@continuumdao/continuum-node-sdk 1.2.14 → 1.2.16

package/dist/detops/keygen.d.ts

@@ -0,0 +1,72 @@
+import { z } from 'zod';
+import type { NodeSdkConfig } from '../config/schema.js';
+import type { SdkResult } from './result.js';
+import { KeyGenRequestSchema, type GroupId, type Key, type KeyGenId, type MsgCheck } from '../schemas/extended.js';
+import { type ManagementSigningMethod } from '../schemas/extended.js';
+import { toSelectedSigningKey } from '../detops/management-signer.js';
+import type { KeyGenResultById } from './mpc/types.js';
+export declare const keyGenFilterSchema: z.ZodEnum<{
+    all: "all";
+    pending: "pending";
+    success: "success";
+    failed: "failed";
+    agree: "agree";
+    originator: "originator";
+}>;
+export type KeyGenFilter = z.infer<typeof keyGenFilterSchema>;
+export type KeyGenAgreementCheck = {
+    requestId: KeyGenId;
+    originator?: string;
+    isOriginatorLocal: boolean;
+    agreementRequired: boolean;
+    note: string;
+};
+export declare function fetchKeyGenResult(config: NodeSdkConfig, keyGenId: string): Promise<SdkResult<KeyGenResultById>>;
+export declare function fetchGlobalNonceByKeyGenId(config: NodeSdkConfig, keyGenId: string): Promise<SdkResult<number>>;
+/** MCP tool: create_key_gen_request */
+export declare function createKeyGenRequest(config: NodeSdkConfig, input: {
+    groupId: GroupId;
+    gate: number;
+    msgCheck: MsgCheck;
+    keyType: Key;
+}, signing?: ManagementSigningMethod): Promise<SdkResult<{
+    requestId: KeyGenId;
+    selectedSigningKey?: ReturnType<typeof toSelectedSigningKey>;
+    signingMessage: string;
+}>>;
+/** MCP tool: accept_key_gen_request */
+export declare function acceptKeyGenRequest(config: NodeSdkConfig, input: {
+    requestId: KeyGenId;
+}, signing?: ManagementSigningMethod): Promise<SdkResult<{
+    message: string;
+    selectedSigningKey?: ReturnType<typeof toSelectedSigningKey>;
+    signingMessage: string;
+}>>;
+/** MCP tool: list_key_gen_requests */
+export declare function listKeyGenRequests(config: NodeSdkConfig, options?: {
+    filter?: KeyGenFilter;
+    pagenum?: number;
+    pagesize?: number;
+}): Promise<SdkResult<{
+    localNodeId: string;
+    requests: z.infer<typeof KeyGenRequestSchema>[];
+    agreementChecks: KeyGenAgreementCheck[];
+}>>;
+/** MCP tool: get_key_gen_request_by_id */
+export declare function getKeyGenRequestById(config: NodeSdkConfig, input: {
+    id: KeyGenId;
+}): Promise<SdkResult<{
+    request: z.infer<typeof KeyGenRequestSchema>;
+    localNodeId: string;
+    isOriginatorLocal: boolean;
+    agreementRequired: boolean;
+    note: string;
+}>>;
+/** MCP tool: get_key_gen_parent_group_id */
+export declare function getKeyGenParentGroupId(config: NodeSdkConfig, input: {
+    id: KeyGenId;
+}): Promise<SdkResult<{
+    requestid: string;
+    groupId: GroupId;
+}>>;
+//# sourceMappingURL=keygen.d.ts.map

package/dist/detops/keygen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keygen.d.ts","sourceRoot":"","sources":["../../src/detops/keygen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AACtB,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,qBAAqB,CAAC;AAMvD,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,aAAa,CAAC;AAC3C,OAAO,EAGN,mBAAmB,EAGnB,KAAK,OAAO,EACZ,KAAK,GAAG,EACR,KAAK,QAAQ,EACb,KAAK,QAAQ,EACb,MAAM,wBAAwB,CAAC;AAMhC,OAAO,EAEN,KAAK,uBAAuB,EAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAEN,oBAAoB,EACpB,MAAM,gCAAgC,CAAC;AAExC,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,gBAAgB,CAAC;AAGrD,eAAO,MAAM,kBAAkB;;;;;;;EAO7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,MAAM,MAAM,oBAAoB,GAAG;IAClC,SAAS,EAAE,QAAQ,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,wBAAsB,iBAAiB,CACtC,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,MAAM,GACd,OAAO,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAStC;AAED,wBAAsB,0BAA0B,CAC/C,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,MAAM,GACd,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAqB5B;AAED,uCAAuC;AACvC,wBAAsB,mBAAmB,CACxC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE;IACN,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,GAAG,CAAC;CACb,EACD,OAAO,GAAE,uBAAoD,GAC3D,OAAO,CACT,SAAS,CAAC;IACT,SAAS,EAAE,QAAQ,CAAC;IACpB,kBAAkB,CAAC,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC;IAC7D,cAAc,EAAE,MAAM,CAAC;CACvB,CAAC,CACF,CAkDA;AAED,uCAAuC;AACvC,wBAAsB,mBAAmB,CACxC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE;IAAC,SAAS,EAAE,QAAQ,CAAA;CAAC,EAC5B,OAAO,GAAE,uBAAoD,GAC3D,OAAO,CACT,SAAS,CAAC;IACT,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC;IAC7D,cAAc,EAAE,MAAM,CAAC;CACvB,CAAC,CACF,CAgDA;AAED,sCAAsC;AACtC,wBAAsB,kBAAkB,CACvC,MAAM,EAAE,aAAa,EACrB,OAAO,GAAE;IACR,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACb,GACJ,OAAO,CACT,SAAS,CAAC;IACT,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,EAAE,CAAC;IAChD,eAAe,EAAE,oBAAoB,EAAE,CAAC;CACxC,CAAC,CACF,CAuDA;AAED,0CAA0C;AAC1C,wBAAsB,oBAAoB,CACzC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE;IAAC,EAAE,EAAE,QAAQ,CAAA;CAAC,GACnB,OAAO,CACT,SAAS,CAAC;IACT,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;CACb,CAAC,CACF,CAoCA;AAED,4CAA4C;AAC5C,wBAAsB,sBAAsB,CAC3C,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE;IAAC,EAAE,EAAE,QAAQ,CAAA;CAAC,GACnB,OAAO,CAAC,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAC,CAAC,CAAC,CAwB3D"}

package/dist/detops/keygen.js

@@ -0,0 +1,245 @@
+import { z } from 'zod';
+import { buildManagementQueryPath, managementGet, managementPost, } from '../api/management-api.js';
+import { GroupIdSchema, KeyGenIdSchema, KeyTypeSchema, MsgCheckSchema, } from '../schemas/extended.js';
+import { extractStatus, normalizeKeyGenRequest, pick, } from '../internal/normalize.js';
+import { DEFAULT_MANAGEMENT_SIGNING, } from '../schemas/extended.js';
+import { prepareSignedManagementRequest, toSelectedSigningKey, } from '../detops/management-signer.js';
+import { nodeId } from './general.js';
+import { mpcAuthEnvelopeData } from './mpc/sign-request-utils.js';
+export const keyGenFilterSchema = z.enum([
+    'all',
+    'pending',
+    'success',
+    'failed',
+    'agree',
+    'originator',
+]);
+export async function fetchKeyGenResult(config, keyGenId) {
+    const path = buildManagementQueryPath('/getKeyGenResultById', { id: keyGenId });
+    const raw = await managementGet(config, path);
+    if (!raw.ok)
+        return raw;
+    const data = mpcAuthEnvelopeData(raw.data) ?? raw.data;
+    if (!data || typeof data !== 'object' || Array.isArray(data)) {
+        return { ok: false, reason: 'Invalid getKeyGenResultById response.' };
+    }
+    return { ok: true, data: data };
+}
+export async function fetchGlobalNonceByKeyGenId(config, keyGenId) {
+    const path = buildManagementQueryPath('/getGlobalNonceByKeyGenId', {
+        id: keyGenId,
+    });
+    const raw = await managementGet(config, path);
+    if (!raw.ok)
+        return raw;
+    let globalNonce;
+    if (typeof raw.data === 'number') {
+        globalNonce = raw.data;
+    }
+    else {
+        const data = mpcAuthEnvelopeData(raw.data) ?? raw.data;
+        if (data && typeof data === 'object' && !Array.isArray(data)) {
+            const src = data;
+            const candidate = src.globalNonce ?? src.GlobalNonce ?? src.globalnonce;
+            if (typeof candidate === 'number')
+                globalNonce = candidate;
+        }
+    }
+    if (typeof globalNonce !== 'number' || Number.isNaN(globalNonce)) {
+        return { ok: false, reason: 'Invalid getGlobalNonceByKeyGenId response.' };
+    }
+    return { ok: true, data: globalNonce };
+}
+/** MCP tool: create_key_gen_request */
+export async function createKeyGenRequest(config, input, signing = DEFAULT_MANAGEMENT_SIGNING) {
+    const parsedInput = z
+        .object({
+        groupId: GroupIdSchema,
+        gate: z.number().int().min(2),
+        msgCheck: MsgCheckSchema,
+        keyType: KeyTypeSchema,
+    })
+        .safeParse(input);
+    if (!parsedInput.success) {
+        return { ok: false, reason: 'Invalid KeyGen request input.' };
+    }
+    const signed = await prepareSignedManagementRequest(config, signing, ({ selectedSigningKey }) => ({
+        ...(selectedSigningKey ? { clientPk: selectedSigningKey.value } : {}),
+        threshold: parsedInput.data.gate - 1,
+        groupId: parsedInput.data.groupId,
+        msgCheck: parsedInput.data.msgCheck,
+        keyType: parsedInput.data.keyType,
+    }));
+    if (!signed.ok) {
+        return signed;
+    }
+    const posted = await managementPost(config, '/keyGenRequest', signed.data.body);
+    if (!posted.ok) {
+        return posted;
+    }
+    const requestIdParsed = KeyGenIdSchema.safeParse(posted.data);
+    if (!requestIdParsed.success) {
+        return { ok: false, reason: 'KeyGen request ID response failed validation.' };
+    }
+    return {
+        ok: true,
+        data: {
+            requestId: requestIdParsed.data,
+            selectedSigningKey: signed.data.selectedSigningKey
+                ? toSelectedSigningKey(signed.data.selectedSigningKey)
+                : undefined,
+            signingMessage: signed.data.signingMessage,
+        },
+    };
+}
+/** MCP tool: accept_key_gen_request */
+export async function acceptKeyGenRequest(config, input, signing = DEFAULT_MANAGEMENT_SIGNING) {
+    const requestIdParsed = KeyGenIdSchema.safeParse(input.requestId);
+    if (!requestIdParsed.success) {
+        return { ok: false, reason: 'Invalid KeyGen request ID.' };
+    }
+    const path = buildManagementQueryPath('/getKeyGenRequestById', {
+        id: requestIdParsed.data,
+    });
+    const requestRaw = await managementGet(config, path);
+    if (!requestRaw.ok) {
+        return requestRaw;
+    }
+    const status = extractStatus(requestRaw.data);
+    if (status && status !== 'pending') {
+        return { ok: false, reason: 'KeyGen request is not pending.' };
+    }
+    const signed = await prepareSignedManagementRequest(config, signing, ({ selectedSigningKey }) => ({
+        ...(selectedSigningKey ? { clientPk: selectedSigningKey.value } : {}),
+        requestId: requestIdParsed.data,
+    }));
+    if (!signed.ok) {
+        return signed;
+    }
+    const posted = await managementPost(config, '/keyGenRequestAgree', signed.data.body);
+    if (!posted.ok) {
+        return posted;
+    }
+    return {
+        ok: true,
+        data: {
+            message: posted.data,
+            selectedSigningKey: signed.data.selectedSigningKey
+                ? toSelectedSigningKey(signed.data.selectedSigningKey)
+                : undefined,
+            signingMessage: signed.data.signingMessage,
+        },
+    };
+}
+/** MCP tool: list_key_gen_requests */
+export async function listKeyGenRequests(config, options = {}) {
+    if (options.filter !== undefined &&
+        !keyGenFilterSchema.safeParse(options.filter).success) {
+        return { ok: false, reason: 'Invalid KeyGen request filter.' };
+    }
+    const path = buildManagementQueryPath('/listKeyGenRequests', {
+        filter: options.filter,
+        pagenum: options.pagenum === undefined ? undefined : String(options.pagenum),
+        pagesize: options.pagesize === undefined ? undefined : String(options.pagesize),
+    });
+    const raw = await managementGet(config, path);
+    if (!raw.ok) {
+        return raw;
+    }
+    const rawList = Array.isArray(raw.data) ? raw.data : [];
+    const requests = rawList
+        .map(entry => normalizeKeyGenRequest(entry))
+        .filter((entry) => entry !== undefined);
+    const self = await nodeId(config);
+    if (!self.ok) {
+        return self;
+    }
+    const agreementChecks = requests.map(request => {
+        const isOriginatorLocal = request.originator === self.data.nodeId;
+        const agreementRequired = request.originator ? !isOriginatorLocal : true;
+        return {
+            requestId: request.requestid,
+            originator: request.originator,
+            isOriginatorLocal,
+            agreementRequired,
+            note: !request.originator
+                ? 'Originator is not provided in this response; assuming agreement may be required.'
+                : isOriginatorLocal
+                    ? 'Originator is local node; agreement is not required.'
+                    : 'Originator is a different node; agreement is required.',
+        };
+    });
+    return {
+        ok: true,
+        data: {
+            localNodeId: self.data.nodeId,
+            requests,
+            agreementChecks,
+        },
+    };
+}
+/** MCP tool: get_key_gen_request_by_id */
+export async function getKeyGenRequestById(config, input) {
+    const idParsed = KeyGenIdSchema.safeParse(input.id);
+    if (!idParsed.success) {
+        return { ok: false, reason: 'Invalid KeyGen request ID.' };
+    }
+    const path = buildManagementQueryPath('/getKeyGenRequestById', {
+        id: idParsed.data,
+    });
+    const raw = await managementGet(config, path);
+    if (!raw.ok) {
+        return raw;
+    }
+    const request = normalizeKeyGenRequest(raw.data);
+    if (!request) {
+        return { ok: false, reason: 'KeyGen request response failed validation.' };
+    }
+    const self = await nodeId(config);
+    if (!self.ok) {
+        return self;
+    }
+    const isOriginatorLocal = request.originator === self.data.nodeId;
+    const agreementRequired = request.originator ? !isOriginatorLocal : true;
+    return {
+        ok: true,
+        data: {
+            request,
+            localNodeId: self.data.nodeId,
+            isOriginatorLocal,
+            agreementRequired,
+            note: !request.originator
+                ? 'Originator is not provided in this response; assuming agreement may be required.'
+                : isOriginatorLocal
+                    ? 'Originator is local node; agreement is not required.'
+                    : 'Originator is a different node; agreement is required.',
+        },
+    };
+}
+/** MCP tool: get_key_gen_parent_group_id */
+export async function getKeyGenParentGroupId(config, input) {
+    const idParsed = KeyGenIdSchema.safeParse(input.id);
+    if (!idParsed.success) {
+        return { ok: false, reason: 'Invalid KeyGen request ID.' };
+    }
+    const path = buildManagementQueryPath('/getKeyGenGroupId', { id: idParsed.data });
+    const raw = await managementGet(config, path);
+    if (!raw.ok) {
+        return raw;
+    }
+    if (!raw.data || typeof raw.data !== 'object') {
+        return { ok: false, reason: 'Invalid getKeyGenGroupId response shape.' };
+    }
+    const src = raw.data;
+    const requestid = pick(src, ['requestid', 'RequestId', 'id']);
+    const groupId = pick(src, ['groupid', 'GroupId', 'groupId']);
+    if (typeof requestid !== 'string' || typeof groupId !== 'string') {
+        return { ok: false, reason: 'Invalid getKeyGenGroupId response shape.' };
+    }
+    const groupIdParsed = GroupIdSchema.safeParse(groupId);
+    if (!groupIdParsed.success) {
+        return { ok: false, reason: 'Invalid group ID in response.' };
+    }
+    return { ok: true, data: { requestid, groupId: groupIdParsed.data } };
+}
+//# sourceMappingURL=keygen.js.map

package/dist/detops/keygen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keygen.js","sourceRoot":"","sources":["../../src/detops/keygen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB,OAAO,EACN,wBAAwB,EACxB,aAAa,EACb,cAAc,GACd,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACN,aAAa,EACb,cAAc,EAEd,aAAa,EACb,cAAc,GAKd,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACN,aAAa,EACb,sBAAsB,EACtB,IAAI,GACJ,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACN,0BAA0B,GAE1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACN,8BAA8B,EAC9B,oBAAoB,GACpB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAC,MAAM,EAAC,MAAM,cAAc,CAAC;AAEpC,OAAO,EAAC,mBAAmB,EAAC,MAAM,6BAA6B,CAAC;AAEhE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC;IACxC,KAAK;IACL,SAAS;IACT,SAAS;IACT,QAAQ;IACR,OAAO;IACP,YAAY;CACZ,CAAC,CAAC;AAWH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,MAAqB,EACrB,QAAgB;IAEhB,MAAM,IAAI,GAAG,wBAAwB,CAAC,sBAAsB,EAAE,EAAC,EAAE,EAAE,QAAQ,EAAC,CAAC,CAAC;IAC9E,MAAM,GAAG,GAAG,MAAM,aAAa,CAAU,MAAM,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACxB,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC;IACvD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,EAAC,CAAC;IACrE,CAAC;IACD,OAAO,EAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAwB,EAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,MAAqB,EACrB,QAAgB;IAEhB,MAAM,IAAI,GAAG,wBAAwB,CAAC,2BAA2B,EAAE;QAClE,EAAE,EAAE,QAAQ;KACZ,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,aAAa,CAAU,MAAM,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACxB,IAAI,WAA+B,CAAC;IACpC,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClC,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC;IACxB,CAAC;SAAM,CAAC;QACP,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC;QACvD,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,MAAM,GAAG,GAAG,IAA+B,CAAC;YAC5C,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,CAAC;YACxE,IAAI,OAAO,SAAS,KAAK,QAAQ;gBAAE,WAAW,GAAG,SAAS,CAAC;QAC5D,CAAC;IACF,CAAC;IACD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAClE,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAC,CAAC;IAC1E,CAAC;IACD,OAAO,EAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAC,CAAC;AACtC,CAAC;AAED,uCAAuC;AACvC,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,MAAqB,EACrB,KAKC,EACD,UAAmC,0BAA0B;IAQ7D,MAAM,WAAW,GAAG,CAAC;SACnB,MAAM,CAAC;QACP,OAAO,EAAE,aAAa;QACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7B,QAAQ,EAAE,cAAc;QACxB,OAAO,EAAE,aAAa;KACtB,CAAC;SACD,SAAS,CAAC,KAAK,CAAC,CAAC;IACnB,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAC,CAAC;IAC7D,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAClD,MAAM,EACN,OAAO,EACP,CAAC,EAAC,kBAAkB,EAAC,EAAE,EAAE,CAAC,CAAC;QAC1B,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAC,QAAQ,EAAE,kBAAkB,CAAC,KAAK,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;QACpC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO;QACjC,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,QAAQ;QACnC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO;KACjC,CAAC,CACF,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAClC,MAAM,EACN,gBAAgB,EAChB,MAAM,CAAC,IAAI,CAAC,IAAI,CAChB,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IACf,CAAC;IACD,MAAM,eAAe,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9D,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;QAC9B,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+CAA+C,EAAC,CAAC;IAC7E,CAAC;IACD,OAAO;QACN,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACL,SAAS,EAAE,eAAe,CAAC,IAAI;YAC/B,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB;gBACjD,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC;gBACtD,CAAC,CAAC,SAAS;YACZ,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;SAC1C;KACD,CAAC;AACH,CAAC;AAED,uCAAuC;AACvC,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,MAAqB,EACrB,KAA4B,EAC5B,UAAmC,0BAA0B;IAQ7D,MAAM,eAAe,GAAG,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAClE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;QAC9B,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAC,CAAC;IAC1D,CAAC;IAED,MAAM,IAAI,GAAG,wBAAwB,CAAC,uBAAuB,EAAE;QAC9D,EAAE,EAAE,eAAe,CAAC,IAAI;KACxB,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,MAAM,aAAa,CAAU,MAAM,EAAE,IAAI,CAAC,CAAC;IAC9D,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACpB,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,MAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAC,CAAC;IAC9D,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAClD,MAAM,EACN,OAAO,EACP,CAAC,EAAC,kBAAkB,EAAC,EAAE,EAAE,CAAC,CAAC;QAC1B,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAC,QAAQ,EAAE,kBAAkB,CAAC,KAAK,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,SAAS,EAAE,eAAe,CAAC,IAAI;KAC/B,CAAC,CACF,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAClC,MAAM,EACN,qBAAqB,EACrB,MAAM,CAAC,IAAI,CAAC,IAAI,CAChB,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IACf,CAAC;IACD,OAAO;QACN,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACL,OAAO,EAAE,MAAM,CAAC,IAAI;YACpB,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB;gBACjD,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC;gBACtD,CAAC,CAAC,SAAS;YACZ,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;SAC1C;KACD,CAAC;AACH,CAAC;AAED,sCAAsC;AACtC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,MAAqB,EACrB,UAII,EAAE;IAQN,IACC,OAAO,CAAC,MAAM,KAAK,SAAS;QAC5B,CAAC,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,EACpD,CAAC;QACF,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAC,CAAC;IAC9D,CAAC;IACD,MAAM,IAAI,GAAG,wBAAwB,CAAC,qBAAqB,EAAE;QAC5D,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EACN,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QACpE,QAAQ,EACP,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;KACtE,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,aAAa,CAAU,MAAM,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACb,OAAO,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,MAAM,QAAQ,GAAG,OAAO;SACtB,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;SAC3C,MAAM,CACN,CAAC,KAAK,EAAgD,EAAE,CACvD,KAAK,KAAK,SAAS,CACpB,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,eAAe,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;QAC9C,MAAM,iBAAiB,GAAG,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QAClE,MAAM,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC;QACzE,OAAO;YACN,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,iBAAiB;YACjB,iBAAiB;YACjB,IAAI,EAAE,CAAC,OAAO,CAAC,UAAU;gBACxB,CAAC,CAAC,kFAAkF;gBACpF,CAAC,CAAC,iBAAiB;oBAClB,CAAC,CAAC,sDAAsD;oBACxD,CAAC,CAAC,wDAAwD;SAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO;QACN,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACL,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;YAC7B,QAAQ;YACR,eAAe;SACf;KACD,CAAC;AACH,CAAC;AAED,0CAA0C;AAC1C,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,MAAqB,EACrB,KAAqB;IAUrB,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAC,CAAC;IAC1D,CAAC;IACD,MAAM,IAAI,GAAG,wBAAwB,CAAC,uBAAuB,EAAE;QAC9D,EAAE,EAAE,QAAQ,CAAC,IAAI;KACjB,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,aAAa,CAAU,MAAM,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACb,OAAO,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAC,CAAC;IAC1E,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,iBAAiB,GAAG,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;IAClE,MAAM,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,OAAO;QACN,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACL,OAAO;YACP,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;YAC7B,iBAAiB;YACjB,iBAAiB;YACjB,IAAI,EAAE,CAAC,OAAO,CAAC,UAAU;gBACxB,CAAC,CAAC,kFAAkF;gBACpF,CAAC,CAAC,iBAAiB;oBAClB,CAAC,CAAC,sDAAsD;oBACxD,CAAC,CAAC,wDAAwD;SAC5D;KACD,CAAC;AACH,CAAC;AAED,4CAA4C;AAC5C,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,MAAqB,EACrB,KAAqB;IAErB,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAC,CAAC;IAC1D,CAAC;IACD,MAAM,IAAI,GAAG,wBAAwB,CAAC,mBAAmB,EAAE,EAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,EAAC,CAAC,CAAC;IAChF,MAAM,GAAG,GAAG,MAAM,aAAa,CAAU,MAAM,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACb,OAAO,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/C,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,EAAC,CAAC;IACxE,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,IAA+B,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IAC7D,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAClE,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,EAAC,CAAC;IACxE,CAAC;IACD,MAAM,aAAa,GAAG,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAC,CAAC;IAC7D,CAAC;IACD,OAAO,EAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAC,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,IAAI,EAAC,EAAC,CAAC;AACnE,CAAC"}

package/dist/detops/management-keys.d.ts

@@ -0,0 +1,44 @@
+import type { NodeSdkConfig } from '../config/schema.js';
+import type { SdkResult } from '../detops/result.js';
+export declare function hasManagementSigner(config: NodeSdkConfig): Promise<SdkResult<{
+    hasEdDSAKey: boolean;
+}>>;
+export declare function listManagementSignersDetailed(config: NodeSdkConfig): Promise<SdkResult<{
+    preferredSigner?: string;
+    keys: Array<{
+        localFileName?: string;
+        kind: 'EdDSA';
+        value: string;
+        nonce: number;
+        label?: string;
+        localPrivateKeyAvailable: boolean;
+        localPrivateKeyError?: string;
+    }>;
+}>>;
+export declare function createManagementSignerKeypair(config: NodeSdkConfig): Promise<SdkResult<{
+    success: boolean;
+    fileName: string;
+    publicKey: string;
+    privateKeyPath: string;
+    publicKeyPath: string;
+}>>;
+export declare function addManagementSigner(config: NodeSdkConfig, input: {
+    newPublicKey: string;
+}): Promise<SdkResult<{
+    success: boolean;
+    publicKey: string;
+    nodeKey: string;
+}>>;
+export declare function setPreferredManagementSigner(config: NodeSdkConfig, input: {
+    publicKeyHex: string;
+}): Promise<SdkResult<{
+    success: boolean;
+    publicKeyHex: string;
+    signerPublicKey: string;
+    nodeKey: string;
+    Nonce: number;
+    signedMessage: string;
+    clientSig: string;
+    fileName: string;
+}>>;
+//# sourceMappingURL=management-keys.d.ts.map

package/dist/detops/management-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"management-keys.d.ts","sourceRoot":"","sources":["../../src/detops/management-keys.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,qBAAqB,CAAC;AAGvD,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,qBAAqB,CAAC;AAoBnD,wBAAsB,mBAAmB,CACxC,MAAM,EAAE,aAAa,GACnB,OAAO,CAAC,SAAS,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAC,CAAC,CAAC,CAM5C;AAED,wBAAsB,6BAA6B,CAClD,MAAM,EAAE,aAAa,GACnB,OAAO,CACT,SAAS,CAAC;IACT,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,KAAK,CAAC;QACX,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,IAAI,EAAE,OAAO,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,wBAAwB,EAAE,OAAO,CAAC;QAClC,oBAAoB,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC,CAAC;CACH,CAAC,CACF,CAkCA;AAED,wBAAsB,6BAA6B,CAClD,MAAM,EAAE,aAAa,GACnB,OAAO,CACT,SAAS,CAAC;IACT,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;CACtB,CAAC,CACF,CAgDA;AAED,wBAAsB,mBAAmB,CACxC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE;IAAC,YAAY,EAAE,MAAM,CAAA;CAAC,GAC3B,OAAO,CACT,SAAS,CAAC;IACT,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CAChB,CAAC,CACF,CAkEA;AAED,wBAAsB,4BAA4B,CACjD,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE;IAAC,YAAY,EAAE,MAAM,CAAA;CAAC,GAC3B,OAAO,CACT,SAAS,CAAC;IACT,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CACjB,CAAC,CACF,CA2FA"}

package/dist/detops/management-keys.js

@@ -0,0 +1,216 @@
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import { generateKeyPairSync } from 'node:crypto';
+import { MPA_HOME_DIR } from '../config/paths.js';
+import { managementGet, managementPost } from '../api/management-api.js';
+import { EdDSAPubKeySchema, NodeIdSchema, NonceSchema } from '../schemas/extended.js';
+import { ensureLocalKeyPairForPublicKey, getPrivateKeyStatus, listLocalManagementPublicKeys, normalizeEd25519PublicKeyToHex, } from '../internal/ed25519/management-signing.js';
+import { buildClientSigManagementPostBody, fetchManagementKeyOptions, getPreferredManagementKeyHex, prepareSignedManagementRequest, } from '../internal/management-request-signing.js';
+function toError(reason) {
+    return new Error(reason);
+}
+export async function hasManagementSigner(config) {
+    const result = await managementGet(config, '/hasPublicMgtKey');
+    if (!result.ok) {
+        return result;
+    }
+    return { ok: true, data: { hasEdDSAKey: Boolean(result.data) } };
+}
+export async function listManagementSignersDetailed(config) {
+    const [keyOptions, preferred] = await Promise.all([
+        fetchManagementKeyOptions(config),
+        getPreferredManagementKeyHex(config),
+    ]);
+    if (!keyOptions.ok) {
+        return keyOptions;
+    }
+    const preferredSigner = preferred.ok ? preferred.data.publicKeyHex : undefined;
+    const localKeys = await listLocalManagementPublicKeys(MPA_HOME_DIR, toError);
+    const localFileByPub = new Map(localKeys
+        .filter(k => k.publicKeyHex)
+        .map(k => [k.publicKeyHex, k.fileName]));
+    const keys = await Promise.all(keyOptions.data.map(async (key) => {
+        const privateKeyStatus = await getPrivateKeyStatus(key, {
+            keyRoot: MPA_HOME_DIR,
+            toMcpApiError: toError,
+        });
+        const normalizedPublic = normalizeEd25519PublicKeyToHex(key.value, toError);
+        return {
+            ...key,
+            localFileName: localFileByPub.get(normalizedPublic),
+            localPrivateKeyAvailable: privateKeyStatus.available,
+            localPrivateKeyError: privateKeyStatus.reason,
+        };
+    }));
+    return { ok: true, data: { preferredSigner, keys } };
+}
+export async function createManagementSignerKeypair(config) {
+    const configured = await managementGet(config, '/getAllowedEd25519MgtKeys');
+    const currentKeyCount = configured.ok ? configured.data.length : 0;
+    const fileName = `added_key_${currentKeyCount}`;
+    const keyDir = path.join(MPA_HOME_DIR, 'management_keys');
+    await fs.mkdir(keyDir, { recursive: true });
+    const privateKeyPath = path.join(keyDir, fileName);
+    const publicKeyPath = `${privateKeyPath}.pub`;
+    try {
+        await fs.access(privateKeyPath);
+        return { ok: false, reason: 'Private key file already exists.' };
+    }
+    catch {
+        // expected
+    }
+    const { privateKey, publicKey } = generateKeyPairSync('ed25519');
+    const privatePem = privateKey.export({ format: 'pem', type: 'pkcs8' }).toString();
+    const publicJwk = publicKey.export({ format: 'jwk' });
+    if (!publicJwk.x) {
+        return {
+            ok: false,
+            reason: 'Failed to derive Ed25519 raw public key from generated keypair.',
+        };
+    }
+    const newPublicKey = Buffer.from(publicJwk.x, 'base64url').toString('hex');
+    const parsed = EdDSAPubKeySchema.safeParse(newPublicKey);
+    if (!parsed.success) {
+        return { ok: false, reason: 'Generated public key failed validation.' };
+    }
+    await fs.writeFile(privateKeyPath, privatePem, { mode: 0o600 });
+    await fs.writeFile(publicKeyPath, `${parsed.data}\n`, { mode: 0o644 });
+    return {
+        ok: true,
+        data: {
+            success: true,
+            fileName,
+            publicKey: parsed.data,
+            privateKeyPath,
+            publicKeyPath,
+        },
+    };
+}
+export async function addManagementSigner(config, input) {
+    let normalizedNewPublicKey;
+    try {
+        normalizedNewPublicKey = normalizeEd25519PublicKeyToHex(input.newPublicKey, toError);
+    }
+    catch (error) {
+        return {
+            ok: false,
+            reason: error instanceof Error ? error.message : String(error),
+        };
+    }
+    const parsedKey = EdDSAPubKeySchema.safeParse(normalizedNewPublicKey);
+    if (!parsedKey.success) {
+        return { ok: false, reason: 'Invalid new public key.' };
+    }
+    const signed = await prepareSignedManagementRequest(config, async ({ selectedSigningKey }) => {
+        if (normalizeEd25519PublicKeyToHex(selectedSigningKey.value, toError) ===
+            parsedKey.data) {
+            throw toError('Signer key cannot be the newly created key being added.');
+        }
+        const nodeKeyResult = await managementGet(config, '/getNodeKey');
+        if (!nodeKeyResult.ok) {
+            throw toError(nodeKeyResult.reason);
+        }
+        const nodeKeyParsed = NodeIdSchema.safeParse(nodeKeyResult.data);
+        if (!nodeKeyParsed.success) {
+            throw toError('Node ID response failed validation.');
+        }
+        return {
+            newPublicKey: parsedKey.data,
+            nodeKey: nodeKeyParsed.data,
+            Nonce: selectedSigningKey.nonce,
+            Sig: '',
+        };
+    });
+    if (!signed.ok) {
+        return signed;
+    }
+    const posted = await managementPost(config, '/addManagementKey', signed.data.body);
+    if (!posted.ok) {
+        return posted;
+    }
+    return {
+        ok: true,
+        data: {
+            success: true,
+            publicKey: parsedKey.data,
+            nodeKey: String(signed.data.unsignedBody.nodeKey),
+        },
+    };
+}
+export async function setPreferredManagementSigner(config, input) {
+    let normalized;
+    try {
+        normalized = normalizeEd25519PublicKeyToHex(input.publicKeyHex, toError);
+    }
+    catch (error) {
+        return {
+            ok: false,
+            reason: error instanceof Error ? error.message : String(error),
+        };
+    }
+    const parsedKey = EdDSAPubKeySchema.safeParse(normalized);
+    if (!parsedKey.success) {
+        return { ok: false, reason: 'Invalid public key hex.' };
+    }
+    const keyOptions = await fetchManagementKeyOptions(config);
+    if (!keyOptions.ok) {
+        return keyOptions;
+    }
+    const allowed = keyOptions.data.some(k => normalizeEd25519PublicKeyToHex(k.value, toError) === parsedKey.data);
+    if (!allowed) {
+        return {
+            ok: false,
+            reason: 'Preferred signer must already be in allowed management keys.',
+        };
+    }
+    let localMatch;
+    try {
+        localMatch = await ensureLocalKeyPairForPublicKey(parsedKey.data, {
+            keyRoot: MPA_HOME_DIR,
+            toMcpApiError: toError,
+        });
+    }
+    catch (error) {
+        return {
+            ok: false,
+            reason: error instanceof Error ? error.message : String(error),
+        };
+    }
+    const nodeKeyResult = await managementGet(config, '/getNodeKey');
+    if (!nodeKeyResult.ok) {
+        return nodeKeyResult;
+    }
+    const nodeKeyParsed = NodeIdSchema.safeParse(nodeKeyResult.data);
+    if (!nodeKeyParsed.success) {
+        return { ok: false, reason: 'Node ID response failed validation.' };
+    }
+    const signed = await prepareSignedManagementRequest(config, ({ selectedSigningKey }) => ({
+        nodeKey: nodeKeyParsed.data,
+        Nonce: selectedSigningKey.nonce,
+        publicKey: parsedKey.data,
+        Sig: '',
+    }));
+    if (!signed.ok) {
+        return signed;
+    }
+    const body = buildClientSigManagementPostBody(signed.data.unsignedBody, signed.data.signingMessage, signed.data.signature);
+    const posted = await managementPost(config, '/setPreferredSigner', body);
+    if (!posted.ok) {
+        return posted;
+    }
+    const nonceParsed = NonceSchema.safeParse(signed.data.unsignedBody.Nonce);
+    return {
+        ok: true,
+        data: {
+            success: true,
+            publicKeyHex: parsedKey.data,
+            signerPublicKey: normalizeEd25519PublicKeyToHex(signed.data.selectedSigningKey.value, toError),
+            nodeKey: nodeKeyParsed.data,
+            Nonce: nonceParsed.success ? nonceParsed.data : signed.data.selectedSigningKey.nonce,
+            signedMessage: signed.data.signingMessage,
+            clientSig: signed.data.signature,
+            fileName: localMatch.fileName,
+        },
+    };
+}
+//# sourceMappingURL=management-keys.js.map

package/dist/detops/management-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"management-keys.js","sourceRoot":"","sources":["../../src/detops/management-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,IAAI,EAAE,EAAC,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAC,mBAAmB,EAAC,MAAM,aAAa,CAAC;AAEhD,OAAO,EAAC,YAAY,EAAC,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAC,aAAa,EAAE,cAAc,EAAC,MAAM,0BAA0B,CAAC;AAEvE,OAAO,EAAC,iBAAiB,EAAE,YAAY,EAAE,WAAW,EAAC,MAAM,wBAAwB,CAAC;AACpF,OAAO,EACN,8BAA8B,EAC9B,mBAAmB,EACnB,6BAA6B,EAC7B,8BAA8B,GAC9B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACN,gCAAgC,EAChC,yBAAyB,EACzB,4BAA4B,EAC5B,8BAA8B,GAE9B,MAAM,2CAA2C,CAAC;AAEnD,SAAS,OAAO,CAAC,MAAc;IAC9B,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,MAAqB;IAErB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAU,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACxE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IACf,CAAC;IACD,OAAO,EAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAC,EAAC,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,MAAqB;IAerB,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjD,yBAAyB,CAAC,MAAM,CAAC;QACjC,4BAA4B,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACpB,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,MAAM,eAAe,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,cAAc,GAAG,IAAI,GAAG,CAC7B,SAAS;SACP,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;SAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAsB,EAAE,CAAC,CAAC,QAAQ,CAAU,CAAC,CAC3D,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAC,GAAG,EAAC,EAAE;QAC/B,MAAM,gBAAgB,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE;YACvD,OAAO,EAAE,YAAY;YACrB,aAAa,EAAE,OAAO;SACtB,CAAC,CAAC;QACH,MAAM,gBAAgB,GAAG,8BAA8B,CACtD,GAAG,CAAC,KAAK,EACT,OAAO,CACP,CAAC;QACF,OAAO;YACN,GAAG,GAAG;YACN,aAAa,EAAE,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACnD,wBAAwB,EAAE,gBAAgB,CAAC,SAAS;YACpD,oBAAoB,EAAE,gBAAgB,CAAC,MAAM;SAC7C,CAAC;IACH,CAAC,CAAC,CACF,CAAC;IACF,OAAO,EAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAC,eAAe,EAAE,IAAI,EAAC,EAAC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,MAAqB;IAUrB,MAAM,UAAU,GAAG,MAAM,aAAa,CACrC,MAAM,EACN,2BAA2B,CAC3B,CAAC;IACF,MAAM,eAAe,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,aAAa,eAAe,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;IAC1D,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAC,SAAS,EAAE,IAAI,EAAC,CAAC,CAAC;IAE1C,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,GAAG,cAAc,MAAM,CAAC;IAE9C,IAAI,CAAC;QACJ,MAAM,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAChC,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACR,WAAW;IACZ,CAAC;IAED,MAAM,EAAC,UAAU,EAAE,SAAS,EAAC,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,EAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChF,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,EAAC,MAAM,EAAE,KAAK,EAAC,CAAiB,CAAC;IACpE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAClB,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,iEAAiE;SACzE,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,EAAC,CAAC;IACvE,CAAC;IAED,MAAM,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,UAAU,EAAE,EAAC,IAAI,EAAE,KAAK,EAAC,CAAC,CAAC;IAC9D,MAAM,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,EAAC,IAAI,EAAE,KAAK,EAAC,CAAC,CAAC;IAErE,OAAO;QACN,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACL,OAAO,EAAE,IAAI;YACb,QAAQ;YACR,SAAS,EAAE,MAAM,CAAC,IAAI;YACtB,cAAc;YACd,aAAa;SACb;KACD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,MAAqB,EACrB,KAA6B;IAQ7B,IAAI,sBAA8B,CAAC;IACnC,IAAI,CAAC;QACJ,sBAAsB,GAAG,8BAA8B,CACtD,KAAK,CAAC,YAAY,EAClB,OAAO,CACP,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;IACtE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAC,CAAC;IACvD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAClD,MAAM,EACN,KAAK,EAAE,EAAC,kBAAkB,EAAC,EAAE,EAAE;QAC9B,IACC,8BAA8B,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC;YACjE,SAAS,CAAC,IAAI,EACb,CAAC;YACF,MAAM,OAAO,CACZ,yDAAyD,CACzD,CAAC;QACH,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,aAAa,CAAS,MAAM,EAAE,aAAa,CAAC,CAAC;QACzE,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACvB,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,aAAa,GAAG,YAAY,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACjE,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,OAAO,CAAC,qCAAqC,CAAC,CAAC;QACtD,CAAC;QACD,OAAO;YACN,YAAY,EAAE,SAAS,CAAC,IAAI;YAC5B,OAAO,EAAE,aAAa,CAAC,IAAI;YAC3B,KAAK,EAAE,kBAAkB,CAAC,KAAK;YAC/B,GAAG,EAAE,EAAE;SACP,CAAC;IACH,CAAC,CACD,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAClC,MAAM,EACN,mBAAmB,EACnB,MAAM,CAAC,IAAI,CAAC,IAAI,CAChB,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IACf,CAAC;IAED,OAAO;QACN,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACL,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,SAAS,CAAC,IAAI;YACzB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;SACjD;KACD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,MAAqB,EACrB,KAA6B;IAa7B,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,UAAU,GAAG,8BAA8B,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC1D,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAC,CAAC;IACvD,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACpB,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CACnC,CAAC,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,SAAS,CAAC,IAAI,CACxE,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,8DAA8D;SACtE,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC;IACf,IAAI,CAAC;QACJ,UAAU,GAAG,MAAM,8BAA8B,CAAC,SAAS,CAAC,IAAI,EAAE;YACjE,OAAO,EAAE,YAAY;YACrB,aAAa,EAAE,OAAO;SACtB,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,aAAa,CAAS,MAAM,EAAE,aAAa,CAAC,CAAC;IACzE,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACvB,OAAO,aAAa,CAAC;IACtB,CAAC;IACD,MAAM,aAAa,GAAG,YAAY,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACjE,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,EAAC,CAAC;IACnE,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAClD,MAAM,EACN,CAAC,EAAC,kBAAkB,EAAC,EAAE,EAAE,CAAC,CAAC;QAC1B,OAAO,EAAE,aAAa,CAAC,IAAI;QAC3B,KAAK,EAAE,kBAAkB,CAAC,KAAK;QAC/B,SAAS,EAAE,SAAS,CAAC,IAAI;QACzB,GAAG,EAAE,EAAE;KACP,CAAC,CACF,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IACf,CAAC;IAED,MAAM,IAAI,GAAG,gCAAgC,CAC5C,MAAM,CAAC,IAAI,CAAC,YAAY,EACxB,MAAM,CAAC,IAAI,CAAC,cAAc,EAC1B,MAAM,CAAC,IAAI,CAAC,SAAS,CACrB,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAS,MAAM,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC;IACjF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IACf,CAAC;IAED,MAAM,WAAW,GAAG,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC1E,OAAO;QACN,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACL,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,SAAS,CAAC,IAAI;YAC5B,eAAe,EAAE,8BAA8B,CAC9C,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,EACpC,OAAO,CACP;YACD,OAAO,EAAE,aAAa,CAAC,IAAI;YAC3B,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK;YACpF,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;YACzC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;YAChC,QAAQ,EAAE,UAAU,CAAC,QAAQ;SAC7B;KACD,CAAC;AACH,CAAC"}