@kashdao/cli 0.1.0 → 0.1.1

package/dist/{protocol-XEQXF2GW.js → protocol-ZB6R25IM.js}

@@ -2,17 +2,17 @@
 import {
   loadRawPrivateKey,
   resolveCliCustomChain
-} from "./chunk-YJX3JJ4M.js";
+} from "./chunk-L4AFV2HK.js";
 import {
   formatAddress,
   formatBigDecimal,
   formatGwei,
   formatUsdcAtomic,
   formatWad
-} from "./chunk-BRK7KJ4O.js";
+} from "./chunk-R4NGUZKN.js";
 import {
   readConfig
-} from "./chunk-KMBMQIZ7.js";
+} from "./chunk-N26VGVGB.js";
 import {
   DEFAULT_SLIPPAGE_BPS,
   HEX_HASH_REGEX,
@@ -26,13 +26,13 @@ import {
   parseUppercaseSide,
   validateAddress,
   validateAddressOptional
-} from "./chunk-YHCG2SUC.js";
+} from "./chunk-BVFDUI73.js";
 import {
   parseOptionalPositiveFloat,
   parseOptionalPositiveInt,
   parsePositiveInt,
   readGlobals
-} from "./chunk-LBIRQHX5.js";
+} from "./chunk-A3IH5HUV.js";
 import {
   isQuiet,
   log,
@@ -40,14 +40,14 @@ import {
   printJson,
   style,
   writeNdjson
-} from "./chunk-VIADBYFY.js";
-import "./chunk-MIXOZU2S.js";
+} from "./chunk-MQUJG224.js";
+import "./chunk-KADB3OKE.js";
 import {
   CliError,
   CliValidationError,
   EXIT_CODES,
   toCliError
-} from "./chunk-UZNSYATZ.js";
+} from "./chunk-X2VM6VKM.js";
 
 // src/commands/protocol/index.ts
 import { Command as Command13 } from "commander";
@@ -1569,4 +1569,4 @@ var protocolCommand = new Command13("protocol").description(
 export {
   protocolCommand
 };
-//# sourceMappingURL=protocol-XEQXF2GW.js.map
+//# sourceMappingURL=protocol-ZB6R25IM.js.map

package/dist/{quote-I4DVJ7ZB.js → quote-OF6BTAPQ.js}

@@ -4,30 +4,30 @@ import {
   formatUsdcAtomic,
   formatWad,
   shortId
-} from "./chunk-BRK7KJ4O.js";
+} from "./chunk-R4NGUZKN.js";
 import {
   buildClient
-} from "./chunk-QJMF73M5.js";
-import "./chunk-KMBMQIZ7.js";
+} from "./chunk-QALDZHTX.js";
+import "./chunk-N26VGVGB.js";
 import {
   decimalToAtomicUsdc,
   decimalToAtomicWad,
   parseOutcomeIndex
-} from "./chunk-YHCG2SUC.js";
-import "./chunk-BN2CUM42.js";
+} from "./chunk-BVFDUI73.js";
+import "./chunk-KAM6KOFD.js";
 import {
   readGlobals
-} from "./chunk-LBIRQHX5.js";
+} from "./chunk-A3IH5HUV.js";
 import {
   log,
   print,
   printJson,
   style
-} from "./chunk-VIADBYFY.js";
-import "./chunk-MIXOZU2S.js";
+} from "./chunk-MQUJG224.js";
+import "./chunk-KADB3OKE.js";
 import {
   toCliError
-} from "./chunk-UZNSYATZ.js";
+} from "./chunk-X2VM6VKM.js";
 
 // src/commands/quote/index.ts
 import { Command as Command3 } from "commander";
@@ -141,4 +141,4 @@ var quoteCommand = new Command3("quote").description("Get on-chain AMM price quo
 export {
   quoteCommand
 };
-//# sourceMappingURL=quote-I4DVJ7ZB.js.map
+//# sourceMappingURL=quote-OF6BTAPQ.js.map

package/dist/{schema-PIFQ65TS.js → schema-3HQN4RFL.js}

@@ -3,19 +3,19 @@ import {
   BIGINT_STRING_REGEX,
   HEX_ADDRESS_REGEX,
   USDC_DECIMAL_REGEX
-} from "./chunk-YHCG2SUC.js";
+} from "./chunk-BVFDUI73.js";
 import {
   readGlobals
-} from "./chunk-LBIRQHX5.js";
+} from "./chunk-A3IH5HUV.js";
 import {
   print,
   printJson,
   style
-} from "./chunk-VIADBYFY.js";
-import "./chunk-MIXOZU2S.js";
+} from "./chunk-MQUJG224.js";
+import "./chunk-KADB3OKE.js";
 import {
   CliError
-} from "./chunk-UZNSYATZ.js";
+} from "./chunk-X2VM6VKM.js";
 
 // src/commands/schema.ts
 import {
@@ -407,4 +407,4 @@ Notes:
 export {
   schemaCommand
 };
-//# sourceMappingURL=schema-PIFQ65TS.js.map
+//# sourceMappingURL=schema-3HQN4RFL.js.map

package/dist/{setup-USZ6IODD.js → setup-IIPQXLPL.js}

@@ -1,23 +1,23 @@
 #!/usr/bin/env node
 import {
   readGlobals
-} from "./chunk-LBIRQHX5.js";
+} from "./chunk-A3IH5HUV.js";
 import {
   log,
   print,
   printJson,
   style
-} from "./chunk-VIADBYFY.js";
-import "./chunk-MIXOZU2S.js";
+} from "./chunk-MQUJG224.js";
+import "./chunk-KADB3OKE.js";
 import {
   CliError,
   toCliError
-} from "./chunk-UZNSYATZ.js";
+} from "./chunk-X2VM6VKM.js";
 
 // src/commands/setup.ts
 import { Command } from "commander";
-var KEY_REQUEST_EMAIL = "engineering@kash.bot";
-var KEY_REQUEST_INSTRUCTIONS = `Email ${KEY_REQUEST_EMAIL} with your intended use case to request a \`kash_test_*\` staging key. Self-service issuance is coming with the production launch.`;
+var KEY_ISSUANCE_URL = "https://app.kash.bot";
+var KEY_REQUEST_INSTRUCTIONS = `Create a key under Settings \u2192 API Keys at ${KEY_ISSUANCE_URL} \u2014 \`Live\` for Base mainnet or \`Test\` for Base Sepolia.`;
 var setupCommand = new Command("setup").description("Interactive first-run wizard: configure an API key, verify, install completion.").option("-y, --yes", "accept all defaults and skip optional prompts (non-interactive)").option("--api-key <key>", "pass the API key non-interactively (skips the prompt)").addHelpText(
   "after",
   `
@@ -49,8 +49,8 @@ async function runSetup(options, globals) {
   const jsonMode = globals.json;
   const [{ confirm, input, password }, { updateConfig, setCurrentProfile }, { buildClient }] = await Promise.all([
     import("@inquirer/prompts"),
-    import("./config-store-3ZSYGXMQ.js"),
-    import("./client-IOM55ZCS.js")
+    import("./config-store-UTFDUCKW.js"),
+    import("./client-75FVHGOH.js")
   ]);
   if (!jsonMode) {
     print("");
@@ -74,7 +74,7 @@ async function runSetup(options, globals) {
     });
   } else {
     if (!jsonMode) {
-      print(`${style.dim("\u{1F9EA} Staging release.")} ${KEY_REQUEST_INSTRUCTIONS} (Ctrl-C to abort.)`);
+      print(`${style.dim("Need a key?")} ${KEY_REQUEST_INSTRUCTIONS} (Ctrl-C to abort.)`);
     }
     apiKey = await password({
       message: "Paste your API key:",
@@ -190,7 +190,7 @@ async function runSetup(options, globals) {
   };
 }
 async function probeReadScopes(opts) {
-  const { buildClient } = await import("./client-IOM55ZCS.js");
+  const { buildClient } = await import("./client-75FVHGOH.js");
   const { client } = await buildClient({
     requireAuth: true,
     globals: { ...opts.globals, profile: opts.profile }
@@ -234,7 +234,7 @@ function renderScopesHuman(scopes) {
   const denied = entries.filter(([, v]) => v === "denied").map(([k]) => k);
   if (denied.length > 0) {
     log.info(
-      `Request a key with broader scope by emailing ${KEY_REQUEST_EMAIL} if you need: ${denied.join(", ")}.`
+      `Issue a key with broader scope under Settings \u2192 API Keys at ${KEY_ISSUANCE_URL} if you need: ${denied.join(", ")}.`
     );
   }
 }
@@ -257,4 +257,4 @@ function pickNextStepHints(scopes) {
 export {
   setupCommand
 };
-//# sourceMappingURL=setup-USZ6IODD.js.map
+//# sourceMappingURL=setup-IIPQXLPL.js.map

package/dist/setup-IIPQXLPL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/setup.ts"],"sourcesContent":["/**\n * `kash setup` — first-run interactive wizard.\n *\n * Collapses what's normally a four-step onboarding into a single\n * guided flow:\n *   1. Open the dashboard URL so the user can issue an API key.\n *   2. Paste the key (validated for the `kash_` prefix).\n *   3. Pick a profile name (defaults to `default`).\n *   4. Verify connectivity via `kash health`.\n *   5. Optionally install shell completion.\n *\n * **Lazy-loaded.** `@inquirer/prompts` is heavy — the dynamic import\n * keeps it out of the cold path for `kash --version` and other\n * non-interactive invocations. The KashClient + completion modules\n * are also lazy.\n *\n * **Skippable.** Every prompt has a sensible default and `--yes`\n * accepts all defaults non-interactively (CI / automation). `--json`\n * emits a structured summary at the end so post-setup scripts can\n * verify state without re-reading the config file.\n */\n\nimport { Command } from 'commander';\n\nimport { CliError, toCliError } from '../errors.js';\nimport { readGlobals } from '../utils/global-options.js';\nimport { log, print, printJson, style } from '../utils/output.js';\n\nimport type { GlobalOptions } from '../utils/global-options.js';\n\n// Keys are issued self-service in the Kash app. A `kash_live_*` key\n// auto-routes to the production API (Base mainnet); a `kash_test_*` key\n// auto-routes to staging (Base Sepolia) for dry-runs.\nconst KEY_ISSUANCE_URL = 'https://app.kash.bot';\nconst KEY_REQUEST_INSTRUCTIONS = `Create a key under Settings → API Keys at ${KEY_ISSUANCE_URL} — \\`Live\\` for Base mainnet or \\`Test\\` for Base Sepolia.`;\n\ntype SetupOptions = {\n  yes?: boolean;\n  apiKey?: string;\n};\n\n/**\n * Per-scope probe result. `'ok'` means the canary call succeeded;\n * `'denied'` means the API returned 403 / INSUFFICIENT_SCOPE for that\n * scope (the key is valid but doesn't carry the scope); `'unknown'`\n * means the probe failed for a non-scope reason (network, server\n * error) — we don't pretend to know.\n */\ntype ScopeProbeStatus = 'ok' | 'denied' | 'unknown';\n\n/**\n * Output envelope when `--json` is set. Stable contract — agents and\n * provisioning scripts pin to it.\n */\ntype SetupResult = {\n  ok: true;\n  profile: string;\n  authenticated: boolean;\n  health: { ok: boolean; latencyMs?: number; status?: string; version?: string };\n  /**\n   * Best-effort scope detection from canary read calls. Each entry is\n   * a granted/denied/unknown verdict for a named scope. Does NOT probe\n   * write scopes (that'd require a real trade).\n   */\n  scopes: Record<string, ScopeProbeStatus>;\n  completionInstalled: boolean;\n};\n\nexport const setupCommand = new Command('setup')\n  .description('Interactive first-run wizard: configure an API key, verify, install completion.')\n  .option('-y, --yes', 'accept all defaults and skip optional prompts (non-interactive)')\n  .option('--api-key <key>', 'pass the API key non-interactively (skips the prompt)')\n  .addHelpText(\n    'after',\n    `\nExamples:\n  $ kash setup\n  $ kash setup --api-key kash_live_… --yes --json\n  $ kash --profile staging setup --yes  # write to a named profile\n  $ KASH_API_KEY=kash_live_… kash setup --yes  # picks up the env var\n\nNotes:\n  - Re-runnable. Existing profiles are updated, not duplicated.\n  - --yes accepts every default and skips optional prompts (no shell\n    completion install). Combine with --api-key for full automation.\n  - Use the top-level --profile flag (\\`kash --profile <name> setup\\`)\n    to write to a named profile non-interactively.\n`\n  )\n  .action(async (options: SetupOptions, cmd: Command) => {\n    const globals = readGlobals(cmd);\n\n    try {\n      const result = await runSetup(options, globals);\n      if (globals.json) {\n        printJson(result);\n      }\n    } catch (cause) {\n      throw toCliError(cause);\n    }\n  });\n\nasync function runSetup(options: SetupOptions, globals: GlobalOptions): Promise<SetupResult> {\n  const jsonMode = globals.json;\n  // Lazy imports — see file header.\n  const [{ confirm, input, password }, { updateConfig, setCurrentProfile }, { buildClient }] =\n    await Promise.all([\n      import('@inquirer/prompts'),\n      import('../utils/config-store.js'),\n      import('../utils/client.js'),\n    ]);\n\n  if (!jsonMode) {\n    print('');\n    print(style.bold('Kash CLI setup'));\n    print(style.dim('Configure an API key, verify connectivity, install shell completion.'));\n    print('');\n  }\n\n  // Resolve the API key. Precedence: --api-key flag → env → prompt.\n  const envKey = process.env['KASH_API_KEY'];\n  let apiKey: string;\n  if (options.apiKey) {\n    apiKey = options.apiKey;\n    if (!jsonMode) log.info('Using --api-key from the command line.');\n  } else if (envKey) {\n    apiKey = envKey;\n    if (!jsonMode) log.info('Using KASH_API_KEY from the environment.');\n  } else if (options.yes) {\n    throw new CliError('Cannot run --yes without an API key.', {\n      code: 'INVALID_INPUT',\n      recoverable: true,\n      suggestion: `Pass --api-key <kash_…>, set KASH_API_KEY, or run \\`kash setup\\` without --yes. ${KEY_REQUEST_INSTRUCTIONS}`,\n    });\n  } else {\n    if (!jsonMode) {\n      print(`${style.dim('Need a key?')} ${KEY_REQUEST_INSTRUCTIONS} (Ctrl-C to abort.)`);\n    }\n    // Use the masked-input prompt — `input()` would echo every\n    // keystroke to the terminal, defeating the protection that\n    // `kash setup` should provide for fresh API keys (shoulder-\n    // surfing, screen recording, scroll-back capture). The validation\n    // shape is identical to the previous `input` call.\n    apiKey = await password({\n      message: 'Paste your API key:',\n      mask: '*',\n      validate: (value: string) => {\n        const trimmed = value.trim();\n        if (trimmed.length < 16) return 'API key looks too short.';\n        if (!trimmed.startsWith('kash_')) return 'API keys start with \"kash_\".';\n        return true;\n      },\n    });\n    apiKey = apiKey.trim();\n  }\n\n  // Resolve the profile name. Precedence: top-level --profile flag →\n  // interactive prompt → 'default'. We deliberately reuse the global\n  // flag rather than declaring our own to avoid two profile flags\n  // with subtly different semantics.\n  let profile = globals.profile;\n  if (profile === undefined && !options.yes) {\n    profile = await input({\n      message: 'Profile name:',\n      default: 'default',\n    });\n  }\n  profile = (profile ?? 'default').trim();\n\n  // Persist. `updateConfig` handles the file IO, mode 0600, and Zod\n  // validation. We only update apiKey — baseUrl/chain are inferred\n  // from the key prefix on first request. Both calls thread the\n  // global `--config <path>` override so `kash setup --config\n  // /tmp/test.json` writes to the user-specified file rather than\n  // silently falling back to ~/.kash/config.json.\n  const writeOpts = {\n    profile,\n    ...(globals.configPath === undefined ? {} : { configPath: globals.configPath }),\n  };\n  const written = await updateConfig({ apiKey }, writeOpts);\n  await setCurrentProfile(\n    written.profile,\n    globals.configPath === undefined ? undefined : { configPath: globals.configPath }\n  );\n\n  if (!jsonMode) {\n    log.success(`Saved API key to profile \"${written.profile}\".`);\n  }\n\n  // Verify connectivity. We pass the just-resolved profile so the\n  // health check reads the key we just wrote (not whatever was the\n  // active profile before).\n  let healthOk = false;\n  let healthLatency: number | undefined;\n  let healthStatus: string | undefined;\n  let healthVersion: string | undefined;\n  try {\n    const { client } = await buildClient({\n      requireAuth: true,\n      // Reuse the resolved globals but pin the profile to the one we\n      // just wrote — otherwise a stale flag could cause us to verify\n      // a different profile than the one we configured.\n      globals: { ...globals, profile: written.profile },\n    });\n    const result = await client.healthCheck();\n    healthOk = result.ok;\n    healthLatency = result.latencyMs;\n    healthStatus = result.status;\n    healthVersion = result.version;\n    if (!jsonMode) {\n      if (healthOk) {\n        log.success(\n          `Health check OK in ${String(healthLatency)}ms${\n            healthVersion ? ` (server ${healthVersion})` : ''\n          }.`\n        );\n      } else {\n        log.warn('Health check returned not-ok. Verify your network or rerun later.');\n      }\n    }\n  } catch (cause) {\n    // Don't fail setup on a flaky health check — the key may still be\n    // good and the user just has temporary connectivity issues.\n    if (!jsonMode) {\n      log.warn(`Health check failed: ${cause instanceof Error ? cause.message : String(cause)}`);\n      log.info('Setup completed; verify later with `kash health`.');\n    }\n  }\n\n  // Probe a handful of read scopes via canary calls. We don't probe\n  // write scopes (that'd require a real trade or webhook rotation),\n  // and we don't fail setup on probe errors — the key still works,\n  // we just couldn't tell which scopes it carries.\n  const scopes = await probeReadScopes({ globals, profile: written.profile });\n  if (!jsonMode) {\n    renderScopesHuman(scopes);\n  }\n\n  // Optional: shell completion. Skip in --yes mode (no good default\n  // for an action that mutates the user's shell rc files).\n  let completionInstalled = false;\n  if (!options.yes && !jsonMode) {\n    const detectedShell = process.env['SHELL'] ?? '(unknown)';\n    const wantCompletion = await confirm({\n      message: `Install shell completion for ${detectedShell}?`,\n      default: true,\n    });\n    if (wantCompletion) {\n      try {\n        const { default: omelette } = await import('omelette');\n        const completion = omelette('kash');\n        completion.setupShellInitFile();\n        completionInstalled = true;\n        log.success('Shell completions installed.');\n        log.info('Restart your shell or source your shell config to activate.');\n      } catch (cause) {\n        log.warn(\n          `Could not install completion: ${cause instanceof Error ? cause.message : String(cause)}`\n        );\n      }\n    }\n  }\n\n  if (!jsonMode) {\n    print('');\n    print(style.bold(\"You're all set.\"));\n    // Pick a \"Try:\" suggestion the user's key actually has scope for.\n    // Pre-fix this was hardcoded to `markets list --status ACTIVE`,\n    // which fails immediately for keys that only carry webhooks-read\n    // / trades-read scope. Probe results drive the suggestion now.\n    for (const line of pickNextStepHints(scopes)) {\n      print(`  ${style.dim('Try:')} ${line}`);\n    }\n    print(`  ${style.dim('    :')} kash docs --json --quiet | jq '.subcommands[].name'`);\n    print('');\n  }\n\n  return {\n    ok: true,\n    profile: written.profile,\n    authenticated: true,\n    health: {\n      ok: healthOk,\n      ...(healthLatency === undefined ? {} : { latencyMs: healthLatency }),\n      ...(healthStatus === undefined ? {} : { status: healthStatus }),\n      ...(healthVersion === undefined ? {} : { version: healthVersion }),\n    },\n    scopes,\n    completionInstalled,\n  };\n}\n\n/**\n * Probe-derived scope detection.\n *\n * Each named scope is mapped to a canary SDK call. We invoke the call\n * with a minimal pageSize and inspect the failure mode to classify:\n *\n *   - call resolves              → `'ok'` (scope present)\n *   - throws KashAuthorizationError(INSUFFICIENT_SCOPE) → `'denied'`\n *   - throws anything else       → `'unknown'` (probe inconclusive,\n *     don't claim the scope is missing)\n *\n * Read-only by design — write scopes (`trades:create`, `auth:manage`)\n * would require either a real mutation or a sentinel \"what scopes do\n * I have?\" endpoint, which the API doesn't currently expose.\n */\nasync function probeReadScopes(opts: {\n  globals: GlobalOptions;\n  profile: string;\n}): Promise<Record<string, ScopeProbeStatus>> {\n  const { buildClient } = await import('../utils/client.js');\n  const { client } = await buildClient({\n    requireAuth: true,\n    globals: { ...opts.globals, profile: opts.profile },\n  });\n\n  // Each canary is a (scope-name, call) pair. Call uses limit:1 to\n  // minimise server load. Order is stable so the JSON envelope is\n  // pinnable.\n  const probes: ReadonlyArray<readonly [string, () => Promise<unknown>]> = [\n    ['markets:read', async () => client.markets.list({ limit: 1 })],\n    ['trades:read', async () => client.trades.list({ limit: 1 })],\n    ['webhooks:read', async () => client.webhooks.list({ limit: 1 })],\n  ];\n\n  const result: Record<string, ScopeProbeStatus> = {};\n  for (const [scope, call] of probes) {\n    result[scope] = await classifyProbe(call);\n  }\n  return result;\n}\n\nasync function classifyProbe(call: () => Promise<unknown>): Promise<ScopeProbeStatus> {\n  try {\n    await call();\n    return 'ok';\n  } catch (cause) {\n    // The SDK's KashAuthorizationError carries `code: 'INSUFFICIENT_SCOPE'`.\n    // We duck-type rather than import the class to avoid a dependency\n    // on the SDK's class identity (an instanceof check would couple\n    // to the exact module-graph copy of @kashdao/sdk).\n    if (cause !== null && typeof cause === 'object') {\n      const code = (cause as { code?: unknown }).code;\n      if (code === 'INSUFFICIENT_SCOPE') return 'denied';\n    }\n    return 'unknown';\n  }\n}\n\nfunction renderScopesHuman(scopes: Record<string, ScopeProbeStatus>): void {\n  const entries = Object.entries(scopes);\n  if (entries.length === 0) return;\n  const allOk = entries.every(([, v]) => v === 'ok');\n  if (allOk) {\n    log.success('Scope check OK — key carries every probed read scope.');\n    return;\n  }\n  log.info('Scope detection (probed via canary read calls):');\n  for (const [scope, status] of entries) {\n    const label =\n      status === 'ok'\n        ? style.success('granted')\n        : status === 'denied'\n          ? style.warn('not granted')\n          : style.dim('inconclusive');\n    print(`  ${style.dim(scope.padEnd(16))} ${label}`);\n  }\n  const denied = entries.filter(([, v]) => v === 'denied').map(([k]) => k);\n  if (denied.length > 0) {\n    log.info(\n      `Issue a key with broader scope under Settings → API Keys at ${KEY_ISSUANCE_URL} if you need: ${denied.join(', ')}.`\n    );\n  }\n}\n\n/**\n * Pick `kash <…>` suggestions to surface in the post-setup banner,\n * gated on the scopes the probe confirmed. Order from most-common\n * to least-common; emit at most 2 lines so the banner stays terse.\n *\n * Falls back to a generic \"see `kash --help`\" when no probed scope\n * looks usable (rare — the probe already errored loudly in that\n * case, but we keep the wizard's last line useful regardless).\n */\nfunction pickNextStepHints(scopes: Record<string, ScopeProbeStatus>): readonly string[] {\n  const hints: string[] = [];\n  if (scopes['markets:read'] === 'ok') {\n    hints.push('kash markets list --status ACTIVE');\n  }\n  if (scopes['trades:read'] === 'ok') {\n    hints.push('kash trade list --json --quiet | jq -r \".data[].id\"');\n  }\n  if (scopes['webhooks:read'] === 'ok' && hints.length < 2) {\n    hints.push('kash webhooks list --status failed,retrying');\n  }\n  if (hints.length === 0) {\n    // Probe results were inconclusive or every read scope was denied.\n    // The earlier `renderScopesHuman` already surfaced the per-scope\n    // verdict; keep the banner non-actionable instead of pointing at\n    // a command that 403s.\n    hints.push('kash --help');\n  }\n  return hints.slice(0, 2);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAsBA,SAAS,eAAe;AAWxB,IAAM,mBAAmB;AACzB,IAAM,2BAA2B,kDAA6C,gBAAgB;AAkCvF,IAAM,eAAe,IAAI,QAAQ,OAAO,EAC5C,YAAY,iFAAiF,EAC7F,OAAO,aAAa,iEAAiE,EACrF,OAAO,mBAAmB,uDAAuD,EACjF;AAAA,EACC;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAcF,EACC,OAAO,OAAO,SAAuB,QAAiB;AACrD,QAAM,UAAU,YAAY,GAAG;AAE/B,MAAI;AACF,UAAM,SAAS,MAAM,SAAS,SAAS,OAAO;AAC9C,QAAI,QAAQ,MAAM;AAChB,gBAAU,MAAM;AAAA,IAClB;AAAA,EACF,SAAS,OAAO;AACd,UAAM,WAAW,KAAK;AAAA,EACxB;AACF,CAAC;AAEH,eAAe,SAAS,SAAuB,SAA8C;AAC3F,QAAM,WAAW,QAAQ;AAEzB,QAAM,CAAC,EAAE,SAAS,OAAO,SAAS,GAAG,EAAE,cAAc,kBAAkB,GAAG,EAAE,YAAY,CAAC,IACvF,MAAM,QAAQ,IAAI;AAAA,IAChB,OAAO,mBAAmB;AAAA,IAC1B,OAAO,4BAA0B;AAAA,IACjC,OAAO,sBAAoB;AAAA,EAC7B,CAAC;AAEH,MAAI,CAAC,UAAU;AACb,UAAM,EAAE;AACR,UAAM,MAAM,KAAK,gBAAgB,CAAC;AAClC,UAAM,MAAM,IAAI,sEAAsE,CAAC;AACvF,UAAM,EAAE;AAAA,EACV;AAGA,QAAM,SAAS,QAAQ,IAAI,cAAc;AACzC,MAAI;AACJ,MAAI,QAAQ,QAAQ;AAClB,aAAS,QAAQ;AACjB,QAAI,CAAC,SAAU,KAAI,KAAK,wCAAwC;AAAA,EAClE,WAAW,QAAQ;AACjB,aAAS;AACT,QAAI,CAAC,SAAU,KAAI,KAAK,0CAA0C;AAAA,EACpE,WAAW,QAAQ,KAAK;AACtB,UAAM,IAAI,SAAS,wCAAwC;AAAA,MACzD,MAAM;AAAA,MACN,aAAa;AAAA,MACb,YAAY,wFAAmF,wBAAwB;AAAA,IACzH,CAAC;AAAA,EACH,OAAO;AACL,QAAI,CAAC,UAAU;AACb,YAAM,GAAG,MAAM,IAAI,aAAa,CAAC,IAAI,wBAAwB,qBAAqB;AAAA,IACpF;AAMA,aAAS,MAAM,SAAS;AAAA,MACtB,SAAS;AAAA,MACT,MAAM;AAAA,MACN,UAAU,CAAC,UAAkB;AAC3B,cAAM,UAAU,MAAM,KAAK;AAC3B,YAAI,QAAQ,SAAS,GAAI,QAAO;AAChC,YAAI,CAAC,QAAQ,WAAW,OAAO,EAAG,QAAO;AACzC,eAAO;AAAA,MACT;AAAA,IACF,CAAC;AACD,aAAS,OAAO,KAAK;AAAA,EACvB;AAMA,MAAI,UAAU,QAAQ;AACtB,MAAI,YAAY,UAAa,CAAC,QAAQ,KAAK;AACzC,cAAU,MAAM,MAAM;AAAA,MACpB,SAAS;AAAA,MACT,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,aAAW,WAAW,WAAW,KAAK;AAQtC,QAAM,YAAY;AAAA,IAChB;AAAA,IACA,GAAI,QAAQ,eAAe,SAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;AAAA,EAC/E;AACA,QAAM,UAAU,MAAM,aAAa,EAAE,OAAO,GAAG,SAAS;AACxD,QAAM;AAAA,IACJ,QAAQ;AAAA,IACR,QAAQ,eAAe,SAAY,SAAY,EAAE,YAAY,QAAQ,WAAW;AAAA,EAClF;AAEA,MAAI,CAAC,UAAU;AACb,QAAI,QAAQ,6BAA6B,QAAQ,OAAO,IAAI;AAAA,EAC9D;AAKA,MAAI,WAAW;AACf,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,UAAM,EAAE,OAAO,IAAI,MAAM,YAAY;AAAA,MACnC,aAAa;AAAA;AAAA;AAAA;AAAA,MAIb,SAAS,EAAE,GAAG,SAAS,SAAS,QAAQ,QAAQ;AAAA,IAClD,CAAC;AACD,UAAM,SAAS,MAAM,OAAO,YAAY;AACxC,eAAW,OAAO;AAClB,oBAAgB,OAAO;AACvB,mBAAe,OAAO;AACtB,oBAAgB,OAAO;AACvB,QAAI,CAAC,UAAU;AACb,UAAI,UAAU;AACZ,YAAI;AAAA,UACF,sBAAsB,OAAO,aAAa,CAAC,KACzC,gBAAgB,YAAY,aAAa,MAAM,EACjD;AAAA,QACF;AAAA,MACF,OAAO;AACL,YAAI,KAAK,mEAAmE;AAAA,MAC9E;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AAGd,QAAI,CAAC,UAAU;AACb,UAAI,KAAK,wBAAwB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC,EAAE;AACzF,UAAI,KAAK,mDAAmD;AAAA,IAC9D;AAAA,EACF;AAMA,QAAM,SAAS,MAAM,gBAAgB,EAAE,SAAS,SAAS,QAAQ,QAAQ,CAAC;AAC1E,MAAI,CAAC,UAAU;AACb,sBAAkB,MAAM;AAAA,EAC1B;AAIA,MAAI,sBAAsB;AAC1B,MAAI,CAAC,QAAQ,OAAO,CAAC,UAAU;AAC7B,UAAM,gBAAgB,QAAQ,IAAI,OAAO,KAAK;AAC9C,UAAM,iBAAiB,MAAM,QAAQ;AAAA,MACnC,SAAS,gCAAgC,aAAa;AAAA,MACtD,SAAS;AAAA,IACX,CAAC;AACD,QAAI,gBAAgB;AAClB,UAAI;AACF,cAAM,EAAE,SAAS,SAAS,IAAI,MAAM,OAAO,UAAU;AACrD,cAAM,aAAa,SAAS,MAAM;AAClC,mBAAW,mBAAmB;AAC9B,8BAAsB;AACtB,YAAI,QAAQ,8BAA8B;AAC1C,YAAI,KAAK,6DAA6D;AAAA,MACxE,SAAS,OAAO;AACd,YAAI;AAAA,UACF,iCAAiC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,QACzF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,CAAC,UAAU;AACb,UAAM,EAAE;AACR,UAAM,MAAM,KAAK,iBAAiB,CAAC;AAKnC,eAAW,QAAQ,kBAAkB,MAAM,GAAG;AAC5C,YAAM,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE;AAAA,IACxC;AACA,UAAM,KAAK,MAAM,IAAI,OAAO,CAAC,sDAAsD;AACnF,UAAM,EAAE;AAAA,EACV;AAEA,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,SAAS,QAAQ;AAAA,IACjB,eAAe;AAAA,IACf,QAAQ;AAAA,MACN,IAAI;AAAA,MACJ,GAAI,kBAAkB,SAAY,CAAC,IAAI,EAAE,WAAW,cAAc;AAAA,MAClE,GAAI,iBAAiB,SAAY,CAAC,IAAI,EAAE,QAAQ,aAAa;AAAA,MAC7D,GAAI,kBAAkB,SAAY,CAAC,IAAI,EAAE,SAAS,cAAc;AAAA,IAClE;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAiBA,eAAe,gBAAgB,MAGe;AAC5C,QAAM,EAAE,YAAY,IAAI,MAAM,OAAO,sBAAoB;AACzD,QAAM,EAAE,OAAO,IAAI,MAAM,YAAY;AAAA,IACnC,aAAa;AAAA,IACb,SAAS,EAAE,GAAG,KAAK,SAAS,SAAS,KAAK,QAAQ;AAAA,EACpD,CAAC;AAKD,QAAM,SAAmE;AAAA,IACvE,CAAC,gBAAgB,YAAY,OAAO,QAAQ,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AAAA,IAC9D,CAAC,eAAe,YAAY,OAAO,OAAO,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AAAA,IAC5D,CAAC,iBAAiB,YAAY,OAAO,SAAS,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AAAA,EAClE;AAEA,QAAM,SAA2C,CAAC;AAClD,aAAW,CAAC,OAAO,IAAI,KAAK,QAAQ;AAClC,WAAO,KAAK,IAAI,MAAM,cAAc,IAAI;AAAA,EAC1C;AACA,SAAO;AACT;AAEA,eAAe,cAAc,MAAyD;AACpF,MAAI;AACF,UAAM,KAAK;AACX,WAAO;AAAA,EACT,SAAS,OAAO;AAKd,QAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAC/C,YAAM,OAAQ,MAA6B;AAC3C,UAAI,SAAS,qBAAsB,QAAO;AAAA,IAC5C;AACA,WAAO;AAAA,EACT;AACF;AAEA,SAAS,kBAAkB,QAAgD;AACzE,QAAM,UAAU,OAAO,QAAQ,MAAM;AACrC,MAAI,QAAQ,WAAW,EAAG;AAC1B,QAAM,QAAQ,QAAQ,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,MAAM,IAAI;AACjD,MAAI,OAAO;AACT,QAAI,QAAQ,4DAAuD;AACnE;AAAA,EACF;AACA,MAAI,KAAK,iDAAiD;AAC1D,aAAW,CAAC,OAAO,MAAM,KAAK,SAAS;AACrC,UAAM,QACJ,WAAW,OACP,MAAM,QAAQ,SAAS,IACvB,WAAW,WACT,MAAM,KAAK,aAAa,IACxB,MAAM,IAAI,cAAc;AAChC,UAAM,KAAK,MAAM,IAAI,MAAM,OAAO,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE;AAAA,EACnD;AACA,QAAM,SAAS,QAAQ,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,MAAM,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;AACvE,MAAI,OAAO,SAAS,GAAG;AACrB,QAAI;AAAA,MACF,oEAA+D,gBAAgB,iBAAiB,OAAO,KAAK,IAAI,CAAC;AAAA,IACnH;AAAA,EACF;AACF;AAWA,SAAS,kBAAkB,QAA6D;AACtF,QAAM,QAAkB,CAAC;AACzB,MAAI,OAAO,cAAc,MAAM,MAAM;AACnC,UAAM,KAAK,mCAAmC;AAAA,EAChD;AACA,MAAI,OAAO,aAAa,MAAM,MAAM;AAClC,UAAM,KAAK,qDAAqD;AAAA,EAClE;AACA,MAAI,OAAO,eAAe,MAAM,QAAQ,MAAM,SAAS,GAAG;AACxD,UAAM,KAAK,6CAA6C;AAAA,EAC1D;AACA,MAAI,MAAM,WAAW,GAAG;AAKtB,UAAM,KAAK,aAAa;AAAA,EAC1B;AACA,SAAO,MAAM,MAAM,GAAG,CAAC;AACzB;","names":[]}

package/dist/{trace-IZBYTUFO.js → trace-WMO3KDHS.js}

@@ -1,26 +1,26 @@
 #!/usr/bin/env node
 import {
   formatDate
-} from "./chunk-BRK7KJ4O.js";
+} from "./chunk-R4NGUZKN.js";
 import {
   buildClient
-} from "./chunk-QJMF73M5.js";
-import "./chunk-KMBMQIZ7.js";
-import "./chunk-YHCG2SUC.js";
-import "./chunk-BN2CUM42.js";
+} from "./chunk-QALDZHTX.js";
+import "./chunk-N26VGVGB.js";
+import "./chunk-BVFDUI73.js";
+import "./chunk-KAM6KOFD.js";
 import {
   readGlobals
-} from "./chunk-LBIRQHX5.js";
+} from "./chunk-A3IH5HUV.js";
 import {
   print,
   printJson,
   style
-} from "./chunk-VIADBYFY.js";
-import "./chunk-MIXOZU2S.js";
+} from "./chunk-MQUJG224.js";
+import "./chunk-KADB3OKE.js";
 import {
   CliValidationError,
   toCliError
-} from "./chunk-UZNSYATZ.js";
+} from "./chunk-X2VM6VKM.js";
 
 // src/commands/trace.ts
 import { Command } from "commander";
@@ -100,4 +100,4 @@ function formatSummary(event) {
 export {
   traceCommand
 };
-//# sourceMappingURL=trace-IZBYTUFO.js.map
+//# sourceMappingURL=trace-WMO3KDHS.js.map

package/dist/{trade-IIZSEXEI.js → trade-YBCI6XD2.js}

@@ -6,20 +6,20 @@ import {
   formatDate,
   formatUsdcDecimal,
   shortId
-} from "./chunk-BRK7KJ4O.js";
+} from "./chunk-R4NGUZKN.js";
 import {
   buildClient
-} from "./chunk-QJMF73M5.js";
-import "./chunk-KMBMQIZ7.js";
+} from "./chunk-QALDZHTX.js";
+import "./chunk-N26VGVGB.js";
 import {
   parseOutcomeIndex,
   validateUsdcDecimalShape
-} from "./chunk-YHCG2SUC.js";
-import "./chunk-BN2CUM42.js";
+} from "./chunk-BVFDUI73.js";
+import "./chunk-KAM6KOFD.js";
 import {
   parsePositiveInt,
   readGlobals
-} from "./chunk-LBIRQHX5.js";
+} from "./chunk-A3IH5HUV.js";
 import {
   isQuiet,
   log,
@@ -27,12 +27,12 @@ import {
   printJson,
   style,
   writeNdjson
-} from "./chunk-VIADBYFY.js";
-import "./chunk-MIXOZU2S.js";
+} from "./chunk-MQUJG224.js";
+import "./chunk-KADB3OKE.js";
 import {
   CliValidationError,
   toCliError
-} from "./chunk-UZNSYATZ.js";
+} from "./chunk-X2VM6VKM.js";
 
 // src/commands/trade/index.ts
 import { Command as Command6 } from "commander";
@@ -583,4 +583,4 @@ var tradeCommand = new Command6("trade").description("Place trades and inspect t
 export {
   tradeCommand
 };
-//# sourceMappingURL=trade-IIZSEXEI.js.map
+//# sourceMappingURL=trade-YBCI6XD2.js.map

package/dist/{version-JDK3PEP5.js → version-WB2ACHMU.js}

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 import {
   CLI_VERSION
-} from "./chunk-BN2CUM42.js";
+} from "./chunk-KAM6KOFD.js";
 import {
   readGlobals
-} from "./chunk-LBIRQHX5.js";
+} from "./chunk-A3IH5HUV.js";
 import {
   print,
   printJson,
   style
-} from "./chunk-VIADBYFY.js";
-import "./chunk-MIXOZU2S.js";
-import "./chunk-UZNSYATZ.js";
+} from "./chunk-MQUJG224.js";
+import "./chunk-KADB3OKE.js";
+import "./chunk-X2VM6VKM.js";
 
 // src/commands/version.ts
 import { createRequire } from "module";
@@ -74,7 +74,7 @@ Examples:
   const manifest = buildVersionManifest();
   let updateInfo = null;
   if (options.check) {
-    const { checkLatestVersion } = await import("./version-check-TDCION37.js");
+    const { checkLatestVersion } = await import("./version-check-PRAVPFC6.js");
     updateInfo = await checkLatestVersion(manifest.cli);
   }
   if (globals.json) {
@@ -114,4 +114,4 @@ export {
   buildVersionManifest,
   versionCommand
 };
-//# sourceMappingURL=version-JDK3PEP5.js.map
+//# sourceMappingURL=version-WB2ACHMU.js.map

package/dist/{version-check-TDCION37.js → version-check-PRAVPFC6.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   resolveConfigPathsForOverride
-} from "./chunk-KMBMQIZ7.js";
-import "./chunk-YHCG2SUC.js";
-import "./chunk-UZNSYATZ.js";
+} from "./chunk-N26VGVGB.js";
+import "./chunk-BVFDUI73.js";
+import "./chunk-X2VM6VKM.js";
 
 // src/utils/version-check.ts
 import { existsSync } from "fs";
@@ -135,4 +135,4 @@ export {
   compareVersions,
   isOptedOut
 };
-//# sourceMappingURL=version-check-TDCION37.js.map
+//# sourceMappingURL=version-check-PRAVPFC6.js.map

package/dist/{webhooks-PTVRKICZ.js → webhooks-DVS55O4T.js}

@@ -2,30 +2,30 @@
 import {
   formatDate,
   shortId
-} from "./chunk-BRK7KJ4O.js";
+} from "./chunk-R4NGUZKN.js";
 import {
   buildClient
-} from "./chunk-QJMF73M5.js";
-import "./chunk-KMBMQIZ7.js";
-import "./chunk-YHCG2SUC.js";
-import "./chunk-BN2CUM42.js";
+} from "./chunk-QALDZHTX.js";
+import "./chunk-N26VGVGB.js";
+import "./chunk-BVFDUI73.js";
+import "./chunk-KAM6KOFD.js";
 import {
   parsePositiveInt,
   readGlobals
-} from "./chunk-LBIRQHX5.js";
+} from "./chunk-A3IH5HUV.js";
 import {
   log,
   print,
   printJson,
   style,
   writeNdjson
-} from "./chunk-VIADBYFY.js";
-import "./chunk-MIXOZU2S.js";
+} from "./chunk-MQUJG224.js";
+import "./chunk-KADB3OKE.js";
 import {
   CliError,
   CliValidationError,
   toCliError
-} from "./chunk-UZNSYATZ.js";
+} from "./chunk-X2VM6VKM.js";
 
 // src/commands/webhooks/index.ts
 import { Command as Command6 } from "commander";
@@ -677,4 +677,4 @@ var webhooksCommand = new Command6("webhooks").description("Manage webhook deliv
 export {
   webhooksCommand
 };
-//# sourceMappingURL=webhooks-PTVRKICZ.js.map
+//# sourceMappingURL=webhooks-DVS55O4T.js.map

package/dist/{with-retry-4FIZG3A7.js → with-retry-2MD2CNK2.js}

@@ -2,16 +2,16 @@
 import {
   parsePositiveInt,
   readGlobals
-} from "./chunk-LBIRQHX5.js";
+} from "./chunk-A3IH5HUV.js";
 import {
   log,
   style
-} from "./chunk-VIADBYFY.js";
-import "./chunk-MIXOZU2S.js";
+} from "./chunk-MQUJG224.js";
+import "./chunk-KADB3OKE.js";
 import {
   CliError,
   toCliError
-} from "./chunk-UZNSYATZ.js";
+} from "./chunk-X2VM6VKM.js";
 
 // src/commands/with-retry.ts
 import { spawn } from "child_process";
@@ -220,4 +220,4 @@ export {
   parseErrorEnvelope,
   withRetryCommand
 };
-//# sourceMappingURL=with-retry-4FIZG3A7.js.map
+//# sourceMappingURL=with-retry-2MD2CNK2.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kashdao/cli",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Official non-custodial command-line interface for the Kash prediction-market protocol. Wraps @kashdao/sdk (Kash-orchestrated mode) and @kashdao/protocol-sdk (self-orchestrated mode).",
   "private": false,
   "type": "module",
@@ -35,8 +35,8 @@
     "viem": "^2.45.0",
     "zod": "^3.25.76",
     "zod-to-json-schema": "^3.25.0",
-    "@kashdao/sdk": "0.1.0",
-    "@kashdao/protocol-sdk": "0.1.0"
+    "@kashdao/protocol-sdk": "0.1.1",
+    "@kashdao/sdk": "0.1.1"
   },
   "devDependencies": {
     "@types/node": "^25.0.3",

package/dist/auth-GUJCVKTD.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/commands/auth/index.ts","../src/commands/auth/logout.ts","../src/commands/auth/set-key.ts","../src/commands/auth/status.ts"],"sourcesContent":["/**\n * `kash auth` — credential management.\n *\n * Users issue a key from the Kash dashboard and run `auth set-key`\n * (or set `KASH_API_KEY` in their environment). A future browser-based\n * login flow may be added; for now, key issuance lives on the dashboard.\n */\n\nimport { Command } from 'commander';\n\nimport { logoutCommand } from './logout.js';\nimport { setKeyCommand } from './set-key.js';\nimport { statusCommand } from './status.js';\n\nexport const authCommand = new Command('auth')\n  .description('Manage local API credentials.')\n  .addCommand(setKeyCommand)\n  .addCommand(statusCommand)\n  .addCommand(logoutCommand);\n","/**\n * `kash auth logout` — remove the stored API key.\n *\n * Only clears the `apiKey` field; the rest of the config (baseUrl,\n * chain id) survives so logging back in doesn't lose unrelated\n * preferences. If `KASH_API_KEY` is set in the environment, we warn\n * the user that env vars take precedence so the \"logout\" is partial.\n */\n\nimport { Command } from 'commander';\n\nimport { clearConfigField, readConfig } from '../../utils/config-store.js';\nimport { readGlobals } from '../../utils/global-options.js';\nimport { log, printJson } from '../../utils/output.js';\n\nexport const logoutCommand = new Command('logout')\n  .description('Remove the stored API key from ~/.kash/config.json.')\n  .addHelpText(\n    'after',\n    `\nExamples:\n  $ kash auth logout\n  $ kash auth logout --profile staging\n`\n  )\n  .action(async (_opts, cmd: Command) => {\n    const globals = readGlobals(cmd);\n    const scope = {\n      ...(globals.profile === undefined ? {} : { profile: globals.profile }),\n      ...(globals.configPath === undefined ? {} : { configPath: globals.configPath }),\n    };\n    const before = await readConfig(scope);\n    await clearConfigField('apiKey', scope);\n\n    const envWillOverride = Boolean(process.env['KASH_API_KEY']);\n\n    if (globals.json) {\n      printJson({\n        ok: true,\n        profile: before.profile,\n        cleared: Boolean(before.apiKey && before.sources.apiKey === 'file'),\n        envOverride: envWillOverride,\n      });\n      return;\n    }\n\n    if (before.apiKey === undefined) {\n      log.info(`No API key was stored for profile \"${before.profile}\".`);\n    } else {\n      log.success(`API key cleared from profile \"${before.profile}\".`);\n    }\n    if (envWillOverride) {\n      log.warn('KASH_API_KEY is still set in your environment. Unset it to fully log out.');\n    }\n  });\n","/**\n * `kash auth set-key [key]` — store an API key in `~/.kash/config.json`.\n *\n * Three input paths, each leaves no trace of the key in shell history:\n *\n *   1. Positional `<key>` — convenient for one-off use, but shows up\n *      in `~/.bash_history`. Kept for backward compat.\n *   2. `--from-stdin` — pipe a key from a secret-store (`pass kash`,\n *      `1password read`, `aws secretsmanager`, …). The key is\n *      `.trim()`-ed so trailing newlines from the source are ignored.\n *   3. Interactive prompt (no positional, no flag, TTY available) —\n *      reads from stderr-bound readline so the prompt doesn't taint\n *      stdout pipes. Single newline of input.\n *\n * Validates the prefix client-side (the SDK's config schema enforces\n * the same shape, but failing here gives a clearer error than the\n * generic config error chain). The persisted file is `0600`.\n */\n\nimport { Command } from 'commander';\n\nimport { CliValidationError, toCliError } from '../../errors.js';\nimport { setCurrentProfile, updateConfig } from '../../utils/config-store.js';\nimport { redact } from '../../utils/formatting.js';\nimport { readGlobals } from '../../utils/global-options.js';\nimport { log, printJson } from '../../utils/output.js';\n\ntype SetKeyOptions = {\n  fromStdin?: boolean;\n  activate?: boolean;\n};\n\nexport const setKeyCommand = new Command('set-key')\n  .description('Store an API key in ~/.kash/config.json (mode 0600).')\n  .argument('[key]', 'API key starting with \"kash_\" (omit to read from stdin or prompt)')\n  .option('--from-stdin', 'read the key from stdin (preferred for secret-store integration)')\n  .option(\n    '--activate',\n    \"also switch the active profile to the one being written (default: leave the active profile unchanged — `kash auth set-key --profile staging` updates 'staging' but doesn't make it active; pass --activate or run `kash config use staging` separately)\"\n  )\n  .addHelpText(\n    'after',\n    `\nExamples:\n  # Interactive prompt (no shell history footprint).\n  $ kash auth set-key\n\n  # Pipe from a secret store.\n  $ pass show kash/api-key | kash auth set-key --from-stdin\n  $ op read \"op://Private/kash/api-key\" | kash auth set-key --from-stdin\n\n  # Positional (convenient but shows up in ~/.bash_history).\n  $ kash auth set-key kash_live_abc...\n  $ kash auth set-key kash_test_abc... --profile staging\n`\n  )\n  .action(async (positional: string | undefined, options: SetKeyOptions, cmd: Command) => {\n    const globals = readGlobals(cmd);\n    const key = await resolveKey(positional, options);\n\n    if (!key.startsWith('kash_')) {\n      throw new CliValidationError(\n        'API keys must start with \"kash_\".',\n        'Request a `kash_test_*` staging key by emailing `engineering@kash.bot` with your intended use case. Self-service issuance and `kash_live_*` keys land with the production launch.'\n      );\n    }\n    let result;\n    try {\n      result = await updateConfig(\n        { apiKey: key },\n        {\n          ...(globals.profile === undefined ? {} : { profile: globals.profile }),\n          ...(globals.configPath === undefined ? {} : { configPath: globals.configPath }),\n        }\n      );\n      // `--activate` flips the file's `currentProfile` so the next\n      // command picks up this profile without needing\n      // `kash config use <name>`. Mirrors the all-in-one wizard\n      // behaviour of `kash setup`.\n      if (options.activate === true) {\n        await setCurrentProfile(\n          result.profile,\n          globals.configPath === undefined ? undefined : { configPath: globals.configPath }\n        );\n      }\n    } catch (cause) {\n      throw toCliError(cause);\n    }\n\n    if (globals.json) {\n      // Surface the actually-written profile (resolved from --profile,\n      // KASH_PROFILE, file's currentProfile, or \"default\") so the JSON\n      // contract reports truth, not the unresolved flag value.\n      printJson({\n        ok: true,\n        apiKey: redact(key),\n        profile: result.profile,\n        // Whether this run also flipped the file's currentProfile.\n        // Agents driving multi-profile workflows can chain off this\n        // to know if a follow-up `kash config use` is needed.\n        activated: options.activate === true,\n      });\n      return;\n    }\n    log.success(`API key saved to profile \"${result.profile}\" (${redact(key)}).`);\n    log.detail('Location', globals.configPath ?? '~/.kash/config.json (mode 0600)');\n    if (options.activate === true) {\n      log.success(`Active profile is now \"${result.profile}\".`);\n    }\n  });\n\n/**\n * Resolve the API key from the three supported sources. Order:\n *   1. Positional argument (legacy, less secure — still works).\n *   2. `--from-stdin` (read until EOF, trim, single key per stream).\n *   3. Interactive prompt (TTY only).\n *\n * **Mutual-exclusion guard.** Pre-fix, `kash auth set-key <key>\n * --from-stdin` silently used the positional and dropped the piped\n * secret. That's a real footgun: the operator sees \"API key saved\"\n * for the WRONG key (the one on argv, possibly a stale value from\n * shell history). We refuse to guess and require the operator to\n * pick one source.\n */\nasync function resolveKey(positional: string | undefined, options: SetKeyOptions): Promise<string> {\n  if (positional !== undefined && positional !== '' && options.fromStdin === true) {\n    throw new CliValidationError(\n      'Pass either the positional <key> OR --from-stdin, not both.',\n      'The positional key would silently win and the piped value would be dropped.'\n    );\n  }\n  if (positional !== undefined && positional !== '') {\n    return positional;\n  }\n  if (options.fromStdin === true) {\n    return readFromStdin();\n  }\n  if (process.stdin.isTTY) {\n    return promptInteractively();\n  }\n  // No positional, no --from-stdin, no TTY — caller's intent is\n  // ambiguous. Surface a clear validation error rather than reading\n  // stdin silently (which would surprise CI runs that pipe other\n  // data into the command).\n  throw new CliValidationError(\n    'No API key provided.',\n    'Pass the key positionally, use --from-stdin to read it from a pipe, or run interactively for a prompt.'\n  );\n}\n\nasync function readFromStdin(): Promise<string> {\n  // Use the shared BOM-aware reader. Notepad-saved files (and VSCode\n  // with `files.encoding=utf8bom`) prepend U+FEFF; without the strip,\n  // the leading three bytes leak into the API key and fail the\n  // `kash_` prefix check.\n  const { readStdinTrimmed } = await import('../../utils/stdin.js');\n  return readStdinTrimmed();\n}\n\nasync function promptInteractively(): Promise<string> {\n  // Use the masked-input prompt so the key never echoes to the\n  // terminal (defends against shoulder-surfing, screen recordings,\n  // and scroll-back capture). The previous `readline.question` path\n  // echoed every keystroke which defeated the \"no shell history\"\n  // promise of this command. Lazy-load `@inquirer/prompts` to keep\n  // it off the cold path for non-interactive invocations.\n  const { password } = await import('@inquirer/prompts');\n  const answer = await password({\n    message: 'Paste your API key (kash_live_… or kash_test_…):',\n    mask: '*',\n  });\n  return answer.trim();\n}\n","/**\n * `kash auth status` — report the locally-stored credentials.\n *\n * Does NOT call the API. There is no `whoami` endpoint on the public\n * API today (the only auth-flavoured route is webhook-secret rotation,\n * which is a write). Reporting purely-local state keeps the command\n * cheap and side-effect-free; the moment the user issues a real call\n * (e.g. `kash markets list`) the SDK raises `KashAuthenticationError`\n * if the key is invalid.\n */\n\nimport { Command } from 'commander';\n\nimport { readConfig } from '../../utils/config-store.js';\nimport { redact } from '../../utils/formatting.js';\nimport { readGlobals } from '../../utils/global-options.js';\nimport { log, print, printJson, style } from '../../utils/output.js';\n\nexport const statusCommand = new Command('status')\n  .description('Show locally-configured credentials. Does not call the API.')\n  .addHelpText(\n    'after',\n    `\nExamples:\n  $ kash auth status\n  $ kash auth status --profile prod\n  $ kash auth status --json --quiet | jq -r '.apiKey'\n`\n  )\n  .action(async (_opts, cmd: Command) => {\n    const globals = readGlobals(cmd);\n    const config = await readConfig({\n      ...(globals.profile === undefined ? {} : { profile: globals.profile }),\n      ...(globals.configPath === undefined ? {} : { configPath: globals.configPath }),\n    });\n\n    if (globals.json) {\n      printJson({\n        // Pure local-state field. `true` means \"an API key is in\n        // scope for this profile\" (file or env), NOT \"this key is\n        // accepted by the server\" — `kash auth status` is offline by\n        // design. Use `kash health --json --quiet | jq .ok` for a\n        // server-side check.\n        configured: Boolean(config.apiKey),\n        // Backward-compat alias. Same value as `configured`. Kept\n        // for downstream scripts that pin to the old field name —\n        // will be removed in a major bump after the rename has\n        // burned in.\n        authenticated: Boolean(config.apiKey),\n        apiKey: config.apiKey ? redact(config.apiKey) : null,\n        profile: config.profile,\n        baseUrl: config.baseUrl,\n        defaultChainId: config.defaultChainId,\n        // Direct-mode fields (`kash protocol …` / `kash eoa …`). Always\n        // emitted (`null` when unset) so direct-mode operators can\n        // introspect their own profile via JSON without falling back\n        // to reading `~/.kash/config.json` directly. The signerKeyRef\n        // is the reference shape (`file:<path>` / `env:<NAME>`),\n        // never the raw private key — the CLI never persists keys.\n        rpcUrl: config.rpcUrl ?? null,\n        smartAccount: config.smartAccount ?? null,\n        bundlerUrl: config.bundlerUrl ?? null,\n        bundlerProvider: config.bundlerProvider ?? null,\n        signerKeyRef: config.signerKeyRef ?? null,\n        sources: config.sources,\n      });\n      return;\n    }\n\n    if (!config.apiKey) {\n      log.warn(`No API key configured for profile \"${config.profile}\".`);\n      log.detail(\n        'Hint',\n        \"Run 'kash setup' for the wizard, or 'kash auth set-key' for the bare key. Or set KASH_API_KEY.\"\n      );\n      return;\n    }\n\n    print(`${style.success('✓')} API key configured (profile: ${config.profile})`);\n    print(\n      `  ${style.dim('Note      ')} not verified against the server — run \\`kash health\\` to probe`\n    );\n    print(`  ${style.dim('API key   ')} ${redact(config.apiKey)} (${config.sources.apiKey})`);\n    print(`  ${style.dim('Profile   ')} ${config.profile} (${config.sources.profile})`);\n    print(`  ${style.dim('Base URL  ')} ${config.baseUrl} (${config.sources.baseUrl})`);\n    print(\n      `  ${style.dim('Chain id  ')} ${String(config.defaultChainId)} (${config.sources.defaultChainId})`\n    );\n  });\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAQA,SAAS,WAAAA,gBAAe;;;ACCxB,SAAS,eAAe;AAMjB,IAAM,gBAAgB,IAAI,QAAQ,QAAQ,EAC9C,YAAY,qDAAqD,EACjE;AAAA,EACC;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAKF,EACC,OAAO,OAAO,OAAO,QAAiB;AACrC,QAAM,UAAU,YAAY,GAAG;AAC/B,QAAM,QAAQ;AAAA,IACZ,GAAI,QAAQ,YAAY,SAAY,CAAC,IAAI,EAAE,SAAS,QAAQ,QAAQ;AAAA,IACpE,GAAI,QAAQ,eAAe,SAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;AAAA,EAC/E;AACA,QAAM,SAAS,MAAM,WAAW,KAAK;AACrC,QAAM,iBAAiB,UAAU,KAAK;AAEtC,QAAM,kBAAkB,QAAQ,QAAQ,IAAI,cAAc,CAAC;AAE3D,MAAI,QAAQ,MAAM;AAChB,cAAU;AAAA,MACR,IAAI;AAAA,MACJ,SAAS,OAAO;AAAA,MAChB,SAAS,QAAQ,OAAO,UAAU,OAAO,QAAQ,WAAW,MAAM;AAAA,MAClE,aAAa;AAAA,IACf,CAAC;AACD;AAAA,EACF;AAEA,MAAI,OAAO,WAAW,QAAW;AAC/B,QAAI,KAAK,sCAAsC,OAAO,OAAO,IAAI;AAAA,EACnE,OAAO;AACL,QAAI,QAAQ,iCAAiC,OAAO,OAAO,IAAI;AAAA,EACjE;AACA,MAAI,iBAAiB;AACnB,QAAI,KAAK,2EAA2E;AAAA,EACtF;AACF,CAAC;;;ACnCH,SAAS,WAAAC,gBAAe;AAajB,IAAM,gBAAgB,IAAIC,SAAQ,SAAS,EAC/C,YAAY,sDAAsD,EAClE,SAAS,SAAS,mEAAmE,EACrF,OAAO,gBAAgB,kEAAkE,EACzF;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAaF,EACC,OAAO,OAAO,YAAgC,SAAwB,QAAiB;AACtF,QAAM,UAAU,YAAY,GAAG;AAC/B,QAAM,MAAM,MAAM,WAAW,YAAY,OAAO;AAEhD,MAAI,CAAC,IAAI,WAAW,OAAO,GAAG;AAC5B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI;AACJ,MAAI;AACF,aAAS,MAAM;AAAA,MACb,EAAE,QAAQ,IAAI;AAAA,MACd;AAAA,QACE,GAAI,QAAQ,YAAY,SAAY,CAAC,IAAI,EAAE,SAAS,QAAQ,QAAQ;AAAA,QACpE,GAAI,QAAQ,eAAe,SAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;AAAA,MAC/E;AAAA,IACF;AAKA,QAAI,QAAQ,aAAa,MAAM;AAC7B,YAAM;AAAA,QACJ,OAAO;AAAA,QACP,QAAQ,eAAe,SAAY,SAAY,EAAE,YAAY,QAAQ,WAAW;AAAA,MAClF;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,WAAW,KAAK;AAAA,EACxB;AAEA,MAAI,QAAQ,MAAM;AAIhB,cAAU;AAAA,MACR,IAAI;AAAA,MACJ,QAAQ,OAAO,GAAG;AAAA,MAClB,SAAS,OAAO;AAAA;AAAA;AAAA;AAAA,MAIhB,WAAW,QAAQ,aAAa;AAAA,IAClC,CAAC;AACD;AAAA,EACF;AACA,MAAI,QAAQ,6BAA6B,OAAO,OAAO,MAAM,OAAO,GAAG,CAAC,IAAI;AAC5E,MAAI,OAAO,YAAY,QAAQ,cAAc,iCAAiC;AAC9E,MAAI,QAAQ,aAAa,MAAM;AAC7B,QAAI,QAAQ,0BAA0B,OAAO,OAAO,IAAI;AAAA,EAC1D;AACF,CAAC;AAeH,eAAe,WAAW,YAAgC,SAAyC;AACjG,MAAI,eAAe,UAAa,eAAe,MAAM,QAAQ,cAAc,MAAM;AAC/E,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,eAAe,UAAa,eAAe,IAAI;AACjD,WAAO;AAAA,EACT;AACA,MAAI,QAAQ,cAAc,MAAM;AAC9B,WAAO,cAAc;AAAA,EACvB;AACA,MAAI,QAAQ,MAAM,OAAO;AACvB,WAAO,oBAAoB;AAAA,EAC7B;AAKA,QAAM,IAAI;AAAA,IACR;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAe,gBAAiC;AAK9C,QAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,qBAAsB;AAChE,SAAO,iBAAiB;AAC1B;AAEA,eAAe,sBAAuC;AAOpD,QAAM,EAAE,SAAS,IAAI,MAAM,OAAO,mBAAmB;AACrD,QAAM,SAAS,MAAM,SAAS;AAAA,IAC5B,SAAS;AAAA,IACT,MAAM;AAAA,EACR,CAAC;AACD,SAAO,OAAO,KAAK;AACrB;;;ACjKA,SAAS,WAAAC,gBAAe;AAOjB,IAAM,gBAAgB,IAAIC,SAAQ,QAAQ,EAC9C,YAAY,6DAA6D,EACzE;AAAA,EACC;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAMF,EACC,OAAO,OAAO,OAAO,QAAiB;AACrC,QAAM,UAAU,YAAY,GAAG;AAC/B,QAAM,SAAS,MAAM,WAAW;AAAA,IAC9B,GAAI,QAAQ,YAAY,SAAY,CAAC,IAAI,EAAE,SAAS,QAAQ,QAAQ;AAAA,IACpE,GAAI,QAAQ,eAAe,SAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;AAAA,EAC/E,CAAC;AAED,MAAI,QAAQ,MAAM;AAChB,cAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMR,YAAY,QAAQ,OAAO,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA,MAKjC,eAAe,QAAQ,OAAO,MAAM;AAAA,MACpC,QAAQ,OAAO,SAAS,OAAO,OAAO,MAAM,IAAI;AAAA,MAChD,SAAS,OAAO;AAAA,MAChB,SAAS,OAAO;AAAA,MAChB,gBAAgB,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAOvB,QAAQ,OAAO,UAAU;AAAA,MACzB,cAAc,OAAO,gBAAgB;AAAA,MACrC,YAAY,OAAO,cAAc;AAAA,MACjC,iBAAiB,OAAO,mBAAmB;AAAA,MAC3C,cAAc,OAAO,gBAAgB;AAAA,MACrC,SAAS,OAAO;AAAA,IAClB,CAAC;AACD;AAAA,EACF;AAEA,MAAI,CAAC,OAAO,QAAQ;AAClB,QAAI,KAAK,sCAAsC,OAAO,OAAO,IAAI;AACjE,QAAI;AAAA,MACF;AAAA,MACA;AAAA,IACF;AACA;AAAA,EACF;AAEA,QAAM,GAAG,MAAM,QAAQ,QAAG,CAAC,iCAAiC,OAAO,OAAO,GAAG;AAC7E;AAAA,IACE,KAAK,MAAM,IAAI,YAAY,CAAC;AAAA,EAC9B;AACA,QAAM,KAAK,MAAM,IAAI,YAAY,CAAC,IAAI,OAAO,OAAO,MAAM,CAAC,KAAK,OAAO,QAAQ,MAAM,GAAG;AACxF,QAAM,KAAK,MAAM,IAAI,YAAY,CAAC,IAAI,OAAO,OAAO,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClF,QAAM,KAAK,MAAM,IAAI,YAAY,CAAC,IAAI,OAAO,OAAO,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClF;AAAA,IACE,KAAK,MAAM,IAAI,YAAY,CAAC,IAAI,OAAO,OAAO,cAAc,CAAC,KAAK,OAAO,QAAQ,cAAc;AAAA,EACjG;AACF,CAAC;;;AH1EI,IAAM,cAAc,IAAIC,SAAQ,MAAM,EAC1C,YAAY,+BAA+B,EAC3C,WAAW,aAAa,EACxB,WAAW,aAAa,EACxB,WAAW,aAAa;","names":["Command","Command","Command","Command","Command","Command"]}

package/dist/chunk-BN2CUM42.js

@@ -1,9 +0,0 @@
-#!/usr/bin/env node
-
-// src/version.ts
-var CLI_VERSION = "0.1.0";
-
-export {
-  CLI_VERSION
-};
-//# sourceMappingURL=chunk-BN2CUM42.js.map