@openfort/cli 0.1.14 → 0.1.16

package/dist/cli.js

@@ -15,7 +15,7 @@ import { Cli as Cli14, z as z14 } from "incur";
 import { randomBytes } from "crypto";
 import { createServer } from "http";
 import open from "open";
-import { Cli, z } from "incur";
+import { Cli, z, Errors } from "incur";
 
 // src/constants.ts
 var API_BASE_URL = process.env.OPENFORT_BASE_URL || "https://api.openfort.io";
@@ -24,6 +24,27 @@ var AUTH_PAGE_URL = process.env.OPENFORT_AUTH_PAGE_URL || "https://dashboard.ope
 var CLI_CALLBACK_PORT = Number(process.env.OPENFORT_CLI_CALLBACK_PORT) || 8271;
 
 // src/commands/login.ts
+async function createPublishableKey(apiKey, projectId) {
+  const res = await fetch(`${API_BASE_URL}/v1/project/apikey`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${apiKey}`,
+      project: projectId
+    },
+    body: JSON.stringify({ type: "pk" })
+  });
+  if (!res.ok) {
+    const text = await res.text();
+    throw new Errors.IncurError({
+      code: "CREATE_PUBLISHABLE_KEY_FAILED",
+      message: `Failed to create publishable key: ${text}`,
+      retryable: true
+    });
+  }
+  const data = await res.json();
+  return data.token;
+}
 function base64url(buffer) {
   return buffer.toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
@@ -294,11 +315,19 @@ var login = Cli.create("login", {
       console.log("Waiting for authentication...\n");
     }
     const { apiKey, publishableKey, projectId, project } = await waitForCallback(port, state);
+    let finalPublishableKey = publishableKey;
+    if (!finalPublishableKey) {
+      if (!projectId) {
+        throw new Errors.IncurError({
+          code: "MISSING_PROJECT_ID",
+          message: "Cannot create publishable key: project ID was not returned from the OAuth callback."
+        });
+      }
+      finalPublishableKey = await createPublishableKey(apiKey, projectId);
+    }
     ensureConfigDir();
     writeEnvKey(CREDENTIALS_PATH, "OPENFORT_API_KEY", apiKey);
-    if (publishableKey) {
-      writeEnvKey(CREDENTIALS_PATH, "OPENFORT_PUBLISHABLE_KEY", publishableKey);
-    }
+    writeEnvKey(CREDENTIALS_PATH, "OPENFORT_PUBLISHABLE_KEY", finalPublishableKey);
     if (projectId) {
       writeEnvKey(CREDENTIALS_PATH, "OPENFORT_PROJECT_ID", projectId);
     }
@@ -979,7 +1008,7 @@ var contractItem = z3.object({
   chainId: z3.number(),
   address: z3.string(),
   deleted: z3.boolean(),
-  abi: z3.array(z3.record(z3.string(), z3.unknown())),
+  abi: z3.array(z3.unknown()),
   publicVerification: z3.boolean()
 });
 var contracts = Cli3.create("contracts", {
@@ -1392,7 +1421,7 @@ policies.command("get", {
     accountId: z5.string().nullable(),
     enabled: z5.boolean(),
     priority: z5.number(),
-    rules: z5.array(z5.record(z5.string(), z5.unknown()))
+    rules: z5.array(z5.unknown())
   }),
   async run(c) {
     const p = await getOpenfort().policies.get(c.args.id);
@@ -1997,7 +2026,7 @@ var sessionItem = z8.object({
   isActive: z8.boolean(),
   nextAction: z8.object({
     type: z8.string(),
-    payload: z8.record(z8.string(), z8.unknown()).optional()
+    payload: z8.unknown().optional()
   }).optional()
 });
 var sessions = Cli8.create("sessions", {
@@ -2206,7 +2235,7 @@ var transactionIntentItem = z9.object({
     gasFee: z9.string().optional(),
     status: z9.number().optional(),
     to: z9.string().optional(),
-    error: z9.record(z9.string(), z9.unknown()).optional()
+    error: z9.unknown().optional()
   }).optional(),
   interactions: z9.array(z9.object({
     to: z9.string().optional(),
@@ -2215,7 +2244,7 @@ var transactionIntentItem = z9.object({
   })).optional(),
   nextAction: z9.object({
     type: z9.string(),
-    payload: z9.record(z9.string(), z9.unknown()).optional()
+    payload: z9.unknown().optional()
   }).optional()
 });
 var transactions = Cli9.create("transactions", {
@@ -2426,7 +2455,7 @@ transactions.command("estimate", {
 });
 
 // src/commands/embedded-wallet.ts
-import { Cli as Cli10, z as z10, Errors } from "incur";
+import { Cli as Cli10, z as z10, Errors as Errors2 } from "incur";
 var embeddedWallet = Cli10.create("embedded-wallet", {
   description: "Configure embedded wallet (Shield) API keys."
 });
@@ -2450,7 +2479,7 @@ embeddedWallet.command("setup", {
   async run(c) {
     const publishableKey = process.env.OPENFORT_PUBLISHABLE_KEY;
     if (!publishableKey) {
-      throw new Errors.IncurError({
+      throw new Errors2.IncurError({
         code: "MISSING_PUBLISHABLE_KEY",
         message: "OPENFORT_PUBLISHABLE_KEY environment variable is required to create Shield keys.",
         hint: "Run: openfort login"
@@ -2460,7 +2489,7 @@ embeddedWallet.command("setup", {
     const environment = apiKey.startsWith("sk_live_") ? "live" : "test";
     const projectId = c.options.project || process.env.OPENFORT_PROJECT_ID;
     if (!projectId) {
-      throw new Errors.IncurError({
+      throw new Errors2.IncurError({
         code: "MISSING_PROJECT_ID",
         message: "Project ID is required. Pass --project or set OPENFORT_PROJECT_ID.",
         hint: "Run: openfort login"
@@ -2480,7 +2509,7 @@ embeddedWallet.command("setup", {
     });
     if (!registerRes.ok) {
       const text = await registerRes.text();
-      throw new Errors.IncurError({
+      throw new Errors2.IncurError({
         code: "SHIELD_REGISTER_FAILED",
         message: `Shield registration failed: ${text}`,
         retryable: true
@@ -2488,7 +2517,7 @@ embeddedWallet.command("setup", {
     }
     const shieldData = await registerRes.json();
     if (shieldData.error) {
-      throw new Errors.IncurError({
+      throw new Errors2.IncurError({
         code: "SHIELD_REGISTER_ERROR",
         message: `Shield registration error: ${shieldData.error}`
       });
@@ -2504,7 +2533,7 @@ embeddedWallet.command("setup", {
       });
       if (!res.ok) {
         const text = await res.text();
-        throw new Errors.IncurError({
+        throw new Errors2.IncurError({
           code: "PERSIST_KEY_FAILED",
           message: `Failed to persist ${type} key: ${text}`,
           retryable: true
@@ -2532,7 +2561,7 @@ embeddedWallet.command("setup", {
     });
     if (!linkRes.ok) {
       const text = await linkRes.text();
-      throw new Errors.IncurError({
+      throw new Errors2.IncurError({
         code: "SHIELD_LINK_FAILED",
         message: `Failed to link Openfort provider to Shield: ${text}`,
         retryable: true
@@ -2666,15 +2695,20 @@ users.command("delete", {
 
 // src/commands/backend-wallet.ts
 import { randomBytes as randomBytes2, subtle } from "crypto";
-import { Cli as Cli12, z as z12, Errors as Errors2 } from "incur";
+import { Cli as Cli12, z as z12, Errors as Errors3 } from "incur";
 function arrayBufferToBase64(buffer) {
   return Buffer.from(buffer).toString("base64");
 }
 function arrayBufferToBase64Url(buffer) {
   return Buffer.from(buffer).toString("base64url");
 }
+function toArrayBuffer(bytes) {
+  const buffer = new ArrayBuffer(bytes.byteLength);
+  new Uint8Array(buffer).set(bytes);
+  return buffer;
+}
 function stringToArrayBuffer(str) {
-  return new TextEncoder().encode(str);
+  return toArrayBuffer(new TextEncoder().encode(str));
 }
 function formatPEMBody(base64) {
   return base64.match(/.{1,64}/g)?.join("\n") || base64;
@@ -2690,7 +2724,7 @@ function sortObjectKeys(obj) {
   return sorted;
 }
 async function importPrivateKey(base64) {
-  const binaryDer = Buffer.from(base64, "base64");
+  const binaryDer = toArrayBuffer(Buffer.from(base64, "base64"));
   return subtle.importKey(
     "pkcs8",
     binaryDer,
@@ -2775,7 +2809,7 @@ ${publicKey}
     });
     if (!registerRes.ok) {
       const text = await registerRes.text();
-      throw new Errors2.IncurError({
+      throw new Errors3.IncurError({
         code: "REGISTER_SECRET_FAILED",
         message: `Failed to register wallet secret: ${text}`,
         retryable: true
@@ -2791,7 +2825,7 @@ ${publicKey}
     });
     if (!storeRes.ok) {
       const text = await storeRes.text();
-      throw new Errors2.IncurError({
+      throw new Errors3.IncurError({
         code: "STORE_KEY_FAILED",
         message: `Failed to store wallet key reference: ${text}`,
         retryable: true
@@ -2832,7 +2866,7 @@ backendWallet.command("revoke", {
     const keyId = process.env.OPENFORT_WALLET_KEY_ID;
     const privateKeyBase64 = process.env.OPENFORT_WALLET_SECRET;
     if (!keyId || !privateKeyBase64) {
-      throw new Errors2.IncurError({
+      throw new Errors3.IncurError({
         code: "MISSING_WALLET_KEY",
         message: "OPENFORT_WALLET_KEY_ID and OPENFORT_WALLET_SECRET must be set. Run `backend-wallet setup` first.",
         hint: "Run: openfort backend-wallet setup"
@@ -2853,7 +2887,7 @@ backendWallet.command("revoke", {
     });
     if (!res.ok) {
       const text = await res.text();
-      throw new Errors2.IncurError({
+      throw new Errors3.IncurError({
         code: "REVOKE_SECRET_FAILED",
         message: `Failed to revoke wallet secret: ${text}`,
         retryable: true
@@ -2898,7 +2932,7 @@ ${publicKey}
     });
     if (!rotateRes.ok) {
       const text = await rotateRes.text();
-      throw new Errors2.IncurError({
+      throw new Errors3.IncurError({
         code: "ROTATE_SECRET_FAILED",
         message: `Failed to rotate wallet secret: ${text}`,
         retryable: true
@@ -2914,7 +2948,7 @@ ${publicKey}
     });
     if (!storeRes.ok) {
       const text = await storeRes.text();
-      throw new Errors2.IncurError({
+      throw new Errors3.IncurError({
         code: "STORE_KEY_FAILED",
         message: `Failed to store rotated wallet key reference: ${text}`,
         retryable: true

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openfort/cli",
-  "version": "0.1.14",
+  "version": "0.1.16",
   "description": "Openfort CLI — manage wallets, policies, and transactions from the terminal.",
   "author": "Openfort (https://www.openfort.io)",
   "bugs": "https://github.com/openfort-xyz/cli/issues",
@@ -19,10 +19,10 @@
   ],
   "main": "./dist/cli.js",
   "dependencies": {
-    "@openfort/openfort-node": "^0.10.2",
-    "incur": "^0.3.25",
+    "@openfort/openfort-node": "^0.10.5",
+    "incur": "^0.4.10",
     "open": "^11.0.0",
-    "viem": "^2.47.2"
+    "viem": "^2.53.1"
   },
   "devDependencies": {
     "@changesets/changelog-github": "^0.5.1",