@jaw.id/cli 0.0.2

package/dist/mcp/handlers/rpc.js

@@ -0,0 +1,444 @@
+import { z } from 'zod';
+import * as fs2 from 'fs';
+import * as path from 'path';
+import { fileURLToPath } from 'url';
+import { spawn, execSync } from 'child_process';
+import * as os from 'os';
+import * as crypto from 'crypto';
+import WebSocket from 'ws';
+
+// src/mcp/tools.ts
+var rpcMethodSchema = {
+  method: z.string().describe(
+    "EIP-1193 RPC method name (e.g. wallet_connect, wallet_sendCalls, personal_sign). Read the jaw://api-reference resource for the full list and jaw://api-reference/{method} for parameter details."
+  ),
+  params: z.any().optional().describe(
+    "Method parameters \u2014 structure varies by method. Read the jaw://api-reference/{method} resource for the expected format."
+  ),
+  chainId: z.number().optional().describe(
+    "Target chain ID (overrides default). E.g., 1 for Ethereum, 8453 for Base, 84532 for Base Sepolia"
+  )
+};
+({
+  key: z.enum(["apiKey", "defaultChain", "keysUrl", "paymasterUrl", "ens"]).describe("Config key"),
+  value: z.string().describe("Config value")
+});
+
+// src/mcp/helpers.ts
+function mcpError(err) {
+  return {
+    isError: true,
+    content: [
+      {
+        type: "text",
+        text: `Error: ${err instanceof Error ? err.message : String(err)}`
+      }
+    ]
+  };
+}
+function mcpResult(data) {
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify(data)
+      }
+    ]
+  };
+}
+var JAW_DIR = path.join(os.homedir(), ".jaw");
+var PATHS = {
+  root: JAW_DIR,
+  config: path.join(JAW_DIR, "config.json"),
+  session: path.join(JAW_DIR, "session.json"),
+  bridge: path.join(JAW_DIR, "bridge.json"),
+  daemonLog: path.join(JAW_DIR, "daemon.log")
+};
+
+// src/lib/validation.ts
+function isValidKeysUrl(url) {
+  try {
+    const parsed = new URL(url);
+    const isTrustedHost = parsed.hostname.endsWith(".jaw.id") || parsed.hostname === "jaw.id" || parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1";
+    const isSecure = parsed.protocol === "https:" || parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1";
+    return isTrustedHost && isSecure;
+  } catch {
+    return false;
+  }
+}
+
+// src/lib/config.ts
+function ensureDir(dir) {
+  fs2.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs2.chmodSync(dir, 448);
+}
+function loadConfig() {
+  if (!fs2.existsSync(PATHS.config)) {
+    return {};
+  }
+  const raw = fs2.readFileSync(PATHS.config, "utf-8");
+  try {
+    return JSON.parse(raw);
+  } catch {
+    throw new Error(
+      `Config file at ${PATHS.config} is not valid JSON. Run \`jaw config set apiKey=<key>\` to reset it.`
+    );
+  }
+}
+var DEFAULT_TIMEOUT_MS = 12e4;
+var WSBridge = class {
+  port;
+  token;
+  timeout;
+  ws = null;
+  constructor(options) {
+    this.port = options.port;
+    this.token = options.token;
+    this.timeout = options.timeout ?? DEFAULT_TIMEOUT_MS;
+  }
+  /**
+   * Connect to the daemon's WebSocket server.
+   */
+  async connect() {
+    return new Promise((resolve, reject) => {
+      const url = `ws://127.0.0.1:${this.port}?token=${encodeURIComponent(this.token)}&role=cli`;
+      const ws = new WebSocket(url);
+      const timer = setTimeout(() => {
+        ws.close();
+        reject(
+          new Error(
+            "Browser SDK did not connect in time.\nIf the browser tab failed to open, run `jaw disconnect` then try again."
+          )
+        );
+      }, 3e4);
+      ws.on("open", () => {
+        clearTimeout(timer);
+        this.ws = ws;
+      });
+      ws.on("message", (data) => {
+        let msg;
+        try {
+          msg = JSON.parse(data.toString());
+        } catch {
+          return;
+        }
+        if (msg.type === "status" && msg.browserConnected) {
+          clearTimeout(timer);
+          resolve();
+        } else if (msg.type === "browser_connected") {
+          clearTimeout(timer);
+          resolve();
+        }
+      });
+      ws.on("error", (err) => {
+        clearTimeout(timer);
+        reject(err);
+      });
+      ws.on("close", () => {
+        clearTimeout(timer);
+      });
+    });
+  }
+  /**
+   * Send an RPC request through the daemon to the browser SDK.
+   */
+  async request(method, params) {
+    const ws = this.ws;
+    if (!ws || ws.readyState !== WebSocket.OPEN) {
+      throw new Error("Not connected to bridge daemon");
+    }
+    const id = crypto.randomUUID();
+    return new Promise((resolve, reject) => {
+      const timer = setTimeout(() => {
+        reject(
+          new Error(
+            `Request timed out after ${this.timeout / 1e3}s. Did you complete the action in the browser?`
+          )
+        );
+        this.close();
+      }, this.timeout);
+      const onMessage = (data) => {
+        let msg;
+        try {
+          msg = JSON.parse(data.toString());
+        } catch {
+          return;
+        }
+        if (msg.type === "rpc_response" && msg.id === id) {
+          clearTimeout(timer);
+          ws.off("message", onMessage);
+          if (msg.success) {
+            resolve(msg.data);
+          } else {
+            const err = msg.error;
+            reject(
+              new Error(
+                err ? `[${err.code}] ${err.message}` : "Request failed"
+              )
+            );
+          }
+        }
+      };
+      ws.on("message", onMessage);
+      ws.send(
+        JSON.stringify({
+          id,
+          type: "rpc_request",
+          method,
+          params
+        })
+      );
+    });
+  }
+  /**
+   * Check if the WebSocket connection is open.
+   */
+  isOpen() {
+    return this.ws?.readyState === WebSocket.OPEN;
+  }
+  /**
+   * Send a shutdown signal to the daemon.
+   */
+  shutdown() {
+    if (this.ws?.readyState === WebSocket.OPEN) {
+      this.ws.send(JSON.stringify({ type: "shutdown" }));
+    }
+    this.close();
+  }
+  /**
+   * Close the client connection (daemon stays alive).
+   */
+  close() {
+    if (this.ws) {
+      try {
+        this.ws.close();
+      } catch {
+      }
+      this.ws = null;
+    }
+  }
+};
+
+// src/lib/bridge-singleton.ts
+function findDistDir() {
+  let dir = path.dirname(fileURLToPath(import.meta.url));
+  for (let i = 0; i < 10; i++) {
+    const candidate = path.join(dir, "lib", "ws-daemon.js");
+    if (fs2.existsSync(candidate)) return dir;
+    dir = path.dirname(dir);
+  }
+  throw new Error("Cannot find ws-daemon.js in dist tree");
+}
+var JAW_KEYS_URL = "https://keys.jaw.id";
+var LOCK_PATH = path.join(PATHS.root, "daemon.lock");
+function isDaemonProcess(pid) {
+  if (!Number.isInteger(pid) || pid <= 0 || pid > 4194304) return false;
+  try {
+    process.kill(pid, 0);
+  } catch {
+    return false;
+  }
+  try {
+    const cmd = execSync(`ps -p ${String(pid)} -o command=`, {
+      encoding: "utf-8",
+      timeout: 3e3
+    }).trim();
+    return cmd.includes("ws-daemon");
+  } catch {
+    return false;
+  }
+}
+function loadBridgeInfo() {
+  try {
+    if (!fs2.existsSync(PATHS.bridge)) return null;
+    const raw = fs2.readFileSync(PATHS.bridge, "utf-8");
+    const info = JSON.parse(raw);
+    if (!isDaemonProcess(info.pid)) {
+      try {
+        fs2.unlinkSync(PATHS.bridge);
+      } catch {
+      }
+      return null;
+    }
+    return info;
+  } catch {
+    return null;
+  }
+}
+async function getBridge(options) {
+  let info = loadBridgeInfo();
+  if (!info) {
+    info = await spawnDaemon(options);
+  }
+  const bridge = new WSBridge({
+    port: info.port,
+    token: info.token,
+    timeout: options.timeout
+  });
+  await bridge.connect();
+  return bridge;
+}
+function acquireLock() {
+  ensureDir(PATHS.root);
+  try {
+    const fd = fs2.openSync(LOCK_PATH, "wx");
+    fs2.writeFileSync(LOCK_PATH, String(process.pid), { mode: 384 });
+    return fd;
+  } catch (err) {
+    if (err.code === "EEXIST") {
+      try {
+        const lockPid = parseInt(fs2.readFileSync(LOCK_PATH, "utf-8").trim(), 10);
+        if (Number.isInteger(lockPid) && lockPid > 0) {
+          try {
+            process.kill(lockPid, 0);
+            return null;
+          } catch {
+            try {
+              fs2.unlinkSync(LOCK_PATH);
+            } catch {
+            }
+            return acquireLock();
+          }
+        }
+      } catch {
+        try {
+          fs2.unlinkSync(LOCK_PATH);
+        } catch {
+        }
+      }
+      return null;
+    }
+    throw err;
+  }
+}
+function releaseLock(fd) {
+  try {
+    fs2.closeSync(fd);
+  } catch {
+  }
+  try {
+    fs2.unlinkSync(LOCK_PATH);
+  } catch {
+  }
+}
+async function spawnDaemon(options) {
+  ensureDir(PATHS.root);
+  const lockFd = acquireLock();
+  if (lockFd === null) {
+    const deadline = Date.now() + 15e3;
+    while (Date.now() < deadline) {
+      await new Promise((r) => setTimeout(r, 300));
+      const info = loadBridgeInfo();
+      if (info) return info;
+    }
+    throw new Error(
+      "Another process is starting the daemon. Timed out waiting for it."
+    );
+  }
+  try {
+    const existing = loadBridgeInfo();
+    if (existing) return existing;
+    const config = loadConfig();
+    const keysUrl = options.keysUrl ?? config.keysUrl ?? JAW_KEYS_URL;
+    if (!isValidKeysUrl(keysUrl)) {
+      throw new Error(
+        `Untrusted keysUrl: ${keysUrl}. Must be a *.jaw.id domain (HTTPS) or localhost.`
+      );
+    }
+    const daemonArgs = {
+      keysUrl,
+      chainId: options.chainId ?? config.defaultChain ?? 1,
+      ens: options.ens ?? config.ens,
+      paymasterUrl: options.paymasterUrl ?? config.paymasterUrl,
+      timeout: options.timeout ?? 12e4
+    };
+    const daemonScript = path.join(findDistDir(), "lib", "ws-daemon.js");
+    try {
+      if (fs2.existsSync(PATHS.bridge)) fs2.unlinkSync(PATHS.bridge);
+    } catch {
+    }
+    const logFd = fs2.openSync(PATHS.daemonLog, "w", 384);
+    const child = spawn(
+      process.execPath,
+      [daemonScript, JSON.stringify(daemonArgs)],
+      {
+        detached: true,
+        stdio: ["ignore", logFd, logFd],
+        // Pass API key via env var instead of process args to avoid ps aux exposure
+        env: { ...process.env, JAW_DAEMON_API_KEY: options.apiKey }
+      }
+    );
+    child.unref();
+    fs2.closeSync(logFd);
+    const deadline = Date.now() + 15e3;
+    while (Date.now() < deadline) {
+      await new Promise((r) => setTimeout(r, 200));
+      const info = loadBridgeInfo();
+      if (info) return info;
+    }
+    throw new Error(
+      `Daemon failed to start within 15s. Check ${PATHS.daemonLog} for details.`
+    );
+  } finally {
+    releaseLock(lockFd);
+  }
+}
+
+// src/mcp/handlers/rpc.ts
+function resolveApiKey() {
+  const apiKey = process.env["JAW_API_KEY"] ?? loadConfig().apiKey;
+  if (!apiKey) {
+    throw new Error(
+      "API key required. Set JAW_API_KEY env var or run: jaw config set apiKey <key>"
+    );
+  }
+  return apiKey;
+}
+var cachedBridge = null;
+async function getOrCreateBridge(chainId) {
+  if (cachedBridge && cachedBridge.isOpen()) {
+    return cachedBridge;
+  }
+  const config = loadConfig();
+  const apiKey = resolveApiKey();
+  cachedBridge = await getBridge({
+    keysUrl: config.keysUrl,
+    apiKey,
+    chainId: chainId ?? config.defaultChain,
+    ens: config.ens,
+    paymasterUrl: config.paymasterUrl
+  });
+  return cachedBridge;
+}
+function closeCachedBridge() {
+  if (cachedBridge) {
+    cachedBridge.close();
+    cachedBridge = null;
+  }
+}
+function isBridgeCached() {
+  return cachedBridge !== null && cachedBridge.isOpen();
+}
+function registerRpcTool(server) {
+  server.tool(
+    "jaw_rpc",
+    "Execute any JAW.id wallet RPC method via the browser bridge. Supports transactions, signing, permissions, and queries. Methods that require signing will open the browser for passkey authentication. IMPORTANT: Read the jaw://api-reference resource for the full list of methods, and jaw://api-reference/{method} for detailed parameter formats and examples.",
+    rpcMethodSchema,
+    async (params) => {
+      try {
+        const bridge = await getOrCreateBridge(params.chainId);
+        const result = await bridge.request(params.method, params.params);
+        return mcpResult(result);
+      } catch (err) {
+        if (cachedBridge && !cachedBridge.isOpen()) {
+          cachedBridge = null;
+        }
+        return mcpError(err);
+      }
+    }
+  );
+}
+
+export { closeCachedBridge, isBridgeCached, registerRpcTool };
+//# sourceMappingURL=rpc.js.map
+//# sourceMappingURL=rpc.js.map

package/dist/mcp/handlers/rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/mcp/tools.ts","../../../src/mcp/helpers.ts","../../../src/lib/paths.ts","../../../src/lib/validation.ts","../../../src/lib/config.ts","../../../src/lib/ws-bridge.ts","../../../src/lib/bridge-singleton.ts","../../../src/mcp/handlers/rpc.ts"],"names":["fs","path2"],"mappings":";;;;;;;;;;AAMO,IAAM,eAAA,GAAkB;AAAA,EAC7B,MAAA,EAAQ,CAAA,CACL,MAAA,EAAO,CACP,QAAA;AAAA,IACC;AAAA,GAEF;AAAA,EACF,MAAA,EAAQ,CAAA,CACL,GAAA,EAAI,CACJ,UAAS,CACT,QAAA;AAAA,IACC;AAAA,GAEF;AAAA,EACF,OAAA,EAAS,CAAA,CACN,MAAA,EAAO,CACP,UAAS,CACT,QAAA;AAAA,IACC;AAAA;AAEN,CAAA;CAE+B;AAAA,EAC7B,GAAA,EAAK,CAAA,CACF,IAAA,CAAK,CAAC,QAAA,EAAU,cAAA,EAAgB,SAAA,EAAW,cAAA,EAAgB,KAAK,CAAC,CAAA,CACjE,QAAA,CAAS,YAAY,CAAA;AAAA,EACxB,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,cAAc;AAC3C;;;ACjCO,SAAS,SAAS,GAAA,EAAc;AACrC,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,IAAA;AAAA,IACT,OAAA,EAAS;AAAA,MACP;AAAA,QACE,IAAA,EAAM,MAAA;AAAA,QACN,IAAA,EAAM,UAAU,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA;AAClE;AACF,GACF;AACF;AAEO,SAAS,UAAU,IAAA,EAAe;AACvC,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP;AAAA,QACE,IAAA,EAAM,MAAA;AAAA,QACN,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA;AAC3B;AACF,GACF;AACF;AClBA,IAAM,OAAA,GAAe,IAAA,CAAA,IAAA,CAAQ,EAAA,CAAA,OAAA,EAAQ,EAAG,MAAM,CAAA;AAEvC,IAAM,KAAA,GAAQ;AAAA,EACnB,IAAA,EAAM,OAAA;AAAA,EACN,MAAA,EAAa,IAAA,CAAA,IAAA,CAAK,OAAA,EAAS,aAAa,CAAA;AAAA,EACxC,OAAA,EAAc,IAAA,CAAA,IAAA,CAAK,OAAA,EAAS,cAAc,CAAA;AAAA,EAC1C,MAAA,EAAa,IAAA,CAAA,IAAA,CAAK,OAAA,EAAS,aAAa,CAAA;AAAA,EACxC,SAAA,EAAgB,IAAA,CAAA,IAAA,CAAK,OAAA,EAAS,YAAY;AAC5C,CAAA;;;ACyBO,SAAS,eAAe,GAAA,EAAsB;AACnD,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,IAAI,GAAA,CAAI,GAAG,CAAA;AAC1B,IAAA,MAAM,aAAA,GACJ,MAAA,CAAO,QAAA,CAAS,QAAA,CAAS,SAAS,CAAA,IAClC,MAAA,CAAO,QAAA,KAAa,QAAA,IACpB,MAAA,CAAO,QAAA,KAAa,WAAA,IACpB,OAAO,QAAA,KAAa,WAAA;AACtB,IAAA,MAAM,QAAA,GACJ,OAAO,QAAA,KAAa,QAAA,IACpB,OAAO,QAAA,KAAa,WAAA,IACpB,OAAO,QAAA,KAAa,WAAA;AACtB,IAAA,OAAO,aAAA,IAAiB,QAAA;AAAA,EAC1B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;;;AC/CO,SAAS,UAAU,GAAA,EAAmB;AAC3C,EAAGA,cAAU,GAAA,EAAK,EAAE,WAAW,IAAA,EAAM,IAAA,EAAM,KAAO,CAAA;AAClD,EAAGA,GAAA,CAAA,SAAA,CAAU,KAAK,GAAK,CAAA;AACzB;AAEO,SAAS,UAAA,GAAwB;AACtC,EAAA,IAAI,CAAIA,GAAA,CAAA,UAAA,CAAW,KAAA,CAAM,MAAM,CAAA,EAAG;AAChC,IAAA,OAAO,EAAC;AAAA,EACV;AACA,EAAA,MAAM,GAAA,GAASA,GAAA,CAAA,YAAA,CAAa,KAAA,CAAM,MAAA,EAAQ,OAAO,CAAA;AACjD,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,EACvB,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,eAAA,EAAkB,MAAM,MAAM,CAAA,oEAAA;AAAA,KAChC;AAAA,EACF;AACF;ACLA,IAAM,kBAAA,GAAqB,IAAA;AAEpB,IAAM,WAAN,MAAe;AAAA,EACH,IAAA;AAAA,EACA,KAAA;AAAA,EACA,OAAA;AAAA,EACT,EAAA,GAAuB,IAAA;AAAA,EAE/B,YAAY,OAAA,EAA0B;AACpC,IAAA,IAAA,CAAK,OAAO,OAAA,CAAQ,IAAA;AACpB,IAAA,IAAA,CAAK,QAAQ,OAAA,CAAQ,KAAA;AACrB,IAAA,IAAA,CAAK,OAAA,GAAU,QAAQ,OAAA,IAAW,kBAAA;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,OAAA,GAAyB;AAC7B,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,GAAA,GAAM,kBAAkB,IAAA,CAAK,IAAI,UAAU,kBAAA,CAAmB,IAAA,CAAK,KAAK,CAAC,CAAA,SAAA,CAAA;AAC/E,MAAA,MAAM,EAAA,GAAK,IAAI,SAAA,CAAU,GAAG,CAAA;AAE5B,MAAA,MAAM,KAAA,GAAQ,WAAW,MAAM;AAC7B,QAAA,EAAA,CAAG,KAAA,EAAM;AACT,QAAA,MAAA;AAAA,UACE,IAAI,KAAA;AAAA,YACF;AAAA;AAEF,SACF;AAAA,MACF,GAAG,GAAM,CAAA;AAET,MAAA,EAAA,CAAG,EAAA,CAAG,QAAQ,MAAM;AAClB,QAAA,YAAA,CAAa,KAAK,CAAA;AAClB,QAAA,IAAA,CAAK,EAAA,GAAK,EAAA;AAAA,MACZ,CAAC,CAAA;AAED,MAAA,EAAA,CAAG,EAAA,CAAG,SAAA,EAAW,CAAC,IAAA,KAAS;AACzB,QAAA,IAAI,GAAA;AACJ,QAAA,IAAI;AACF,UAAA,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,QAAA,EAAU,CAAA;AAAA,QAClC,CAAA,CAAA,MAAQ;AACN,UAAA;AAAA,QACF;AAKA,QAAA,IAAI,GAAA,CAAI,IAAA,KAAS,QAAA,IAAY,GAAA,CAAI,gBAAA,EAAkB;AACjD,UAAA,YAAA,CAAa,KAAK,CAAA;AAClB,UAAA,OAAA,EAAQ;AAAA,QACV,CAAA,MAAA,IAAW,GAAA,CAAI,IAAA,KAAS,mBAAA,EAAqB;AAC3C,UAAA,YAAA,CAAa,KAAK,CAAA;AAClB,UAAA,OAAA,EAAQ;AAAA,QACV;AAAA,MACF,CAAC,CAAA;AAED,MAAA,EAAA,CAAG,EAAA,CAAG,OAAA,EAAS,CAAC,GAAA,KAAQ;AACtB,QAAA,YAAA,CAAa,KAAK,CAAA;AAClB,QAAA,MAAA,CAAO,GAAG,CAAA;AAAA,MACZ,CAAC,CAAA;AAED,MAAA,EAAA,CAAG,EAAA,CAAG,SAAS,MAAM;AACnB,QAAA,YAAA,CAAa,KAAK,CAAA;AAAA,MACpB,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,OAAA,CAAQ,MAAA,EAAgB,MAAA,EAAoC;AAChE,IAAA,MAAM,KAAK,IAAA,CAAK,EAAA;AAChB,IAAA,IAAI,CAAC,EAAA,IAAM,EAAA,CAAG,UAAA,KAAe,UAAU,IAAA,EAAM;AAC3C,MAAA,MAAM,IAAI,MAAM,gCAAgC,CAAA;AAAA,IAClD;AAEA,IAAA,MAAM,KAAY,MAAA,CAAA,UAAA,EAAW;AAE7B,IAAA,OAAO,IAAI,OAAA,CAAiB,CAAC,OAAA,EAAS,MAAA,KAAW;AAC/C,MAAA,MAAM,KAAA,GAAQ,WAAW,MAAM;AAC7B,QAAA,MAAA;AAAA,UACE,IAAI,KAAA;AAAA,YACF,CAAA,wBAAA,EAA2B,IAAA,CAAK,OAAA,GAAU,GAAI,CAAA,8CAAA;AAAA;AAEhD,SACF;AACA,QAAA,IAAA,CAAK,KAAA,EAAM;AAAA,MACb,CAAA,EAAG,KAAK,OAAO,CAAA;AAEf,MAAA,MAAM,SAAA,GAAY,CAAC,IAAA,KAAyB;AAC1C,QAAA,IAAI,GAAA;AACJ,QAAA,IAAI;AACF,UAAA,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,QAAA,EAAU,CAAA;AAAA,QAClC,CAAA,CAAA,MAAQ;AACN,UAAA;AAAA,QACF;AAEA,QAAA,IAAI,GAAA,CAAI,IAAA,KAAS,cAAA,IAAkB,GAAA,CAAI,OAAO,EAAA,EAAI;AAChD,UAAA,YAAA,CAAa,KAAK,CAAA;AAClB,UAAA,EAAA,CAAG,GAAA,CAAI,WAAW,SAAS,CAAA;AAE3B,UAAA,IAAI,IAAI,OAAA,EAAS;AACf,YAAA,OAAA,CAAQ,IAAI,IAAI,CAAA;AAAA,UAClB,CAAA,MAAO;AACL,YAAA,MAAM,MAAM,GAAA,CAAI,KAAA;AAGhB,YAAA,MAAA;AAAA,cACE,IAAI,KAAA;AAAA,gBACF,MAAM,CAAA,CAAA,EAAI,GAAA,CAAI,IAAI,CAAA,EAAA,EAAK,GAAA,CAAI,OAAO,CAAA,CAAA,GAAK;AAAA;AACzC,aACF;AAAA,UACF;AAAA,QACF;AAAA,MACF,CAAA;AAEA,MAAA,EAAA,CAAG,EAAA,CAAG,WAAW,SAAS,CAAA;AAE1B,MAAA,EAAA,CAAG,IAAA;AAAA,QACD,KAAK,SAAA,CAAU;AAAA,UACb,EAAA;AAAA,UACA,IAAA,EAAM,aAAA;AAAA,UACN,MAAA;AAAA,UACA;AAAA,SACD;AAAA,OACH;AAAA,IACF,CAAC,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,MAAA,GAAkB;AAChB,IAAA,OAAO,IAAA,CAAK,EAAA,EAAI,UAAA,KAAe,SAAA,CAAU,IAAA;AAAA,EAC3C;AAAA;AAAA;AAAA;AAAA,EAKA,QAAA,GAAiB;AACf,IAAA,IAAI,IAAA,CAAK,EAAA,EAAI,UAAA,KAAe,SAAA,CAAU,IAAA,EAAM;AAC1C,MAAA,IAAA,CAAK,EAAA,CAAG,KAAK,IAAA,CAAK,SAAA,CAAU,EAAE,IAAA,EAAM,UAAA,EAAY,CAAC,CAAA;AAAA,IACnD;AACA,IAAA,IAAA,CAAK,KAAA,EAAM;AAAA,EACb;AAAA;AAAA;AAAA;AAAA,EAKA,KAAA,GAAc;AACZ,IAAA,IAAI,KAAK,EAAA,EAAI;AACX,MAAA,IAAI;AACF,QAAA,IAAA,CAAK,GAAG,KAAA,EAAM;AAAA,MAChB,CAAA,CAAA,MAAQ;AAAA,MAER;AACA,MAAA,IAAA,CAAK,EAAA,GAAK,IAAA;AAAA,IACZ;AAAA,EACF;AACF,CAAA;;;ACzJA,SAAS,WAAA,GAAsB;AAC7B,EAAA,IAAI,GAAA,GAAWC,IAAA,CAAA,OAAA,CAAQ,aAAA,CAAc,MAAA,CAAA,IAAA,CAAY,GAAG,CAAC,CAAA;AAErD,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,EAAA,EAAI,CAAA,EAAA,EAAK;AAC3B,IAAA,MAAM,SAAA,GAAiBA,IAAA,CAAA,IAAA,CAAK,GAAA,EAAK,KAAA,EAAO,cAAc,CAAA;AACtD,IAAA,IAAO,GAAA,CAAA,UAAA,CAAW,SAAS,CAAA,EAAG,OAAO,GAAA;AACrC,IAAA,GAAA,GAAWA,aAAQ,GAAG,CAAA;AAAA,EACxB;AACA,EAAA,MAAM,IAAI,MAAM,uCAAuC,CAAA;AACzD;AAEA,IAAM,YAAA,GAAe,qBAAA;AACrB,IAAM,SAAA,GAAiBA,IAAA,CAAA,IAAA,CAAK,KAAA,CAAM,IAAA,EAAM,aAAa,CAAA;AAsBrD,SAAS,gBAAgB,GAAA,EAAsB;AAE7C,EAAA,IAAI,CAAC,OAAO,SAAA,CAAU,GAAG,KAAK,GAAA,IAAO,CAAA,IAAK,GAAA,GAAM,OAAA,EAAW,OAAO,KAAA;AAElE,EAAA,IAAI;AAEF,IAAA,OAAA,CAAQ,IAAA,CAAK,KAAK,CAAC,CAAA;AAAA,EACrB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IAAI;AAEF,IAAA,MAAM,MAAM,QAAA,CAAS,CAAA,MAAA,EAAS,MAAA,CAAO,GAAG,CAAC,CAAA,YAAA,CAAA,EAAgB;AAAA,MACvD,QAAA,EAAU,OAAA;AAAA,MACV,OAAA,EAAS;AAAA,KACV,EAAE,IAAA,EAAK;AACR,IAAA,OAAO,GAAA,CAAI,SAAS,WAAW,CAAA;AAAA,EACjC,CAAA,CAAA,MAAQ;AAEN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAEA,SAAS,cAAA,GAAoC;AAC3C,EAAA,IAAI;AACF,IAAA,IAAI,CAAI,GAAA,CAAA,UAAA,CAAW,KAAA,CAAM,MAAM,GAAG,OAAO,IAAA;AACzC,IAAA,MAAM,GAAA,GAAS,GAAA,CAAA,YAAA,CAAa,KAAA,CAAM,MAAA,EAAQ,OAAO,CAAA;AACjD,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAC3B,IAAA,IAAI,CAAC,eAAA,CAAgB,IAAA,CAAK,GAAG,CAAA,EAAG;AAE9B,MAAA,IAAI;AACF,QAAG,GAAA,CAAA,UAAA,CAAW,MAAM,MAAM,CAAA;AAAA,MAC5B,CAAA,CAAA,MAAQ;AAAA,MAER;AACA,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAKA,eAAsB,UAAU,OAAA,EAA2C;AACzE,EAAA,IAAI,OAAO,cAAA,EAAe;AAE1B,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,IAAA,GAAO,MAAM,YAAY,OAAO,CAAA;AAAA,EAClC;AAEA,EAAA,MAAM,MAAA,GAAS,IAAI,QAAA,CAAS;AAAA,IAC1B,MAAM,IAAA,CAAK,IAAA;AAAA,IACX,OAAO,IAAA,CAAK,KAAA;AAAA,IACZ,SAAS,OAAA,CAAQ;AAAA,GAClB,CAAA;AAED,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,OAAO,MAAA;AACT;AA4BA,SAAS,WAAA,GAA6B;AACpC,EAAA,SAAA,CAAU,MAAM,IAAI,CAAA;AACpB,EAAA,IAAI;AAEF,IAAA,MAAM,EAAA,GAAQ,GAAA,CAAA,QAAA,CAAS,SAAA,EAAW,IAAI,CAAA;AACtC,IAAG,GAAA,CAAA,aAAA,CAAc,WAAW,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,EAAG,EAAE,IAAA,EAAM,GAAA,EAAO,CAAA;AAChE,IAAA,OAAO,EAAA;AAAA,EACT,SAAS,GAAA,EAAc;AACrB,IAAA,IAAK,GAAA,CAA8B,SAAS,QAAA,EAAU;AAEpD,MAAA,IAAI;AACF,QAAA,MAAM,OAAA,GAAU,SAAY,GAAA,CAAA,YAAA,CAAa,SAAA,EAAW,OAAO,CAAA,CAAE,IAAA,IAAQ,EAAE,CAAA;AACvE,QAAA,IAAI,MAAA,CAAO,SAAA,CAAU,OAAO,CAAA,IAAK,UAAU,CAAA,EAAG;AAC5C,UAAA,IAAI;AACF,YAAA,OAAA,CAAQ,IAAA,CAAK,SAAS,CAAC,CAAA;AACvB,YAAA,OAAO,IAAA;AAAA,UACT,CAAA,CAAA,MAAQ;AAEN,YAAA,IAAI;AAAE,cAAG,eAAW,SAAS,CAAA;AAAA,YAAG,CAAA,CAAA,MAAQ;AAAA,YAAe;AACvD,YAAA,OAAO,WAAA,EAAY;AAAA,UACrB;AAAA,QACF;AAAA,MACF,CAAA,CAAA,MAAQ;AAEN,QAAA,IAAI;AAAE,UAAG,eAAW,SAAS,CAAA;AAAA,QAAG,CAAA,CAAA,MAAQ;AAAA,QAAe;AAAA,MACzD;AACA,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AACF;AAEA,SAAS,YAAY,EAAA,EAAkB;AACrC,EAAA,IAAI;AAAE,IAAG,cAAU,EAAE,CAAA;AAAA,EAAG,CAAA,CAAA,MAAQ;AAAA,EAAe;AAC/C,EAAA,IAAI;AAAE,IAAG,eAAW,SAAS,CAAA;AAAA,EAAG,CAAA,CAAA,MAAQ;AAAA,EAAe;AACzD;AAEA,eAAe,YAAY,OAAA,EAA6C;AACtE,EAAA,SAAA,CAAU,MAAM,IAAI,CAAA;AAGpB,EAAA,MAAM,SAAS,WAAA,EAAY;AAC3B,EAAA,IAAI,WAAW,IAAA,EAAM;AAEnB,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA;AAC9B,IAAA,OAAO,IAAA,CAAK,GAAA,EAAI,GAAI,QAAA,EAAU;AAC5B,MAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,MAAM,UAAA,CAAW,CAAA,EAAG,GAAG,CAAC,CAAA;AAC3C,MAAA,MAAM,OAAO,cAAA,EAAe;AAC5B,MAAA,IAAI,MAAM,OAAO,IAAA;AAAA,IACnB;AACA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AAEA,EAAA,IAAI;AAEF,IAAA,MAAM,WAAW,cAAA,EAAe;AAChC,IAAA,IAAI,UAAU,OAAO,QAAA;AAErB,IAAA,MAAM,SAAS,UAAA,EAAW;AAE1B,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,OAAA,IAAW,MAAA,CAAO,OAAA,IAAW,YAAA;AACrD,IAAA,IAAI,CAAC,cAAA,CAAe,OAAO,CAAA,EAAG;AAC5B,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,sBAAsB,OAAO,CAAA,iDAAA;AAAA,OAC/B;AAAA,IACF;AAEA,IAAA,MAAM,UAAA,GAAa;AAAA,MACjB,OAAA;AAAA,MACA,OAAA,EAAS,OAAA,CAAQ,OAAA,IAAW,MAAA,CAAO,YAAA,IAAgB,CAAA;AAAA,MACnD,GAAA,EAAK,OAAA,CAAQ,GAAA,IAAO,MAAA,CAAO,GAAA;AAAA,MAC3B,YAAA,EAAc,OAAA,CAAQ,YAAA,IAAgB,MAAA,CAAO,YAAA;AAAA,MAC7C,OAAA,EAAS,QAAQ,OAAA,IAAW;AAAA,KAC9B;AAEA,IAAA,MAAM,YAAA,GAAoBA,IAAA,CAAA,IAAA,CAAK,WAAA,EAAY,EAAG,OAAO,cAAc,CAAA;AAGnE,IAAA,IAAI;AACF,MAAA,IAAO,eAAW,KAAA,CAAM,MAAM,GAAM,GAAA,CAAA,UAAA,CAAW,MAAM,MAAM,CAAA;AAAA,IAC7D,CAAA,CAAA,MAAQ;AAAA,IAER;AAGA,IAAA,MAAM,KAAA,GAAW,GAAA,CAAA,QAAA,CAAS,KAAA,CAAM,SAAA,EAAW,KAAK,GAAK,CAAA;AACrD,IAAA,MAAM,KAAA,GAAQ,KAAA;AAAA,MACZ,OAAA,CAAQ,QAAA;AAAA,MACR,CAAC,YAAA,EAAc,IAAA,CAAK,SAAA,CAAU,UAAU,CAAC,CAAA;AAAA,MACzC;AAAA,QACE,QAAA,EAAU,IAAA;AAAA,QACV,KAAA,EAAO,CAAC,QAAA,EAAU,KAAA,EAAO,KAAK,CAAA;AAAA;AAAA,QAE9B,KAAK,EAAE,GAAG,QAAQ,GAAA,EAAK,kBAAA,EAAoB,QAAQ,MAAA;AAAO;AAC5D,KACF;AACA,IAAA,KAAA,CAAM,KAAA,EAAM;AACZ,IAAG,cAAU,KAAK,CAAA;AAGlB,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA;AAC9B,IAAA,OAAO,IAAA,CAAK,GAAA,EAAI,GAAI,QAAA,EAAU;AAC5B,MAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,MAAM,UAAA,CAAW,CAAA,EAAG,GAAG,CAAC,CAAA;AAC3C,MAAA,MAAM,OAAO,cAAA,EAAe;AAC5B,MAAA,IAAI,MAAM,OAAO,IAAA;AAAA,IACnB;AAEA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,yCAAA,EAA4C,MAAM,SAAS,CAAA,aAAA;AAAA,KAC7D;AAAA,EACF,CAAA,SAAE;AACA,IAAA,WAAA,CAAY,MAAM,CAAA;AAAA,EACpB;AACF;;;AChQA,SAAS,aAAA,GAAwB;AAC/B,EAAA,MAAM,SAAS,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAA,IAAK,YAAW,CAAE,MAAA;AAC1D,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAGA,IAAI,YAAA,GAAgC,IAAA;AAEpC,eAAe,kBAAkB,OAAA,EAAqC;AAEpE,EAAA,IAAI,YAAA,IAAgB,YAAA,CAAa,MAAA,EAAO,EAAG;AACzC,IAAA,OAAO,YAAA;AAAA,EACT;AAEA,EAAA,MAAM,SAAS,UAAA,EAAW;AAC1B,EAAA,MAAM,SAAS,aAAA,EAAc;AAE7B,EAAA,YAAA,GAAe,MAAM,SAAA,CAAU;AAAA,IAC7B,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,MAAA;AAAA,IACA,OAAA,EAAS,WAAW,MAAA,CAAO,YAAA;AAAA,IAC3B,KAAK,MAAA,CAAO,GAAA;AAAA,IACZ,cAAc,MAAA,CAAO;AAAA,GACtB,CAAA;AAED,EAAA,OAAO,YAAA;AACT;AAEO,SAAS,iBAAA,GAA0B;AACxC,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,YAAA,CAAa,KAAA,EAAM;AACnB,IAAA,YAAA,GAAe,IAAA;AAAA,EACjB;AACF;AAEO,SAAS,cAAA,GAA0B;AACxC,EAAA,OAAO,YAAA,KAAiB,IAAA,IAAQ,YAAA,CAAa,MAAA,EAAO;AACtD;AAEO,SAAS,gBAAgB,MAAA,EAAyB;AAEvD,EAAA,MAAA,CAAO,IAAA;AAAA,IACL,SAAA;AAAA,IACA,oWAAA;AAAA,IAKA,eAAA;AAAA,IACA,OAAO,MAAA,KAAW;AAChB,MAAA,IAAI;AACF,QAAA,MAAM,MAAA,GAAS,MAAM,iBAAA,CAAkB,MAAA,CAAO,OAAO,CAAA;AACrD,QAAA,MAAM,SAAS,MAAM,MAAA,CAAO,QAAQ,MAAA,CAAO,MAAA,EAAQ,OAAO,MAAM,CAAA;AAChE,QAAA,OAAO,UAAU,MAAM,CAAA;AAAA,MACzB,SAAS,GAAA,EAAK;AAEZ,QAAA,IAAI,YAAA,IAAgB,CAAC,YAAA,CAAa,MAAA,EAAO,EAAG;AAC1C,UAAA,YAAA,GAAe,IAAA;AAAA,QACjB;AACA,QAAA,OAAO,SAAS,GAAG,CAAA;AAAA,MACrB;AAAA,IACF;AAAA,GACF;AACF","file":"rpc.js","sourcesContent":["import { z } from \"zod\";\n\n/**\n * Single generic RPC method schema.\n * Accepts any EIP-1193 RPC method and forwards to JAWProvider.\n */\nexport const rpcMethodSchema = {\n  method: z\n    .string()\n    .describe(\n      \"EIP-1193 RPC method name (e.g. wallet_connect, wallet_sendCalls, personal_sign). \" +\n        \"Read the jaw://api-reference resource for the full list and jaw://api-reference/{method} for parameter details.\",\n    ),\n  params: z\n    .any()\n    .optional()\n    .describe(\n      \"Method parameters — structure varies by method. \" +\n        \"Read the jaw://api-reference/{method} resource for the expected format.\",\n    ),\n  chainId: z\n    .number()\n    .optional()\n    .describe(\n      \"Target chain ID (overrides default). E.g., 1 for Ethereum, 8453 for Base, 84532 for Base Sepolia\",\n    ),\n};\n\nexport const configSetSchema = {\n  key: z\n    .enum([\"apiKey\", \"defaultChain\", \"keysUrl\", \"paymasterUrl\", \"ens\"])\n    .describe(\"Config key\"),\n  value: z.string().describe(\"Config value\"),\n};\n","export function mcpError(err: unknown) {\n  return {\n    isError: true as const,\n    content: [\n      {\n        type: \"text\" as const,\n        text: `Error: ${err instanceof Error ? err.message : String(err)}`,\n      },\n    ],\n  };\n}\n\nexport function mcpResult(data: unknown) {\n  return {\n    content: [\n      {\n        type: \"text\" as const,\n        text: JSON.stringify(data),\n      },\n    ],\n  };\n}","import * as path from \"node:path\";\nimport * as os from \"node:os\";\n\nconst JAW_DIR = path.join(os.homedir(), \".jaw\");\n\nexport const PATHS = {\n  root: JAW_DIR,\n  config: path.join(JAW_DIR, \"config.json\"),\n  session: path.join(JAW_DIR, \"session.json\"),\n  bridge: path.join(JAW_DIR, \"bridge.json\"),\n  daemonLog: path.join(JAW_DIR, \"daemon.log\"),\n} as const;\n","export function isValidAddress(value: string): boolean {\n  return /^0x[0-9a-fA-F]{40}$/.test(value);\n}\n\nexport function isValidHex(value: string): boolean {\n  return /^0x[0-9a-fA-F]*$/.test(value);\n}\n\nexport function isValidChainId(value: string | number): boolean {\n  const num = typeof value === \"string\" ? parseInt(value, 10) : value;\n  return Number.isInteger(num) && num > 0;\n}\n\nexport function parseChainId(value: string): number {\n  const num = parseInt(value, 10);\n  if (!isValidChainId(num)) {\n    throw new Error(`Invalid chain ID: ${value}`);\n  }\n  return num;\n}\n\nexport function assertAddress(value: string, label = \"address\"): `0x${string}` {\n  if (!isValidAddress(value)) {\n    throw new Error(`Invalid ${label}: ${value}`);\n  }\n  return value as `0x${string}`;\n}\n\nexport function parseWei(raw: string, label = \"value\"): bigint {\n  try {\n    return BigInt(raw);\n  } catch {\n    throw new Error(`Invalid ${label}: \"${raw}\" is not a valid wei amount`);\n  }\n}\n\nexport function isValidKeysUrl(url: string): boolean {\n  try {\n    const parsed = new URL(url);\n    const isTrustedHost =\n      parsed.hostname.endsWith(\".jaw.id\") ||\n      parsed.hostname === \"jaw.id\" ||\n      parsed.hostname === \"localhost\" ||\n      parsed.hostname === \"127.0.0.1\";\n    const isSecure =\n      parsed.protocol === \"https:\" ||\n      parsed.hostname === \"localhost\" ||\n      parsed.hostname === \"127.0.0.1\";\n    return isTrustedHost && isSecure;\n  } catch {\n    return false;\n  }\n}\n","import * as fs from \"node:fs\";\nimport { PATHS } from \"./paths.js\";\nimport type { JawConfig } from \"./types.js\";\nimport { isValidKeysUrl } from \"./validation.js\";\n\nexport function ensureDir(dir: string): void {\n  fs.mkdirSync(dir, { recursive: true, mode: 0o700 });\n  fs.chmodSync(dir, 0o700);\n}\n\nexport function loadConfig(): JawConfig {\n  if (!fs.existsSync(PATHS.config)) {\n    return {};\n  }\n  const raw = fs.readFileSync(PATHS.config, \"utf-8\");\n  try {\n    return JSON.parse(raw) as JawConfig;\n  } catch {\n    throw new Error(\n      `Config file at ${PATHS.config} is not valid JSON. Run \\`jaw config set apiKey=<key>\\` to reset it.`,\n    );\n  }\n}\n\nexport function saveConfig(config: JawConfig): void {\n  ensureDir(PATHS.root);\n  fs.writeFileSync(PATHS.config, JSON.stringify(config, null, 2) + \"\\n\", {\n    encoding: \"utf-8\",\n    mode: 0o600,\n  });\n}\n\nexport function redactConfig(config: JawConfig): Record<string, unknown> {\n  return {\n    ...config,\n    apiKey: config.apiKey ? `${config.apiKey.slice(0, 8)}...` : undefined,\n  };\n}\n\nexport function getConfigValue(\n  key: keyof JawConfig,\n): string | number | undefined {\n  const config = loadConfig();\n  return config[key];\n}\n\nexport function setConfigValue(\n  key: keyof JawConfig,\n  value: string | number,\n): void {\n  if (\n    key === \"keysUrl\" &&\n    typeof value === \"string\" &&\n    !isValidKeysUrl(value)\n  ) {\n    throw new Error(\n      `Untrusted keysUrl: ${value}. Must be a *.jaw.id domain (HTTPS) or localhost.`,\n    );\n  }\n  const config = loadConfig();\n  const updated = { ...config, [key]: value };\n  saveConfig(updated);\n}\n","/**\n * WSBridge — CLI-side client\n *\n * Lightweight WebSocket client that connects to the background daemon.\n * Each CLI command creates a WSBridge, sends one request, and exits.\n * The daemon (and browser SDK) stay alive across commands.\n */\n\nimport * as crypto from \"node:crypto\";\nimport WebSocket from \"ws\";\n\nexport interface WSBridgeOptions {\n  port: number;\n  token: string;\n  timeout?: number;\n}\n\nconst DEFAULT_TIMEOUT_MS = 120_000;\n\nexport class WSBridge {\n  private readonly port: number;\n  private readonly token: string;\n  private readonly timeout: number;\n  private ws: WebSocket | null = null;\n\n  constructor(options: WSBridgeOptions) {\n    this.port = options.port;\n    this.token = options.token;\n    this.timeout = options.timeout ?? DEFAULT_TIMEOUT_MS;\n  }\n\n  /**\n   * Connect to the daemon's WebSocket server.\n   */\n  async connect(): Promise<void> {\n    return new Promise((resolve, reject) => {\n      const url = `ws://127.0.0.1:${this.port}?token=${encodeURIComponent(this.token)}&role=cli`;\n      const ws = new WebSocket(url);\n\n      const timer = setTimeout(() => {\n        ws.close();\n        reject(\n          new Error(\n            \"Browser SDK did not connect in time.\\n\" +\n              \"If the browser tab failed to open, run `jaw disconnect` then try again.\",\n          ),\n        );\n      }, 30_000);\n\n      ws.on(\"open\", () => {\n        clearTimeout(timer);\n        this.ws = ws;\n      });\n\n      ws.on(\"message\", (data) => {\n        let msg: Record<string, unknown>;\n        try {\n          msg = JSON.parse(data.toString()) as Record<string, unknown>;\n        } catch {\n          return;\n        }\n        // Wait for the status message confirming daemon is ready.\n        // If browser isn't connected yet, stay connected and wait for\n        // a \"browser_connected\" event (the daemon notifies CLI clients\n        // when the browser joins).\n        if (msg.type === \"status\" && msg.browserConnected) {\n          clearTimeout(timer);\n          resolve();\n        } else if (msg.type === \"browser_connected\") {\n          clearTimeout(timer);\n          resolve();\n        }\n      });\n\n      ws.on(\"error\", (err) => {\n        clearTimeout(timer);\n        reject(err);\n      });\n\n      ws.on(\"close\", () => {\n        clearTimeout(timer);\n      });\n    });\n  }\n\n  /**\n   * Send an RPC request through the daemon to the browser SDK.\n   */\n  async request(method: string, params?: unknown): Promise<unknown> {\n    const ws = this.ws;\n    if (!ws || ws.readyState !== WebSocket.OPEN) {\n      throw new Error(\"Not connected to bridge daemon\");\n    }\n\n    const id = crypto.randomUUID();\n\n    return new Promise<unknown>((resolve, reject) => {\n      const timer = setTimeout(() => {\n        reject(\n          new Error(\n            `Request timed out after ${this.timeout / 1000}s. ` +\n              \"Did you complete the action in the browser?\",\n          ),\n        );\n        this.close();\n      }, this.timeout);\n\n      const onMessage = (data: WebSocket.Data) => {\n        let msg: Record<string, unknown>;\n        try {\n          msg = JSON.parse(data.toString()) as Record<string, unknown>;\n        } catch {\n          return;\n        }\n\n        if (msg.type === \"rpc_response\" && msg.id === id) {\n          clearTimeout(timer);\n          ws.off(\"message\", onMessage);\n\n          if (msg.success) {\n            resolve(msg.data);\n          } else {\n            const err = msg.error as\n              | { code: number; message: string }\n              | undefined;\n            reject(\n              new Error(\n                err ? `[${err.code}] ${err.message}` : \"Request failed\",\n              ),\n            );\n          }\n        }\n      };\n\n      ws.on(\"message\", onMessage);\n\n      ws.send(\n        JSON.stringify({\n          id,\n          type: \"rpc_request\",\n          method,\n          params,\n        }),\n      );\n    });\n  }\n\n  /**\n   * Check if the WebSocket connection is open.\n   */\n  isOpen(): boolean {\n    return this.ws?.readyState === WebSocket.OPEN;\n  }\n\n  /**\n   * Send a shutdown signal to the daemon.\n   */\n  shutdown(): void {\n    if (this.ws?.readyState === WebSocket.OPEN) {\n      this.ws.send(JSON.stringify({ type: \"shutdown\" }));\n    }\n    this.close();\n  }\n\n  /**\n   * Close the client connection (daemon stays alive).\n   */\n  close(): void {\n    if (this.ws) {\n      try {\n        this.ws.close();\n      } catch {\n        // ignore\n      }\n      this.ws = null;\n    }\n  }\n}\n","/**\n * Bridge lifecycle management.\n *\n * - Spawns a background daemon if one isn't running\n * - Creates a WSBridge client connected to the daemon\n * - Provides shutdown to kill the daemon\n */\n\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { spawn, execSync } from \"node:child_process\";\nimport { PATHS } from \"./paths.js\";\nimport { ensureDir } from \"./config.js\";\nimport { WSBridge } from \"./ws-bridge.js\";\nimport { loadConfig } from \"./config.js\";\nimport { isValidKeysUrl } from \"./validation.js\";\n\n/**\n * Find the dist directory root by walking up from the current file.\n * Needed because tsup inlines this code into consuming entry points,\n * so import.meta.url may point to e.g. dist/commands/rpc/call.js\n * rather than dist/lib/bridge-singleton.js.\n */\nfunction findDistDir(): string {\n  let dir = path.dirname(fileURLToPath(import.meta.url));\n  // Walk up until we find a directory that contains lib/ws-daemon.js\n  for (let i = 0; i < 10; i++) {\n    const candidate = path.join(dir, \"lib\", \"ws-daemon.js\");\n    if (fs.existsSync(candidate)) return dir;\n    dir = path.dirname(dir);\n  }\n  throw new Error(\"Cannot find ws-daemon.js in dist tree\");\n}\n\nconst JAW_KEYS_URL = \"https://keys.jaw.id\";\nconst LOCK_PATH = path.join(PATHS.root, \"daemon.lock\");\n\ninterface BridgeInfo {\n  port: number;\n  token: string;\n  pid: number;\n  startedAt: string;\n}\n\nexport interface BridgeOptions {\n  keysUrl?: string;\n  apiKey: string;\n  chainId?: number;\n  ens?: string;\n  paymasterUrl?: string;\n  timeout?: number;\n}\n\n/**\n * Verify that the process at `pid` is actually our ws-daemon, not an\n * impersonator that killed the real daemon and took over the port.\n */\nfunction isDaemonProcess(pid: number): boolean {\n  // Validate PID is a positive integer to prevent command injection via bridge.json\n  if (!Number.isInteger(pid) || pid <= 0 || pid > 4_194_304) return false;\n\n  try {\n    // Signal 0 checks if process exists\n    process.kill(pid, 0);\n  } catch {\n    return false;\n  }\n\n  try {\n    // Verify the process command line contains ws-daemon\n    const cmd = execSync(`ps -p ${String(pid)} -o command=`, {\n      encoding: \"utf-8\",\n      timeout: 3000,\n    }).trim();\n    return cmd.includes(\"ws-daemon\");\n  } catch {\n    // If ps fails (process just died), treat as invalid\n    return false;\n  }\n}\n\nfunction loadBridgeInfo(): BridgeInfo | null {\n  try {\n    if (!fs.existsSync(PATHS.bridge)) return null;\n    const raw = fs.readFileSync(PATHS.bridge, \"utf-8\");\n    const info = JSON.parse(raw) as BridgeInfo;\n    if (!isDaemonProcess(info.pid)) {\n      // Process is dead or not our daemon — clean up stale file\n      try {\n        fs.unlinkSync(PATHS.bridge);\n      } catch {\n        /* ignore */\n      }\n      return null;\n    }\n    return info;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Ensure a daemon is running and return a connected WSBridge client.\n */\nexport async function getBridge(options: BridgeOptions): Promise<WSBridge> {\n  let info = loadBridgeInfo();\n\n  if (!info) {\n    info = await spawnDaemon(options);\n  }\n\n  const bridge = new WSBridge({\n    port: info.port,\n    token: info.token,\n    timeout: options.timeout,\n  });\n\n  await bridge.connect();\n  return bridge;\n}\n\n/**\n * Shutdown the running daemon.\n */\nexport async function shutdownDaemon(): Promise<void> {\n  const info = loadBridgeInfo();\n  if (!info) return;\n\n  // Kill the daemon process directly\n  try {\n    process.kill(info.pid, \"SIGTERM\");\n  } catch {\n    // Process already dead\n  }\n\n  // Clean up bridge file\n  try {\n    if (fs.existsSync(PATHS.bridge)) fs.unlinkSync(PATHS.bridge);\n  } catch {\n    // ignore\n  }\n}\n\n/**\n * Acquire an exclusive lockfile to prevent concurrent daemon spawning.\n * Returns the file descriptor on success, or null if another process holds the lock.\n */\nfunction acquireLock(): number | null {\n  ensureDir(PATHS.root);\n  try {\n    // O_CREAT | O_EXCL — fails atomically if file already exists\n    const fd = fs.openSync(LOCK_PATH, \"wx\");\n    fs.writeFileSync(LOCK_PATH, String(process.pid), { mode: 0o600 });\n    return fd;\n  } catch (err: unknown) {\n    if ((err as NodeJS.ErrnoException).code === \"EEXIST\") {\n      // Check if the lock holder is still alive (stale lock recovery)\n      try {\n        const lockPid = parseInt(fs.readFileSync(LOCK_PATH, \"utf-8\").trim(), 10);\n        if (Number.isInteger(lockPid) && lockPid > 0) {\n          try {\n            process.kill(lockPid, 0);\n            return null; // Process alive — lock is held\n          } catch {\n            // Process dead — stale lock, remove and retry once\n            try { fs.unlinkSync(LOCK_PATH); } catch { /* ignore */ }\n            return acquireLock();\n          }\n        }\n      } catch {\n        // Can't read lock — try removing stale file\n        try { fs.unlinkSync(LOCK_PATH); } catch { /* ignore */ }\n      }\n      return null;\n    }\n    throw err;\n  }\n}\n\nfunction releaseLock(fd: number): void {\n  try { fs.closeSync(fd); } catch { /* ignore */ }\n  try { fs.unlinkSync(LOCK_PATH); } catch { /* ignore */ }\n}\n\nasync function spawnDaemon(options: BridgeOptions): Promise<BridgeInfo> {\n  ensureDir(PATHS.root);\n\n  // Acquire lock to prevent concurrent daemon spawning (TOCTOU guard)\n  const lockFd = acquireLock();\n  if (lockFd === null) {\n    // Another process is spawning — wait for bridge.json to appear\n    const deadline = Date.now() + 15_000;\n    while (Date.now() < deadline) {\n      await new Promise((r) => setTimeout(r, 300));\n      const info = loadBridgeInfo();\n      if (info) return info;\n    }\n    throw new Error(\n      \"Another process is starting the daemon. Timed out waiting for it.\",\n    );\n  }\n\n  try {\n    // Re-check after acquiring lock — another process may have just finished\n    const existing = loadBridgeInfo();\n    if (existing) return existing;\n\n    const config = loadConfig();\n\n    const keysUrl = options.keysUrl ?? config.keysUrl ?? JAW_KEYS_URL;\n    if (!isValidKeysUrl(keysUrl)) {\n      throw new Error(\n        `Untrusted keysUrl: ${keysUrl}. Must be a *.jaw.id domain (HTTPS) or localhost.`,\n      );\n    }\n\n    const daemonArgs = {\n      keysUrl,\n      chainId: options.chainId ?? config.defaultChain ?? 1,\n      ens: options.ens ?? config.ens,\n      paymasterUrl: options.paymasterUrl ?? config.paymasterUrl,\n      timeout: options.timeout ?? 120_000,\n    };\n\n    const daemonScript = path.join(findDistDir(), \"lib\", \"ws-daemon.js\");\n\n    // Remove stale bridge file before spawning\n    try {\n      if (fs.existsSync(PATHS.bridge)) fs.unlinkSync(PATHS.bridge);\n    } catch {\n      // ignore\n    }\n\n    // Truncate log to prevent unbounded growth from previous sessions\n    const logFd = fs.openSync(PATHS.daemonLog, \"w\", 0o600);\n    const child = spawn(\n      process.execPath,\n      [daemonScript, JSON.stringify(daemonArgs)],\n      {\n        detached: true,\n        stdio: [\"ignore\", logFd, logFd],\n        // Pass API key via env var instead of process args to avoid ps aux exposure\n        env: { ...process.env, JAW_DAEMON_API_KEY: options.apiKey },\n      },\n    );\n    child.unref();\n    fs.closeSync(logFd);\n\n    // Poll for bridge.json to appear (daemon writes it once WS server is ready)\n    const deadline = Date.now() + 15_000;\n    while (Date.now() < deadline) {\n      await new Promise((r) => setTimeout(r, 200));\n      const info = loadBridgeInfo();\n      if (info) return info;\n    }\n\n    throw new Error(\n      `Daemon failed to start within 15s. Check ${PATHS.daemonLog} for details.`,\n    );\n  } finally {\n    releaseLock(lockFd);\n  }\n}\n","import type { McpServer } from \"@modelcontextprotocol/sdk/server/mcp.js\";\nimport { rpcMethodSchema } from \"../tools.js\";\nimport { mcpError, mcpResult } from \"../helpers.js\";\nimport { getBridge } from \"../../lib/bridge-singleton.js\";\nimport { loadConfig } from \"../../lib/config.js\";\nimport type { WSBridge } from \"../../lib/ws-bridge.js\";\n\nfunction resolveApiKey(): string {\n  const apiKey = process.env[\"JAW_API_KEY\"] ?? loadConfig().apiKey;\n  if (!apiKey) {\n    throw new Error(\n      \"API key required. Set JAW_API_KEY env var or run: jaw config set apiKey <key>\",\n    );\n  }\n  return apiKey;\n}\n\n/** Cached bridge connection — reused across sequential MCP tool calls. */\nlet cachedBridge: WSBridge | null = null;\n\nasync function getOrCreateBridge(chainId?: number): Promise<WSBridge> {\n  // Reuse if the connection is still open\n  if (cachedBridge && cachedBridge.isOpen()) {\n    return cachedBridge;\n  }\n\n  const config = loadConfig();\n  const apiKey = resolveApiKey();\n\n  cachedBridge = await getBridge({\n    keysUrl: config.keysUrl,\n    apiKey,\n    chainId: chainId ?? config.defaultChain,\n    ens: config.ens,\n    paymasterUrl: config.paymasterUrl,\n  });\n\n  return cachedBridge;\n}\n\nexport function closeCachedBridge(): void {\n  if (cachedBridge) {\n    cachedBridge.close();\n    cachedBridge = null;\n  }\n}\n\nexport function isBridgeCached(): boolean {\n  return cachedBridge !== null && cachedBridge.isOpen();\n}\n\nexport function registerRpcTool(server: McpServer): void {\n  // @ts-expect-error — MCP SDK deep type inference with z.any() in schema\n  server.tool(\n    \"jaw_rpc\",\n    \"Execute any JAW.id wallet RPC method via the browser bridge. \" +\n      \"Supports transactions, signing, permissions, and queries. \" +\n      \"Methods that require signing will open the browser for passkey authentication. \" +\n      \"IMPORTANT: Read the jaw://api-reference resource for the full list of methods, \" +\n      \"and jaw://api-reference/{method} for detailed parameter formats and examples.\",\n    rpcMethodSchema,\n    async (params) => {\n      try {\n        const bridge = await getOrCreateBridge(params.chainId);\n        const result = await bridge.request(params.method, params.params);\n        return mcpResult(result);\n      } catch (err) {\n        // If the connection broke, clear the cache so the next call reconnects\n        if (cachedBridge && !cachedBridge.isOpen()) {\n          cachedBridge = null;\n        }\n        return mcpError(err);\n      }\n    },\n  );\n}\n"]}

package/dist/mcp/helpers.js

@@ -0,0 +1,26 @@
+// src/mcp/helpers.ts
+function mcpError(err) {
+  return {
+    isError: true,
+    content: [
+      {
+        type: "text",
+        text: `Error: ${err instanceof Error ? err.message : String(err)}`
+      }
+    ]
+  };
+}
+function mcpResult(data) {
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify(data)
+      }
+    ]
+  };
+}
+
+export { mcpError, mcpResult };
+//# sourceMappingURL=helpers.js.map
+//# sourceMappingURL=helpers.js.map

package/dist/mcp/helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/mcp/helpers.ts"],"names":[],"mappings":";AAAO,SAAS,SAAS,GAAA,EAAc;AACrC,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,IAAA;AAAA,IACT,OAAA,EAAS;AAAA,MACP;AAAA,QACE,IAAA,EAAM,MAAA;AAAA,QACN,IAAA,EAAM,UAAU,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA;AAClE;AACF,GACF;AACF;AAEO,SAAS,UAAU,IAAA,EAAe;AACvC,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP;AAAA,QACE,IAAA,EAAM,MAAA;AAAA,QACN,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA;AAC3B;AACF,GACF;AACF","file":"helpers.js","sourcesContent":["export function mcpError(err: unknown) {\n  return {\n    isError: true as const,\n    content: [\n      {\n        type: \"text\" as const,\n        text: `Error: ${err instanceof Error ? err.message : String(err)}`,\n      },\n    ],\n  };\n}\n\nexport function mcpResult(data: unknown) {\n  return {\n    content: [\n      {\n        type: \"text\" as const,\n        text: JSON.stringify(data),\n      },\n    ],\n  };\n}"]}