@zeroxyz/cli 1.16.0 → 1.17.0

package/dist/index.js

@@ -78449,7 +78449,7 @@ init_esm_shims();
 // ../sdk/dist/index.js
 init_esm_shims();
 
-// ../sdk/dist/chunk-A7WZYQXS.js
+// ../sdk/dist/chunk-T77VVLOM.js
 init_esm_shims();
 
 // ../../node_modules/.pnpm/viem@2.52.2_bufferutil@4.1.0_typescript@5.9.3_utf-8-validate@6.0.6_zod@4.3.6/node_modules/viem/_esm/index.js
@@ -143831,7 +143831,7 @@ config(en_default2());
 // ../../node_modules/.pnpm/zod@4.3.6/node_modules/zod/index.js
 var zod_default = external_exports3;
 
-// ../sdk/dist/chunk-A7WZYQXS.js
+// ../sdk/dist/chunk-T77VVLOM.js
 var createManagedAccount = (client, address2) => toAccount({
   address: address2,
   async signMessage({ message: message2 }) {
@@ -145757,7 +145757,7 @@ var clientFetch = async (client, url4, opts = {}) => {
   return result;
 };
 var package_default = {
-  version: "0.10.0"
+  version: "0.11.0"
 };
 var SDK_VERSION2 = package_default.version;
 var agentAuthMetadataSchema = external_exports3.object({
@@ -146243,6 +146243,7 @@ var userWalletDtoSchema = external_exports3.object({
   source: external_exports3.enum(["self_custody", "privy_embedded"]),
   isPrimary: external_exports3.boolean(),
   linkedAt: external_exports3.union([external_exports3.string(), external_exports3.date()]).nullable().optional(),
+  importedAt: external_exports3.union([external_exports3.string(), external_exports3.date()]).nullable().optional(),
   delegationGranted: external_exports3.boolean(),
   signerQuorumId: external_exports3.string().nullable(),
   // Per-transaction USDC cap in base units (6 dp). null = unlimited, 0 = free-only.
@@ -147018,6 +147019,48 @@ var Wallet = class {
     },
     userWalletDtoSchema
   );
+  // Link an existing self-custody wallet to the session user by private key.
+  // Session-only. 409s when the wallet is already linked (to this or another
+  // profile — the error message says which).
+  import = (opts) => request2(
+    this.client,
+    {
+      method: "POST",
+      path: "/v1/users/me/wallets/import",
+      body: {
+        privateKey: opts.privateKey,
+        ...opts.makePrimary !== void 0 ? { makePrimary: opts.makePrimary } : {}
+      },
+      signal: opts.signal
+    },
+    userWalletDtoSchema
+  );
+  // Make one of the session user's linked wallets the primary payer.
+  // Session-only. 404s when the address isn't linked to the user.
+  setPrimary = (opts) => request2(
+    this.client,
+    {
+      method: "PATCH",
+      path: "/v1/users/me/wallets/primary",
+      body: { walletAddress: opts.walletAddress },
+      signal: opts.signal
+    },
+    userWalletDtoSchema
+  );
+  // Unlink a wallet from the session user. Session-only. 409s on the primary
+  // wallet or a non-zero balance (the error message says which); 404s when
+  // the address isn't linked. Responds 204 — resolves to void.
+  remove = async (opts) => {
+    await request2(
+      this.client,
+      {
+        method: "DELETE",
+        path: `/v1/users/me/wallets/${opts.walletAddress}`,
+        signal: opts.signal
+      },
+      external_exports3.undefined()
+    );
+  };
   // Routes by identity: account mode signs EIP-191 against /v1/wallet/fund-url,
   // session mode hits /v1/users/me/fund-url (Bearer-authed, wallet resolved
   // server-side). Both honor `provider` (coinbase | stripe).
@@ -147742,7 +147785,7 @@ var placeholderFor = (fieldName, propSchema) => String(sampleValueFor(fieldName,
 
 // package.json
 var package_default2 = {
-  version: "1.16.0"};
+  version: "1.17.0"};
 
 // src/app.ts
 init_esm_shims();
@@ -151795,17 +151838,20 @@ init_esm_shims();
 
 // src/util/migrate-config.ts
 init_esm_shims();
-var backupAndStripPrivateKey = (zeroDir) => {
+var backupAndStripConfigKeys = (zeroDir, keys) => {
   const configPath = join$1(zeroDir, "config.json");
   const backupPath = join$1(zeroDir, "config.backup.json");
   const raw = readFileSync(configPath, "utf8");
   ensureSecureDir(zeroDir);
   writeSecureFile(backupPath, raw);
   const parsed = JSON.parse(raw);
-  delete parsed.privateKey;
+  for (const key of keys) {
+    delete parsed[key];
+  }
   writeSecureFile(configPath, JSON.stringify(parsed, null, 2));
   return { backupPath, configPath };
 };
+var backupAndStripPrivateKey = (zeroDir) => backupAndStripConfigKeys(zeroDir, ["privateKey"]);
 
 // src/util/stdin.ts
 init_esm_shims();
@@ -152034,6 +152080,148 @@ var walletSetCommand = (appContext) => new Command("set").description("Set walle
     force: options.force ?? false
   });
 });
+var normalizeImportKey = (raw) => {
+  const trimmed = raw.trim();
+  const prefixed = trimmed.startsWith("0x") ? trimmed : `0x${trimmed}`;
+  return PRIVATE_KEY_PATTERN.test(prefixed) ? prefixed : null;
+};
+var SIGN_IN_FIRST_MESSAGE = "This command requires a signed-in session. Run `zero auth login` first.";
+var walletImportCommand = (appContext) => new Command("import").description(
+  "Link an existing self-custody wallet to your Zero profile by private key"
+).argument("[privateKey]", "Hex-encoded private key (0x prefix optional)").option(
+  "--key-stdin",
+  "Read the private key from stdin instead of an argument"
+).option("--primary", "Make the imported wallet your primary payer wallet").action(
+  async (privateKeyArg, options) => {
+    const { analyticsService, client } = appContext.services;
+    if (privateKeyArg && options.keyStdin) {
+      console.error(
+        "Pass the key as an argument OR via --key-stdin, not both."
+      );
+      process.exitCode = 1;
+      return;
+    }
+    if (!privateKeyArg && !options.keyStdin) {
+      console.error(
+        "Missing private key. Pass it as an argument or pipe it with --key-stdin."
+      );
+      process.exitCode = 1;
+      return;
+    }
+    let rawKey;
+    if (options.keyStdin) {
+      if (process.stdin.isTTY) {
+        console.error(
+          "Expected a private key on stdin. Example:\n  zero wallet generate --json | jq -r .privateKey | zero wallet import --key-stdin"
+        );
+        process.exitCode = 1;
+        return;
+      }
+      rawKey = await readStdin();
+    } else {
+      rawKey = privateKeyArg;
+    }
+    const privateKey = normalizeImportKey(rawKey);
+    if (!privateKey) {
+      console.error(
+        "Invalid private key (expected 64 hex chars, 0x prefix optional)."
+      );
+      process.exitCode = 1;
+      return;
+    }
+    if (client.getCredentials().kind !== "session") {
+      console.error(SIGN_IN_FIRST_MESSAGE);
+      process.exitCode = 1;
+      return;
+    }
+    let wallet;
+    try {
+      wallet = await client.wallet.import({
+        privateKey,
+        ...options.primary ? { makePrimary: true } : {}
+      });
+    } catch (err) {
+      if (err instanceof ZeroApiError) {
+        if (err.status === 401) {
+          console.error(
+            "Session expired. Run `zero auth login` and try again."
+          );
+        } else {
+          console.error(`Could not import wallet: ${err.message}`);
+        }
+      } else {
+        console.error("Could not import wallet: network error.");
+      }
+      process.exitCode = 1;
+      return;
+    }
+    analyticsService.setWalletAddress(wallet.walletAddress);
+    console.log(
+      `Wallet imported: ${wallet.walletAddress}${wallet.isPrimary ? " (primary)" : ""}`
+    );
+    let localKeyStripped = false;
+    const zeroDir = join$1(homedir(), ".zero");
+    const configPath = join$1(zeroDir, "config.json");
+    const config2 = existsSync(configPath) ? readConfig(configPath) : {};
+    const localByoKey = config2.byoPrivateKey ? normalizeImportKey(config2.byoPrivateKey) : null;
+    if (localByoKey && localByoKey.toLowerCase() === privateKey.toLowerCase()) {
+      try {
+        const { backupPath } = backupAndStripConfigKeys(zeroDir, [
+          "byoPrivateKey"
+        ]);
+        localKeyStripped = true;
+        console.log(
+          `Local key backed up to ${backupPath} and removed from config \u2014 managed signing now applies.`
+        );
+      } catch {
+        console.error(
+          "Could not back up the local key; it was left in place in ~/.zero/config.json."
+        );
+      }
+    }
+    analyticsService.capture("wallet_imported", {
+      primary: wallet.isPrimary,
+      // biome-ignore lint/style/useNamingConvention: snake_case for analytics
+      key_source: options.keyStdin ? "stdin" : "arg",
+      // biome-ignore lint/style/useNamingConvention: snake_case for analytics
+      local_key_stripped: localKeyStripped
+    });
+  }
+);
+var walletListCommand = (appContext) => new Command("list").description("List the wallets linked to your Zero profile").action(async () => {
+  const { analyticsService, client } = appContext.services;
+  if (client.getCredentials().kind !== "session") {
+    console.error(SIGN_IN_FIRST_MESSAGE);
+    process.exitCode = 1;
+    return;
+  }
+  let wallets;
+  try {
+    wallets = await client.wallet.list();
+  } catch (err) {
+    const message2 = err instanceof ZeroApiError && err.status === 401 ? "Session expired. Run `zero auth login` and try again." : "Failed to list wallets.";
+    console.error(message2);
+    process.exitCode = 1;
+    return;
+  }
+  if (wallets.length === 0) {
+    console.log(
+      "No wallets linked. One is provisioned automatically on your first paid call, or run `zero wallet import <key>`."
+    );
+  } else {
+    for (const wallet of wallets) {
+      const source = wallet.importedAt ? "imported" : wallet.source === "privy_embedded" ? "managed" : "byo";
+      const columns = [
+        wallet.walletAddress,
+        source.padEnd(8),
+        (wallet.isPrimary ? "PRIMARY" : "").padEnd(7),
+        wallet.delegationGranted ? "delegated" : "not delegated"
+      ];
+      console.log(columns.join("  ").trimEnd());
+    }
+  }
+  analyticsService.capture("wallet_listed", { count: wallets.length });
+});
 var walletGenerateCommand = (appContext) => new Command("generate").description(
   "Generate a fresh wallet (address + private key) without touching your configured wallet"
 ).option("--json", "Emit { address, privateKey } as JSON").option(
@@ -152121,6 +152309,8 @@ var walletCommand = (appContext) => {
   cmd.addCommand(walletAddressCommand(appContext));
   cmd.addCommand(walletSetCommand(appContext));
   cmd.addCommand(walletGenerateCommand(appContext));
+  cmd.addCommand(walletImportCommand(appContext));
+  cmd.addCommand(walletListCommand(appContext));
   return cmd;
 };
 

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@zeroxyz/cli",
-	"version": "1.16.0",
+	"version": "1.17.0",
 	"type": "module",
 	"bin": {
 		"zero": "dist/index.js",