@obolos_tech/cli 0.3.3 → 0.5.0

package/dist/runtime/payment.js

@@ -0,0 +1,91 @@
+/**
+ * x402 payment handling — sign EIP-3009 TransferWithAuthorization for a
+ * 402 challenge and retry the original request. Supports v1 "exact" scheme
+ * and v2 "x402x-router-settlement" (atomic fee split).
+ *
+ * Extracted from cmdCall so the CLI `call` command and any MCP adapter
+ * share the same flow.
+ */
+import { getClients, USDC_BASE } from './wallet.js';
+import { paymentError } from './errors.js';
+export async function callWithPayment(config, apiId, opts = {}) {
+    const method = (opts.method ?? 'GET').toUpperCase();
+    const url = `${config.apiUrl}/api/proxy/${encodeURIComponent(apiId)}`;
+    const fetchOpts = { method };
+    if (opts.body !== undefined && method !== 'GET') {
+        fetchOpts.headers = { 'Content-Type': 'application/json' };
+        fetchOpts.body = JSON.stringify(opts.body);
+    }
+    let res = await fetch(url, fetchOpts);
+    let paid = false;
+    if (res.status === 402) {
+        if (!config.privateKey) {
+            throw paymentError('API requires payment but no wallet is configured. Run `obolos setup`.');
+        }
+        const paymentInfo = await res.json();
+        const { header, value } = await signX402(config, paymentInfo);
+        res = await fetch(url, { ...fetchOpts, headers: { ...(fetchOpts.headers || {}), [header]: value } });
+        paid = true;
+    }
+    const contentType = res.headers.get('content-type') || '';
+    const body = contentType.includes('json') ? await res.json() : await res.text();
+    return { status: res.status, statusText: res.statusText, contentType, body, paid };
+}
+async function signX402(config, paymentInfo) {
+    const { keccak256, encodePacked } = await import('viem');
+    const { account, walletClient } = await getClients(config);
+    const accepts = paymentInfo.accepts?.[0];
+    if (!accepts)
+        throw paymentError('No payment options in 402 response');
+    const amount = BigInt(accepts.maxAmountRequired || accepts.amount || '0');
+    const payTo = accepts.payTo;
+    const asset = (accepts.asset || USDC_BASE);
+    const scheme = accepts.scheme || 'exact';
+    const rawNetwork = accepts.network || 'base';
+    const network = rawNetwork.startsWith('eip155:') ? rawNetwork : 'eip155:8453';
+    const deadline = BigInt(Math.floor(Date.now() / 1000) + 300);
+    const domain = {
+        name: accepts.extra?.name || 'USD Coin',
+        version: accepts.extra?.version || '2',
+        chainId: 8453n,
+        verifyingContract: asset,
+    };
+    const types = {
+        TransferWithAuthorization: [
+            { name: 'from', type: 'address' }, { name: 'to', type: 'address' },
+            { name: 'value', type: 'uint256' }, { name: 'validAfter', type: 'uint256' },
+            { name: 'validBefore', type: 'uint256' }, { name: 'nonce', type: 'bytes32' },
+        ],
+    };
+    const settlementKey = 'x402x-router-settlement';
+    const settlementExt = accepts.extra?.[settlementKey];
+    const settlementInfo = settlementExt?.info;
+    let nonce;
+    if (settlementInfo?.settlementRouter && settlementInfo?.salt) {
+        nonce = keccak256(encodePacked(['string', 'uint256', 'address', 'address', 'address', 'uint256', 'uint256', 'uint256', 'bytes32', 'address', 'uint256', 'address', 'bytes32'], ['X402/settle/v1', 8453n, settlementInfo.settlementRouter, asset,
+            account.address, amount, 0n, deadline, settlementInfo.salt,
+            (settlementInfo.finalPayTo || payTo), BigInt(settlementInfo.facilitatorFee || '0'),
+            settlementInfo.hook, keccak256(settlementInfo.hookData)]));
+    }
+    else {
+        const bytes = new Uint8Array(32);
+        crypto.getRandomValues(bytes);
+        nonce = `0x${Array.from(bytes).map(b => b.toString(16).padStart(2, '0')).join('')}`;
+    }
+    const signature = await walletClient.signTypedData({
+        account, domain, types, primaryType: 'TransferWithAuthorization',
+        message: { from: account.address, to: payTo, value: amount, validAfter: 0n, validBefore: deadline, nonce },
+    });
+    const authorization = { from: account.address, to: payTo, value: amount.toString(), validAfter: '0', validBefore: deadline.toString(), nonce };
+    if (paymentInfo.x402Version === 2) {
+        const payload = {
+            x402Version: 2, scheme, network, payload: { signature, authorization }, accepted: { ...accepts, network },
+        };
+        if (settlementExt)
+            payload.extensions = { [settlementKey]: settlementExt };
+        return { header: 'payment-signature', value: Buffer.from(JSON.stringify(payload)).toString('base64') };
+    }
+    const payload = { x402Version: 1, scheme, network, payload: { signature, authorization } };
+    return { header: 'x-payment', value: Buffer.from(JSON.stringify(payload)).toString('base64') };
+}
+//# sourceMappingURL=payment.js.map

package/dist/runtime/payment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment.js","sourceRoot":"","sources":["../../src/runtime/payment.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAe3C,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAoB,EACpB,KAAa,EACb,OAAoB,EAAE;IAEtB,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACpD,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,cAAc,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;IACtE,MAAM,SAAS,GAAgB,EAAE,MAAM,EAAE,CAAC;IAC1C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAChD,SAAS,CAAC,OAAO,GAAG,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;QAC3D,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACtC,IAAI,IAAI,GAAG,KAAK,CAAC;IAEjB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACvB,MAAM,YAAY,CAAC,uEAAuE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC9D,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACrG,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAChF,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACrF,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,MAAoB,EAAE,WAAgB;IAC5D,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;IAE3D,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO;QAAE,MAAM,YAAY,CAAC,oCAAoC,CAAC,CAAC;IAEvE,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,SAAS,CAAkB,CAAC;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC;IACzC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC;IAC7C,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC;IAC9E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAG;QACb,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,IAAI,UAAU;QACvC,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,GAAG;QACtC,OAAO,EAAE,KAAK;QACd,iBAAiB,EAAE,KAAK;KACzB,CAAC;IACF,MAAM,KAAK,GAAG;QACZ,yBAAyB,EAAE;YACzB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;YAClE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;YAC3E,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;SAC7E;KACF,CAAC;IAEF,MAAM,aAAa,GAAG,yBAAyB,CAAC;IAChD,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,cAAc,GAAG,aAAa,EAAE,IAAI,CAAC;IAE3C,IAAI,KAAoB,CAAC;IACzB,IAAI,cAAc,EAAE,gBAAgB,IAAI,cAAc,EAAE,IAAI,EAAE,CAAC;QAC7D,KAAK,GAAG,SAAS,CAAC,YAAY,CAC5B,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAC9I,CAAC,gBAAgB,EAAE,KAAK,EAAE,cAAc,CAAC,gBAAiC,EAAE,KAAK;YAChF,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,cAAc,CAAC,IAAqB;YAC3E,CAAC,cAAc,CAAC,UAAU,IAAI,KAAK,CAAkB,EAAE,MAAM,CAAC,cAAc,CAAC,cAAc,IAAI,GAAG,CAAC;YACnG,cAAc,CAAC,IAAqB,EAAE,SAAS,CAAC,cAAc,CAAC,QAAyB,CAAC,CAAC,CAC5F,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC9B,KAAK,GAAG,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAmB,CAAC;IACvG,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC;QACjD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,2BAA2B;QAChE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,KAAsB,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE;KAC5H,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC;IAE/I,IAAI,WAAW,CAAC,WAAW,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,OAAO,GAA4B;YACvC,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE;SAC1G,CAAC;QACF,IAAI,aAAa;YAAE,OAAO,CAAC,UAAU,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,aAAa,EAAE,CAAC;QAC3E,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IACzG,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,CAAC;IAC3F,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AACjG,CAAC"}

package/dist/runtime/wallet.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Wallet helpers — lazy viem imports so commands that never touch a wallet
+ * don't pay the import cost.
+ */
+import type { ObolosConfig } from './config.js';
+export declare const USDC_BASE: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913";
+export declare const BASE_CHAIN_ID = 8453;
+export declare function requirePrivateKey(config: ObolosConfig): string;
+export declare function getAccount(config: ObolosConfig): Promise<{
+    address: import("viem").Address;
+    nonceManager?: import("viem").NonceManager | undefined;
+    sign: (parameters: {
+        hash: import("viem").Hash;
+    }) => Promise<import("viem").Hex>;
+    signAuthorization: (parameters: import("viem").AuthorizationRequest) => Promise<import("viem/accounts").SignAuthorizationReturnType>;
+    signMessage: ({ message }: {
+        message: import("viem").SignableMessage;
+    }) => Promise<import("viem").Hex>;
+    signTransaction: <serializer extends import("viem").SerializeTransactionFn<import("viem").TransactionSerializable> = import("viem").SerializeTransactionFn<import("viem").TransactionSerializable>, transaction extends Parameters<serializer>[0] = Parameters<serializer>[0]>(transaction: transaction, options?: {
+        serializer?: serializer | undefined;
+    } | undefined) => Promise<import("viem").Hex>;
+    signTypedData: <const typedData extends import("viem").TypedData | Record<string, unknown>, primaryType extends keyof typedData | "EIP712Domain" = keyof typedData>(parameters: import("viem").TypedDataDefinition<typedData, primaryType>) => Promise<import("viem").Hex>;
+    publicKey: import("viem").Hex;
+    source: "privateKey";
+    type: "local";
+}>;
+export declare function getClients(config: ObolosConfig): Promise<any>;
+export declare function getUsdcBalance(config: ObolosConfig): Promise<{
+    address: string;
+    balance: string;
+    raw: bigint;
+}>;

package/dist/runtime/wallet.js

@@ -0,0 +1,44 @@
+/**
+ * Wallet helpers — lazy viem imports so commands that never touch a wallet
+ * don't pay the import cost.
+ */
+import { paymentError } from './errors.js';
+export const USDC_BASE = '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913';
+export const BASE_CHAIN_ID = 8453;
+export function requirePrivateKey(config) {
+    if (!config.privateKey) {
+        throw paymentError('No wallet configured. Run `obolos setup` first.');
+    }
+    return config.privateKey.startsWith('0x') ? config.privateKey : `0x${config.privateKey}`;
+}
+export async function getAccount(config) {
+    const { privateKeyToAccount } = await import('viem/accounts');
+    return privateKeyToAccount(requirePrivateKey(config));
+}
+export async function getClients(config) {
+    const { createPublicClient, createWalletClient, http } = await import('viem');
+    const { base } = await import('viem/chains');
+    const account = await getAccount(config);
+    return {
+        account,
+        publicClient: createPublicClient({ chain: base, transport: http() }),
+        walletClient: createWalletClient({ account, chain: base, transport: http() }),
+    };
+}
+export async function getUsdcBalance(config) {
+    const { formatUnits } = await import('viem');
+    const { publicClient, account } = await getClients(config);
+    const raw = (await publicClient.readContract({
+        address: USDC_BASE,
+        abi: [{
+                inputs: [{ name: 'account', type: 'address' }],
+                name: 'balanceOf',
+                outputs: [{ name: '', type: 'uint256' }],
+                stateMutability: 'view', type: 'function',
+            }],
+        functionName: 'balanceOf',
+        args: [account.address],
+    }));
+    return { address: account.address, balance: formatUnits(raw, 6), raw };
+}
+//# sourceMappingURL=wallet.js.map

package/dist/runtime/wallet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.js","sourceRoot":"","sources":["../../src/runtime/wallet.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,MAAM,CAAC,MAAM,SAAS,GAAG,4CAAqD,CAAC;AAC/E,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC;AAElC,MAAM,UAAU,iBAAiB,CAAC,MAAoB;IACpD,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,YAAY,CAAC,iDAAiD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;AAC3F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAoB;IACnD,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAC9D,OAAO,mBAAmB,CAAC,iBAAiB,CAAC,MAAM,CAAkB,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAoB;IACnD,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;IACzC,OAAO;QACL,OAAO;QACP,YAAY,EAAE,kBAAkB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;QACpE,YAAY,EAAE,kBAAkB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;KAC9E,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAoB;IACvD,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,CAAC,MAAM,YAAY,CAAC,YAAY,CAAC;QAC3C,OAAO,EAAE,SAAS;QAClB,GAAG,EAAE,CAAC;gBACJ,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;gBAC9C,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;gBACxC,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU;aAC1C,CAAC;QACF,YAAY,EAAE,WAAW;QACzB,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;KACxB,CAAC,CAAW,CAAC;IACd,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;AACzE,CAAC"}

package/dist/schema/json-schema.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Convert an InputSchema to JSON Schema (draft-07, MCP-compatible).
+ * Used by the MCP adapter to auto-generate tool schemas.
+ */
+import type { InputSchema } from '../registry.js';
+export declare function toJsonSchema(schema: InputSchema): {
+    type: 'object';
+    properties: Record<string, unknown>;
+    required: string[];
+};

package/dist/schema/json-schema.js

@@ -0,0 +1,34 @@
+/**
+ * Convert an InputSchema to JSON Schema (draft-07, MCP-compatible).
+ * Used by the MCP adapter to auto-generate tool schemas.
+ */
+export function toJsonSchema(schema) {
+    const properties = {};
+    const required = [];
+    for (const [name, field] of Object.entries(schema)) {
+        const prop = { description: field.description };
+        switch (field.type) {
+            case 'string':
+                prop.type = 'string';
+                if (field.enum)
+                    prop.enum = field.enum;
+                break;
+            case 'number':
+                prop.type = 'number';
+                break;
+            case 'boolean':
+                prop.type = 'boolean';
+                break;
+            case 'json':
+                // accept any JSON — MCP clients will pass objects directly
+                break;
+        }
+        if (field.default !== undefined)
+            prop.default = field.default;
+        properties[name] = prop;
+        if (field.required)
+            required.push(name);
+    }
+    return { type: 'object', properties, required };
+}
+//# sourceMappingURL=json-schema.js.map

package/dist/schema/json-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-schema.js","sourceRoot":"","sources":["../../src/schema/json-schema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,UAAU,YAAY,CAAC,MAAmB;IAK9C,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,GAA4B,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QACzE,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,QAAQ;gBACX,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;gBACrB,IAAI,KAAK,CAAC,IAAI;oBAAE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;gBACvC,MAAM;YACR,KAAK,QAAQ;gBACX,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;gBACrB,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;gBACtB,MAAM;YACR,KAAK,MAAM;gBACT,2DAA2D;gBAC3D,MAAM;QACV,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC9D,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACxB,IAAI,KAAK,CAAC,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAClD,CAAC"}

package/dist/schema/zod-shape.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Convert an InputSchema to a Zod raw shape (Record<string, ZodType>),
+ * used by the MCP SDK's `registerTool({ inputSchema })` form.
+ *
+ * Lives in the CLI package so the adapter can import it directly.
+ */
+import { type ZodTypeAny } from 'zod';
+import type { InputSchema } from '../registry.js';
+export declare function toZodShape(schema: InputSchema): Record<string, ZodTypeAny>;

package/dist/schema/zod-shape.js

@@ -0,0 +1,36 @@
+/**
+ * Convert an InputSchema to a Zod raw shape (Record<string, ZodType>),
+ * used by the MCP SDK's `registerTool({ inputSchema })` form.
+ *
+ * Lives in the CLI package so the adapter can import it directly.
+ */
+import { z } from 'zod';
+export function toZodShape(schema) {
+    const shape = {};
+    for (const [name, field] of Object.entries(schema)) {
+        let t;
+        switch (field.type) {
+            case 'string':
+                t = field.enum ? z.enum(field.enum) : z.string();
+                break;
+            case 'number':
+                t = z.number();
+                break;
+            case 'boolean':
+                t = z.boolean();
+                break;
+            case 'json':
+                t = z.any();
+                break;
+        }
+        if (field.description)
+            t = t.describe(field.description);
+        if (!field.required)
+            t = t.optional();
+        if (field.default !== undefined)
+            t = t.default(field.default);
+        shape[name] = t;
+    }
+    return shape;
+}
+//# sourceMappingURL=zod-shape.js.map

package/dist/schema/zod-shape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-shape.js","sourceRoot":"","sources":["../../src/schema/zod-shape.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAmB,MAAM,KAAK,CAAC;AAGzC,MAAM,UAAU,UAAU,CAAC,MAAmB;IAC5C,MAAM,KAAK,GAA+B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,CAAa,CAAC;QAClB,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,QAAQ;gBACX,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAA6B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBAC1E,MAAM;YACR,KAAK,QAAQ;gBAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;gBAAC,MAAM;YACtC,KAAK,SAAS;gBAAE,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;gBAAC,MAAM;YACvC,KAAK,MAAM;gBAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBAAC,MAAM;QACrC,CAAC;QACD,IAAI,KAAK,CAAC,WAAW;YAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,CAAC,QAAQ;YAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAgB,CAAC,CAAC;QACvE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/package.json

@@ -1,20 +1,61 @@
 {
   "name": "@obolos_tech/cli",
-  "version": "0.3.3",
+  "version": "0.5.0",
   "description": "CLI for the Obolos x402 API marketplace — search, negotiate (ANP), and call pay-per-use APIs",
   "type": "module",
   "main": "dist/index.js",
   "files": [
     "dist",
+    "scripts",
     "README.md"
   ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./registry": {
+      "types": "./dist/registry.d.ts",
+      "default": "./dist/registry.js"
+    },
+    "./commands": {
+      "types": "./dist/commands/index.d.ts",
+      "default": "./dist/commands/index.js"
+    },
+    "./runtime/config": {
+      "types": "./dist/runtime/config.d.ts",
+      "default": "./dist/runtime/config.js"
+    },
+    "./runtime/http": {
+      "types": "./dist/runtime/http.d.ts",
+      "default": "./dist/runtime/http.js"
+    },
+    "./runtime/output": {
+      "types": "./dist/runtime/output.d.ts",
+      "default": "./dist/runtime/output.js"
+    },
+    "./runtime/errors": {
+      "types": "./dist/runtime/errors.d.ts",
+      "default": "./dist/runtime/errors.js"
+    },
+    "./schema/json-schema": {
+      "types": "./dist/schema/json-schema.d.ts",
+      "default": "./dist/schema/json-schema.js"
+    },
+    "./schema/zod-shape": {
+      "types": "./dist/schema/zod-shape.d.ts",
+      "default": "./dist/schema/zod-shape.js"
+    }
+  },
   "bin": {
     "obolos": "dist/index.js"
   },
   "scripts": {
     "build": "tsc",
     "dev": "tsx src/index.ts",
-    "start": "node dist/index.js"
+    "start": "node dist/index.js",
+    "lint": "node scripts/lint-stdout-purity.mjs",
+    "prebuild": "npm run lint"
   },
   "keywords": [
     "x402",
@@ -29,8 +70,9 @@
   ],
   "license": "MIT",
   "dependencies": {
-    "@obolos_tech/anp-sdk": "^0.1.0",
-    "viem": "^2.45.2"
+    "@obolos_tech/anp-sdk": "^0.2.0",
+    "viem": "^2.45.2",
+    "zod": "^3.25.76"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/scripts/lint-stdout-purity.mjs

@@ -0,0 +1,62 @@
+#!/usr/bin/env node
+/**
+ * Enforces the core Command invariant: run() MUST return structured data and
+ * MUST NOT write to stdout/stderr. Only format() renders text, and even then
+ * it returns a string — the runtime does the write.
+ *
+ * This keeps MCP output clean (no ANSI bleed into JSON) and makes commands
+ * unit-testable without stdio capture.
+ *
+ * Scans cli/src/commands/**\/*.ts for forbidden patterns and exits non-zero
+ * on any hit. Run manually: `node scripts/lint-stdout-purity.mjs`.
+ */
+
+import { readdirSync, readFileSync, statSync } from 'fs';
+import { join, relative } from 'path';
+import { fileURLToPath } from 'url';
+
+const ROOT = fileURLToPath(new URL('../src/commands/', import.meta.url));
+
+const FORBIDDEN = [
+  { pattern: /\bconsole\.(log|error|warn|info|debug)\b/, why: 'console.* writes to stdio — return data from run() or render via format()' },
+  { pattern: /\bprocess\.stdout\.write\b/, why: 'process.stdout.write is the runtime\'s job — return from run()' },
+  { pattern: /\bprocess\.stderr\.write\b/, why: 'throw a CliError instead of writing to stderr' },
+  { pattern: /\bprocess\.exit\b/, why: 'throw a CliError instead of calling process.exit' },
+];
+
+function walk(dir) {
+  const out = [];
+  for (const entry of readdirSync(dir)) {
+    const full = join(dir, entry);
+    const st = statSync(full);
+    if (st.isDirectory()) out.push(...walk(full));
+    else if (entry.endsWith('.ts')) out.push(full);
+  }
+  return out;
+}
+
+const offenders = [];
+for (const file of walk(ROOT)) {
+  const src = readFileSync(file, 'utf-8');
+  const lines = src.split('\n');
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i];
+    if (line.trim().startsWith('//') || line.trim().startsWith('*')) continue;
+    for (const { pattern, why } of FORBIDDEN) {
+      if (pattern.test(line)) offenders.push({ file: relative(process.cwd(), file), line: i + 1, code: line.trim(), why });
+    }
+  }
+}
+
+if (offenders.length === 0) {
+  console.error(`[stdout-purity] ok — ${walk(ROOT).length} command files, 0 violations`);
+  process.exit(0);
+}
+
+console.error(`[stdout-purity] ${offenders.length} violation(s):\n`);
+for (const o of offenders) {
+  console.error(`  ${o.file}:${o.line}`);
+  console.error(`    ${o.code}`);
+  console.error(`    → ${o.why}\n`);
+}
+process.exit(1);