@shieldedtech/moth-cli 0.2.0

package/dist/commands/daemon/deploy.js

@@ -0,0 +1,105 @@
+// Deploy a compiled Compact contract through the running TUI daemon.
+// The CLI sends the artifact path (a TUI-host-local filesystem path);
+// the TUI loads the artifact, optionally imports a witness module,
+// derives keys from its in-memory walletKeys, builds + balances +
+// proves (via the proof server) + signs + submits the deploy
+// transaction. Spending keys never leave the TUI; the CLI sees only
+// the resulting on-chain TransactionResult including the new
+// contract's bech32m address.
+import { Args, Flags } from '@oclif/core';
+import { resolve } from 'node:path';
+import { BaseCommand, daemonClientFlags } from '../../base-command.js';
+export default class DaemonDeploy extends BaseCommand {
+    static description = 'Deploy a compiled Compact contract through the running TUI daemon. The TUI does the whole pipeline (load artifact, balance, prove via the proof server, sign, submit); spending keys never leave the TUI. Triggers an L3 confirmation modal showing the artifact, circuit list, and witness path.';
+    static args = {
+        artifact: Args.string({
+            description: 'Path to compiled contract artifact directory (managed/<contract>) on the TUI host',
+            required: false,
+        }),
+    };
+    static flags = {
+        ...BaseCommand.baseFlags,
+        ...daemonClientFlags,
+        artifact: Flags.string({
+            description: 'Path to compiled contract artifact (alternative to positional arg)',
+        }),
+        witnesses: Flags.string({
+            description: 'Path to witness provider JS file on the TUI host',
+        }),
+        'project-dir': Flags.string({
+            description: 'Project directory for SDK dependency resolution',
+            env: 'MOTH_PROJECT_DIR',
+        }),
+        args: Flags.string({
+            description: 'Constructor arguments as JSON or @file.json (same convention as `deploy --args`; @file resolved on the TUI host)',
+        }),
+        'private-state': Flags.string({
+            description: 'Initial private state as JSON or @file.json (same convention as `deploy --private-state`; @file resolved on the TUI host)',
+        }),
+        'timeout-ms': Flags.integer({
+            description: 'Override the RPC timeout (default: 600000 — deploys can take ~minutes to prove)',
+            default: 600_000,
+        }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(DaemonDeploy);
+        this.outputFormat = flags.output ?? 'text';
+        this.verbose = flags.verbose;
+        const artifactRaw = flags.artifact ?? args.artifact;
+        if (!artifactRaw) {
+            this.outputError('INVALID_INPUT', 'artifact path required (positional or --artifact)');
+            this.exit(2);
+            return;
+        }
+        const walletName = await this.resolveWalletName(flags);
+        const network = await this.getNetworkConfig(flags.network, this.getNetworkOverrides(flags));
+        const artifactPath = resolve(artifactRaw);
+        const witnessesPath = flags.witnesses ? resolve(flags.witnesses) : undefined;
+        const projectDir = flags['project-dir'] ? resolve(flags['project-dir']) : undefined;
+        const client = await this.connectDaemonOrExit(network.id, walletName, { bind: flags.bind });
+        if (!client)
+            return;
+        try {
+            const state = await client.call('getState');
+            if (!state.ready) {
+                this.outputError('WALLET_ERROR', `TUI is running but the wallet facade for "${walletName}" is still initializing on ${network.id}. Wait for sync and retry.`);
+                this.exit(1);
+                return;
+            }
+            this.log_verbose(`Deploying ${artifactPath} via daemon ${client.daemonVersion}`);
+            const result = await client.call('deployContract', {
+                artifactPath,
+                witnessesPath,
+                projectDir,
+                args: flags.args,
+                privateState: flags['private-state'],
+            }, { timeoutMs: flags['timeout-ms'] });
+            if (this.outputFormat === 'json') {
+                this.outputSuccess(result);
+            }
+            else {
+                this.log(`Deployed. Transaction hash: ${result.txHash}`);
+                if (result.contractAddress)
+                    this.log(`Contract address: ${result.contractAddress}`);
+                this.log(`Status: ${result.status}`);
+                if (result.blockHash)
+                    this.log(`Block hash: ${result.blockHash}`);
+                if (result.blockHeight !== null)
+                    this.log(`Block height: ${result.blockHeight}`);
+                if (result.fees) {
+                    this.log(`Fees: paid ${result.fees.paid}, estimated ${result.fees.estimated}`);
+                }
+            }
+        }
+        catch (err) {
+            const { category, message } = this.renderDaemonError(err);
+            this.outputError(category, message);
+            this.exit(1);
+            return;
+        }
+        finally {
+            client.close();
+        }
+    }
+}
+//# sourceMappingURL=deploy.js.map

package/dist/commands/daemon/deploy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.js","sourceRoot":"","sources":["../../../src/commands/daemon/deploy.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,sEAAsE;AACtE,mEAAmE;AACnE,kEAAkE;AAClE,6DAA6D;AAC7D,oEAAoE;AACpE,6DAA6D;AAC7D,8BAA8B;AAE9B,OAAO,EAAC,IAAI,EAAE,KAAK,EAAC,MAAM,aAAa,CAAC;AACxC,OAAO,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAClC,OAAO,EAAC,WAAW,EAAE,iBAAiB,EAAC,MAAM,uBAAuB,CAAC;AAWrE,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,WAAW;IACnD,MAAM,CAAU,WAAW,GACzB,mSAAmS,CAAC;IAEtS,MAAM,CAAU,IAAI,GAAG;QACrB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC;YACpB,WAAW,EAAE,mFAAmF;YAChG,QAAQ,EAAE,KAAK;SAChB,CAAC;KACH,CAAC;IAEF,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,WAAW,CAAC,SAAS;QACxB,GAAG,iBAAiB;QACpB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;YACrB,WAAW,EAAE,oEAAoE;SAClF,CAAC;QACF,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC;YACtB,WAAW,EAAE,kDAAkD;SAChE,CAAC;QACF,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC;YAC1B,WAAW,EAAE,iDAAiD;YAC9D,GAAG,EAAE,kBAAkB;SACxB,CAAC;QACF,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;YACjB,WAAW,EAAE,kHAAkH;SAChI,CAAC;QACF,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC;YAC5B,WAAW,EAAE,2HAA2H;SACzI,CAAC;QACF,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC;YAC1B,WAAW,EAAE,iFAAiF;YAC9F,OAAO,EAAE,OAAO;SACjB,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAC,IAAI,EAAE,KAAK,EAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACrD,IAAI,CAAC,YAAY,GAAI,KAAK,CAAC,MAA0B,IAAI,MAAM,CAAC;QAChE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAE7B,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC;QACpD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,mDAAmD,CAAC,CAAC;YACvF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;QAE5F,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7E,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEpF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,EAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAmB,UAAU,CAAC,CAAC;YAC9D,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACjB,IAAI,CAAC,WAAW,CACd,cAAc,EACd,6CAA6C,UAAU,8BAA8B,OAAO,CAAC,EAAE,4BAA4B,CAC5H,CAAC;gBACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,OAAO;YACT,CAAC;YAED,IAAI,CAAC,WAAW,CAAC,aAAa,YAAY,eAAe,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;YAEjF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,gBAAgB,EAChB;gBACE,YAAY;gBACZ,aAAa;gBACb,UAAU;gBACV,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC;aACrC,EACD,EAAC,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,EAAC,CACjC,CAAC;YAEF,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBACjC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBACzD,IAAI,MAAM,CAAC,eAAe;oBAAE,IAAI,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;gBACpF,IAAI,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBACrC,IAAI,MAAM,CAAC,SAAS;oBAAE,IAAI,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;gBAClE,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI;oBAAE,IAAI,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;gBACjF,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;oBAChB,IAAI,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;gBACjF,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAC,QAAQ,EAAE,OAAO,EAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACxD,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,OAAO;QACT,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACH,CAAC"}

package/dist/commands/daemon/dust/deregister.d.ts

@@ -0,0 +1,19 @@
+import { BaseCommand } from '../../../base-command.js';
+export default class DaemonDustDeregister extends BaseCommand {
+    static description: string;
+    static flags: {
+        'timeout-ms': import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        bind: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        network: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        wallet: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        timeout: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'proof-server': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        prover: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        indexer: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'node-url': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=deregister.d.ts.map

package/dist/commands/daemon/dust/deregister.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deregister.d.ts","sourceRoot":"","sources":["../../../../src/commands/daemon/dust/deregister.ts"],"names":[],"mappings":"AAMA,OAAO,EAAC,WAAW,EAAoB,MAAM,0BAA0B,CAAC;AAMxE,MAAM,CAAC,OAAO,OAAO,oBAAqB,SAAQ,WAAW;IAC3D,OAAgB,WAAW,SACsJ;IAEjL,OAAgB,KAAK;;;;;;;;;;;;MAOnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CA0C3B"}

package/dist/commands/daemon/dust/deregister.js

@@ -0,0 +1,52 @@
+// Deregister the wallet's NIGHT UTXOs from DUST generation through
+// the running TUI daemon. Reverses dustRegister. The TUI handles the
+// full pipeline. Triggers an L3 confirmation modal warning that DUST
+// will stop generating from these UTXOs.
+import { Flags } from '@oclif/core';
+import { BaseCommand, daemonClientFlags } from '../../../base-command.js';
+export default class DaemonDustDeregister extends BaseCommand {
+    static description = 'Deregister NIGHT UTXOs from DUST generation via the running TUI daemon. Deregisters every currently-registered NIGHT UTXO. DUST stops generating from these UTXOs afterward.';
+    static flags = {
+        ...BaseCommand.baseFlags,
+        ...daemonClientFlags,
+        'timeout-ms': Flags.integer({
+            description: 'Override the RPC timeout (default: 300000)',
+            default: 300_000,
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(DaemonDustDeregister);
+        this.outputFormat = flags.output ?? 'text';
+        this.verbose = flags.verbose;
+        const walletName = await this.resolveWalletName(flags);
+        const network = await this.getNetworkConfig(flags.network, this.getNetworkOverrides(flags));
+        const client = await this.connectDaemonOrExit(network.id, walletName, { bind: flags.bind });
+        if (!client)
+            return;
+        try {
+            const state = await client.call('getState');
+            if (!state.ready) {
+                this.outputError('WALLET_ERROR', `TUI is running but the wallet facade for "${walletName}" is still initializing on ${network.id}. Wait for sync and retry.`);
+                this.exit(1);
+                return;
+            }
+            const result = await client.call('dustDeregister', {}, { timeoutMs: flags['timeout-ms'] });
+            if (this.outputFormat === 'json') {
+                this.outputSuccess(result);
+            }
+            else {
+                this.log(`Deregistered. Transaction id: ${result.txId}`);
+            }
+        }
+        catch (err) {
+            const { category, message } = this.renderDaemonError(err);
+            this.outputError(category, message);
+            this.exit(1);
+            return;
+        }
+        finally {
+            client.close();
+        }
+    }
+}
+//# sourceMappingURL=deregister.js.map

package/dist/commands/daemon/dust/deregister.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deregister.js","sourceRoot":"","sources":["../../../../src/commands/daemon/dust/deregister.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,qEAAqE;AACrE,qEAAqE;AACrE,yCAAyC;AAEzC,OAAO,EAAC,KAAK,EAAC,MAAM,aAAa,CAAC;AAClC,OAAO,EAAC,WAAW,EAAE,iBAAiB,EAAC,MAAM,0BAA0B,CAAC;AAMxE,MAAM,CAAC,OAAO,OAAO,oBAAqB,SAAQ,WAAW;IAC3D,MAAM,CAAU,WAAW,GACzB,8KAA8K,CAAC;IAEjL,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,WAAW,CAAC,SAAS;QACxB,GAAG,iBAAiB;QACpB,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC;YAC1B,WAAW,EAAE,4CAA4C;YACzD,OAAO,EAAE,OAAO;SACjB,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAC,KAAK,EAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACvD,IAAI,CAAC,YAAY,GAAI,KAAK,CAAC,MAA0B,IAAI,MAAM,CAAC;QAChE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAE7B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;QAE5F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,EAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAmB,UAAU,CAAC,CAAC;YAC9D,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACjB,IAAI,CAAC,WAAW,CACd,cAAc,EACd,6CAA6C,UAAU,8BAA8B,OAAO,CAAC,EAAE,4BAA4B,CAC5H,CAAC;gBACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,gBAAgB,EAChB,EAAE,EACF,EAAC,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,EAAC,CACjC,CAAC;YAEF,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBACjC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,GAAG,CAAC,iCAAiC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAC,QAAQ,EAAE,OAAO,EAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACxD,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,OAAO;QACT,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACH,CAAC"}

package/dist/commands/daemon/dust/register.d.ts

@@ -0,0 +1,20 @@
+import { BaseCommand } from '../../../base-command.js';
+export default class DaemonDustRegister extends BaseCommand {
+    static description: string;
+    static flags: {
+        receiver: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'timeout-ms': import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        bind: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        network: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        wallet: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        timeout: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'proof-server': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        prover: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        indexer: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'node-url': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=register.d.ts.map

package/dist/commands/daemon/dust/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../../src/commands/daemon/dust/register.ts"],"names":[],"mappings":"AAQA,OAAO,EAAC,WAAW,EAAoB,MAAM,0BAA0B,CAAC;AAOxE,MAAM,CAAC,OAAO,OAAO,kBAAmB,SAAQ,WAAW;IACzD,OAAgB,WAAW,SACsJ;IAEjL,OAAgB,KAAK;;;;;;;;;;;;;MAUnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CA4C3B"}

package/dist/commands/daemon/dust/register.js

@@ -0,0 +1,60 @@
+// Register the wallet's NIGHT UTXOs for DUST generation through the
+// running TUI daemon. The TUI handles the full pipeline (select
+// UTXOs, build, sign, submit). Spending keys never leave the TUI.
+// Triggers an L3 confirmation modal showing the wallet, the dust
+// receiver (default: this wallet), and that every unregistered NIGHT
+// UTXO will be registered.
+import { Flags } from '@oclif/core';
+import { BaseCommand, daemonClientFlags } from '../../../base-command.js';
+export default class DaemonDustRegister extends BaseCommand {
+    static description = 'Register NIGHT UTXOs for DUST generation via the running TUI daemon. Registers every currently-unregistered NIGHT UTXO. Returns null txId when there\'s nothing to register.';
+    static flags = {
+        ...BaseCommand.baseFlags,
+        ...daemonClientFlags,
+        receiver: Flags.string({
+            description: 'Dust receiver address (default: this wallet\'s own dust address)',
+        }),
+        'timeout-ms': Flags.integer({
+            description: 'Override the RPC timeout (default: 300000)',
+            default: 300_000,
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(DaemonDustRegister);
+        this.outputFormat = flags.output ?? 'text';
+        this.verbose = flags.verbose;
+        const walletName = await this.resolveWalletName(flags);
+        const network = await this.getNetworkConfig(flags.network, this.getNetworkOverrides(flags));
+        const client = await this.connectDaemonOrExit(network.id, walletName, { bind: flags.bind });
+        if (!client)
+            return;
+        try {
+            const state = await client.call('getState');
+            if (!state.ready) {
+                this.outputError('WALLET_ERROR', `TUI is running but the wallet facade for "${walletName}" is still initializing on ${network.id}. Wait for sync and retry.`);
+                this.exit(1);
+                return;
+            }
+            const result = await client.call('dustRegister', { receiver: flags.receiver }, { timeoutMs: flags['timeout-ms'] });
+            if (this.outputFormat === 'json') {
+                this.outputSuccess(result);
+            }
+            else if (result.registered) {
+                this.log(`Registered. Transaction id: ${result.txId}`);
+            }
+            else {
+                this.log('No unregistered NIGHT UTXOs — nothing to do.');
+            }
+        }
+        catch (err) {
+            const { category, message } = this.renderDaemonError(err);
+            this.outputError(category, message);
+            this.exit(1);
+            return;
+        }
+        finally {
+            client.close();
+        }
+    }
+}
+//# sourceMappingURL=register.js.map

package/dist/commands/daemon/dust/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../../../src/commands/daemon/dust/register.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,gEAAgE;AAChE,kEAAkE;AAClE,iEAAiE;AACjE,qEAAqE;AACrE,2BAA2B;AAE3B,OAAO,EAAC,KAAK,EAAC,MAAM,aAAa,CAAC;AAClC,OAAO,EAAC,WAAW,EAAE,iBAAiB,EAAC,MAAM,0BAA0B,CAAC;AAOxE,MAAM,CAAC,OAAO,OAAO,kBAAmB,SAAQ,WAAW;IACzD,MAAM,CAAU,WAAW,GACzB,8KAA8K,CAAC;IAEjL,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,WAAW,CAAC,SAAS;QACxB,GAAG,iBAAiB;QACpB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;YACrB,WAAW,EAAE,kEAAkE;SAChF,CAAC;QACF,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC;YAC1B,WAAW,EAAE,4CAA4C;YACzD,OAAO,EAAE,OAAO;SACjB,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAC,KAAK,EAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACrD,IAAI,CAAC,YAAY,GAAI,KAAK,CAAC,MAA0B,IAAI,MAAM,CAAC;QAChE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAE7B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;QAE5F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,EAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAmB,UAAU,CAAC,CAAC;YAC9D,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACjB,IAAI,CAAC,WAAW,CACd,cAAc,EACd,6CAA6C,UAAU,8BAA8B,OAAO,CAAC,EAAE,4BAA4B,CAC5H,CAAC;gBACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,cAAc,EACd,EAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAC,EAC1B,EAAC,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,EAAC,CACjC,CAAC;YAEF,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBACjC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;iBAAM,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC7B,IAAI,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACzD,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAC,QAAQ,EAAE,OAAO,EAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACxD,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,OAAO;QACT,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACH,CAAC"}

package/dist/commands/daemon/key/gen.d.ts

@@ -0,0 +1,19 @@
+import { BaseCommand } from '../../../base-command.js';
+export default class DaemonKeyGen extends BaseCommand {
+    static description: string;
+    static flags: {
+        label: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        scopes: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        network: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        wallet: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        timeout: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'proof-server': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        prover: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        indexer: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'node-url': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=gen.d.ts.map

package/dist/commands/daemon/key/gen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gen.d.ts","sourceRoot":"","sources":["../../../../src/commands/daemon/key/gen.ts"],"names":[],"mappings":"AAMA,OAAO,EAAC,WAAW,EAAC,MAAM,0BAA0B,CAAC;AAErD,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,WAAW;IACnD,OAAgB,WAAW,SACiP;IAE5Q,OAAgB,KAAK;;;;;;;;;;;;MAUnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAgD3B"}

package/dist/commands/daemon/key/gen.js

@@ -0,0 +1,66 @@
+// Generate a new API key for the daemon. The plaintext token
+// `<id>.<secret>` is printed once on stdout and never persisted
+// in recoverable form — capture it now or generate a new key.
+import { Flags } from '@oclif/core';
+import { ApiKeyStore } from '@shieldedtech/moth-wallet';
+import { BaseCommand } from '../../../base-command.js';
+export default class DaemonKeyGen extends BaseCommand {
+    static description = 'Generate a new API key for the daemon. The plaintext token is printed once on stdout — capture it now; the daemon stores only a hash and the plaintext cannot be recovered. Required for clients of `moth daemon serve --transport tcp` once stage-2 AuthN is enforced.';
+    static flags = {
+        ...BaseCommand.baseFlags,
+        label: Flags.string({
+            description: 'Human label for this key. Surfaces in `moth daemon key list` and in the daemon\'s audit log when the key authenticates.',
+            required: true,
+        }),
+        scopes: Flags.string({
+            description: 'Comma-separated scopes for this key. `read` allows `getState`; `write` allows every L3-gated write verb (transfer, deploy, call, dust, maintenance). Use `read,write` for a key with full access (the default), or just `read` for a dashboard/observer key that cannot spend.',
+            default: 'write',
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(DaemonKeyGen);
+        this.outputFormat = flags.output ?? 'text';
+        const scopes = flags.scopes
+            .split(',')
+            .map((s) => s.trim())
+            .filter((s) => s.length > 0);
+        const store = new ApiKeyStore();
+        let generated;
+        try {
+            generated = store.generate(flags.label, scopes);
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            this.outputError('INVALID_INPUT', msg);
+            this.exit(2);
+            return;
+        }
+        const { record, token } = generated;
+        if (this.outputFormat === 'json') {
+            // The token is included so machine consumers can capture it
+            // programmatically — the daemon never persists it, so there's
+            // no way to recover it after this single emission.
+            this.outputSuccess({
+                id: record.id,
+                label: record.label,
+                scopes: record.scopes ?? ['write'],
+                token,
+                createdAt: record.createdAt,
+                directory: store.directory,
+            });
+            return;
+        }
+        this.log(`API key created: ${record.id} (${record.label})`);
+        this.log(`Scopes:  ${(record.scopes ?? ['write']).join(', ')}`);
+        this.log(`Stored:  ${store.directory}/${record.id}.key  (mode 0600)`);
+        this.log('');
+        this.log('Token (capture this — it is shown ONCE):');
+        this.log('');
+        this.log(`  ${token}`);
+        this.log('');
+        this.log('Usage:');
+        this.log('  MOTH_DAEMON_TOKEN=<token> moth wallet status --bind 127.0.0.1:<port>');
+        this.log('  connectDaemonTcp(host, port, {token})     # programmatic client');
+    }
+}
+//# sourceMappingURL=gen.js.map

package/dist/commands/daemon/key/gen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gen.js","sourceRoot":"","sources":["../../../../src/commands/daemon/key/gen.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,gEAAgE;AAChE,8DAA8D;AAE9D,OAAO,EAAC,KAAK,EAAC,MAAM,aAAa,CAAC;AAClC,OAAO,EAAC,WAAW,EAAC,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAC,WAAW,EAAC,MAAM,0BAA0B,CAAC;AAErD,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,WAAW;IACnD,MAAM,CAAU,WAAW,GACzB,yQAAyQ,CAAC;IAE5Q,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,WAAW,CAAC,SAAS;QACxB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;YAClB,WAAW,EAAE,yHAAyH;YACtI,QAAQ,EAAE,IAAI;SACf,CAAC;QACF,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;YACnB,WAAW,EAAE,gRAAgR;YAC7R,OAAO,EAAE,OAAO;SACjB,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAC,KAAK,EAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC/C,IAAI,CAAC,YAAY,GAAI,KAAK,CAAC,MAA0B,IAAI,MAAM,CAAC;QAEhE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM;aACxB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAE/B,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC;QAChC,IAAI,SAAS,CAAC;QACd,IAAI,CAAC;YACH,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,OAAO;QACT,CAAC;QACD,MAAM,EAAC,MAAM,EAAE,KAAK,EAAC,GAAG,SAAS,CAAC;QAElC,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YACjC,4DAA4D;YAC5D,8DAA8D;YAC9D,mDAAmD;YACnD,IAAI,CAAC,aAAa,CAAC;gBACjB,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC;gBAClC,KAAK;gBACL,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;QAC5D,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,EAAE,mBAAmB,CAAC,CAAC;QACtE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,IAAI,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnB,IAAI,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;QACnF,IAAI,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;IAChF,CAAC"}

package/dist/commands/daemon/key/list.d.ts

@@ -0,0 +1,17 @@
+import { BaseCommand } from '../../../base-command.js';
+export default class DaemonKeyList extends BaseCommand {
+    static description: string;
+    static flags: {
+        output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        network: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        wallet: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        timeout: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'proof-server': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        prover: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        indexer: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'node-url': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=list.d.ts.map

package/dist/commands/daemon/key/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../../src/commands/daemon/key/list.ts"],"names":[],"mappings":"AAKA,OAAO,EAAC,WAAW,EAAC,MAAM,0BAA0B,CAAC;AAErD,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,WAAW;IACpD,OAAgB,WAAW,SACsG;IAEjI,OAAgB,KAAK;;;;;;;;;;MAEnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAmC3B"}

package/dist/commands/daemon/key/list.js

@@ -0,0 +1,43 @@
+// List API keys from ~/.moth/api-keys/. Plaintext secrets are
+// never shown — `moth daemon key gen` is the only path that
+// surfaces them, once.
+import { ApiKeyStore } from '@shieldedtech/moth-wallet';
+import { BaseCommand } from '../../../base-command.js';
+export default class DaemonKeyList extends BaseCommand {
+    static description = 'List API keys configured for the daemon. Shows id, label, creation time, and revocation status — never the plaintext secret.';
+    static flags = {
+        ...BaseCommand.baseFlags,
+    };
+    async run() {
+        const { flags } = await this.parse(DaemonKeyList);
+        this.outputFormat = flags.output ?? 'text';
+        const store = new ApiKeyStore();
+        const records = store.list();
+        if (this.outputFormat === 'json') {
+            this.outputSuccess({
+                directory: store.directory,
+                keys: records.map((r) => ({
+                    id: r.id,
+                    label: r.label,
+                    scopes: r.scopes ?? ['write'],
+                    createdAt: r.createdAt,
+                    revokedAt: r.revokedAt ?? null,
+                })),
+            });
+            return;
+        }
+        if (records.length === 0) {
+            this.log(`No API keys in ${store.directory}.`);
+            this.log('Generate one with: moth daemon key gen --label "<purpose>"');
+            return;
+        }
+        this.log(`${records.length} key${records.length === 1 ? '' : 's'} in ${store.directory}:`);
+        this.log('');
+        for (const r of records.slice().sort((a, b) => a.createdAt.localeCompare(b.createdAt))) {
+            const status = r.revokedAt ? `revoked ${r.revokedAt}` : 'active';
+            const scopes = (r.scopes ?? ['write']).join('+');
+            this.log(`  ${r.id}  ${r.label.padEnd(30)}  ${scopes.padEnd(12)}  ${status}  (created ${r.createdAt})`);
+        }
+    }
+}
+//# sourceMappingURL=list.js.map

package/dist/commands/daemon/key/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../../src/commands/daemon/key/list.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,4DAA4D;AAC5D,uBAAuB;AAEvB,OAAO,EAAC,WAAW,EAAC,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAC,WAAW,EAAC,MAAM,0BAA0B,CAAC;AAErD,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,WAAW;IACpD,MAAM,CAAU,WAAW,GACzB,8HAA8H,CAAC;IAEjI,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,WAAW,CAAC,SAAS;KACzB,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAC,KAAK,EAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAChD,IAAI,CAAC,YAAY,GAAI,KAAK,CAAC,MAA0B,IAAI,MAAM,CAAC;QAEhE,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAE7B,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YACjC,IAAI,CAAC,aAAa,CAAC;gBACjB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACxB,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC;oBAC7B,SAAS,EAAE,CAAC,CAAC,SAAS;oBACtB,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;iBAC/B,CAAC,CAAC;aACJ,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;QAC3F,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACvF,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YACjE,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,MAAM,cAAc,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC"}

package/dist/commands/daemon/key/revoke.d.ts

@@ -0,0 +1,20 @@
+import { BaseCommand } from '../../../base-command.js';
+export default class DaemonKeyRevoke extends BaseCommand {
+    static description: string;
+    static args: {
+        id: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        network: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        wallet: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        timeout: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'proof-server': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        prover: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        indexer: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'node-url': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=revoke.d.ts.map

package/dist/commands/daemon/key/revoke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revoke.d.ts","sourceRoot":"","sources":["../../../../src/commands/daemon/key/revoke.ts"],"names":[],"mappings":"AAOA,OAAO,EAAC,WAAW,EAAC,MAAM,0BAA0B,CAAC;AAErD,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,WAAW;IACtD,OAAgB,WAAW,SACmJ;IAE9K,OAAgB,IAAI;;MAElB;IAEF,OAAgB,KAAK;;;;;;;;;;MAEnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAuB3B"}

package/dist/commands/daemon/key/revoke.js

@@ -0,0 +1,37 @@
+// Mark an API key as revoked. The on-disk record is kept (its id
+// still shows up in old audit lines) but the daemon's auth handler
+// refuses to authenticate the key. There is no un-revoke — generate
+// a new key if the operator needs continued access.
+import { Args } from '@oclif/core';
+import { ApiKeyStore } from '@shieldedtech/moth-wallet';
+import { BaseCommand } from '../../../base-command.js';
+export default class DaemonKeyRevoke extends BaseCommand {
+    static description = 'Revoke an API key by id. The record stays on disk so old audit entries still reference a real id, but the daemon refuses to authenticate the key from this point forward.';
+    static args = {
+        id: Args.string({ description: 'API key id (8 hex chars)', required: true }),
+    };
+    static flags = {
+        ...BaseCommand.baseFlags,
+    };
+    async run() {
+        const { args, flags } = await this.parse(DaemonKeyRevoke);
+        this.outputFormat = flags.output ?? 'text';
+        const store = new ApiKeyStore();
+        const updated = store.revoke(args.id);
+        if (!updated) {
+            this.outputError('INVALID_INPUT', `no API key with id "${args.id}" in ${store.directory}`);
+            this.exit(2);
+            return;
+        }
+        if (this.outputFormat === 'json') {
+            this.outputSuccess({
+                id: updated.id,
+                label: updated.label,
+                revokedAt: updated.revokedAt,
+            });
+            return;
+        }
+        this.log(`Revoked API key ${updated.id} (${updated.label}) at ${updated.revokedAt}.`);
+    }
+}
+//# sourceMappingURL=revoke.js.map

package/dist/commands/daemon/key/revoke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revoke.js","sourceRoot":"","sources":["../../../../src/commands/daemon/key/revoke.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,mEAAmE;AACnE,oEAAoE;AACpE,oDAAoD;AAEpD,OAAO,EAAC,IAAI,EAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAC,WAAW,EAAC,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAC,WAAW,EAAC,MAAM,0BAA0B,CAAC;AAErD,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,WAAW;IACtD,MAAM,CAAU,WAAW,GACzB,2KAA2K,CAAC;IAE9K,MAAM,CAAU,IAAI,GAAG;QACrB,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAC,WAAW,EAAE,0BAA0B,EAAE,QAAQ,EAAE,IAAI,EAAC,CAAC;KAC3E,CAAC;IAEF,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,WAAW,CAAC,SAAS;KACzB,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAC,IAAI,EAAE,KAAK,EAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACxD,IAAI,CAAC,YAAY,GAAI,KAAK,CAAC,MAA0B,IAAI,MAAM,CAAC;QAEhE,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,uBAAuB,IAAI,CAAC,EAAE,QAAQ,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YAC3F,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YACjC,IAAI,CAAC,aAAa,CAAC;gBACjB,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,KAAK,QAAQ,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;IACxF,CAAC"}

package/dist/commands/daemon/maintenance/insert-vk.d.ts

@@ -0,0 +1,24 @@
+import { BaseCommand } from '../../../base-command.js';
+export default class DaemonMaintenanceInsertVk extends BaseCommand {
+    static description: string;
+    static flags: {
+        address: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        'circuit-id': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        'vk-file': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        artifact: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        'project-dir': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'timeout-ms': import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        bind: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        network: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        wallet: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        timeout: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'proof-server': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        prover: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        indexer: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'node-url': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=insert-vk.d.ts.map

package/dist/commands/daemon/maintenance/insert-vk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"insert-vk.d.ts","sourceRoot":"","sources":["../../../../src/commands/daemon/maintenance/insert-vk.ts"],"names":[],"mappings":"AAQA,OAAO,EAAC,WAAW,EAAoB,MAAM,0BAA0B,CAAC;AAWxE,MAAM,CAAC,OAAO,OAAO,yBAA0B,SAAQ,WAAW;IAChE,OAAgB,WAAW,SAC2I;IAEtK,OAAgB,KAAK;;;;;;;;;;;;;;;;;MA2BnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAuD3B"}