@kadi.build/deploy-ability 0.0.2 → 0.0.4

package/dist/targets/akash/certificate-manager.d.ts

@@ -4,75 +4,34 @@
  * Provides certificate operations for Akash Network deployments. Certificates are
  * required for mTLS authentication with Akash providers and are tied to wallet addresses.
  *
- * Key Improvements from kadi-deploy:
- * - ✅ ZERO file I/O (caller handles persistence)
- * - ✅ ZERO CLI dependencies (no chalk, enquirer, prompts)
- * - ✅ ZERO `any` types (proper TypeScript throughout)
- * - ✅ Result types for all operations
- * - ✅ Composable API (small, focused functions)
- * - ✅ Step-by-step comments explaining logic
- *
- * Design Philosophy:
- * This is a LIBRARY, not a CLI. Certificates are passed as data structures.
- * The caller (kadi-deploy CLI) handles file I/O, prompts, and display.
- *
  * @module targets/akash/certificate-manager
  */
-import type { SigningStargateClient } from '@cosmjs/stargate';
 import type { Result } from '../../types/index.js';
-import type { WalletContext, AkashProviderTlsCertificate } from './types.js';
+import type { AkashProviderTlsCertificate } from './types.js';
+import type { AkashClient } from './client.js';
 import { CertificateError } from '../../errors/index.js';
-import { type AkashNetwork } from './environment.js';
-/**
- * Certificate JSON structure (for parsing)
- *
- * This is the format expected when loading certificates from external sources.
- */
+/** Certificate JSON structure (for parsing) */
 export interface CertificateJson {
-    /** PEM-encoded X.509 certificate */
     cert: string;
-    /** PEM-encoded private key */
     privateKey: string;
-    /** PEM-encoded public key */
     publicKey: string;
-    /** Optional certificate chain */
     chain?: string;
 }
-/**
- * Certificate broadcast result
- *
- * Contains the transaction hash and confirmation details.
- */
+/** Certificate broadcast result */
 export interface CertificateBroadcastResult {
-    /** Transaction hash */
     transactionHash: string;
-    /** Block height */
     height: number;
-    /** Whether broadcast was successful */
     success: boolean;
 }
-/**
- * On-chain certificate information
- *
- * Represents whether a certificate exists on the Akash blockchain.
- */
+/** On-chain certificate information */
 export interface OnChainCertificateInfo {
-    /** Whether certificate exists on blockchain */
     exists: boolean;
-    /** Number of certificates found */
     count: number;
 }
 /**
  * Generate a new Akash certificate
  *
  * Creates a fresh X.509 certificate with PEM encoding for mTLS authentication.
- * This certificate is tied to the wallet address and can be reused across deployments.
- *
- * **What this does:**
- * 1. Generates RSA key pair (2048-bit)
- * 2. Creates X.509 certificate
- * 3. Encodes in PEM format
- * 4. Returns certificate ready for blockchain broadcast
  *
  * @param walletAddress - Akash wallet address to tie certificate to
  * @returns Result with generated certificate or error
@@ -82,147 +41,110 @@ export interface OnChainCertificateInfo {
  * const result = generateCertificate('akash1abc...');
  * if (result.success) {
  *   console.log('Certificate generated:', result.data);
- *   // Now broadcast to blockchain with broadcastCertificate()
  * }
  * ```
  */
-export declare function generateCertificate(walletAddress: string): Result<AkashProviderTlsCertificate, CertificateError>;
+export declare function generateCertificate(walletAddress: string): Promise<Result<AkashProviderTlsCertificate, CertificateError>>;
 /**
  * Parse and validate certificate from JSON
  *
- * Converts certificate JSON data into a validated Certificate object.
- * Performs comprehensive structure and format validation.
- *
- * **Validation checks:**
- * 1. Object structure (not null/undefined)
- * 2. Required fields present (cert, privateKey, publicKey)
- * 3. PEM format validation (BEGIN/END markers)
- * 4. String type validation
+ * Converts certificate JSON data into a validated Certificate object with structure and format validation.
  *
  * @param json - Certificate data to parse (from file, API, etc.)
  * @returns Result with validated certificate or error
  *
  * @example
  * ```typescript
- * const certJson = JSON.parse(fileContents);
  * const result = parseCertificate(certJson);
- *
  * if (result.success) {
- *   // Certificate is valid and ready to use
  *   await broadcastCertificate(wallet, result.data, client);
- * } else {
- *   console.error('Invalid certificate:', result.error.message);
  * }
  * ```
  */
 export declare function parseCertificate(json: unknown): Result<AkashProviderTlsCertificate, CertificateError>;
 /**
- * Query certificate from Akash blockchain
- *
- * Checks if a valid certificate exists on-chain for the wallet address.
- * Returns the first valid certificate found, or null if none exist.
- *
- * **What this does:**
- * 1. Connects to Akash RPC endpoint
- * 2. Queries certificate module
- * 3. Filters for valid certificates only
- * 4. Returns first match or null
- *
- * @param wallet - Wallet context with address
- * @param network - Akash network to query
- * @returns Result with certificate info or null if not found
- *
- * @example
- * ```typescript
- * const result = await queryCertificate(wallet, 'mainnet');
+ * Certificate Manager for Akash Network
  *
- * if (result.success && result.data) {
- *   console.log(`Found ${result.data.count} certificate(s) on-chain`);
- * } else if (result.success && !result.data) {
- *   console.log('No certificate found - need to create one');
- * }
- * ```
+ * Handles certificate operations using AkashClient's SDK instance.
+ * Provides methods for querying, broadcasting, and ensuring certificates exist.
  */
-export declare function queryCertificate(wallet: WalletContext, network: AkashNetwork): Promise<Result<OnChainCertificateInfo | null, CertificateError>>;
-/**
- * Broadcast certificate to Akash blockchain
- *
- * Submits a certificate transaction to the blockchain, making it available
- * for mTLS authentication with providers.
- *
- * **What this does:**
- * 1. Validates certificate structure
- * 2. Creates blockchain transaction
- * 3. Signs with wallet
- * 4. Broadcasts to network
- * 5. Returns transaction result
- *
- * **Important:** Certificate must be generated first with generateCertificate()
- *
- * @param wallet - Wallet context with signing capability
- * @param certificate - Certificate to broadcast
- * @param client - Signing client for blockchain transactions
- * @returns Result with broadcast result or error
- *
- * @example
- * ```typescript
- * // Generate certificate
- * const certResult = generateCertificate(wallet.address);
- * if (!certResult.success) return;
- *
- * // Broadcast to blockchain
- * const broadcastResult = await broadcastCertificate(
- *   wallet,
- *   certResult.data,
- *   client
- * );
- *
- * if (broadcastResult.success) {
- *   console.log('Certificate on-chain:', broadcastResult.data.transactionHash);
- * }
- * ```
- */
-export declare function broadcastCertificate(wallet: WalletContext, certificate: AkashProviderTlsCertificate, client: SigningStargateClient): Promise<Result<CertificateBroadcastResult, CertificateError>>;
-/**
- * Ensure certificate exists (convenience function)
- *
- * High-level function that handles the complete certificate workflow:
- * 1. Use existing certificate if provided
- * 2. Query blockchain for existing certificate
- * 3. Generate and broadcast new certificate if needed
- *
- * This is a convenience wrapper for the common case where you just want
- * "a valid certificate" without manually orchestrating the steps.
- *
- * @param wallet - Wallet context
- * @param network - Akash network
- * @param client - Signing client for blockchain operations
- * @param options - Optional existing certificate
- * @returns Result with valid certificate or error
- *
- * @example
- * ```typescript
- * // Simple: just get me a valid certificate
- * const result = await ensureCertificate(wallet, 'mainnet', client);
- *
- * if (result.success) {
- *   // Certificate is ready to use with providers
- *   await sendManifest(lease, manifest, result.data);
- * }
- * ```
- *
- * @example With existing certificate
- * ```typescript
- * // Use existing cert if available, otherwise create
- * const result = await ensureCertificate(
- *   wallet,
- *   'mainnet',
- *   client,
- *   { existingCertificate: loadedCert }
- * );
- * ```
- */
-export declare function ensureCertificate(wallet: WalletContext, network: AkashNetwork, client: SigningStargateClient, options?: {
-    existingCertificate?: AkashProviderTlsCertificate;
-}): Promise<Result<AkashProviderTlsCertificate, CertificateError>>;
+export declare class CertificateManager {
+    private readonly client;
+    /**
+     * Create a new CertificateManager
+     *
+     * @param client - AkashClient instance to use for blockchain operations
+     *
+     * @example
+     * ```typescript
+     * const client = new AkashClient({ network: 'mainnet', signer });
+     * const certManager = new CertificateManager(client);
+     * ```
+     */
+    constructor(client: AkashClient);
+    /**
+     * Query certificate from Akash blockchain
+     *
+     * Checks if a valid certificate exists on-chain for the wallet address.
+     *
+     * @param walletAddress - Akash wallet address to query
+     * @returns Result with certificate info or null if not found
+     *
+     * @example
+     * ```typescript
+     * const result = await certManager.query('akash1abc...');
+     * if (result.success && result.data) {
+     *   console.log(`Found ${result.data.count} certificate(s) on-chain`);
+     * }
+     * ```
+     */
+    query(walletAddress: string): Promise<Result<OnChainCertificateInfo | null, CertificateError>>;
+    /**
+     * Broadcast certificate to Akash blockchain
+     *
+     * Submits a certificate transaction to the blockchain, making it available
+     * for mTLS authentication with providers.
+     *
+     * Requires: Client must have signing capability (signer configured)
+     *
+     * @param walletAddress - Wallet address that owns the certificate
+     * @param certificate - Certificate to broadcast
+     * @returns Result with broadcast result or error
+     *
+     * @example
+     * ```typescript
+     * const cert = await generateCertificate('akash1abc...');
+     * const result = await certManager.broadcast('akash1abc...', cert.data);
+     * if (result.success) {
+     *   console.log('Certificate on-chain:', result.data.transactionHash);
+     * }
+     * ```
+     */
+    broadcast(walletAddress: string, certificate: AkashProviderTlsCertificate): Promise<Result<CertificateBroadcastResult, CertificateError>>;
+    /**
+     * Get or create certificate (convenience method)
+     *
+     * Handles the complete certificate workflow:
+     * 1. Use existing certificate if provided and valid
+     * 2. Check blockchain for existing certificate
+     * 3. Generate and broadcast new certificate if none exists
+     *
+     * Requires: Client must have signing capability for certificate creation
+     *
+     * @param walletAddress - Wallet address to ensure certificate for
+     * @param options - Optional existing certificate
+     * @returns Result with valid certificate or error
+     *
+     * @example
+     * ```typescript
+     * const result = await certManager.getOrCreate('akash1abc...');
+     * if (result.success) {
+     *   await sendManifest(lease, manifest, result.data);
+     * }
+     * ```
+     */
+    getOrCreate(walletAddress: string, options?: {
+        existingCertificate?: AkashProviderTlsCertificate;
+    }): Promise<Result<AkashProviderTlsCertificate, CertificateError>>;
+}
 //# sourceMappingURL=certificate-manager.d.ts.map

package/dist/targets/akash/certificate-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"certificate-manager.d.ts","sourceRoot":"","sources":["../../../src/targets/akash/certificate-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAUH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAE9D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAyB,MAAM,uBAAuB,CAAC;AAChF,OAAO,EAAoB,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEvE;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,8BAA8B;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,uBAAuB;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,+CAA+C;IAC/C,MAAM,EAAE,OAAO,CAAC;IAChB,mCAAmC;IACnC,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,mBAAmB,CACjC,aAAa,EAAE,MAAM,GACpB,MAAM,CAAC,2BAA2B,EAAE,gBAAgB,CAAC,CAuCvD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,OAAO,GACZ,MAAM,CAAC,2BAA2B,EAAE,gBAAgB,CAAC,CAmEvD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,MAAM,CAAC,sBAAsB,GAAG,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAiDlE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,EACrB,WAAW,EAAE,2BAA2B,EACxC,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,MAAM,CAAC,0BAA0B,EAAE,gBAAgB,CAAC,CAAC,CA0D/D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,qBAAqB,EAC7B,OAAO,CAAC,EAAE;IACR,mBAAmB,CAAC,EAAE,2BAA2B,CAAC;CACnD,GACA,OAAO,CAAC,MAAM,CAAC,2BAA2B,EAAE,gBAAgB,CAAC,CAAC,CA+DhE"}
+{"version":3,"file":"certificate-manager.d.ts","sourceRoot":"","sources":["../../../src/targets/akash/certificate-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,EAAE,gBAAgB,EAAyB,MAAM,uBAAuB,CAAC;AAEhF,+CAA+C;AAC/C,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,mCAAmC;AACnC,MAAM,WAAW,0BAA0B;IACzC,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,uCAAuC;AACvC,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,mBAAmB,CACvC,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,MAAM,CAAC,2BAA2B,EAAE,gBAAgB,CAAC,CAAC,CAqChE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,OAAO,GACZ,MAAM,CAAC,2BAA2B,EAAE,gBAAgB,CAAC,CAoDvD;AAED;;;;;GAKG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IAErC;;;;;;;;;;OAUG;gBACS,MAAM,EAAE,WAAW;IAI/B;;;;;;;;;;;;;;;OAeG;IACG,KAAK,CACT,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,MAAM,CAAC,sBAAsB,GAAG,IAAI,EAAE,gBAAgB,CAAC,CAAC;IA+BnE;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,SAAS,CACb,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,MAAM,CAAC,0BAA0B,EAAE,gBAAgB,CAAC,CAAC;IAoDhE;;;;;;;;;;;;;;;;;;;;;OAqBG;IACG,WAAW,CACf,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE;QACR,mBAAmB,CAAC,EAAE,2BAA2B,CAAC;KACnD,GACA,OAAO,CAAC,MAAM,CAAC,2BAA2B,EAAE,gBAAgB,CAAC,CAAC;CAmDlE"}