@xpr-agents/openclaw 0.2.16 → 0.3.1

package/dist/cli-session.d.ts

@@ -0,0 +1,60 @@
+/**
+ * CLI-backed session factories.
+ *
+ * Provides two shapes from the same underlying proton CLI wrapper:
+ *
+ * 1. createCliSession() → ProtonSession (SDK shape)
+ *      Used by openclaw/src/session.ts and downstream tools/registries.
+ *      Preserves the SDK's public ProtonSession interface — no changes to
+ *      sdk/src/types.ts, no breaking changes for SDK consumers.
+ *
+ * 2. createCliApi() → eosjs-Api lookalike + auth metadata
+ *      Used by skill files (defi, nft, lending, governance, xmd) that
+ *      previously called `await session.api.transact({actions}, options)`.
+ *      The .transact() signature matches eosjs so handler bodies need no
+ *      changes — only the session factory swaps.
+ *
+ * Both shapes route every signed action through `proton transaction:push`.
+ * Neither holds, reads, or transmits private key material.
+ */
+import { JsonRpc } from '@proton/js';
+import type { ProtonSession, TransactArgs, TransactionResult } from '@xpr-agents/sdk';
+export interface CliSessionOptions {
+    account: string;
+    permission?: string;
+    rpcEndpoint?: string;
+}
+/**
+ * Create a ProtonSession (SDK shape) backed by the proton CLI.
+ * No private key required — the CLI signs internally via its keychain.
+ */
+export declare function createCliSession(opts: CliSessionOptions): {
+    rpc: JsonRpc;
+    session: ProtonSession;
+};
+/**
+ * Lightweight Api lookalike returned by createCliApi(). Matches the subset
+ * of eosjs Api that the 5 signing skills use.
+ */
+export interface CliApi {
+    transact(tx: {
+        actions: TransactArgs['actions'];
+    }, options?: {
+        blocksBehind?: number;
+        expireSeconds?: number;
+    }): Promise<TransactionResult>;
+}
+/**
+ * Create an eosjs-Api lookalike backed by the proton CLI.
+ * Drop-in replacement for the `api` returned by skill `getSession()`
+ * functions that used to construct `new Api({ rpc, signatureProvider })`.
+ *
+ * The blocksBehind/expireSeconds options are accepted but ignored —
+ * proton CLI manages tx headers internally. Skill code remains unchanged.
+ */
+export declare function createCliApi(opts: CliSessionOptions): {
+    api: CliApi;
+    account: string;
+    permission: string;
+};
+//# sourceMappingURL=cli-session.d.ts.map

package/dist/cli-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-session.d.ts","sourceRoot":"","sources":["../src/cli-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAKtF,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AA6BD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,GAAG;IACzD,GAAG,EAAE,OAAO,CAAC;IACb,OAAO,EAAE,aAAa,CAAC;CACxB,CAkBA;AAED;;;GAGG;AACH,MAAM,WAAW,MAAM;IACrB,QAAQ,CACN,EAAE,EAAE;QAAE,OAAO,EAAE,YAAY,CAAC,SAAS,CAAC,CAAA;KAAE,EACxC,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1D,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,iBAAiB,GAAG;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB,CAYA"}

package/dist/cli-session.js

@@ -0,0 +1,89 @@
+"use strict";
+/**
+ * CLI-backed session factories.
+ *
+ * Provides two shapes from the same underlying proton CLI wrapper:
+ *
+ * 1. createCliSession() → ProtonSession (SDK shape)
+ *      Used by openclaw/src/session.ts and downstream tools/registries.
+ *      Preserves the SDK's public ProtonSession interface — no changes to
+ *      sdk/src/types.ts, no breaking changes for SDK consumers.
+ *
+ * 2. createCliApi() → eosjs-Api lookalike + auth metadata
+ *      Used by skill files (defi, nft, lending, governance, xmd) that
+ *      previously called `await session.api.transact({actions}, options)`.
+ *      The .transact() signature matches eosjs so handler bodies need no
+ *      changes — only the session factory swaps.
+ *
+ * Both shapes route every signed action through `proton transaction:push`.
+ * Neither holds, reads, or transmits private key material.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createCliSession = createCliSession;
+exports.createCliApi = createCliApi;
+const js_1 = require("@proton/js");
+const proton_cli_1 = require("./proton-cli");
+const DEFAULT_PERMISSION = 'active';
+/**
+ * Result of CLI signing, normalised to the SDK's TransactionResult shape.
+ * `processed` is best-effort: proton CLI returns the full Hyperion-style
+ * trace, but we only surface block_num and block_time for SDK compatibility.
+ */
+function normaliseResult(result) {
+    const processed = result.processed;
+    return {
+        transaction_id: result.transaction_id,
+        processed: {
+            block_num: processed?.block_num ?? processed?.receipt?.block_num ?? 0,
+            block_time: processed?.block_time ?? '',
+        },
+    };
+}
+function toCliActions(actions) {
+    return actions.map((a) => ({
+        account: a.account,
+        name: a.name,
+        authorization: a.authorization,
+        data: a.data,
+    }));
+}
+/**
+ * Create a ProtonSession (SDK shape) backed by the proton CLI.
+ * No private key required — the CLI signs internally via its keychain.
+ */
+function createCliSession(opts) {
+    const account = opts.account;
+    const permission = opts.permission ?? DEFAULT_PERMISSION;
+    const rpcEndpoint = opts.rpcEndpoint ?? 'https://proton.greymass.com';
+    const rpc = new js_1.JsonRpc(rpcEndpoint);
+    const session = {
+        auth: { actor: account, permission },
+        link: {
+            transact: async (args) => {
+                const result = await (0, proton_cli_1.execTransactionPush)({ actions: toCliActions(args.actions) });
+                return normaliseResult(result);
+            },
+        },
+    };
+    return { rpc, session };
+}
+/**
+ * Create an eosjs-Api lookalike backed by the proton CLI.
+ * Drop-in replacement for the `api` returned by skill `getSession()`
+ * functions that used to construct `new Api({ rpc, signatureProvider })`.
+ *
+ * The blocksBehind/expireSeconds options are accepted but ignored —
+ * proton CLI manages tx headers internally. Skill code remains unchanged.
+ */
+function createCliApi(opts) {
+    const account = opts.account;
+    const permission = opts.permission ?? DEFAULT_PERMISSION;
+    const api = {
+        transact: async (tx, _options) => {
+            const result = await (0, proton_cli_1.execTransactionPush)({ actions: toCliActions(tx.actions) });
+            return normaliseResult(result);
+        },
+    };
+    return { api, account, permission };
+}
+//# sourceMappingURL=cli-session.js.map

package/dist/cli-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-session.js","sourceRoot":"","sources":["../src/cli-session.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;AA6CH,4CAqBC;AAqBD,oCAgBC;AArGD,mCAAqC;AAErC,6CAAmE;AAEnE,MAAM,kBAAkB,GAAG,QAAQ,CAAC;AAQpC;;;;GAIG;AACH,SAAS,eAAe,CAAC,MAAuD;IAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,SAEZ,CAAC;IACd,OAAO;QACL,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,SAAS,EAAE;YACT,SAAS,EAAE,SAAS,EAAE,SAAS,IAAI,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,CAAC;YACrE,UAAU,EAAE,SAAS,EAAE,UAAU,IAAI,EAAE;SACxC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,OAAgC;IACpD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,IAAI,EAAE,CAAC,CAAC,IAAI;KACb,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,IAAuB;IAItD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,kBAAkB,CAAC;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,6BAA6B,CAAC;IAEtE,MAAM,GAAG,GAAG,IAAI,YAAO,CAAC,WAAW,CAAC,CAAC;IAErC,MAAM,OAAO,GAAkB;QAC7B,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE;QACpC,IAAI,EAAE;YACJ,QAAQ,EAAE,KAAK,EAAE,IAAkB,EAA8B,EAAE;gBACjE,MAAM,MAAM,GAAG,MAAM,IAAA,gCAAmB,EAAC,EAAE,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAClF,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;YACjC,CAAC;SACF;KACF,CAAC;IAEF,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC1B,CAAC;AAaD;;;;;;;GAOG;AACH,SAAgB,YAAY,CAAC,IAAuB;IAKlD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,kBAAkB,CAAC;IAEzD,MAAM,GAAG,GAAW;QAClB,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE;YAC/B,MAAM,MAAM,GAAG,MAAM,IAAA,gCAAmB,EAAC,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAChF,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;KACF,CAAC;IAEF,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACtC,CAAC"}

package/dist/index.d.ts

@@ -13,6 +13,10 @@
 import type { PluginApi } from './types';
 export type { SkillManifest, SkillApi, LoadedSkill } from './skill-types';
 export type { ToolDefinition, PluginApi } from './types';
+export { createCliSession, createCliApi } from './cli-session';
+export type { CliSessionOptions, CliApi } from './cli-session';
+export { execAction, execTransactionPush, getTableRows, checkProtonCli, checkKeychainPopulated, ProtonCliError, } from './proton-cli';
+export type { CliErrorCode, CliAction, CliTransactionResult, TableQueryOpts } from './proton-cli';
 /**
  * OpenClaw plugin API shape (real runtime API).
  * Plugins receive this from the OpenClaw gateway.

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAUH,OAAO,KAAK,EAAE,SAAS,EAAgC,MAAM,SAAS,CAAC;AAGvE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1E,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEzD;;;GAGG;AACH,UAAU,iBAAiB;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,YAAY,CAAC,IAAI,EAAE;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,OAAO,CAAC;QACpB,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;YAChE,OAAO,EAAE,KAAK,CAAC;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,IAAI,CAAC,EAAE,MAAM,CAAA;aAAE,CAAC,CAAC;SACjD,CAAC,CAAC;KACJ,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AA0BD,MAAM,CAAC,OAAO,UAAU,eAAe,CAAC,OAAO,EAAE,iBAAiB,GAAG,SAAS,GAAG,IAAI,CA2DpF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAUH,OAAO,KAAK,EAAE,SAAS,EAAgC,MAAM,SAAS,CAAC;AAGvE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1E,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAIzD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC/D,YAAY,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,YAAY,EACZ,cAAc,EACd,sBAAsB,EACtB,cAAc,GACf,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAElG;;;GAGG;AACH,UAAU,iBAAiB;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,YAAY,CAAC,IAAI,EAAE;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,OAAO,CAAC;QACpB,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;YAChE,OAAO,EAAE,KAAK,CAAC;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,IAAI,CAAC,EAAE,MAAM,CAAA;aAAE,CAAC,CAAC;SACjD,CAAC,CAAC;KACJ,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AA0BD,MAAM,CAAC,OAAO,UAAU,eAAe,CAAC,OAAO,EAAE,iBAAiB,GAAG,SAAS,GAAG,IAAI,CA8DpF"}

package/dist/index.js

@@ -12,6 +12,7 @@
  * - 15 Shellbook tools (posts, comments, voting, subshells, search, profiles)
  */
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProtonCliError = exports.checkKeychainPopulated = exports.checkProtonCli = exports.getTableRows = exports.execTransactionPush = exports.execAction = exports.createCliApi = exports.createCliSession = void 0;
 exports.default = xprAgentsPlugin;
 const session_1 = require("./session");
 const agent_1 = require("./tools/agent");
@@ -21,6 +22,18 @@ const escrow_1 = require("./tools/escrow");
 const indexer_1 = require("./tools/indexer");
 const a2a_1 = require("./tools/a2a");
 const shellbook_1 = require("./tools/shellbook");
+// Re-export CLI session factories. Used by skill packages to obtain a
+// signing session backed by the proton CLI (no private key in process).
+var cli_session_1 = require("./cli-session");
+Object.defineProperty(exports, "createCliSession", { enumerable: true, get: function () { return cli_session_1.createCliSession; } });
+Object.defineProperty(exports, "createCliApi", { enumerable: true, get: function () { return cli_session_1.createCliApi; } });
+var proton_cli_1 = require("./proton-cli");
+Object.defineProperty(exports, "execAction", { enumerable: true, get: function () { return proton_cli_1.execAction; } });
+Object.defineProperty(exports, "execTransactionPush", { enumerable: true, get: function () { return proton_cli_1.execTransactionPush; } });
+Object.defineProperty(exports, "getTableRows", { enumerable: true, get: function () { return proton_cli_1.getTableRows; } });
+Object.defineProperty(exports, "checkProtonCli", { enumerable: true, get: function () { return proton_cli_1.checkProtonCli; } });
+Object.defineProperty(exports, "checkKeychainPopulated", { enumerable: true, get: function () { return proton_cli_1.checkKeychainPopulated; } });
+Object.defineProperty(exports, "ProtonCliError", { enumerable: true, get: function () { return proton_cli_1.ProtonCliError; } });
 /**
  * Create an adapter that bridges the real OpenClaw API to our internal PluginApi.
  * This lets all 57 tool registrations work unchanged.
@@ -54,7 +67,10 @@ function xprAgentsPlugin(realApi) {
     const network = rawConfig.network || 'mainnet';
     const defaultRpc = network === 'mainnet' ? 'https://proton.eosusa.io' : 'https://tn1.protonnz.com';
     const rpcEndpoint = rawConfig.rpcEndpoint || process.env.XPR_RPC_ENDPOINT || defaultRpc;
-    const hasCredentials = !!process.env.XPR_PRIVATE_KEY && !!process.env.XPR_ACCOUNT;
+    // Signing is enabled when XPR_ACCOUNT is set. The proton CLI handles the
+    // private key — the agent process never sees it. Verifying CLI presence
+    // is the entry-point's job (starter/agent/src/index.ts), not the plugin's.
+    const hasCredentials = !!process.env.XPR_ACCOUNT;
     // Create RPC connection and optional session
     let rpc;
     let session;
@@ -91,7 +107,7 @@ function xprAgentsPlugin(realApi) {
     (0, a2a_1.registerA2ATools)(api, config);
     (0, shellbook_1.registerShellbookTools)(api);
     if (!hasCredentials) {
-        console.log('[xpr-agents] Read-only mode: XPR_PRIVATE_KEY and XPR_ACCOUNT not set. Write tools will fail.');
+        console.log('[xpr-agents] Read-only mode: XPR_ACCOUNT not set. Write tools will fail.');
     }
     console.log(`[xpr-agents] Plugin loaded: ${config.network} (${rpcEndpoint})`);
 }

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;AA4DH,kCA2DC;AArHD,uCAA6D;AAC7D,yCAAmD;AACnD,+CAAyD;AACzD,mDAA6D;AAC7D,2CAAqD;AACrD,6CAAuD;AACvD,qCAA+C;AAC/C,iDAA2D;AA2B3D;;;GAGG;AACH,SAAS,aAAa,CAAC,OAA0B;IAC/C,OAAO;QACL,YAAY,CAAC,IAAoB;YAC/B,OAAO,CAAC,YAAY,CAAC;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,MAA+B;oBACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBAC1C,MAAM,IAAI,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;oBACnF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC/C,CAAC;aACF,CAAC,CAAC;QACL,CAAC;QACD,SAAS;YACP,OAAO,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;QACpC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAwB,eAAe,CAAC,OAAsC;IAC5E,6EAA6E;IAC7E,mFAAmF;IACnF,MAAM,GAAG,GAAc,OAAQ,OAAe,CAAC,SAAS,KAAK,UAAU;QACrE,CAAC,CAAC,OAAoB;QACtB,CAAC,CAAC,aAAa,CAAC,OAA4B,CAAC,CAAC;IAEhD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;IAElC,MAAM,OAAO,GAAI,SAAS,CAAC,OAAkB,IAAI,SAAS,CAAC;IAC3D,MAAM,UAAU,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,0BAA0B,CAAC;IACnG,MAAM,WAAW,GAAI,SAAS,CAAC,WAAsB,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,UAAU,CAAC;IAEpG,MAAM,cAAc,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAElF,6CAA6C;IAC7C,IAAI,GAAG,CAAC;IACR,IAAI,OAAO,CAAC;IAEZ,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,IAAA,uBAAa,EAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QAC9C,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACjB,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,IAAA,2BAAiB,EAAC,WAAW,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,YAAY,GAAG,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAA2B,CAAC;IAE3E,MAAM,MAAM,GAAiB;QAC3B,GAAG,EAAE,GAAU;QACf,OAAO;QACP,OAAO,EAAG,SAAS,CAAC,OAAiC,IAAI,SAAS;QAClE,WAAW;QACX,UAAU,EAAG,SAAS,CAAC,UAAqB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,+BAA+B;QAC1G,SAAS,EAAE;YACT,SAAS,EAAE,YAAY,CAAC,SAAS,IAAI,WAAW;YAChD,SAAS,EAAE,YAAY,CAAC,SAAS,IAAI,WAAW;YAChD,UAAU,EAAE,YAAY,CAAC,UAAU,IAAI,YAAY;YACnD,WAAW,EAAE,YAAY,CAAC,WAAW,IAAI,aAAa;SACvD;QACD,eAAe,EAAE,SAAS,CAAC,eAAe,KAAK,KAAK;QACpD,iBAAiB,EAAG,SAAS,CAAC,iBAA4B,IAAI,QAAQ;KACvE,CAAC;IAEF,2BAA2B;IAC3B,IAAA,0BAAkB,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAChC,IAAA,gCAAqB,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,IAAA,oCAAuB,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,IAAA,4BAAmB,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACjC,IAAA,8BAAoB,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAClC,IAAA,sBAAgB,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9B,IAAA,kCAAsB,EAAC,GAAG,CAAC,CAAC;IAE5B,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,8FAA8F,CAAC,CAAC;IAC9G,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,OAAO,KAAK,WAAW,GAAG,CAAC,CAAC;AAChF,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AA0EH,kCA8DC;AAtID,uCAA6D;AAC7D,yCAAmD;AACnD,+CAAyD;AACzD,mDAA6D;AAC7D,2CAAqD;AACrD,6CAAuD;AACvD,qCAA+C;AAC/C,iDAA2D;AAO3D,sEAAsE;AACtE,wEAAwE;AACxE,6CAA+D;AAAtD,+GAAA,gBAAgB,OAAA;AAAE,2GAAA,YAAY,OAAA;AAEvC,2CAOsB;AANpB,wGAAA,UAAU,OAAA;AACV,iHAAA,mBAAmB,OAAA;AACnB,0GAAA,YAAY,OAAA;AACZ,4GAAA,cAAc,OAAA;AACd,oHAAA,sBAAsB,OAAA;AACtB,4GAAA,cAAc,OAAA;AAwBhB;;;GAGG;AACH,SAAS,aAAa,CAAC,OAA0B;IAC/C,OAAO;QACL,YAAY,CAAC,IAAoB;YAC/B,OAAO,CAAC,YAAY,CAAC;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,MAA+B;oBACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBAC1C,MAAM,IAAI,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;oBACnF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC/C,CAAC;aACF,CAAC,CAAC;QACL,CAAC;QACD,SAAS;YACP,OAAO,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;QACpC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAwB,eAAe,CAAC,OAAsC;IAC5E,6EAA6E;IAC7E,mFAAmF;IACnF,MAAM,GAAG,GAAc,OAAQ,OAAe,CAAC,SAAS,KAAK,UAAU;QACrE,CAAC,CAAC,OAAoB;QACtB,CAAC,CAAC,aAAa,CAAC,OAA4B,CAAC,CAAC;IAEhD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;IAElC,MAAM,OAAO,GAAI,SAAS,CAAC,OAAkB,IAAI,SAAS,CAAC;IAC3D,MAAM,UAAU,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,0BAA0B,CAAC;IACnG,MAAM,WAAW,GAAI,SAAS,CAAC,WAAsB,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,UAAU,CAAC;IAEpG,yEAAyE;IACzE,wEAAwE;IACxE,2EAA2E;IAC3E,MAAM,cAAc,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAEjD,6CAA6C;IAC7C,IAAI,GAAG,CAAC;IACR,IAAI,OAAO,CAAC;IAEZ,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,IAAA,uBAAa,EAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QAC9C,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACjB,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,IAAA,2BAAiB,EAAC,WAAW,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,YAAY,GAAG,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAA2B,CAAC;IAE3E,MAAM,MAAM,GAAiB;QAC3B,GAAG,EAAE,GAAU;QACf,OAAO;QACP,OAAO,EAAG,SAAS,CAAC,OAAiC,IAAI,SAAS;QAClE,WAAW;QACX,UAAU,EAAG,SAAS,CAAC,UAAqB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,+BAA+B;QAC1G,SAAS,EAAE;YACT,SAAS,EAAE,YAAY,CAAC,SAAS,IAAI,WAAW;YAChD,SAAS,EAAE,YAAY,CAAC,SAAS,IAAI,WAAW;YAChD,UAAU,EAAE,YAAY,CAAC,UAAU,IAAI,YAAY;YACnD,WAAW,EAAE,YAAY,CAAC,WAAW,IAAI,aAAa;SACvD;QACD,eAAe,EAAE,SAAS,CAAC,eAAe,KAAK,KAAK;QACpD,iBAAiB,EAAG,SAAS,CAAC,iBAA4B,IAAI,QAAQ;KACvE,CAAC;IAEF,2BAA2B;IAC3B,IAAA,0BAAkB,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAChC,IAAA,gCAAqB,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,IAAA,oCAAuB,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,IAAA,4BAAmB,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACjC,IAAA,8BAAoB,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAClC,IAAA,sBAAgB,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9B,IAAA,kCAAsB,EAAC,GAAG,CAAC,CAAC;IAE5B,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC;IAC1F,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,OAAO,KAAK,WAAW,GAAG,CAAC,CAAC;AAChF,CAAC"}

package/dist/proton-cli.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Proton CLI wrapper.
+ *
+ * Shells out to the `proton` CLI for all transaction signing. The agent
+ * process never touches private keys — they live exclusively in the CLI's
+ * encrypted keychain.
+ *
+ * Used by:
+ *   - openclaw/src/session.ts (createCliSession factory)
+ *   - openclaw/src/cli-session.ts (createCliApi factory)
+ *   - openclaw/starter/agent/skills/* (via @xpr-agents/openclaw)
+ */
+export type CliErrorCode = 'network' | 'auth' | 'serialization' | 'reverted' | 'unknown';
+export declare class ProtonCliError extends Error {
+    readonly code: CliErrorCode;
+    readonly stderr: string;
+    constructor(message: string, code: CliErrorCode, stderr: string);
+}
+export interface CliAction {
+    account: string;
+    name: string;
+    authorization: Array<{
+        actor: string;
+        permission: string;
+    }>;
+    data: Record<string, unknown>;
+}
+export interface CliTransactionResult {
+    transaction_id: string;
+    processed?: unknown;
+}
+export interface TableQueryOpts {
+    limit?: number;
+    lower_bound?: string;
+    upper_bound?: string;
+    reverse?: boolean;
+    index_position?: number;
+    key_type?: string;
+}
+/**
+ * Sign and submit a single action via `proton action`.
+ *
+ * @param contract - Contract account (e.g. 'agentescrow')
+ * @param action - Action name (e.g. 'createjob')
+ * @param data - Positional args matching the contract's action ABI
+ * @param authorization - "account@permission" string (e.g. "alice@active")
+ */
+export declare function execAction(contract: string, action: string, data: unknown[], authorization: string): Promise<CliTransactionResult>;
+/**
+ * Sign and submit a multi-action atomic transaction via `proton transaction:push`.
+ *
+ * NOTE: do NOT use the bare `proton transaction` command — it does not
+ * JSON.parse its argument (bug in @proton/cli). Use `transaction:push` exclusively.
+ */
+export declare function execTransactionPush(tx: {
+    actions: CliAction[];
+}): Promise<CliTransactionResult>;
+/**
+ * Read-only table query via `proton table`. No signing required.
+ */
+export declare function getTableRows(code: string, table: string, scope?: string, opts?: TableQueryOpts): Promise<unknown>;
+/**
+ * Verify the proton CLI is installed and on PATH. Used by startup checks.
+ */
+export declare function checkProtonCli(): Promise<boolean>;
+/**
+ * Verify the proton CLI keychain has at least one key registered.
+ * Soft check — this doesn't verify any specific account, just that
+ * a keychain exists. The CLI itself will fail with auth code if the
+ * specific account's key is missing.
+ */
+export declare function checkKeychainPopulated(): Promise<boolean>;
+//# sourceMappingURL=proton-cli.d.ts.map

package/dist/proton-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proton-cli.d.ts","sourceRoot":"","sources":["../src/proton-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAUH,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,MAAM,GAAG,eAAe,GAAG,UAAU,GAAG,SAAS,CAAC;AAEzF,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM;CAMhE;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5D,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AA+FD;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO,EAAE,EACf,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,oBAAoB,CAAC,CAe/B;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,EAAE,EAAE;IAAE,OAAO,EAAE,SAAS,EAAE,CAAA;CAAE,GAC3B,OAAO,CAAC,oBAAoB,CAAC,CAoB/B;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,cAAc,GACpB,OAAO,CAAC,OAAO,CAAC,CAelB;AAED;;GAEG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC,CAOvD;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,OAAO,CAAC,CAO/D"}

package/dist/proton-cli.js

@@ -0,0 +1,221 @@
+"use strict";
+/**
+ * Proton CLI wrapper.
+ *
+ * Shells out to the `proton` CLI for all transaction signing. The agent
+ * process never touches private keys — they live exclusively in the CLI's
+ * encrypted keychain.
+ *
+ * Used by:
+ *   - openclaw/src/session.ts (createCliSession factory)
+ *   - openclaw/src/cli-session.ts (createCliApi factory)
+ *   - openclaw/starter/agent/skills/* (via @xpr-agents/openclaw)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProtonCliError = void 0;
+exports.execAction = execAction;
+exports.execTransactionPush = execTransactionPush;
+exports.getTableRows = getTableRows;
+exports.checkProtonCli = checkProtonCli;
+exports.checkKeychainPopulated = checkKeychainPopulated;
+const child_process_1 = require("child_process");
+const util_1 = require("util");
+const execFileAsync = (0, util_1.promisify)(child_process_1.execFile);
+const CLI_TIMEOUT_MS = 30000;
+const MAX_BUFFER = 10 * 1024 * 1024; // 10MB
+class ProtonCliError extends Error {
+    constructor(message, code, stderr) {
+        super(message);
+        this.name = 'ProtonCliError';
+        this.code = code;
+        this.stderr = stderr;
+    }
+}
+exports.ProtonCliError = ProtonCliError;
+/**
+ * Categorise an error from the CLI by stderr signature.
+ * Default to 'unknown' — pattern set is intentionally narrow.
+ */
+function classifyError(stderr) {
+    if (/ECONNREFUSED|ETIMEDOUT|ENOTFOUND|fetch failed|getaddrinfo|ENETUNREACH/i.test(stderr)) {
+        return 'network';
+    }
+    if (/no key found|key is not unlocked|account .* not found|signature_provider/i.test(stderr)) {
+        return 'auth';
+    }
+    if (/unable to unpack|invalid type|cannot serialize|unknown action|unknown_action_exception/i.test(stderr)) {
+        return 'serialization';
+    }
+    if (/assertion failure|eosio_assert|action_validate_exception/i.test(stderr)) {
+        return 'reverted';
+    }
+    return 'unknown';
+}
+/**
+ * Remove anything that looks like action data payload from stderr before logging.
+ * Action data may contain memos, addresses, or other potentially sensitive info.
+ */
+function scrubStderr(stderr) {
+    if (!stderr)
+        return '';
+    return stderr
+        // Strip "data": { ... } blocks (single-line and multi-line)
+        .replace(/"data"\s*:\s*\{[^}]*\}/gs, '"data":[scrubbed]')
+        // Strip hex_data blocks
+        .replace(/"hex_data"\s*:\s*"[^"]*"/g, '"hex_data":"[scrubbed]"');
+}
+function logStart(contract, action, auth) {
+    console.error(`[proton-cli] action ${contract}::${action} auth=${auth}`);
+}
+function logSuccess(txid, ms) {
+    console.error(`[proton-cli] tx ${txid} ok in ${ms}ms`);
+}
+function logFailure(code, scrubbed) {
+    // Cap stderr in logs to avoid flooding
+    const snippet = scrubbed.length > 500 ? scrubbed.slice(0, 500) + '...' : scrubbed;
+    console.error(`[proton-cli] tx FAILED: ${code} ${snippet}`);
+}
+/**
+ * Parse the transaction ID from proton CLI stdout.
+ * Output is JSON containing a transaction_id (or trx_id) field.
+ */
+function parseTxId(stdout) {
+    const txMatch = stdout.match(/"transaction_id"\s*:\s*"([0-9a-f]+)"/);
+    if (txMatch)
+        return txMatch[1];
+    const trxMatch = stdout.match(/"trx_id"\s*:\s*"([0-9a-f]+)"/);
+    return trxMatch ? trxMatch[1] : null;
+}
+/**
+ * Try to parse the full processed result block from stdout. Best-effort.
+ */
+function tryParseProcessed(stdout) {
+    try {
+        const parsed = JSON.parse(stdout);
+        if (parsed && typeof parsed === 'object' && 'processed' in parsed) {
+            return parsed.processed;
+        }
+        return parsed;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Run the proton CLI with the given arguments. Always uses execFile (no shell).
+ */
+async function runProton(args) {
+    try {
+        const result = await execFileAsync('proton', args, {
+            timeout: CLI_TIMEOUT_MS,
+            maxBuffer: MAX_BUFFER,
+        });
+        return { stdout: result.stdout };
+    }
+    catch (err) {
+        const e = err;
+        const stderrRaw = (e.stderr || '') + (e.message || '');
+        const scrubbed = scrubStderr(stderrRaw);
+        const code = classifyError(stderrRaw);
+        logFailure(code, scrubbed);
+        throw new ProtonCliError(`proton CLI failed: ${code}`, code, scrubbed);
+    }
+}
+/**
+ * Sign and submit a single action via `proton action`.
+ *
+ * @param contract - Contract account (e.g. 'agentescrow')
+ * @param action - Action name (e.g. 'createjob')
+ * @param data - Positional args matching the contract's action ABI
+ * @param authorization - "account@permission" string (e.g. "alice@active")
+ */
+async function execAction(contract, action, data, authorization) {
+    logStart(contract, action, authorization);
+    const start = Date.now();
+    const dataJson = JSON.stringify(data);
+    const { stdout } = await runProton(['action', contract, action, dataJson, authorization]);
+    const txid = parseTxId(stdout);
+    if (!txid) {
+        throw new ProtonCliError('proton CLI returned success but no transaction ID could be parsed', 'unknown', stdout);
+    }
+    logSuccess(txid, Date.now() - start);
+    return { transaction_id: txid, processed: tryParseProcessed(stdout) };
+}
+/**
+ * Sign and submit a multi-action atomic transaction via `proton transaction:push`.
+ *
+ * NOTE: do NOT use the bare `proton transaction` command — it does not
+ * JSON.parse its argument (bug in @proton/cli). Use `transaction:push` exclusively.
+ */
+async function execTransactionPush(tx) {
+    if (!tx.actions || tx.actions.length === 0) {
+        throw new ProtonCliError('execTransactionPush: empty actions array', 'unknown', '');
+    }
+    const first = tx.actions[0];
+    const auth = first.authorization[0];
+    logStart(first.account, first.name, `${auth.actor}@${auth.permission}`);
+    const start = Date.now();
+    const txJson = JSON.stringify(tx);
+    const { stdout } = await runProton(['transaction:push', txJson]);
+    const txid = parseTxId(stdout);
+    if (!txid) {
+        throw new ProtonCliError('proton CLI returned success but no transaction ID could be parsed', 'unknown', stdout);
+    }
+    logSuccess(txid, Date.now() - start);
+    return { transaction_id: txid, processed: tryParseProcessed(stdout) };
+}
+/**
+ * Read-only table query via `proton table`. No signing required.
+ */
+async function getTableRows(code, table, scope, opts) {
+    const args = ['table', code, table];
+    if (scope)
+        args.push(scope);
+    if (opts?.limit !== undefined)
+        args.push('-c', String(opts.limit));
+    if (opts?.lower_bound !== undefined)
+        args.push('-l', opts.lower_bound);
+    if (opts?.upper_bound !== undefined)
+        args.push('-u', opts.upper_bound);
+    if (opts?.reverse)
+        args.push('-r');
+    if (opts?.index_position !== undefined)
+        args.push('-i', String(opts.index_position));
+    if (opts?.key_type !== undefined)
+        args.push('-k', opts.key_type);
+    const { stdout } = await runProton(args);
+    try {
+        return JSON.parse(stdout);
+    }
+    catch {
+        throw new ProtonCliError('proton table returned invalid JSON', 'unknown', stdout);
+    }
+}
+/**
+ * Verify the proton CLI is installed and on PATH. Used by startup checks.
+ */
+async function checkProtonCli() {
+    try {
+        await execFileAsync('proton', ['--version'], { timeout: 5000 });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Verify the proton CLI keychain has at least one key registered.
+ * Soft check — this doesn't verify any specific account, just that
+ * a keychain exists. The CLI itself will fail with auth code if the
+ * specific account's key is missing.
+ */
+async function checkKeychainPopulated() {
+    try {
+        const { stdout } = await execFileAsync('proton', ['key:list'], { timeout: 5000 });
+        return stdout.includes('publicKey');
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=proton-cli.js.map

package/dist/proton-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proton-cli.js","sourceRoot":"","sources":["../src/proton-cli.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAkJH,gCAoBC;AAQD,kDAsBC;AAKD,oCAoBC;AAKD,wCAOC;AAQD,wDAOC;AAtPD,iDAAyC;AACzC,+BAAiC;AAEjC,MAAM,aAAa,GAAG,IAAA,gBAAS,EAAC,wBAAQ,CAAC,CAAC;AAE1C,MAAM,cAAc,GAAG,KAAM,CAAC;AAC9B,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AAI5C,MAAa,cAAe,SAAQ,KAAK;IAIvC,YAAY,OAAe,EAAE,IAAkB,EAAE,MAAc;QAC7D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAVD,wCAUC;AAuBD;;;GAGG;AACH,SAAS,aAAa,CAAC,MAAc;IACnC,IAAI,wEAAwE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1F,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,2EAA2E,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7F,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,yFAAyF,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3G,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,2DAA2D,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7E,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,MAAc;IACjC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,OAAO,MAAM;QACX,4DAA4D;SAC3D,OAAO,CAAC,0BAA0B,EAAE,mBAAmB,CAAC;QACzD,wBAAwB;SACvB,OAAO,CAAC,2BAA2B,EAAE,yBAAyB,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB,EAAE,MAAc,EAAE,IAAY;IAC9D,OAAO,CAAC,KAAK,CAAC,uBAAuB,QAAQ,KAAK,MAAM,SAAS,IAAI,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,EAAU;IAC1C,OAAO,CAAC,KAAK,CAAC,mBAAmB,IAAI,UAAU,EAAE,IAAI,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,UAAU,CAAC,IAAkB,EAAE,QAAgB;IACtD,uCAAuC;IACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;IAClF,OAAO,CAAC,KAAK,CAAC,2BAA2B,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,MAAc;IAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACrE,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC9D,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,MAAc;IACvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,WAAW,IAAI,MAAM,EAAE,CAAC;YAClE,OAAQ,MAAiC,CAAC,SAAS,CAAC;QACtD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,SAAS,CAAC,IAAc;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE;YACjD,OAAO,EAAE,cAAc;YACvB,SAAS,EAAE,UAAU;SACtB,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAAmE,CAAC;QAC9E,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACtC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC3B,MAAM,IAAI,cAAc,CAAC,sBAAsB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,UAAU,CAC9B,QAAgB,EAChB,MAAc,EACd,IAAe,EACf,aAAqB;IAErB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;IAC1F,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,cAAc,CACtB,mEAAmE,EACnE,SAAS,EACT,MAAM,CACP,CAAC;IACJ,CAAC;IACD,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;IACrC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,mBAAmB,CACvC,EAA4B;IAE5B,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,cAAc,CAAC,0CAA0C,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,cAAc,CACtB,mEAAmE,EACnE,SAAS,EACT,MAAM,CACP,CAAC;IACJ,CAAC;IACD,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;IACrC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;AACxE,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,KAAa,EACb,KAAc,EACd,IAAqB;IAErB,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,IAAI,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,IAAI,IAAI,EAAE,WAAW,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACvE,IAAI,IAAI,EAAE,WAAW,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACvE,IAAI,IAAI,EAAE,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,IAAI,EAAE,cAAc,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IACrF,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,oCAAoC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,cAAc;IAClC,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,sBAAsB;IAC1C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,OAAO,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/session.d.ts

@@ -1,17 +1,29 @@
+/**
+ * Server-side ProtonSession factory.
+ *
+ * This module previously held a JsSignatureProvider that loaded
+ * XPR_PRIVATE_KEY into the agent process. After the 2026-04-24 charliebot
+ * incident — where a hardcoded private key was leaked to a public repo —
+ * all signing was moved to the proton CLI's encrypted keychain.
+ *
+ * This file is now a thin wrapper around createCliSession.
+ *
+ * Required env: XPR_ACCOUNT
+ * Optional env: XPR_PERMISSION (defaults to 'active'), XPR_RPC_ENDPOINT
+ *
+ * The agent process MUST NOT read XPR_PRIVATE_KEY. The legacy entry-point
+ * check in starter/agent/src/index.ts refuses to start if it is set.
+ */
 import { JsonRpc } from '@proton/js';
 import type { ProtonSession } from '@xpr-agents/sdk';
 export interface SessionConfig {
     rpcEndpoint: string;
-    privateKey?: string;
     account?: string;
     permission?: string;
 }
 /**
- * Create a server-side ProtonSession from environment variables.
- * Uses @proton/js (no browser dependency).
- *
- * Required env vars: XPR_PRIVATE_KEY, XPR_ACCOUNT
- * Optional: XPR_PERMISSION (defaults to 'active')
+ * Create a server-side ProtonSession backed by the proton CLI.
+ * No private key required — the CLI signs internally via its keychain.
  */
 export declare function createSession(config: SessionConfig): {
     rpc: JsonRpc;

package/dist/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAO,OAAO,EAAuB,MAAM,YAAY,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAmC,MAAM,iBAAiB,CAAC;AAEtF,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG;IAAE,GAAG,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CA8B7F;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAE9D"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGrD,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG;IAAE,GAAG,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CAS7F;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAE9D"}

package/dist/session.js

@@ -1,38 +1,36 @@
 "use strict";
+/**
+ * Server-side ProtonSession factory.
+ *
+ * This module previously held a JsSignatureProvider that loaded
+ * XPR_PRIVATE_KEY into the agent process. After the 2026-04-24 charliebot
+ * incident — where a hardcoded private key was leaked to a public repo —
+ * all signing was moved to the proton CLI's encrypted keychain.
+ *
+ * This file is now a thin wrapper around createCliSession.
+ *
+ * Required env: XPR_ACCOUNT
+ * Optional env: XPR_PERMISSION (defaults to 'active'), XPR_RPC_ENDPOINT
+ *
+ * The agent process MUST NOT read XPR_PRIVATE_KEY. The legacy entry-point
+ * check in starter/agent/src/index.ts refuses to start if it is set.
+ */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createSession = createSession;
 exports.createReadOnlyRpc = createReadOnlyRpc;
 const js_1 = require("@proton/js");
+const cli_session_1 = require("./cli-session");
 /**
- * Create a server-side ProtonSession from environment variables.
- * Uses @proton/js (no browser dependency).
- *
- * Required env vars: XPR_PRIVATE_KEY, XPR_ACCOUNT
- * Optional: XPR_PERMISSION (defaults to 'active')
+ * Create a server-side ProtonSession backed by the proton CLI.
+ * No private key required — the CLI signs internally via its keychain.
  */
 function createSession(config) {
-    const privateKey = config.privateKey || process.env.XPR_PRIVATE_KEY;
     const account = config.account || process.env.XPR_ACCOUNT;
     const permission = config.permission || process.env.XPR_PERMISSION || 'active';
-    if (!privateKey) {
-        throw new Error('XPR_PRIVATE_KEY environment variable is required');
-    }
     if (!account) {
         throw new Error('XPR_ACCOUNT environment variable is required');
     }
-    const rpc = new js_1.JsonRpc(config.rpcEndpoint);
-    const signatureProvider = new js_1.JsSignatureProvider([privateKey]);
-    const api = new js_1.Api({ rpc, signatureProvider });
-    const session = {
-        auth: { actor: account, permission },
-        link: {
-            transact: async (args) => {
-                const result = await api.transact({ actions: args.actions }, { blocksBehind: 3, expireSeconds: 30 });
-                return result;
-            },
-        },
-    };
-    return { rpc, session };
+    return (0, cli_session_1.createCliSession)({ account, permission, rpcEndpoint: config.rpcEndpoint });
 }
 /**
  * Create a read-only RPC connection (no session/signing needed).