@run402/sdk 4.97.0 → 4.99.0

package/dist/node/vault-target.d.ts

@@ -0,0 +1,49 @@
+/**
+ * "Which vault does this repository mean": the targeting chain `run402 repos`
+ * verbs and `doctor`'s vault check share. A verb run standing inside a
+ * repository that already names its own vault acts on THAT repository, not on
+ * the profile's active project — git muscle memory.
+ *
+ * Order, highest first:
+ *   1. an explicit repo id / project id (the caller's `--repo` / `--project`)
+ *   2. the pinned `r402.repoId` in local git config (no network)
+ *   3. the repository's `run402` / `origin` remote address — id-form parsed
+ *      from the string, slug-form resolved with one read-only
+ *      `repos.resolveAddress` (never a pin, never a push-to-create)
+ *   4. `RUN402_PROJECT_ID`
+ *   5. the profile's active project
+ *
+ * Outside a repository only tiers 4 and 5 apply. The protocol reads it
+ * composes (`readPinnedVaultRepo`, `resolveAddress`) live in the SDK already;
+ * this adds only the precedence.
+ */
+import { type Repos } from "../namespaces/repos.js";
+export interface RepoOwnVaultTarget {
+    repo_id: string | null;
+    project_id: string | null;
+    source: "pin" | "remote";
+    remote_name?: string;
+}
+export interface VaultTarget {
+    repo_id?: string;
+    project_id?: string | null;
+}
+/**
+ * The repository's OWN target, independent of any flag: the pin, then the
+ * `run402`/`origin` remote. Null when there is neither, when this is not a
+ * repository, or when a slug-form remote fails to resolve — a miss is
+ * ordinary, never thrown.
+ */
+export declare function repoOwnVaultTarget(repos: Pick<Repos, "resolveAddress">, repoDir: string): Promise<RepoOwnVaultTarget | null>;
+/**
+ * Resolve `{ repo_id?, project_id? }` for a vault verb. An explicit value
+ * wins; `warn` receives one line when it disagrees with the repository's own
+ * target (the pin for a repo id, the remote for a project id).
+ */
+export declare function resolveVaultTarget(repos: Pick<Repos, "resolveAddress">, { repoDir, explicitProjectId, explicitRepoId, warn, }?: {
+    repoDir?: string;
+    explicitProjectId?: string | null;
+    explicitRepoId?: string | null;
+    warn?: (line: string) => void;
+}): Promise<VaultTarget>;
+//# sourceMappingURL=vault-target.d.ts.map

package/dist/node/vault-target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-target.d.ts","sourceRoot":"","sources":["../../src/node/vault-target.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAA+C,KAAK,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAIjG,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,KAAK,GAAG,QAAQ,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAgBD;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CA8BlI;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,EACpC,EACE,OAAuB,EACvB,iBAAiB,EACjB,cAAc,EACd,IAA4C,GAC7C,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAAO,GAC7H,OAAO,CAAC,WAAW,CAAC,CAqBtB"}

package/dist/node/vault-target.js

@@ -0,0 +1,109 @@
+/**
+ * "Which vault does this repository mean": the targeting chain `run402 repos`
+ * verbs and `doctor`'s vault check share. A verb run standing inside a
+ * repository that already names its own vault acts on THAT repository, not on
+ * the profile's active project — git muscle memory.
+ *
+ * Order, highest first:
+ *   1. an explicit repo id / project id (the caller's `--repo` / `--project`)
+ *   2. the pinned `r402.repoId` in local git config (no network)
+ *   3. the repository's `run402` / `origin` remote address — id-form parsed
+ *      from the string, slug-form resolved with one read-only
+ *      `repos.resolveAddress` (never a pin, never a push-to-create)
+ *   4. `RUN402_PROJECT_ID`
+ *   5. the profile's active project
+ *
+ * Outside a repository only tiers 4 and 5 apply. The protocol reads it
+ * composes (`readPinnedVaultRepo`, `resolveAddress`) live in the SDK already;
+ * this adds only the precedence.
+ */
+import { getActiveProjectId } from "../../core-dist/keystore.js";
+import { parseVaultRemoteUrl, vaultRemoteAddressForm } from "../namespaces/repos.js";
+import { hardenedGit } from "./vault-snapshot.js";
+import { readPinnedVaultRepo } from "./vault-address.js";
+/** Tiers 4 and 5, never throwing: a caller with nothing to target reports that itself. */
+function envOrActiveProjectId() {
+    return (process.env.RUN402_PROJECT_ID || "").trim() || getActiveProjectId() || null;
+}
+async function isInsideGitRepo(repoDir) {
+    try {
+        await hardenedGit(repoDir, ["rev-parse", "--git-dir"]);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * The repository's OWN target, independent of any flag: the pin, then the
+ * `run402`/`origin` remote. Null when there is neither, when this is not a
+ * repository, or when a slug-form remote fails to resolve — a miss is
+ * ordinary, never thrown.
+ */
+export async function repoOwnVaultTarget(repos, repoDir) {
+    if (!(await isInsideGitRepo(repoDir)))
+        return null;
+    const pinned = await readPinnedVaultRepo(repoDir);
+    if (pinned)
+        return { repo_id: pinned.repo_id, project_id: null, source: "pin" };
+    for (const name of ["run402", "origin"]) {
+        let url;
+        try {
+            url = (await hardenedGit(repoDir, ["remote", "get-url", name])).text().trim();
+        }
+        catch {
+            continue;
+        }
+        if (!url)
+            continue;
+        let address;
+        try {
+            address = parseVaultRemoteUrl(url);
+        }
+        catch {
+            continue;
+        }
+        if (!address)
+            continue;
+        if (vaultRemoteAddressForm(address) === "id") {
+            return { repo_id: null, project_id: address.project_id, source: "remote", remote_name: name };
+        }
+        try {
+            const resolved = await repos.resolveAddress(address);
+            return { repo_id: resolved.repo_id, project_id: resolved.project_id, source: "remote", remote_name: name };
+        }
+        catch {
+            return null;
+        }
+    }
+    return null;
+}
+/**
+ * Resolve `{ repo_id?, project_id? }` for a vault verb. An explicit value
+ * wins; `warn` receives one line when it disagrees with the repository's own
+ * target (the pin for a repo id, the remote for a project id).
+ */
+export async function resolveVaultTarget(repos, { repoDir = process.cwd(), explicitProjectId, explicitRepoId, warn = (line) => console.error(line), } = {}) {
+    const needsOwn = explicitRepoId == null || explicitProjectId == null;
+    const own = needsOwn ? await repoOwnVaultTarget(repos, repoDir) : null;
+    if (explicitRepoId != null && own?.source === "pin" && own.repo_id !== explicitRepoId) {
+        warn(`warning: --repo ${explicitRepoId} does not match this repo's pinned vault ${own.repo_id} — using --repo ${explicitRepoId}.`);
+    }
+    if (explicitProjectId != null && own?.source === "remote" && own.project_id && own.project_id !== explicitProjectId) {
+        warn(`warning: --project ${explicitProjectId} does not match this repo's '${own.remote_name}' remote project ${own.project_id} — using --project ${explicitProjectId}.`);
+    }
+    if (explicitRepoId != null || explicitProjectId != null) {
+        const result = {};
+        if (explicitRepoId != null)
+            result.repo_id = explicitRepoId;
+        if (explicitProjectId != null)
+            result.project_id = explicitProjectId;
+        return result;
+    }
+    if (own?.source === "pin")
+        return { repo_id: own.repo_id };
+    if (own?.source === "remote" && own.project_id)
+        return { project_id: own.project_id };
+    return { project_id: envOrActiveProjectId() };
+}
+//# sourceMappingURL=vault-target.js.map

package/dist/node/vault-target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-target.js","sourceRoot":"","sources":["../../src/node/vault-target.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAc,MAAM,wBAAwB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAczD,0FAA0F;AAC1F,SAAS,oBAAoB;IAC3B,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,kBAAkB,EAAE,IAAI,IAAI,CAAC;AACtF,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAAe;IAC5C,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAoC,EAAE,OAAe;IAC5F,IAAI,CAAC,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAChF,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACxC,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,OAA+C,CAAC;QACpD,IAAI,CAAC;YACH,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,sBAAsB,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAChG,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YACrD,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAC7G,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAoC,EACpC,EACE,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,EACvB,iBAAiB,EACjB,cAAc,EACd,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAC8E,EAAE;IAE9H,MAAM,QAAQ,GAAG,cAAc,IAAI,IAAI,IAAI,iBAAiB,IAAI,IAAI,CAAC;IACrE,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEvE,IAAI,cAAc,IAAI,IAAI,IAAI,GAAG,EAAE,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,OAAO,KAAK,cAAc,EAAE,CAAC;QACtF,IAAI,CAAC,mBAAmB,cAAc,4CAA4C,GAAG,CAAC,OAAO,mBAAmB,cAAc,GAAG,CAAC,CAAC;IACrI,CAAC;IACD,IAAI,iBAAiB,IAAI,IAAI,IAAI,GAAG,EAAE,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,KAAK,iBAAiB,EAAE,CAAC;QACpH,IAAI,CAAC,sBAAsB,iBAAiB,gCAAgC,GAAG,CAAC,WAAW,oBAAoB,GAAG,CAAC,UAAU,sBAAsB,iBAAiB,GAAG,CAAC,CAAC;IAC3K,CAAC;IAED,IAAI,cAAc,IAAI,IAAI,IAAI,iBAAiB,IAAI,IAAI,EAAE,CAAC;QACxD,MAAM,MAAM,GAAgB,EAAE,CAAC;QAC/B,IAAI,cAAc,IAAI,IAAI;YAAE,MAAM,CAAC,OAAO,GAAG,cAAc,CAAC;QAC5D,IAAI,iBAAiB,IAAI,IAAI;YAAE,MAAM,CAAC,UAAU,GAAG,iBAAiB,CAAC;QACrE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,GAAG,EAAE,MAAM,KAAK,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAQ,EAAE,CAAC;IAC5D,IAAI,GAAG,EAAE,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU;QAAE,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;IACtF,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,EAAE,CAAC;AAChD,CAAC"}

package/dist/node/wallets.d.ts

@@ -0,0 +1,242 @@
+/**
+ * Named wallets (profiles) and wallet selection, owned by the Node SDK.
+ *
+ * Each named wallet is a self-contained profile directory under
+ * `{config_dir}/profiles/<name>/` with its own key, project keystore, and
+ * non-secret `meta.json`; the reserved `default` wallet lives at the
+ * config-dir root. This module is the one implementation of:
+ *
+ * - the SELECTION precedence chain (`resolveWalletSelection`), highest first:
+ *     1. an explicit flag value (`--wallet <name>` / `--profile <name>`)
+ *     2. `RUN402_WALLET` / `RUN402_PROFILE`
+ *     3. the nearest `.run402.local.json` / `.run402.json` binding, walking up
+ *     4. the global default recorded by `wallets use` (base `config.json`)
+ *     5. `default`
+ *   An env value that disagrees with a directory binding is a hard error
+ *   (`WALLET_SELECTION_CONFLICT`) unless the caller is the wallet-management
+ *   surface itself, which must keep working while selection is ambiguous.
+ * - the MANAGEMENT verbs on `r.wallets` (`list`, `current`, `create`, `use`,
+ *   `rename`, `bind`, `unbind`, `import`, `remove`), which operate on explicit
+ *   named targets and are independent of the active selection.
+ *
+ * The CLI (`run402 wallets …`, the `--wallet` pre-resolution in `cli.mjs`) and
+ * the MCP server consume these; neither adds a precedence rule of its own.
+ *
+ * A rejected name is a value we know nothing about — a private key pasted
+ * into `RUN402_WALLET` is a demonstrated case — so every refusal routes the
+ * value through `describeRejectedValue()`: a short typo shows in full, anything
+ * secret-shaped is redacted.
+ */
+import { type WalletData } from "../../core-dist/wallet.js";
+import { LocalError, type NextAction } from "../errors.js";
+import type { Client } from "../kernel.js";
+import { Wallets, type WalletCreateResult } from "../namespaces/wallets.js";
+/**
+ * The active profile's wallet, or null when there is none. A file that exists
+ * but cannot be read as a wallet is `BAD_WALLET_FILE`, naming the file and
+ * the way to recreate it, never the parser's own failure.
+ */
+export declare function readLocalWallet(): WalletData | null;
+/** Where the active wallet came from, highest precedence first. `config` is the global `wallets use` default. */
+export type WalletSelectionSource = "flag" | "env" | "binding" | "config" | "default";
+/** A flag value handed to the resolver, e.g. `{ flag: "--wallet", value: "kychon" }`; `value` undefined when the flag had none. */
+export interface WalletFlag {
+    flag: string;
+    value: string | undefined;
+}
+export interface WalletSelection {
+    name: string;
+    source: WalletSelectionSource;
+    /** The flag, env var, binding file, or `wallets use` that decided; null for the bare default. */
+    sourceDetail: string | null;
+}
+export interface ResolveWalletSelectionOptions {
+    walletFlag?: WalletFlag | null;
+    env?: Record<string, string | undefined>;
+    /** Directory the binding walk starts from. Default `process.cwd()`. */
+    cwd?: string;
+    /** Skip the env-vs-binding conflict error (the wallet-management surface itself). */
+    allowConflict?: boolean;
+}
+/**
+ * A wallet selection refused: bad name, env-vs-binding conflict, or a named
+ * wallet that does not exist locally. A {@link LocalError} carrying `code`,
+ * `hint`, and `details`, never exiting the process, so a caller mid-protocol
+ * (the git remote helper) can report it on its own channel.
+ */
+export declare class WalletSelectionError extends LocalError {
+    constructor({ code, message, hint, details }: {
+        code: string;
+        message: string;
+        hint?: string;
+        details?: unknown;
+    });
+}
+/** Nearest wallet binding walking up from `startDir` to the filesystem root. */
+export declare function findWalletBinding(startDir: string): {
+    wallet: string;
+    file: string;
+} | null;
+/**
+ * The one precedence chain. Pure: reads the environment it is handed, the
+ * binding files above `cwd`, and the global default; never prompts, never
+ * exits. Throws {@link WalletSelectionError}.
+ */
+export declare function resolveWalletSelection({ walletFlag, env, cwd, allowConflict, }?: ResolveWalletSelectionOptions): WalletSelection;
+/**
+ * Fail closed when a non-default selection names a wallet that does not exist
+ * locally. Throws {@link WalletSelectionError} `WALLET_NOT_FOUND`.
+ */
+export declare function assertWalletExists({ name, source }: Pick<WalletSelection, "name" | "source">): void;
+/** The environment variable carrying the published selection's provenance. */
+export declare const ACTIVE_WALLET_CONTEXT_ENV = "RUN402_ACTIVE_WALLET_JSON";
+export interface ActiveWalletContext {
+    name: string;
+    source: WalletSelectionSource;
+    sourceDetail: string | null;
+    binding: {
+        wallet: string;
+        file: string;
+    } | null;
+    envName: string | null;
+    diverged: boolean;
+}
+export interface SelectWalletOptions extends ResolveWalletSelectionOptions {
+    /** Skip the fail-closed existence check (surfaces that create wallets). */
+    allowMissing?: boolean;
+}
+/**
+ * Resolve, fail closed, and PUBLISH the selection to `env` so every core path
+ * function resolves under it: `RUN402_WALLET` names the wallet and
+ * `RUN402_ACTIVE_WALLET_JSON` carries how it was chosen (read back by
+ * `r.wallets.current()`, since the env var alone no longer can say). Call
+ * once per process, before any client reads a path.
+ */
+export declare function selectWallet(opts?: SelectWalletOptions): WalletSelection;
+/** The published selection context, or null when no surface published one. */
+export declare function readActiveWalletContext(env?: Record<string, string | undefined>): ActiveWalletContext | null;
+export type WalletRail = "x402" | "mpp" | "lightning";
+export interface WalletDescriptor {
+    local_label: string;
+    server_label: string | null;
+    address: string | null;
+    address_short: string | null;
+    rail: string | null;
+    active: boolean;
+}
+export interface WalletWarning {
+    code: string;
+    message: string;
+    hint: string;
+}
+export interface CurrentWalletResult {
+    local_label: string;
+    source: WalletSelectionSource | "unknown";
+    source_detail: string | null;
+    address: string | null;
+    server_label: string | null;
+    configured: boolean;
+    created: string | null;
+    rail: string | null;
+    faucet_used: boolean;
+    path: string;
+    next_actions?: NextAction[];
+    warnings: WalletWarning[];
+}
+export interface CreatedWalletProfile {
+    local_label: string;
+    address: string;
+    rail: WalletRail;
+    created: true;
+    /** The first next action's command, kept beside `next_actions` for plain readers. */
+    next: string;
+    next_actions: NextAction[];
+}
+export interface WalletBindResult {
+    wallet: string;
+    file: ".run402.json";
+    bound: true;
+    safe_to_commit: true;
+    note: string;
+    binding: Record<string, unknown> | null;
+    warning?: string;
+}
+export interface WalletUnbindResult {
+    file: ".run402.json";
+    unbound: boolean;
+    removed: boolean;
+    binding: Record<string, unknown> | null;
+}
+/** Builds a client signing as another named wallet (the label push signs as its target). */
+export type WalletClientFactory = (paths: {
+    walletPath: string;
+    keystorePath: string;
+}) => {
+    wallet(address: string): {
+        setLabel(label: string): Promise<{
+            ok: boolean;
+        }>;
+    };
+};
+/**
+ * `r.wallets` on the Node entry: the isomorphic local-wallet and label verbs
+ * plus the named-wallet (profile) management verbs.
+ */
+export declare class NodeWallets extends Wallets {
+    #private;
+    constructor(client: Client, opts?: {
+        clientFor?: WalletClientFactory;
+    });
+    /** Every local wallet, without loading any private key. */
+    list(): Promise<WalletDescriptor[]>;
+    /** The active wallet: its name, how it was selected, and the local wallet file's facts. */
+    current(): Promise<CurrentWalletResult>;
+    /**
+     * With no name: create the ACTIVE profile's wallet file (the isomorphic
+     * behaviour). With a name: create a new named wallet (its key stays local)
+     * on `rail` (default `x402`); `default` creates the root wallet. Refused on
+     * the sandbox surface: it writes a private key.
+     */
+    create(): Promise<WalletCreateResult>;
+    create(name: string, opts?: {
+        rail?: string;
+    }): Promise<CreatedWalletProfile>;
+    /** Set the global default wallet (`wallets use`). */
+    use(name: string): Promise<{
+        local_label: string;
+        active: true;
+    }>;
+    /** Rename a wallet; renaming `default` moves it under `profiles/`. */
+    rename(oldName: string, newName: string): Promise<{
+        from: string;
+        to: string;
+        renamed: true;
+    }>;
+    /** Bind a directory (default cwd) to a wallet by writing its name into `./.run402.json`. */
+    bind(name?: string, opts?: {
+        cwd?: string;
+    }): Promise<WalletBindResult>;
+    /** Remove only the `wallet` key from `./.run402.json`; the file goes when nothing else is left in it. */
+    unbind(opts?: {
+        cwd?: string;
+    }): Promise<WalletUnbindResult>;
+    /**
+     * Adopt an existing private key as a new named wallet. `privateKey` may be a
+     * function, called only after the name checks pass, so a caller reading the
+     * key from a file or stdin reads nothing for a refused name. Refused on the
+     * sandbox surface: its input is a private key.
+     */
+    import(name: string, privateKey: string | (() => string)): Promise<{
+        local_label: string;
+        address: string;
+        imported: true;
+    }>;
+    /** Delete a named wallet and its keys. Requires `{ confirm: true }`; `default` is protected. */
+    remove(name: string, opts?: {
+        confirm?: boolean;
+    }): Promise<{
+        local_label: string;
+        removed: true;
+    }>;
+}
+//# sourceMappingURL=wallets.d.ts.map

package/dist/node/wallets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallets.d.ts","sourceRoot":"","sources":["../../src/node/wallets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAoBH,OAAO,EAA0B,KAAK,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAGpF,OAAO,EAAE,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAI5E;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,UAAU,GAAG,IAAI,CAWnD;AAMD,iHAAiH;AACjH,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEtF,mIAAmI;AACnI,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,qBAAqB,CAAC;IAC9B,iGAAiG;IACjG,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,6BAA6B;IAC5C,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,uEAAuE;IACvE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qFAAqF;IACrF,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;GAKG;AACH,qBAAa,oBAAqB,SAAQ,UAAU;gBACtC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE;CAIlH;AAiBD,gFAAgF;AAChF,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAG3F;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,UAAU,EACV,GAAiB,EACjB,GAAmB,EACnB,aAAqB,GACtB,GAAE,6BAAkC,GAAG,eAAe,CAoCtD;AAMD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,GAAG,QAAQ,CAAC,GAAG,IAAI,CAkBnG;AAED,8EAA8E;AAC9E,eAAO,MAAM,yBAAyB,8BAA8B,CAAC;AAErE,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,qBAAqB,CAAC;IAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACjD,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,mBAAoB,SAAQ,6BAA6B;IACxE,2EAA2E;IAC3E,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,GAAE,mBAAwB,GAAG,eAAe,CAkB5E;AAED,8EAA8E;AAC9E,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,mBAAmB,GAAG,IAAI,CAOzH;AAID,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,KAAK,GAAG,WAAW,CAAC;AAEtD,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,qBAAqB,GAAG,SAAS,CAAC;IAC1C,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC;IAC5B,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,IAAI,CAAC;IACd,qFAAqF;IACrF,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,UAAU,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,IAAI,CAAC;IACZ,cAAc,EAAE,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CACzC;AAED,4FAA4F;AAC5F,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,KAAK;IACzF,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,EAAE,EAAE,OAAO,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;CAChF,CAAC;AAoDF;;;GAGG;AACH,qBAAa,WAAY,SAAQ,OAAO;;gBAI1B,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,SAAS,CAAC,EAAE,mBAAmB,CAAA;KAAO;IAc1E,2DAA2D;IACrD,IAAI,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAKzC,2FAA2F;IACrF,OAAO,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAuC7C;;;;;OAKG;IACM,MAAM,IAAI,OAAO,CAAC,kBAAkB,CAAC;IACrC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAoCtF,qDAAqD;IAC/C,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,IAAI,CAAA;KAAE,CAAC;IAOvE,sEAAsE;IAChE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC;IA2BpG,4FAA4F;IACtF,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAkBjF,yGAAyG;IACnG,MAAM,CAAC,IAAI,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAOtE;;;;;OAKG;IACG,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC;IA4BlI,gGAAgG;IAC1F,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC;CAkC9G"}