@pay-skill/sdk 0.1.12 → 0.1.13

package/dist/keychain.d.ts

@@ -2,6 +2,9 @@
  * OS keychain reader — reads the private key stored by `pay` CLI.
  * Service: "pay", account: "default".
  *
+ * The CLI stores keys as 0x-prefixed hex strings (66 chars). Legacy entries
+ * stored as raw 32 bytes are converted to hex on read.
+ *
  * keytar is an optional dependency. If not installed, returns null.
  */
 export declare function readFromKeychain(): Promise<string | null>;

package/dist/keychain.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keychain.d.ts","sourceRoot":"","sources":["../src/keychain.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAU/D"}
+{"version":3,"file":"keychain.d.ts","sourceRoot":"","sources":["../src/keychain.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA2B/D"}

package/dist/keychain.js

@@ -2,13 +2,33 @@
  * OS keychain reader — reads the private key stored by `pay` CLI.
  * Service: "pay", account: "default".
  *
+ * The CLI stores keys as 0x-prefixed hex strings (66 chars). Legacy entries
+ * stored as raw 32 bytes are converted to hex on read.
+ *
  * keytar is an optional dependency. If not installed, returns null.
  */
+const HEX_KEY_RE = /^0x[0-9a-fA-F]{64}$/;
 export async function readFromKeychain() {
     try {
         const moduleName = "keytar";
         const keytar = (await import(moduleName));
-        return await keytar.default.getPassword("pay", "default");
+        const value = await keytar.default.getPassword("pay", "default");
+        if (!value)
+            return null;
+        // New format: 0x-prefixed hex string (written by CLI >= 0.3)
+        const trimmed = value.trim();
+        if (HEX_KEY_RE.test(trimmed))
+            return trimmed;
+        // Legacy format: raw 32 bytes stored via set_secret().
+        // keytar.getPassword reads them as a string — convert byte values to hex.
+        if (value.length === 32) {
+            const hex = "0x" +
+                Array.from(value, (ch) => ch.charCodeAt(0).toString(16).padStart(2, "0")).join("");
+            if (HEX_KEY_RE.test(hex))
+                return hex;
+        }
+        // Unrecognised format
+        return null;
     }
     catch {
         return null;

package/dist/keychain.js.map

@@ -1 +1 @@
-{"version":3,"file":"keychain.js","sourceRoot":"","sources":["../src/keychain.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,QAAQ,CAAC;QAC5B,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,CAEvC,CAAC;QACF,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"keychain.js","sourceRoot":"","sources":["../src/keychain.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,UAAU,GAAG,qBAAqB,CAAC;AAEzC,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,QAAQ,CAAC;QAC5B,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,CAEvC,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExB,6DAA6D;QAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC;QAE7C,uDAAuD;QACvD,0EAA0E;QAC1E,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACxB,MAAM,GAAG,GACP,IAAI;gBACJ,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrF,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,GAAG,CAAC;QACvC,CAAC;QAED,sBAAsB;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/jsr.json

@@ -1,6 +1,6 @@
 {
   "name": "@pay-skill/sdk",
-  "version": "0.1.12",
+  "version": "0.1.13",
   "license": "MIT",
   "exports": "./src/index.ts",
   "publish": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pay-skill/sdk",
-  "version": "0.1.12",
+  "version": "0.1.13",
   "description": "TypeScript SDK for pay — payment infrastructure for AI agents",
   "type": "module",
   "main": "./dist/index.js",

package/src/keychain.ts

@@ -2,16 +2,38 @@
  * OS keychain reader — reads the private key stored by `pay` CLI.
  * Service: "pay", account: "default".
  *
+ * The CLI stores keys as 0x-prefixed hex strings (66 chars). Legacy entries
+ * stored as raw 32 bytes are converted to hex on read.
+ *
  * keytar is an optional dependency. If not installed, returns null.
  */
 
+const HEX_KEY_RE = /^0x[0-9a-fA-F]{64}$/;
+
 export async function readFromKeychain(): Promise<string | null> {
   try {
     const moduleName = "keytar";
     const keytar = (await import(moduleName)) as {
       default: { getPassword(service: string, account: string): Promise<string | null> };
     };
-    return await keytar.default.getPassword("pay", "default");
+    const value = await keytar.default.getPassword("pay", "default");
+    if (!value) return null;
+
+    // New format: 0x-prefixed hex string (written by CLI >= 0.3)
+    const trimmed = value.trim();
+    if (HEX_KEY_RE.test(trimmed)) return trimmed;
+
+    // Legacy format: raw 32 bytes stored via set_secret().
+    // keytar.getPassword reads them as a string — convert byte values to hex.
+    if (value.length === 32) {
+      const hex =
+        "0x" +
+        Array.from(value, (ch) => ch.charCodeAt(0).toString(16).padStart(2, "0")).join("");
+      if (HEX_KEY_RE.test(hex)) return hex;
+    }
+
+    // Unrecognised format
+    return null;
   } catch {
     return null;
   }