@jaw.id/cli 0.0.2

package/README.md

@@ -0,0 +1,239 @@
+# @jaw.id/cli
+
+CLI + MCP Server for JAW.id smart accounts -- built for humans and AI agents.
+
+Uses browser-based passkey authentication via keys.jaw.id -- no private key management needed. Exposes a single generic `jaw_rpc` MCP tool that supports all EIP-1193 wallet methods.
+
+## Installation
+
+```bash
+# Run directly with npx
+npx @jaw.id/cli <command>
+
+# Install globally
+npm install -g @jaw.id/cli
+```
+
+## Quick Start
+
+```bash
+# 1. Configure API key and default chain
+jaw config set apiKey=YOUR_API_KEY defaultChain=8453
+
+# 2. Connect your wallet (opens browser for passkey auth)
+jaw rpc call wallet_connect
+
+# 3. Send a transaction
+jaw rpc call wallet_sendCalls '{"calls":[{"to":"0x...","value":"0x0"}]}'
+
+# 4. Check transaction status
+jaw rpc call wallet_getCallsStatus '{"id":"0xBatchId"}'
+
+# 5. When done, stop the background daemon
+jaw disconnect
+```
+
+## How It Works
+
+The CLI uses a persistent background daemon with a WebSocket bridge to the browser. All RPC methods are routed through the same path:
+
+1. CLI spawns a background WebSocket daemon on `127.0.0.1` (if not already running)
+2. Daemon opens your browser to `keys.jaw.id/cli-bridge`
+3. Browser page runs the JAW SDK and connects back to the daemon via WebSocket
+4. CLI sends RPC requests to the daemon, which forwards them to the browser SDK
+5. Browser SDK executes the request (prompting for passkey signing when needed)
+6. Response is routed back through the daemon to the CLI
+
+The daemon stays alive across CLI commands so you only authenticate once. It auto-shuts down after 30 minutes of inactivity, or you can stop it manually with `jaw disconnect`.
+
+## CLI Commands
+
+### `jaw rpc call <method> [params]`
+
+Execute any JAW.id RPC method via the browser bridge.
+
+```bash
+# Connect wallet
+jaw rpc call wallet_connect
+
+# Send transaction
+jaw rpc call wallet_sendCalls '{"calls":[{"to":"0x...","value":"0x0","data":"0x..."}]}'
+
+# Sign a message
+jaw rpc call personal_sign '"Hello World"'
+
+# Sign typed data (EIP-712)
+jaw rpc call eth_signTypedData_v4 '["0xYOUR_ADDRESS", "{\"types\":{...},\"primaryType\":\"...\",\"domain\":{...},\"message\":{...}}"]'
+
+# Grant permissions
+jaw rpc call wallet_grantPermissions '{"expiry":1750000000,"spender":"0x...","permissions":{...}}'
+
+# Get assets
+jaw rpc call wallet_getAssets
+
+# Get chain ID
+jaw rpc call eth_chainId
+```
+
+| Flag | Description | Default |
+|------|-------------|---------|
+| `-o, --output` | Output format: `json` or `human` | `human` |
+| `-c, --chain` | Chain ID | config default |
+| `--api-key` | JAW API key | config/env |
+| `-t, --timeout` | Request timeout (seconds) | `120` |
+| `-y, --yes` | Skip confirmations | `false` |
+| `-q, --quiet` | Suppress non-essential output | `false` |
+
+### `jaw config show`
+
+Display current configuration (API key redacted).
+
+```bash
+jaw config show
+jaw config show --output json
+```
+
+### `jaw config set`
+
+Set one or more configuration values.
+
+```bash
+jaw config set apiKey=your-api-key defaultChain=8453
+jaw config set ens=yourdomain.eth paymasterUrl=https://paymaster.example.com
+jaw config set keysUrl=https://keys.jaw.id
+
+# Legacy syntax also supported
+jaw config set apiKey your-api-key
+```
+
+### `jaw disconnect`
+
+Stop the background bridge daemon and close the browser session.
+
+```bash
+jaw disconnect
+```
+
+## Testing Guide
+
+Full end-to-end testing sequence:
+
+```bash
+# 0. Setup
+jaw config set apiKey=YOUR_API_KEY defaultChain=1
+
+# 1. Connect wallet (opens browser, daemon starts)
+jaw rpc call wallet_connect
+
+# 2. Verify connection
+jaw rpc call eth_accounts
+jaw rpc call eth_chainId
+jaw rpc call net_version
+
+# 3. Read-only calls
+jaw rpc call wallet_getAssets
+jaw rpc call wallet_getCapabilities
+jaw rpc call wallet_getPermissions
+jaw rpc call wallet_getCallsHistory
+
+# 4. Sign a message
+jaw rpc call personal_sign '"Hello from JAW CLI"'
+
+# 5. Sign typed data
+jaw rpc call eth_signTypedData_v4 '["0xYOUR_ADDRESS", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"}],\"Person\":[{\"name\":\"name\",\"type\":\"string\"}]},\"primaryType\":\"Person\",\"domain\":{\"name\":\"Test\"},\"message\":{\"name\":\"Alice\"}}"]'
+
+# 6. Send transaction
+jaw rpc call wallet_sendCalls '{"calls":[{"to":"0x0000000000000000000000000000000000000000","value":"0x0","data":"0x"}]}'
+
+# 7. Switch chain
+jaw rpc call wallet_switchEthereumChain '[{"chainId":"0x2105"}]'
+jaw rpc call eth_chainId  # verify: should return 0x2105
+
+# 8. Grant permissions
+jaw rpc call wallet_grantPermissions '{"expiry":1750000000,"spender":"0x0000000000000000000000000000000000000001","permissions":{"calls":[{"target":"0x3232323232323232323232323232323232323232","selector":"0xe0e0e0e0"}],"spends":[{"token":"0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE","allowance":"0x2386F26FC10000","unit":"day","multiplier":1}]}}'
+
+# 9. Verify permissions
+jaw rpc call wallet_getPermissions
+
+# 10. Revoke permissions (use permissionId from step 9)
+jaw rpc call wallet_revokePermissions '{"id":"0xPERMISSION_ID_FROM_STEP_9"}'
+
+# 11. Disconnect
+jaw rpc call wallet_disconnect
+jaw rpc call eth_accounts  # should return []
+
+# 12. Stop daemon
+jaw disconnect
+```
+
+## MCP Server (for AI Agents)
+
+Start the MCP server:
+
+```bash
+jaw mcp
+```
+
+### MCP Configuration
+
+**Claude Code** (`~/.claude.json`):
+
+```json
+{
+  "mcpServers": {
+    "jaw": {
+      "command": "npx",
+      "args": ["@jaw.id/cli", "mcp"],
+      "env": {
+        "JAW_API_KEY": "your-api-key"
+      }
+    }
+  }
+}
+```
+
+### MCP Tools
+
+| Tool | Description |
+|------|-------------|
+| `jaw_rpc` | Execute any JAW.id wallet RPC method. Supports all EIP-1193 methods. Opens browser for passkey signing when needed. |
+| `jaw_config_show` | Show current CLI configuration (API key redacted). |
+| `jaw_config_set` | Set a CLI configuration value. |
+
+### Example Agent Usage
+
+```
+Agent: jaw_rpc({ method: "wallet_sendCalls", params: { calls: [{ to: "0x...", value: "0x0" }] } })
+  -> Daemon forwards to browser -> user signs with passkey -> result returned to agent
+```
+
+## Environment Variables
+
+| Variable | Description |
+|----------|-------------|
+| `JAW_API_KEY` | JAW API key |
+| `JAW_CHAIN_ID` | Default chain ID |
+| `JAW_OUTPUT` | Output format (`json` or `human`) |
+
+## Configuration
+
+Config file: `~/.jaw/config.json`
+
+```json
+{
+  "apiKey": "your-api-key",
+  "defaultChain": 8453,
+  "keysUrl": "https://keys.jaw.id",
+  "paymasterUrl": "https://paymaster.example.com",
+  "ens": "yourdomain.eth"
+}
+```
+
+The daemon also writes runtime state to `~/.jaw/`:
+
+| File | Purpose |
+|------|---------|
+| `config.json` | User configuration (mode 0600) |
+| `bridge.json` | Active daemon connection info (port, token, pid) |
+| `session.json` | Cached session state |
+| `daemon.log` | Daemon stdout/stderr for debugging |

package/bin/run.js

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+
+import { execute } from '@oclif/core';
+
+await execute({ dir: import.meta.url });

package/dist/base-command.js

@@ -0,0 +1,124 @@
+import { Command, Flags } from '@oclif/core';
+import * as fs from 'fs';
+import * as path from 'path';
+import * as os from 'os';
+
+// src/base-command.ts
+var JAW_DIR = path.join(os.homedir(), ".jaw");
+var PATHS = {
+  config: path.join(JAW_DIR, "config.json"),
+  session: path.join(JAW_DIR, "session.json"),
+  bridge: path.join(JAW_DIR, "bridge.json"),
+  daemonLog: path.join(JAW_DIR, "daemon.log")
+};
+
+// src/lib/config.ts
+function loadConfig() {
+  if (!fs.existsSync(PATHS.config)) {
+    return {};
+  }
+  const raw = fs.readFileSync(PATHS.config, "utf-8");
+  try {
+    return JSON.parse(raw);
+  } catch {
+    throw new Error(
+      `Config file at ${PATHS.config} is not valid JSON. Run \`jaw config set apiKey=<key>\` to reset it.`
+    );
+  }
+}
+
+// src/lib/output.ts
+function formatOutput(data, format) {
+  if (format === "json") {
+    return JSON.stringify(data, replaceBigInt, 2);
+  }
+  return formatHuman(data);
+}
+function replaceBigInt(_key, value) {
+  if (typeof value === "bigint") {
+    return value.toString();
+  }
+  return value;
+}
+function formatHuman(data, indent = 0) {
+  if (data === null || data === void 0) {
+    return "null";
+  }
+  if (typeof data === "string" || typeof data === "number" || typeof data === "boolean" || typeof data === "bigint") {
+    return String(data);
+  }
+  if (Array.isArray(data)) {
+    if (data.length === 0) return "(empty)";
+    return data.map((item, i) => `${i + 1}. ${formatHuman(item, indent + 2)}`).join("\n");
+  }
+  if (typeof data === "object") {
+    const entries = Object.entries(data);
+    if (entries.length === 0) return "(empty)";
+    const pad = " ".repeat(indent);
+    const maxKeyLen = Math.max(...entries.map(([k]) => k.length));
+    return entries.map(([key, val]) => {
+      const paddedKey = key.padEnd(maxKeyLen);
+      const valStr = typeof val === "object" && val !== null ? "\n" + formatHuman(val, indent + 2) : String(val);
+      return `${pad}${paddedKey}  ${valStr}`;
+    }).join("\n");
+  }
+  return String(data);
+}
+
+// src/base-command.ts
+var BaseCommand = class extends Command {
+  static baseFlags = {
+    output: Flags.string({
+      char: "o",
+      description: "Output format",
+      options: ["json", "human"],
+      default: "human",
+      env: "JAW_OUTPUT"
+    }),
+    chain: Flags.integer({
+      char: "c",
+      description: "Chain ID",
+      env: "JAW_CHAIN_ID"
+    }),
+    "api-key": Flags.string({
+      description: "JAW API key",
+      env: "JAW_API_KEY"
+    }),
+    yes: Flags.boolean({
+      char: "y",
+      description: "Skip confirmations (for AI agents)",
+      default: false
+    }),
+    quiet: Flags.boolean({
+      char: "q",
+      description: "Suppress non-essential output",
+      default: false
+    })
+  };
+  resolveApiKey(flags) {
+    const apiKey = flags["api-key"] ?? loadConfig().apiKey;
+    if (!apiKey) {
+      this.error(
+        "API key required. Set via --api-key, JAW_API_KEY env, or `jaw config set apiKey <key>`"
+      );
+    }
+    return apiKey;
+  }
+  resolveChainId(flags) {
+    const chainId = flags.chain ?? loadConfig().defaultChain;
+    if (!chainId) {
+      this.error(
+        "Chain ID required. Set via --chain, JAW_CHAIN_ID env, or `jaw config set defaultChain <id>`"
+      );
+    }
+    return chainId;
+  }
+  outputResult(data, format) {
+    const output = formatOutput(data, format);
+    this.log(output);
+  }
+};
+
+export { BaseCommand };
+//# sourceMappingURL=base-command.js.map
+//# sourceMappingURL=base-command.js.map

package/dist/base-command.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/paths.ts","../src/lib/config.ts","../src/lib/output.ts","../src/base-command.ts"],"names":[],"mappings":";;;;;;AAGA,IAAM,OAAA,GAAe,IAAA,CAAA,IAAA,CAAQ,EAAA,CAAA,OAAA,EAAQ,EAAG,MAAM,CAAA;AAEvC,IAAM,KAAA,GAAQ;AAAA,EAEnB,MAAA,EAAa,IAAA,CAAA,IAAA,CAAK,OAAA,EAAS,aAAa,CAAA;AAAA,EACxC,OAAA,EAAc,IAAA,CAAA,IAAA,CAAK,OAAA,EAAS,cAAc,CAAA;AAAA,EAC1C,MAAA,EAAa,IAAA,CAAA,IAAA,CAAK,OAAA,EAAS,aAAa,CAAA;AAAA,EACxC,SAAA,EAAgB,IAAA,CAAA,IAAA,CAAK,OAAA,EAAS,YAAY;AAC5C,CAAA;;;ACDO,SAAS,UAAA,GAAwB;AACtC,EAAA,IAAI,CAAI,EAAA,CAAA,UAAA,CAAW,KAAA,CAAM,MAAM,CAAA,EAAG;AAChC,IAAA,OAAO,EAAC;AAAA,EACV;AACA,EAAA,MAAM,GAAA,GAAS,EAAA,CAAA,YAAA,CAAa,KAAA,CAAM,MAAA,EAAQ,OAAO,CAAA;AACjD,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,EACvB,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,eAAA,EAAkB,MAAM,MAAM,CAAA,oEAAA;AAAA,KAChC;AAAA,EACF;AACF;;;ACpBO,SAAS,YAAA,CAAa,MAAe,MAAA,EAA8B;AACxE,EAAA,IAAI,WAAW,MAAA,EAAQ;AACrB,IAAA,OAAO,IAAA,CAAK,SAAA,CAAU,IAAA,EAAM,aAAA,EAAe,CAAC,CAAA;AAAA,EAC9C;AACA,EAAA,OAAO,YAAY,IAAI,CAAA;AACzB;AAEA,SAAS,aAAA,CAAc,MAAc,KAAA,EAAyB;AAC5D,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,OAAO,MAAM,QAAA,EAAS;AAAA,EACxB;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,WAAA,CAAY,IAAA,EAAe,MAAA,GAAS,CAAA,EAAW;AACtD,EAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,IAAA,KAAS,MAAA,EAAW;AACvC,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,IAAI,OAAO,IAAA,KAAS,QAAA,IAAY,OAAO,IAAA,KAAS,QAAA,IAAY,OAAO,IAAA,KAAS,SAAA,IAAa,OAAO,IAAA,KAAS,QAAA,EAAU;AACjH,IAAA,OAAO,OAAO,IAAI,CAAA;AAAA,EACpB;AAEA,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,EAAG;AACvB,IAAA,IAAI,IAAA,CAAK,MAAA,KAAW,CAAA,EAAG,OAAO,SAAA;AAC9B,IAAA,OAAO,KAAK,GAAA,CAAI,CAAC,IAAA,EAAM,CAAA,KAAM,GAAG,CAAA,GAAI,CAAC,CAAA,EAAA,EAAK,WAAA,CAAY,MAAM,MAAA,GAAS,CAAC,CAAC,CAAA,CAAE,CAAA,CAAE,KAAK,IAAI,CAAA;AAAA,EACtF;AAEA,EAAA,IAAI,OAAO,SAAS,QAAA,EAAU;AAC5B,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,IAA+B,CAAA;AAC9D,IAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,SAAA;AACjC,IAAA,MAAM,GAAA,GAAM,GAAA,CAAI,MAAA,CAAO,MAAM,CAAA;AAC7B,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,GAAA,CAAI,GAAG,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAC,CAAC,CAAA,KAAM,CAAA,CAAE,MAAM,CAAC,CAAA;AAC5D,IAAA,OAAO,QACJ,GAAA,CAAI,CAAC,CAAC,GAAA,EAAK,GAAG,CAAA,KAAM;AACnB,MAAA,MAAM,SAAA,GAAY,GAAA,CAAI,MAAA,CAAO,SAAS,CAAA;AACtC,MAAA,MAAM,MAAA,GAAS,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,KAAQ,IAAA,GAC9C,IAAA,GAAO,WAAA,CAAY,GAAA,EAAK,MAAA,GAAS,CAAC,CAAA,GAClC,OAAO,GAAG,CAAA;AACd,MAAA,OAAO,CAAA,EAAG,GAAG,CAAA,EAAG,SAAS,KAAK,MAAM,CAAA,CAAA;AAAA,IACtC,CAAC,CAAA,CACA,IAAA,CAAK,IAAI,CAAA;AAAA,EACd;AAEA,EAAA,OAAO,OAAO,IAAI,CAAA;AACpB;;;AC1CO,IAAe,WAAA,GAAf,cAAmC,OAAA,CAAQ;AAAA,EAChD,OAAgB,SAAA,GAAY;AAAA,IAC1B,MAAA,EAAQ,MAAM,MAAA,CAAO;AAAA,MACnB,IAAA,EAAM,GAAA;AAAA,MACN,WAAA,EAAa,eAAA;AAAA,MACb,OAAA,EAAS,CAAC,MAAA,EAAQ,OAAO,CAAA;AAAA,MACzB,OAAA,EAAS,OAAA;AAAA,MACT,GAAA,EAAK;AAAA,KACN,CAAA;AAAA,IACD,KAAA,EAAO,MAAM,OAAA,CAAQ;AAAA,MACnB,IAAA,EAAM,GAAA;AAAA,MACN,WAAA,EAAa,UAAA;AAAA,MACb,GAAA,EAAK;AAAA,KACN,CAAA;AAAA,IACD,SAAA,EAAW,MAAM,MAAA,CAAO;AAAA,MACtB,WAAA,EAAa,aAAA;AAAA,MACb,GAAA,EAAK;AAAA,KACN,CAAA;AAAA,IACD,GAAA,EAAK,MAAM,OAAA,CAAQ;AAAA,MACjB,IAAA,EAAM,GAAA;AAAA,MACN,WAAA,EAAa,oCAAA;AAAA,MACb,OAAA,EAAS;AAAA,KACV,CAAA;AAAA,IACD,KAAA,EAAO,MAAM,OAAA,CAAQ;AAAA,MACnB,IAAA,EAAM,GAAA;AAAA,MACN,WAAA,EAAa,+BAAA;AAAA,MACb,OAAA,EAAS;AAAA,KACV;AAAA,GACH;AAAA,EAEU,cAAc,KAAA,EAAuC;AAC7D,IAAA,MAAM,MAAA,GAAS,KAAA,CAAM,SAAS,CAAA,IAAK,YAAW,CAAE,MAAA;AAChD,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,IAAA,CAAK,KAAA;AAAA,QACH;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEU,eAAe,KAAA,EAAmC;AAC1D,IAAA,MAAM,OAAA,GAAU,KAAA,CAAM,KAAA,IAAS,UAAA,EAAW,CAAE,YAAA;AAC5C,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,IAAA,CAAK,KAAA;AAAA,QACH;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEU,YAAA,CAAa,MAAe,MAAA,EAA4B;AAChE,IAAA,MAAM,MAAA,GAAS,YAAA,CAAa,IAAA,EAAM,MAAM,CAAA;AACxC,IAAA,IAAA,CAAK,IAAI,MAAM,CAAA;AAAA,EACjB;AACF","file":"base-command.js","sourcesContent":["import * as path from \"node:path\";\nimport * as os from \"node:os\";\n\nconst JAW_DIR = path.join(os.homedir(), \".jaw\");\n\nexport const PATHS = {\n  root: JAW_DIR,\n  config: path.join(JAW_DIR, \"config.json\"),\n  session: path.join(JAW_DIR, \"session.json\"),\n  bridge: path.join(JAW_DIR, \"bridge.json\"),\n  daemonLog: path.join(JAW_DIR, \"daemon.log\"),\n} as const;\n","import * as fs from \"node:fs\";\nimport { PATHS } from \"./paths.js\";\nimport type { JawConfig } from \"./types.js\";\nimport { isValidKeysUrl } from \"./validation.js\";\n\nexport function ensureDir(dir: string): void {\n  fs.mkdirSync(dir, { recursive: true, mode: 0o700 });\n  fs.chmodSync(dir, 0o700);\n}\n\nexport function loadConfig(): JawConfig {\n  if (!fs.existsSync(PATHS.config)) {\n    return {};\n  }\n  const raw = fs.readFileSync(PATHS.config, \"utf-8\");\n  try {\n    return JSON.parse(raw) as JawConfig;\n  } catch {\n    throw new Error(\n      `Config file at ${PATHS.config} is not valid JSON. Run \\`jaw config set apiKey=<key>\\` to reset it.`,\n    );\n  }\n}\n\nexport function saveConfig(config: JawConfig): void {\n  ensureDir(PATHS.root);\n  fs.writeFileSync(PATHS.config, JSON.stringify(config, null, 2) + \"\\n\", {\n    encoding: \"utf-8\",\n    mode: 0o600,\n  });\n}\n\nexport function redactConfig(config: JawConfig): Record<string, unknown> {\n  return {\n    ...config,\n    apiKey: config.apiKey ? `${config.apiKey.slice(0, 8)}...` : undefined,\n  };\n}\n\nexport function getConfigValue(\n  key: keyof JawConfig,\n): string | number | undefined {\n  const config = loadConfig();\n  return config[key];\n}\n\nexport function setConfigValue(\n  key: keyof JawConfig,\n  value: string | number,\n): void {\n  if (\n    key === \"keysUrl\" &&\n    typeof value === \"string\" &&\n    !isValidKeysUrl(value)\n  ) {\n    throw new Error(\n      `Untrusted keysUrl: ${value}. Must be a *.jaw.id domain (HTTPS) or localhost.`,\n    );\n  }\n  const config = loadConfig();\n  const updated = { ...config, [key]: value };\n  saveConfig(updated);\n}\n","import type { OutputFormat } from './types.js';\n\nexport function formatOutput(data: unknown, format: OutputFormat): string {\n  if (format === 'json') {\n    return JSON.stringify(data, replaceBigInt, 2);\n  }\n  return formatHuman(data);\n}\n\nfunction replaceBigInt(_key: string, value: unknown): unknown {\n  if (typeof value === 'bigint') {\n    return value.toString();\n  }\n  return value;\n}\n\nfunction formatHuman(data: unknown, indent = 0): string {\n  if (data === null || data === undefined) {\n    return 'null';\n  }\n\n  if (typeof data === 'string' || typeof data === 'number' || typeof data === 'boolean' || typeof data === 'bigint') {\n    return String(data);\n  }\n\n  if (Array.isArray(data)) {\n    if (data.length === 0) return '(empty)';\n    return data.map((item, i) => `${i + 1}. ${formatHuman(item, indent + 2)}`).join('\\n');\n  }\n\n  if (typeof data === 'object') {\n    const entries = Object.entries(data as Record<string, unknown>);\n    if (entries.length === 0) return '(empty)';\n    const pad = ' '.repeat(indent);\n    const maxKeyLen = Math.max(...entries.map(([k]) => k.length));\n    return entries\n      .map(([key, val]) => {\n        const paddedKey = key.padEnd(maxKeyLen);\n        const valStr = typeof val === 'object' && val !== null\n          ? '\\n' + formatHuman(val, indent + 2)\n          : String(val);\n        return `${pad}${paddedKey}  ${valStr}`;\n      })\n      .join('\\n');\n  }\n\n  return String(data);\n}\n\nexport function printTable(rows: Record<string, unknown>[]): string {\n  if (rows.length === 0) return '(no results)';\n\n  const keys = Object.keys(rows[0]);\n  const widths = keys.map(k =>\n    Math.max(k.length, ...rows.map(r => String(r[k] ?? '').length))\n  );\n\n  const header = keys.map((k, i) => k.padEnd(widths[i])).join('  ');\n  const separator = widths.map(w => '-'.repeat(w)).join('  ');\n  const body = rows.map(r =>\n    keys.map((k, i) => String(r[k] ?? '').padEnd(widths[i])).join('  ')\n  ).join('\\n');\n\n  return `${header}\\n${separator}\\n${body}`;\n}\n","import { Command, Flags } from \"@oclif/core\";\nimport type { OutputFormat } from \"./lib/types.js\";\nimport { loadConfig } from \"./lib/config.js\";\nimport { formatOutput } from \"./lib/output.js\";\n\nexport abstract class BaseCommand extends Command {\n  static override baseFlags = {\n    output: Flags.string({\n      char: \"o\",\n      description: \"Output format\",\n      options: [\"json\", \"human\"],\n      default: \"human\",\n      env: \"JAW_OUTPUT\",\n    }),\n    chain: Flags.integer({\n      char: \"c\",\n      description: \"Chain ID\",\n      env: \"JAW_CHAIN_ID\",\n    }),\n    \"api-key\": Flags.string({\n      description: \"JAW API key\",\n      env: \"JAW_API_KEY\",\n    }),\n    yes: Flags.boolean({\n      char: \"y\",\n      description: \"Skip confirmations (for AI agents)\",\n      default: false,\n    }),\n    quiet: Flags.boolean({\n      char: \"q\",\n      description: \"Suppress non-essential output\",\n      default: false,\n    }),\n  };\n\n  protected resolveApiKey(flags: { \"api-key\"?: string }): string {\n    const apiKey = flags[\"api-key\"] ?? loadConfig().apiKey;\n    if (!apiKey) {\n      this.error(\n        \"API key required. Set via --api-key, JAW_API_KEY env, or `jaw config set apiKey <key>`\",\n      );\n    }\n    return apiKey;\n  }\n\n  protected resolveChainId(flags: { chain?: number }): number {\n    const chainId = flags.chain ?? loadConfig().defaultChain;\n    if (!chainId) {\n      this.error(\n        \"Chain ID required. Set via --chain, JAW_CHAIN_ID env, or `jaw config set defaultChain <id>`\",\n      );\n    }\n    return chainId;\n  }\n\n  protected outputResult(data: unknown, format: OutputFormat): void {\n    const output = formatOutput(data, format);\n    this.log(output);\n  }\n}\n"]}

package/dist/commands/config/set.js

@@ -0,0 +1,244 @@
+import { Command, Flags } from '@oclif/core';
+import * as fs from 'fs';
+import * as path from 'path';
+import * as os from 'os';
+
+// src/base-command.ts
+var JAW_DIR = path.join(os.homedir(), ".jaw");
+var PATHS = {
+  root: JAW_DIR,
+  config: path.join(JAW_DIR, "config.json"),
+  session: path.join(JAW_DIR, "session.json"),
+  bridge: path.join(JAW_DIR, "bridge.json"),
+  daemonLog: path.join(JAW_DIR, "daemon.log")
+};
+
+// src/lib/validation.ts
+function isValidKeysUrl(url) {
+  try {
+    const parsed = new URL(url);
+    const isTrustedHost = parsed.hostname.endsWith(".jaw.id") || parsed.hostname === "jaw.id" || parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1";
+    const isSecure = parsed.protocol === "https:" || parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1";
+    return isTrustedHost && isSecure;
+  } catch {
+    return false;
+  }
+}
+
+// src/lib/config.ts
+function ensureDir(dir) {
+  fs.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs.chmodSync(dir, 448);
+}
+function loadConfig() {
+  if (!fs.existsSync(PATHS.config)) {
+    return {};
+  }
+  const raw = fs.readFileSync(PATHS.config, "utf-8");
+  try {
+    return JSON.parse(raw);
+  } catch {
+    throw new Error(
+      `Config file at ${PATHS.config} is not valid JSON. Run \`jaw config set apiKey=<key>\` to reset it.`
+    );
+  }
+}
+function saveConfig(config) {
+  ensureDir(PATHS.root);
+  fs.writeFileSync(PATHS.config, JSON.stringify(config, null, 2) + "\n", {
+    encoding: "utf-8",
+    mode: 384
+  });
+}
+function setConfigValue(key, value) {
+  if (key === "keysUrl" && typeof value === "string" && !isValidKeysUrl(value)) {
+    throw new Error(
+      `Untrusted keysUrl: ${value}. Must be a *.jaw.id domain (HTTPS) or localhost.`
+    );
+  }
+  const config = loadConfig();
+  const updated = { ...config, [key]: value };
+  saveConfig(updated);
+}
+
+// src/lib/output.ts
+function formatOutput(data, format) {
+  if (format === "json") {
+    return JSON.stringify(data, replaceBigInt, 2);
+  }
+  return formatHuman(data);
+}
+function replaceBigInt(_key, value) {
+  if (typeof value === "bigint") {
+    return value.toString();
+  }
+  return value;
+}
+function formatHuman(data, indent = 0) {
+  if (data === null || data === void 0) {
+    return "null";
+  }
+  if (typeof data === "string" || typeof data === "number" || typeof data === "boolean" || typeof data === "bigint") {
+    return String(data);
+  }
+  if (Array.isArray(data)) {
+    if (data.length === 0) return "(empty)";
+    return data.map((item, i) => `${i + 1}. ${formatHuman(item, indent + 2)}`).join("\n");
+  }
+  if (typeof data === "object") {
+    const entries = Object.entries(data);
+    if (entries.length === 0) return "(empty)";
+    const pad = " ".repeat(indent);
+    const maxKeyLen = Math.max(...entries.map(([k]) => k.length));
+    return entries.map(([key, val]) => {
+      const paddedKey = key.padEnd(maxKeyLen);
+      const valStr = typeof val === "object" && val !== null ? "\n" + formatHuman(val, indent + 2) : String(val);
+      return `${pad}${paddedKey}  ${valStr}`;
+    }).join("\n");
+  }
+  return String(data);
+}
+
+// src/base-command.ts
+var BaseCommand = class extends Command {
+  static baseFlags = {
+    output: Flags.string({
+      char: "o",
+      description: "Output format",
+      options: ["json", "human"],
+      default: "human",
+      env: "JAW_OUTPUT"
+    }),
+    chain: Flags.integer({
+      char: "c",
+      description: "Chain ID",
+      env: "JAW_CHAIN_ID"
+    }),
+    "api-key": Flags.string({
+      description: "JAW API key",
+      env: "JAW_API_KEY"
+    }),
+    yes: Flags.boolean({
+      char: "y",
+      description: "Skip confirmations (for AI agents)",
+      default: false
+    }),
+    quiet: Flags.boolean({
+      char: "q",
+      description: "Suppress non-essential output",
+      default: false
+    })
+  };
+  resolveApiKey(flags) {
+    const apiKey = flags["api-key"] ?? loadConfig().apiKey;
+    if (!apiKey) {
+      this.error(
+        "API key required. Set via --api-key, JAW_API_KEY env, or `jaw config set apiKey <key>`"
+      );
+    }
+    return apiKey;
+  }
+  resolveChainId(flags) {
+    const chainId = flags.chain ?? loadConfig().defaultChain;
+    if (!chainId) {
+      this.error(
+        "Chain ID required. Set via --chain, JAW_CHAIN_ID env, or `jaw config set defaultChain <id>`"
+      );
+    }
+    return chainId;
+  }
+  outputResult(data, format) {
+    const output = formatOutput(data, format);
+    this.log(output);
+  }
+};
+
+// src/commands/config/set.ts
+var VALID_KEYS = [
+  "apiKey",
+  "defaultChain",
+  "keysUrl",
+  "paymasterUrl",
+  "ens"
+];
+function isValidKey(key) {
+  return VALID_KEYS.includes(key);
+}
+var ConfigSet = class _ConfigSet extends BaseCommand {
+  static description = "Set one or more configuration values. Accepts key=value pairs or a single key value.";
+  static examples = [
+    "<%= config.bin %> config set apiKey=your-api-key defaultChain=8453",
+    "<%= config.bin %> config set ens=yourdomain.eth paymasterUrl=https://your-paymaster.com",
+    "<%= config.bin %> config set apiKey your-api-key"
+  ];
+  static strict = false;
+  static args = {};
+  static flags = {
+    ...BaseCommand.baseFlags
+  };
+  async run() {
+    const { argv, flags } = await this.parse(_ConfigSet);
+    const rawArgs = argv;
+    const entries = this.parseEntries(rawArgs);
+    if (entries.length === 0) {
+      this.error(
+        `No valid key=value pairs provided.
+Valid keys: ${VALID_KEYS.join(", ")}
+Usage: jaw config set key=value [key=value ...]`
+      );
+    }
+    const results = [];
+    for (const { key, value } of entries) {
+      const parsed = key === "defaultChain" ? parseInt(value, 10) : value;
+      if (key === "defaultChain" && isNaN(parsed)) {
+        this.error(`Invalid chain ID: ${value}`);
+      }
+      setConfigValue(key, parsed);
+      const displayValue = key === "apiKey" && typeof value === "string" ? `${value.slice(0, 8)}...` : parsed;
+      results.push({ key, value: displayValue });
+    }
+    if (flags.output === "json") {
+      this.outputResult(
+        results.length === 1 ? results[0] : results,
+        "json"
+      );
+    } else {
+      for (const { key, value } of results) {
+        this.log(`Set ${key} = ${value}`);
+      }
+    }
+  }
+  parseEntries(rawArgs) {
+    const entries = [];
+    let i = 0;
+    while (i < rawArgs.length) {
+      const arg = rawArgs[i];
+      if (arg.includes("=")) {
+        const eqIndex = arg.indexOf("=");
+        const key = arg.slice(0, eqIndex);
+        const value = arg.slice(eqIndex + 1);
+        if (!isValidKey(key)) {
+          this.error(
+            `Invalid config key: ${key}
+Valid keys: ${VALID_KEYS.join(", ")}`
+          );
+        }
+        entries.push({ key, value });
+        i++;
+      } else if (isValidKey(arg) && i + 1 < rawArgs.length) {
+        entries.push({ key: arg, value: rawArgs[i + 1] });
+        i += 2;
+      } else {
+        this.error(
+          `Unexpected argument: ${arg}
+Usage: jaw config set key=value [key=value ...]`
+        );
+      }
+    }
+    return entries;
+  }
+};
+
+export { ConfigSet as default };
+//# sourceMappingURL=set.js.map
+//# sourceMappingURL=set.js.map

package/dist/commands/config/set.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/lib/paths.ts","../../../src/lib/validation.ts","../../../src/lib/config.ts","../../../src/lib/output.ts","../../../src/base-command.ts","../../../src/commands/config/set.ts"],"names":[],"mappings":";;;;;;AAGA,IAAM,OAAA,GAAe,IAAA,CAAA,IAAA,CAAQ,EAAA,CAAA,OAAA,EAAQ,EAAG,MAAM,CAAA;AAEvC,IAAM,KAAA,GAAQ;AAAA,EACnB,IAAA,EAAM,OAAA;AAAA,EACN,MAAA,EAAa,IAAA,CAAA,IAAA,CAAK,OAAA,EAAS,aAAa,CAAA;AAAA,EACxC,OAAA,EAAc,IAAA,CAAA,IAAA,CAAK,OAAA,EAAS,cAAc,CAAA;AAAA,EAC1C,MAAA,EAAa,IAAA,CAAA,IAAA,CAAK,OAAA,EAAS,aAAa,CAAA;AAAA,EACxC,SAAA,EAAgB,IAAA,CAAA,IAAA,CAAK,OAAA,EAAS,YAAY;AAC5C,CAAA;;;ACyBO,SAAS,eAAe,GAAA,EAAsB;AACnD,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,IAAI,GAAA,CAAI,GAAG,CAAA;AAC1B,IAAA,MAAM,aAAA,GACJ,MAAA,CAAO,QAAA,CAAS,QAAA,CAAS,SAAS,CAAA,IAClC,MAAA,CAAO,QAAA,KAAa,QAAA,IACpB,MAAA,CAAO,QAAA,KAAa,WAAA,IACpB,OAAO,QAAA,KAAa,WAAA;AACtB,IAAA,MAAM,QAAA,GACJ,OAAO,QAAA,KAAa,QAAA,IACpB,OAAO,QAAA,KAAa,WAAA,IACpB,OAAO,QAAA,KAAa,WAAA;AACtB,IAAA,OAAO,aAAA,IAAiB,QAAA;AAAA,EAC1B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;;;AC/CO,SAAS,UAAU,GAAA,EAAmB;AAC3C,EAAG,aAAU,GAAA,EAAK,EAAE,WAAW,IAAA,EAAM,IAAA,EAAM,KAAO,CAAA;AAClD,EAAG,EAAA,CAAA,SAAA,CAAU,KAAK,GAAK,CAAA;AACzB;AAEO,SAAS,UAAA,GAAwB;AACtC,EAAA,IAAI,CAAI,EAAA,CAAA,UAAA,CAAW,KAAA,CAAM,MAAM,CAAA,EAAG;AAChC,IAAA,OAAO,EAAC;AAAA,EACV;AACA,EAAA,MAAM,GAAA,GAAS,EAAA,CAAA,YAAA,CAAa,KAAA,CAAM,MAAA,EAAQ,OAAO,CAAA;AACjD,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,EACvB,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,eAAA,EAAkB,MAAM,MAAM,CAAA,oEAAA;AAAA,KAChC;AAAA,EACF;AACF;AAEO,SAAS,WAAW,MAAA,EAAyB;AAClD,EAAA,SAAA,CAAU,MAAM,IAAI,CAAA;AACpB,EAAG,EAAA,CAAA,aAAA,CAAc,MAAM,MAAA,EAAQ,IAAA,CAAK,UAAU,MAAA,EAAQ,IAAA,EAAM,CAAC,CAAA,GAAI,IAAA,EAAM;AAAA,IACrE,QAAA,EAAU,OAAA;AAAA,IACV,IAAA,EAAM;AAAA,GACP,CAAA;AACH;AAgBO,SAAS,cAAA,CACd,KACA,KAAA,EACM;AACN,EAAA,IACE,GAAA,KAAQ,aACR,OAAO,KAAA,KAAU,YACjB,CAAC,cAAA,CAAe,KAAK,CAAA,EACrB;AACA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,sBAAsB,KAAK,CAAA,iDAAA;AAAA,KAC7B;AAAA,EACF;AACA,EAAA,MAAM,SAAS,UAAA,EAAW;AAC1B,EAAA,MAAM,UAAU,EAAE,GAAG,QAAQ,CAAC,GAAG,GAAG,KAAA,EAAM;AAC1C,EAAA,UAAA,CAAW,OAAO,CAAA;AACpB;;;AC5DO,SAAS,YAAA,CAAa,MAAe,MAAA,EAA8B;AACxE,EAAA,IAAI,WAAW,MAAA,EAAQ;AACrB,IAAA,OAAO,IAAA,CAAK,SAAA,CAAU,IAAA,EAAM,aAAA,EAAe,CAAC,CAAA;AAAA,EAC9C;AACA,EAAA,OAAO,YAAY,IAAI,CAAA;AACzB;AAEA,SAAS,aAAA,CAAc,MAAc,KAAA,EAAyB;AAC5D,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,OAAO,MAAM,QAAA,EAAS;AAAA,EACxB;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,WAAA,CAAY,IAAA,EAAe,MAAA,GAAS,CAAA,EAAW;AACtD,EAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,IAAA,KAAS,MAAA,EAAW;AACvC,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,IAAI,OAAO,IAAA,KAAS,QAAA,IAAY,OAAO,IAAA,KAAS,QAAA,IAAY,OAAO,IAAA,KAAS,SAAA,IAAa,OAAO,IAAA,KAAS,QAAA,EAAU;AACjH,IAAA,OAAO,OAAO,IAAI,CAAA;AAAA,EACpB;AAEA,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,EAAG;AACvB,IAAA,IAAI,IAAA,CAAK,MAAA,KAAW,CAAA,EAAG,OAAO,SAAA;AAC9B,IAAA,OAAO,KAAK,GAAA,CAAI,CAAC,IAAA,EAAM,CAAA,KAAM,GAAG,CAAA,GAAI,CAAC,CAAA,EAAA,EAAK,WAAA,CAAY,MAAM,MAAA,GAAS,CAAC,CAAC,CAAA,CAAE,CAAA,CAAE,KAAK,IAAI,CAAA;AAAA,EACtF;AAEA,EAAA,IAAI,OAAO,SAAS,QAAA,EAAU;AAC5B,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,IAA+B,CAAA;AAC9D,IAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,SAAA;AACjC,IAAA,MAAM,GAAA,GAAM,GAAA,CAAI,MAAA,CAAO,MAAM,CAAA;AAC7B,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,GAAA,CAAI,GAAG,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAC,CAAC,CAAA,KAAM,CAAA,CAAE,MAAM,CAAC,CAAA;AAC5D,IAAA,OAAO,QACJ,GAAA,CAAI,CAAC,CAAC,GAAA,EAAK,GAAG,CAAA,KAAM;AACnB,MAAA,MAAM,SAAA,GAAY,GAAA,CAAI,MAAA,CAAO,SAAS,CAAA;AACtC,MAAA,MAAM,MAAA,GAAS,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,KAAQ,IAAA,GAC9C,IAAA,GAAO,WAAA,CAAY,GAAA,EAAK,MAAA,GAAS,CAAC,CAAA,GAClC,OAAO,GAAG,CAAA;AACd,MAAA,OAAO,CAAA,EAAG,GAAG,CAAA,EAAG,SAAS,KAAK,MAAM,CAAA,CAAA;AAAA,IACtC,CAAC,CAAA,CACA,IAAA,CAAK,IAAI,CAAA;AAAA,EACd;AAEA,EAAA,OAAO,OAAO,IAAI,CAAA;AACpB;;;AC1CO,IAAe,WAAA,GAAf,cAAmC,OAAA,CAAQ;AAAA,EAChD,OAAgB,SAAA,GAAY;AAAA,IAC1B,MAAA,EAAQ,MAAM,MAAA,CAAO;AAAA,MACnB,IAAA,EAAM,GAAA;AAAA,MACN,WAAA,EAAa,eAAA;AAAA,MACb,OAAA,EAAS,CAAC,MAAA,EAAQ,OAAO,CAAA;AAAA,MACzB,OAAA,EAAS,OAAA;AAAA,MACT,GAAA,EAAK;AAAA,KACN,CAAA;AAAA,IACD,KAAA,EAAO,MAAM,OAAA,CAAQ;AAAA,MACnB,IAAA,EAAM,GAAA;AAAA,MACN,WAAA,EAAa,UAAA;AAAA,MACb,GAAA,EAAK;AAAA,KACN,CAAA;AAAA,IACD,SAAA,EAAW,MAAM,MAAA,CAAO;AAAA,MACtB,WAAA,EAAa,aAAA;AAAA,MACb,GAAA,EAAK;AAAA,KACN,CAAA;AAAA,IACD,GAAA,EAAK,MAAM,OAAA,CAAQ;AAAA,MACjB,IAAA,EAAM,GAAA;AAAA,MACN,WAAA,EAAa,oCAAA;AAAA,MACb,OAAA,EAAS;AAAA,KACV,CAAA;AAAA,IACD,KAAA,EAAO,MAAM,OAAA,CAAQ;AAAA,MACnB,IAAA,EAAM,GAAA;AAAA,MACN,WAAA,EAAa,+BAAA;AAAA,MACb,OAAA,EAAS;AAAA,KACV;AAAA,GACH;AAAA,EAEU,cAAc,KAAA,EAAuC;AAC7D,IAAA,MAAM,MAAA,GAAS,KAAA,CAAM,SAAS,CAAA,IAAK,YAAW,CAAE,MAAA;AAChD,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,IAAA,CAAK,KAAA;AAAA,QACH;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEU,eAAe,KAAA,EAAmC;AAC1D,IAAA,MAAM,OAAA,GAAU,KAAA,CAAM,KAAA,IAAS,UAAA,EAAW,CAAE,YAAA;AAC5C,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,IAAA,CAAK,KAAA;AAAA,QACH;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEU,YAAA,CAAa,MAAe,MAAA,EAA4B;AAChE,IAAA,MAAM,MAAA,GAAS,YAAA,CAAa,IAAA,EAAM,MAAM,CAAA;AACxC,IAAA,IAAA,CAAK,IAAI,MAAM,CAAA;AAAA,EACjB;AACF,CAAA;;;ACxDA,IAAM,UAAA,GAAa;AAAA,EACjB,QAAA;AAAA,EACA,cAAA;AAAA,EACA,SAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAA;AAIA,SAAS,WAAW,GAAA,EAA8B;AAChD,EAAA,OAAO,UAAA,CAAW,SAAS,GAAe,CAAA;AAC5C;AAEA,IAAqB,SAAA,GAArB,MAAqB,UAAA,SAAkB,WAAA,CAAY;AAAA,EACjD,OAAgB,WAAA,GACd,sFAAA;AAAA,EAEF,OAAgB,QAAA,GAAW;AAAA,IACzB,oEAAA;AAAA,IACA,yFAAA;AAAA,IACA;AAAA,GACF;AAAA,EAEA,OAAgB,MAAA,GAAS,KAAA;AAAA,EAEzB,OAAgB,OAAO,EAAC;AAAA,EAExB,OAAgB,KAAA,GAAQ;AAAA,IACtB,GAAG,WAAA,CAAY;AAAA,GACjB;AAAA,EAEA,MAAM,GAAA,GAAqB;AACzB,IAAA,MAAM,EAAE,IAAA,EAAM,KAAA,KAAU,MAAM,IAAA,CAAK,MAAM,UAAS,CAAA;AAClD,IAAA,MAAM,OAAA,GAAU,IAAA;AAGhB,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,YAAA,CAAa,OAAO,CAAA;AAEzC,IAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG;AACxB,MAAA,IAAA,CAAK,KAAA;AAAA,QACH,CAAA;AAAA,YAAA,EAAmD,UAAA,CAAW,IAAA,CAAK,IAAI,CAAC;AAAA,+CAAA;AAAA,OAC1E;AAAA,IACF;AAEA,IAAA,MAAM,UAAqD,EAAC;AAE5D,IAAA,KAAA,MAAW,EAAE,GAAA,EAAK,KAAA,EAAM,IAAK,OAAA,EAAS;AACpC,MAAA,MAAM,SAAS,GAAA,KAAQ,cAAA,GAAiB,QAAA,CAAS,KAAA,EAAO,EAAE,CAAA,GAAI,KAAA;AAE9D,MAAA,IAAI,GAAA,KAAQ,cAAA,IAAkB,KAAA,CAAM,MAAgB,CAAA,EAAG;AACrD,QAAA,IAAA,CAAK,KAAA,CAAM,CAAA,kBAAA,EAAqB,KAAK,CAAA,CAAE,CAAA;AAAA,MACzC;AAEA,MAAA,cAAA,CAAe,KAAK,MAAyB,CAAA;AAE7C,MAAA,MAAM,YAAA,GACJ,GAAA,KAAQ,QAAA,IAAY,OAAO,KAAA,KAAU,QAAA,GACjC,CAAA,EAAG,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,GAAA,CAAA,GACpB,MAAA;AAEN,MAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,GAAA,EAAK,KAAA,EAAO,cAAc,CAAA;AAAA,IAC3C;AAEA,IAAA,IAAI,KAAA,CAAM,WAAW,MAAA,EAAQ;AAC3B,MAAA,IAAA,CAAK,YAAA;AAAA,QACH,OAAA,CAAQ,MAAA,KAAW,CAAA,GAAI,OAAA,CAAQ,CAAC,CAAA,GAAI,OAAA;AAAA,QACpC;AAAA,OACF;AAAA,IACF,CAAA,MAAO;AACL,MAAA,KAAA,MAAW,EAAE,GAAA,EAAK,KAAA,EAAM,IAAK,OAAA,EAAS;AACpC,QAAA,IAAA,CAAK,GAAA,CAAI,CAAA,IAAA,EAAO,GAAG,CAAA,GAAA,EAAM,KAAK,CAAA,CAAE,CAAA;AAAA,MAClC;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,aACN,OAAA,EACoC;AACpC,IAAA,MAAM,UAA8C,EAAC;AAErD,IAAA,IAAI,CAAA,GAAI,CAAA;AACR,IAAA,OAAO,CAAA,GAAI,QAAQ,MAAA,EAAQ;AACzB,MAAA,MAAM,GAAA,GAAM,QAAQ,CAAC,CAAA;AAErB,MAAA,IAAI,GAAA,CAAI,QAAA,CAAS,GAAG,CAAA,EAAG;AAErB,QAAA,MAAM,OAAA,GAAU,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA;AAC/B,QAAA,MAAM,GAAA,GAAM,GAAA,CAAI,KAAA,CAAM,CAAA,EAAG,OAAO,CAAA;AAChC,QAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,KAAA,CAAM,OAAA,GAAU,CAAC,CAAA;AAEnC,QAAA,IAAI,CAAC,UAAA,CAAW,GAAG,CAAA,EAAG;AACpB,UAAA,IAAA,CAAK,KAAA;AAAA,YACH,uBAAuB,GAAG;AAAA,YAAA,EAAiB,UAAA,CAAW,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,WAClE;AAAA,QACF;AACA,QAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,GAAA,EAAK,KAAA,EAAO,CAAA;AAC3B,QAAA,CAAA,EAAA;AAAA,MACF,WAAW,UAAA,CAAW,GAAG,KAAK,CAAA,GAAI,CAAA,GAAI,QAAQ,MAAA,EAAQ;AAEpD,QAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,GAAA,EAAK,GAAA,EAAK,OAAO,OAAA,CAAQ,CAAA,GAAI,CAAC,CAAA,EAAG,CAAA;AAChD,QAAA,CAAA,IAAK,CAAA;AAAA,MACP,CAAA,MAAO;AACL,QAAA,IAAA,CAAK,KAAA;AAAA,UACH,wBAAwB,GAAG;AAAA,+CAAA;AAAA,SAC7B;AAAA,MACF;AAAA,IACF;AAEA,IAAA,OAAO,OAAA;AAAA,EACT;AACF","file":"set.js","sourcesContent":["import * as path from \"node:path\";\nimport * as os from \"node:os\";\n\nconst JAW_DIR = path.join(os.homedir(), \".jaw\");\n\nexport const PATHS = {\n  root: JAW_DIR,\n  config: path.join(JAW_DIR, \"config.json\"),\n  session: path.join(JAW_DIR, \"session.json\"),\n  bridge: path.join(JAW_DIR, \"bridge.json\"),\n  daemonLog: path.join(JAW_DIR, \"daemon.log\"),\n} as const;\n","export function isValidAddress(value: string): boolean {\n  return /^0x[0-9a-fA-F]{40}$/.test(value);\n}\n\nexport function isValidHex(value: string): boolean {\n  return /^0x[0-9a-fA-F]*$/.test(value);\n}\n\nexport function isValidChainId(value: string | number): boolean {\n  const num = typeof value === \"string\" ? parseInt(value, 10) : value;\n  return Number.isInteger(num) && num > 0;\n}\n\nexport function parseChainId(value: string): number {\n  const num = parseInt(value, 10);\n  if (!isValidChainId(num)) {\n    throw new Error(`Invalid chain ID: ${value}`);\n  }\n  return num;\n}\n\nexport function assertAddress(value: string, label = \"address\"): `0x${string}` {\n  if (!isValidAddress(value)) {\n    throw new Error(`Invalid ${label}: ${value}`);\n  }\n  return value as `0x${string}`;\n}\n\nexport function parseWei(raw: string, label = \"value\"): bigint {\n  try {\n    return BigInt(raw);\n  } catch {\n    throw new Error(`Invalid ${label}: \"${raw}\" is not a valid wei amount`);\n  }\n}\n\nexport function isValidKeysUrl(url: string): boolean {\n  try {\n    const parsed = new URL(url);\n    const isTrustedHost =\n      parsed.hostname.endsWith(\".jaw.id\") ||\n      parsed.hostname === \"jaw.id\" ||\n      parsed.hostname === \"localhost\" ||\n      parsed.hostname === \"127.0.0.1\";\n    const isSecure =\n      parsed.protocol === \"https:\" ||\n      parsed.hostname === \"localhost\" ||\n      parsed.hostname === \"127.0.0.1\";\n    return isTrustedHost && isSecure;\n  } catch {\n    return false;\n  }\n}\n","import * as fs from \"node:fs\";\nimport { PATHS } from \"./paths.js\";\nimport type { JawConfig } from \"./types.js\";\nimport { isValidKeysUrl } from \"./validation.js\";\n\nexport function ensureDir(dir: string): void {\n  fs.mkdirSync(dir, { recursive: true, mode: 0o700 });\n  fs.chmodSync(dir, 0o700);\n}\n\nexport function loadConfig(): JawConfig {\n  if (!fs.existsSync(PATHS.config)) {\n    return {};\n  }\n  const raw = fs.readFileSync(PATHS.config, \"utf-8\");\n  try {\n    return JSON.parse(raw) as JawConfig;\n  } catch {\n    throw new Error(\n      `Config file at ${PATHS.config} is not valid JSON. Run \\`jaw config set apiKey=<key>\\` to reset it.`,\n    );\n  }\n}\n\nexport function saveConfig(config: JawConfig): void {\n  ensureDir(PATHS.root);\n  fs.writeFileSync(PATHS.config, JSON.stringify(config, null, 2) + \"\\n\", {\n    encoding: \"utf-8\",\n    mode: 0o600,\n  });\n}\n\nexport function redactConfig(config: JawConfig): Record<string, unknown> {\n  return {\n    ...config,\n    apiKey: config.apiKey ? `${config.apiKey.slice(0, 8)}...` : undefined,\n  };\n}\n\nexport function getConfigValue(\n  key: keyof JawConfig,\n): string | number | undefined {\n  const config = loadConfig();\n  return config[key];\n}\n\nexport function setConfigValue(\n  key: keyof JawConfig,\n  value: string | number,\n): void {\n  if (\n    key === \"keysUrl\" &&\n    typeof value === \"string\" &&\n    !isValidKeysUrl(value)\n  ) {\n    throw new Error(\n      `Untrusted keysUrl: ${value}. Must be a *.jaw.id domain (HTTPS) or localhost.`,\n    );\n  }\n  const config = loadConfig();\n  const updated = { ...config, [key]: value };\n  saveConfig(updated);\n}\n","import type { OutputFormat } from './types.js';\n\nexport function formatOutput(data: unknown, format: OutputFormat): string {\n  if (format === 'json') {\n    return JSON.stringify(data, replaceBigInt, 2);\n  }\n  return formatHuman(data);\n}\n\nfunction replaceBigInt(_key: string, value: unknown): unknown {\n  if (typeof value === 'bigint') {\n    return value.toString();\n  }\n  return value;\n}\n\nfunction formatHuman(data: unknown, indent = 0): string {\n  if (data === null || data === undefined) {\n    return 'null';\n  }\n\n  if (typeof data === 'string' || typeof data === 'number' || typeof data === 'boolean' || typeof data === 'bigint') {\n    return String(data);\n  }\n\n  if (Array.isArray(data)) {\n    if (data.length === 0) return '(empty)';\n    return data.map((item, i) => `${i + 1}. ${formatHuman(item, indent + 2)}`).join('\\n');\n  }\n\n  if (typeof data === 'object') {\n    const entries = Object.entries(data as Record<string, unknown>);\n    if (entries.length === 0) return '(empty)';\n    const pad = ' '.repeat(indent);\n    const maxKeyLen = Math.max(...entries.map(([k]) => k.length));\n    return entries\n      .map(([key, val]) => {\n        const paddedKey = key.padEnd(maxKeyLen);\n        const valStr = typeof val === 'object' && val !== null\n          ? '\\n' + formatHuman(val, indent + 2)\n          : String(val);\n        return `${pad}${paddedKey}  ${valStr}`;\n      })\n      .join('\\n');\n  }\n\n  return String(data);\n}\n\nexport function printTable(rows: Record<string, unknown>[]): string {\n  if (rows.length === 0) return '(no results)';\n\n  const keys = Object.keys(rows[0]);\n  const widths = keys.map(k =>\n    Math.max(k.length, ...rows.map(r => String(r[k] ?? '').length))\n  );\n\n  const header = keys.map((k, i) => k.padEnd(widths[i])).join('  ');\n  const separator = widths.map(w => '-'.repeat(w)).join('  ');\n  const body = rows.map(r =>\n    keys.map((k, i) => String(r[k] ?? '').padEnd(widths[i])).join('  ')\n  ).join('\\n');\n\n  return `${header}\\n${separator}\\n${body}`;\n}\n","import { Command, Flags } from \"@oclif/core\";\nimport type { OutputFormat } from \"./lib/types.js\";\nimport { loadConfig } from \"./lib/config.js\";\nimport { formatOutput } from \"./lib/output.js\";\n\nexport abstract class BaseCommand extends Command {\n  static override baseFlags = {\n    output: Flags.string({\n      char: \"o\",\n      description: \"Output format\",\n      options: [\"json\", \"human\"],\n      default: \"human\",\n      env: \"JAW_OUTPUT\",\n    }),\n    chain: Flags.integer({\n      char: \"c\",\n      description: \"Chain ID\",\n      env: \"JAW_CHAIN_ID\",\n    }),\n    \"api-key\": Flags.string({\n      description: \"JAW API key\",\n      env: \"JAW_API_KEY\",\n    }),\n    yes: Flags.boolean({\n      char: \"y\",\n      description: \"Skip confirmations (for AI agents)\",\n      default: false,\n    }),\n    quiet: Flags.boolean({\n      char: \"q\",\n      description: \"Suppress non-essential output\",\n      default: false,\n    }),\n  };\n\n  protected resolveApiKey(flags: { \"api-key\"?: string }): string {\n    const apiKey = flags[\"api-key\"] ?? loadConfig().apiKey;\n    if (!apiKey) {\n      this.error(\n        \"API key required. Set via --api-key, JAW_API_KEY env, or `jaw config set apiKey <key>`\",\n      );\n    }\n    return apiKey;\n  }\n\n  protected resolveChainId(flags: { chain?: number }): number {\n    const chainId = flags.chain ?? loadConfig().defaultChain;\n    if (!chainId) {\n      this.error(\n        \"Chain ID required. Set via --chain, JAW_CHAIN_ID env, or `jaw config set defaultChain <id>`\",\n      );\n    }\n    return chainId;\n  }\n\n  protected outputResult(data: unknown, format: OutputFormat): void {\n    const output = formatOutput(data, format);\n    this.log(output);\n  }\n}\n","import { BaseCommand } from \"../../base-command.js\";\nimport { setConfigValue } from \"../../lib/config.js\";\n\nconst VALID_KEYS = [\n  \"apiKey\",\n  \"defaultChain\",\n  \"keysUrl\",\n  \"paymasterUrl\",\n  \"ens\",\n] as const;\n\ntype ValidKey = (typeof VALID_KEYS)[number];\n\nfunction isValidKey(key: string): key is ValidKey {\n  return VALID_KEYS.includes(key as ValidKey);\n}\n\nexport default class ConfigSet extends BaseCommand {\n  static override description =\n    \"Set one or more configuration values. Accepts key=value pairs or a single key value.\";\n\n  static override examples = [\n    \"<%= config.bin %> config set apiKey=your-api-key defaultChain=8453\",\n    \"<%= config.bin %> config set ens=yourdomain.eth paymasterUrl=https://your-paymaster.com\",\n    \"<%= config.bin %> config set apiKey your-api-key\",\n  ];\n\n  static override strict = false;\n\n  static override args = {};\n\n  static override flags = {\n    ...BaseCommand.baseFlags,\n  };\n\n  async run(): Promise<void> {\n    const { argv, flags } = await this.parse(ConfigSet);\n    const rawArgs = argv as string[];\n\n    // Parse key=value pairs from all args\n    const entries = this.parseEntries(rawArgs);\n\n    if (entries.length === 0) {\n      this.error(\n        `No valid key=value pairs provided.\\nValid keys: ${VALID_KEYS.join(\", \")}\\nUsage: jaw config set key=value [key=value ...]`,\n      );\n    }\n\n    const results: { key: string; value: string | number }[] = [];\n\n    for (const { key, value } of entries) {\n      const parsed = key === \"defaultChain\" ? parseInt(value, 10) : value;\n\n      if (key === \"defaultChain\" && isNaN(parsed as number)) {\n        this.error(`Invalid chain ID: ${value}`);\n      }\n\n      setConfigValue(key, parsed as string | number);\n\n      const displayValue =\n        key === \"apiKey\" && typeof value === \"string\"\n          ? `${value.slice(0, 8)}...`\n          : parsed;\n\n      results.push({ key, value: displayValue });\n    }\n\n    if (flags.output === \"json\") {\n      this.outputResult(\n        results.length === 1 ? results[0] : results,\n        \"json\",\n      );\n    } else {\n      for (const { key, value } of results) {\n        this.log(`Set ${key} = ${value}`);\n      }\n    }\n  }\n\n  private parseEntries(\n    rawArgs: string[],\n  ): { key: ValidKey; value: string }[] {\n    const entries: { key: ValidKey; value: string }[] = [];\n\n    let i = 0;\n    while (i < rawArgs.length) {\n      const arg = rawArgs[i];\n\n      if (arg.includes(\"=\")) {\n        // key=value syntax\n        const eqIndex = arg.indexOf(\"=\");\n        const key = arg.slice(0, eqIndex);\n        const value = arg.slice(eqIndex + 1);\n\n        if (!isValidKey(key)) {\n          this.error(\n            `Invalid config key: ${key}\\nValid keys: ${VALID_KEYS.join(\", \")}`,\n          );\n        }\n        entries.push({ key, value });\n        i++;\n      } else if (isValidKey(arg) && i + 1 < rawArgs.length) {\n        // key value syntax (legacy)\n        entries.push({ key: arg, value: rawArgs[i + 1] });\n        i += 2;\n      } else {\n        this.error(\n          `Unexpected argument: ${arg}\\nUsage: jaw config set key=value [key=value ...]`,\n        );\n      }\n    }\n\n    return entries;\n  }\n}"]}