@suisei-mcp/agent-signer 0.1.0 → 0.1.2

package/README.md

@@ -6,13 +6,13 @@ The non-custodial signer for a **Tier-1 Sui agent wallet**.
 bytes and never holds a key. This package is the one piece that does: it
 generates the agent's keypair, stores it **encrypted on your machine**, and
 signs builder bytes. The plaintext key is created here, used here, and
-**never crosses a process boundary** — it never travels through an MCP
+**never crosses a process boundary** - it never travels through an MCP
 response or into an LLM's context.
 
 ## What "Tier-1 agent wallet" means
 
 A real Sui wallet the agent fully controls, funded with a small allowance.
-The agent can stake, transfer, swap — anything — but only up to its
+The agent can stake, transfer, swap - anything - but only up to its
 balance. Blast radius = what you fund. Refill to extend, sweep to revoke.
 Your main wallet is never touched: the agent has its own freshly-generated
 key, and your owner key stays in your real wallet.
@@ -30,7 +30,7 @@ Set a passphrase (encrypts the key at rest) and create the wallet:
 ```bash
 export AGENT_WALLET_PASSPHRASE="something-long-and-private"
 agent-signer create
-# -> { "address": "0x…", "path": "~/.suisei/agent-wallet.json" }
+# -> { "address": "0x...", "path": "~/.suisei/agent-wallet.json" }
 ```
 
 Then the loop with Claude + the MCP:
@@ -38,64 +38,64 @@ Then the loop with Claude + the MCP:
 1. Ask the agent to fund it: it calls `agent_wallet_fund` (owner-signed) so
    your real wallet sends SUI to the agent address.
 2. Ask the agent to act, e.g. *"stake 1 SUI to the top validator from my
-   agent wallet"* — it builds the tx and gives you `tx_bytes_base64`.
+   agent wallet"* - it builds the tx and gives you `tx_bytes_base64`.
 3. Sign with the agent key:
    ```bash
    agent-signer sign <tx_bytes_base64>
-   # -> { "signature": "…" }
+   # -> { "signature": "..." }
    ```
 4. Tell the agent to `sui_execute_signed_tx` with that signature.
 
 To revoke, ask the agent for `agent_wallet_sweep` (drains the wallet back to
 you), sign it, submit, and stop funding.
 
-## You own the key — back it up or move it
+## You own the key - back it up or move it
 
 The wallet isn't locked inside this tool. The private key is yours,
 encrypted under your passphrase, and you can take it out anytime:
 
 ```bash
 agent-signer export
-# -> { "address": "0x…", "secret_key": "suiprivkey1…", "warning": "…" }
+# -> { "address": "0x...", "secret_key": "suiprivkey1...", "warning": "..." }
 ```
 
-That `suiprivkey1…` is a standard Sui secret. Import it into **Sui Wallet**,
-**Suiet**, or the CLI (`sui keytool import "<suiprivkey1…>" ed25519`) and
-you have the same wallet there. Back it up offline — anyone holding it
+That `suiprivkey1...` is a standard Sui secret. Import it into **Sui Wallet**,
+**Suiet**, or the CLI (`sui keytool import "<suiprivkey1...>" ed25519`) and
+you have the same wallet there. Back it up offline - anyone holding it
 controls the wallet.
 
 Bring your own key instead of generating one:
 
 ```bash
-agent-signer import "suiprivkey1…"
+agent-signer import "suiprivkey1..."
 ```
 
 Because the key is exportable, losing the keystore file isn't fatal **if
 you backed up the export**. If you didn't and you lose the file or
-passphrase, the agent wallet is gone — but it only ever holds an allowance,
+passphrase, the agent wallet is gone - but it only ever holds an allowance,
 so create a fresh one and refund. Your owner wallet is untouched.
 
 ## Configuration
 
 | Env / flag | Default | Meaning |
 | --- | --- | --- |
-| `AGENT_WALLET_PASSPHRASE` / `--passphrase` | — (required) | Encrypts/decrypts the key |
+| `AGENT_WALLET_PASSPHRASE` / `--passphrase` | - (required) | Encrypts/decrypts the key |
 | `AGENT_WALLET_PATH` / `--path` | `~/.suisei/agent-wallet.json` | Keystore location |
 
 ## Security model
 
 - **Ed25519** key, sealed with **AES-256-GCM** under a **scrypt**-derived
   key (N=32768). Keystore written `0600`.
-- Wrong passphrase → decryption fails closed (GCM auth tag).
+- Wrong passphrase -> decryption fails closed (GCM auth tag).
 - `create`/`address` emit only the public address; `sign` emits only a
   signature. The raw secret is revealed only by an explicit `export` (with
-  a warning) — never incidentally, and never to the MCP or an agent.
-- Lose the keystore or passphrase and the agent wallet is gone — by design
+  a warning) - never incidentally, and never to the MCP or an agent.
+- Lose the keystore or passphrase and the agent wallet is gone - by design
   it holds only an allowance, so create a fresh one and refund. Your owner
   wallet (in your real wallet app) is unaffected.
 
 This is **Tier 1** of the agent-wallet design. On-chain policy limits
-(Tier 2) and a multisig co-signer (Tier 3) layer on top — see
+(Tier 2) and a multisig co-signer (Tier 3) layer on top - see
 [`docs/AGENT_WALLET_DESIGN.md`](../../docs/AGENT_WALLET_DESIGN.md).
 
 ## License

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createWallet, walletAddress, signTxBytes, exportSecret, importWallet, defaultPath, } from './index.js';
 /**
- * agent-signer CLI — the manual signing path for a Tier-1 agent wallet.
+ * agent-signer CLI - the manual signing path for a Tier-1 agent wallet.
  *
  *   agent-signer create [--overwrite]      generate + encrypt a new agent key
  *   agent-signer import <suiprivkey>       seal an existing key as the wallet
@@ -108,7 +108,7 @@ async function main() {
         }
         default:
             process.stdout.write([
-                'agent-signer — non-custodial signer for a Tier-1 Sui agent wallet',
+                'agent-signer - non-custodial signer for a Tier-1 Sui agent wallet',
                 '',
                 'Commands:',
                 '  create [--overwrite]     generate + encrypt a new agent key',

package/dist/index.d.ts

@@ -1,13 +1,13 @@
 import { Ed25519Keypair } from '@mysten/sui/keypairs/ed25519';
 /**
- * @suisei-mcp/agent-signer — the non-custodial signer for a Tier-1 Sui agent
+ * @suisei-mcp/agent-signer - the non-custodial signer for a Tier-1 Sui agent
  * wallet.
  *
  * The MCP toolkit builds unsigned tx bytes and never holds a key. This is
  * the only piece that does: it generates the agent keypair, stores it
  * encrypted on the user's machine, and signs tx bytes. The plaintext key
  * is created here, used here, and never returned across a process boundary
- * — in particular it never travels through an MCP response or an LLM
+ * - in particular it never travels through an MCP response or an LLM
  * context.
  *
  * Pair the signature this produces with sui_execute_signed_tx to submit.
@@ -35,7 +35,7 @@ export declare function walletAddress(opts: {
 /**
  * Reveal the raw bech32 `suiprivkey...` secret so the user can back it up
  * or import the agent wallet into a standard wallet (Sui Wallet, Suiet,
- * `sui keytool import`). This is the user's escape hatch — it proves they,
+ * `sui keytool import`). This is the user's escape hatch - it proves they,
  * not us, own the key. Handle the output carefully: anyone with this string
  * controls the wallet.
  */

package/dist/index.js

@@ -25,7 +25,7 @@ export function walletAddress(opts) {
 /**
  * Reveal the raw bech32 `suiprivkey...` secret so the user can back it up
  * or import the agent wallet into a standard wallet (Sui Wallet, Suiet,
- * `sui keytool import`). This is the user's escape hatch — it proves they,
+ * `sui keytool import`). This is the user's escape hatch - it proves they,
  * not us, own the key. Handle the output carefully: anyone with this string
  * controls the wallet.
  */

package/dist/keystore.js

@@ -61,7 +61,7 @@ export function loadSecret(opts) {
         ]).toString('utf8');
     }
     catch {
-        throw new Error('Decryption failed — wrong passphrase or corrupted keystore.');
+        throw new Error('Decryption failed - wrong passphrase or corrupted keystore.');
     }
     return { address: file.address, secretBech32 };
 }

package/package.json

@@ -1,9 +1,18 @@
 {
   "name": "@suisei-mcp/agent-signer",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Local, non-custodial signer for a Tier-1 Sui agent wallet. Generates and encrypts an agent keypair on the user's machine and signs tx bytes from @suisei-mcp/mcp. The key never leaves the host and never enters an agent's context.",
   "license": "MIT",
   "type": "module",
+  "homepage": "https://github.com/eienel/suisei/tree/main/packages/agent-signer",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/eienel/suisei.git",
+    "directory": "packages/agent-signer"
+  },
+  "bugs": {
+    "url": "https://github.com/eienel/suisei/issues"
+  },
   "main": "dist/index.js",
   "exports": {
     ".": "./dist/index.js"