@moonpay/cli 0.3.10 → 0.4.0

package/dist/chains-R754DQM5.js

@@ -0,0 +1,13 @@
+import { createRequire as __createRequire } from "module"; const require = __createRequire(import.meta.url);
+import {
+  derivationPath,
+  deriveAllAddresses,
+  deriveKeyForChain
+} from "./chunk-Z33PSOPD.js";
+import "./chunk-EEBB5MQP.js";
+export {
+  derivationPath,
+  deriveAllAddresses,
+  deriveKeyForChain
+};
+//# sourceMappingURL=chains-R754DQM5.js.map

package/dist/chains-R754DQM5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/chunk-AGDVU2O5.js

@@ -0,0 +1,168 @@
+import { createRequire as __createRequire } from "module"; const require = __createRequire(import.meta.url);
+
+// src/tools/wallet/server.ts
+import {
+  readFileSync,
+  readdirSync,
+  writeFileSync,
+  mkdirSync,
+  existsSync,
+  renameSync,
+  unlinkSync
+} from "fs";
+import { join, resolve } from "path";
+import { homedir } from "os";
+import { randomBytes } from "crypto";
+
+// src/tools/wallet/models.ts
+import { z } from "zod";
+var chainSchema = z.enum([
+  "solana",
+  "ethereum",
+  "base",
+  "arbitrum",
+  "polygon",
+  "optimism",
+  "bnb",
+  "avalanche",
+  "bitcoin",
+  "tron"
+]);
+var keyChainSchema = z.enum(["solana", "ethereum", "bitcoin", "tron"]);
+var KEY_CHAIN_MAP = {
+  solana: "solana",
+  ethereum: "ethereum",
+  base: "ethereum",
+  arbitrum: "ethereum",
+  polygon: "ethereum",
+  optimism: "ethereum",
+  bnb: "ethereum",
+  avalanche: "ethereum",
+  bitcoin: "bitcoin",
+  tron: "tron"
+};
+var hdVaultEntrySchema = z.object({
+  id: z.string(),
+  type: z.literal("hd"),
+  mnemonic: z.string()
+});
+var importedVaultEntrySchema = z.object({
+  id: z.string(),
+  type: z.literal("imported"),
+  chain: keyChainSchema,
+  privateKey: z.string()
+});
+var vaultEntrySchema = z.discriminatedUnion("type", [
+  hdVaultEntrySchema,
+  importedVaultEntrySchema
+]);
+var vaultDataSchema = z.object({
+  version: z.literal(1),
+  entries: z.record(z.string(), vaultEntrySchema)
+});
+var lockedVaultDataSchema = z.object({
+  version: z.literal(1),
+  locked: z.literal(true),
+  ciphertext: z.string(),
+  iv: z.string(),
+  salt: z.string(),
+  tag: z.string()
+});
+var walletMetadataSchema = z.object({
+  name: z.string(),
+  type: z.enum(["hd", "imported"]),
+  vaultRef: z.string(),
+  account: z.number().int().min(0).default(0),
+  addresses: z.record(keyChainSchema, z.string()),
+  createdAt: z.string()
+});
+var walletInfoSchema = walletMetadataSchema;
+
+// src/tools/wallet/server.ts
+var CONFIG_DIR = join(homedir(), ".config", "moonpay");
+var WALLETS_DIR = join(CONFIG_DIR, "wallets");
+function validateWalletName(name) {
+  if (!name || /[/\\]/.test(name) || name.includes("..") || name.includes("\0")) {
+    throw new Error(`Invalid wallet name: "${name}"`);
+  }
+  const resolved = resolve(WALLETS_DIR, `${name}.json`);
+  if (!resolved.startsWith(WALLETS_DIR + "/")) {
+    throw new Error(`Invalid wallet name: "${name}"`);
+  }
+}
+function ensureWalletsDir() {
+  mkdirSync(WALLETS_DIR, { recursive: true, mode: 448 });
+}
+function getWalletPath(name) {
+  validateWalletName(name);
+  return join(WALLETS_DIR, `${name}.json`);
+}
+function getWalletsDir() {
+  return WALLETS_DIR;
+}
+function saveWalletMetadata(metadata) {
+  ensureWalletsDir();
+  const filePath = getWalletPath(metadata.name);
+  if (existsSync(filePath)) {
+    throw new Error(`Wallet "${metadata.name}" already exists`);
+  }
+  const safeName = metadata.name.replace(/[^a-zA-Z0-9_-]/g, "_");
+  const tmpPath = join(
+    WALLETS_DIR,
+    `.${safeName}.${randomBytes(4).toString("hex")}.tmp`
+  );
+  writeFileSync(tmpPath, JSON.stringify(metadata, null, 2), { mode: 384 });
+  renameSync(tmpPath, filePath);
+}
+function loadWallet(nameOrAddress) {
+  ensureWalletsDir();
+  const files = readdirSync(WALLETS_DIR).filter(
+    (f) => f.endsWith(".json") && !f.startsWith(".")
+  );
+  for (const file of files) {
+    const raw = JSON.parse(readFileSync(join(WALLETS_DIR, file), "utf-8"));
+    const result = walletMetadataSchema.safeParse(raw);
+    if (!result.success) continue;
+    const wallet = result.data;
+    if (wallet.name === nameOrAddress) return wallet;
+    for (const address of Object.values(wallet.addresses)) {
+      if (address === nameOrAddress) return wallet;
+    }
+  }
+  throw new Error(`Wallet "${nameOrAddress}" not found`);
+}
+function loadAllWallets() {
+  ensureWalletsDir();
+  const dir = getWalletsDir();
+  const files = readdirSync(dir).filter(
+    (f) => f.endsWith(".json") && !f.startsWith(".")
+  );
+  const wallets = [];
+  for (const f of files) {
+    const raw = JSON.parse(readFileSync(join(dir, f), "utf-8"));
+    const result = walletMetadataSchema.safeParse(raw);
+    if (result.success) wallets.push(result.data);
+  }
+  return wallets;
+}
+function deleteWalletFile(name) {
+  const filePath = getWalletPath(name);
+  unlinkSync(filePath);
+}
+
+export {
+  chainSchema,
+  keyChainSchema,
+  KEY_CHAIN_MAP,
+  vaultDataSchema,
+  lockedVaultDataSchema,
+  walletInfoSchema,
+  ensureWalletsDir,
+  getWalletPath,
+  getWalletsDir,
+  saveWalletMetadata,
+  loadWallet,
+  loadAllWallets,
+  deleteWalletFile
+};
+//# sourceMappingURL=chunk-AGDVU2O5.js.map

package/dist/chunk-AGDVU2O5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/tools/wallet/server.ts","../src/tools/wallet/models.ts"],"sourcesContent":["import {\n  readFileSync,\n  readdirSync,\n  writeFileSync,\n  mkdirSync,\n  existsSync,\n  renameSync,\n  unlinkSync,\n} from \"node:fs\";\nimport { join, resolve } from \"node:path\";\nimport { homedir } from \"node:os\";\nimport { randomBytes } from \"node:crypto\";\nimport {\n  walletMetadataSchema,\n  type WalletMetadata,\n  type WalletInfo,\n} from \"./models\";\n\nexport type { WalletMetadata, WalletInfo };\n\nconst CONFIG_DIR = join(homedir(), \".config\", \"moonpay\");\nconst WALLETS_DIR = join(CONFIG_DIR, \"wallets\");\n\n/**\n * Validate a wallet name to prevent path traversal.\n */\nfunction validateWalletName(name: string): void {\n  if (\n    !name ||\n    /[/\\\\]/.test(name) ||\n    name.includes(\"..\") ||\n    name.includes(\"\\0\")\n  ) {\n    throw new Error(`Invalid wallet name: \"${name}\"`);\n  }\n  const resolved = resolve(WALLETS_DIR, `${name}.json`);\n  if (!resolved.startsWith(WALLETS_DIR + \"/\")) {\n    throw new Error(`Invalid wallet name: \"${name}\"`);\n  }\n}\n\nexport function ensureWalletsDir(): void {\n  mkdirSync(WALLETS_DIR, { recursive: true, mode: 0o700 });\n}\n\nexport function getWalletPath(name: string): string {\n  validateWalletName(name);\n  return join(WALLETS_DIR, `${name}.json`);\n}\n\nexport function getWalletsDir(): string {\n  return WALLETS_DIR;\n}\n\n/**\n * Save wallet metadata (no secrets — those go in the vault).\n */\nexport function saveWalletMetadata(metadata: WalletMetadata): void {\n  ensureWalletsDir();\n  const filePath = getWalletPath(metadata.name);\n  if (existsSync(filePath)) {\n    throw new Error(`Wallet \"${metadata.name}\" already exists`);\n  }\n  const safeName = metadata.name.replace(/[^a-zA-Z0-9_-]/g, \"_\");\n  const tmpPath = join(\n    WALLETS_DIR,\n    `.${safeName}.${randomBytes(4).toString(\"hex\")}.tmp`,\n  );\n  writeFileSync(tmpPath, JSON.stringify(metadata, null, 2), { mode: 0o600 });\n  renameSync(tmpPath, filePath);\n}\n\n/**\n * Load wallet metadata by name or by any address.\n */\nexport function loadWallet(nameOrAddress: string): WalletMetadata {\n  ensureWalletsDir();\n  const files = readdirSync(WALLETS_DIR).filter(\n    (f) => f.endsWith(\".json\") && !f.startsWith(\".\"),\n  );\n  for (const file of files) {\n    const raw = JSON.parse(readFileSync(join(WALLETS_DIR, file), \"utf-8\"));\n    const result = walletMetadataSchema.safeParse(raw);\n    if (!result.success) continue;\n    const wallet = result.data;\n\n    // Match by name\n    if (wallet.name === nameOrAddress) return wallet;\n\n    // Match by any address\n    for (const address of Object.values(wallet.addresses)) {\n      if (address === nameOrAddress) return wallet;\n    }\n  }\n\n  throw new Error(`Wallet \"${nameOrAddress}\" not found`);\n}\n\n/**\n * Load all wallet metadata files.\n */\nexport function loadAllWallets(): WalletMetadata[] {\n  ensureWalletsDir();\n  const dir = getWalletsDir();\n  const files = readdirSync(dir).filter(\n    (f) => f.endsWith(\".json\") && !f.startsWith(\".\"),\n  );\n  const wallets: WalletMetadata[] = [];\n  for (const f of files) {\n    const raw = JSON.parse(readFileSync(join(dir, f), \"utf-8\"));\n    const result = walletMetadataSchema.safeParse(raw);\n    if (result.success) wallets.push(result.data);\n  }\n  return wallets;\n}\n\n/**\n * Delete a wallet metadata file by name.\n */\nexport function deleteWalletFile(name: string): void {\n  const filePath = getWalletPath(name);\n  unlinkSync(filePath);\n}\n","import { z } from \"zod\";\n\n// ── Chain types ─────────────────────────────────────────────\n\n/** All chains the user can specify in CLI commands */\nexport const chainSchema = z.enum([\n  \"solana\",\n  \"ethereum\",\n  \"base\",\n  \"arbitrum\",\n  \"polygon\",\n  \"optimism\",\n  \"bnb\",\n  \"avalanche\",\n  \"bitcoin\",\n  \"tron\",\n]);\nexport type Chain = z.infer<typeof chainSchema>;\n\n/** Key-derivation chains — EVM chains share one key */\nexport const keyChainSchema = z.enum([\"solana\", \"ethereum\", \"bitcoin\", \"tron\"]);\nexport type KeyChain = z.infer<typeof keyChainSchema>;\n\n/** Maps a user-facing chain to its key-derivation chain */\nexport const KEY_CHAIN_MAP: Record<Chain, KeyChain> = {\n  solana: \"solana\",\n  ethereum: \"ethereum\",\n  base: \"ethereum\",\n  arbitrum: \"ethereum\",\n  polygon: \"ethereum\",\n  optimism: \"ethereum\",\n  bnb: \"ethereum\",\n  avalanche: \"ethereum\",\n  bitcoin: \"bitcoin\",\n  tron: \"tron\",\n};\n\nexport const ALL_KEY_CHAINS: KeyChain[] = [\"solana\", \"ethereum\", \"bitcoin\", \"tron\"];\n\n// ── Vault schemas ───────────────────────────────────────────\n\nexport const hdVaultEntrySchema = z.object({\n  id: z.string(),\n  type: z.literal(\"hd\"),\n  mnemonic: z.string(),\n});\nexport type HdVaultEntry = z.infer<typeof hdVaultEntrySchema>;\n\nexport const importedVaultEntrySchema = z.object({\n  id: z.string(),\n  type: z.literal(\"imported\"),\n  chain: keyChainSchema,\n  privateKey: z.string(),\n});\nexport type ImportedVaultEntry = z.infer<typeof importedVaultEntrySchema>;\n\nexport const vaultEntrySchema = z.discriminatedUnion(\"type\", [\n  hdVaultEntrySchema,\n  importedVaultEntrySchema,\n]);\nexport type VaultEntry = z.infer<typeof vaultEntrySchema>;\n\nexport const vaultDataSchema = z.object({\n  version: z.literal(1),\n  entries: z.record(z.string(), vaultEntrySchema),\n});\nexport type VaultData = z.infer<typeof vaultDataSchema>;\n\nexport const lockedVaultDataSchema = z.object({\n  version: z.literal(1),\n  locked: z.literal(true),\n  ciphertext: z.string(),\n  iv: z.string(),\n  salt: z.string(),\n  tag: z.string(),\n});\nexport type LockedVaultData = z.infer<typeof lockedVaultDataSchema>;\n\n// ── Wallet metadata schemas ─────────────────────────────────\n\nexport const walletMetadataSchema = z.object({\n  name: z.string(),\n  type: z.enum([\"hd\", \"imported\"]),\n  vaultRef: z.string(),\n  account: z.number().int().min(0).default(0),\n  addresses: z.record(keyChainSchema, z.string()),\n  createdAt: z.string(),\n});\nexport type WalletMetadata = z.infer<typeof walletMetadataSchema>;\n\n/** Safe for display — same as metadata (no secrets stored in metadata) */\nexport const walletInfoSchema = walletMetadataSchema;\nexport type WalletInfo = z.infer<typeof walletInfoSchema>;\n"],"mappings":";;;AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,MAAM,eAAe;AAC9B,SAAS,eAAe;AACxB,SAAS,mBAAmB;;;ACX5B,SAAS,SAAS;AAKX,IAAM,cAAc,EAAE,KAAK;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAIM,IAAM,iBAAiB,EAAE,KAAK,CAAC,UAAU,YAAY,WAAW,MAAM,CAAC;AAIvE,IAAM,gBAAyC;AAAA,EACpD,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,MAAM;AAAA,EACN,UAAU;AAAA,EACV,SAAS;AAAA,EACT,UAAU;AAAA,EACV,KAAK;AAAA,EACL,WAAW;AAAA,EACX,SAAS;AAAA,EACT,MAAM;AACR;AAMO,IAAM,qBAAqB,EAAE,OAAO;AAAA,EACzC,IAAI,EAAE,OAAO;AAAA,EACb,MAAM,EAAE,QAAQ,IAAI;AAAA,EACpB,UAAU,EAAE,OAAO;AACrB,CAAC;AAGM,IAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,IAAI,EAAE,OAAO;AAAA,EACb,MAAM,EAAE,QAAQ,UAAU;AAAA,EAC1B,OAAO;AAAA,EACP,YAAY,EAAE,OAAO;AACvB,CAAC;AAGM,IAAM,mBAAmB,EAAE,mBAAmB,QAAQ;AAAA,EAC3D;AAAA,EACA;AACF,CAAC;AAGM,IAAM,kBAAkB,EAAE,OAAO;AAAA,EACtC,SAAS,EAAE,QAAQ,CAAC;AAAA,EACpB,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,gBAAgB;AAChD,CAAC;AAGM,IAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,SAAS,EAAE,QAAQ,CAAC;AAAA,EACpB,QAAQ,EAAE,QAAQ,IAAI;AAAA,EACtB,YAAY,EAAE,OAAO;AAAA,EACrB,IAAI,EAAE,OAAO;AAAA,EACb,MAAM,EAAE,OAAO;AAAA,EACf,KAAK,EAAE,OAAO;AAChB,CAAC;AAKM,IAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,MAAM,EAAE,OAAO;AAAA,EACf,MAAM,EAAE,KAAK,CAAC,MAAM,UAAU,CAAC;AAAA,EAC/B,UAAU,EAAE,OAAO;AAAA,EACnB,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EAC1C,WAAW,EAAE,OAAO,gBAAgB,EAAE,OAAO,CAAC;AAAA,EAC9C,WAAW,EAAE,OAAO;AACtB,CAAC;AAIM,IAAM,mBAAmB;;;ADvEhC,IAAM,aAAa,KAAK,QAAQ,GAAG,WAAW,SAAS;AACvD,IAAM,cAAc,KAAK,YAAY,SAAS;AAK9C,SAAS,mBAAmB,MAAoB;AAC9C,MACE,CAAC,QACD,QAAQ,KAAK,IAAI,KACjB,KAAK,SAAS,IAAI,KAClB,KAAK,SAAS,IAAI,GAClB;AACA,UAAM,IAAI,MAAM,yBAAyB,IAAI,GAAG;AAAA,EAClD;AACA,QAAM,WAAW,QAAQ,aAAa,GAAG,IAAI,OAAO;AACpD,MAAI,CAAC,SAAS,WAAW,cAAc,GAAG,GAAG;AAC3C,UAAM,IAAI,MAAM,yBAAyB,IAAI,GAAG;AAAA,EAClD;AACF;AAEO,SAAS,mBAAyB;AACvC,YAAU,aAAa,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACzD;AAEO,SAAS,cAAc,MAAsB;AAClD,qBAAmB,IAAI;AACvB,SAAO,KAAK,aAAa,GAAG,IAAI,OAAO;AACzC;AAEO,SAAS,gBAAwB;AACtC,SAAO;AACT;AAKO,SAAS,mBAAmB,UAAgC;AACjE,mBAAiB;AACjB,QAAM,WAAW,cAAc,SAAS,IAAI;AAC5C,MAAI,WAAW,QAAQ,GAAG;AACxB,UAAM,IAAI,MAAM,WAAW,SAAS,IAAI,kBAAkB;AAAA,EAC5D;AACA,QAAM,WAAW,SAAS,KAAK,QAAQ,mBAAmB,GAAG;AAC7D,QAAM,UAAU;AAAA,IACd;AAAA,IACA,IAAI,QAAQ,IAAI,YAAY,CAAC,EAAE,SAAS,KAAK,CAAC;AAAA,EAChD;AACA,gBAAc,SAAS,KAAK,UAAU,UAAU,MAAM,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AACzE,aAAW,SAAS,QAAQ;AAC9B;AAKO,SAAS,WAAW,eAAuC;AAChE,mBAAiB;AACjB,QAAM,QAAQ,YAAY,WAAW,EAAE;AAAA,IACrC,CAAC,MAAM,EAAE,SAAS,OAAO,KAAK,CAAC,EAAE,WAAW,GAAG;AAAA,EACjD;AACA,aAAW,QAAQ,OAAO;AACxB,UAAM,MAAM,KAAK,MAAM,aAAa,KAAK,aAAa,IAAI,GAAG,OAAO,CAAC;AACrE,UAAM,SAAS,qBAAqB,UAAU,GAAG;AACjD,QAAI,CAAC,OAAO,QAAS;AACrB,UAAM,SAAS,OAAO;AAGtB,QAAI,OAAO,SAAS,cAAe,QAAO;AAG1C,eAAW,WAAW,OAAO,OAAO,OAAO,SAAS,GAAG;AACrD,UAAI,YAAY,cAAe,QAAO;AAAA,IACxC;AAAA,EACF;AAEA,QAAM,IAAI,MAAM,WAAW,aAAa,aAAa;AACvD;AAKO,SAAS,iBAAmC;AACjD,mBAAiB;AACjB,QAAM,MAAM,cAAc;AAC1B,QAAM,QAAQ,YAAY,GAAG,EAAE;AAAA,IAC7B,CAAC,MAAM,EAAE,SAAS,OAAO,KAAK,CAAC,EAAE,WAAW,GAAG;AAAA,EACjD;AACA,QAAM,UAA4B,CAAC;AACnC,aAAW,KAAK,OAAO;AACrB,UAAM,MAAM,KAAK,MAAM,aAAa,KAAK,KAAK,CAAC,GAAG,OAAO,CAAC;AAC1D,UAAM,SAAS,qBAAqB,UAAU,GAAG;AACjD,QAAI,OAAO,QAAS,SAAQ,KAAK,OAAO,IAAI;AAAA,EAC9C;AACA,SAAO;AACT;AAKO,SAAS,iBAAiB,MAAoB;AACnD,QAAM,WAAW,cAAc,IAAI;AACnC,aAAW,QAAQ;AACrB;","names":[]}

package/dist/chunk-EEBB5MQP.js

@@ -0,0 +1,12 @@
+import { createRequire as __createRequire } from "module"; const require = __createRequire(import.meta.url);
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+
+export {
+  __require
+};
+//# sourceMappingURL=chunk-EEBB5MQP.js.map

package/dist/chunk-EEBB5MQP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}