@wasit-dev/cli 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+import "dotenv/config";

package/dist/index.js

@@ -0,0 +1,155 @@
+#!/usr/bin/env node
+import "dotenv/config";
+import { Command } from "commander";
+import { checkStatus, runMppChannelSuite, runMppChargeSuite, runX402PaymentChecks, runX402ReadChecks, summarize, } from "@wasit-dev/core";
+/**
+ * Accumulates repeated --header flags into one object.
+ *
+ * Exits 2 rather than 1 on a malformed value: nothing was learned about the
+ * target, so this is a configuration error, not a conformance failure.
+ */
+function collectHeader(value, previous) {
+    const separator = value.indexOf(":");
+    if (separator < 1) {
+        console.error(`Invalid --header "${value}". Expected "Name: value".`);
+        process.exit(2);
+    }
+    return {
+        ...(previous ?? {}),
+        [value.slice(0, separator).trim()]: value.slice(separator + 1).trim(),
+    };
+}
+const program = new Command();
+program
+    .name("wasit")
+    .description("Protocol-compliance testing for x402 / MPP on Stellar")
+    .version("0.1.0");
+/**
+ * Prints results and returns the process exit code.
+ *
+ * A skipped check carries `pass: false` so it can never be counted as
+ * conformance, but it is not a failure and must not fail the run. An errored
+ * check produced no verdict at all and is reported separately again.
+ */
+function report(results) {
+    for (const result of results) {
+        const flag = result.destructive ? "  [destructive]" : "";
+        console.log(`${checkStatus(result)}  ${result.id}  ${result.name}${flag}`);
+        console.log(`      ${result.detail}\n`);
+    }
+    const counts = summarize(results);
+    const line = [`${counts.passed} passed`];
+    if (counts.failed > 0)
+        line.push(`${counts.failed} failed`);
+    if (counts.errored > 0)
+        line.push(`${counts.errored} could not run`);
+    if (counts.skipped > 0)
+        line.push(`${counts.skipped} skipped`);
+    console.log(`${line.join(", ")}.`);
+    if (counts.errored > 0 && counts.failed === 0) {
+        console.log("\nNo verdict: some checks never reached the target or the run is " +
+            "misconfigured. This is not a statement about the target's conformance.");
+    }
+    return counts.exitCode;
+}
+program
+    .command("test")
+    .description("Run x402 compliance checks against a target service")
+    .requiredOption("--target <url>", "URL of the service to test")
+    .option("--network <network>", "Network identifier", "stellar:testnet")
+    .option("--payer-key <key>", "Testnet payer secret key (overrides STELLAR_PRIVATE_KEY from .env)")
+    .option("--method <verb>", "HTTP method the paid endpoint uses (default: GET). Paid endpoints that " +
+    "compute something usually take POST.")
+    .option("--body <json>", "Request body, sent verbatim. Implies Content-Type: application/json.")
+    .option("--header <name:value>", "Extra request header the endpoint needs before it will issue a challenge. Repeatable.", collectHeader)
+    .option("--read-only", "Skip payment checks (X402-06/07)", false)
+    .action(async (opts) => {
+    const shape = {
+        ...(opts.method ? { method: opts.method } : {}),
+        ...(opts.body !== undefined ? { body: opts.body } : {}),
+        ...(opts.header ? { headers: opts.header } : {}),
+    };
+    const results = await runX402ReadChecks({ target: opts.target, ...shape });
+    const payerKey = opts.payerKey ?? process.env.STELLAR_PRIVATE_KEY;
+    if (opts.readOnly) {
+        console.log("(--read-only set: skipping payment checks)\n");
+    }
+    else if (!payerKey) {
+        console.log("(no payer key: set STELLAR_PRIVATE_KEY in .env or pass --payer-key — skipping payment checks)\n");
+    }
+    else {
+        console.log("X402-06 settles a real payment and X402-07 attempts one. Testnet funds will move.\n");
+        results.push(...(await runX402PaymentChecks({
+            target: opts.target,
+            network: opts.network,
+            payerSecretKey: payerKey,
+            ...shape,
+        })));
+    }
+    process.exit(report(results));
+});
+program
+    .command("mpp-channel")
+    .description("Run MPP channel-mode compliance checks against a target service")
+    .requiredOption("--target <url>", "URL of the paid resource to test")
+    .option("--commitment-key <hex>", "Raw ed25519 commitment seed, hex (default: COMMITMENT_SECRET_HEX)")
+    .option("--network <network>", "CAIP-2 network id (default: MPP_STELLAR_NETWORK)")
+    .option("--rpc-url <url>", "Override the default Soroban RPC endpoint")
+    .option("--channel <address>", "Assert which channel the target bills through. Defaults to the channel " +
+    "the target advertises; a mismatch fails MPP-10. (env: CHANNEL_CONTRACT)")
+    .option("--expect-token <address>", "MPP-10: expected token contract")
+    .option("--expect-from <address>", "MPP-10: expected funder address")
+    .option("--expect-to <address>", "MPP-10: expected recipient address")
+    .option("--expect-refund-period <ledgers>", "MPP-10: expected refund waiting period")
+    .option("--allow-destructive", "Enable MPP-13. Closing settles on-chain and permanently ends the channel.", false)
+    .option("--destructive-channel <address>", "Channel MPP-13 is permitted to close (default: CHANNEL_CONTRACT_DISPOSABLE)")
+    .action(async (opts) => {
+    const commitmentSecretHex = opts.commitmentKey ?? process.env.COMMITMENT_SECRET_HEX;
+    if (!commitmentSecretHex) {
+        console.error("No commitment key. Pass --commitment-key or set COMMITMENT_SECRET_HEX in .env.");
+        process.exit(2);
+    }
+    const network = opts.network ?? process.env.MPP_STELLAR_NETWORK ?? "stellar:testnet";
+    const channelOverride = opts.channel ?? process.env.CHANNEL_CONTRACT;
+    const destructiveChannel = opts.destructiveChannel ?? process.env.CHANNEL_CONTRACT_DISPOSABLE;
+    const refundWaitingPeriod = Number(opts.expectRefundPeriod);
+    const results = await runMppChannelSuite({
+        target: opts.target,
+        commitmentSecretHex,
+        network,
+        allowDestructive: opts.allowDestructive === true,
+        ...(opts.rpcUrl ? { rpcUrl: opts.rpcUrl } : {}),
+        ...(channelOverride ? { channelOverride } : {}),
+        ...(destructiveChannel ? { destructiveChannel } : {}),
+        expected: {
+            ...(opts.expectToken ? { token: opts.expectToken } : {}),
+            ...(opts.expectFrom ? { from: opts.expectFrom } : {}),
+            ...(opts.expectTo ? { to: opts.expectTo } : {}),
+            ...(Number.isInteger(refundWaitingPeriod) ? { refundWaitingPeriod } : {}),
+        },
+    });
+    process.exit(report(results));
+});
+program
+    .command("mpp-charge")
+    .description("Run the MPP charge-mode check (MPP-01) against a target service")
+    .requiredOption("--target <url>", "URL of the paid resource to test")
+    .option("--payer-key <key>", "Payer secret key, S... (default: MPP_PAYER_SECRET)")
+    .option("--network <network>", "CAIP-2 network id (default: MPP_STELLAR_NETWORK)")
+    .option("--rpc-url <url>", "Override the default Soroban RPC endpoint")
+    .action(async (opts) => {
+    const payerSecretKey = opts.payerKey ?? process.env.MPP_PAYER_SECRET;
+    if (!payerSecretKey) {
+        console.error("No payer key. Pass --payer-key or set MPP_PAYER_SECRET in .env.");
+        process.exit(2);
+    }
+    console.log("MPP-01 settles a real payment. If the target is reachable, testnet funds will move.\n");
+    const results = await runMppChargeSuite({
+        target: opts.target,
+        network: opts.network ?? process.env.MPP_STELLAR_NETWORK ?? "stellar:testnet",
+        payerSecretKey,
+        ...(opts.rpcUrl ? { rpcUrl: opts.rpcUrl } : {}),
+    });
+    process.exit(report(results));
+});
+program.parse();

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "@wasit-dev/cli",
+  "version": "0.1.0",
+  "description": "CLI for x402/MPP protocol-conformance testing on Stellar \u2014 verifies a service's payment flow settles on-chain per spec.",
+  "type": "module",
+  "bin": {
+    "wasit": "dist/index.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/dzakwannajmi/wasit.git",
+    "directory": "packages/cli"
+  },
+  "homepage": "https://github.com/dzakwannajmi/wasit#readme",
+  "bugs": {
+    "url": "https://github.com/dzakwannajmi/wasit/issues"
+  },
+  "keywords": [
+    "stellar",
+    "x402",
+    "mpp",
+    "soroban",
+    "conformance-testing",
+    "cli",
+    "payments"
+  ],
+  "author": "Muhammad Dzakwan Najmi",
+  "license": "Apache-2.0",
+  "engines": {
+    "node": ">=24"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json"
+  },
+  "dependencies": {
+    "@stellar/mpp": "^0.7.1",
+    "@stellar/stellar-sdk": "^16.1.0",
+    "@wasit-dev/core": "^0.1.0",
+    "commander": "^12.0.0",
+    "dotenv": "^16.0.0",
+    "mppx": "^0.8.14"
+  }
+}