason: 'Node ID response failed validation.' };
+    }
+    const signed = await prepareSignedManagementRequest(config, ({ selectedSigningKey }) => ({
+        nodeKey: nodeKeyParsed.data,
+        Nonce: selectedSigningKey.nonce,
+        publicKey: parsedKey.data,
+        Sig: '',
+    }));
+    if (!signed.ok) {
+        return signed;
+    }
+    const body = buildClientSigManagementPostBody(signed.data.unsignedBody, signed.data.signingMessage, signed.data.signature);
+    const posted = await managementPost(config, '/setPreferredSigner', body);
+    if (!posted.ok) {
+        return posted;
+    }
+    const nonceParsed = NonceSchema.safeParse(signed.data.unsignedBody.Nonce);
+    return {
+        ok: true,
+        data: {
+            success: true,
+            publicKeyHex: parsedKey.data,
+            signerPublicKey: normalizeEd25519PublicKeyToHex(signed.data.selectedSigningKey.value, toError),
+            nodeKey: nodeKeyParsed.data,
+            Nonce: nonceParsed.success ? nonceParsed.data : signed.data.selectedSigningKey.nonce,
+            signedMessage: signed.data.signingMessage,
+            clientSig: signed.data.signature,
+            fileName: localMatch.fileName,
+        },
+    };
+}
+//# sourceMappingURL=management-keys.js.map

package/dist/detops/management-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"management-keys.js","sourceRoot":"","sources":["../../src/detops/management-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,IAAI,EAAE,EAAC,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAC,mBAAmB,EAAC,MAAM,aAAa,CAAC;AAEhD,OAAO,EAAC,YAAY,EAAC,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAC,aAAa,EAAE,cAAc,EAAC,MAAM,0BAA0B,CAAC;AAEvE,OAAO,EAAC,iBAAiB,EAAE,YAAY,EAAE,WAAW,EAAC,MAAM,wBAAwB,CAAC;AACpF,OAAO,EACN,8BAA8B,EAC9B,mBAAmB,EACnB,6BAA6B,EAC7B,8BAA8B,GAC9B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACN,gCAAgC,EAChC,yBAAyB,EACzB,4BAA4B,EAC5B,8BAA8B,GAE9B,MAAM,2CAA2C,CAAC;AAEnD,SAAS,OAAO,CAAC,MAAc;IAC9B,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,MAAqB;IAErB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAU,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACxE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IACf,CAAC;IACD,OAAO,EAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAC,EAAC,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,MAAqB;IAerB,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjD,yBAAyB,CAAC,MAAM,CAAC;QACjC,4BAA4B,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACpB,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,MAAM,eAAe,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,cAAc,GAAG,IAAI,GAAG,CAC7B,SAAS;SACP,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;SAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAsB,EAAE,CAAC,CAAC,QAAQ,CAAU,CAAC,CAC3D,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAC,GAAG,EAAC,EAAE;QAC/B,MAAM,gBAAgB,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE;YACvD,OAAO,EAAE,YAAY;YACrB,aAAa,EAAE,OAAO;SACtB,CAAC,CAAC;QACH,MAAM,gBAAgB,GAAG,8BAA8B,CACtD,GAAG,CAAC,KAAK,EACT,OAAO,CACP,CAAC;QACF,OAAO;YACN,GAAG,GAAG;YACN,aAAa,EAAE,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACnD,wBAAwB,EAAE,gBAAgB,CAAC,SAAS;YACpD,oBAAoB,EAAE,gBAAgB,CAAC,MAAM;SAC7C,CAAC;IACH,CAAC,CAAC,CACF,CAAC;IACF,OAAO,EAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAC,eAAe,EAAE,IAAI,EAAC,EAAC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,MAAqB;IAUrB,MAAM,UAAU,GAAG,MAAM,aAAa,CACrC,MAAM,EACN,2BAA2B,CAC3B,CAAC;IACF,MAAM,eAAe,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,aAAa,eAAe,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;IAC1D,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAC,SAAS,EAAE,IAAI,EAAC,CAAC,CAAC;IAE1C,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,GAAG,cAAc,MAAM,CAAC;IAE9C,IAAI,CAAC;QACJ,MAAM,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAChC,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACR,WAAW;IACZ,CAAC;IAED,MAAM,EAAC,UAAU,EAAE,SAAS,EAAC,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,EAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChF,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,EAAC,MAAM,EAAE,KAAK,EAAC,CAAiB,CAAC;IACpE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAClB,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,iEAAiE;SACzE,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,EAAC,CAAC;IACvE,CAAC;IAED,MAAM,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,UAAU,EAAE,EAAC,IAAI,EAAE,KAAK,EAAC,CAAC,CAAC;IAC9D,MAAM,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,EAAC,IAAI,EAAE,KAAK,EAAC,CAAC,CAAC;IAErE,OAAO;QACN,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACL,OAAO,EAAE,IAAI;YACb,QAAQ;YACR,SAAS,EAAE,MAAM,CAAC,IAAI;YACtB,cAAc;YACd,aAAa;SACb;KACD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,MAAqB,EACrB,KAA6B;IAQ7B,IAAI,sBAA8B,CAAC;IACnC,IAAI,CAAC;QACJ,sBAAsB,GAAG,8BAA8B,CACtD,KAAK,CAAC,YAAY,EAClB,OAAO,CACP,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;IACtE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAC,CAAC;IACvD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAClD,MAAM,EACN,KAAK,EAAE,EAAC,kBAAkB,EAAC,EAAE,EAAE;QAC9B,IACC,8BAA8B,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC;YACjE,SAAS,CAAC,IAAI,EACb,CAAC;YACF,MAAM,OAAO,CACZ,yDAAyD,CACzD,CAAC;QACH,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,aAAa,CAAS,MAAM,EAAE,aAAa,CAAC,CAAC;QACzE,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACvB,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,aAAa,GAAG,YAAY,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACjE,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,OAAO,CAAC,qCAAqC,CAAC,CAAC;QACtD,CAAC;QACD,OAAO;YACN,YAAY,EAAE,SAAS,CAAC,IAAI;YAC5B,OAAO,EAAE,aAAa,CAAC,IAAI;YAC3B,KAAK,EAAE,kBAAkB,CAAC,KAAK;YAC/B,GAAG,EAAE,EAAE;SACP,CAAC;IACH,CAAC,CACD,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAClC,MAAM,EACN,mBAAmB,EACnB,MAAM,CAAC,IAAI,CAAC,IAAI,CAChB,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IACf,CAAC;IAED,OAAO;QACN,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACL,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,SAAS,CAAC,IAAI;YACzB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;SACjD;KACD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,MAAqB,EACrB,KAA6B;IAa7B,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,UAAU,GAAG,8BAA8B,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC1D,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAC,CAAC;IACvD,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACpB,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CACnC,CAAC,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,SAAS,CAAC,IAAI,CACxE,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,8DAA8D;SACtE,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC;IACf,IAAI,CAAC;QACJ,UAAU,GAAG,MAAM,8BAA8B,CAAC,SAAS,CAAC,IAAI,EAAE;YACjE,OAAO,EAAE,YAAY;YACrB,aAAa,EAAE,OAAO;SACtB,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,aAAa,CAAS,MAAM,EAAE,aAAa,CAAC,CAAC;IACzE,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACvB,OAAO,aAAa,CAAC;IACtB,CAAC;IACD,MAAM,aAAa,GAAG,YAAY,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACjE,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,EAAC,CAAC;IACnE,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAClD,MAAM,EACN,CAAC,EAAC,kBAAkB,EAAC,EAAE,EAAE,CAAC,CAAC;QAC1B,OAAO,EAAE,aAAa,CAAC,IAAI;QAC3B,KAAK,EAAE,kBAAkB,CAAC,KAAK;QAC/B,SAAS,EAAE,SAAS,CAAC,IAAI;QACzB,GAAG,EAAE,EAAE;KACP,CAAC,CACF,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IACf,CAAC;IAED,MAAM,IAAI,GAAG,gCAAgC,CAC5C,MAAM,CAAC,IAAI,CAAC,YAAY,EACxB,MAAM,CAAC,IAAI,CAAC,cAAc,EAC1B,MAAM,CAAC,IAAI,CAAC,SAAS,CACrB,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAS,MAAM,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC;IACjF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IACf,CAAC;IAED,MAAM,WAAW,GAAG,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC1E,OAAO;QACN,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACL,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,SAAS,CAAC,IAAI;YAC5B,eAAe,EAAE,8BAA8B,CAC9C,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,EACpC,OAAO,CACP;YACD,OAAO,EAAE,aAAa,CAAC,IAAI;YAC3B,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK;YACpF,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;YACzC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;YAChC,QAAQ,EAAE,UAAU,CAAC,QAAQ;SAC7B;KACD,CAAC;AACH,CAAC"}

package/dist/detops/management-signer.d.ts

@@ -0,0 +1,129 @@
+import type { NodeSdkConfig } from '../config/schema.js';
+import { MPA_HOME_DIR, MANAGEMENT_KEYS_DIR } from '../config/paths.js';
+import type { SdkEmptyResult, SdkResult } from './result.js';
+import { type ManagementKeyEntry, type ManagementKeyResult, type SignedManagementBody } from './schemas.js';
+import type { ManagementKeyOption, ManagementSigningMethod, EIP191ManagementSigning, SelectedSigningKey } from '../schemas/extended.js';
+export type { ManagementKeyEntry, ManagementKeyResult, SignedManagementBody } from './schemas.js';
+export type { ManagementKeyOption, ManagementSigningMethod, Ed25519ManagementSigning, EIP191ManagementSigning, } from '../schemas/extended.js';
+export { DEFAULT_MANAGEMENT_SIGNING } from '../schemas/extended.js';
+export type ManagementKeysResult = {
+    readonly managementKeys: ManagementKeyEntry[];
+    readonly signingOptions: ManagementKeyOption[];
+};
+type LocalManagementKeyEntry = {
+    fileName: string;
+    publicKeyRaw: string;
+    publicKeyHex?: string;
+};
+type ToMcpApiError = (message: string, data?: unknown) => Error;
+export type SignedManagementRequest = {
+    selectedSigningKey?: ManagementKeyOption;
+    body: Record<string, unknown>;
+    canonicalJson: string;
+    signingMessage: string;
+    signature: string;
+};
+export type PrepareSignedContext = {
+    nodeKey: string;
+    selectedSigningKey?: ManagementKeyOption;
+};
+export type ManagementSigningContext = {
+    nonce: number;
+    nodeKey: string;
+    publicKey?: string;
+};
+export type ManagementSignEd25519Options = {
+    publicKey?: string;
+    nonce?: number;
+    keyPath?: string;
+};
+export type ManagementSignResult = {
+    body: SignedManagementBody;
+    canonicalJson: string;
+};
+export declare function normalizeEd25519PublicKeyToHex(value: string, toMcpApiError?: ToMcpApiError): string;
+export declare function buildManagementSigningMessage(bodyWithEmptySig: Record<string, unknown>): string;
+export declare function listLocalManagementPublicKeys(keyRoot: string, toMcpApiError?: ToMcpApiError): Promise<LocalManagementKeyEntry[]>;
+export declare function ensureLocalKeyPairForPublicKey(publicKey: string, deps: {
+    keyRoot: string;
+    toMcpApiError: ToMcpApiError;
+}): Promise<{
+    fileName: string;
+    publicKeyPath: string;
+    privateKeyPath: string;
+}>;
+export declare function resolvePreferredManagementKeyOption(config: NodeSdkConfig, keyOptions: ManagementKeyOption[], deps: {
+    keyRoot: string;
+    toMcpApiError: ToMcpApiError;
+}): Promise<ManagementKeyOption>;
+export declare function getPrivateKeyStatus(option: ManagementKeyOption, deps: {
+    keyRoot: string;
+    toMcpApiError: ToMcpApiError;
+}): Promise<{
+    available: boolean;
+    reason?: string;
+}>;
+export declare function assertAgentCanSignManagementRequests(config: NodeSdkConfig, deps: {
+    keyRoot: string;
+    toMcpApiError: ToMcpApiError;
+}): Promise<void>;
+export declare function signManagementMessage(option: ManagementKeyOption, message: string, deps: {
+    keyRoot: string;
+    toMcpApiError: ToMcpApiError;
+    assertAgentCanSignManagementRequests: () => Promise<void>;
+    config?: NodeSdkConfig;
+}): Promise<string>;
+export declare function getManagementSigners(config: NodeSdkConfig): Promise<SdkResult<ManagementKeysResult>>;
+export declare function resolveManagementSigningKeyOption(config: NodeSdkConfig, keyOptions: ManagementKeyOption[]): Promise<SdkResult<ManagementKeyOption>>;
+export declare function getManagementSigningContext(config: NodeSdkConfig, signing: ManagementSigningMethod): Promise<SdkResult<ManagementSigningContext>>;
+export declare function buildManagementPostBody(signed: SignedManagementBody, signing: ManagementSigningMethod, canonicalJson: string): Record<string, unknown>;
+export declare function managementSignEd25519(config: NodeSdkConfig, requestFields: Record<string, unknown>, options?: ManagementSignEd25519Options): Promise<SdkResult<ManagementSignResult>>;
+export declare function managementSignEIP191(config: NodeSdkConfig, signing: EIP191ManagementSigning, requestFields: Record<string, unknown>): Promise<SdkResult<ManagementSignResult>>;
+export declare function managementSign(config: NodeSdkConfig, signing: ManagementSigningMethod, requestFields: Record<string, unknown>, options?: ManagementSignEd25519Options): Promise<SdkResult<SignedManagementBody>>;
+export declare function prepareSignedManagementRequest(config: NodeSdkConfig, signing: ManagementSigningMethod, buildRequestFields: (ctx: PrepareSignedContext) => Record<string, unknown> | Promise<Record<string, unknown>>): Promise<SdkResult<SignedManagementRequest>>;
+export declare function buildClientSigManagementPostBody(unsignedBody: Record<string, unknown>, signedMessage: string, clientSig: string): Record<string, unknown>;
+export declare function prepareActionSignedManagementRequest(config: NodeSdkConfig, signing: ManagementSigningMethod, buildRequestFields: (ctx: PrepareSignedContext) => Record<string, unknown> | Promise<Record<string, unknown>>): Promise<SdkResult<{
+    selectedSigningKey?: ManagementKeyOption;
+    signingMessage: string;
+    signature: string;
+    body: Record<string, unknown>;
+}>>;
+export declare function toSelectedSigningKey(option: ManagementKeyOption): SelectedSigningKey;
+export declare function getPreferredManagementSigner(config: NodeSdkConfig): Promise<SdkResult<{
+    publicKey: string;
+}>>;
+export declare function getManagementSigner(config: NodeSdkConfig): Promise<SdkResult<ManagementKeyResult>>;
+export declare function setPreferredManagementSigner(config: NodeSdkConfig, publicKey: string, signing?: ManagementSigningMethod): Promise<SdkEmptyResult>;
+export declare function hasEd25519ManagementSigner(config: NodeSdkConfig): Promise<SdkResult<{
+    hasEdDSAKey: boolean;
+}>>;
+/** @deprecated Use hasEd25519ManagementSigner */
+export declare const hasManagementSigner: typeof hasEd25519ManagementSigner;
+export declare function listManagementSignersDetailed(config: NodeSdkConfig): Promise<SdkResult<{
+    preferredSigner?: string;
+    keys: Array<{
+        localFileName?: string;
+        kind: 'EdDSA';
+        value: string;
+        nonce: number;
+        label?: string;
+        localPrivateKeyAvailable: boolean;
+        localPrivateKeyError?: string;
+    }>;
+}>>;
+export declare function createManagementSignerKeypair(config: NodeSdkConfig): Promise<SdkResult<{
+    success: boolean;
+    fileName: string;
+    publicKey: string;
+    privateKeyPath: string;
+    publicKeyPath: string;
+}>>;
+export declare function addManagementSigner(config: NodeSdkConfig, input: {
+    newPublicKey: string;
+}, signing?: ManagementSigningMethod): Promise<SdkResult<{
+    success: boolean;
+    publicKey: string;
+    nodeKey: string;
+}>>;
+export { MANAGEMENT_KEYS_DIR, MPA_HOME_DIR };
+//# sourceMappingURL=management-signer.d.ts.map

package/dist/detops/management-signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"management-signer.d.ts","sourceRoot":"","sources":["../../src/detops/management-signer.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,qBAAqB,CAAC;AAkBvD,OAAO,EAAC,YAAY,EAAE,mBAAmB,EAAC,MAAM,oBAAoB,CAAC;AAErE,OAAO,KAAK,EAAC,cAAc,EAAE,SAAS,EAAC,MAAM,aAAa,CAAC;AAC3D,OAAO,EACN,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,MAAM,cAAc,CAAC;AAEtB,OAAO,KAAK,EACX,mBAAmB,EACnB,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,EAClB,MAAM,wBAAwB,CAAC;AAGhC,YAAY,EAAC,kBAAkB,EAAE,mBAAmB,EAAE,oBAAoB,EAAC,MAAM,cAAc,CAAC;AAChG,YAAY,EACX,mBAAmB,EACnB,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAC,0BAA0B,EAAC,MAAM,wBAAwB,CAAC;AAElE,MAAM,MAAM,oBAAoB,GAAG;IAClC,QAAQ,CAAC,cAAc,EAAE,kBAAkB,EAAE,CAAC;IAC9C,QAAQ,CAAC,cAAc,EAAE,mBAAmB,EAAE,CAAC;CAC/C,CAAC;AAaF,KAAK,uBAAuB,GAAG;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,KAAK,aAAa,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,KAAK,KAAK,CAAC;AAEhE,MAAM,MAAM,uBAAuB,GAAG;IACrC,kBAAkB,CAAC,EAAE,mBAAmB,CAAC;IACzC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,EAAE,mBAAmB,CAAC;CACzC,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IAClC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;CACtB,CAAC;AAqBF,wBAAgB,8BAA8B,CAC7C,KAAK,EAAE,MAAM,EACb,aAAa,GAAE,aAAwB,GACrC,MAAM,CASR;AAED,wBAAgB,6BAA6B,CAC5C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACvC,MAAM,CAER;AAED,wBAAsB,6BAA6B,CAClD,OAAO,EAAE,MAAM,EACf,aAAa,GAAE,aAAwB,GACrC,OAAO,CAAC,uBAAuB,EAAE,CAAC,CA4BpC;AA+CD,wBAAsB,8BAA8B,CACnD,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,aAAa,CAAA;CAAC,GACnD,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAC,CAAC,CA6B5E;AAED,wBAAsB,mCAAmC,CACxD,MAAM,EAAE,aAAa,EACrB,UAAU,EAAE,mBAAmB,EAAE,EACjC,IAAI,EAAE;IACL,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,aAAa,CAAC;CAC7B,GACC,OAAO,CAAC,mBAAmB,CAAC,CA4D9B;AAED,wBAAsB,mBAAmB,CACxC,MAAM,EAAE,mBAAmB,EAC3B,IAAI,EAAE;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,aAAa,CAAA;CAAC,GACnD,OAAO,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAC,CAAC,CAUhD;AAED,wBAAsB,oCAAoC,CACzD,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE;IACL,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,aAAa,CAAC;CAC7B,GACC,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED,wBAAsB,qBAAqB,CAC1C,MAAM,EAAE,mBAAmB,EAC3B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;IACL,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,aAAa,CAAC;IAC7B,oCAAoC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,CAAC,EAAE,aAAa,CAAC;CACvB,GACC,OAAO,CAAC,MAAM,CAAC,CASjB;AAED,wBAAsB,oBAAoB,CACzC,MAAM,EAAE,aAAa,GACnB,OAAO,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC,CAqC1C;AAED,wBAAsB,iCAAiC,CACtD,MAAM,EAAE,aAAa,EACrB,UAAU,EAAE,mBAAmB,EAAE,GAC/B,OAAO,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAOzC;AAED,wBAAsB,2BAA2B,CAChD,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,uBAAuB,GAC9B,OAAO,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC,CAuC9C;AAED,wBAAgB,uBAAuB,CACtC,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE,uBAAuB,EAChC,aAAa,EAAE,MAAM,GACnB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAKzB;AAED,wBAAsB,qBAAqB,CAC1C,MAAM,EAAE,aAAa,EACrB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACtC,OAAO,GAAE,4BAAiC,GACxC,OAAO,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC,CA8C1C;AAED,wBAAsB,oBAAoB,CACzC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,uBAAuB,EAChC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACpC,OAAO,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC,CAkB1C;AAED,wBAAsB,cAAc,CACnC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,uBAAuB,EAChC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACtC,OAAO,GAAE,4BAAiC,GACxC,OAAO,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC,CAc1C;AAED,wBAAsB,8BAA8B,CACnD,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,uBAAuB,EAChC,kBAAkB,EAAE,CACnB,GAAG,EAAE,oBAAoB,KACrB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAC7D,OAAO,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC,CAgF7C;AAED,wBAAgB,gCAAgC,CAC/C,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACrC,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAKzB;AAED,wBAAsB,oCAAoC,CACzD,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,uBAAuB,EAChC,kBAAkB,EAAE,CACnB,GAAG,EAAE,oBAAoB,KACrB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAC7D,OAAO,CACT,SAAS,CAAC;IACT,kBAAkB,CAAC,EAAE,mBAAmB,CAAC;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B,CAAC,CACF,CAkBA;AAED,wBAAgB,oBAAoB,CACnC,MAAM,EAAE,mBAAmB,GACzB,kBAAkB,CAQpB;AAED,wBAAsB,4BAA4B,CACjD,MAAM,EAAE,aAAa,GACnB,OAAO,CAAC,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAC,CAAC,CAAC,CAmBzC;AAED,wBAAsB,mBAAmB,CACxC,MAAM,EAAE,aAAa,GACnB,OAAO,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CA2BzC;AAED,wBAAsB,4BAA4B,CACjD,MAAM,EAAE,aAAa,EACrB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,uBAAoD,GAC3D,OAAO,CAAC,cAAc,CAAC,CAuBzB;AAED,wBAAsB,0BAA0B,CAC/C,MAAM,EAAE,aAAa,GACnB,OAAO,CAAC,SAAS,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAC,CAAC,CAAC,CAM5C;AAED,iDAAiD;AACjD,eAAO,MAAM,mBAAmB,mCAA6B,CAAC;AAE9D,wBAAsB,6BAA6B,CAClD,MAAM,EAAE,aAAa,GACnB,OAAO,CACT,SAAS,CAAC;IACT,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,KAAK,CAAC;QACX,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,IAAI,EAAE,OAAO,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,wBAAwB,EAAE,OAAO,CAAC;QAClC,oBAAoB,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC,CAAC;CACH,CAAC,CACF,CA+BA;AAED,wBAAsB,6BAA6B,CAClD,MAAM,EAAE,aAAa,GACnB,OAAO,CACT,SAAS,CAAC;IACT,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;CACtB,CAAC,CACF,CA6CA;AAED,wBAAsB,mBAAmB,CACxC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE;IAAC,YAAY,EAAE,MAAM,CAAA;CAAC,EAC7B,OAAO,GAAE,uBAAoD,GAC3D,OAAO,CACT,SAAS,CAAC;IACT,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CAChB,CAAC,CACF,CAsDA;AAED,OAAO,EAAC,mBAAmB,EAAE,YAAY,EAAC,CAAC"}