@jinn-network/client 0.1.1 → 0.1.2-canary.6237288d

package/dist/cli/intent-registry-access.js

@@ -0,0 +1,165 @@
+/**
+ * Shared helpers for the `jinn intents` CLI surface.
+ *
+ * - Builds a RestorerImplRegistry populated with the same impls the daemon
+ *   registers at boot (minus the ones that need live dependencies like a
+ *   running master wallet). The generic `intents list/status/enable/disable`
+ *   verbs use this to dispatch to per-impl onEnable / isReady logic without
+ *   standing up the full daemon.
+ *
+ * - Reads/writes the `restorers.disabled[]` list in the operator's config
+ *   file so `enable` / `disable` can flip per-impl participation.
+ */
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { homedir } from 'node:os';
+import { RestorerImplRegistry } from '../restorer/engine/registry.js';
+import { buildRestorerImpls } from '../restorer/impls/index.js';
+/**
+ * Impls that ship default-disabled because they require external dependencies
+ * (credentials, exchange approvals, etc.) the operator must opt into. Kept in
+ * one place so `main.ts` and the `intents` CLI share a single source of truth.
+ */
+export const DEFAULT_DISABLED_IMPLS = ['claude-mcp-hyperliquid'];
+export const DEFAULT_BY_KIND = {
+    'portfolio.v0': 'claude-mcp-hyperliquid',
+    'prediction.v0': 'prediction-v0-baseline',
+    'prediction.apy.v0': 'prediction-apy-v0-baseline',
+};
+const DEFAULT_CONFIG_PATH = join(homedir(), '.jinn-client', 'config.json');
+export function resolveConfigPath(explicit) {
+    return explicit ?? DEFAULT_CONFIG_PATH;
+}
+/**
+ * Uses {@link buildRestorerImpls} with `stub: true` and no runner (no
+ * `legacy-claude` — requires the daemon process + Claude runner).
+ * Honest readiness for stub is refined in 7ee.2.
+ */
+export function buildIntentsCliRegistry(config) {
+    const registry = new RestorerImplRegistry({
+        byKind: resolveEffectiveByKind(config),
+        default: 'legacy-claude',
+        disabled: resolveEffectiveDisabled(config),
+    });
+    // `implStateDirRoot` matches daemon/doctor construction; stub `isReady()` is
+    // not HL disk-sensitive today, but the path is consistent if that changes.
+    for (const impl of buildRestorerImpls({
+        stub: true,
+        rpcUrl: config.rpcUrl,
+        archiveRpcUrl: config.archiveRpcUrl,
+        claudePath: config.claudePath,
+        claudeModel: config.claudeModel,
+        implStateDirRoot: config.engine.implStateDirRoot,
+    })) {
+        registry.register(impl);
+    }
+    return registry;
+}
+/**
+ * Resolve the effective disabled list, applying the ship-default plus any
+ * operator overrides. Semantics match main.ts: user config fully replaces
+ * the default, so operators who have already curated a list aren't
+ * surprised by new defaults sneaking in.
+ */
+export function resolveEffectiveDisabled(config) {
+    const userDisabled = config.restorers?.disabled;
+    if (userDisabled !== undefined)
+        return [...userDisabled];
+    return [...DEFAULT_DISABLED_IMPLS];
+}
+/** Resolve effective kind → impl mapping, applying operator overrides over ship defaults. */
+export function resolveEffectiveByKind(config) {
+    return {
+        ...DEFAULT_BY_KIND,
+        ...(config.restorers?.byKind ?? {}),
+    };
+}
+/** Is an impl currently disabled in the effective config? */
+export function isImplDisabled(implName, config) {
+    return resolveEffectiveDisabled(config).includes(implName);
+}
+/**
+ * Patch the user's config file to add/remove an impl from the `restorers.disabled[]`
+ * list.
+ *
+ * Semantics (important): since user config fully replaces the default list,
+ * we always rebuild `disabled` from `DEFAULT_DISABLED_IMPLS ∪ user additions`
+ * minus the currently-enabled impl, not from whatever list the user last
+ * wrote. Concretely: if we later add a new default-disabled impl, an operator
+ * who previously enabled X won't silently auto-enable the new one — their
+ * written list always reflects "every current default off, minus what I've
+ * explicitly enabled." Extra operator-added disables are preserved verbatim.
+ *
+ * Returns the new disabled list for the caller to surface.
+ */
+export function setImplEnabledInConfig(implName, enabled, configPath = DEFAULT_CONFIG_PATH) {
+    let current = {};
+    if (existsSync(configPath)) {
+        try {
+            current = JSON.parse(readFileSync(configPath, 'utf-8'));
+        }
+        catch {
+            current = {};
+        }
+    }
+    const restorers = (current['restorers'] ?? {});
+    const existing = new Set(restorers.disabled ?? []);
+    // Operator-added extras: anything they've explicitly disabled that isn't a ship default.
+    const defaults = new Set(DEFAULT_DISABLED_IMPLS);
+    const operatorExtras = new Set([...existing].filter((n) => !defaults.has(n)));
+    // Rebuild from first principles so future default additions stay disabled
+    // unless the operator explicitly enables them too.
+    const rebuilt = new Set([...defaults, ...operatorExtras]);
+    if (enabled) {
+        rebuilt.delete(implName);
+    }
+    else {
+        rebuilt.add(implName);
+    }
+    const next = [...rebuilt];
+    restorers.disabled = next;
+    current['restorers'] = restorers;
+    mkdirSync(dirname(configPath), { recursive: true });
+    writeFileSync(configPath, JSON.stringify(current, null, 2) + '\n', { encoding: 'utf-8' });
+    return next;
+}
+/** Persist an explicit impl mapping for a specific intent kind. */
+export function setImplForKindInConfig(kind, implName, configPath = DEFAULT_CONFIG_PATH) {
+    let current = {};
+    if (existsSync(configPath)) {
+        try {
+            current = JSON.parse(readFileSync(configPath, 'utf-8'));
+        }
+        catch {
+            current = {};
+        }
+    }
+    const restorers = (current['restorers'] ?? {});
+    restorers.byKind = {
+        ...(restorers.byKind ?? {}),
+        [kind]: implName,
+    };
+    current['restorers'] = restorers;
+    mkdirSync(dirname(configPath), { recursive: true });
+    writeFileSync(configPath, JSON.stringify(current, null, 2) + '\n', { encoding: 'utf-8' });
+}
+/** Remove an explicit impl mapping for one kind, reverting to ship default. */
+export function resetImplForKindInConfig(kind, configPath = DEFAULT_CONFIG_PATH) {
+    let current = {};
+    if (existsSync(configPath)) {
+        try {
+            current = JSON.parse(readFileSync(configPath, 'utf-8'));
+        }
+        catch {
+            current = {};
+        }
+    }
+    const restorers = (current['restorers'] ?? {});
+    const byKind = { ...(restorers.byKind ?? {}) };
+    delete byKind[kind];
+    restorers.byKind = byKind;
+    current['restorers'] = restorers;
+    mkdirSync(dirname(configPath), { recursive: true });
+    writeFileSync(configPath, JSON.stringify(current, null, 2) + '\n', { encoding: 'utf-8' });
+}
+//# sourceMappingURL=intent-registry-access.js.map

package/dist/cli/intent-registry-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intent-registry-access.js","sourceRoot":"","sources":["../../src/cli/intent-registry-access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAGhE;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,wBAAwB,CAAU,CAAC;AAC1E,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,cAAc,EAAE,wBAAwB;IACxC,eAAe,EAAE,wBAAwB;IACzC,mBAAmB,EAAE,4BAA4B;CACzC,CAAC;AAEX,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;AAE3E,MAAM,UAAU,iBAAiB,CAAC,QAAiB;IACjD,OAAO,QAAQ,IAAI,mBAAmB,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAkB;IACxD,MAAM,QAAQ,GAAG,IAAI,oBAAoB,CAAC;QACxC,MAAM,EAAE,sBAAsB,CAAC,MAAM,CAAC;QACtC,OAAO,EAAE,eAAe;QACxB,QAAQ,EAAE,wBAAwB,CAAC,MAAM,CAAC;KAC3C,CAAC,CAAC;IAEH,6EAA6E;IAC7E,2EAA2E;IAC3E,KAAK,MAAM,IAAI,IAAI,kBAAkB,CAAC;QACpC,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB;KACjD,CAAC,EAAE,CAAC;QACH,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAkB;IACzD,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC;IAChD,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,sBAAsB,CAAC,CAAC;AACrC,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,sBAAsB,CAAC,MAAkB;IACvD,OAAO;QACL,GAAG,eAAe;QAClB,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,IAAI,EAAE,CAAC;KACpC,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,MAAkB;IACjE,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC7D,CAAC;AAQD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,OAAgB,EAChB,aAAqB,mBAAmB;IAExC,IAAI,OAAO,GAA4B,EAAE,CAAC;IAC1C,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;QACrF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,CAAmB,CAAC;IACjE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IACnD,yFAAyF;IACzF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,sBAA2C,CAAC,CAAC;IACtE,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAC9C,CAAC;IAEF,0EAA0E;IAC1E,mDAAmD;IACnD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,QAAQ,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC;IAElE,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IAC1B,SAAS,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC;IAEjC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAE1F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,sBAAsB,CACpC,IAAY,EACZ,QAAgB,EAChB,aAAqB,mBAAmB;IAExC,IAAI,OAAO,GAA4B,EAAE,CAAC;IAC1C,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;QACrF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,CAAmB,CAAC;IACjE,SAAS,CAAC,MAAM,GAAG;QACjB,GAAG,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;QAC3B,CAAC,IAAI,CAAC,EAAE,QAAQ;KACjB,CAAC;IACF,OAAO,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC;IAEjC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,wBAAwB,CACtC,IAAY,EACZ,aAAqB,mBAAmB;IAExC,IAAI,OAAO,GAA4B,EAAE,CAAC;IAC1C,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;QACrF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,CAAmB,CAAC;IACjE,MAAM,MAAM,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;IAC/C,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;IACpB,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC;IAC1B,OAAO,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC;IAEjC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;AAC5F,CAAC"}

package/dist/cli/introspection-context.js

@@ -16,17 +16,20 @@ async function tryMergeStatusFromHttp(config, local) {
         if (!res.ok)
             return local;
         const remote = (await res.json());
+        const next = {
+            ...local,
+            shutdownState: remote.daemon?.shutdownState ?? local.shutdownState,
+            daemonStartedAt: remote.daemon?.startedAt ?? local.daemonStartedAt,
+        };
         if (remote.rpc?.ok && !local.rpc.ok) {
-            return {
-                ...local,
-                rpc: {
-                    ok: remote.rpc.ok,
-                    chainId: remote.rpc.chainId,
-                    blockNumber: remote.rpc.blockNumber,
-                    ...(remote.rpc.error ? { error: remote.rpc.error } : {}),
-                },
+            next.rpc = {
+                ok: remote.rpc.ok,
+                chainId: remote.rpc.chainId,
+                blockNumber: remote.rpc.blockNumber,
+                ...(remote.rpc.error ? { error: remote.rpc.error } : {}),
             };
         }
+        return next;
     }
     catch {
         /* ignore — local gather is authoritative */
@@ -53,6 +56,7 @@ export async function gatherIntrospectionRaw(opts) {
         testnetL2TokenDeploymentPath: config.testnetL2TokenDeploymentPath,
         testnetMechDeploymentPath: config.testnetMechDeploymentPath,
         testnetStolasDeploymentPath: config.testnetStolasDeploymentPath,
+        testnetClaimRegistryDeploymentPath: config.testnetClaimRegistryDeploymentPath,
     };
     const local = await gatherGatheredStatusRaw(store, status);
     return tryMergeStatusFromHttp(config, local);

package/dist/cli/introspection-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"introspection-context.js","sourceRoot":"","sources":["../../src/cli/introspection-context.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,uBAAuB,EAA2B,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAE1C,KAAK,UAAU,sBAAsB,CACnC,MAAqC,EACrC,KAAwB;IAExB,MAAM,GAAG,GAAG,oBAAoB,MAAM,CAAC,OAAO,YAAY,CAAC;IAC3D,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAqB,CAAC;QACtD,IAAI,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACpC,OAAO;gBACL,GAAG,KAAK;gBACR,GAAG,EAAE;oBACH,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE;oBACjB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;oBAC3B,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW;oBACnC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACzD;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAE5C;IACC,MAAM,aAAa,GAAG,qBAAqB,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,WAAW,GACf,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,MAAM,UAAU,GAAG,aAAa,IAAI,WAAW,CAAC;IAChD,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,MAAM,GAAuB;QACjC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;QAC3D,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;QACvD,4BAA4B,EAAE,MAAM,CAAC,4BAA4B;QACjE,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;QAC3D,2BAA2B,EAAE,MAAM,CAAC,2BAA2B;KAChE,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3D,OAAO,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"introspection-context.js","sourceRoot":"","sources":["../../src/cli/introspection-context.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,uBAAuB,EAA2B,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAE1C,KAAK,UAAU,sBAAsB,CACnC,MAAqC,EACrC,KAAwB;IAExB,MAAM,GAAG,GAAG,oBAAoB,MAAM,CAAC,OAAO,YAAY,CAAC;IAC3D,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAqB,CAAC;QACtD,MAAM,IAAI,GAAsB;YAC9B,GAAG,KAAK;YACR,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,IAAI,KAAK,CAAC,aAAa;YAClE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,IAAI,KAAK,CAAC,eAAe;SACnE,CAAC;QACF,IAAI,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC,GAAG,GAAG;gBACT,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE;gBACjB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;gBAC3B,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW;gBACnC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzD,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAE5C;IACC,MAAM,aAAa,GAAG,qBAAqB,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,WAAW,GACf,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,MAAM,UAAU,GAAG,aAAa,IAAI,WAAW,CAAC;IAChD,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,MAAM,GAAuB;QACjC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;QAC3D,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;QACvD,4BAA4B,EAAE,MAAM,CAAC,4BAA4B;QACjE,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;QAC3D,2BAA2B,EAAE,MAAM,CAAC,2BAA2B;QAC/D,kCAAkC,EAAE,MAAM,CAAC,kCAAkC;KAC9E,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3D,OAAO,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAC/C,CAAC"}

package/dist/cli/password.d.ts

@@ -1,5 +1,25 @@
 /**
- * CLI password resolution: JINN_PASSWORD env or --password-fd N (reads once, trims).
+ * CLI password resolution.
+ *
+ * Priority order for `resolveCliPassword`:
+ *   1. `--password-fd N`                           (explicit, scripted/CI use)
+ *   2. `JINN_PASSWORD` env var                     (explicit, operator-set)
+ *   3. `~/.jinn-client/keystore-password` file     (auto-generated by `jinn quickstart`)
+ *   4. Error
+ *
+ * SECURITY TRADE-OFF (known, accepted for Phase 1b testers):
+ *   When `jinn quickstart` auto-generates a password, it writes the plaintext
+ *   value to `~/.jinn-client/keystore-password` (mode 0o600) and the encrypted
+ *   keystore to `~/.jinn-client/earning/master_keystore.json`. An attacker with
+ *   shell access to the host can read both and decrypt the mnemonic — the
+ *   encryption provides defense only against casual filesystem snooping,
+ *   snapshot/backup inclusion policies, and logs. It is NOT protection against
+ *   a local attacker.
+ *
+ *   The quickstart summary warns operators to treat this wallet as hot and to
+ *   keep funds to the gas + rewards minimum. The real fix is OS-native secret
+ *   storage (macOS Keychain, libsecret, Windows Credential Manager) or a
+ *   hardware-backed signer; tracked as future work.
  */
 export declare function parsePasswordFdFromArgv(argv: string[]): number | undefined;
 export declare function readPasswordFromFd(fd: number): string;
@@ -10,14 +30,6 @@ export declare function resolveCliPassword(argv?: string[], env?: NodeJS.Process
     ok: false;
     message: string;
 };
-export declare function resolveCurrentPassword(argv: string[], env: Record<string, string | undefined>): {
-    ok: true;
-    password: string;
-    fromFile: boolean;
-} | {
-    ok: false;
-    message: string;
-};
 export declare function resolveNewPassword(env: Record<string, string | undefined>): {
     ok: true;
     password: string;

package/dist/cli/password.js

@@ -1,5 +1,25 @@
 /**
- * CLI password resolution: JINN_PASSWORD env or --password-fd N (reads once, trims).
+ * CLI password resolution.
+ *
+ * Priority order for `resolveCliPassword`:
+ *   1. `--password-fd N`                           (explicit, scripted/CI use)
+ *   2. `JINN_PASSWORD` env var                     (explicit, operator-set)
+ *   3. `~/.jinn-client/keystore-password` file     (auto-generated by `jinn quickstart`)
+ *   4. Error
+ *
+ * SECURITY TRADE-OFF (known, accepted for Phase 1b testers):
+ *   When `jinn quickstart` auto-generates a password, it writes the plaintext
+ *   value to `~/.jinn-client/keystore-password` (mode 0o600) and the encrypted
+ *   keystore to `~/.jinn-client/earning/master_keystore.json`. An attacker with
+ *   shell access to the host can read both and decrypt the mnemonic — the
+ *   encryption provides defense only against casual filesystem snooping,
+ *   snapshot/backup inclusion policies, and logs. It is NOT protection against
+ *   a local attacker.
+ *
+ *   The quickstart summary warns operators to treat this wallet as hot and to
+ *   keep funds to the gas + rewards minimum. The real fix is OS-native secret
+ *   storage (macOS Keychain, libsecret, Windows Credential Manager) or a
+ *   hardware-backed signer; tracked as future work.
  */
 import { existsSync, readFileSync } from 'node:fs';
 import { homedir } from 'node:os';
@@ -23,7 +43,19 @@ function mergeArgv(argv) {
     const fromProcess = typeof process !== 'undefined' ? process.argv.slice(2) : [];
     return [...fromVerb, ...fromProcess];
 }
+function passwordFilePath(env) {
+    const home = env['HOME'] ?? homedir();
+    return join(home, '.jinn-client', 'keystore-password');
+}
+function readPasswordFile(env) {
+    const path = passwordFilePath(env);
+    if (!existsSync(path))
+        return undefined;
+    const value = readFileSync(path, 'utf-8').trim();
+    return value.length > 0 ? value : undefined;
+}
 export function resolveCliPassword(argv, env = process.env) {
+    // 1. --password-fd wins (explicit scripted intent).
     const merged = mergeArgv(argv);
     const fd = parsePasswordFdFromArgv(merged);
     if (fd !== undefined) {
@@ -41,29 +73,18 @@ export function resolveCliPassword(argv, env = process.env) {
             };
         }
     }
-    const p = env['JINN_PASSWORD'];
-    if (!p) {
-        return {
-            ok: false,
-            message: 'Set JINN_PASSWORD or pass --password-fd N with a readable file descriptor.',
-        };
-    }
-    return { ok: true, password: p };
-}
-export function resolveCurrentPassword(argv, env) {
-    // 1. Check keystore-password file
-    const home = env['HOME'] ?? homedir();
-    const passwordFilePath = join(home, '.jinn-client', 'keystore-password');
-    if (existsSync(passwordFilePath)) {
-        const password = readFileSync(passwordFilePath, 'utf-8').trim();
-        if (password)
-            return { ok: true, password, fromFile: true };
-    }
-    // 2. Fall through to existing resolveCliPassword
-    const result = resolveCliPassword(argv, env);
-    if (result.ok)
-        return { ok: true, password: result.password, fromFile: false };
-    return { ok: false, message: result.message };
+    // 2. JINN_PASSWORD env (explicit operator-set).
+    const envPassword = env['JINN_PASSWORD'];
+    if (envPassword)
+        return { ok: true, password: envPassword };
+    // 3. Auto-generated password file from `jinn quickstart`.
+    const filePassword = readPasswordFile(env);
+    if (filePassword)
+        return { ok: true, password: filePassword };
+    return {
+        ok: false,
+        message: 'No keystore password found. Set JINN_PASSWORD, pass --password-fd N, or run `jinn quickstart` to auto-generate one.',
+    };
 }
 export function resolveNewPassword(env) {
     const newPass = env['JINN_NEW_PASSWORD'];

package/dist/cli/password.js.map

@@ -1 +1 @@
-{"version":3,"file":"password.js","sourceRoot":"","sources":["../../src/cli/password.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,UAAU,uBAAuB,CAAC,IAAc;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1C,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC1B,MAAM,CAAC,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAU;IAC3C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACnD,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,IAAe;IAChC,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;IAC5B,MAAM,WAAW,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,WAAW,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,IAAe,EACf,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,EAAE,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;YACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;YACzE,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aACpD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,CAAC,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,4EAA4E;SACtF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,IAAc,EACd,GAAuC;IAEvC,kCAAkC;IAClC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;IACtC,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC;IACzE,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAChE,IAAI,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC9D,CAAC;IACD,iDAAiD;IACjD,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC/E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,GAAuC;IAEvC,MAAM,OAAO,GAAG,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACzC,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC3E,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;IAC/E,OAAO;QACL,EAAE,EAAE,KAAK;QACT,OAAO,EAAE,uFAAuF;KACjG,CAAC;AACJ,CAAC"}
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../src/cli/password.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,UAAU,uBAAuB,CAAC,IAAc;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1C,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC1B,MAAM,CAAC,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAU;IAC3C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACnD,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,IAAe;IAChC,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;IAC5B,MAAM,WAAW,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,WAAW,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAsB;IAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;IACtC,OAAO,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAsB;IAC9C,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,IAAe,EACf,MAAyB,OAAO,CAAC,GAAG;IAEpC,oDAAoD;IACpD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,EAAE,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;YACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;YACzE,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aACpD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,MAAM,WAAW,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC;IACzC,IAAI,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IAE5D,0DAA0D;IAC1D,MAAM,YAAY,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IAE9D,OAAO;QACL,EAAE,EAAE,KAAK;QACT,OAAO,EACL,qHAAqH;KACxH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,GAAuC;IAEvC,MAAM,OAAO,GAAG,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACzC,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC3E,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;IAC/E,OAAO;QACL,EAAE,EAAE,KAAK;QACT,OAAO,EAAE,uFAAuF;KACjG,CAAC;AACJ,CAAC"}

package/dist/config.d.ts

@@ -14,6 +14,7 @@
  * (mainnet V1, testnet V2) for JinnRouter claimDelivery encoding.
  */
 import { z } from 'zod';
+import type { DesiredState } from './types/desired-state.js';
 export declare const JinnConfigSchema: z.ZodObject<{
     /**
      * Network to connect to.
@@ -29,6 +30,7 @@ export declare const JinnConfigSchema: z.ZodObject<{
      * https://sepolia.base.org for 'testnet'. Set explicitly to override.
      */
     rpcUrl: z.ZodOptional<z.ZodString>;
+    archiveRpcUrl: z.ZodOptional<z.ZodString>;
     /** Earning state directory */
     earningDir: z.ZodDefault<z.ZodString>;
     /** SQLite database path */
@@ -54,25 +56,68 @@ export declare const JinnConfigSchema: z.ZodObject<{
     claudePath: z.ZodDefault<z.ZodString>;
     /** Model for restoration/evaluation agent */
     claudeModel: z.ZodDefault<z.ZodString>;
+    /**
+     * How the operator runs the daemon. Set once at `jinn auth`, read by every
+     * command that probes the Claude CLI or spawns a subprocess. Leaving it
+     * unset falls back to filesystem-based detection (docker-compose.yml near
+     * cwd, /.dockerenv, etc.) which is error-prone inside a checkout of the
+     * repo itself.
+     * Env override: JINN_RUNTIME_MODE.
+     */
+    runtimeMode: z.ZodOptional<z.ZodEnum<["bare", "docker-compose", "container"]>>;
     /** Comma-separated or array of peer URLs */
     peers: z.ZodDefault<z.ZodUnion<[z.ZodEffects<z.ZodString, string[], string>, z.ZodArray<z.ZodString, "many">]>>;
     /** The Graph subgraph URL for artifact discovery */
     subgraphUrl: z.ZodOptional<z.ZodString>;
     /** This node's public HTTP endpoint (for 8004 registration) */
     nodeEndpoint: z.ZodOptional<z.ZodString>;
-    /** Desired states to create and restore */
+    /** Desired states to create and restore. Empty by default; testnet auto-intents fill the loop. */
     desiredStates: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
+        id: z.ZodOptional<z.ZodString>;
         description: z.ZodString;
         context: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        window: z.ZodOptional<z.ZodObject<{
+            startTs: z.ZodNumber;
+            endTs: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            startTs: number;
+            endTs: number;
+        }, {
+            startTs: number;
+            endTs: number;
+        }>>;
+        spec: z.ZodOptional<z.ZodIntersection<z.ZodObject<{
+            kind: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            kind: string;
+        }, {
+            kind: string;
+        }>, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        eligibility: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, "strip", z.ZodTypeAny, {
-        id: string;
         description: string;
+        id?: string | undefined;
         context?: Record<string, unknown> | undefined;
+        window?: {
+            startTs: number;
+            endTs: number;
+        } | undefined;
+        spec?: ({
+            kind: string;
+        } & Record<string, unknown>) | undefined;
+        eligibility?: Record<string, unknown> | undefined;
     }, {
-        id: string;
         description: string;
+        id?: string | undefined;
         context?: Record<string, unknown> | undefined;
+        window?: {
+            startTs: number;
+            endTs: number;
+        } | undefined;
+        spec?: ({
+            kind: string;
+        } & Record<string, unknown>) | undefined;
+        eligibility?: Record<string, unknown> | undefined;
     }>, "many">>;
     /** IPFS upload endpoint */
     ipfsRegistryUrl: z.ZodDefault<z.ZodString>;
@@ -86,6 +131,8 @@ export declare const JinnConfigSchema: z.ZodObject<{
     testnetMechDeploymentPath: z.ZodOptional<z.ZodString>;
     /** Optional Base Sepolia stOLAS deployment artifact path */
     testnetStolasDeploymentPath: z.ZodOptional<z.ZodString>;
+    /** Optional Base Sepolia ClaimRegistry deployment artifact path */
+    testnetClaimRegistryDeploymentPath: z.ZodOptional<z.ZodString>;
     /** Staking mode: 'standard' uses stOLAS (no OLAS needed), 'self-bond' uses operator-provided OLAS. */
     stakingMode: z.ZodDefault<z.ZodEnum<["standard", "self-bond"]>>;
     /** Number of services to bootstrap and run. */
@@ -100,6 +147,43 @@ export declare const JinnConfigSchema: z.ZodObject<{
      * Default is applied in bootstrap when unset. Env: JINN_MASTER_ETH_DAILY_WEI
      */
     masterEthDailyEstimateWei: z.ZodOptional<z.ZodString>;
+    /**
+     * Operator-controlled impl dispatch for the restorer engine.
+     *
+     * Wired by daemon (jinn-mono-bv5); engine consumes via RestorerImplRegistry config.
+     *
+     * byKind:   explicit spec.kind → impl name mapping (highest priority)
+     * default:  fallback impl name when no kind-specific match is found
+     * disabled: impl names to exclude from dispatch entirely
+     */
+    restorers: z.ZodOptional<z.ZodObject<{
+        byKind: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        default: z.ZodOptional<z.ZodString>;
+        disabled: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        byKind?: Record<string, string> | undefined;
+        default?: string | undefined;
+        disabled?: string[] | undefined;
+    }, {
+        byKind?: Record<string, string> | undefined;
+        default?: string | undefined;
+        disabled?: string[] | undefined;
+    }>>;
+    /**
+     * Restoration engine durable directories (per-intent work + impl state).
+     * Defaults under ~/.jinn-client/engine/. Env: JINN_ENGINE_WORKING_DIR_ROOT,
+     * JINN_ENGINE_IMPL_STATE_DIR_ROOT.
+     */
+    engine: z.ZodOptional<z.ZodObject<{
+        workingDirRoot: z.ZodOptional<z.ZodString>;
+        implStateDirRoot: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        workingDirRoot?: string | undefined;
+        implStateDirRoot?: string | undefined;
+    }, {
+        workingDirRoot?: string | undefined;
+        implStateDirRoot?: string | undefined;
+    }>>;
 }, "strip", z.ZodTypeAny, {
     network: "testnet" | "mainnet";
     earningDir: string;
@@ -112,9 +196,17 @@ export declare const JinnConfigSchema: z.ZodObject<{
     claudeModel: string;
     peers: string[];
     desiredStates: {
-        id: string;
         description: string;
+        id?: string | undefined;
         context?: Record<string, unknown> | undefined;
+        window?: {
+            startTs: number;
+            endTs: number;
+        } | undefined;
+        spec?: ({
+            kind: string;
+        } & Record<string, unknown>) | undefined;
+        eligibility?: Record<string, unknown> | undefined;
     }[];
     ipfsRegistryUrl: string;
     ipfsGatewayUrl: string;
@@ -122,16 +214,29 @@ export declare const JinnConfigSchema: z.ZodObject<{
     targetServices: number;
     debug: boolean;
     rpcUrl?: string | undefined;
+    archiveRpcUrl?: string | undefined;
+    runtimeMode?: "bare" | "docker-compose" | "container" | undefined;
     subgraphUrl?: string | undefined;
     nodeEndpoint?: string | undefined;
     testnetL2DeploymentPath?: string | undefined;
     testnetL2TokenDeploymentPath?: string | undefined;
     testnetMechDeploymentPath?: string | undefined;
     testnetStolasDeploymentPath?: string | undefined;
+    testnetClaimRegistryDeploymentPath?: string | undefined;
     masterEthDailyEstimateWei?: string | undefined;
+    restorers?: {
+        byKind?: Record<string, string> | undefined;
+        default?: string | undefined;
+        disabled?: string[] | undefined;
+    } | undefined;
+    engine?: {
+        workingDirRoot?: string | undefined;
+        implStateDirRoot?: string | undefined;
+    } | undefined;
 }, {
     network?: "testnet" | "mainnet" | undefined;
     rpcUrl?: string | undefined;
+    archiveRpcUrl?: string | undefined;
     earningDir?: string | undefined;
     dbPath?: string | undefined;
     pollIntervalMs?: number | undefined;
@@ -140,13 +245,22 @@ export declare const JinnConfigSchema: z.ZodObject<{
     apiPort?: number | undefined;
     claudePath?: string | undefined;
     claudeModel?: string | undefined;
+    runtimeMode?: "bare" | "docker-compose" | "container" | undefined;
     peers?: string | string[] | undefined;
     subgraphUrl?: string | undefined;
     nodeEndpoint?: string | undefined;
     desiredStates?: {
-        id: string;
         description: string;
+        id?: string | undefined;
         context?: Record<string, unknown> | undefined;
+        window?: {
+            startTs: number;
+            endTs: number;
+        } | undefined;
+        spec?: ({
+            kind: string;
+        } & Record<string, unknown>) | undefined;
+        eligibility?: Record<string, unknown> | undefined;
     }[] | undefined;
     ipfsRegistryUrl?: string | undefined;
     ipfsGatewayUrl?: string | undefined;
@@ -154,14 +268,29 @@ export declare const JinnConfigSchema: z.ZodObject<{
     testnetL2TokenDeploymentPath?: string | undefined;
     testnetMechDeploymentPath?: string | undefined;
     testnetStolasDeploymentPath?: string | undefined;
+    testnetClaimRegistryDeploymentPath?: string | undefined;
     stakingMode?: "standard" | "self-bond" | undefined;
     targetServices?: number | undefined;
     debug?: boolean | undefined;
     masterEthDailyEstimateWei?: string | undefined;
+    restorers?: {
+        byKind?: Record<string, string> | undefined;
+        default?: string | undefined;
+        disabled?: string[] | undefined;
+    } | undefined;
+    engine?: {
+        workingDirRoot?: string | undefined;
+        implStateDirRoot?: string | undefined;
+    } | undefined;
 }>;
-/** JinnConfig with rpcUrl guaranteed to be resolved (never undefined). */
-export type JinnConfig = Omit<z.infer<typeof JinnConfigSchema>, 'rpcUrl'> & {
+/** JinnConfig with rpcUrl guaranteed to be resolved (never undefined) and desiredStates with id always assigned. */
+export type JinnConfig = Omit<z.infer<typeof JinnConfigSchema>, 'rpcUrl' | 'desiredStates' | 'engine'> & {
     rpcUrl: string;
+    desiredStates: DesiredState[];
+    engine: {
+        workingDirRoot: string;
+        implStateDirRoot: string;
+    };
 };
 export type ConfigLoadErrorCode = 'config_file_not_found' | 'config_json_invalid' | 'desired_states_file_not_found' | 'desired_states_json_invalid' | 'config_invalid';
 export declare class ConfigLoadError extends Error {