@kadi.build/deploy-ability 0.0.7 → 0.0.9

package/dist/targets/akash/secrets-provider.js

@@ -0,0 +1,249 @@
+/**
+ * Secrets Provider for Akash Autonomous Deployments
+ *
+ * Integrates with KADI's secret-ability to securely retrieve
+ * wallet mnemonics and certificates from local vaults.
+ *
+ * Uses a "global" vault stored in ~/.kadi/akash-secrets.toml
+ * for machine-level secrets (not project-specific).
+ */
+import * as os from 'node:os';
+import * as path from 'node:path';
+// =============================================================================
+// Constants - Key Names and Vault Configuration
+// =============================================================================
+/**
+ * Default vault name for Akash secrets.
+ * This vault uses 'age' encryption with OS keychain for master key.
+ */
+export const AKASH_VAULT_NAME = 'global';
+/**
+ * Global config path for machine-level secrets.
+ * Stored in ~/.kadi/secrets/config.toml (not project-specific).
+ */
+export const GLOBAL_CONFIG_PATH = path.join(os.homedir(), '.kadi', 'secrets', 'config.toml');
+/**
+ * Key names for Akash secrets in the vault.
+ * These are the standardized key names used across the KADI ecosystem.
+ */
+export const AKASH_SECRET_KEYS = {
+    /**
+     * BIP39 mnemonic phrase for the Akash wallet (12 or 24 words).
+     * Example: "abandon abandon abandon ... about"
+     */
+    WALLET_MNEMONIC: 'AKASH_WALLET',
+    /**
+     * Cached TLS certificate for Akash provider communication.
+     * Stored as JSON: { cert: string, pubkey: string, privkey: string }
+     */
+    TLS_CERTIFICATE: 'akash-tls-certificate',
+    /**
+     * Optional: Wallet password if the mnemonic is BIP39 password-protected.
+     * Most wallets don't use this, but we support it.
+     */
+    WALLET_PASSWORD: 'akash-wallet-password',
+};
+// =============================================================================
+// SecretsProvider Implementation
+// =============================================================================
+/**
+ * Create a SecretsProvider that integrates with secret-ability.
+ *
+ * This provider retrieves secrets from a local 'age' vault encrypted
+ * with ChaCha20-Poly1305, with the master key stored in the OS keychain.
+ *
+ * @param client - The secret-ability client (from KADI agent)
+ * @param config - Optional configuration overrides
+ * @returns A SecretsProvider for autonomous deployments
+ *
+ * @example
+ * ```typescript
+ * // In KADI agent context:
+ * const secrets = createSecretsProvider(this.secrets);
+ *
+ * // Use in autonomous deployment:
+ * await deployToAkash({
+ *   autonomous: {
+ *     secrets,
+ *     bidStrategy: 'cheapest',
+ *   },
+ *   profile: myProfile,
+ * });
+ * ```
+ */
+export function createSecretsProvider(client, config = {}) {
+    const configPath = config.configPath ?? GLOBAL_CONFIG_PATH;
+    const vaultName = config.vaultName ?? AKASH_VAULT_NAME;
+    return {
+        async getMnemonic() {
+            try {
+                const result = await client.invoke('get', {
+                    configPath,
+                    vault: vaultName,
+                    key: AKASH_SECRET_KEYS.WALLET_MNEMONIC,
+                });
+                return result.value;
+            }
+            catch (error) {
+                const message = error instanceof Error ? error.message : String(error);
+                throw new Error(`Failed to retrieve Akash wallet mnemonic from vault '${vaultName}': ${message}. ` +
+                    `Make sure you have stored the mnemonic using: ` +
+                    `secrets.invoke('set', { configPath: '${configPath}', vault: '${vaultName}', ` +
+                    `key: '${AKASH_SECRET_KEYS.WALLET_MNEMONIC}', value: '<your-mnemonic>' })`);
+            }
+        },
+        async getCertificate() {
+            try {
+                // Check if certificate exists
+                const { exists } = await client.invoke('exists', {
+                    configPath,
+                    vault: vaultName,
+                    key: AKASH_SECRET_KEYS.TLS_CERTIFICATE,
+                });
+                if (!exists) {
+                    return null;
+                }
+                const result = await client.invoke('get', {
+                    configPath,
+                    vault: vaultName,
+                    key: AKASH_SECRET_KEYS.TLS_CERTIFICATE,
+                });
+                const stored = JSON.parse(result.value);
+                return {
+                    cert: stored.cert,
+                    privateKey: stored.privateKey,
+                    publicKey: stored.publicKey,
+                    chain: stored.chain,
+                };
+            }
+            catch {
+                // Certificate retrieval is optional - return null on error
+                return null;
+            }
+        },
+        async storeCertificate(cert) {
+            const stored = {
+                cert: cert.cert,
+                privateKey: cert.privateKey,
+                publicKey: cert.publicKey,
+                chain: cert.chain,
+                createdAt: new Date().toISOString(),
+            };
+            await client.invoke('set', {
+                configPath,
+                vault: vaultName,
+                key: AKASH_SECRET_KEYS.TLS_CERTIFICATE,
+                value: JSON.stringify(stored),
+            });
+        },
+    };
+}
+// =============================================================================
+// Vault Setup Utilities
+// =============================================================================
+/**
+ * Initialize the Akash secrets vault.
+ * Call this once to set up the vault before storing secrets.
+ *
+ * @param client - The secret-ability client
+ * @param config - Optional configuration overrides
+ *
+ * @example
+ * ```typescript
+ * // Set up the vault:
+ * await initializeAkashVault(this.secrets);
+ *
+ * // Then store the mnemonic:
+ * await this.secrets.invoke('set', {
+ *   configPath: GLOBAL_CONFIG_PATH,
+ *   vault: 'akash',
+ *   key: 'akash-wallet-mnemonic',
+ *   value: 'your 24 word mnemonic phrase here',
+ * });
+ * ```
+ */
+export async function initializeAkashVault(client, config = {}) {
+    const configPath = config.configPath ?? GLOBAL_CONFIG_PATH;
+    const vaultName = config.vaultName ?? AKASH_VAULT_NAME;
+    try {
+        await client.invoke('config.createVault', {
+            configPath,
+            name: vaultName,
+            type: 'age',
+        });
+    }
+    catch (error) {
+        // Vault might already exist - that's okay
+        const message = error instanceof Error ? error.message : String(error);
+        if (!message.includes('already exists')) {
+            throw error;
+        }
+    }
+}
+/**
+ * Check if the Akash vault has all required secrets configured.
+ *
+ * @param client - The secret-ability client
+ * @param config - Optional configuration overrides
+ * @returns Object indicating which secrets are present
+ */
+export async function checkAkashVaultStatus(client, config = {}) {
+    const configPath = config.configPath ?? GLOBAL_CONFIG_PATH;
+    const vaultName = config.vaultName ?? AKASH_VAULT_NAME;
+    try {
+        const { keys } = await client.invoke('list', {
+            configPath,
+            vault: vaultName,
+        });
+        return {
+            vaultExists: true,
+            hasMnemonic: keys.includes(AKASH_SECRET_KEYS.WALLET_MNEMONIC),
+            hasCertificate: keys.includes(AKASH_SECRET_KEYS.TLS_CERTIFICATE),
+            keys,
+        };
+    }
+    catch {
+        return {
+            vaultExists: false,
+            hasMnemonic: false,
+            hasCertificate: false,
+            keys: [],
+        };
+    }
+}
+// =============================================================================
+// Simple Mnemonic Provider (No Secret-Ability Required)
+// =============================================================================
+/**
+ * Create a simple SecretsProvider from a raw mnemonic.
+ * Use this for testing or when secret-ability is not available.
+ *
+ * ⚠️ WARNING: This stores the mnemonic in memory. For production use,
+ * prefer createSecretsProvider() with secret-ability integration.
+ *
+ * @param mnemonic - The BIP39 mnemonic phrase
+ * @returns A SecretsProvider for autonomous deployments
+ *
+ * @example
+ * ```typescript
+ * // For testing only:
+ * const secrets = createSimpleMnemonicProvider(
+ *   'abandon abandon abandon ... about'
+ * );
+ * ```
+ */
+export function createSimpleMnemonicProvider(mnemonic) {
+    let cachedCertificate = null;
+    return {
+        async getMnemonic() {
+            return mnemonic;
+        },
+        async getCertificate() {
+            return cachedCertificate;
+        },
+        async storeCertificate(cert) {
+            cachedCertificate = cert;
+        },
+    };
+}
+//# sourceMappingURL=secrets-provider.js.map

package/dist/targets/akash/secrets-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-provider.js","sourceRoot":"","sources":["../../../src/targets/akash/secrets-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,gFAAgF;AAChF,gDAAgD;AAChD,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,QAAQ,CAAC;AAEzC;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;AAE7F;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B;;;OAGG;IACH,eAAe,EAAE,cAAc;IAE/B;;;OAGG;IACH,eAAe,EAAE,uBAAuB;IAExC;;;OAGG;IACH,eAAe,EAAE,uBAAuB;CAChC,CAAC;AAwEX,gFAAgF;AAChF,iCAAiC;AACjC,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAA2B,EAC3B,SAAgC,EAAE;IAElC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,kBAAkB,CAAC;IAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,gBAAgB,CAAC;IAEvD,OAAO;QACL,KAAK,CAAC,WAAW;YACf,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE;oBACxC,UAAU;oBACV,KAAK,EAAE,SAAS;oBAChB,GAAG,EAAE,iBAAiB,CAAC,eAAe;iBACvC,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC,KAAK,CAAC;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvE,MAAM,IAAI,KAAK,CACb,wDAAwD,SAAS,MAAM,OAAO,IAAI;oBAChF,gDAAgD;oBAChD,wCAAwC,UAAU,cAAc,SAAS,KAAK;oBAC9E,SAAS,iBAAiB,CAAC,eAAe,gCAAgC,CAC7E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,CAAC,cAAc;YAClB,IAAI,CAAC;gBACH,8BAA8B;gBAC9B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE;oBAC/C,UAAU;oBACV,KAAK,EAAE,SAAS;oBAChB,GAAG,EAAE,iBAAiB,CAAC,eAAe;iBACvC,CAAC,CAAC;gBAEH,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE;oBACxC,UAAU;oBACV,KAAK,EAAE,SAAS;oBAChB,GAAG,EAAE,iBAAiB,CAAC,eAAe;iBACvC,CAAC,CAAC;gBAEH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAA0B,CAAC;gBACjE,OAAO;oBACL,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;iBACpB,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,2DAA2D;gBAC3D,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,IAAiC;YACtD,MAAM,MAAM,GAA0B;gBACpC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YACF,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE;gBACzB,UAAU;gBACV,KAAK,EAAE,SAAS;gBAChB,GAAG,EAAE,iBAAiB,CAAC,eAAe;gBACtC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;aAC9B,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAA2B,EAC3B,SAAgC,EAAE;IAElC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,kBAAkB,CAAC;IAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,gBAAgB,CAAC;IAEvD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE;YACxC,UAAU;YACV,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0CAA0C;QAC1C,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACxC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAA2B,EAC3B,SAAgC,EAAE;IAOlC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,kBAAkB,CAAC;IAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,gBAAgB,CAAC;IAEvD,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE;YAC3C,UAAU;YACV,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QAEH,OAAO;YACL,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,eAAe,CAAC;YAC7D,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,eAAe,CAAC;YAChE,IAAI;SACL,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,WAAW,EAAE,KAAK;YAClB,WAAW,EAAE,KAAK;YAClB,cAAc,EAAE,KAAK;YACrB,IAAI,EAAE,EAAE;SACT,CAAC;IACJ,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,wDAAwD;AACxD,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,4BAA4B,CAAC,QAAgB;IAC3D,IAAI,iBAAiB,GAAuC,IAAI,CAAC;IAEjE,OAAO;QACL,KAAK,CAAC,WAAW;YACf,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,KAAK,CAAC,cAAc;YAClB,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,IAAiC;YACtD,iBAAiB,GAAG,IAAI,CAAC;QAC3B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/targets/akash/types.d.ts

@@ -105,4 +105,100 @@ export interface LeaseDetails {
     };
     readonly createdAt: string;
 }
+/**
+ * Interface for retrieving deployment secrets
+ *
+ * Agents implement this interface to provide wallet credentials and certificate storage
+ * for fully automated deployments without user interaction.
+ *
+ * **SECURITY:** Implementations should retrieve secrets from secure storage
+ * (e.g., encrypted vault, KMS, secure environment variables).
+ *
+ * @example
+ * ```typescript
+ * const secretsProvider: SecretsProvider = {
+ *   getMnemonic: async () => {
+ *     // Retrieve from secure storage
+ *     return await vault.getSecret('akash-wallet-mnemonic');
+ *   },
+ *   getCertificate: async () => {
+ *     // Return cached cert or null to generate new
+ *     return await storage.get('akash-certificate');
+ *   },
+ *   storeCertificate: async (cert) => {
+ *     // Cache for future deployments
+ *     await storage.set('akash-certificate', cert);
+ *   }
+ * };
+ * ```
+ */
+export interface SecretsProvider {
+    /**
+     * Retrieve the mnemonic phrase for the deployment wallet
+     *
+     * Called once at the start of deployment to create the signing wallet.
+     * The mnemonic should be a valid BIP39 phrase (12 or 24 words).
+     *
+     * @returns The mnemonic phrase
+     * @throws If mnemonic cannot be retrieved
+     */
+    getMnemonic(): Promise<string>;
+    /**
+     * Retrieve an existing TLS certificate (optional)
+     *
+     * If a valid certificate is returned, it will be used for provider communication.
+     * If null is returned, a new certificate will be generated and broadcast.
+     *
+     * Providing a cached certificate saves one blockchain transaction (~0.01 AKT).
+     *
+     * @returns Existing certificate or null to generate new
+     */
+    getCertificate?(): Promise<AkashProviderTlsCertificate | null>;
+    /**
+     * Store a newly generated certificate (optional)
+     *
+     * Called when a new certificate is generated and broadcast to the blockchain.
+     * Implementations should persist this for future deployments to avoid
+     * regenerating certificates.
+     *
+     * @param certificate - The newly generated certificate to store
+     */
+    storeCertificate?(certificate: AkashProviderTlsCertificate): Promise<void>;
+}
+/**
+ * Bid selection strategy for autonomous deployments
+ */
+export type BidStrategy = 'cheapest' | 'most-reliable' | 'balanced';
+/**
+ * Uptime period for reliability filtering
+ */
+export type UptimePeriod = '1d' | '7d' | '30d';
+/**
+ * Filter criteria for bid selection
+ */
+export interface BidFilterCriteria {
+    /** Maximum price per block in uAKT */
+    readonly maxPricePerBlock?: number;
+    /**
+     * Minimum uptime requirement
+     *
+     * @example
+     * ```typescript
+     * // Require 95% uptime over last 7 days
+     * minUptime: { value: 0.95, period: '7d' }
+     * ```
+     */
+    readonly minUptime?: {
+        /** Uptime percentage (0-1), e.g., 0.95 = 95% */
+        readonly value: number;
+        /** Period to check: '1d', '7d', or '30d' */
+        readonly period: UptimePeriod;
+    };
+    /** Require audited providers only */
+    readonly requireAudited?: boolean;
+    /** Preferred regions (ISO country codes) */
+    readonly preferredRegions?: readonly string[];
+    /** Require provider to be online */
+    readonly requireOnline?: boolean;
+}
 //# sourceMappingURL=types.d.ts.map

package/dist/targets/akash/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/targets/akash/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAExD,8FAA8F;AAC9F,MAAM,MAAM,WAAW,GAAG,kBAAkB,GAAG,mBAAmB,CAAC;AAEnE,sDAAsD;AACtD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,gGAAgG;AAChG,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC,OAAO,UAAU,CAAC,CAAC;IACtD,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IAC1C,+CAA+C;IAC/C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,4DAA4D;AAC5D,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,aAAa,GAAG,GAAG,IAAI,aAAa,GAAG;IACjF,UAAU,EAAE,YAAY,CAAC,OAAO,UAAU,CAAC,CAAC;IAC5C,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;CAC9B,CAEA;AAED,mDAAmD;AACnD,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,GAAG,IAAI,aAAa,GAAG;IACzE,OAAO,EAAE,WAAW,CAAC;CACtB,CAEA;AAMD;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,oFAAoF;IACpF,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAMD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,QAAQ,GAAG,oBAAoB,CAAC;IAC3D,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/targets/akash/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAExD,8FAA8F;AAC9F,MAAM,MAAM,WAAW,GAAG,kBAAkB,GAAG,mBAAmB,CAAC;AAEnE,sDAAsD;AACtD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,gGAAgG;AAChG,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC,OAAO,UAAU,CAAC,CAAC;IACtD,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IAC1C,+CAA+C;IAC/C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,4DAA4D;AAC5D,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,aAAa,GAAG,GAAG,IAAI,aAAa,GAAG;IACjF,UAAU,EAAE,YAAY,CAAC,OAAO,UAAU,CAAC,CAAC;IAC5C,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;CAC9B,CAEA;AAED,mDAAmD;AACnD,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,GAAG,IAAI,aAAa,GAAG;IACzE,OAAO,EAAE,WAAW,CAAC;CACtB,CAEA;AAMD;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,oFAAoF;IACpF,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAMD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,QAAQ,GAAG,oBAAoB,CAAC;IAC3D,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;;;;OAQG;IACH,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAE/B;;;;;;;;;OASG;IACH,cAAc,CAAC,IAAI,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC,CAAC;IAE/D;;;;;;;;OAQG;IACH,gBAAgB,CAAC,CAAC,WAAW,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5E;AAED;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,eAAe,GAAG,UAAU,CAAC;AAEpE;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,IAAI,GAAG,IAAI,GAAG,KAAK,CAAC;AAE/C;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,sCAAsC;IACtC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE;QACnB,gDAAgD;QAChD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,4CAA4C;QAC5C,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;KAC/B,CAAC;IACF,qCAAqC;IACrC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,4CAA4C;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,oCAAoC;IACpC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC"}

package/dist/targets/akash/wallet-manager.d.ts

@@ -1,7 +1,8 @@
 /**
  * Akash Network Wallet Connection Module
  *
- * Provides a clean, step-by-step API for connecting to Keplr wallet via WalletConnect.
+ * Provides a clean, step-by-step API for connecting to Keplr wallet via WalletConnect
+ * or creating agent-controlled wallets from mnemonics for fully automated deployments.
  * This is a LIBRARY - no QR code display, no prompts, just pure wallet operations.
  *
  * @module targets/akash/wallet
@@ -188,22 +189,39 @@ export declare function connectWallet(projectId: string, network: AkashNetwork,
 /**
  * Create wallet context from mnemonic (for agent-controlled wallets)
  *
+ * Creates a fully functional wallet context from a BIP39 mnemonic phrase,
+ * enabling fully automated deployments without any user interaction.
+ *
  * **SECURITY WARNING:** Only use this for automation YOU control (CI/CD, your own agents).
  * For third-party services, use connectWallet() with WalletConnect instead to avoid
  * exposing your mnemonic.
  *
  * @param mnemonic - BIP39 mnemonic phrase (12 or 24 words)
  * @param network - Akash network to connect to
+ * @param options - Optional configuration
  * @returns Result with wallet context or error
  *
  * @example
  * ```typescript
- * const mnemonic = process.env.DEPLOYMENT_WALLET_MNEMONIC!;
+ * // Agent-controlled deployment
+ * const mnemonic = await mySecretsPlugin.getWalletMnemonic();
  * const wallet = await createWalletFromMnemonic(mnemonic, 'mainnet');
  * if (wallet.success) {
  *   await deployToAkash({ wallet: wallet.data, ... });
  * }
  * ```
+ *
+ * @example
+ * ```typescript
+ * // CI/CD pipeline
+ * const mnemonic = process.env.DEPLOYMENT_WALLET_MNEMONIC!;
+ * const wallet = await createWalletFromMnemonic(mnemonic, 'mainnet');
+ * ```
  */
-export declare function createWalletFromMnemonic(_mnemonic: string, network: AkashNetwork): Promise<Result<WalletContext, WalletError>>;
+export declare function createWalletFromMnemonic(mnemonic: string, network: AkashNetwork, options?: {
+    /** HD derivation path (defaults to Cosmos standard: m/44'/118'/0'/0/0) */
+    hdPath?: string;
+    /** Account index for HD derivation (defaults to 0) */
+    accountIndex?: number;
+}): Promise<Result<WalletContext, WalletError>>;
 //# sourceMappingURL=wallet-manager.d.ts.map

package/dist/targets/akash/wallet-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wallet-manager.d.ts","sourceRoot":"","sources":["../../../src/targets/akash/wallet-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAIxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAe,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAqC,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAoB,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEvE,mCAAmC;AACnC,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,OAAO,UAAU,CAAC,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;KACnC,CAAC;CACH;AAED,4BAA4B;AAC5B,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;CACvD;AAED,iCAAiC;AACjC,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE;IACT,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,GACA,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC,CAiDnD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC,CA4DnD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,EAC5C,SAAS,GAAE,MAAe,GACzB,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,CA6F9C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,mBAAmB,EAC7B,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAwF7C;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,EAC/B,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAqE7C;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAiFpC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,YAAY,EACrB,OAAO,CAAC,EAAE;IACR,sDAAsD;IACtD,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB;IACnB,QAAQ,CAAC,EAAE;QACT,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;CACH,GACA,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CA6B7C;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAU7C"}
+{"version":3,"file":"wallet-manager.d.ts","sourceRoot":"","sources":["../../../src/targets/akash/wallet-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAKxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAe,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAqC,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAoB,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEvE,mCAAmC;AACnC,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,OAAO,UAAU,CAAC,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;KACnC,CAAC;CACH;AAED,4BAA4B;AAC5B,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;CACvD;AAED,iCAAiC;AACjC,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE;IACT,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,GACA,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC,CAiDnD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC,CA4DnD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,EAC5C,SAAS,GAAE,MAAe,GACzB,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,CA6F9C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,mBAAmB,EAC7B,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAwF7C;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,EAC/B,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAqE7C;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAiFpC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,YAAY,EACrB,OAAO,CAAC,EAAE;IACR,sDAAsD;IACtD,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB;IACnB,QAAQ,CAAC,EAAE;QACT,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;CACH,GACA,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CA6B7C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,YAAY,EACrB,OAAO,CAAC,EAAE;IACR,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GACA,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CA0J7C"}

package/dist/targets/akash/wallet-manager.js

@@ -1,7 +1,8 @@
 /**
  * Akash Network Wallet Connection Module
  *
- * Provides a clean, step-by-step API for connecting to Keplr wallet via WalletConnect.
+ * Provides a clean, step-by-step API for connecting to Keplr wallet via WalletConnect
+ * or creating agent-controlled wallets from mnemonics for fully automated deployments.
  * This is a LIBRARY - no QR code display, no prompts, just pure wallet operations.
  *
  * @module targets/akash/wallet
@@ -9,6 +10,7 @@
 import { SignClient } from '@walletconnect/sign-client';
 import { KeplrWalletConnectV2 } from '@keplr-wallet/wc-client';
 import { fromHex } from '@cosmjs/encoding';
+import { DirectSecp256k1HdWallet } from '@cosmjs/proto-signing';
 import { StargateClient } from '@cosmjs/stargate';
 import { WalletError, WalletErrorCodes, getErrorMessage } from '../../errors/index.js';
 import { getNetworkConfig } from './environment.js';
@@ -529,28 +531,155 @@ export async function connectWallet(projectId, network, options) {
 /**
  * Create wallet context from mnemonic (for agent-controlled wallets)
  *
+ * Creates a fully functional wallet context from a BIP39 mnemonic phrase,
+ * enabling fully automated deployments without any user interaction.
+ *
  * **SECURITY WARNING:** Only use this for automation YOU control (CI/CD, your own agents).
  * For third-party services, use connectWallet() with WalletConnect instead to avoid
  * exposing your mnemonic.
  *
  * @param mnemonic - BIP39 mnemonic phrase (12 or 24 words)
  * @param network - Akash network to connect to
+ * @param options - Optional configuration
  * @returns Result with wallet context or error
  *
  * @example
  * ```typescript
- * const mnemonic = process.env.DEPLOYMENT_WALLET_MNEMONIC!;
+ * // Agent-controlled deployment
+ * const mnemonic = await mySecretsPlugin.getWalletMnemonic();
  * const wallet = await createWalletFromMnemonic(mnemonic, 'mainnet');
  * if (wallet.success) {
  *   await deployToAkash({ wallet: wallet.data, ... });
  * }
  * ```
+ *
+ * @example
+ * ```typescript
+ * // CI/CD pipeline
+ * const mnemonic = process.env.DEPLOYMENT_WALLET_MNEMONIC!;
+ * const wallet = await createWalletFromMnemonic(mnemonic, 'mainnet');
+ * ```
  */
-export async function createWalletFromMnemonic(_mnemonic, network) {
-    // TODO: Implement using DirectSecp256k1HdWallet from @cosmjs/proto-signing
-    return {
-        success: false,
-        error: new WalletError('createWalletFromMnemonic() not yet implemented', WalletErrorCodes.NOT_IMPLEMENTED, { network }),
-    };
+export async function createWalletFromMnemonic(mnemonic, network, options) {
+    try {
+        // Step 1: Validate mnemonic format
+        if (!mnemonic || typeof mnemonic !== 'string') {
+            return {
+                success: false,
+                error: new WalletError('Mnemonic is required', WalletErrorCodes.WALLET_ERROR, { provided: typeof mnemonic }),
+            };
+        }
+        // Basic mnemonic validation (12 or 24 words)
+        const words = mnemonic.trim().split(/\s+/);
+        if (words.length !== 12 && words.length !== 24) {
+            return {
+                success: false,
+                error: new WalletError(`Invalid mnemonic: expected 12 or 24 words, got ${words.length}`, WalletErrorCodes.WALLET_ERROR, { wordCount: words.length }),
+            };
+        }
+        // Step 2: Get network configuration
+        const networkConfig = getNetworkConfig(network);
+        // Step 3: Create DirectSecp256k1HdWallet with Akash bech32 prefix
+        // The wallet handles both Amino and Direct signing
+        let wallet;
+        try {
+            wallet = await DirectSecp256k1HdWallet.fromMnemonic(mnemonic.trim(), {
+                prefix: 'akash',
+                // Use custom HD path if provided, otherwise use Cosmos default
+                hdPaths: options?.hdPath
+                    ? [{ toString: () => options.hdPath }]
+                    : undefined,
+            });
+        }
+        catch (error) {
+            const errMsg = getErrorMessage(error);
+            return {
+                success: false,
+                error: new WalletError(`Invalid mnemonic phrase: ${errMsg}`, WalletErrorCodes.WALLET_ERROR, { error: errMsg }),
+            };
+        }
+        // Step 4: Get accounts from wallet
+        const accounts = await wallet.getAccounts();
+        if (accounts.length === 0) {
+            return {
+                success: false,
+                error: new WalletError('No accounts derived from mnemonic', WalletErrorCodes.NO_SIGNER_ACCOUNTS, { network }),
+            };
+        }
+        const accountIndex = options?.accountIndex ?? 0;
+        const account = accounts[accountIndex];
+        if (!account) {
+            return {
+                success: false,
+                error: new WalletError(`Account index ${accountIndex} not found (only ${accounts.length} accounts available)`, WalletErrorCodes.ACCOUNT_NOT_FOUND, { accountIndex, availableAccounts: accounts.length }),
+            };
+        }
+        const address = account.address;
+        // Step 5: Create a signer that implements both OfflineAminoSigner & OfflineDirectSigner
+        // DirectSecp256k1HdWallet implements OfflineDirectSigner but we need both for Akash
+        // We create a combined signer interface
+        const signer = {
+            getAccounts: async () => wallet.getAccounts(),
+            signDirect: async (signerAddress, signDoc) => wallet.signDirect(signerAddress, signDoc),
+            // For Amino signing, we use the direct signer's accounts
+            // and delegate to signDirect (Akash SDK handles conversion)
+            signAmino: async (_signerAddress, _signDoc) => {
+                // DirectSecp256k1HdWallet doesn't implement signAmino directly
+                // but Akash chain-sdk uses signDirect when available
+                // For compatibility, we throw a clear error if Amino is specifically required
+                throw new Error('Amino signing not supported by mnemonic wallet. ' +
+                    'Use WalletConnect for legacy Amino-only operations.');
+            },
+        };
+        // Step 6: Query blockchain for account data (balance, sequence, etc.)
+        // This is non-fatal - wallet can work without it (account created on first tx)
+        let accountData;
+        try {
+            const stargateClient = await StargateClient.connect(networkConfig.rpc);
+            try {
+                const chainAccount = await stargateClient.getAccount(address);
+                if (chainAccount) {
+                    accountData = {
+                        address: chainAccount.address,
+                        pubkey: chainAccount.pubkey
+                            ? fromHex(Buffer.from(chainAccount.pubkey.value).toString('hex'))
+                            : null,
+                        accountNumber: chainAccount.accountNumber,
+                        sequence: chainAccount.sequence,
+                    };
+                }
+                // Account might not exist on chain yet (new/unfunded account)
+                // This is OK - account will be created with first transaction
+            }
+            finally {
+                stargateClient.disconnect();
+            }
+        }
+        catch {
+            // Network query failed - wallet still works, just no account data
+            // This is fine for new accounts or when network is unreachable
+            accountData = undefined;
+        }
+        // Step 7: Create wallet context
+        const walletContext = {
+            address,
+            signer,
+            offlineSigner: signer,
+            chainId: networkConfig.chainId,
+            account: accountData,
+            // signClient and session are undefined - only used for WalletConnect
+        };
+        return {
+            success: true,
+            data: walletContext,
+        };
+    }
+    catch (error) {
+        const errMsg = getErrorMessage(error);
+        return {
+            success: false,
+            error: new WalletError(`Failed to create wallet from mnemonic: ${errMsg}`, WalletErrorCodes.CONTEXT_CREATION_FAILED, { error: errMsg, network }),
+        };
+    }
 }
 //# sourceMappingURL=wallet-manager.js.map