@shieldedtech/moth-cli 0.12.1 → 0.13.0-canary.20260903151454-e3385c4

package/dist/commands/wallet/address.js

@@ -11,14 +11,23 @@ export default class WalletAddress extends BaseCommand {
     static description = "Show an existing wallet's addresses (unlocks the keystore; offline)";
     static flags = {
         ...BaseCommand.baseFlags,
-        name: Flags.string({ description: 'Wallet name', required: true }),
+        // `--name` was required, and this was the only command in the CLI that used
+        // it — every other wallet-scoped command takes the shared `--wallet` and
+        // falls back to the active wallet. That made this the one command that could
+        // not act on the active wallet: `wallet use w1` then `wallet address` failed
+        // with "Missing required flag name" (#60). `--wallet` now works, resolution
+        // goes through resolveWalletName like everywhere else, and `--name` stays as
+        // an alias so existing scripts keep working.
+        name: Flags.string({ description: 'Wallet name (alias for --wallet)' }),
     };
     async run() {
         const { flags } = await this.parse(WalletAddress);
         this.outputFormat = flags.output ?? 'text';
         this.verbose = flags.verbose;
+        // --name wins when given, else --wallet, else the active wallet.
+        const walletName = flags.name ?? (await this.resolveWalletName(flags));
         const passphrase = await getPassphrase();
-        const wallet = await this.walletManager.unlock(flags.name, passphrase);
+        const wallet = await this.walletManager.unlock(walletName, passphrase);
         try {
             if (this.outputFormat === 'json') {
                 this.outputSuccess({ name: wallet.name, addresses: wallet.addresses });

package/dist/commands/wallet/address.js.map

@@ -1 +1 @@
-{"version":3,"file":"address.js","sourceRoot":"","sources":["../../../src/commands/wallet/address.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAG7D;;;;;GAKG;AACH,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,WAAW;IACpD,MAAM,CAAU,WAAW,GAAG,qEAAqE,CAAC;IAEpG,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,WAAW,CAAC,SAAS;QACxB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;KACnE,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY,GAAI,KAAK,CAAC,MAA0B,IAAI,MAAM,CAAC;QAChE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAE7B,MAAM,UAAU,GAAG,MAAM,aAAa,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBACjC,IAAI,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;YACzE,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;gBAC3B,IAAI,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBACnC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACb,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;gBAClD,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,KAAa,EAAE,IAAqB;QACrD,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;QACvB,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9D,IAAI,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACf,CAAC"}
+{"version":3,"file":"address.js","sourceRoot":"","sources":["../../../src/commands/wallet/address.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAG7D;;;;;GAKG;AACH,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,WAAW;IACpD,MAAM,CAAU,WAAW,GAAG,qEAAqE,CAAC;IAEpG,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,WAAW,CAAC,SAAS;QACxB,4EAA4E;QAC5E,yEAAyE;QACzE,6EAA6E;QAC7E,6EAA6E;QAC7E,4EAA4E;QAC5E,6EAA6E;QAC7E,6CAA6C;QAC7C,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;KACxE,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY,GAAI,KAAK,CAAC,MAA0B,IAAI,MAAM,CAAC;QAChE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAE7B,iEAAiE;QACjE,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;QAEvE,MAAM,UAAU,GAAG,MAAM,aAAa,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBACjC,IAAI,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;YACzE,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;gBAC3B,IAAI,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBACnC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACb,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;gBAClD,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,KAAa,EAAE,IAAqB;QACrD,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;QACvB,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9D,IAAI,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACf,CAAC"}

package/dist/commands/wallet/export-phrase.d.ts

@@ -0,0 +1,35 @@
+import { BaseCommand } from '../../base-command.js';
+/**
+ * Print a wallet's recovery phrase, or its raw seed.
+ *
+ * The capability existed everywhere except here: `WalletManager.exportPhrase` and
+ * `exportSeedHex` have been in core throughout, and the extension exposes them —
+ * but no CLI command did (#59). The consequences were a CLI with no backup path
+ * (the phrase is shown once at `wallet generate` and never again), no supported
+ * way to move a wallet between machines, and no way to recover a seed a user
+ * already holds the keystore and passphrase for.
+ *
+ * Nothing here weakens the security posture: anyone who can run this already has
+ * the keystore file and the passphrase that decrypts it. What it does is stop
+ * pretending otherwise.
+ */
+export default class WalletExportPhrase extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        name: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'seed-hex': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        yes: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        network: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        wallet: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        timeout: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'proof-server': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        prover: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        indexer: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'node-url': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=export-phrase.d.ts.map

package/dist/commands/wallet/export-phrase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"export-phrase.d.ts","sourceRoot":"","sources":["../../../src/commands/wallet/export-phrase.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAGpD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,OAAO,OAAO,kBAAmB,SAAQ,WAAW;IACzD,OAAgB,WAAW,SAA2E;IAEtG,OAAgB,QAAQ,WAGtB;IAEF,OAAgB,KAAK;;;;;;;;;;;;;MAYnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CA+D3B"}

package/dist/commands/wallet/export-phrase.js

@@ -0,0 +1,93 @@
+import { Flags } from '@oclif/core';
+import { BaseCommand } from '../../base-command.js';
+import { getPassphrase } from '../../adapters/passphrase.js';
+/**
+ * Print a wallet's recovery phrase, or its raw seed.
+ *
+ * The capability existed everywhere except here: `WalletManager.exportPhrase` and
+ * `exportSeedHex` have been in core throughout, and the extension exposes them —
+ * but no CLI command did (#59). The consequences were a CLI with no backup path
+ * (the phrase is shown once at `wallet generate` and never again), no supported
+ * way to move a wallet between machines, and no way to recover a seed a user
+ * already holds the keystore and passphrase for.
+ *
+ * Nothing here weakens the security posture: anyone who can run this already has
+ * the keystore file and the passphrase that decrypts it. What it does is stop
+ * pretending otherwise.
+ */
+export default class WalletExportPhrase extends BaseCommand {
+    static description = "Print a wallet's recovery phrase or seed (prompts for the passphrase)";
+    static examples = [
+        '<%= config.bin %> wallet export-phrase --wallet my-wallet',
+        '<%= config.bin %> wallet export-phrase --wallet my-wallet --seed-hex',
+    ];
+    static flags = {
+        ...BaseCommand.baseFlags,
+        name: Flags.string({ description: 'Wallet name (alias for --wallet)' }),
+        'seed-hex': Flags.boolean({
+            description: 'Print the raw hex seed instead of the mnemonic',
+            default: false,
+        }),
+        yes: Flags.boolean({
+            char: 'y',
+            description: 'Skip the confirmation prompt',
+            default: false,
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(WalletExportPhrase);
+        this.outputFormat = flags.output ?? 'text';
+        this.verbose = flags.verbose;
+        const walletName = flags.name ?? (await this.resolveWalletName(flags));
+        // Confirmed by default, because the failure mode is a phrase left in
+        // scrollback or a CI log by someone who did not realise what the command
+        // prints. --yes exists for deliberate scripted use.
+        if (!flags.yes) {
+            if (!process.stdin.isTTY) {
+                // Same rule `wallet remove` applies: a destructive-or-disclosing action
+                // in a non-interactive context has to be asked for explicitly, or a
+                // pipeline discloses a phrase nobody meant to print.
+                this.outputError('INVALID_INPUT', 'Non-interactive export requires --yes');
+                this.exit(2);
+                return;
+            }
+            const answer = await this.promptIfMissing(undefined, `Print the recovery phrase for "${walletName}"? Anyone who sees it controls the wallet. (yes/no)`);
+            if (answer.toLowerCase() !== 'yes' && answer.toLowerCase() !== 'y') {
+                this.log('Cancelled.');
+                return;
+            }
+        }
+        const passphrase = await getPassphrase();
+        const exported = await this.walletManager.exportPhrase(walletName, passphrase);
+        // A wallet imported from a hex seed has no mnemonic to give back — say which
+        // one this is rather than presenting a seed as a phrase.
+        if (flags['seed-hex'] || exported.kind === 'seed') {
+            const seedHex = exported.kind === 'seed'
+                ? exported.value
+                : await this.walletManager.exportSeedHex(walletName, passphrase);
+            if (this.outputFormat === 'json') {
+                this.outputSuccess({ wallet: walletName, kind: 'seed', seedHex });
+            }
+            else {
+                if (exported.kind === 'seed' && !flags['seed-hex']) {
+                    this.log('This wallet was imported from a hex seed, so it has no recovery phrase.');
+                }
+                this.log('');
+                this.log(`  ${seedHex}`);
+                this.log('');
+            }
+            return;
+        }
+        if (this.outputFormat === 'json') {
+            this.outputSuccess({ wallet: walletName, kind: 'mnemonic', mnemonic: exported.value });
+        }
+        else {
+            this.log('');
+            this.log('RECOVERY PHRASE — anyone who sees this controls the wallet:');
+            this.log('');
+            this.log(`  ${exported.value}`);
+            this.log('');
+        }
+    }
+}
+//# sourceMappingURL=export-phrase.js.map

package/dist/commands/wallet/export-phrase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export-phrase.js","sourceRoot":"","sources":["../../../src/commands/wallet/export-phrase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE7D;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,OAAO,OAAO,kBAAmB,SAAQ,WAAW;IACzD,MAAM,CAAU,WAAW,GAAG,uEAAuE,CAAC;IAEtG,MAAM,CAAU,QAAQ,GAAG;QACzB,2DAA2D;QAC3D,sEAAsE;KACvE,CAAC;IAEF,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,WAAW,CAAC,SAAS;QACxB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;QACvE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC;YACxB,WAAW,EAAE,gDAAgD;YAC7D,OAAO,EAAE,KAAK;SACf,CAAC;QACF,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC;YACjB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,8BAA8B;YAC3C,OAAO,EAAE,KAAK;SACf,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACvD,IAAI,CAAC,YAAY,GAAI,KAAK,CAAC,MAA0B,IAAI,MAAM,CAAC;QAChE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAE7B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;QAEvE,qEAAqE;QACrE,yEAAyE;QACzE,oDAAoD;QACpD,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACzB,wEAAwE;gBACxE,oEAAoE;gBACpE,qDAAqD;gBACrD,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,uCAAuC,CAAC,CAAC;gBAC3E,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CACvC,SAAS,EACT,kCAAkC,UAAU,qDAAqD,CAClG,CAAC;YACF,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,CAAC;gBACnE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBACvB,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,aAAa,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAE/E,6EAA6E;QAC7E,yDAAyD;QACzD,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAClD,MAAM,OAAO,GACX,QAAQ,CAAC,IAAI,KAAK,MAAM;gBACtB,CAAC,CAAC,QAAQ,CAAC,KAAK;gBAChB,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YAErE,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBACjC,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACpE,CAAC;iBAAM,CAAC;gBACN,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;oBACnD,IAAI,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC;gBACtF,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;gBACzB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACf,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YACjC,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QACzF,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;YACxE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;YAChC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACf,CAAC;IACH,CAAC"}

package/dist/commands/wallet/generate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../../src/commands/wallet/generate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAIpD,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,WAAW;IACrD,OAAgB,WAAW,SAAyD;IAEpF,OAAgB,KAAK;;;;;;;;;;;;MAOnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;IAyD1B,OAAO,CAAC,UAAU;CAOnB"}
+{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../../src/commands/wallet/generate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAIpD,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,WAAW;IACrD,OAAgB,WAAW,SAAyD;IAEpF,OAAgB,KAAK;;;;;;;;;;;;MAOnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;IAsE1B,OAAO,CAAC,UAAU;CAOnB"}

package/dist/commands/wallet/generate.js

@@ -1,6 +1,7 @@
 import { Flags } from '@oclif/core';
 import { BaseCommand } from '../../base-command.js';
 import { getPassphrase } from '../../adapters/passphrase.js';
+import { chainTip } from '@shieldedtech/moth-wallet';
 export default class WalletGenerate extends BaseCommand {
     static description = 'Generate a new wallet from a random BIP-39 mnemonic';
     static flags = {
@@ -17,8 +18,19 @@ export default class WalletGenerate extends BaseCommand {
         this.verbose = flags.verbose;
         const name = flags.name ?? `wallet-${Date.now().toString(36)}`;
         const passphrase = await getPassphrase('New passphrase: ');
-        this.log_verbose(`Generating wallet "${name}"`);
-        const info = await this.walletManager.generate(name, passphrase, flags.network);
+        // Record the chain tip as this wallet's birthday, so its first sync can
+        // start from a pre-seed reference instead of walking from genesis. Only for
+        // wallets generated here — `wallet import` deliberately passes none, since a
+        // restored wallet may hold funds at any height (ADR 0003).
+        //
+        // Best-effort: an unreachable indexer yields undefined and the wallet is
+        // still created, it just syncs the slow way.
+        const network = await this.getNetworkConfig(flags.network, this.getNetworkOverrides(flags));
+        const birthday = await chainTip(network.indexerUrl);
+        this.log_verbose(birthday === undefined
+            ? `Generating wallet "${name}" (no chain tip available — will sync from genesis)`
+            : `Generating wallet "${name}" at birthday ${birthday}`);
+        const info = await this.walletManager.generate(name, passphrase, flags.network, birthday);
         if (this.outputFormat === 'json') {
             const output = {
                 name: info.name,

package/dist/commands/wallet/generate.js.map

@@ -1 +1 @@
-{"version":3,"file":"generate.js","sourceRoot":"","sources":["../../../src/commands/wallet/generate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAG7D,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,WAAW;IACrD,MAAM,CAAU,WAAW,GAAG,qDAAqD,CAAC;IAEpF,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,WAAW,CAAC,SAAS;QACxB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,yCAAyC,EAAE,CAAC;QAC9E,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC;YAC7B,WAAW,EAAE,oDAAoD;YACjE,OAAO,EAAE,KAAK;SACf,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACnD,IAAI,CAAC,YAAY,GAAI,KAAK,CAAC,MAA0B,IAAI,MAAM,CAAC;QAChE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAE7B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/D,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,kBAAkB,CAAC,CAAC;QAE3D,IAAI,CAAC,WAAW,CAAC,sBAAsB,IAAI,GAAG,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAEhF,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YACjC,MAAM,MAAM,GAA4B;gBACtC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;YACF,sEAAsE;YACtE,6DAA6D;YAC7D,IAAI,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC3B,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAClC,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAE3B,mEAAmE;YACnE,6DAA6D;YAC7D,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;gBACnF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7C,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACb,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,wCAAwC,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;YAC5F,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,wCAAwC,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;YAC3F,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,oCAAoC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACtE,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,4CAA4C,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YACnF,IAAI,CAAC,UAAU,CAAC,oBAAoB,EAAE,uCAAuC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC3F,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAEb,sEAAsE;YACtE,6DAA6D;YAC7D,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;gBACjF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACN,2EAA2E;gBAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;gBAC9F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,KAAa,EAAE,WAAmB,EAAE,IAAqB;QAC1E,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,MAAM,WAAW,GAAG,CAAC,CAAC;QACzC,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9D,IAAI,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACf,CAAC"}
+{"version":3,"file":"generate.js","sourceRoot":"","sources":["../../../src/commands/wallet/generate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAwB,MAAM,2BAA2B,CAAC;AAE3E,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,WAAW;IACrD,MAAM,CAAU,WAAW,GAAG,qDAAqD,CAAC;IAEpF,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,WAAW,CAAC,SAAS;QACxB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,yCAAyC,EAAE,CAAC;QAC9E,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC;YAC7B,WAAW,EAAE,oDAAoD;YACjE,OAAO,EAAE,KAAK;SACf,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACnD,IAAI,CAAC,YAAY,GAAI,KAAK,CAAC,MAA0B,IAAI,MAAM,CAAC;QAChE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAE7B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/D,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,kBAAkB,CAAC,CAAC;QAE3D,wEAAwE;QACxE,4EAA4E;QAC5E,6EAA6E;QAC7E,2DAA2D;QAC3D,EAAE;QACF,yEAAyE;QACzE,6CAA6C;QAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5F,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,WAAW,CACd,QAAQ,KAAK,SAAS;YACpB,CAAC,CAAC,sBAAsB,IAAI,qDAAqD;YACjF,CAAC,CAAC,sBAAsB,IAAI,iBAAiB,QAAQ,EAAE,CAC1D,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE1F,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YACjC,MAAM,MAAM,GAA4B;gBACtC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;YACF,sEAAsE;YACtE,6DAA6D;YAC7D,IAAI,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC3B,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAClC,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAE3B,mEAAmE;YACnE,6DAA6D;YAC7D,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;gBACnF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7C,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACb,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,wCAAwC,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;YAC5F,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,wCAAwC,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;YAC3F,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,oCAAoC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACtE,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,4CAA4C,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YACnF,IAAI,CAAC,UAAU,CAAC,oBAAoB,EAAE,uCAAuC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC3F,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAEb,sEAAsE;YACtE,6DAA6D;YAC7D,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;gBACjF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACN,2EAA2E;gBAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;gBAC9F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,KAAa,EAAE,WAAmB,EAAE,IAAqB;QAC1E,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,MAAM,WAAW,GAAG,CAAC,CAAC;QACzC,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9D,IAAI,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACf,CAAC"}

package/dist/mainnet-guard.d.ts

@@ -0,0 +1,29 @@
+/**
+ * The one place mainnet is refused.
+ *
+ * This used to live inside `BaseCommand.getNetworkConfig`, which meant it only
+ * ran for commands that resolved a network config — and the commands that matter
+ * most did not. `moth wallet generate --network mainnet` derived mainnet
+ * addresses, wrote a keystore, printed a recovery phrase and exited 0, with no
+ * warning shown (issue #25). A guard placed in one consumer is not a guard; it is
+ * a convention that happens to hold wherever someone remembered it.
+ *
+ * So the refusal is attached to the `--network` flag itself, which every command
+ * inherits through `BaseCommand.baseFlags`, and to the config key that can store
+ * a default network. Those are the two ways a network id enters the CLI.
+ */
+/** True for the network ids that mean "real funds". */
+export declare function isMainnet(networkId: string | undefined): boolean;
+/**
+ * Print the refusal and stop.
+ *
+ * `process.exit` rather than a thrown error on purpose. This runs from flag
+ * parsing as well as from command bodies, and oclif maps thrown errors to its own
+ * exit codes and formatting — which would make the exit status depend on where
+ * the refusal happened to fire. A refusal should look the same from everywhere,
+ * and 1 is what it has always been.
+ */
+export declare function refuseMainnet(): never;
+/** Refuse if `networkId` names mainnet; otherwise return it unchanged. */
+export declare function assertNotMainnet(networkId: string): string;
+//# sourceMappingURL=mainnet-guard.d.ts.map

package/dist/mainnet-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mainnet-guard.d.ts","sourceRoot":"","sources":["../src/mainnet-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAcH,uDAAuD;AACvD,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEhE;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,IAAI,KAAK,CAGrC;AAED,0EAA0E;AAC1E,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAG1D"}

package/dist/mainnet-guard.js

@@ -0,0 +1,48 @@
+/**
+ * The one place mainnet is refused.
+ *
+ * This used to live inside `BaseCommand.getNetworkConfig`, which meant it only
+ * ran for commands that resolved a network config — and the commands that matter
+ * most did not. `moth wallet generate --network mainnet` derived mainnet
+ * addresses, wrote a keystore, printed a recovery phrase and exited 0, with no
+ * warning shown (issue #25). A guard placed in one consumer is not a guard; it is
+ * a convention that happens to hold wherever someone remembered it.
+ *
+ * So the refusal is attached to the `--network` flag itself, which every command
+ * inherits through `BaseCommand.baseFlags`, and to the config key that can store
+ * a default network. Those are the two ways a network id enters the CLI.
+ */
+const BANNER = '\n' +
+    '  ╔══════════════════════════════════════════════════════════════╗\n' +
+    '  ║                         WARNING                            ║\n' +
+    '  ║                                                            ║\n' +
+    '  ║  Moth is a reference wallet for development and testing.   ║\n' +
+    '  ║  It should NOT be used with real funds on mainnet.         ║\n' +
+    '  ║                                                            ║\n' +
+    '  ║  Use Lace or another commercial wallet for mainnet.        ║\n' +
+    '  ╚══════════════════════════════════════════════════════════════╝\n' +
+    '\n';
+/** True for the network ids that mean "real funds". */
+export function isMainnet(networkId) {
+    return networkId === 'mainnet';
+}
+/**
+ * Print the refusal and stop.
+ *
+ * `process.exit` rather than a thrown error on purpose. This runs from flag
+ * parsing as well as from command bodies, and oclif maps thrown errors to its own
+ * exit codes and formatting — which would make the exit status depend on where
+ * the refusal happened to fire. A refusal should look the same from everywhere,
+ * and 1 is what it has always been.
+ */
+export function refuseMainnet() {
+    process.stderr.write(BANNER);
+    process.exit(1);
+}
+/** Refuse if `networkId` names mainnet; otherwise return it unchanged. */
+export function assertNotMainnet(networkId) {
+    if (isMainnet(networkId))
+        refuseMainnet();
+    return networkId;
+}
+//# sourceMappingURL=mainnet-guard.js.map

package/dist/mainnet-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mainnet-guard.js","sourceRoot":"","sources":["../src/mainnet-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,MAAM,GACV,IAAI;IACJ,sEAAsE;IACtE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,sEAAsE;IACtE,IAAI,CAAC;AAEP,uDAAuD;AACvD,MAAM,UAAU,SAAS,CAAC,SAA6B;IACrD,OAAO,SAAS,KAAK,SAAS,CAAC;AACjC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,IAAI,SAAS,CAAC,SAAS,CAAC;QAAE,aAAa,EAAE,CAAC;IAC1C,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@shieldedtech/moth-cli",
-  "version": "0.12.1",
+  "version": "0.13.0-canary.20260903151454-e3385c4",
   "description": "CLI tool for Midnight Network wallet operations and contract deployments. USE AT YOUR OWN RISK. Experimental software provided AS-IS with no warranty. Not audited. For development and testing purposes only.",
   "license": "Apache-2.0",
   "type": "module",
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "files": [
     "dist",
@@ -32,8 +32,8 @@
   },
   "dependencies": {
     "@oclif/core": "^4.2.0",
-    "@shieldedtech/moth-tui": "^0.12.1",
-    "@shieldedtech/moth-wallet": "^0.12.1",
+    "@shieldedtech/moth-tui": "0.13.0-canary.20260903151454-e3385c4",
+    "@shieldedtech/moth-wallet": "0.13.0-canary.20260903151454-e3385c4",
     "dotenv": "17.4.2",
     "ink": "^7.0.1"
   },
@@ -48,6 +48,11 @@
       "strategy": "pattern",
       "target": "./dist/commands"
     },
-    "topicSeparator": " "
+    "topicSeparator": " ",
+    "topics": {
+      "preseed": {
+        "description": "Inspect and maintain this machine's pre-seed reference: one empty wallet synced to chain tip, which lets a new wallet start from its state instead of walking the chain."
+      }
+    }
   }
-}
+}