@openfort/cli 0.1.13 → 0.1.15

package/dist/cli.js

@@ -15,7 +15,7 @@ import { Cli as Cli14, z as z14 } from "incur";
 import { randomBytes } from "crypto";
 import { createServer } from "http";
 import open from "open";
-import { Cli, z } from "incur";
+import { Cli, z, Errors } from "incur";
 
 // src/constants.ts
 var API_BASE_URL = process.env.OPENFORT_BASE_URL || "https://api.openfort.io";
@@ -24,6 +24,27 @@ var AUTH_PAGE_URL = process.env.OPENFORT_AUTH_PAGE_URL || "https://dashboard.ope
 var CLI_CALLBACK_PORT = Number(process.env.OPENFORT_CLI_CALLBACK_PORT) || 8271;
 
 // src/commands/login.ts
+async function createPublishableKey(apiKey, projectId) {
+  const res = await fetch(`${API_BASE_URL}/v1/project/apikey`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${apiKey}`,
+      project: projectId
+    },
+    body: JSON.stringify({ type: "pk" })
+  });
+  if (!res.ok) {
+    const text = await res.text();
+    throw new Errors.IncurError({
+      code: "CREATE_PUBLISHABLE_KEY_FAILED",
+      message: `Failed to create publishable key: ${text}`,
+      retryable: true
+    });
+  }
+  const data = await res.json();
+  return data.token;
+}
 function base64url(buffer) {
   return buffer.toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
@@ -294,11 +315,19 @@ var login = Cli.create("login", {
       console.log("Waiting for authentication...\n");
     }
     const { apiKey, publishableKey, projectId, project } = await waitForCallback(port, state);
+    let finalPublishableKey = publishableKey;
+    if (!finalPublishableKey) {
+      if (!projectId) {
+        throw new Errors.IncurError({
+          code: "MISSING_PROJECT_ID",
+          message: "Cannot create publishable key: project ID was not returned from the OAuth callback."
+        });
+      }
+      finalPublishableKey = await createPublishableKey(apiKey, projectId);
+    }
     ensureConfigDir();
     writeEnvKey(CREDENTIALS_PATH, "OPENFORT_API_KEY", apiKey);
-    if (publishableKey) {
-      writeEnvKey(CREDENTIALS_PATH, "OPENFORT_PUBLISHABLE_KEY", publishableKey);
-    }
+    writeEnvKey(CREDENTIALS_PATH, "OPENFORT_PUBLISHABLE_KEY", finalPublishableKey);
     if (projectId) {
       writeEnvKey(CREDENTIALS_PATH, "OPENFORT_PROJECT_ID", projectId);
     }
@@ -2426,7 +2455,7 @@ transactions.command("estimate", {
 });
 
 // src/commands/embedded-wallet.ts
-import { Cli as Cli10, z as z10, Errors } from "incur";
+import { Cli as Cli10, z as z10, Errors as Errors2 } from "incur";
 var embeddedWallet = Cli10.create("embedded-wallet", {
   description: "Configure embedded wallet (Shield) API keys."
 });
@@ -2450,7 +2479,7 @@ embeddedWallet.command("setup", {
   async run(c) {
     const publishableKey = process.env.OPENFORT_PUBLISHABLE_KEY;
     if (!publishableKey) {
-      throw new Errors.IncurError({
+      throw new Errors2.IncurError({
         code: "MISSING_PUBLISHABLE_KEY",
         message: "OPENFORT_PUBLISHABLE_KEY environment variable is required to create Shield keys.",
         hint: "Run: openfort login"
@@ -2460,7 +2489,7 @@ embeddedWallet.command("setup", {
     const environment = apiKey.startsWith("sk_live_") ? "live" : "test";
     const projectId = c.options.project || process.env.OPENFORT_PROJECT_ID;
     if (!projectId) {
-      throw new Errors.IncurError({
+      throw new Errors2.IncurError({
         code: "MISSING_PROJECT_ID",
         message: "Project ID is required. Pass --project or set OPENFORT_PROJECT_ID.",
         hint: "Run: openfort login"
@@ -2480,7 +2509,7 @@ embeddedWallet.command("setup", {
     });
     if (!registerRes.ok) {
       const text = await registerRes.text();
-      throw new Errors.IncurError({
+      throw new Errors2.IncurError({
         code: "SHIELD_REGISTER_FAILED",
         message: `Shield registration failed: ${text}`,
         retryable: true
@@ -2488,7 +2517,7 @@ embeddedWallet.command("setup", {
     }
     const shieldData = await registerRes.json();
     if (shieldData.error) {
-      throw new Errors.IncurError({
+      throw new Errors2.IncurError({
         code: "SHIELD_REGISTER_ERROR",
         message: `Shield registration error: ${shieldData.error}`
       });
@@ -2504,7 +2533,7 @@ embeddedWallet.command("setup", {
       });
       if (!res.ok) {
         const text = await res.text();
-        throw new Errors.IncurError({
+        throw new Errors2.IncurError({
           code: "PERSIST_KEY_FAILED",
           message: `Failed to persist ${type} key: ${text}`,
           retryable: true
@@ -2532,7 +2561,7 @@ embeddedWallet.command("setup", {
     });
     if (!linkRes.ok) {
       const text = await linkRes.text();
-      throw new Errors.IncurError({
+      throw new Errors2.IncurError({
         code: "SHIELD_LINK_FAILED",
         message: `Failed to link Openfort provider to Shield: ${text}`,
         retryable: true
@@ -2666,7 +2695,7 @@ users.command("delete", {
 
 // src/commands/backend-wallet.ts
 import { randomBytes as randomBytes2, subtle } from "crypto";
-import { Cli as Cli12, z as z12, Errors as Errors2 } from "incur";
+import { Cli as Cli12, z as z12, Errors as Errors3 } from "incur";
 function arrayBufferToBase64(buffer) {
   return Buffer.from(buffer).toString("base64");
 }
@@ -2775,7 +2804,7 @@ ${publicKey}
     });
     if (!registerRes.ok) {
       const text = await registerRes.text();
-      throw new Errors2.IncurError({
+      throw new Errors3.IncurError({
         code: "REGISTER_SECRET_FAILED",
         message: `Failed to register wallet secret: ${text}`,
         retryable: true
@@ -2791,7 +2820,7 @@ ${publicKey}
     });
     if (!storeRes.ok) {
       const text = await storeRes.text();
-      throw new Errors2.IncurError({
+      throw new Errors3.IncurError({
         code: "STORE_KEY_FAILED",
         message: `Failed to store wallet key reference: ${text}`,
         retryable: true
@@ -2832,7 +2861,7 @@ backendWallet.command("revoke", {
     const keyId = process.env.OPENFORT_WALLET_KEY_ID;
     const privateKeyBase64 = process.env.OPENFORT_WALLET_SECRET;
     if (!keyId || !privateKeyBase64) {
-      throw new Errors2.IncurError({
+      throw new Errors3.IncurError({
         code: "MISSING_WALLET_KEY",
         message: "OPENFORT_WALLET_KEY_ID and OPENFORT_WALLET_SECRET must be set. Run `backend-wallet setup` first.",
         hint: "Run: openfort backend-wallet setup"
@@ -2853,7 +2882,7 @@ backendWallet.command("revoke", {
     });
     if (!res.ok) {
       const text = await res.text();
-      throw new Errors2.IncurError({
+      throw new Errors3.IncurError({
         code: "REVOKE_SECRET_FAILED",
         message: `Failed to revoke wallet secret: ${text}`,
         retryable: true
@@ -2898,7 +2927,7 @@ ${publicKey}
     });
     if (!rotateRes.ok) {
       const text = await rotateRes.text();
-      throw new Errors2.IncurError({
+      throw new Errors3.IncurError({
         code: "ROTATE_SECRET_FAILED",
         message: `Failed to rotate wallet secret: ${text}`,
         retryable: true
@@ -2914,7 +2943,7 @@ ${publicKey}
     });
     if (!storeRes.ok) {
       const text = await storeRes.text();
-      throw new Errors2.IncurError({
+      throw new Errors3.IncurError({
         code: "STORE_KEY_FAILED",
         message: `Failed to store rotated wallet key reference: ${text}`,
         retryable: true

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openfort/cli",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "description": "Openfort CLI — manage wallets, policies, and transactions from the terminal.",
   "author": "Openfort (https://www.openfort.io)",
   "bugs": "https://github.com/openfort-xyz/cli/issues",
@@ -20,7 +20,7 @@
   "main": "./dist/cli.js",
   "dependencies": {
     "@openfort/openfort-node": "^0.10.2",
-    "incur": "^0.3.4",
+    "incur": "^0.3.25",
     "open": "^11.0.0",
     "viem": "^2.47.2"
   },