@jaw.id/cli 0.0.8 → 0.1.1

package/oclif.manifest.json

@@ -143,7 +143,7 @@
       "description": "Set one or more configuration values. Accepts key=value pairs or a single key value.",
       "examples": [
         "<%= config.bin %> config set apiKey=your-api-key defaultChain=8453",
-        "<%= config.bin %> config set ens=yourdomain.eth paymasterUrl=https://your-paymaster.com",
+        "<%= config.bin %> config set ens=yourdomain.eth sessionExpiry=14",
         "<%= config.bin %> config set apiKey your-api-key"
       ],
       "flags": {
@@ -280,6 +280,77 @@
         "show.js"
       ]
     },
+    "config:write": {
+      "aliases": [],
+      "args": {},
+      "description": "Write full config from inline JSON or a file path to ~/.jaw/config.json.",
+      "examples": [
+        "<%= config.bin %> config write '{\"apiKey\":\"...\",\"defaultChain\":84532}'",
+        "<%= config.bin %> config write ./jaw-config.json"
+      ],
+      "flags": {
+        "output": {
+          "char": "o",
+          "description": "Output format",
+          "env": "JAW_OUTPUT",
+          "name": "output",
+          "default": "human",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "json",
+            "human"
+          ],
+          "type": "option"
+        },
+        "chain": {
+          "char": "c",
+          "description": "Chain ID",
+          "env": "JAW_CHAIN_ID",
+          "name": "chain",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-key": {
+          "description": "JAW API key",
+          "env": "JAW_API_KEY",
+          "name": "api-key",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "yes": {
+          "char": "y",
+          "description": "Skip confirmations (for AI agents)",
+          "name": "yes",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "quiet": {
+          "char": "q",
+          "description": "Suppress non-essential output",
+          "name": "quiet",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "config:write",
+      "pluginAlias": "@jaw.id/cli",
+      "pluginName": "@jaw.id/cli",
+      "pluginType": "core",
+      "strict": false,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "config",
+        "write.js"
+      ]
+    },
     "mcp": {
       "aliases": [],
       "args": {},
@@ -318,13 +389,14 @@
           "required": false
         }
       },
-      "description": "Execute any JAW.id RPC method via the browser bridge.",
+      "description": "Execute any JAW.id RPC method via the browser bridge or local session key.",
       "examples": [
         "<%= config.bin %> rpc call wallet_sendCalls '{\"calls\":[{\"to\":\"0x...\",\"value\":\"0x0\"}]}'",
         "<%= config.bin %> rpc call personal_sign '\"Hello World\"'",
         "<%= config.bin %> rpc call wallet_getAssets",
         "<%= config.bin %> rpc call eth_requestAccounts",
-        "<%= config.bin %> rpc call wallet_getCallsStatus '\"0x...\"'"
+        "<%= config.bin %> rpc call wallet_getCallsStatus '\"0x...\"'",
+        "<%= config.bin %> rpc call wallet_sendCalls '{\"calls\":[...]}' --session"
       ],
       "flags": {
         "output": {
@@ -380,6 +452,14 @@
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        },
+        "session": {
+          "char": "s",
+          "description": "Use local session key (auto mode)",
+          "env": "JAW_SESSION",
+          "name": "session",
+          "allowNo": false,
+          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
@@ -397,7 +477,227 @@
         "rpc",
         "call.js"
       ]
+    },
+    "session:revoke": {
+      "aliases": [],
+      "args": {},
+      "description": "Revoke on-chain permission and delete local session key.",
+      "flags": {
+        "output": {
+          "char": "o",
+          "description": "Output format",
+          "env": "JAW_OUTPUT",
+          "name": "output",
+          "default": "human",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "json",
+            "human"
+          ],
+          "type": "option"
+        },
+        "chain": {
+          "char": "c",
+          "description": "Chain ID",
+          "env": "JAW_CHAIN_ID",
+          "name": "chain",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-key": {
+          "description": "JAW API key",
+          "env": "JAW_API_KEY",
+          "name": "api-key",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "yes": {
+          "char": "y",
+          "description": "Skip confirmations (for AI agents)",
+          "name": "yes",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "quiet": {
+          "char": "q",
+          "description": "Suppress non-essential output",
+          "name": "quiet",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "session:revoke",
+      "pluginAlias": "@jaw.id/cli",
+      "pluginName": "@jaw.id/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "session",
+        "revoke.js"
+      ]
+    },
+    "session:setup": {
+      "aliases": [],
+      "args": {},
+      "description": "Generate a session key and grant scoped on-chain permissions (one-time browser approval).",
+      "examples": [
+        "<%= config.bin %> session setup --chain 84532",
+        "<%= config.bin %> session setup --permissions '{\"calls\":[...]}' --expiry 14",
+        "<%= config.bin %> session setup --permissions ./permissions.json"
+      ],
+      "flags": {
+        "output": {
+          "char": "o",
+          "description": "Output format",
+          "env": "JAW_OUTPUT",
+          "name": "output",
+          "default": "human",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "json",
+            "human"
+          ],
+          "type": "option"
+        },
+        "chain": {
+          "char": "c",
+          "description": "Chain ID",
+          "env": "JAW_CHAIN_ID",
+          "name": "chain",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-key": {
+          "description": "JAW API key",
+          "env": "JAW_API_KEY",
+          "name": "api-key",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "yes": {
+          "char": "y",
+          "description": "Skip confirmations (for AI agents)",
+          "name": "yes",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "quiet": {
+          "char": "q",
+          "description": "Suppress non-essential output",
+          "name": "quiet",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "permissions": {
+          "description": "Permission scope (inline JSON or file path). Overrides config.permissions.",
+          "name": "permissions",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "expiry": {
+          "description": "Permission expiry in days. Overrides config.sessionExpiry.",
+          "name": "expiry",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "session:setup",
+      "pluginAlias": "@jaw.id/cli",
+      "pluginName": "@jaw.id/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "session",
+        "setup.js"
+      ]
+    },
+    "session:status": {
+      "aliases": [],
+      "args": {},
+      "description": "Show current session status (address, permissions, expiry).",
+      "flags": {
+        "output": {
+          "char": "o",
+          "description": "Output format",
+          "env": "JAW_OUTPUT",
+          "name": "output",
+          "default": "human",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "json",
+            "human"
+          ],
+          "type": "option"
+        },
+        "chain": {
+          "char": "c",
+          "description": "Chain ID",
+          "env": "JAW_CHAIN_ID",
+          "name": "chain",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-key": {
+          "description": "JAW API key",
+          "env": "JAW_API_KEY",
+          "name": "api-key",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "yes": {
+          "char": "y",
+          "description": "Skip confirmations (for AI agents)",
+          "name": "yes",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "quiet": {
+          "char": "q",
+          "description": "Suppress non-essential output",
+          "name": "quiet",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "session:status",
+      "pluginAlias": "@jaw.id/cli",
+      "pluginName": "@jaw.id/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "session",
+        "status.js"
+      ]
     }
   },
-  "version": "0.0.8"
+  "version": "0.1.1"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@jaw.id/cli",
   "description": "CLI + MCP Server for JAW.id smart accounts — for humans and AI agents",
-  "version": "0.0.8",
+  "version": "0.1.1",
   "license": "MIT",
   "type": "module",
   "bin": {
@@ -50,11 +50,26 @@
       },
       "mcp": {
         "description": "Start the MCP server for AI agents"
+      },
+      "session": {
+        "description": "Manage session keys for autonomous AI agents"
       }
     }
   },
   "nx": {
     "targets": {
+      "typecheck": {
+        "executor": "nx:run-commands",
+        "options": {
+          "cwd": "{projectRoot}",
+          "command": "NODE_OPTIONS='--max-old-space-size=8192' tsc --noEmit -p tsconfig.lib.json"
+        },
+        "cache": true,
+        "inputs": [
+          "default",
+          "^production"
+        ]
+      },
       "build": {
         "executor": "nx:run-commands",
         "options": {
@@ -89,9 +104,11 @@
     }
   },
   "dependencies": {
+    "@jaw.id/core": "0.4.0",
     "@modelcontextprotocol/sdk": "^1.12.1",
     "@oclif/core": "^4.3.0",
     "open": "^10.1.0",
+    "viem": "^2.38.2",
     "ws": "^8.18.0",
     "zod": "^3.24.0"
   },

package/dist/lib/session-store.js

@@ -1,80 +0,0 @@
-import * as fs2 from 'fs';
-import * as path from 'path';
-import * as os from 'os';
-
-// src/lib/session-store.ts
-var JAW_DIR = path.join(os.homedir(), ".jaw");
-var PATHS = {
-  root: JAW_DIR,
-  config: path.join(JAW_DIR, "config.json"),
-  session: path.join(JAW_DIR, "session.json"),
-  relay: path.join(JAW_DIR, "relay.json")
-};
-
-// src/lib/validation.ts
-function isValidAddress(value) {
-  return /^0x[0-9a-fA-F]{40}$/.test(value);
-}
-
-// src/lib/config.ts
-function ensureDir(dir) {
-  fs2.mkdirSync(dir, { recursive: true, mode: 448 });
-  fs2.chmodSync(dir, 448);
-}
-
-// src/lib/session-store.ts
-var SESSION_TTL_MS = 24 * 60 * 60 * 1e3;
-function isValidSessionShape(session) {
-  if (!session || typeof session !== "object") return false;
-  const s = session;
-  return typeof s.address === "string" && isValidAddress(s.address) && typeof s.chainId === "number" && Number.isInteger(s.chainId) && s.chainId > 0 && typeof s.connectedAt === "string" && !Number.isNaN(Date.parse(s.connectedAt)) && typeof s.expiresAt === "string" && !Number.isNaN(Date.parse(s.expiresAt));
-}
-function loadSession() {
-  try {
-    if (!fs2.existsSync(PATHS.session)) return null;
-    const raw = fs2.readFileSync(PATHS.session, "utf-8");
-    const parsed = JSON.parse(raw);
-    if (!isValidSessionShape(parsed)) {
-      clearSession();
-      return null;
-    }
-    if (!isSessionValid(parsed)) {
-      clearSession();
-      return null;
-    }
-    return parsed;
-  } catch {
-    return null;
-  }
-}
-function saveSession(session) {
-  ensureDir(PATHS.root);
-  fs2.writeFileSync(PATHS.session, JSON.stringify(session, null, 2) + "\n", {
-    encoding: "utf-8",
-    mode: 384
-  });
-}
-function clearSession() {
-  try {
-    if (fs2.existsSync(PATHS.session)) {
-      fs2.unlinkSync(PATHS.session);
-    }
-  } catch {
-  }
-}
-function isSessionValid(session) {
-  return new Date(session.expiresAt).getTime() > Date.now();
-}
-function createSession(address, chainId) {
-  const now = /* @__PURE__ */ new Date();
-  return {
-    address,
-    chainId,
-    connectedAt: now.toISOString(),
-    expiresAt: new Date(now.getTime() + SESSION_TTL_MS).toISOString()
-  };
-}
-
-export { clearSession, createSession, isSessionValid, loadSession, saveSession };
-//# sourceMappingURL=session-store.js.map
-//# sourceMappingURL=session-store.js.map

package/dist/lib/session-store.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/lib/paths.ts","../../src/lib/validation.ts","../../src/lib/config.ts","../../src/lib/session-store.ts"],"names":["fs"],"mappings":";;;;;AAGA,IAAM,OAAA,GAAe,IAAA,CAAA,IAAA,CAAQ,EAAA,CAAA,OAAA,EAAQ,EAAG,MAAM,CAAA;AAEvC,IAAM,KAAA,GAAQ;AAAA,EACnB,IAAA,EAAM,OAAA;AAAA,EACN,MAAA,EAAa,IAAA,CAAA,IAAA,CAAK,OAAA,EAAS,aAAa,CAAA;AAAA,EACxC,OAAA,EAAc,IAAA,CAAA,IAAA,CAAK,OAAA,EAAS,cAAc,CAAA;AAAA,EAC1C,KAAA,EAAY,IAAA,CAAA,IAAA,CAAK,OAAA,EAAS,YAAY;AACxC,CAAA;;;ACVO,SAAS,eAAe,KAAA,EAAwB;AACrD,EAAA,OAAO,qBAAA,CAAsB,KAAK,KAAK,CAAA;AACzC;;;ACGO,SAAS,UAAU,GAAA,EAAmB;AAC3C,EAAGA,cAAU,GAAA,EAAK,EAAE,WAAW,IAAA,EAAM,IAAA,EAAM,KAAO,CAAA;AAClD,EAAGA,GAAA,CAAA,SAAA,CAAU,KAAK,GAAK,CAAA;AACzB;;;ACSA,IAAM,cAAA,GAAiB,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,GAAA;AAEtC,SAAS,oBAAoB,OAAA,EAAyC;AACpE,EAAA,IAAI,CAAC,OAAA,IAAW,OAAO,OAAA,KAAY,UAAU,OAAO,KAAA;AACpD,EAAA,MAAM,CAAA,GAAI,OAAA;AACV,EAAA,OACE,OAAO,EAAE,OAAA,KAAY,QAAA,IACrB,eAAe,CAAA,CAAE,OAAO,KACxB,OAAO,CAAA,CAAE,YAAY,QAAA,IACrB,MAAA,CAAO,UAAU,CAAA,CAAE,OAAO,KAC1B,CAAA,CAAE,OAAA,GAAU,KACZ,OAAO,CAAA,CAAE,gBAAgB,QAAA,IACzB,CAAC,OAAO,KAAA,CAAM,IAAA,CAAK,MAAM,CAAA,CAAE,WAAW,CAAC,CAAA,IACvC,OAAO,EAAE,SAAA,KAAc,QAAA,IACvB,CAAC,MAAA,CAAO,KAAA,CAAM,KAAK,KAAA,CAAM,CAAA,CAAE,SAAS,CAAC,CAAA;AAEzC;AAEO,SAAS,WAAA,GAAiC;AAC/C,EAAA,IAAI;AACF,IAAA,IAAI,CAAI,GAAA,CAAA,UAAA,CAAW,KAAA,CAAM,OAAO,GAAG,OAAO,IAAA;AAC1C,IAAA,MAAM,GAAA,GAAS,GAAA,CAAA,YAAA,CAAa,KAAA,CAAM,OAAA,EAAS,OAAO,CAAA;AAClD,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAC7B,IAAA,IAAI,CAAC,mBAAA,CAAoB,MAAM,CAAA,EAAG;AAChC,MAAA,YAAA,EAAa;AACb,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,IAAI,CAAC,cAAA,CAAe,MAAM,CAAA,EAAG;AAC3B,MAAA,YAAA,EAAa;AACb,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,OAAO,MAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEO,SAAS,YAAY,OAAA,EAA2B;AACrD,EAAA,SAAA,CAAU,MAAM,IAAI,CAAA;AACpB,EAAG,GAAA,CAAA,aAAA,CAAc,MAAM,OAAA,EAAS,IAAA,CAAK,UAAU,OAAA,EAAS,IAAA,EAAM,CAAC,CAAA,GAAI,IAAA,EAAM;AAAA,IACvE,QAAA,EAAU,OAAA;AAAA,IACV,IAAA,EAAM;AAAA,GACP,CAAA;AACH;AAEO,SAAS,YAAA,GAAqB;AACnC,EAAA,IAAI;AACF,IAAA,IAAO,GAAA,CAAA,UAAA,CAAW,KAAA,CAAM,OAAO,CAAA,EAAG;AAChC,MAAG,GAAA,CAAA,UAAA,CAAW,MAAM,OAAO,CAAA;AAAA,IAC7B;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;AAEO,SAAS,eAAe,OAAA,EAA8B;AAC3D,EAAA,OAAO,IAAI,KAAK,OAAA,CAAQ,SAAS,EAAE,OAAA,EAAQ,GAAI,KAAK,GAAA,EAAI;AAC1D;AAEO,SAAS,aAAA,CAAc,SAAiB,OAAA,EAA6B;AAC1E,EAAA,MAAM,GAAA,uBAAU,IAAA,EAAK;AACrB,EAAA,OAAO;AAAA,IACL,OAAA;AAAA,IACA,OAAA;AAAA,IACA,WAAA,EAAa,IAAI,WAAA,EAAY;AAAA,IAC7B,SAAA,EAAW,IAAI,IAAA,CAAK,GAAA,CAAI,SAAQ,GAAI,cAAc,EAAE,WAAA;AAAY,GAClE;AACF","file":"session-store.js","sourcesContent":["import * as path from 'node:path';\nimport * as os from 'node:os';\n\nconst JAW_DIR = path.join(os.homedir(), '.jaw');\n\nexport const PATHS = {\n  root: JAW_DIR,\n  config: path.join(JAW_DIR, 'config.json'),\n  session: path.join(JAW_DIR, 'session.json'),\n  relay: path.join(JAW_DIR, 'relay.json'),\n} as const;\n","export function isValidAddress(value: string): boolean {\n  return /^0x[0-9a-fA-F]{40}$/.test(value);\n}\n\nexport function isValidHex(value: string): boolean {\n  return /^0x[0-9a-fA-F]*$/.test(value);\n}\n\nexport function isValidChainId(value: string | number): boolean {\n  const num = typeof value === 'string' ? parseInt(value, 10) : value;\n  return Number.isInteger(num) && num > 0;\n}\n\nexport function parseChainId(value: string): number {\n  const num = parseInt(value, 10);\n  if (!isValidChainId(num)) {\n    throw new Error(`Invalid chain ID: ${value}`);\n  }\n  return num;\n}\n\nexport function assertAddress(value: string, label = 'address'): `0x${string}` {\n  if (!isValidAddress(value)) {\n    throw new Error(`Invalid ${label}: ${value}`);\n  }\n  return value as `0x${string}`;\n}\n\nexport function parseWei(raw: string, label = 'value'): bigint {\n  try {\n    return BigInt(raw);\n  } catch {\n    throw new Error(`Invalid ${label}: \"${raw}\" is not a valid wei amount`);\n  }\n}\n\nexport function isValidKeysUrl(url: string): boolean {\n  try {\n    const parsed = new URL(url);\n    const isTrustedHost =\n      parsed.hostname.endsWith('.jaw.id') ||\n      parsed.hostname === 'jaw.id' ||\n      parsed.hostname === 'localhost' ||\n      parsed.hostname === '127.0.0.1';\n    const isSecure = parsed.protocol === 'https:' || parsed.hostname === 'localhost' || parsed.hostname === '127.0.0.1';\n    return isTrustedHost && isSecure;\n  } catch {\n    return false;\n  }\n}\n\nexport function isValidRelayUrl(url: string): boolean {\n  try {\n    const parsed = new URL(url);\n    const isTrustedHost =\n      parsed.hostname.endsWith('.jaw.id') ||\n      parsed.hostname === 'jaw.id' ||\n      parsed.hostname === 'localhost' ||\n      parsed.hostname === '127.0.0.1';\n    const isSecure = parsed.protocol === 'wss:' || parsed.hostname === 'localhost' || parsed.hostname === '127.0.0.1';\n    const isWebSocket = parsed.protocol === 'wss:' || parsed.protocol === 'ws:';\n    return isTrustedHost && isSecure && isWebSocket;\n  } catch {\n    return false;\n  }\n}\n","import * as fs from 'node:fs';\nimport { PATHS } from './paths.js';\nimport type { JawConfig } from './types.js';\nimport { isValidKeysUrl, isValidRelayUrl } from './validation.js';\n\nexport function ensureDir(dir: string): void {\n  fs.mkdirSync(dir, { recursive: true, mode: 0o700 });\n  fs.chmodSync(dir, 0o700);\n}\n\nexport function loadConfig(): JawConfig {\n  if (!fs.existsSync(PATHS.config)) {\n    return {};\n  }\n  const raw = fs.readFileSync(PATHS.config, 'utf-8');\n  try {\n    return JSON.parse(raw) as JawConfig;\n  } catch {\n    throw new Error(\n      `Config file at ${PATHS.config} is not valid JSON. Run \\`jaw config set apiKey=<key>\\` to reset it.`\n    );\n  }\n}\n\nexport function saveConfig(config: JawConfig): void {\n  ensureDir(PATHS.root);\n  fs.writeFileSync(PATHS.config, JSON.stringify(config, null, 2) + '\\n', {\n    encoding: 'utf-8',\n    mode: 0o600,\n  });\n}\n\nexport function redactConfig(config: JawConfig): Record<string, unknown> {\n  return {\n    ...config,\n    apiKey: config.apiKey ? `${config.apiKey.slice(0, 8)}...` : undefined,\n  };\n}\n\nexport function getConfigValue(key: keyof JawConfig): string | number | undefined {\n  const config = loadConfig();\n  return config[key];\n}\n\nexport function setConfigValue(key: keyof JawConfig, value: string | number): void {\n  if (key === 'keysUrl' && typeof value === 'string' && !isValidKeysUrl(value)) {\n    throw new Error(`Untrusted keysUrl: ${value}. Must be a *.jaw.id domain (HTTPS) or localhost.`);\n  }\n  if (key === 'relayUrl' && typeof value === 'string' && !isValidRelayUrl(value)) {\n    throw new Error(`Untrusted relayUrl: ${value}. Must be wss://*.jaw.id or ws://localhost.`);\n  }\n  const config = loadConfig();\n  const updated = { ...config, [key]: value };\n  saveConfig(updated);\n}\n","/**\n * Persists CLI session state to ~/.jaw/session.json\n * Avoids re-authenticating on every CLI invocation.\n */\n\nimport * as fs from 'node:fs';\nimport { PATHS } from './paths.js';\nimport { ensureDir } from './config.js';\nimport { isValidAddress } from './validation.js';\n\nexport interface CLISession {\n  readonly address: string;\n  readonly chainId: number;\n  readonly connectedAt: string;\n  readonly expiresAt: string;\n}\n\nconst SESSION_TTL_MS = 24 * 60 * 60 * 1000; // 24 hours\n\nfunction isValidSessionShape(session: unknown): session is CLISession {\n  if (!session || typeof session !== 'object') return false;\n  const s = session as Record<string, unknown>;\n  return (\n    typeof s.address === 'string' &&\n    isValidAddress(s.address) &&\n    typeof s.chainId === 'number' &&\n    Number.isInteger(s.chainId) &&\n    s.chainId > 0 &&\n    typeof s.connectedAt === 'string' &&\n    !Number.isNaN(Date.parse(s.connectedAt)) &&\n    typeof s.expiresAt === 'string' &&\n    !Number.isNaN(Date.parse(s.expiresAt))\n  );\n}\n\nexport function loadSession(): CLISession | null {\n  try {\n    if (!fs.existsSync(PATHS.session)) return null;\n    const raw = fs.readFileSync(PATHS.session, 'utf-8');\n    const parsed = JSON.parse(raw) as unknown;\n    if (!isValidSessionShape(parsed)) {\n      clearSession();\n      return null;\n    }\n    if (!isSessionValid(parsed)) {\n      clearSession();\n      return null;\n    }\n    return parsed;\n  } catch {\n    return null;\n  }\n}\n\nexport function saveSession(session: CLISession): void {\n  ensureDir(PATHS.root);\n  fs.writeFileSync(PATHS.session, JSON.stringify(session, null, 2) + '\\n', {\n    encoding: 'utf-8',\n    mode: 0o600,\n  });\n}\n\nexport function clearSession(): void {\n  try {\n    if (fs.existsSync(PATHS.session)) {\n      fs.unlinkSync(PATHS.session);\n    }\n  } catch {\n    // ignore\n  }\n}\n\nexport function isSessionValid(session: CLISession): boolean {\n  return new Date(session.expiresAt).getTime() > Date.now();\n}\n\nexport function createSession(address: string, chainId: number): CLISession {\n  const now = new Date();\n  return {\n    address,\n    chainId,\n    connectedAt: now.toISOString(),\n    expiresAt: new Date(now.getTime() + SESSION_TTL_MS).toISOString(),\n  };\n}\n"]}