@layr-labs/ecloud-cli 0.0.1-dev-rfc.1 → 0.0.1-dev.1

package/README.md

@@ -5,6 +5,7 @@ A TypeScript SDK and CLI for deploying and managing applications on eigenx TEE (
 ## Overview
 
 ECloud SDK enables developers to:
+
 - Deploy containerized applications to ecloud TEE
 - Manage application lifecycle (start, stop, terminate)
 - Build and push Docker images with encryption
@@ -20,6 +21,7 @@ This monorepo contains two main packages:
 The core TypeScript SDK for programmatic access to ecloud services.
 
 **Features:**
+
 - Type-safe client for ecloud operations
 - Docker image building and pushing
 - KMS encryption for secure deployments
@@ -31,6 +33,7 @@ The core TypeScript SDK for programmatic access to ecloud services.
 Command-line interface built with oclif for deploying and managing applications.
 
 **Features:**
+
 - Deploy applications from Docker images
 - Manage application lifecycle
 - Environment-aware configuration
@@ -40,7 +43,7 @@ Command-line interface built with oclif for deploying and managing applications.
 
 ### Prerequisites
 
-- Node.js 18+ 
+- Node.js 18+
 - pnpm (recommended) or npm
 - Docker (for building and pushing images)
 
@@ -71,11 +74,13 @@ npx ecloud app deploy \
 ```
 
 **Common Flags:**
+
 - `--private-key`: Your Ethereum private key (or set `ECLOUD_PRIVATE_KEY` env var)
 - `--environment`: Target environment (`sepolia` or `mainnet-alpha`)
 - `--rpc-url`: Custom RPC URL (optional, or set `ECLOUD_RPC_URL` env var)
 
 **Example:**
+
 ```bash
 npx ecloud app deploy \
   --private-key 0x... \
@@ -192,4 +197,3 @@ The deployment process involves several steps:
 ## Support
 
 For issues and questions, please open an issue on GitHub.
-

package/VERSION

@@ -0,0 +1,2 @@
+version=0.0.1-dev.1
+commit=be757436b79faff7959b8375dbb051cc47cb0895

package/dist/commands/auth/generate.js

@@ -3,13 +3,121 @@
 // src/commands/auth/generate.ts
 import { Command, Flags } from "@oclif/core";
 import { confirm } from "@inquirer/prompts";
-import {
-  generateNewPrivateKey,
-  storePrivateKey,
-  keyExists,
-  showPrivateKey,
-  displayWarning
-} from "@layr-labs/ecloud-sdk";
+import { generateNewPrivateKey, storePrivateKey, keyExists } from "@layr-labs/ecloud-sdk";
+
+// src/utils/security.ts
+import { spawn, execSync } from "child_process";
+import { platform } from "os";
+import { select, password } from "@inquirer/prompts";
+async function showPrivateKey(content) {
+  const pager = detectPager();
+  if (pager) {
+    try {
+      await runPager(pager, content);
+      return true;
+    } catch (err) {
+      console.error(`Failed to run pager: ${err}`);
+    }
+  }
+  console.log("\nNo pager (less/more) found on PATH.");
+  console.log("For security, avoid printing private keys to the terminal.");
+  console.log("");
+  const choice = await select({
+    message: "Choose an option:",
+    choices: [
+      { name: "Abort (recommended)", value: "abort" },
+      { name: "Print and clear screen", value: "print" }
+    ]
+  });
+  if (choice === "print") {
+    console.log(content);
+    console.log("");
+    console.log("Press Enter after you have securely saved the key.");
+    console.log("The screen will be cleared...");
+    await password({
+      message: "",
+      mask: ""
+    });
+    clearTerminal();
+    return true;
+  }
+  return false;
+}
+function detectPager() {
+  if (process.env.PAGER) {
+    const pagerEnv = process.env.PAGER.trim();
+    if (/^[a-zA-Z0-9_-]+$/.test(pagerEnv)) {
+      return pagerEnv;
+    }
+  }
+  const pagers = ["less", "more"];
+  for (const pagerCmd of pagers) {
+    if (commandExists(pagerCmd)) {
+      return pagerCmd;
+    }
+  }
+  return null;
+}
+function runPager(pager, content) {
+  return new Promise((resolve, reject) => {
+    const child = spawn(pager, [], {
+      stdio: ["pipe", "inherit", "inherit"]
+    });
+    child.on("error", reject);
+    child.on("exit", (code) => {
+      if (code === 0) {
+        resolve();
+      } else {
+        reject(new Error(`Pager exited with code ${code}`));
+      }
+    });
+    try {
+      const written = child.stdin.write(content);
+      if (!written) {
+        child.stdin.once("drain", () => {
+          try {
+            child.stdin.end();
+          } catch (err) {
+            reject(err);
+          }
+        });
+      } else {
+        child.stdin.end();
+      }
+    } catch (err) {
+      reject(err);
+    }
+  });
+}
+function commandExists(command) {
+  try {
+    const cmd = platform() === "win32" ? `where ${command}` : `which ${command}`;
+    execSync(cmd, { stdio: "ignore" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function clearTerminal() {
+  if (platform() === "win32") {
+    process.stdout.write("\x1Bc");
+  } else {
+    process.stdout.write("\x1B[2J\x1B[3J\x1B[H");
+  }
+}
+function displayWarning(lines) {
+  const width = lines.length > 0 ? Math.max(...lines.map((l) => l.length)) + 4 : 4;
+  const border = "\u26A0".repeat(width);
+  console.log("");
+  console.log(border);
+  for (const line of lines) {
+    console.log(`\u26A0  ${line}`);
+  }
+  console.log(border);
+  console.log("");
+}
+
+// src/commands/auth/generate.ts
 var AuthGenerate = class _AuthGenerate extends Command {
   static description = "Generate a new private key";
   static aliases = ["auth:gen", "auth:new"];
@@ -83,9 +191,7 @@ Press 'q' to exit and continue...
         this.log(`
 \u2713 Private key stored in OS keyring`);
         this.log(`\u2713 Address: ${address}`);
-        this.log(
-          "\nYou can now use ecloud commands without --private-key flag."
-        );
+        this.log("\nYou can now use ecloud commands without --private-key flag.");
       } catch (err) {
         this.error(`Failed to store key: ${err.message}`);
       }

package/dist/commands/auth/generate.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/commands/auth/generate.ts"],"sourcesContent":["/**\n * Auth Generate Command\n *\n * Generate a new private key and optionally store it in OS keyring\n */\n\nimport { Command, Flags } from \"@oclif/core\";\nimport { confirm } from \"@inquirer/prompts\";\nimport {\n  generateNewPrivateKey,\n  storePrivateKey,\n  keyExists,\n  showPrivateKey,\n  displayWarning,\n} from \"@layr-labs/ecloud-sdk\";\n\nexport default class AuthGenerate extends Command {\n  static description = \"Generate a new private key\";\n\n  static aliases = [\"auth:gen\", \"auth:new\"];\n\n  static examples = [\n    \"<%= config.bin %> <%= command.id %>\",\n    \"<%= config.bin %> <%= command.id %> --store\",\n  ];\n\n  static flags = {\n    store: Flags.boolean({\n      description: \"Automatically store in OS keyring\",\n      default: false,\n    }),\n  };\n\n  async run(): Promise<void> {\n    const { flags } = await this.parse(AuthGenerate);\n\n    // Generate new key\n    this.log(\"Generating new private key...\\n\");\n    const { privateKey, address } = generateNewPrivateKey();\n\n    // Display key securely\n    const content = `\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\nA new private key was generated for you.\n\nIMPORTANT: You MUST backup this key now.\n           It will never be shown again.\n\nAddress:     ${address}\nPrivate key: ${privateKey}\n\n⚠️  SECURITY WARNING:\n   • Anyone with this key can control your account\n   • Never share it or commit it to version control\n   • Store it in a secure password manager\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\nPress 'q' to exit and continue...\n`;\n\n    const displayed = await showPrivateKey(content);\n\n    if (!displayed) {\n      this.log(\"Key generation cancelled.\");\n      return;\n    }\n\n    // Ask about storing\n    let shouldStore = flags.store;\n\n    if (!shouldStore && displayed) {\n      shouldStore = await confirm({\n        message: \"Store this key in your OS keyring?\",\n        default: true,\n      });\n    }\n\n    if (shouldStore) {\n      // Check if key already exists\n      const exists = await keyExists();\n\n      if (exists) {\n        displayWarning([\n          `WARNING: A private key for ecloud already exists!`,\n          \"If you continue, the existing key will be PERMANENTLY REPLACED.\",\n          \"This cannot be undone!\",\n          \"\",\n          \"The previous key will be lost forever if you haven't backed it up.\",\n        ]);\n\n        const confirmReplace = await confirm({\n          message: `Replace existing key for ecloud?`,\n          default: false,\n        });\n\n        if (!confirmReplace) {\n          this.log(\n            \"\\nKey not stored. If you did not save your new key when it was displayed, it is now lost and cannot be recovered.\"\n          );\n          return;\n        }\n      }\n\n      // Store the key\n      try {\n        await storePrivateKey(privateKey);\n        this.log(`\\n✓ Private key stored in OS keyring`);\n        this.log(`✓ Address: ${address}`);\n        this.log(\n          \"\\nYou can now use ecloud commands without --private-key flag.\"\n        );\n      } catch (err: any) {\n        this.error(`Failed to store key: ${err.message}`);\n      }\n    } else {\n      this.log(\"\\nKey not stored in keyring.\");\n      this.log(\"Remember to save the key shown above in a secure location.\");\n    }\n  }\n}\n"],"mappings":";;;AAMA,SAAS,SAAS,aAAa;AAC/B,SAAS,eAAe;AACxB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,IAAqB,eAArB,MAAqB,sBAAqB,QAAQ;AAAA,EAChD,OAAO,cAAc;AAAA,EAErB,OAAO,UAAU,CAAC,YAAY,UAAU;AAAA,EAExC,OAAO,WAAW;AAAA,IAChB;AAAA,IACA;AAAA,EACF;AAAA,EAEA,OAAO,QAAQ;AAAA,IACb,OAAO,MAAM,QAAQ;AAAA,MACnB,aAAa;AAAA,MACb,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,MAAqB;AACzB,UAAM,EAAE,MAAM,IAAI,MAAM,KAAK,MAAM,aAAY;AAG/C,SAAK,IAAI,iCAAiC;AAC1C,UAAM,EAAE,YAAY,QAAQ,IAAI,sBAAsB;AAGtD,UAAM,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,eAOL,OAAO;AAAA,eACP,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWrB,UAAM,YAAY,MAAM,eAAe,OAAO;AAE9C,QAAI,CAAC,WAAW;AACd,WAAK,IAAI,2BAA2B;AACpC;AAAA,IACF;AAGA,QAAI,cAAc,MAAM;AAExB,QAAI,CAAC,eAAe,WAAW;AAC7B,oBAAc,MAAM,QAAQ;AAAA,QAC1B,SAAS;AAAA,QACT,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAEA,QAAI,aAAa;AAEf,YAAM,SAAS,MAAM,UAAU;AAE/B,UAAI,QAAQ;AACV,uBAAe;AAAA,UACb;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAED,cAAM,iBAAiB,MAAM,QAAQ;AAAA,UACnC,SAAS;AAAA,UACT,SAAS;AAAA,QACX,CAAC;AAED,YAAI,CAAC,gBAAgB;AACnB,eAAK;AAAA,YACH;AAAA,UACF;AACA;AAAA,QACF;AAAA,MACF;AAGA,UAAI;AACF,cAAM,gBAAgB,UAAU;AAChC,aAAK,IAAI;AAAA,wCAAsC;AAC/C,aAAK,IAAI,mBAAc,OAAO,EAAE;AAChC,aAAK;AAAA,UACH;AAAA,QACF;AAAA,MACF,SAAS,KAAU;AACjB,aAAK,MAAM,wBAAwB,IAAI,OAAO,EAAE;AAAA,MAClD;AAAA,IACF,OAAO;AACL,WAAK,IAAI,8BAA8B;AACvC,WAAK,IAAI,4DAA4D;AAAA,IACvE;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../src/commands/auth/generate.ts","../../../src/utils/security.ts"],"sourcesContent":["/**\n * Auth Generate Command\n *\n * Generate a new private key and optionally store it in OS keyring\n */\n\nimport { Command, Flags } from \"@oclif/core\";\nimport { confirm } from \"@inquirer/prompts\";\nimport { generateNewPrivateKey, storePrivateKey, keyExists } from \"@layr-labs/ecloud-sdk\";\nimport { showPrivateKey, displayWarning } from \"../../utils/security\";\n\nexport default class AuthGenerate extends Command {\n  static description = \"Generate a new private key\";\n\n  static aliases = [\"auth:gen\", \"auth:new\"];\n\n  static examples = [\n    \"<%= config.bin %> <%= command.id %>\",\n    \"<%= config.bin %> <%= command.id %> --store\",\n  ];\n\n  static flags = {\n    store: Flags.boolean({\n      description: \"Automatically store in OS keyring\",\n      default: false,\n    }),\n  };\n\n  async run(): Promise<void> {\n    const { flags } = await this.parse(AuthGenerate);\n\n    // Generate new key\n    this.log(\"Generating new private key...\\n\");\n    const { privateKey, address } = generateNewPrivateKey();\n\n    // Display key securely\n    const content = `\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\nA new private key was generated for you.\n\nIMPORTANT: You MUST backup this key now.\n           It will never be shown again.\n\nAddress:     ${address}\nPrivate key: ${privateKey}\n\n⚠️  SECURITY WARNING:\n   • Anyone with this key can control your account\n   • Never share it or commit it to version control\n   • Store it in a secure password manager\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\nPress 'q' to exit and continue...\n`;\n\n    const displayed = await showPrivateKey(content);\n\n    if (!displayed) {\n      this.log(\"Key generation cancelled.\");\n      return;\n    }\n\n    // Ask about storing\n    let shouldStore = flags.store;\n\n    if (!shouldStore && displayed) {\n      shouldStore = await confirm({\n        message: \"Store this key in your OS keyring?\",\n        default: true,\n      });\n    }\n\n    if (shouldStore) {\n      // Check if key already exists\n      const exists = await keyExists();\n\n      if (exists) {\n        displayWarning([\n          `WARNING: A private key for ecloud already exists!`,\n          \"If you continue, the existing key will be PERMANENTLY REPLACED.\",\n          \"This cannot be undone!\",\n          \"\",\n          \"The previous key will be lost forever if you haven't backed it up.\",\n        ]);\n\n        const confirmReplace = await confirm({\n          message: `Replace existing key for ecloud?`,\n          default: false,\n        });\n\n        if (!confirmReplace) {\n          this.log(\n            \"\\nKey not stored. If you did not save your new key when it was displayed, it is now lost and cannot be recovered.\",\n          );\n          return;\n        }\n      }\n\n      // Store the key\n      try {\n        await storePrivateKey(privateKey);\n        this.log(`\\n✓ Private key stored in OS keyring`);\n        this.log(`✓ Address: ${address}`);\n        this.log(\"\\nYou can now use ecloud commands without --private-key flag.\");\n      } catch (err: any) {\n        this.error(`Failed to store key: ${err.message}`);\n      }\n    } else {\n      this.log(\"\\nKey not stored in keyring.\");\n      this.log(\"Remember to save the key shown above in a secure location.\");\n    }\n  }\n}\n","/**\n * Security utilities for CLI\n *\n * Functions for securely displaying and handling sensitive content\n * like private keys.\n */\n\nimport { spawn, execSync } from \"child_process\";\nimport { platform } from \"os\";\nimport { select, password } from \"@inquirer/prompts\";\n\n/**\n * Display sensitive content using system pager (less/more)\n * Returns true if content was displayed, false if user aborted\n */\nexport async function showPrivateKey(content: string): Promise<boolean> {\n  // Try to use system pager\n  const pager = detectPager();\n\n  if (pager) {\n    try {\n      await runPager(pager, content);\n      return true;\n    } catch (err) {\n      console.error(`Failed to run pager: ${err}`);\n      // Fall through to fallback\n    }\n  }\n\n  // No pager available - give user a choice\n  console.log(\"\\nNo pager (less/more) found on PATH.\");\n  console.log(\"For security, avoid printing private keys to the terminal.\");\n  console.log(\"\");\n\n  const choice = await select({\n    message: \"Choose an option:\",\n    choices: [\n      { name: \"Abort (recommended)\", value: \"abort\" },\n      { name: \"Print and clear screen\", value: \"print\" },\n    ],\n  });\n\n  if (choice === \"print\") {\n    console.log(content);\n    console.log(\"\");\n    console.log(\"Press Enter after you have securely saved the key.\");\n    console.log(\"The screen will be cleared...\");\n\n    // Wait for Enter\n    await password({\n      message: \"\",\n      mask: \"\",\n    });\n\n    clearTerminal();\n    return true;\n  }\n\n  return false; // User aborted\n}\n\n/**\n * Detect system pager (less or more)\n */\nfunction detectPager(): string | null {\n  // Check PAGER env var first\n  if (process.env.PAGER) {\n    const pagerEnv = process.env.PAGER.trim();\n    // Only allow simple command names without arguments or special characters\n    if (/^[a-zA-Z0-9_-]+$/.test(pagerEnv)) {\n      return pagerEnv;\n    }\n  }\n\n  // Try common pagers\n  const pagers = [\"less\", \"more\"];\n\n  for (const pagerCmd of pagers) {\n    if (commandExists(pagerCmd)) {\n      return pagerCmd;\n    }\n  }\n\n  return null;\n}\n\n/**\n * Run pager with content\n */\nfunction runPager(pager: string, content: string): Promise<void> {\n  return new Promise((resolve, reject) => {\n    const child = spawn(pager, [], {\n      stdio: [\"pipe\", \"inherit\", \"inherit\"],\n    });\n\n    child.on(\"error\", reject);\n    child.on(\"exit\", (code) => {\n      if (code === 0) {\n        resolve();\n      } else {\n        reject(new Error(`Pager exited with code ${code}`));\n      }\n    });\n\n    try {\n      const written = child.stdin!.write(content);\n      if (!written) {\n        child.stdin!.once(\"drain\", () => {\n          try {\n            child.stdin!.end();\n          } catch (err) {\n            reject(err);\n          }\n        });\n      } else {\n        child.stdin!.end();\n      }\n    } catch (err) {\n      reject(err);\n    }\n  });\n}\n\n/**\n * Check if command exists\n */\nfunction commandExists(command: string): boolean {\n  try {\n    const cmd = platform() === \"win32\" ? `where ${command}` : `which ${command}`;\n    execSync(cmd, { stdio: \"ignore\" });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Clear terminal screen\n */\nexport function clearTerminal(): void {\n  if (platform() === \"win32\") {\n    process.stdout.write(\"\\x1Bc\");\n  } else {\n    process.stdout.write(\"\\x1B[2J\\x1B[3J\\x1B[H\");\n  }\n}\n\n/**\n * Get hidden input (password-style)\n */\nexport async function getHiddenInput(message: string): Promise<string> {\n  return await password({\n    message,\n    mask: \"*\",\n  });\n}\n\n/**\n * Display multi-line warning for destructive operations\n */\nexport function displayWarning(lines: string[]): void {\n  const width = lines.length > 0 ? Math.max(...lines.map((l) => l.length)) + 4 : 4;\n  const border = \"⚠\".repeat(width);\n\n  console.log(\"\");\n  console.log(border);\n  for (const line of lines) {\n    console.log(`⚠  ${line}`);\n  }\n  console.log(border);\n  console.log(\"\");\n}\n"],"mappings":";;;AAMA,SAAS,SAAS,aAAa;AAC/B,SAAS,eAAe;AACxB,SAAS,uBAAuB,iBAAiB,iBAAiB;;;ACDlE,SAAS,OAAO,gBAAgB;AAChC,SAAS,gBAAgB;AACzB,SAAS,QAAQ,gBAAgB;AAMjC,eAAsB,eAAe,SAAmC;AAEtE,QAAM,QAAQ,YAAY;AAE1B,MAAI,OAAO;AACT,QAAI;AACF,YAAM,SAAS,OAAO,OAAO;AAC7B,aAAO;AAAA,IACT,SAAS,KAAK;AACZ,cAAQ,MAAM,wBAAwB,GAAG,EAAE;AAAA,IAE7C;AAAA,EACF;AAGA,UAAQ,IAAI,uCAAuC;AACnD,UAAQ,IAAI,4DAA4D;AACxE,UAAQ,IAAI,EAAE;AAEd,QAAM,SAAS,MAAM,OAAO;AAAA,IAC1B,SAAS;AAAA,IACT,SAAS;AAAA,MACP,EAAE,MAAM,uBAAuB,OAAO,QAAQ;AAAA,MAC9C,EAAE,MAAM,0BAA0B,OAAO,QAAQ;AAAA,IACnD;AAAA,EACF,CAAC;AAED,MAAI,WAAW,SAAS;AACtB,YAAQ,IAAI,OAAO;AACnB,YAAQ,IAAI,EAAE;AACd,YAAQ,IAAI,oDAAoD;AAChE,YAAQ,IAAI,+BAA+B;AAG3C,UAAM,SAAS;AAAA,MACb,SAAS;AAAA,MACT,MAAM;AAAA,IACR,CAAC;AAED,kBAAc;AACd,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAKA,SAAS,cAA6B;AAEpC,MAAI,QAAQ,IAAI,OAAO;AACrB,UAAM,WAAW,QAAQ,IAAI,MAAM,KAAK;AAExC,QAAI,mBAAmB,KAAK,QAAQ,GAAG;AACrC,aAAO;AAAA,IACT;AAAA,EACF;AAGA,QAAM,SAAS,CAAC,QAAQ,MAAM;AAE9B,aAAW,YAAY,QAAQ;AAC7B,QAAI,cAAc,QAAQ,GAAG;AAC3B,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;AAKA,SAAS,SAAS,OAAe,SAAgC;AAC/D,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,QAAQ,MAAM,OAAO,CAAC,GAAG;AAAA,MAC7B,OAAO,CAAC,QAAQ,WAAW,SAAS;AAAA,IACtC,CAAC;AAED,UAAM,GAAG,SAAS,MAAM;AACxB,UAAM,GAAG,QAAQ,CAAC,SAAS;AACzB,UAAI,SAAS,GAAG;AACd,gBAAQ;AAAA,MACV,OAAO;AACL,eAAO,IAAI,MAAM,0BAA0B,IAAI,EAAE,CAAC;AAAA,MACpD;AAAA,IACF,CAAC;AAED,QAAI;AACF,YAAM,UAAU,MAAM,MAAO,MAAM,OAAO;AAC1C,UAAI,CAAC,SAAS;AACZ,cAAM,MAAO,KAAK,SAAS,MAAM;AAC/B,cAAI;AACF,kBAAM,MAAO,IAAI;AAAA,UACnB,SAAS,KAAK;AACZ,mBAAO,GAAG;AAAA,UACZ;AAAA,QACF,CAAC;AAAA,MACH,OAAO;AACL,cAAM,MAAO,IAAI;AAAA,MACnB;AAAA,IACF,SAAS,KAAK;AACZ,aAAO,GAAG;AAAA,IACZ;AAAA,EACF,CAAC;AACH;AAKA,SAAS,cAAc,SAA0B;AAC/C,MAAI;AACF,UAAM,MAAM,SAAS,MAAM,UAAU,SAAS,OAAO,KAAK,SAAS,OAAO;AAC1E,aAAS,KAAK,EAAE,OAAO,SAAS,CAAC;AACjC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAKO,SAAS,gBAAsB;AACpC,MAAI,SAAS,MAAM,SAAS;AAC1B,YAAQ,OAAO,MAAM,OAAO;AAAA,EAC9B,OAAO;AACL,YAAQ,OAAO,MAAM,sBAAsB;AAAA,EAC7C;AACF;AAeO,SAAS,eAAe,OAAuB;AACpD,QAAM,QAAQ,MAAM,SAAS,IAAI,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI;AAC/E,QAAM,SAAS,SAAI,OAAO,KAAK;AAE/B,UAAQ,IAAI,EAAE;AACd,UAAQ,IAAI,MAAM;AAClB,aAAW,QAAQ,OAAO;AACxB,YAAQ,IAAI,WAAM,IAAI,EAAE;AAAA,EAC1B;AACA,UAAQ,IAAI,MAAM;AAClB,UAAQ,IAAI,EAAE;AAChB;;;ADhKA,IAAqB,eAArB,MAAqB,sBAAqB,QAAQ;AAAA,EAChD,OAAO,cAAc;AAAA,EAErB,OAAO,UAAU,CAAC,YAAY,UAAU;AAAA,EAExC,OAAO,WAAW;AAAA,IAChB;AAAA,IACA;AAAA,EACF;AAAA,EAEA,OAAO,QAAQ;AAAA,IACb,OAAO,MAAM,QAAQ;AAAA,MACnB,aAAa;AAAA,MACb,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,MAAqB;AACzB,UAAM,EAAE,MAAM,IAAI,MAAM,KAAK,MAAM,aAAY;AAG/C,SAAK,IAAI,iCAAiC;AAC1C,UAAM,EAAE,YAAY,QAAQ,IAAI,sBAAsB;AAGtD,UAAM,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,eAOL,OAAO;AAAA,eACP,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWrB,UAAM,YAAY,MAAM,eAAe,OAAO;AAE9C,QAAI,CAAC,WAAW;AACd,WAAK,IAAI,2BAA2B;AACpC;AAAA,IACF;AAGA,QAAI,cAAc,MAAM;AAExB,QAAI,CAAC,eAAe,WAAW;AAC7B,oBAAc,MAAM,QAAQ;AAAA,QAC1B,SAAS;AAAA,QACT,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAEA,QAAI,aAAa;AAEf,YAAM,SAAS,MAAM,UAAU;AAE/B,UAAI,QAAQ;AACV,uBAAe;AAAA,UACb;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAED,cAAM,iBAAiB,MAAM,QAAQ;AAAA,UACnC,SAAS;AAAA,UACT,SAAS;AAAA,QACX,CAAC;AAED,YAAI,CAAC,gBAAgB;AACnB,eAAK;AAAA,YACH;AAAA,UACF;AACA;AAAA,QACF;AAAA,MACF;AAGA,UAAI;AACF,cAAM,gBAAgB,UAAU;AAChC,aAAK,IAAI;AAAA,wCAAsC;AAC/C,aAAK,IAAI,mBAAc,OAAO,EAAE;AAChC,aAAK,IAAI,+DAA+D;AAAA,MAC1E,SAAS,KAAU;AACjB,aAAK,MAAM,wBAAwB,IAAI,OAAO,EAAE;AAAA,MAClD;AAAA,IACF,OAAO;AACL,WAAK,IAAI,8BAA8B;AACvC,WAAK,IAAI,4DAA4D;AAAA,IACvE;AAAA,EACF;AACF;","names":[]}

package/dist/commands/auth/login.js

@@ -2,18 +2,40 @@
 
 // src/commands/auth/login.ts
 import { Command } from "@oclif/core";
-import { confirm, select } from "@inquirer/prompts";
+import { confirm, select as select2 } from "@inquirer/prompts";
 import {
   storePrivateKey,
   keyExists,
-  getHiddenInput,
   validatePrivateKey,
   getAddressFromPrivateKey,
-  displayWarning,
   getLegacyKeys,
   getLegacyPrivateKey,
   deleteLegacyPrivateKey
 } from "@layr-labs/ecloud-sdk";
+
+// src/utils/security.ts
+import { spawn, execSync } from "child_process";
+import { platform } from "os";
+import { select, password } from "@inquirer/prompts";
+async function getHiddenInput(message) {
+  return await password({
+    message,
+    mask: "*"
+  });
+}
+function displayWarning(lines) {
+  const width = lines.length > 0 ? Math.max(...lines.map((l) => l.length)) + 4 : 4;
+  const border = "\u26A0".repeat(width);
+  console.log("");
+  console.log(border);
+  for (const line of lines) {
+    console.log(`\u26A0  ${line}`);
+  }
+  console.log(border);
+  console.log("");
+}
+
+// src/commands/auth/login.ts
 var AuthLogin = class extends Command {
   static description = "Store your private key in OS keyring";
   static examples = ["<%= config.bin %> <%= command.id %>"];
@@ -55,23 +77,16 @@ var AuthLogin = class extends Command {
           name: `${key.address} (${key.environment} - ${key.source})`,
           value: key
         }));
-        selectedKey = await select({
+        selectedKey = await select2({
           message: "Select a key to import:",
           choices
         });
-        privateKey = await getLegacyPrivateKey(
-          selectedKey.environment,
-          selectedKey.source
-        );
+        privateKey = await getLegacyPrivateKey(selectedKey.environment, selectedKey.source);
         if (!privateKey) {
-          this.error(
-            `Failed to retrieve legacy key for ${selectedKey.environment}`
-          );
+          this.error(`Failed to retrieve legacy key for ${selectedKey.environment}`);
         }
-        this.log(
-          `
-Importing key from ${selectedKey.source}:${selectedKey.environment}`
-        );
+        this.log(`
+Importing key from ${selectedKey.source}:${selectedKey.environment}`);
       }
     }
     if (!privateKey) {
@@ -96,9 +111,7 @@ Address: ${address}`);
       await storePrivateKey(privateKey);
       this.log("\n\u2713 Private key stored in OS keyring");
       this.log(`\u2713 Address: ${address}`);
-      this.log(
-        "\nNote: This key will be used for all environments (mainnet, sepolia, etc.)"
-      );
+      this.log("\nNote: This key will be used for all environments (mainnet, sepolia, etc.)");
       this.log("You can now use ecloud commands without --private-key flag.");
       if (selectedKey) {
         this.log("");
@@ -107,21 +120,14 @@ Address: ${address}`);
           default: false
         });
         if (confirmDelete) {
-          const deleted = await deleteLegacyPrivateKey(
-            selectedKey.environment,
-            selectedKey.source
-          );
+          const deleted = await deleteLegacyPrivateKey(selectedKey.environment, selectedKey.source);
           if (deleted) {
             this.log(
               `
 \u2713 Legacy key deleted from ${selectedKey.source}:${selectedKey.environment}`
             );
-            this.log(
-              "\nNote: The key is now only stored in ecloud. You can still use it with"
-            );
-            this.log(
-              "eigenx-cli by providing --private-key flag or EIGENX_PRIVATE_KEY env var."
-            );
+            this.log("\nNote: The key is now only stored in ecloud. You can still use it with");
+            this.log("eigenx-cli by providing --private-key flag or EIGENX_PRIVATE_KEY env var.");
           } else {
             this.log(
               `
@@ -130,13 +136,9 @@ Address: ${address}`);
             this.log("The key may have already been removed.");
           }
         } else {
-          this.log(
-            `
-Legacy key kept in ${selectedKey.source}:${selectedKey.environment}`
-          );
-          this.log(
-            "You can delete it later using 'eigenx auth logout' if needed."
-          );
+          this.log(`
+Legacy key kept in ${selectedKey.source}:${selectedKey.environment}`);
+          this.log("You can delete it later using 'eigenx auth logout' if needed.");
         }
       }
     } catch (err) {

package/dist/commands/auth/login.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/commands/auth/login.ts"],"sourcesContent":["/**\n * Auth Login Command\n *\n * Store an existing private key in OS keyring\n */\n\nimport { Command } from \"@oclif/core\";\nimport { confirm, select } from \"@inquirer/prompts\";\nimport {\n  storePrivateKey,\n  keyExists,\n  getHiddenInput,\n  validatePrivateKey,\n  getAddressFromPrivateKey,\n  displayWarning,\n  getLegacyKeys,\n  getLegacyPrivateKey,\n  deleteLegacyPrivateKey,\n  type LegacyKey,\n} from \"@layr-labs/ecloud-sdk\";\n\nexport default class AuthLogin extends Command {\n  static description = \"Store your private key in OS keyring\";\n\n  static examples = [\"<%= config.bin %> <%= command.id %>\"];\n\n  async run(): Promise<void> {\n    // Check if key already exists\n    const exists = await keyExists();\n\n    if (exists) {\n      displayWarning([\n        \"WARNING: A private key for ecloud already exists!\",\n        \"Replacing it will cause PERMANENT DATA LOSS if not backed up.\",\n        \"The previous key will be lost forever.\",\n      ]);\n\n      const confirmReplace = await confirm({\n        message: \"Replace existing key?\",\n        default: false,\n      });\n\n      if (!confirmReplace) {\n        this.log(\"\\nLogin cancelled.\");\n        return;\n      }\n    }\n\n    // Check for legacy keys from eigenx-cli\n    const legacyKeys = await getLegacyKeys();\n    let privateKey: string | null = null;\n    let selectedKey: LegacyKey | null = null;\n\n    if (legacyKeys.length > 0) {\n      this.log(\"\\nFound legacy keys from eigenx-cli:\");\n      this.log(\"\");\n\n      // Display legacy keys\n      for (const key of legacyKeys) {\n        this.log(`  Address: ${key.address}`);\n        this.log(`  Environment: ${key.environment}`);\n        this.log(`  Source: ${key.source}`);\n        this.log(\"\");\n      }\n\n      const importLegacy = await confirm({\n        message: \"Would you like to import one of these legacy keys?\",\n        default: false,\n      });\n\n      if (importLegacy) {\n        // Create choices for selection\n        const choices = legacyKeys.map((key) => ({\n          name: `${key.address} (${key.environment} - ${key.source})`,\n          value: key,\n        }));\n\n        selectedKey = await select<LegacyKey>({\n          message: \"Select a key to import:\",\n          choices,\n        });\n\n        // Retrieve the actual private key\n        privateKey = await getLegacyPrivateKey(\n          selectedKey.environment,\n          selectedKey.source\n        );\n\n        if (!privateKey) {\n          this.error(\n            `Failed to retrieve legacy key for ${selectedKey.environment}`\n          );\n        }\n\n        this.log(\n          `\\nImporting key from ${selectedKey.source}:${selectedKey.environment}`\n        );\n      }\n    }\n\n    // If no legacy key was selected, prompt for private key input\n    if (!privateKey) {\n      privateKey = await getHiddenInput(\"Enter your private key:\");\n\n      privateKey = privateKey.trim();\n    }\n\n    if (!validatePrivateKey(privateKey)) {\n      this.error(\"Invalid private key format. Please check and try again.\");\n    }\n\n    // Derive address for confirmation\n    const address = getAddressFromPrivateKey(privateKey);\n\n    this.log(`\\nAddress: ${address}`);\n\n    const confirmStore = await confirm({\n      message: \"Store this key in OS keyring?\",\n      default: true,\n    });\n\n    if (!confirmStore) {\n      this.log(\"\\nLogin cancelled.\");\n      return;\n    }\n\n    // Store in keyring\n    try {\n      await storePrivateKey(privateKey);\n      this.log(\"\\n✓ Private key stored in OS keyring\");\n      this.log(`✓ Address: ${address}`);\n      this.log(\n        \"\\nNote: This key will be used for all environments (mainnet, sepolia, etc.)\"\n      );\n      this.log(\"You can now use ecloud commands without --private-key flag.\");\n\n      // Ask if user wants to delete the legacy key (only if save was successful)\n      if (selectedKey) {\n        this.log(\"\");\n        const confirmDelete = await confirm({\n          message: `Delete the legacy key from ${selectedKey.source}:${selectedKey.environment}?`,\n          default: false,\n        });\n\n        if (confirmDelete) {\n          const deleted = await deleteLegacyPrivateKey(\n            selectedKey.environment,\n            selectedKey.source\n          );\n\n          if (deleted) {\n            this.log(\n              `\\n✓ Legacy key deleted from ${selectedKey.source}:${selectedKey.environment}`\n            );\n            this.log(\n              \"\\nNote: The key is now only stored in ecloud. You can still use it with\"\n            );\n            this.log(\n              \"eigenx-cli by providing --private-key flag or EIGENX_PRIVATE_KEY env var.\"\n            );\n          } else {\n            this.log(\n              `\\n⚠️  Failed to delete legacy key from ${selectedKey.source}:${selectedKey.environment}`\n            );\n            this.log(\"The key may have already been removed.\");\n          }\n        } else {\n          this.log(\n            `\\nLegacy key kept in ${selectedKey.source}:${selectedKey.environment}`\n          );\n          this.log(\n            \"You can delete it later using 'eigenx auth logout' if needed.\"\n          );\n        }\n      }\n    } catch (err: any) {\n      this.error(`Failed to store key: ${err.message}`);\n    }\n  }\n}\n"],"mappings":";;;AAMA,SAAS,eAAe;AACxB,SAAS,SAAS,cAAc;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAEP,IAAqB,YAArB,cAAuC,QAAQ;AAAA,EAC7C,OAAO,cAAc;AAAA,EAErB,OAAO,WAAW,CAAC,qCAAqC;AAAA,EAExD,MAAM,MAAqB;AAEzB,UAAM,SAAS,MAAM,UAAU;AAE/B,QAAI,QAAQ;AACV,qBAAe;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAED,YAAM,iBAAiB,MAAM,QAAQ;AAAA,QACnC,SAAS;AAAA,QACT,SAAS;AAAA,MACX,CAAC;AAED,UAAI,CAAC,gBAAgB;AACnB,aAAK,IAAI,oBAAoB;AAC7B;AAAA,MACF;AAAA,IACF;AAGA,UAAM,aAAa,MAAM,cAAc;AACvC,QAAI,aAA4B;AAChC,QAAI,cAAgC;AAEpC,QAAI,WAAW,SAAS,GAAG;AACzB,WAAK,IAAI,sCAAsC;AAC/C,WAAK,IAAI,EAAE;AAGX,iBAAW,OAAO,YAAY;AAC5B,aAAK,IAAI,cAAc,IAAI,OAAO,EAAE;AACpC,aAAK,IAAI,kBAAkB,IAAI,WAAW,EAAE;AAC5C,aAAK,IAAI,aAAa,IAAI,MAAM,EAAE;AAClC,aAAK,IAAI,EAAE;AAAA,MACb;AAEA,YAAM,eAAe,MAAM,QAAQ;AAAA,QACjC,SAAS;AAAA,QACT,SAAS;AAAA,MACX,CAAC;AAED,UAAI,cAAc;AAEhB,cAAM,UAAU,WAAW,IAAI,CAAC,SAAS;AAAA,UACvC,MAAM,GAAG,IAAI,OAAO,KAAK,IAAI,WAAW,MAAM,IAAI,MAAM;AAAA,UACxD,OAAO;AAAA,QACT,EAAE;AAEF,sBAAc,MAAM,OAAkB;AAAA,UACpC,SAAS;AAAA,UACT;AAAA,QACF,CAAC;AAGD,qBAAa,MAAM;AAAA,UACjB,YAAY;AAAA,UACZ,YAAY;AAAA,QACd;AAEA,YAAI,CAAC,YAAY;AACf,eAAK;AAAA,YACH,qCAAqC,YAAY,WAAW;AAAA,UAC9D;AAAA,QACF;AAEA,aAAK;AAAA,UACH;AAAA,qBAAwB,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,QACvE;AAAA,MACF;AAAA,IACF;AAGA,QAAI,CAAC,YAAY;AACf,mBAAa,MAAM,eAAe,yBAAyB;AAE3D,mBAAa,WAAW,KAAK;AAAA,IAC/B;AAEA,QAAI,CAAC,mBAAmB,UAAU,GAAG;AACnC,WAAK,MAAM,yDAAyD;AAAA,IACtE;AAGA,UAAM,UAAU,yBAAyB,UAAU;AAEnD,SAAK,IAAI;AAAA,WAAc,OAAO,EAAE;AAEhC,UAAM,eAAe,MAAM,QAAQ;AAAA,MACjC,SAAS;AAAA,MACT,SAAS;AAAA,IACX,CAAC;AAED,QAAI,CAAC,cAAc;AACjB,WAAK,IAAI,oBAAoB;AAC7B;AAAA,IACF;AAGA,QAAI;AACF,YAAM,gBAAgB,UAAU;AAChC,WAAK,IAAI,2CAAsC;AAC/C,WAAK,IAAI,mBAAc,OAAO,EAAE;AAChC,WAAK;AAAA,QACH;AAAA,MACF;AACA,WAAK,IAAI,6DAA6D;AAGtE,UAAI,aAAa;AACf,aAAK,IAAI,EAAE;AACX,cAAM,gBAAgB,MAAM,QAAQ;AAAA,UAClC,SAAS,8BAA8B,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,UACpF,SAAS;AAAA,QACX,CAAC;AAED,YAAI,eAAe;AACjB,gBAAM,UAAU,MAAM;AAAA,YACpB,YAAY;AAAA,YACZ,YAAY;AAAA,UACd;AAEA,cAAI,SAAS;AACX,iBAAK;AAAA,cACH;AAAA,iCAA+B,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,YAC9E;AACA,iBAAK;AAAA,cACH;AAAA,YACF;AACA,iBAAK;AAAA,cACH;AAAA,YACF;AAAA,UACF,OAAO;AACL,iBAAK;AAAA,cACH;AAAA,iDAA0C,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,YACzF;AACA,iBAAK,IAAI,wCAAwC;AAAA,UACnD;AAAA,QACF,OAAO;AACL,eAAK;AAAA,YACH;AAAA,qBAAwB,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,UACvE;AACA,eAAK;AAAA,YACH;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF,SAAS,KAAU;AACjB,WAAK,MAAM,wBAAwB,IAAI,OAAO,EAAE;AAAA,IAClD;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../src/commands/auth/login.ts","../../../src/utils/security.ts"],"sourcesContent":["/**\n * Auth Login Command\n *\n * Store an existing private key in OS keyring\n */\n\nimport { Command } from \"@oclif/core\";\nimport { confirm, select } from \"@inquirer/prompts\";\nimport {\n  storePrivateKey,\n  keyExists,\n  validatePrivateKey,\n  getAddressFromPrivateKey,\n  getLegacyKeys,\n  getLegacyPrivateKey,\n  deleteLegacyPrivateKey,\n  type LegacyKey,\n} from \"@layr-labs/ecloud-sdk\";\nimport { getHiddenInput, displayWarning } from \"../../utils/security\";\n\nexport default class AuthLogin extends Command {\n  static description = \"Store your private key in OS keyring\";\n\n  static examples = [\"<%= config.bin %> <%= command.id %>\"];\n\n  async run(): Promise<void> {\n    // Check if key already exists\n    const exists = await keyExists();\n\n    if (exists) {\n      displayWarning([\n        \"WARNING: A private key for ecloud already exists!\",\n        \"Replacing it will cause PERMANENT DATA LOSS if not backed up.\",\n        \"The previous key will be lost forever.\",\n      ]);\n\n      const confirmReplace = await confirm({\n        message: \"Replace existing key?\",\n        default: false,\n      });\n\n      if (!confirmReplace) {\n        this.log(\"\\nLogin cancelled.\");\n        return;\n      }\n    }\n\n    // Check for legacy keys from eigenx-cli\n    const legacyKeys = await getLegacyKeys();\n    let privateKey: string | null = null;\n    let selectedKey: LegacyKey | null = null;\n\n    if (legacyKeys.length > 0) {\n      this.log(\"\\nFound legacy keys from eigenx-cli:\");\n      this.log(\"\");\n\n      // Display legacy keys\n      for (const key of legacyKeys) {\n        this.log(`  Address: ${key.address}`);\n        this.log(`  Environment: ${key.environment}`);\n        this.log(`  Source: ${key.source}`);\n        this.log(\"\");\n      }\n\n      const importLegacy = await confirm({\n        message: \"Would you like to import one of these legacy keys?\",\n        default: false,\n      });\n\n      if (importLegacy) {\n        // Create choices for selection\n        const choices = legacyKeys.map((key) => ({\n          name: `${key.address} (${key.environment} - ${key.source})`,\n          value: key,\n        }));\n\n        selectedKey = await select<LegacyKey>({\n          message: \"Select a key to import:\",\n          choices,\n        });\n\n        // Retrieve the actual private key\n        privateKey = await getLegacyPrivateKey(selectedKey.environment, selectedKey.source);\n\n        if (!privateKey) {\n          this.error(`Failed to retrieve legacy key for ${selectedKey.environment}`);\n        }\n\n        this.log(`\\nImporting key from ${selectedKey.source}:${selectedKey.environment}`);\n      }\n    }\n\n    // If no legacy key was selected, prompt for private key input\n    if (!privateKey) {\n      privateKey = await getHiddenInput(\"Enter your private key:\");\n\n      privateKey = privateKey.trim();\n    }\n\n    if (!validatePrivateKey(privateKey)) {\n      this.error(\"Invalid private key format. Please check and try again.\");\n    }\n\n    // Derive address for confirmation\n    const address = getAddressFromPrivateKey(privateKey);\n\n    this.log(`\\nAddress: ${address}`);\n\n    const confirmStore = await confirm({\n      message: \"Store this key in OS keyring?\",\n      default: true,\n    });\n\n    if (!confirmStore) {\n      this.log(\"\\nLogin cancelled.\");\n      return;\n    }\n\n    // Store in keyring\n    try {\n      await storePrivateKey(privateKey);\n      this.log(\"\\n✓ Private key stored in OS keyring\");\n      this.log(`✓ Address: ${address}`);\n      this.log(\"\\nNote: This key will be used for all environments (mainnet, sepolia, etc.)\");\n      this.log(\"You can now use ecloud commands without --private-key flag.\");\n\n      // Ask if user wants to delete the legacy key (only if save was successful)\n      if (selectedKey) {\n        this.log(\"\");\n        const confirmDelete = await confirm({\n          message: `Delete the legacy key from ${selectedKey.source}:${selectedKey.environment}?`,\n          default: false,\n        });\n\n        if (confirmDelete) {\n          const deleted = await deleteLegacyPrivateKey(selectedKey.environment, selectedKey.source);\n\n          if (deleted) {\n            this.log(\n              `\\n✓ Legacy key deleted from ${selectedKey.source}:${selectedKey.environment}`,\n            );\n            this.log(\"\\nNote: The key is now only stored in ecloud. You can still use it with\");\n            this.log(\"eigenx-cli by providing --private-key flag or EIGENX_PRIVATE_KEY env var.\");\n          } else {\n            this.log(\n              `\\n⚠️  Failed to delete legacy key from ${selectedKey.source}:${selectedKey.environment}`,\n            );\n            this.log(\"The key may have already been removed.\");\n          }\n        } else {\n          this.log(`\\nLegacy key kept in ${selectedKey.source}:${selectedKey.environment}`);\n          this.log(\"You can delete it later using 'eigenx auth logout' if needed.\");\n        }\n      }\n    } catch (err: any) {\n      this.error(`Failed to store key: ${err.message}`);\n    }\n  }\n}\n","/**\n * Security utilities for CLI\n *\n * Functions for securely displaying and handling sensitive content\n * like private keys.\n */\n\nimport { spawn, execSync } from \"child_process\";\nimport { platform } from \"os\";\nimport { select, password } from \"@inquirer/prompts\";\n\n/**\n * Display sensitive content using system pager (less/more)\n * Returns true if content was displayed, false if user aborted\n */\nexport async function showPrivateKey(content: string): Promise<boolean> {\n  // Try to use system pager\n  const pager = detectPager();\n\n  if (pager) {\n    try {\n      await runPager(pager, content);\n      return true;\n    } catch (err) {\n      console.error(`Failed to run pager: ${err}`);\n      // Fall through to fallback\n    }\n  }\n\n  // No pager available - give user a choice\n  console.log(\"\\nNo pager (less/more) found on PATH.\");\n  console.log(\"For security, avoid printing private keys to the terminal.\");\n  console.log(\"\");\n\n  const choice = await select({\n    message: \"Choose an option:\",\n    choices: [\n      { name: \"Abort (recommended)\", value: \"abort\" },\n      { name: \"Print and clear screen\", value: \"print\" },\n    ],\n  });\n\n  if (choice === \"print\") {\n    console.log(content);\n    console.log(\"\");\n    console.log(\"Press Enter after you have securely saved the key.\");\n    console.log(\"The screen will be cleared...\");\n\n    // Wait for Enter\n    await password({\n      message: \"\",\n      mask: \"\",\n    });\n\n    clearTerminal();\n    return true;\n  }\n\n  return false; // User aborted\n}\n\n/**\n * Detect system pager (less or more)\n */\nfunction detectPager(): string | null {\n  // Check PAGER env var first\n  if (process.env.PAGER) {\n    const pagerEnv = process.env.PAGER.trim();\n    // Only allow simple command names without arguments or special characters\n    if (/^[a-zA-Z0-9_-]+$/.test(pagerEnv)) {\n      return pagerEnv;\n    }\n  }\n\n  // Try common pagers\n  const pagers = [\"less\", \"more\"];\n\n  for (const pagerCmd of pagers) {\n    if (commandExists(pagerCmd)) {\n      return pagerCmd;\n    }\n  }\n\n  return null;\n}\n\n/**\n * Run pager with content\n */\nfunction runPager(pager: string, content: string): Promise<void> {\n  return new Promise((resolve, reject) => {\n    const child = spawn(pager, [], {\n      stdio: [\"pipe\", \"inherit\", \"inherit\"],\n    });\n\n    child.on(\"error\", reject);\n    child.on(\"exit\", (code) => {\n      if (code === 0) {\n        resolve();\n      } else {\n        reject(new Error(`Pager exited with code ${code}`));\n      }\n    });\n\n    try {\n      const written = child.stdin!.write(content);\n      if (!written) {\n        child.stdin!.once(\"drain\", () => {\n          try {\n            child.stdin!.end();\n          } catch (err) {\n            reject(err);\n          }\n        });\n      } else {\n        child.stdin!.end();\n      }\n    } catch (err) {\n      reject(err);\n    }\n  });\n}\n\n/**\n * Check if command exists\n */\nfunction commandExists(command: string): boolean {\n  try {\n    const cmd = platform() === \"win32\" ? `where ${command}` : `which ${command}`;\n    execSync(cmd, { stdio: \"ignore\" });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Clear terminal screen\n */\nexport function clearTerminal(): void {\n  if (platform() === \"win32\") {\n    process.stdout.write(\"\\x1Bc\");\n  } else {\n    process.stdout.write(\"\\x1B[2J\\x1B[3J\\x1B[H\");\n  }\n}\n\n/**\n * Get hidden input (password-style)\n */\nexport async function getHiddenInput(message: string): Promise<string> {\n  return await password({\n    message,\n    mask: \"*\",\n  });\n}\n\n/**\n * Display multi-line warning for destructive operations\n */\nexport function displayWarning(lines: string[]): void {\n  const width = lines.length > 0 ? Math.max(...lines.map((l) => l.length)) + 4 : 4;\n  const border = \"⚠\".repeat(width);\n\n  console.log(\"\");\n  console.log(border);\n  for (const line of lines) {\n    console.log(`⚠  ${line}`);\n  }\n  console.log(border);\n  console.log(\"\");\n}\n"],"mappings":";;;AAMA,SAAS,eAAe;AACxB,SAAS,SAAS,UAAAA,eAAc;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;;;ACVP,SAAS,OAAO,gBAAgB;AAChC,SAAS,gBAAgB;AACzB,SAAS,QAAQ,gBAAgB;AA6IjC,eAAsB,eAAe,SAAkC;AACrE,SAAO,MAAM,SAAS;AAAA,IACpB;AAAA,IACA,MAAM;AAAA,EACR,CAAC;AACH;AAKO,SAAS,eAAe,OAAuB;AACpD,QAAM,QAAQ,MAAM,SAAS,IAAI,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI;AAC/E,QAAM,SAAS,SAAI,OAAO,KAAK;AAE/B,UAAQ,IAAI,EAAE;AACd,UAAQ,IAAI,MAAM;AAClB,aAAW,QAAQ,OAAO;AACxB,YAAQ,IAAI,WAAM,IAAI,EAAE;AAAA,EAC1B;AACA,UAAQ,IAAI,MAAM;AAClB,UAAQ,IAAI,EAAE;AAChB;;;ADvJA,IAAqB,YAArB,cAAuC,QAAQ;AAAA,EAC7C,OAAO,cAAc;AAAA,EAErB,OAAO,WAAW,CAAC,qCAAqC;AAAA,EAExD,MAAM,MAAqB;AAEzB,UAAM,SAAS,MAAM,UAAU;AAE/B,QAAI,QAAQ;AACV,qBAAe;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAED,YAAM,iBAAiB,MAAM,QAAQ;AAAA,QACnC,SAAS;AAAA,QACT,SAAS;AAAA,MACX,CAAC;AAED,UAAI,CAAC,gBAAgB;AACnB,aAAK,IAAI,oBAAoB;AAC7B;AAAA,MACF;AAAA,IACF;AAGA,UAAM,aAAa,MAAM,cAAc;AACvC,QAAI,aAA4B;AAChC,QAAI,cAAgC;AAEpC,QAAI,WAAW,SAAS,GAAG;AACzB,WAAK,IAAI,sCAAsC;AAC/C,WAAK,IAAI,EAAE;AAGX,iBAAW,OAAO,YAAY;AAC5B,aAAK,IAAI,cAAc,IAAI,OAAO,EAAE;AACpC,aAAK,IAAI,kBAAkB,IAAI,WAAW,EAAE;AAC5C,aAAK,IAAI,aAAa,IAAI,MAAM,EAAE;AAClC,aAAK,IAAI,EAAE;AAAA,MACb;AAEA,YAAM,eAAe,MAAM,QAAQ;AAAA,QACjC,SAAS;AAAA,QACT,SAAS;AAAA,MACX,CAAC;AAED,UAAI,cAAc;AAEhB,cAAM,UAAU,WAAW,IAAI,CAAC,SAAS;AAAA,UACvC,MAAM,GAAG,IAAI,OAAO,KAAK,IAAI,WAAW,MAAM,IAAI,MAAM;AAAA,UACxD,OAAO;AAAA,QACT,EAAE;AAEF,sBAAc,MAAMC,QAAkB;AAAA,UACpC,SAAS;AAAA,UACT;AAAA,QACF,CAAC;AAGD,qBAAa,MAAM,oBAAoB,YAAY,aAAa,YAAY,MAAM;AAElF,YAAI,CAAC,YAAY;AACf,eAAK,MAAM,qCAAqC,YAAY,WAAW,EAAE;AAAA,QAC3E;AAEA,aAAK,IAAI;AAAA,qBAAwB,YAAY,MAAM,IAAI,YAAY,WAAW,EAAE;AAAA,MAClF;AAAA,IACF;AAGA,QAAI,CAAC,YAAY;AACf,mBAAa,MAAM,eAAe,yBAAyB;AAE3D,mBAAa,WAAW,KAAK;AAAA,IAC/B;AAEA,QAAI,CAAC,mBAAmB,UAAU,GAAG;AACnC,WAAK,MAAM,yDAAyD;AAAA,IACtE;AAGA,UAAM,UAAU,yBAAyB,UAAU;AAEnD,SAAK,IAAI;AAAA,WAAc,OAAO,EAAE;AAEhC,UAAM,eAAe,MAAM,QAAQ;AAAA,MACjC,SAAS;AAAA,MACT,SAAS;AAAA,IACX,CAAC;AAED,QAAI,CAAC,cAAc;AACjB,WAAK,IAAI,oBAAoB;AAC7B;AAAA,IACF;AAGA,QAAI;AACF,YAAM,gBAAgB,UAAU;AAChC,WAAK,IAAI,2CAAsC;AAC/C,WAAK,IAAI,mBAAc,OAAO,EAAE;AAChC,WAAK,IAAI,6EAA6E;AACtF,WAAK,IAAI,6DAA6D;AAGtE,UAAI,aAAa;AACf,aAAK,IAAI,EAAE;AACX,cAAM,gBAAgB,MAAM,QAAQ;AAAA,UAClC,SAAS,8BAA8B,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,UACpF,SAAS;AAAA,QACX,CAAC;AAED,YAAI,eAAe;AACjB,gBAAM,UAAU,MAAM,uBAAuB,YAAY,aAAa,YAAY,MAAM;AAExF,cAAI,SAAS;AACX,iBAAK;AAAA,cACH;AAAA,iCAA+B,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,YAC9E;AACA,iBAAK,IAAI,yEAAyE;AAClF,iBAAK,IAAI,2EAA2E;AAAA,UACtF,OAAO;AACL,iBAAK;AAAA,cACH;AAAA,iDAA0C,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,YACzF;AACA,iBAAK,IAAI,wCAAwC;AAAA,UACnD;AAAA,QACF,OAAO;AACL,eAAK,IAAI;AAAA,qBAAwB,YAAY,MAAM,IAAI,YAAY,WAAW,EAAE;AAChF,eAAK,IAAI,+DAA+D;AAAA,QAC1E;AAAA,MACF;AAAA,IACF,SAAS,KAAU;AACjB,WAAK,MAAM,wBAAwB,IAAI,OAAO,EAAE;AAAA,IAClD;AAAA,EACF;AACF;","names":["select","select"]}

package/dist/commands/auth/logout.js

@@ -3,11 +3,7 @@
 // src/commands/auth/logout.ts
 import { Command, Flags } from "@oclif/core";
 import { confirm } from "@inquirer/prompts";
-import {
-  deletePrivateKey,
-  getPrivateKey,
-  getAddressFromPrivateKey
-} from "@layr-labs/ecloud-sdk";
+import { deletePrivateKey, getPrivateKey, getAddressFromPrivateKey } from "@layr-labs/ecloud-sdk";
 var AuthLogout = class _AuthLogout extends Command {
   static description = "Remove private key from OS keyring";
   static examples = [
@@ -46,9 +42,7 @@ var AuthLogout = class _AuthLogout extends Command {
       const deleted = await deletePrivateKey();
       if (deleted) {
         this.log("\n\u2713 Successfully removed key from keyring");
-        this.log(
-          "\nYou will need to provide --private-key flag for future commands,"
-        );
+        this.log("\nYou will need to provide --private-key flag for future commands,");
         this.log("or run 'ecloud auth login' to store a key again.");
       } else {
         this.log("\nFailed to remove key (it may have already been removed)");

package/dist/commands/auth/logout.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/commands/auth/logout.ts"],"sourcesContent":["/**\n * Auth Logout Command\n *\n * Remove private key from OS keyring\n */\n\nimport { Command, Flags } from \"@oclif/core\";\nimport { confirm } from \"@inquirer/prompts\";\nimport {\n  deletePrivateKey,\n  getPrivateKey,\n  getAddressFromPrivateKey,\n} from \"@layr-labs/ecloud-sdk\";\n\nexport default class AuthLogout extends Command {\n  static description = \"Remove private key from OS keyring\";\n\n  static examples = [\n    \"<%= config.bin %> <%= command.id %>\",\n    \"<%= config.bin %> <%= command.id %> --force\",\n  ];\n\n  static flags = {\n    force: Flags.boolean({\n      description: \"Skip confirmation prompt\",\n      default: false,\n    }),\n  };\n\n  async run(): Promise<void> {\n    const { flags } = await this.parse(AuthLogout);\n\n    // Check if key exists\n    const privateKey = await getPrivateKey();\n\n    if (!privateKey) {\n      this.log(\"No key found in keyring\");\n      this.log(\"\\nNothing to remove.\");\n      return;\n    }\n\n    // Show address\n    const address = getAddressFromPrivateKey(privateKey);\n    this.log(\"Found stored key:\");\n    this.log(`  Address: ${address}`);\n    this.log(\"\");\n\n    // Confirm unless forced\n    if (!flags.force) {\n      const confirmed = await confirm({\n        message: \"Remove private key from keyring?\",\n        default: false,\n      });\n\n      if (!confirmed) {\n        this.log(\"Logout cancelled\");\n        return;\n      }\n    }\n\n    // Remove from keyring\n    try {\n      const deleted = await deletePrivateKey();\n\n      if (deleted) {\n        this.log(\"\\n✓ Successfully removed key from keyring\");\n        this.log(\n          \"\\nYou will need to provide --private-key flag for future commands,\"\n        );\n        this.log(\"or run 'ecloud auth login' to store a key again.\");\n      } else {\n        this.log(\"\\nFailed to remove key (it may have already been removed)\");\n      }\n    } catch (err: any) {\n      this.error(`Failed to remove key: ${err.message}`);\n    }\n  }\n}\n"],"mappings":";;;AAMA,SAAS,SAAS,aAAa;AAC/B,SAAS,eAAe;AACxB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,IAAqB,aAArB,MAAqB,oBAAmB,QAAQ;AAAA,EAC9C,OAAO,cAAc;AAAA,EAErB,OAAO,WAAW;AAAA,IAChB;AAAA,IACA;AAAA,EACF;AAAA,EAEA,OAAO,QAAQ;AAAA,IACb,OAAO,MAAM,QAAQ;AAAA,MACnB,aAAa;AAAA,MACb,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,MAAqB;AACzB,UAAM,EAAE,MAAM,IAAI,MAAM,KAAK,MAAM,WAAU;AAG7C,UAAM,aAAa,MAAM,cAAc;AAEvC,QAAI,CAAC,YAAY;AACf,WAAK,IAAI,yBAAyB;AAClC,WAAK,IAAI,sBAAsB;AAC/B;AAAA,IACF;AAGA,UAAM,UAAU,yBAAyB,UAAU;AACnD,SAAK,IAAI,mBAAmB;AAC5B,SAAK,IAAI,cAAc,OAAO,EAAE;AAChC,SAAK,IAAI,EAAE;AAGX,QAAI,CAAC,MAAM,OAAO;AAChB,YAAM,YAAY,MAAM,QAAQ;AAAA,QAC9B,SAAS;AAAA,QACT,SAAS;AAAA,MACX,CAAC;AAED,UAAI,CAAC,WAAW;AACd,aAAK,IAAI,kBAAkB;AAC3B;AAAA,MACF;AAAA,IACF;AAGA,QAAI;AACF,YAAM,UAAU,MAAM,iBAAiB;AAEvC,UAAI,SAAS;AACX,aAAK,IAAI,gDAA2C;AACpD,aAAK;AAAA,UACH;AAAA,QACF;AACA,aAAK,IAAI,kDAAkD;AAAA,MAC7D,OAAO;AACL,aAAK,IAAI,2DAA2D;AAAA,MACtE;AAAA,IACF,SAAS,KAAU;AACjB,WAAK,MAAM,yBAAyB,IAAI,OAAO,EAAE;AAAA,IACnD;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../src/commands/auth/logout.ts"],"sourcesContent":["/**\n * Auth Logout Command\n *\n * Remove private key from OS keyring\n */\n\nimport { Command, Flags } from \"@oclif/core\";\nimport { confirm } from \"@inquirer/prompts\";\nimport { deletePrivateKey, getPrivateKey, getAddressFromPrivateKey } from \"@layr-labs/ecloud-sdk\";\n\nexport default class AuthLogout extends Command {\n  static description = \"Remove private key from OS keyring\";\n\n  static examples = [\n    \"<%= config.bin %> <%= command.id %>\",\n    \"<%= config.bin %> <%= command.id %> --force\",\n  ];\n\n  static flags = {\n    force: Flags.boolean({\n      description: \"Skip confirmation prompt\",\n      default: false,\n    }),\n  };\n\n  async run(): Promise<void> {\n    const { flags } = await this.parse(AuthLogout);\n\n    // Check if key exists\n    const privateKey = await getPrivateKey();\n\n    if (!privateKey) {\n      this.log(\"No key found in keyring\");\n      this.log(\"\\nNothing to remove.\");\n      return;\n    }\n\n    // Show address\n    const address = getAddressFromPrivateKey(privateKey);\n    this.log(\"Found stored key:\");\n    this.log(`  Address: ${address}`);\n    this.log(\"\");\n\n    // Confirm unless forced\n    if (!flags.force) {\n      const confirmed = await confirm({\n        message: \"Remove private key from keyring?\",\n        default: false,\n      });\n\n      if (!confirmed) {\n        this.log(\"Logout cancelled\");\n        return;\n      }\n    }\n\n    // Remove from keyring\n    try {\n      const deleted = await deletePrivateKey();\n\n      if (deleted) {\n        this.log(\"\\n✓ Successfully removed key from keyring\");\n        this.log(\"\\nYou will need to provide --private-key flag for future commands,\");\n        this.log(\"or run 'ecloud auth login' to store a key again.\");\n      } else {\n        this.log(\"\\nFailed to remove key (it may have already been removed)\");\n      }\n    } catch (err: any) {\n      this.error(`Failed to remove key: ${err.message}`);\n    }\n  }\n}\n"],"mappings":";;;AAMA,SAAS,SAAS,aAAa;AAC/B,SAAS,eAAe;AACxB,SAAS,kBAAkB,eAAe,gCAAgC;AAE1E,IAAqB,aAArB,MAAqB,oBAAmB,QAAQ;AAAA,EAC9C,OAAO,cAAc;AAAA,EAErB,OAAO,WAAW;AAAA,IAChB;AAAA,IACA;AAAA,EACF;AAAA,EAEA,OAAO,QAAQ;AAAA,IACb,OAAO,MAAM,QAAQ;AAAA,MACnB,aAAa;AAAA,MACb,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,MAAqB;AACzB,UAAM,EAAE,MAAM,IAAI,MAAM,KAAK,MAAM,WAAU;AAG7C,UAAM,aAAa,MAAM,cAAc;AAEvC,QAAI,CAAC,YAAY;AACf,WAAK,IAAI,yBAAyB;AAClC,WAAK,IAAI,sBAAsB;AAC/B;AAAA,IACF;AAGA,UAAM,UAAU,yBAAyB,UAAU;AACnD,SAAK,IAAI,mBAAmB;AAC5B,SAAK,IAAI,cAAc,OAAO,EAAE;AAChC,SAAK,IAAI,EAAE;AAGX,QAAI,CAAC,MAAM,OAAO;AAChB,YAAM,YAAY,MAAM,QAAQ;AAAA,QAC9B,SAAS;AAAA,QACT,SAAS;AAAA,MACX,CAAC;AAED,UAAI,CAAC,WAAW;AACd,aAAK,IAAI,kBAAkB;AAC3B;AAAA,MACF;AAAA,IACF;AAGA,QAAI;AACF,YAAM,UAAU,MAAM,iBAAiB;AAEvC,UAAI,SAAS;AACX,aAAK,IAAI,gDAA2C;AACpD,aAAK,IAAI,oEAAoE;AAC7E,aAAK,IAAI,kDAAkD;AAAA,MAC7D,OAAO;AACL,aAAK,IAAI,2DAA2D;AAAA,MACtE;AAAA,IACF,SAAS,KAAU;AACjB,WAAK,MAAM,yBAAyB,IAAI,OAAO,EAAE;AAAA,IACnD;AAAA,EACF;AACF;","names":[]}

package/dist/commands/auth/migrate.js

@@ -2,16 +2,33 @@
 
 // src/commands/auth/migrate.ts
 import { Command } from "@oclif/core";
-import { confirm, select } from "@inquirer/prompts";
+import { confirm, select as select2 } from "@inquirer/prompts";
 import {
   storePrivateKey,
   keyExists,
   getAddressFromPrivateKey,
-  displayWarning,
   getLegacyKeys,
   getLegacyPrivateKey,
   deleteLegacyPrivateKey
 } from "@layr-labs/ecloud-sdk";
+
+// src/utils/security.ts
+import { spawn, execSync } from "child_process";
+import { platform } from "os";
+import { select, password } from "@inquirer/prompts";
+function displayWarning(lines) {
+  const width = lines.length > 0 ? Math.max(...lines.map((l) => l.length)) + 4 : 4;
+  const border = "\u26A0".repeat(width);
+  console.log("");
+  console.log(border);
+  for (const line of lines) {
+    console.log(`\u26A0  ${line}`);
+  }
+  console.log(border);
+  console.log("");
+}
+
+// src/commands/auth/migrate.ts
 var AuthMigrate = class extends Command {
   static description = "Migrate a private key from eigenx-cli to ecloud";
   static examples = ["<%= config.bin %> <%= command.id %>"];
@@ -36,18 +53,13 @@ var AuthMigrate = class extends Command {
       name: `${key.address} (${key.environment} - ${key.source})`,
       value: key
     }));
-    const selectedKey = await select({
+    const selectedKey = await select2({
       message: "Select a key to migrate:",
       choices
     });
-    const privateKey = await getLegacyPrivateKey(
-      selectedKey.environment,
-      selectedKey.source
-    );
+    const privateKey = await getLegacyPrivateKey(selectedKey.environment, selectedKey.source);
     if (!privateKey) {
-      this.error(
-        `Failed to retrieve legacy key for ${selectedKey.environment}`
-      );
+      this.error(`Failed to retrieve legacy key for ${selectedKey.environment}`);
     }
     const address = getAddressFromPrivateKey(privateKey);
     this.log(`
@@ -74,30 +86,19 @@ Migrating key: ${address}`);
       await storePrivateKey(privateKey);
       this.log("\n\u2713 Private key migrated to ecloud keyring");
       this.log(`\u2713 Address: ${address}`);
-      this.log(
-        "\nNote: This key will be used for all environments (mainnet, sepolia, etc.)"
-      );
+      this.log("\nNote: This key will be used for all environments (mainnet, sepolia, etc.)");
       this.log("");
       const confirmDelete = await confirm({
         message: `Delete the legacy key from ${selectedKey.source}:${selectedKey.environment}?`,
         default: false
       });
       if (confirmDelete) {
-        const deleted = await deleteLegacyPrivateKey(
-          selectedKey.environment,
-          selectedKey.source
-        );
+        const deleted = await deleteLegacyPrivateKey(selectedKey.environment, selectedKey.source);
         if (deleted) {
-          this.log(
-            `
-\u2713 Legacy key deleted from ${selectedKey.source}:${selectedKey.environment}`
-          );
-          this.log(
-            "\nNote: The key is now only stored in ecloud. You can still use it with"
-          );
-          this.log(
-            "eigenx-cli by providing --private-key flag or EIGENX_PRIVATE_KEY env var."
-          );
+          this.log(`
+\u2713 Legacy key deleted from ${selectedKey.source}:${selectedKey.environment}`);
+          this.log("\nNote: The key is now only stored in ecloud. You can still use it with");
+          this.log("eigenx-cli by providing --private-key flag or EIGENX_PRIVATE_KEY env var.");
         } else {
           this.log(
             `
@@ -106,18 +107,12 @@ Migrating key: ${address}`);
           this.log("The key may have already been removed.");
         }
       } else {
-        this.log(
-          `
-Legacy key kept in ${selectedKey.source}:${selectedKey.environment}`
-        );
-        this.log(
-          "You can delete it later using 'eigenx auth logout' if needed."
-        );
+        this.log(`
+Legacy key kept in ${selectedKey.source}:${selectedKey.environment}`);
+        this.log("You can delete it later using 'eigenx auth logout' if needed.");
       }
       this.log("");
-      this.log(
-        "Migration complete! You can now use ecloud commands without --private-key flag."
-      );
+      this.log("Migration complete! You can now use ecloud commands without --private-key flag.");
     } catch (err) {
       this.error(`Failed to migrate key: ${err.message}`);
     }

package/dist/commands/auth/migrate.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/commands/auth/migrate.ts"],"sourcesContent":["/**\n * Auth Migrate Command\n *\n * Migrate a legacy eigenx-cli key to ecloud\n */\n\nimport { Command } from \"@oclif/core\";\nimport { confirm, select } from \"@inquirer/prompts\";\nimport {\n  storePrivateKey,\n  keyExists,\n  getAddressFromPrivateKey,\n  displayWarning,\n  getLegacyKeys,\n  getLegacyPrivateKey,\n  deleteLegacyPrivateKey,\n  type LegacyKey,\n} from \"@layr-labs/ecloud-sdk\";\n\nexport default class AuthMigrate extends Command {\n  static description = \"Migrate a private key from eigenx-cli to ecloud\";\n\n  static examples = [\"<%= config.bin %> <%= command.id %>\"];\n\n  async run(): Promise<void> {\n    const legacyKeys = await getLegacyKeys();\n\n    if (legacyKeys.length === 0) {\n      this.log(\"No legacy keys found from eigenx-cli.\");\n      this.log(\"\");\n      this.log(\"To manually add a key to ecloud, use:\");\n      this.log(\"  ecloud auth login\");\n      return;\n    }\n\n    // Display found legacy keys\n    this.log(\"\\nFound legacy keys from eigenx-cli:\");\n    this.log(\"\");\n\n    for (const key of legacyKeys) {\n      this.log(`  Address: ${key.address}`);\n      this.log(`  Environment: ${key.environment}`);\n      this.log(`  Source: ${key.source}`);\n      this.log(\"\");\n    }\n\n    // Create choices for selection\n    const choices = legacyKeys.map((key) => ({\n      name: `${key.address} (${key.environment} - ${key.source})`,\n      value: key,\n    }));\n\n    const selectedKey = await select<LegacyKey>({\n      message: \"Select a key to migrate:\",\n      choices,\n    });\n\n    // Retrieve the actual private key\n    const privateKey = await getLegacyPrivateKey(\n      selectedKey.environment,\n      selectedKey.source\n    );\n\n    if (!privateKey) {\n      this.error(\n        `Failed to retrieve legacy key for ${selectedKey.environment}`\n      );\n    }\n\n    // Derive address for display\n    const address = getAddressFromPrivateKey(privateKey);\n    this.log(`\\nMigrating key: ${address}`);\n    this.log(`From: ${selectedKey.source}:${selectedKey.environment}`);\n\n    // Check if ecloud key already exists\n    const exists = await keyExists();\n\n    if (exists) {\n      this.log(\"\");\n      displayWarning([\n        \"WARNING: A private key for ecloud already exists!\",\n        \"Replacing it will cause PERMANENT DATA LOSS if not backed up.\",\n        \"The previous key will be lost forever.\",\n      ]);\n\n      const confirmReplace = await confirm({\n        message: \"Replace existing ecloud key?\",\n        default: false,\n      });\n\n      if (!confirmReplace) {\n        this.log(\"\\nMigration cancelled.\");\n        return;\n      }\n    }\n\n    // Store in ecloud keyring\n    try {\n      await storePrivateKey(privateKey);\n      this.log(\"\\n✓ Private key migrated to ecloud keyring\");\n      this.log(`✓ Address: ${address}`);\n      this.log(\n        \"\\nNote: This key will be used for all environments (mainnet, sepolia, etc.)\"\n      );\n\n      // Ask if user wants to delete the legacy key (only if save was successful)\n      this.log(\"\");\n      const confirmDelete = await confirm({\n        message: `Delete the legacy key from ${selectedKey.source}:${selectedKey.environment}?`,\n        default: false,\n      });\n\n      if (confirmDelete) {\n        const deleted = await deleteLegacyPrivateKey(\n          selectedKey.environment,\n          selectedKey.source\n        );\n\n        if (deleted) {\n          this.log(\n            `\\n✓ Legacy key deleted from ${selectedKey.source}:${selectedKey.environment}`\n          );\n          this.log(\n            \"\\nNote: The key is now only stored in ecloud. You can still use it with\"\n          );\n          this.log(\n            \"eigenx-cli by providing --private-key flag or EIGENX_PRIVATE_KEY env var.\"\n          );\n        } else {\n          this.log(\n            `\\n⚠️  Failed to delete legacy key from ${selectedKey.source}:${selectedKey.environment}`\n          );\n          this.log(\"The key may have already been removed.\");\n        }\n      } else {\n        this.log(\n          `\\nLegacy key kept in ${selectedKey.source}:${selectedKey.environment}`\n        );\n        this.log(\n          \"You can delete it later using 'eigenx auth logout' if needed.\"\n        );\n      }\n\n      this.log(\"\");\n      this.log(\n        \"Migration complete! You can now use ecloud commands without --private-key flag.\"\n      );\n    } catch (err: any) {\n      this.error(`Failed to migrate key: ${err.message}`);\n    }\n  }\n}\n"],"mappings":";;;AAMA,SAAS,eAAe;AACxB,SAAS,SAAS,cAAc;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAEP,IAAqB,cAArB,cAAyC,QAAQ;AAAA,EAC/C,OAAO,cAAc;AAAA,EAErB,OAAO,WAAW,CAAC,qCAAqC;AAAA,EAExD,MAAM,MAAqB;AACzB,UAAM,aAAa,MAAM,cAAc;AAEvC,QAAI,WAAW,WAAW,GAAG;AAC3B,WAAK,IAAI,uCAAuC;AAChD,WAAK,IAAI,EAAE;AACX,WAAK,IAAI,uCAAuC;AAChD,WAAK,IAAI,qBAAqB;AAC9B;AAAA,IACF;AAGA,SAAK,IAAI,sCAAsC;AAC/C,SAAK,IAAI,EAAE;AAEX,eAAW,OAAO,YAAY;AAC5B,WAAK,IAAI,cAAc,IAAI,OAAO,EAAE;AACpC,WAAK,IAAI,kBAAkB,IAAI,WAAW,EAAE;AAC5C,WAAK,IAAI,aAAa,IAAI,MAAM,EAAE;AAClC,WAAK,IAAI,EAAE;AAAA,IACb;AAGA,UAAM,UAAU,WAAW,IAAI,CAAC,SAAS;AAAA,MACvC,MAAM,GAAG,IAAI,OAAO,KAAK,IAAI,WAAW,MAAM,IAAI,MAAM;AAAA,MACxD,OAAO;AAAA,IACT,EAAE;AAEF,UAAM,cAAc,MAAM,OAAkB;AAAA,MAC1C,SAAS;AAAA,MACT;AAAA,IACF,CAAC;AAGD,UAAM,aAAa,MAAM;AAAA,MACvB,YAAY;AAAA,MACZ,YAAY;AAAA,IACd;AAEA,QAAI,CAAC,YAAY;AACf,WAAK;AAAA,QACH,qCAAqC,YAAY,WAAW;AAAA,MAC9D;AAAA,IACF;AAGA,UAAM,UAAU,yBAAyB,UAAU;AACnD,SAAK,IAAI;AAAA,iBAAoB,OAAO,EAAE;AACtC,SAAK,IAAI,SAAS,YAAY,MAAM,IAAI,YAAY,WAAW,EAAE;AAGjE,UAAM,SAAS,MAAM,UAAU;AAE/B,QAAI,QAAQ;AACV,WAAK,IAAI,EAAE;AACX,qBAAe;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAED,YAAM,iBAAiB,MAAM,QAAQ;AAAA,QACnC,SAAS;AAAA,QACT,SAAS;AAAA,MACX,CAAC;AAED,UAAI,CAAC,gBAAgB;AACnB,aAAK,IAAI,wBAAwB;AACjC;AAAA,MACF;AAAA,IACF;AAGA,QAAI;AACF,YAAM,gBAAgB,UAAU;AAChC,WAAK,IAAI,iDAA4C;AACrD,WAAK,IAAI,mBAAc,OAAO,EAAE;AAChC,WAAK;AAAA,QACH;AAAA,MACF;AAGA,WAAK,IAAI,EAAE;AACX,YAAM,gBAAgB,MAAM,QAAQ;AAAA,QAClC,SAAS,8BAA8B,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,QACpF,SAAS;AAAA,MACX,CAAC;AAED,UAAI,eAAe;AACjB,cAAM,UAAU,MAAM;AAAA,UACpB,YAAY;AAAA,UACZ,YAAY;AAAA,QACd;AAEA,YAAI,SAAS;AACX,eAAK;AAAA,YACH;AAAA,iCAA+B,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,UAC9E;AACA,eAAK;AAAA,YACH;AAAA,UACF;AACA,eAAK;AAAA,YACH;AAAA,UACF;AAAA,QACF,OAAO;AACL,eAAK;AAAA,YACH;AAAA,iDAA0C,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,UACzF;AACA,eAAK,IAAI,wCAAwC;AAAA,QACnD;AAAA,MACF,OAAO;AACL,aAAK;AAAA,UACH;AAAA,qBAAwB,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,QACvE;AACA,aAAK;AAAA,UACH;AAAA,QACF;AAAA,MACF;AAEA,WAAK,IAAI,EAAE;AACX,WAAK;AAAA,QACH;AAAA,MACF;AAAA,IACF,SAAS,KAAU;AACjB,WAAK,MAAM,0BAA0B,IAAI,OAAO,EAAE;AAAA,IACpD;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../src/commands/auth/migrate.ts","../../../src/utils/security.ts"],"sourcesContent":["/**\n * Auth Migrate Command\n *\n * Migrate a legacy eigenx-cli key to ecloud\n */\n\nimport { Command } from \"@oclif/core\";\nimport { confirm, select } from \"@inquirer/prompts\";\nimport {\n  storePrivateKey,\n  keyExists,\n  getAddressFromPrivateKey,\n  getLegacyKeys,\n  getLegacyPrivateKey,\n  deleteLegacyPrivateKey,\n  type LegacyKey,\n} from \"@layr-labs/ecloud-sdk\";\nimport { displayWarning } from \"../../utils/security\";\n\nexport default class AuthMigrate extends Command {\n  static description = \"Migrate a private key from eigenx-cli to ecloud\";\n\n  static examples = [\"<%= config.bin %> <%= command.id %>\"];\n\n  async run(): Promise<void> {\n    const legacyKeys = await getLegacyKeys();\n\n    if (legacyKeys.length === 0) {\n      this.log(\"No legacy keys found from eigenx-cli.\");\n      this.log(\"\");\n      this.log(\"To manually add a key to ecloud, use:\");\n      this.log(\"  ecloud auth login\");\n      return;\n    }\n\n    // Display found legacy keys\n    this.log(\"\\nFound legacy keys from eigenx-cli:\");\n    this.log(\"\");\n\n    for (const key of legacyKeys) {\n      this.log(`  Address: ${key.address}`);\n      this.log(`  Environment: ${key.environment}`);\n      this.log(`  Source: ${key.source}`);\n      this.log(\"\");\n    }\n\n    // Create choices for selection\n    const choices = legacyKeys.map((key) => ({\n      name: `${key.address} (${key.environment} - ${key.source})`,\n      value: key,\n    }));\n\n    const selectedKey = await select<LegacyKey>({\n      message: \"Select a key to migrate:\",\n      choices,\n    });\n\n    // Retrieve the actual private key\n    const privateKey = await getLegacyPrivateKey(selectedKey.environment, selectedKey.source);\n\n    if (!privateKey) {\n      this.error(`Failed to retrieve legacy key for ${selectedKey.environment}`);\n    }\n\n    // Derive address for display\n    const address = getAddressFromPrivateKey(privateKey);\n    this.log(`\\nMigrating key: ${address}`);\n    this.log(`From: ${selectedKey.source}:${selectedKey.environment}`);\n\n    // Check if ecloud key already exists\n    const exists = await keyExists();\n\n    if (exists) {\n      this.log(\"\");\n      displayWarning([\n        \"WARNING: A private key for ecloud already exists!\",\n        \"Replacing it will cause PERMANENT DATA LOSS if not backed up.\",\n        \"The previous key will be lost forever.\",\n      ]);\n\n      const confirmReplace = await confirm({\n        message: \"Replace existing ecloud key?\",\n        default: false,\n      });\n\n      if (!confirmReplace) {\n        this.log(\"\\nMigration cancelled.\");\n        return;\n      }\n    }\n\n    // Store in ecloud keyring\n    try {\n      await storePrivateKey(privateKey);\n      this.log(\"\\n✓ Private key migrated to ecloud keyring\");\n      this.log(`✓ Address: ${address}`);\n      this.log(\"\\nNote: This key will be used for all environments (mainnet, sepolia, etc.)\");\n\n      // Ask if user wants to delete the legacy key (only if save was successful)\n      this.log(\"\");\n      const confirmDelete = await confirm({\n        message: `Delete the legacy key from ${selectedKey.source}:${selectedKey.environment}?`,\n        default: false,\n      });\n\n      if (confirmDelete) {\n        const deleted = await deleteLegacyPrivateKey(selectedKey.environment, selectedKey.source);\n\n        if (deleted) {\n          this.log(`\\n✓ Legacy key deleted from ${selectedKey.source}:${selectedKey.environment}`);\n          this.log(\"\\nNote: The key is now only stored in ecloud. You can still use it with\");\n          this.log(\"eigenx-cli by providing --private-key flag or EIGENX_PRIVATE_KEY env var.\");\n        } else {\n          this.log(\n            `\\n⚠️  Failed to delete legacy key from ${selectedKey.source}:${selectedKey.environment}`,\n          );\n          this.log(\"The key may have already been removed.\");\n        }\n      } else {\n        this.log(`\\nLegacy key kept in ${selectedKey.source}:${selectedKey.environment}`);\n        this.log(\"You can delete it later using 'eigenx auth logout' if needed.\");\n      }\n\n      this.log(\"\");\n      this.log(\"Migration complete! You can now use ecloud commands without --private-key flag.\");\n    } catch (err: any) {\n      this.error(`Failed to migrate key: ${err.message}`);\n    }\n  }\n}\n","/**\n * Security utilities for CLI\n *\n * Functions for securely displaying and handling sensitive content\n * like private keys.\n */\n\nimport { spawn, execSync } from \"child_process\";\nimport { platform } from \"os\";\nimport { select, password } from \"@inquirer/prompts\";\n\n/**\n * Display sensitive content using system pager (less/more)\n * Returns true if content was displayed, false if user aborted\n */\nexport async function showPrivateKey(content: string): Promise<boolean> {\n  // Try to use system pager\n  const pager = detectPager();\n\n  if (pager) {\n    try {\n      await runPager(pager, content);\n      return true;\n    } catch (err) {\n      console.error(`Failed to run pager: ${err}`);\n      // Fall through to fallback\n    }\n  }\n\n  // No pager available - give user a choice\n  console.log(\"\\nNo pager (less/more) found on PATH.\");\n  console.log(\"For security, avoid printing private keys to the terminal.\");\n  console.log(\"\");\n\n  const choice = await select({\n    message: \"Choose an option:\",\n    choices: [\n      { name: \"Abort (recommended)\", value: \"abort\" },\n      { name: \"Print and clear screen\", value: \"print\" },\n    ],\n  });\n\n  if (choice === \"print\") {\n    console.log(content);\n    console.log(\"\");\n    console.log(\"Press Enter after you have securely saved the key.\");\n    console.log(\"The screen will be cleared...\");\n\n    // Wait for Enter\n    await password({\n      message: \"\",\n      mask: \"\",\n    });\n\n    clearTerminal();\n    return true;\n  }\n\n  return false; // User aborted\n}\n\n/**\n * Detect system pager (less or more)\n */\nfunction detectPager(): string | null {\n  // Check PAGER env var first\n  if (process.env.PAGER) {\n    const pagerEnv = process.env.PAGER.trim();\n    // Only allow simple command names without arguments or special characters\n    if (/^[a-zA-Z0-9_-]+$/.test(pagerEnv)) {\n      return pagerEnv;\n    }\n  }\n\n  // Try common pagers\n  const pagers = [\"less\", \"more\"];\n\n  for (const pagerCmd of pagers) {\n    if (commandExists(pagerCmd)) {\n      return pagerCmd;\n    }\n  }\n\n  return null;\n}\n\n/**\n * Run pager with content\n */\nfunction runPager(pager: string, content: string): Promise<void> {\n  return new Promise((resolve, reject) => {\n    const child = spawn(pager, [], {\n      stdio: [\"pipe\", \"inherit\", \"inherit\"],\n    });\n\n    child.on(\"error\", reject);\n    child.on(\"exit\", (code) => {\n      if (code === 0) {\n        resolve();\n      } else {\n        reject(new Error(`Pager exited with code ${code}`));\n      }\n    });\n\n    try {\n      const written = child.stdin!.write(content);\n      if (!written) {\n        child.stdin!.once(\"drain\", () => {\n          try {\n            child.stdin!.end();\n          } catch (err) {\n            reject(err);\n          }\n        });\n      } else {\n        child.stdin!.end();\n      }\n    } catch (err) {\n      reject(err);\n    }\n  });\n}\n\n/**\n * Check if command exists\n */\nfunction commandExists(command: string): boolean {\n  try {\n    const cmd = platform() === \"win32\" ? `where ${command}` : `which ${command}`;\n    execSync(cmd, { stdio: \"ignore\" });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Clear terminal screen\n */\nexport function clearTerminal(): void {\n  if (platform() === \"win32\") {\n    process.stdout.write(\"\\x1Bc\");\n  } else {\n    process.stdout.write(\"\\x1B[2J\\x1B[3J\\x1B[H\");\n  }\n}\n\n/**\n * Get hidden input (password-style)\n */\nexport async function getHiddenInput(message: string): Promise<string> {\n  return await password({\n    message,\n    mask: \"*\",\n  });\n}\n\n/**\n * Display multi-line warning for destructive operations\n */\nexport function displayWarning(lines: string[]): void {\n  const width = lines.length > 0 ? Math.max(...lines.map((l) => l.length)) + 4 : 4;\n  const border = \"⚠\".repeat(width);\n\n  console.log(\"\");\n  console.log(border);\n  for (const line of lines) {\n    console.log(`⚠  ${line}`);\n  }\n  console.log(border);\n  console.log(\"\");\n}\n"],"mappings":";;;AAMA,SAAS,eAAe;AACxB,SAAS,SAAS,UAAAA,eAAc;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;;;ACTP,SAAS,OAAO,gBAAgB;AAChC,SAAS,gBAAgB;AACzB,SAAS,QAAQ,gBAAgB;AAuJ1B,SAAS,eAAe,OAAuB;AACpD,QAAM,QAAQ,MAAM,SAAS,IAAI,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI;AAC/E,QAAM,SAAS,SAAI,OAAO,KAAK;AAE/B,UAAQ,IAAI,EAAE;AACd,UAAQ,IAAI,MAAM;AAClB,aAAW,QAAQ,OAAO;AACxB,YAAQ,IAAI,WAAM,IAAI,EAAE;AAAA,EAC1B;AACA,UAAQ,IAAI,MAAM;AAClB,UAAQ,IAAI,EAAE;AAChB;;;ADxJA,IAAqB,cAArB,cAAyC,QAAQ;AAAA,EAC/C,OAAO,cAAc;AAAA,EAErB,OAAO,WAAW,CAAC,qCAAqC;AAAA,EAExD,MAAM,MAAqB;AACzB,UAAM,aAAa,MAAM,cAAc;AAEvC,QAAI,WAAW,WAAW,GAAG;AAC3B,WAAK,IAAI,uCAAuC;AAChD,WAAK,IAAI,EAAE;AACX,WAAK,IAAI,uCAAuC;AAChD,WAAK,IAAI,qBAAqB;AAC9B;AAAA,IACF;AAGA,SAAK,IAAI,sCAAsC;AAC/C,SAAK,IAAI,EAAE;AAEX,eAAW,OAAO,YAAY;AAC5B,WAAK,IAAI,cAAc,IAAI,OAAO,EAAE;AACpC,WAAK,IAAI,kBAAkB,IAAI,WAAW,EAAE;AAC5C,WAAK,IAAI,aAAa,IAAI,MAAM,EAAE;AAClC,WAAK,IAAI,EAAE;AAAA,IACb;AAGA,UAAM,UAAU,WAAW,IAAI,CAAC,SAAS;AAAA,MACvC,MAAM,GAAG,IAAI,OAAO,KAAK,IAAI,WAAW,MAAM,IAAI,MAAM;AAAA,MACxD,OAAO;AAAA,IACT,EAAE;AAEF,UAAM,cAAc,MAAMC,QAAkB;AAAA,MAC1C,SAAS;AAAA,MACT;AAAA,IACF,CAAC;AAGD,UAAM,aAAa,MAAM,oBAAoB,YAAY,aAAa,YAAY,MAAM;AAExF,QAAI,CAAC,YAAY;AACf,WAAK,MAAM,qCAAqC,YAAY,WAAW,EAAE;AAAA,IAC3E;AAGA,UAAM,UAAU,yBAAyB,UAAU;AACnD,SAAK,IAAI;AAAA,iBAAoB,OAAO,EAAE;AACtC,SAAK,IAAI,SAAS,YAAY,MAAM,IAAI,YAAY,WAAW,EAAE;AAGjE,UAAM,SAAS,MAAM,UAAU;AAE/B,QAAI,QAAQ;AACV,WAAK,IAAI,EAAE;AACX,qBAAe;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAED,YAAM,iBAAiB,MAAM,QAAQ;AAAA,QACnC,SAAS;AAAA,QACT,SAAS;AAAA,MACX,CAAC;AAED,UAAI,CAAC,gBAAgB;AACnB,aAAK,IAAI,wBAAwB;AACjC;AAAA,MACF;AAAA,IACF;AAGA,QAAI;AACF,YAAM,gBAAgB,UAAU;AAChC,WAAK,IAAI,iDAA4C;AACrD,WAAK,IAAI,mBAAc,OAAO,EAAE;AAChC,WAAK,IAAI,6EAA6E;AAGtF,WAAK,IAAI,EAAE;AACX,YAAM,gBAAgB,MAAM,QAAQ;AAAA,QAClC,SAAS,8BAA8B,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,QACpF,SAAS;AAAA,MACX,CAAC;AAED,UAAI,eAAe;AACjB,cAAM,UAAU,MAAM,uBAAuB,YAAY,aAAa,YAAY,MAAM;AAExF,YAAI,SAAS;AACX,eAAK,IAAI;AAAA,iCAA+B,YAAY,MAAM,IAAI,YAAY,WAAW,EAAE;AACvF,eAAK,IAAI,yEAAyE;AAClF,eAAK,IAAI,2EAA2E;AAAA,QACtF,OAAO;AACL,eAAK;AAAA,YACH;AAAA,iDAA0C,YAAY,MAAM,IAAI,YAAY,WAAW;AAAA,UACzF;AACA,eAAK,IAAI,wCAAwC;AAAA,QACnD;AAAA,MACF,OAAO;AACL,aAAK,IAAI;AAAA,qBAAwB,YAAY,MAAM,IAAI,YAAY,WAAW,EAAE;AAChF,aAAK,IAAI,+DAA+D;AAAA,MAC1E;AAEA,WAAK,IAAI,EAAE;AACX,WAAK,IAAI,iFAAiF;AAAA,IAC5F,SAAS,KAAU;AACjB,WAAK,MAAM,0BAA0B,IAAI,OAAO,EAAE;AAAA,IACpD;AAAA,EACF;AACF;","names":["select","select"]}