@ldgr/cli 0.5.0 → 0.5.1

package/README.md

@@ -1,6 +1,15 @@
 # @ldgr/cli
 
-LDGR's self-custody terminal wallet. Version 0.5.0 creates or imports local wallets, lets you select between them, shows addresses and balances, sends native Ledra or a token, and persistently switches the selected wallet between mainnet and testnet. It also reviews prepared MCP requests for transfers, token creation and escrow creation in a separate interactive terminal.
+LDGR's self-custody terminal wallet. Version 0.5.1 creates or imports local wallets, lets you select between them, shows addresses and balances, sends native Ledra or a token, and persistently switches the selected wallet between mainnet and testnet. It also reviews prepared MCP requests for transfers, token creation and escrow creation in a separate interactive terminal.
+
+The MCP launcher uses `ldgr mcp --stdin` with a UTF-8 JSON envelope for
+`wallet-info` and `save-request`. Envelopes are limited to 128 KiB. Public wallet
+metadata or the saved request path and approval arguments are returned as JSON;
+failures return a redacted error code and exit status 1. These machine operations
+do not migrate or unlock wallets. `ldgr mcp <base64url-envelope>` also supports an
+allowlisted `command` envelope for interactive wallet setup and approval in the
+user's terminal. Recovery-key values and passphrases must never be included in
+an envelope; interactive secrets remain local terminal prompts.
 
 ```bash
 npm install -g @ldgr/cli

package/dist/cli.js

@@ -644,9 +644,97 @@ async function approveMcpRequest(requestPath, walletPath, options = {}) {
   }
 }
 
+// src/mcp-bridge.ts
+var MAX_BYTES = 128 * 1024;
+function commandArgs(input) {
+  if (!Array.isArray(input) || input.some((value) => typeof value !== "string" || !value || /[\x00-\x1f\x7f-\x9f\p{Cf}\u2028\u2029]/u.test(value)))
+    throw new TypeError("Invalid arguments");
+  const positional = [];
+  let testnet = false, wallet = false;
+  for (let index = 0;index < input.length; index++) {
+    const value = input[index];
+    if (value === "--wallet") {
+      if (wallet || !input[index + 1] || input[index + 1].startsWith("-"))
+        throw new TypeError("Invalid wallet path");
+      wallet = true;
+      index++;
+    } else if (value === "--testnet") {
+      if (testnet)
+        throw new TypeError("Repeated network flag");
+      testnet = true;
+    } else if (value.startsWith("-"))
+      throw new TypeError("Unsupported option");
+    else
+      positional.push(value);
+  }
+  const [first, second, third] = positional;
+  const creation = first === "wallet" && (second === "create" || second === "import");
+  if (testnet && !creation)
+    throw new TypeError("Invalid network flag");
+  const valid = first === "wallet" && second === "create" && positional.length === 2 || first === "wallet" && second === "import" && (positional.length === 2 || positional.length === 3) || first === "wallet" && second === "list" && positional.length === 2 || first === "wallet" && second === "select" && positional.length === 3 && /^[0-9]+$/.test(third) || first === "approve" && positional.length === 2 || first === "address" && positional.length === 1 || first === "network" && second === "show" && positional.length === 2 || first === "network" && second === "set" && positional.length === 3 && (third === "mainnet" || third === "testnet");
+  if (!valid)
+    throw new TypeError("Unsupported command");
+  return [...input];
+}
+function envelope(bytes, machineOnly) {
+  if (bytes.length > MAX_BYTES)
+    throw new TypeError("Envelope too large");
+  const value = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
+  if (!value || typeof value !== "object" || Array.isArray(value))
+    throw new TypeError("Invalid envelope");
+  const keys = value.operation === "wallet-info" ? ["operation", "walletPath"] : value.operation === "save-request" ? ["operation", "walletPath", "directory", "request"] : value.operation === "command" && !machineOnly ? ["operation", "args"] : [];
+  if (!keys.length || Object.keys(value).some((key) => !keys.includes(key)))
+    throw new TypeError("Unsupported envelope");
+  for (const key of ["walletPath", "directory"]) {
+    if (key in value && (typeof value[key] !== "string" || !value[key].trim() || /[\x00-\x1f\x7f-\x9f\p{Cf}\u2028\u2029]/u.test(value[key])))
+      throw new TypeError("Invalid path");
+  }
+  if (value.operation === "command")
+    value.args = commandArgs(value.args);
+  return value;
+}
+async function readEnvelope(argument) {
+  if (argument === "--stdin") {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of process.stdin) {
+      const bytes = Buffer.from(chunk);
+      size += bytes.length;
+      if (size > MAX_BYTES)
+        throw new TypeError("Envelope too large");
+      chunks.push(bytes);
+    }
+    return envelope(Buffer.concat(chunks), true);
+  }
+  if (argument.length > Math.ceil(MAX_BYTES * 4 / 3) || !/^[A-Za-z0-9_-]+$/.test(argument))
+    throw new TypeError("Invalid encoding");
+  const bytes = Buffer.from(argument, "base64url");
+  if (bytes.toString("base64url") !== argument)
+    throw new TypeError("Invalid encoding");
+  return envelope(bytes, false);
+}
+async function runMcpBridge(args) {
+  try {
+    if (args.length !== 1)
+      throw new TypeError("Expected one envelope");
+    const request = await readEnvelope(args[0]);
+    if (request.operation === "command")
+      return request.args;
+    const result = request.operation === "wallet-info" ? await getMcpWalletInfo(request.walletPath) : await saveMcpRequest(validateMcpRequest(request.request), { walletPath: request.walletPath, directory: request.directory });
+    process.stdout.write(JSON.stringify(result) + `
+`);
+  } catch (error) {
+    const code = error instanceof TypeError && error.message === "Request network does not match the selected CLI wallet" ? "WALLET_NETWORK_MISMATCH" : error instanceof Error && error.message.startsWith("Wallet file not found: ") ? "WALLET_NOT_FOUND" : "OPERATION_FAILED";
+    process.stdout.write(JSON.stringify({ error: { code } }) + `
+`);
+    process.exitCode = 1;
+  }
+  return;
+}
+
 // src/cli.ts
 var HELP = `
-LDGR CLI 0.5.0 — self-custody wallet
+LDGR CLI 0.5.1 — self-custody wallet
 
 Usage:
   ldgr wallet create [--testnet] [--wallet <path>]
@@ -937,9 +1025,16 @@ ${file.address}`, "Selected network");
   p2.outro(`${target} address: ${switched.address}`);
 }
 async function main() {
+  let argv = process.argv.slice(2);
+  if (argv[0] === "mcp") {
+    const command = await runMcpBridge(argv.slice(1));
+    if (!command)
+      return;
+    argv = command;
+  }
   let parsed;
   try {
-    parsed = parseArguments(process.argv.slice(2));
+    parsed = parseArguments(argv);
   } catch (error) {
     process.stderr.write(`Error: ${error instanceof Error ? error.message : String(error)}
 `);

package/dist/mcp-bridge.d.ts

@@ -0,0 +1,2 @@
+/** Machine operations do not migrate, unlock, sign, or emit terminal UI. */
+export declare function runMcpBridge(args: readonly string[]): Promise<readonly string[] | undefined>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ldgr/cli",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "type": "module",
   "bin": {
     "ldgr": "dist/cli.js"