@zeroxyz/cli 1.16.0 → 1.18.0

package/dist/index.js

@@ -78449,7 +78449,7 @@ init_esm_shims();
 // ../sdk/dist/index.js
 init_esm_shims();
 
-// ../sdk/dist/chunk-A7WZYQXS.js
+// ../sdk/dist/chunk-KDWESC42.js
 init_esm_shims();
 
 // ../../node_modules/.pnpm/viem@2.52.2_bufferutil@4.1.0_typescript@5.9.3_utf-8-validate@6.0.6_zod@4.3.6/node_modules/viem/_esm/index.js
@@ -143831,7 +143831,7 @@ config(en_default2());
 // ../../node_modules/.pnpm/zod@4.3.6/node_modules/zod/index.js
 var zod_default = external_exports3;
 
-// ../sdk/dist/chunk-A7WZYQXS.js
+// ../sdk/dist/chunk-KDWESC42.js
 var createManagedAccount = (client, address2) => toAccount({
   address: address2,
   async signMessage({ message: message2 }) {
@@ -144000,16 +144000,6 @@ var extractInputEnvelope = (bodySchema, method) => {
   const isGetLike = upperMethod === "GET" || upperMethod === "DELETE";
   return isGetLike ? { queryParams: root } : { body: root };
 };
-var unwrapTransportEnvelope = (request22) => {
-  const input = asSchemaNode(asSchemaNode(request22)?.input);
-  if (!input || input.type !== "http") return request22;
-  const body = input.body;
-  const hasBody = body !== void 0 && body !== null && !(typeof body === "object" && Object.keys(body).length === 0);
-  if (hasBody) return body;
-  const qp = asSchemaNode(input.queryParams);
-  if (qp && Object.keys(qp).length > 0) return qp;
-  return null;
-};
 var GET_LIKE = /* @__PURE__ */ new Set(["GET", "HEAD", "DELETE"]);
 var appendQueryParams = (url4, params) => {
   const entries = Object.entries(params).filter(([, v]) => v != null);
@@ -144398,6 +144388,7 @@ var pickSessionCloseAmount = (receipt, openTimeCumulative) => {
   if (receipt.metered === true) return fromReceipt;
   return fromReceipt > openTimeCumulative ? fromReceipt : openTimeCumulative;
 };
+var isMeteredZeroReceipt = (receipt) => receipt?.metered === true && BigInt(receipt.acceptedCumulative) === 0n && BigInt(receipt.spent) === 0n;
 var raceWithSignal = (p, signal, client) => {
   if (!signal) return p;
   if (signal.aborted) {
@@ -144971,7 +144962,7 @@ var Payments = class {
     }
     const receipt = readSessionReceipt(response);
     let closeAmount = pickSessionCloseAmount(receipt, openTimeCumulative);
-    if (closeAmount === 0n && channelEntry.cumulativeAmount > 0n) {
+    if (closeAmount === 0n && channelEntry.cumulativeAmount > 0n && !isMeteredZeroReceipt(receipt)) {
       closeAmount = channelEntry.cumulativeAmount;
     }
     const reconcileAmount = receipt && isUintString(receipt.acceptedCumulative) ? receipt.acceptedCumulative : closeAmount.toString();
@@ -144988,7 +144979,7 @@ var Payments = class {
       capturedAmount,
       cause
     });
-    if (closeAmount === 0n) {
+    if (closeAmount === 0n && !isMeteredZeroReceipt(receipt)) {
       throw closeFailed(
         `Refusing to sign zero close credential for channel ${channelId} \u2014 neither receipt nor channelEntry produced a nonzero cumulativeAmount. Query escrow directly to recover; check logger for an earlier 'non-bigint cumulativeAmount' warning.`
       );
@@ -145757,7 +145748,7 @@ var clientFetch = async (client, url4, opts = {}) => {
   return result;
 };
 var package_default = {
-  version: "0.10.0"
+  version: "0.12.0"
 };
 var SDK_VERSION2 = package_default.version;
 var agentAuthMetadataSchema = external_exports3.object({
@@ -146243,6 +146234,7 @@ var userWalletDtoSchema = external_exports3.object({
   source: external_exports3.enum(["self_custody", "privy_embedded"]),
   isPrimary: external_exports3.boolean(),
   linkedAt: external_exports3.union([external_exports3.string(), external_exports3.date()]).nullable().optional(),
+  importedAt: external_exports3.union([external_exports3.string(), external_exports3.date()]).nullable().optional(),
   delegationGranted: external_exports3.boolean(),
   signerQuorumId: external_exports3.string().nullable(),
   // Per-transaction USDC cap in base units (6 dp). null = unlimited, 0 = free-only.
@@ -146635,6 +146627,12 @@ var capabilityResponseSchema = external_exports3.object({
   bodySchema: external_exports3.record(external_exports3.string(), external_exports3.unknown()).nullable(),
   responseSchema: external_exports3.record(external_exports3.string(), external_exports3.unknown()).nullable(),
   example: external_exports3.object({ request: external_exports3.unknown(), response: external_exports3.unknown() }).nullable(),
+  // The bare, schema-validated request body to send — `.request` unwrapped
+  // from the transcript envelope and checked against the current bodySchema.
+  // Null when there's no usable example or it's stale vs the schema; `example`
+  // is retained for the response sample. Optional for back-compat with older
+  // servers that don't emit it.
+  exampleRequest: external_exports3.record(external_exports3.string(), external_exports3.unknown()).nullable().optional(),
   tags: external_exports3.array(external_exports3.string()).nullable(),
   exampleAgentPrompt: external_exports3.string().nullable().optional(),
   whatItDoes: external_exports3.string().nullable().optional(),
@@ -147018,6 +147016,48 @@ var Wallet = class {
     },
     userWalletDtoSchema
   );
+  // Link an existing self-custody wallet to the session user by private key.
+  // Session-only. 409s when the wallet is already linked (to this or another
+  // profile — the error message says which).
+  import = (opts) => request2(
+    this.client,
+    {
+      method: "POST",
+      path: "/v1/users/me/wallets/import",
+      body: {
+        privateKey: opts.privateKey,
+        ...opts.makePrimary !== void 0 ? { makePrimary: opts.makePrimary } : {}
+      },
+      signal: opts.signal
+    },
+    userWalletDtoSchema
+  );
+  // Make one of the session user's linked wallets the primary payer.
+  // Session-only. 404s when the address isn't linked to the user.
+  setPrimary = (opts) => request2(
+    this.client,
+    {
+      method: "PATCH",
+      path: "/v1/users/me/wallets/primary",
+      body: { walletAddress: opts.walletAddress },
+      signal: opts.signal
+    },
+    userWalletDtoSchema
+  );
+  // Unlink a wallet from the session user. Session-only. 409s on the primary
+  // wallet or a non-zero balance (the error message says which); 404s when
+  // the address isn't linked. Responds 204 — resolves to void.
+  remove = async (opts) => {
+    await request2(
+      this.client,
+      {
+        method: "DELETE",
+        path: `/v1/users/me/wallets/${opts.walletAddress}`,
+        signal: opts.signal
+      },
+      external_exports3.undefined()
+    );
+  };
   // Routes by identity: account mode signs EIP-191 against /v1/wallet/fund-url,
   // session mode hits /v1/users/me/fund-url (Bearer-authed, wallet resolved
   // server-side). Both honor `provider` (coinbase | stripe).
@@ -147742,7 +147782,7 @@ var placeholderFor = (fieldName, propSchema) => String(sampleValueFor(fieldName,
 
 // package.json
 var package_default2 = {
-  version: "1.16.0"};
+  version: "1.18.0"};
 
 // src/app.ts
 init_esm_shims();
@@ -150006,13 +150046,20 @@ var buildResponseSection = (capability) => {
   return [];
 };
 var buildVerifiedExampleSection = (capability) => {
-  const req = capability.example?.request;
-  if (req === void 0 || req === null) return [];
-  const shown = unwrapTransportEnvelope(req);
-  if (shown === void 0 || shown === null) return [];
-  const json3 = typeof shown === "string" ? shown : JSON.stringify(shown);
-  const truncated = json3.length > 600 ? `${json3.slice(0, 600)}\u2026` : json3;
-  return ["", "Verified example (request):", `  ${truncated}`];
+  const req = capability.exampleRequest;
+  if (req) {
+    const json3 = JSON.stringify(req);
+    const truncated = json3.length > 600 ? `${json3.slice(0, 600)}\u2026` : json3;
+    return ["", "Verified example (request):", `  ${truncated}`];
+  }
+  if (req === null && capability.example?.request !== void 0 && capability.example?.request !== null) {
+    return [
+      "",
+      "Verified example: no usable request example for the current schema \u2014",
+      "  build the request from Parameters above."
+    ];
+  }
+  return [];
 };
 var buildTryItExample = (capability) => {
   const method = capability.method.toUpperCase();
@@ -150102,6 +150149,21 @@ var formatCapability = (capability) => {
   lines.push(...buildTryItExample(capability));
   return lines.join("\n");
 };
+var URL_RESOLUTION_METHODS = [
+  "POST",
+  "GET",
+  "PUT",
+  "PATCH",
+  "DELETE"
+];
+var isHttpUrl = (value) => {
+  try {
+    const url4 = new URL(value);
+    return url4.protocol === "http:" || url4.protocol === "https:";
+  } catch {
+    return false;
+  }
+};
 var getCommand = (appContext) => new Command("get").description("Get details for a capability by token, slug, or uid").argument(
   "<identifier>",
   "Attribution token (z_xxx.N from search results), capability slug, or uid"
@@ -150111,7 +150173,30 @@ var getCommand = (appContext) => new Command("get").description("Get details for
 ).action(async (identifier, options) => {
   try {
     const { analyticsService, client } = appContext.services;
-    const capability = await client.capabilities.get(identifier);
+    let capabilityRef = identifier;
+    if (isHttpUrl(identifier)) {
+      const matches2 = /* @__PURE__ */ new Map();
+      for (const method of URL_RESOLUTION_METHODS) {
+        const resolved = await client.capabilities.resolveByUrl(
+          identifier,
+          method
+        );
+        if (resolved) {
+          matches2.set(resolved.capabilityId, resolved.capabilitySlug);
+        }
+      }
+      if (matches2.size !== 1) {
+        throw new Error(
+          matches2.size === 0 ? "No indexed capability found for that URL." : "Multiple capabilities match that URL; use a capability slug or uid instead."
+        );
+      }
+      const [resolvedCapabilityId] = matches2.keys();
+      if (!resolvedCapabilityId) {
+        throw new Error("No indexed capability found for that URL.");
+      }
+      capabilityRef = resolvedCapabilityId;
+    }
+    const capability = await client.capabilities.get(capabilityRef);
     if (options.formatted && !options.json) {
       console.log(formatCapability(capability));
     } else {
@@ -151795,17 +151880,20 @@ init_esm_shims();
 
 // src/util/migrate-config.ts
 init_esm_shims();
-var backupAndStripPrivateKey = (zeroDir) => {
+var backupAndStripConfigKeys = (zeroDir, keys) => {
   const configPath = join$1(zeroDir, "config.json");
   const backupPath = join$1(zeroDir, "config.backup.json");
   const raw = readFileSync(configPath, "utf8");
   ensureSecureDir(zeroDir);
   writeSecureFile(backupPath, raw);
   const parsed = JSON.parse(raw);
-  delete parsed.privateKey;
+  for (const key of keys) {
+    delete parsed[key];
+  }
   writeSecureFile(configPath, JSON.stringify(parsed, null, 2));
   return { backupPath, configPath };
 };
+var backupAndStripPrivateKey = (zeroDir) => backupAndStripConfigKeys(zeroDir, ["privateKey"]);
 
 // src/util/stdin.ts
 init_esm_shims();
@@ -152034,6 +152122,148 @@ var walletSetCommand = (appContext) => new Command("set").description("Set walle
     force: options.force ?? false
   });
 });
+var normalizeImportKey = (raw) => {
+  const trimmed = raw.trim();
+  const prefixed = trimmed.startsWith("0x") ? trimmed : `0x${trimmed}`;
+  return PRIVATE_KEY_PATTERN.test(prefixed) ? prefixed : null;
+};
+var SIGN_IN_FIRST_MESSAGE = "This command requires a signed-in session. Run `zero auth login` first.";
+var walletImportCommand = (appContext) => new Command("import").description(
+  "Link an existing self-custody wallet to your Zero profile by private key"
+).argument("[privateKey]", "Hex-encoded private key (0x prefix optional)").option(
+  "--key-stdin",
+  "Read the private key from stdin instead of an argument"
+).option("--primary", "Make the imported wallet your primary payer wallet").action(
+  async (privateKeyArg, options) => {
+    const { analyticsService, client } = appContext.services;
+    if (privateKeyArg && options.keyStdin) {
+      console.error(
+        "Pass the key as an argument OR via --key-stdin, not both."
+      );
+      process.exitCode = 1;
+      return;
+    }
+    if (!privateKeyArg && !options.keyStdin) {
+      console.error(
+        "Missing private key. Pass it as an argument or pipe it with --key-stdin."
+      );
+      process.exitCode = 1;
+      return;
+    }
+    let rawKey;
+    if (options.keyStdin) {
+      if (process.stdin.isTTY) {
+        console.error(
+          "Expected a private key on stdin. Example:\n  zero wallet generate --json | jq -r .privateKey | zero wallet import --key-stdin"
+        );
+        process.exitCode = 1;
+        return;
+      }
+      rawKey = await readStdin();
+    } else {
+      rawKey = privateKeyArg;
+    }
+    const privateKey = normalizeImportKey(rawKey);
+    if (!privateKey) {
+      console.error(
+        "Invalid private key (expected 64 hex chars, 0x prefix optional)."
+      );
+      process.exitCode = 1;
+      return;
+    }
+    if (client.getCredentials().kind !== "session") {
+      console.error(SIGN_IN_FIRST_MESSAGE);
+      process.exitCode = 1;
+      return;
+    }
+    let wallet;
+    try {
+      wallet = await client.wallet.import({
+        privateKey,
+        ...options.primary ? { makePrimary: true } : {}
+      });
+    } catch (err) {
+      if (err instanceof ZeroApiError) {
+        if (err.status === 401) {
+          console.error(
+            "Session expired. Run `zero auth login` and try again."
+          );
+        } else {
+          console.error(`Could not import wallet: ${err.message}`);
+        }
+      } else {
+        console.error("Could not import wallet: network error.");
+      }
+      process.exitCode = 1;
+      return;
+    }
+    analyticsService.setWalletAddress(wallet.walletAddress);
+    console.log(
+      `Wallet imported: ${wallet.walletAddress}${wallet.isPrimary ? " (primary)" : ""}`
+    );
+    let localKeyStripped = false;
+    const zeroDir = join$1(homedir(), ".zero");
+    const configPath = join$1(zeroDir, "config.json");
+    const config2 = existsSync(configPath) ? readConfig(configPath) : {};
+    const localByoKey = config2.byoPrivateKey ? normalizeImportKey(config2.byoPrivateKey) : null;
+    if (localByoKey && localByoKey.toLowerCase() === privateKey.toLowerCase()) {
+      try {
+        const { backupPath } = backupAndStripConfigKeys(zeroDir, [
+          "byoPrivateKey"
+        ]);
+        localKeyStripped = true;
+        console.log(
+          `Local key backed up to ${backupPath} and removed from config \u2014 managed signing now applies.`
+        );
+      } catch {
+        console.error(
+          "Could not back up the local key; it was left in place in ~/.zero/config.json."
+        );
+      }
+    }
+    analyticsService.capture("wallet_imported", {
+      primary: wallet.isPrimary,
+      // biome-ignore lint/style/useNamingConvention: snake_case for analytics
+      key_source: options.keyStdin ? "stdin" : "arg",
+      // biome-ignore lint/style/useNamingConvention: snake_case for analytics
+      local_key_stripped: localKeyStripped
+    });
+  }
+);
+var walletListCommand = (appContext) => new Command("list").description("List the wallets linked to your Zero profile").action(async () => {
+  const { analyticsService, client } = appContext.services;
+  if (client.getCredentials().kind !== "session") {
+    console.error(SIGN_IN_FIRST_MESSAGE);
+    process.exitCode = 1;
+    return;
+  }
+  let wallets;
+  try {
+    wallets = await client.wallet.list();
+  } catch (err) {
+    const message2 = err instanceof ZeroApiError && err.status === 401 ? "Session expired. Run `zero auth login` and try again." : "Failed to list wallets.";
+    console.error(message2);
+    process.exitCode = 1;
+    return;
+  }
+  if (wallets.length === 0) {
+    console.log(
+      "No wallets linked. One is provisioned automatically on your first paid call, or run `zero wallet import <key>`."
+    );
+  } else {
+    for (const wallet of wallets) {
+      const source = wallet.importedAt ? "imported" : wallet.source === "privy_embedded" ? "managed" : "byo";
+      const columns = [
+        wallet.walletAddress,
+        source.padEnd(8),
+        (wallet.isPrimary ? "PRIMARY" : "").padEnd(7),
+        wallet.delegationGranted ? "delegated" : "not delegated"
+      ];
+      console.log(columns.join("  ").trimEnd());
+    }
+  }
+  analyticsService.capture("wallet_listed", { count: wallets.length });
+});
 var walletGenerateCommand = (appContext) => new Command("generate").description(
   "Generate a fresh wallet (address + private key) without touching your configured wallet"
 ).option("--json", "Emit { address, privateKey } as JSON").option(
@@ -152121,6 +152351,8 @@ var walletCommand = (appContext) => {
   cmd.addCommand(walletAddressCommand(appContext));
   cmd.addCommand(walletSetCommand(appContext));
   cmd.addCommand(walletGenerateCommand(appContext));
+  cmd.addCommand(walletImportCommand(appContext));
+  cmd.addCommand(walletListCommand(appContext));
   return cmd;
 };
 

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@zeroxyz/cli",
-	"version": "1.16.0",
+	"version": "1.18.0",
 	"type": "module",
 	"bin": {
 		"zero": "dist/index.js",