@helios-lang/contract-utils 0.3.22 → 0.3.23

package/README.md

@@ -46,3 +46,9 @@ Generated JS/TS exports `$debugger: {projectId,name,apiKey,endpoint,sources}` an
 With the corresponding tx-utils release and ledger evaluation-observer support, `spendWithRedeemer()`, minting/staking methods, and attached programs automatically deliver failed builds to that project. No explicit `makeDebuggerService()` call is needed. `makeTxBuilder({isMainnet, debugger:false})` disables automatic capture; an explicit debugger service overrides bundle configuration. Unannotated bundles retain their existing behavior.
 
 The API key is intentionally embedded in generated bundles, including browser bundles, and grants upload **and read** access to that project's feed. Use project-specific keys appropriate for that distribution. The key is sent in the authorization header, not in capture payloads. Omitting `--project` embeds no debugger credentials.
+
+### Offline wallet generation
+
+`helios wallet create --network preprod` prints JSON containing a cryptographically random 24-word recovery phrase and its base address. It does not contact a service. Supported networks are `preprod` (default), `preview`, and `mainnet`.
+
+Use `helios wallet create --network preprod --out wallet.json` to write a new private file instead of printing the phrase. Existing files are never overwritten. The output phrase can be pasted into a demo’s ignored `.env.local` file.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@helios-lang/contract-utils",
-  "version": "0.3.22",
+  "version": "0.3.23",
   "description": "Convenience and type-safety utilities for using Helios validators from within Typescript",
   "main": "src/index.js",
   "types": "types/index.d.ts",
@@ -42,6 +42,7 @@
     "@helios-lang/compiler-utils": "^0.5.15",
     "@helios-lang/crypto": "0.2.3",
     "@helios-lang/ledger": "^0.7.8",
+    "@helios-lang/tx-utils": "^0.6.41",
     "@helios-lang/type-utils": "^0.3.0",
     "@helios-lang/uplc": "^0.7.15",
     "open": "^10.2.0"

package/src/cli/config.mjs

@@ -13,7 +13,7 @@ import { randomUUID } from "node:crypto"
 import { execFile } from "node:child_process"
 import { promisify } from "node:util"
 const exec = promisify(execFile)
-async function windowsAcl(path, directory, set = false) {
+export async function windowsAcl(path, directory, set = false) {
     // Pass paths through the environment, never interpolate them into PowerShell.
     const script = `
 $ErrorActionPreference = 'Stop'

package/src/cli/wallet-file.mjs

@@ -0,0 +1,14 @@
+import { open, unlink } from "node:fs/promises"
+import { windowsAcl } from "./config.mjs"
+export async function writePrivateWallet(path, json) {
+    const file = await open(path, "wx", 0o600)
+    try {
+        if (process.platform === "win32") await windowsAcl(path, false, true)
+        await file.writeFile(json, "utf8")
+    } catch (error) {
+        await file.close()
+        await unlink(path)
+        throw error
+    }
+    await file.close()
+}

package/src/cli/wallet.mjs

@@ -0,0 +1,51 @@
+import { randomBytes } from "node:crypto"
+import { parseArgs } from "node:util"
+import { makeRootPrivateKey } from "@helios-lang/tx-utils"
+import { makeShelleyAddress } from "@helios-lang/ledger"
+
+export function createWallet(network = "preprod") {
+    if (!["preprod", "preview", "mainnet"].includes(network))
+        throw new Error("Network must be preprod, preview, or mainnet")
+    const key = makeRootPrivateKey([...randomBytes(32)])
+    const address = makeShelleyAddress(
+        network === "mainnet",
+        key.deriveSpendingKey().derivePubKey().hash(),
+        key.deriveStakingKey().derivePubKey().hash()
+    )
+    return {
+        network,
+        phrase: key.toPhrase().join(" "),
+        address: address.toBech32()
+    }
+}
+export async function walletCommand(args) {
+    const [command, ...rest] = args
+    if (["--help", "-h", "help"].includes(command)) {
+        console.log(
+            "helios wallet create [--network preprod|preview|mainnet] [--out wallet.json]\nGenerates a 24-word recovery phrase and address offline. Without --out, prints the secret phrase as JSON. --out creates a new owner-only file and never overwrites an existing file."
+        )
+        return
+    }
+    if (command !== "create")
+        throw new Error(
+            "Usage: helios wallet create [--network preprod|preview|mainnet] [--out wallet.json]"
+        )
+    const { values } = parseArgs({
+        args: rest,
+        options: {
+            network: { type: "string", default: "preprod" },
+            out: { type: "string" }
+        }
+    })
+    const wallet = createWallet(values.network)
+    const json = JSON.stringify(wallet, null, 2) + "\n"
+    if (values.out !== undefined) {
+        if (!values.out.trim()) throw new Error("--out requires a file path")
+        // Reuse credential-file ACL protection on Windows, before storing secrets.
+        const { writePrivateWallet } = await import("./wallet-file.mjs")
+        await writePrivateWallet(values.out, json)
+        console.log(
+            `Created ${wallet.network} wallet: ${wallet.address}\nRecovery phrase saved in ${values.out}`
+        )
+    } else console.log(json)
+}

package/src/helios.mjs

@@ -7,6 +7,9 @@ try {
         await compile(
             args.map((arg) => (["--help", "-h"].includes(arg) ? "help" : arg))
         )
+    } else if (command === "wallet") {
+        const { walletCommand } = await import("./cli/wallet.mjs")
+        await walletCommand(args)
     } else if (command === "login") {
         if (args.some((arg) => arg !== "--no-browser"))
             throw new Error("Usage: helios login [--no-browser]")
@@ -38,7 +41,7 @@ try {
         )
     } else if (!command || ["--help", "-h", "help"].includes(command)) {
         console.log(
-            "Helios CLI\n\n  helios compile [options]  Compile contracts (same options as hl2ts)\n  helios login [--no-browser]  Install project API keys through the Console\n  helios --version"
+            "Helios CLI\n\n  helios compile [options]  Compile contracts (same options as hl2ts)\n  helios login [--no-browser]  Install project API keys through the Console\n  helios wallet create [--network preprod] [--out wallet.json]  Generate a wallet offline\n  helios --version"
         )
     } else throw new Error(`Unknown command: ${command}. Run helios --help.`)
 } catch (error) {

package/types/cli/config.d.mts

@@ -1,3 +1,4 @@
+export function windowsAcl(path: any, directory: any, set?: boolean): Promise<void>;
 export function configPath(platform?: NodeJS.Platform, env?: NodeJS.ProcessEnv, home?: string): string;
 export function readConfig(path?: string): Promise<any>;
 export function installProjects(wallet: any, projects: any, endpoint: any, path?: string): Promise<string>;

package/types/cli/config.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.mts","sourceRoot":"","sources":["../../src/cli/config.mjs"],"names":[],"mappings":"AAiDA,uGAcC;AAqBD,wDAaC;AACD,2GA2DC"}
+{"version":3,"file":"config.d.mts","sourceRoot":"","sources":["../../src/cli/config.mjs"],"names":[],"mappings":"AAeA,oFAiCC;AACD,uGAcC;AAqBD,wDAaC;AACD,2GA2DC"}