@zeroxyz/cli 1.18.0 → 1.19.0

package/dist/index.js

@@ -78449,7 +78449,7 @@ init_esm_shims();
 // ../sdk/dist/index.js
 init_esm_shims();
 
-// ../sdk/dist/chunk-KDWESC42.js
+// ../sdk/dist/chunk-CYB4Y3ID.js
 init_esm_shims();
 
 // ../../node_modules/.pnpm/viem@2.52.2_bufferutil@4.1.0_typescript@5.9.3_utf-8-validate@6.0.6_zod@4.3.6/node_modules/viem/_esm/index.js
@@ -143831,37 +143831,41 @@ config(en_default2());
 // ../../node_modules/.pnpm/zod@4.3.6/node_modules/zod/index.js
 var zod_default = external_exports3;
 
-// ../sdk/dist/chunk-KDWESC42.js
-var createManagedAccount = (client, address2) => toAccount({
-  address: address2,
-  async signMessage({ message: message2 }) {
-    return await client.auth.signMessage(
-      { message: message2 },
-      { expectedAddress: address2 }
-    );
-  },
-  async signTypedData(typedData) {
-    const td = typedData;
-    return await client.auth.signTypedData(
-      {
-        domain: td.domain,
-        types: td.types,
-        primaryType: td.primaryType,
-        message: td.message
-      },
-      { expectedAddress: address2 }
-    );
-  },
-  async signTransaction(transaction, options) {
-    const serialize13 = options?.serializer ?? serializeTransaction;
-    const unsigned = await serialize13(transaction);
-    const signature2 = await client.auth.signTransaction(
-      { unsignedTransaction: unsigned },
-      { expectedAddress: address2 }
-    );
-    return await serialize13(transaction, parseSignature2(signature2));
-  }
-});
+// ../sdk/dist/chunk-CYB4Y3ID.js
+var createManagedAccount = (client, address2, opts = {}) => {
+  const signOptions = {
+    // expectedAddress pins verification to this adapter's frozen address.
+    expectedAddress: address2,
+    ...opts.explicitWallet ? { walletAddress: address2 } : {}
+  };
+  return toAccount({
+    address: address2,
+    async signMessage({ message: message2 }) {
+      return await client.auth.signMessage({ message: message2 }, signOptions);
+    },
+    async signTypedData(typedData) {
+      const td = typedData;
+      return await client.auth.signTypedData(
+        {
+          domain: td.domain,
+          types: td.types,
+          primaryType: td.primaryType,
+          message: td.message
+        },
+        signOptions
+      );
+    },
+    async signTransaction(transaction, options) {
+      const serialize13 = options?.serializer ?? serializeTransaction;
+      const unsigned = await serialize13(transaction);
+      const signature2 = await client.auth.signTransaction(
+        { unsignedTransaction: unsigned },
+        signOptions
+      );
+      return await serialize13(transaction, parseSignature2(signature2));
+    }
+  });
+};
 var USDC_BASE = "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913";
 var USDC_TEMPO = "0x20c000000000000000000000b9537d11c60e8b50";
 var TEMPO_CHAIN_ID = 4217;
@@ -144438,12 +144442,12 @@ var cancelBody = (response) => {
   } catch {
   }
 };
-var resolveAccount = async (client, overrideAccount, signal) => {
+var resolveAccount = async (client, overrideAccount, signal, walletAddress) => {
   if (overrideAccount) return overrideAccount;
   const credentials = client.getCredentials();
   if (credentials.kind === "account") return credentials.account;
   if (credentials.kind === "session") {
-    return await client.resolveManagedAccount(signal);
+    return await client.resolveManagedAccount(signal, walletAddress);
   }
   throw new ZeroAuthError(
     "auth_no_credentials",
@@ -144489,7 +144493,8 @@ var Payments = class {
     const account = await resolveAccount(
       this.client,
       input.account,
-      input.signal
+      input.signal,
+      input.walletAddress
     );
     let capturedAmount = null;
     let capturedNetwork;
@@ -144624,7 +144629,8 @@ var Payments = class {
     const account = await resolveAccount(
       this.client,
       input.account,
-      input.signal
+      input.signal,
+      input.walletAddress
     );
     const configuredFetch = buildConfiguredFetch(this.client, {
       timeoutMs: input.timeoutMs
@@ -145404,7 +145410,8 @@ var recordErrorFetchRun = async (client, opts, result, capabilityIdOverride) =>
       ...fetchOriginForRecord && { fetchOrigin: fetchOriginForRecord },
       ...result.status !== null && { status: result.status },
       latencyMs: result.latencyMs,
-      ...opts.requestSchema && { requestSchema: opts.requestSchema }
+      ...opts.requestSchema && { requestSchema: opts.requestSchema },
+      ...opts.walletAddress && !opts.account && { walletAddress: opts.walletAddress }
     });
     result.runId = created.runId;
     delete result.runTrackingSkipped;
@@ -145513,6 +145520,7 @@ var clientFetch = async (client, url4, opts = {}) => {
           body: requestBody,
           maxPay: opts.maxPay,
           account: opts.account,
+          ...opts.walletAddress && { walletAddress: opts.walletAddress },
           signal: opts.signal,
           timeoutMs: opts.timeoutMs,
           ...opts.displayCostAmount && {
@@ -145685,6 +145693,10 @@ var clientFetch = async (client, url4, opts = {}) => {
           ...opts.capabilityId === void 0 ? { fetchOrigin: "direct_url" } : opts.fetchOrigin && { fetchOrigin: opts.fetchOrigin },
           status: response.status,
           latencyMs,
+          // Attribute to the selected wallet in session mode. Skipped when a
+          // per-call `account` override records the run — that account's own
+          // EIP-191 identity is the attribution.
+          ...opts.walletAddress && !opts.account && { walletAddress: opts.walletAddress },
           ...opts.requestSchema && { requestSchema: opts.requestSchema },
           ...derived?.responseSchema && {
             responseSchema: derived.responseSchema
@@ -145748,7 +145760,7 @@ var clientFetch = async (client, url4, opts = {}) => {
   return result;
 };
 var package_default = {
-  version: "0.12.0"
+  version: "0.13.0"
 };
 var SDK_VERSION2 = package_default.version;
 var agentAuthMetadataSchema = external_exports3.object({
@@ -146233,6 +146245,9 @@ var userWalletDtoSchema = external_exports3.object({
   walletAddress: external_exports3.string(),
   source: external_exports3.enum(["self_custody", "privy_embedded"]),
   isPrimary: external_exports3.boolean(),
+  // Owner-chosen display name; null/absent = unnamed (show the address).
+  // Optional so the SDK tolerates servers that predate nicknames.
+  nickname: external_exports3.string().nullable().optional(),
   linkedAt: external_exports3.union([external_exports3.string(), external_exports3.date()]).nullable().optional(),
   importedAt: external_exports3.union([external_exports3.string(), external_exports3.date()]).nullable().optional(),
   delegationGranted: external_exports3.boolean(),
@@ -146446,7 +146461,10 @@ var Auth = class {
           {
             method: "POST",
             path: "/v1/users/me/sign-message",
-            body: { message: normalizeMessage(input.message) }
+            body: {
+              message: normalizeMessage(input.message),
+              ...opts.walletAddress ? { walletAddress: opts.walletAddress } : {}
+            }
           },
           signResponseSchema
         );
@@ -146471,7 +146489,10 @@ var Auth = class {
           {
             method: "POST",
             path: "/v1/users/me/sign-transaction",
-            body: { unsignedTransaction: input.unsignedTransaction }
+            body: {
+              unsignedTransaction: input.unsignedTransaction,
+              ...opts.walletAddress ? { walletAddress: opts.walletAddress } : {}
+            }
           },
           signResponseSchema
         );
@@ -146510,7 +146531,10 @@ var Auth = class {
           {
             method: "POST",
             path: "/v1/users/me/sign-typed-data",
-            body: { typedData: input }
+            body: {
+              typedData: input,
+              ...opts.walletAddress ? { walletAddress: opts.walletAddress } : {}
+            }
           },
           signResponseSchema
         );
@@ -146881,6 +146905,9 @@ var Runs = class {
     if (params.unreviewed !== void 0) query.unreviewed = params.unreviewed;
     if (params.limit !== void 0) query.limit = params.limit;
     if (params.cursor !== void 0) query.cursor = params.cursor;
+    if (params.walletAddress !== void 0) {
+      query.walletAddress = Array.isArray(params.walletAddress) ? params.walletAddress.join(",") : params.walletAddress;
+    }
     return request2(
       this.client,
       {
@@ -147016,6 +147043,50 @@ var Wallet = class {
     },
     userWalletDtoSchema
   );
+  // Re-stamp Zero's signing delegation on a profile wallet (default: the
+  // primary). Session-only. Naming a wallet re-authorizes THAT wallet and
+  // never provisions; the server 404s an address not on the profile.
+  reauthorizeDelegation = (opts = {}) => request2(
+    this.client,
+    {
+      method: "POST",
+      path: "/v1/users/me/wallets/provision",
+      ...opts.walletAddress ? { body: { walletAddress: opts.walletAddress } } : {},
+      signal: opts.signal
+    },
+    userWalletDtoSchema
+  );
+  // Revoke Zero's signing delegation on a profile wallet (default: the
+  // primary). Session-only. Managed signing on that wallet 403s until it is
+  // re-authorized. Note: this stamps the server-side gate — removing Zero's
+  // signer cryptographically is owner-authorized and happens in the user's
+  // Privy session (the web profile page does both).
+  revokeDelegation = (opts = {}) => request2(
+    this.client,
+    {
+      method: "DELETE",
+      path: "/v1/users/me/wallets/delegation",
+      ...opts.walletAddress ? { query: { walletAddress: opts.walletAddress } } : {},
+      signal: opts.signal
+    },
+    userWalletDtoSchema
+  );
+  // Set, change, or clear (null / empty string) the owner-chosen nickname on
+  // a profile wallet. Session-only. Nicknames are private to the
+  // authenticated user — they never appear on reviews or public surfaces.
+  setNickname = (opts) => request2(
+    this.client,
+    {
+      method: "PATCH",
+      path: "/v1/users/me/wallets/nickname",
+      body: {
+        walletAddress: opts.walletAddress,
+        nickname: opts.nickname
+      },
+      signal: opts.signal
+    },
+    userWalletDtoSchema
+  );
   // Link an existing self-custody wallet to the session user by private key.
   // Session-only. 409s when the wallet is already linked (to this or another
   // profile — the error message says which).
@@ -147026,7 +147097,8 @@ var Wallet = class {
       path: "/v1/users/me/wallets/import",
       body: {
         privateKey: opts.privateKey,
-        ...opts.makePrimary !== void 0 ? { makePrimary: opts.makePrimary } : {}
+        ...opts.makePrimary !== void 0 ? { makePrimary: opts.makePrimary } : {},
+        ...opts.nickname !== void 0 ? { nickname: opts.nickname } : {}
       },
       signal: opts.signal
     },
@@ -147223,6 +147295,9 @@ var ZeroClient = class _ZeroClient {
   managedAccountInFlight = null;
   managedAccountAC = null;
   managedAccountGen = 0;
+  // Explicitly-selected (non-default) managed wallets, keyed by lowercased
+  // address. Same lifecycle as managedAccount: cleared on clearManagedAccount.
+  managedAccountByAddress = /* @__PURE__ */ new Map();
   // Multi-tenant servers calling `client.fetch(url, { account: tenantAccount })`
   // on every request would otherwise construct a new ZeroClient (with
   // five namespace instances) per call. Keyed by lowercased account
@@ -147444,8 +147519,16 @@ var ZeroClient = class _ZeroClient {
     }
     this.withAccountCache.clear();
   };
-  /** @internal — used by payments.pay() in session mode. Cached, dedupes concurrent lookups. */
-  resolveManagedAccount = (signal) => {
+  /**
+   * @internal — used by payments.pay() in session mode. Cached, dedupes
+   * concurrent lookups. Pass `walletAddress` to sign as a specific profile
+   * wallet instead of the primary; explicit wallets are cached per address
+   * and their sign requests carry the address so intent and signer agree.
+   */
+  resolveManagedAccount = (signal, walletAddress) => {
+    if (walletAddress) {
+      return this.resolveManagedAccountByAddress(walletAddress, signal);
+    }
     if (this.managedAccount) return Promise.resolve(this.managedAccount);
     if (this.managedAccountInFlight) {
       return this.raceWithSignal(this.managedAccountInFlight, signal);
@@ -147487,6 +147570,42 @@ var ZeroClient = class _ZeroClient {
     });
     return this.raceWithSignal(this.managedAccountInFlight, signal);
   };
+  // Explicit-wallet variant of resolveManagedAccount. No in-flight dedupe:
+  // this is the rare path (per-wallet pay), the resolution is idempotent, and
+  // the per-address cache absorbs repeat calls.
+  resolveManagedAccountByAddress = async (walletAddress, signal) => {
+    if (this.credentials.kind !== "session") {
+      throw new ZeroAuthError(
+        "auth_no_credentials",
+        "resolveManagedAccount() requires session credentials."
+      );
+    }
+    const canonical = getAddress(walletAddress);
+    const cached2 = this.managedAccountByAddress.get(canonical.toLowerCase());
+    if (cached2) return cached2;
+    const startedAtGen = this.managedAccountGen;
+    const wallets = await this.auth.wallets({ signal });
+    const match = wallets.find(
+      (w) => w.walletAddress.toLowerCase() === canonical.toLowerCase()
+    );
+    if (!match || match.source !== "privy_embedded") {
+      throw new ZeroAuthError(
+        "auth_error",
+        `Wallet ${canonical} is not a Privy-embedded wallet on this profile. Managed signing can only use profile wallets (see client.wallet.list()).`
+      );
+    }
+    if (this.managedAccountGen !== startedAtGen) {
+      throw new ZeroAuthError(
+        "auth_session_expired",
+        "Session cleared during managed-account resolution. Retry to rebuild against the current session."
+      );
+    }
+    const acc = createManagedAccount(this, canonical, {
+      explicitWallet: true
+    });
+    this.managedAccountByAddress.set(canonical.toLowerCase(), acc);
+    return acc;
+  };
   // Per-caller signal gate: each caller can reject on their own abort
   // without cancelling the shared underlying promise.
   raceWithSignal = (p, signal) => {
@@ -147517,6 +147636,7 @@ var ZeroClient = class _ZeroClient {
     this.managedAccountAC?.abort();
     this.managedAccountInFlight = null;
     this.managedAccountAC = null;
+    this.managedAccountByAddress.clear();
     this.managedAccountGen++;
   };
   /** @internal — Read cached managed account without triggering resolution. */
@@ -147782,7 +147902,7 @@ var placeholderFor = (fieldName, propSchema) => String(sampleValueFor(fieldName,
 
 // package.json
 var package_default2 = {
-  version: "1.18.0"};
+  version: "1.19.0"};
 
 // src/app.ts
 init_esm_shims();
@@ -149408,6 +149528,9 @@ var fetchCommand = (appContext) => new Command("fetch").description(
   "--data-stdin",
   "Read the request body from stdin (equivalent to `-d @-`)."
 ).option("-H, --header <header...>", "Headers in Key:Value format").option("--max-pay <amount>", "Maximum per-call spend limit (USDC)").option(
+  "--wallet-address <address>",
+  "Pay/sign from this profile wallet instead of the primary (managed signing; must be a delegated wallet on your profile)"
+).option(
   "--timeout <seconds>",
   "Per-request timeout in seconds, overriding the default (180). Applies to each HTTP leg of the call (probe and paid retry), not as a wall-clock deadline."
 ).option(
@@ -149545,6 +149668,9 @@ var fetchCommand = (appContext) => new Command("fetch").description(
           headers,
           ...resolvedBody !== void 0 && { body: resolvedBody },
           ...options.maxPay && { maxPay: options.maxPay },
+          ...options.walletAddress && {
+            walletAddress: options.walletAddress
+          },
           ...timeoutMs !== void 0 && { timeoutMs },
           // Raise the SDK's default 10 MB response cap — the CLI
           // is a streaming sink for paid binary media (audio, video,
@@ -151420,9 +151546,13 @@ Examples:
   zero runs                            # most recent runs
   zero runs --unreviewed               # filter to runs without a review
   zero runs --capability translate-en  # filter to one capability (uid or slug)
+  zero runs --wallet-address 0xabc\u2026    # filter to one of your profile wallets
   zero runs --json                     # full structured output for scripts
   zero runs detail <runId>             # full server-side metadata for a run`
   ).option("--capability <id>", "Filter by capability uid or slug").option("--unreviewed", "Only show runs without a review").option(
+    "--wallet-address <addresses>",
+    "Filter to specific profile wallets (comma-separated). Default: all profile wallets"
+  ).option(
     "--limit <n>",
     "Max rows (1-100, default 25)",
     (v) => Number.parseInt(v, 10)
@@ -151436,6 +151566,7 @@ Examples:
         const result = await client.runs.list({
           capabilityId: options.capability,
           unreviewed: options.unreviewed,
+          ...options.walletAddress ? { walletAddress: options.walletAddress } : {},
           limit: options.limit
         });
         if (options.json) {
@@ -152133,7 +152264,10 @@ var walletImportCommand = (appContext) => new Command("import").description(
 ).argument("[privateKey]", "Hex-encoded private key (0x prefix optional)").option(
   "--key-stdin",
   "Read the private key from stdin instead of an argument"
-).option("--primary", "Make the imported wallet your primary payer wallet").action(
+).option("--primary", "Make the imported wallet your primary payer wallet").option(
+  "--nickname <name>",
+  "Nickname for the imported wallet (private to you; max 64 chars)"
+).action(
   async (privateKeyArg, options) => {
     const { analyticsService, client } = appContext.services;
     if (privateKeyArg && options.keyStdin) {
@@ -152180,7 +152314,8 @@ var walletImportCommand = (appContext) => new Command("import").description(
     try {
       wallet = await client.wallet.import({
         privateKey,
-        ...options.primary ? { makePrimary: true } : {}
+        ...options.primary ? { makePrimary: true } : {},
+        ...options.nickname ? { nickname: options.nickname } : {}
       });
     } catch (err) {
       if (err instanceof ZeroApiError) {
@@ -152259,6 +152394,7 @@ var walletListCommand = (appContext) => new Command("list").description("List th
         (wallet.isPrimary ? "PRIMARY" : "").padEnd(7),
         wallet.delegationGranted ? "delegated" : "not delegated"
       ];
+      if (wallet.nickname) columns.push(`"${wallet.nickname}"`);
       console.log(columns.join("  ").trimEnd());
     }
   }
@@ -152344,6 +152480,64 @@ var walletGenerateCommand = (appContext) => new Command("generate").description(
     });
   }
 );
+var walletNicknameCommand = (appContext) => new Command("nickname").description(
+  "Set or clear a nickname on one of your profile wallets (private to you)"
+).argument("<address>", "Wallet address (0x\u2026) on your profile").argument(
+  "[name]",
+  "Nickname to set (max 64 chars). Omit with --clear to remove it."
+).option("--clear", "Clear the wallet's nickname").action(
+  async (address2, name, options) => {
+    const { analyticsService, client } = appContext.services;
+    if (options.clear && name !== void 0) {
+      console.error("Pass a nickname OR --clear, not both.");
+      process.exitCode = 1;
+      return;
+    }
+    if (!options.clear && (name === void 0 || name.trim() === "")) {
+      console.error(
+        "Missing nickname. Pass one as an argument, or use --clear to remove it."
+      );
+      process.exitCode = 1;
+      return;
+    }
+    if (client.getCredentials().kind !== "session") {
+      console.error(SIGN_IN_FIRST_MESSAGE);
+      process.exitCode = 1;
+      return;
+    }
+    let wallet;
+    try {
+      wallet = await client.wallet.setNickname({
+        walletAddress: address2,
+        nickname: options.clear ? null : name
+      });
+    } catch (err) {
+      if (err instanceof ZeroApiError) {
+        if (err.status === 401) {
+          console.error(
+            "Session expired. Run `zero auth login` and try again."
+          );
+        } else if (err.status === 404) {
+          console.error(
+            "Wallet not found on your profile. Run `zero wallet list` to see your wallets."
+          );
+        } else {
+          console.error(`Could not update nickname: ${err.message}`);
+        }
+      } else {
+        console.error("Could not update nickname: network error.");
+      }
+      process.exitCode = 1;
+      return;
+    }
+    console.log(
+      wallet.nickname ? `Nickname set: ${wallet.walletAddress} \u2192 "${wallet.nickname}"` : `Nickname cleared for ${wallet.walletAddress}`
+    );
+    analyticsService.capture("wallet_nickname_set", {
+      cleared: Boolean(options.clear)
+    });
+  }
+);
 var walletCommand = (appContext) => {
   const cmd = new Command("wallet").description("Manage your wallet");
   cmd.addCommand(walletBalanceCommand(appContext));
@@ -152353,6 +152547,7 @@ var walletCommand = (appContext) => {
   cmd.addCommand(walletGenerateCommand(appContext));
   cmd.addCommand(walletImportCommand(appContext));
   cmd.addCommand(walletListCommand(appContext));
+  cmd.addCommand(walletNicknameCommand(appContext));
   return cmd;
 };
 

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@zeroxyz/cli",
-	"version": "1.18.0",
+	"version": "1.19.0",
 	"type": "module",
 	"bin": {
 		"zero": "dist/index.js",