arc402-cli 1.4.50 → 1.6.0

package/dist/commands/auth.js

@@ -0,0 +1,188 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAuthCommand = registerAuthCommand;
+const chalk_1 = __importDefault(require("chalk"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const ethers_1 = require("ethers");
+const config_1 = require("../config");
+const SESSION_TOKEN_PATH = path.join(os.homedir(), ".arc402", "session.token");
+function getDaemonUrl(baseUrl) {
+    if (baseUrl)
+        return baseUrl;
+    try {
+        const config = (0, config_1.loadConfig)();
+        return config["daemonEndpoint"] ?? "http://127.0.0.1:4402";
+    }
+    catch {
+        return "http://127.0.0.1:4402";
+    }
+}
+function readToken() {
+    if (fs.existsSync(SESSION_TOKEN_PATH)) {
+        return fs.readFileSync(SESSION_TOKEN_PATH, "utf-8").trim();
+    }
+    return null;
+}
+function registerAuthCommand(program) {
+    const auth = program
+        .command("auth")
+        .description("Authenticate with ARC-402 daemon (Spec 46 §11 remote auth)");
+    // ── arc402 auth status ─────────────────────────────────────────────────────
+    auth
+        .command("status")
+        .description("Check current session status with the daemon")
+        .option("--daemon-url <url>", "Override daemon URL")
+        .action(async (opts) => {
+        const url = getDaemonUrl(opts.daemonUrl);
+        const token = readToken();
+        try {
+            const res = await fetch(`${url}/auth/status`, {
+                headers: token ? { Authorization: `Bearer ${token}` } : {},
+                signal: AbortSignal.timeout(3000),
+            });
+            const data = (await res.json());
+            if (data["authenticated"]) {
+                const expiresIn = Number(data["expiresIn"]);
+                const h = Math.floor(expiresIn / 3600);
+                const m = Math.floor((expiresIn % 3600) / 60);
+                console.log(chalk_1.default.green("\n✓ Authenticated"));
+                console.log(chalk_1.default.dim(`  Wallet:  ${data["walletAddress"]}`));
+                console.log(chalk_1.default.dim(`  Scope:   ${data["scope"] ?? "operator"}`));
+                console.log(chalk_1.default.dim(`  Valid:   ${h}h ${m}m remaining\n`));
+            }
+            else {
+                console.log(chalk_1.default.yellow("\n  Not authenticated. Run: arc402 auth sign\n"));
+            }
+        }
+        catch {
+            console.log(chalk_1.default.dim("\n  Daemon not reachable. No auth status available.\n"));
+        }
+    });
+    // ── arc402 auth sign ───────────────────────────────────────────────────────
+    auth
+        .command("sign")
+        .description("Sign an auth challenge with the machine key and store a 24h session token")
+        .option("--daemon-url <url>", "Override daemon URL")
+        .option("--wallet <address>", "Wallet address to authenticate against")
+        .option("--scope <scope>", "Requested scope (default: operator)", "operator")
+        .action(async (opts) => {
+        const url = getDaemonUrl(opts.daemonUrl);
+        const config = (0, config_1.loadConfig)();
+        const machineKeyPriv = config["machineKeyPrivateKey"];
+        if (!machineKeyPriv) {
+            console.error(chalk_1.default.red("\n  machineKeyPrivateKey not found in ~/.arc402/config.json"));
+            console.error(chalk_1.default.dim("  Add machineKeyPrivateKey to your config to enable remote auth.\n"));
+            process.exit(1);
+        }
+        const wallet = opts.wallet ??
+            config["walletAddress"] ??
+            config["wallet"]?.["contract_address"];
+        if (!wallet) {
+            console.error(chalk_1.default.red("\n  Could not determine wallet address. Pass --wallet <address>.\n"));
+            process.exit(1);
+        }
+        try {
+            console.log(chalk_1.default.dim("  Requesting auth challenge..."));
+            const challengeRes = await fetch(`${url}/auth/challenge?wallet=${encodeURIComponent(wallet)}&scope=${encodeURIComponent(opts.scope ?? "operator")}`, { signal: AbortSignal.timeout(5000) });
+            if (!challengeRes.ok) {
+                console.error(chalk_1.default.red(`  Challenge failed: HTTP ${challengeRes.status}`));
+                process.exit(1);
+            }
+            const challenge = (await challengeRes.json());
+            console.log(chalk_1.default.dim("  Signing challenge with machine key..."));
+            const signer = new ethers_1.ethers.Wallet(machineKeyPriv);
+            const signature = await signer.signMessage(challenge.challenge);
+            console.log(chalk_1.default.dim("  Exchanging signature for session token..."));
+            const sessionRes = await fetch(`${url}/auth/session`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({
+                    challengeId: challenge.challengeId,
+                    signature,
+                }),
+                signal: AbortSignal.timeout(15000),
+            });
+            const session = (await sessionRes.json());
+            if (!session.token) {
+                console.error(chalk_1.default.red(`  Auth failed: ${session.error ?? "unknown"}`));
+                process.exit(1);
+            }
+            fs.writeFileSync(SESSION_TOKEN_PATH, session.token, { mode: 0o600 });
+            const expiresMs = session.expiresAt
+                ? session.expiresAt - Date.now()
+                : 86400000;
+            const h = Math.floor(expiresMs / 3600000);
+            console.log(chalk_1.default.green(`\n✓ Authenticated — ${session.walletAddress ?? session.wallet ?? wallet}`));
+            console.log(chalk_1.default.dim(`  Token saved: ${SESSION_TOKEN_PATH} (~${h}h)\n`));
+        }
+        catch (err) {
+            console.error(chalk_1.default.red(`  Auth error: ${err instanceof Error ? err.message : String(err)}`));
+            process.exit(1);
+        }
+    });
+    // ── arc402 auth revoke ─────────────────────────────────────────────────────
+    auth
+        .command("revoke")
+        .description("Revoke current session token on daemon and delete local copy")
+        .option("--daemon-url <url>", "Override daemon URL")
+        .action(async (opts) => {
+        const url = getDaemonUrl(opts.daemonUrl);
+        const token = readToken();
+        if (token) {
+            try {
+                await fetch(`${url}/auth/revoke`, {
+                    method: "POST",
+                    headers: { Authorization: `Bearer ${token}` },
+                    signal: AbortSignal.timeout(5000),
+                });
+            }
+            catch {
+                /* daemon unreachable — still delete local token */
+            }
+            fs.unlinkSync(SESSION_TOKEN_PATH);
+            console.log(chalk_1.default.green("✓ Session token revoked"));
+        }
+        else {
+            console.log(chalk_1.default.dim("  No session token found."));
+        }
+    });
+}
+//# sourceMappingURL=auth.js.map

package/dist/commands/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCA,kDAyKC;AAnMD,kDAA0B;AAC1B,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AACzB,mCAAgC;AAChC,sCAAuC;AAEvC,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;AAE/E,SAAS,YAAY,CAAC,OAAgB;IACpC,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,mBAAU,GAAwC,CAAC;QAClE,OAAQ,MAAM,CAAC,gBAAgB,CAAwB,IAAI,uBAAuB,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,uBAAuB,CAAC;IACjC,CAAC;AACH,CAAC;AAED,SAAS,SAAS;IAChB,IAAI,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,CAAC,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,mBAAmB,CAAC,OAAgB;IAClD,MAAM,IAAI,GAAG,OAAO;SACjB,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,4DAA4D,CAAC,CAAC;IAE7E,8EAA8E;IAC9E,IAAI;SACD,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,8CAA8C,CAAC;SAC3D,MAAM,CAAC,oBAAoB,EAAE,qBAAqB,CAAC;SACnD,MAAM,CAAC,KAAK,EAAE,IAA4B,EAAE,EAAE;QAC7C,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,cAAc,EAAE;gBAC5C,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE;gBAC1D,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;YAC3D,IAAI,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC1B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;gBAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;gBACvC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC9C,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;gBAC9C,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC9D,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC;gBACpE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;YAC/D,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,gDAAgD,CAAC,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC,CAAC;QAClF,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,8EAA8E;IAC9E,IAAI;SACD,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CACV,2EAA2E,CAC5E;SACA,MAAM,CAAC,oBAAoB,EAAE,qBAAqB,CAAC;SACnD,MAAM,CAAC,oBAAoB,EAAE,wCAAwC,CAAC;SACtE,MAAM,CAAC,iBAAiB,EAAE,qCAAqC,EAAE,UAAU,CAAC;SAC5E,MAAM,CAAC,KAAK,EAAE,IAA6D,EAAE,EAAE;QAC9E,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAA,mBAAU,GAAwC,CAAC;QAElE,MAAM,cAAc,GAAG,MAAM,CAAC,sBAAsB,CAAuB,CAAC;QAC5E,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CACP,6DAA6D,CAC9D,CACF,CAAC;YACF,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CACP,oEAAoE,CACrE,CACF,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,MAAM,GACV,IAAI,CAAC,MAAM;YACV,MAAM,CAAC,eAAe,CAAwB;YAC9C,MAAM,CAAC,QAAQ,CAAyC,EAAE,CAAC,kBAAkB,CAAuB,CAAC;QAExG,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAChF,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC,CAAC;YACzD,MAAM,YAAY,GAAG,MAAM,KAAK,CAC9B,GAAG,GAAG,0BAA0B,kBAAkB,CAAC,MAAM,CAAC,UAAU,kBAAkB,CAAC,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,EAAE,EAClH,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CACtC,CAAC;YACF,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;gBACrB,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CAAC,4BAA4B,YAAY,CAAC,MAAM,EAAE,CAAC,CAC7D,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,SAAS,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAI3C,CAAC;YAEF,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC,CAAC;YAClE,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YACjD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAEhE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC,CAAC;YACtE,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,eAAe,EAAE;gBACpD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,WAAW,EAAE,SAAS,CAAC,WAAW;oBAClC,SAAS;iBACV,CAAC;gBACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;aACnC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,CAOvC,CAAC;YAEF,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CAAC,kBAAkB,OAAO,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAC1D,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,EAAE,CAAC,aAAa,CAAC,kBAAkB,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS;gBACjC,CAAC,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;gBAChC,CAAC,CAAC,QAAS,CAAC;YACd,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,OAAS,CAAC,CAAC;YAC5C,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,KAAK,CACT,uBAAuB,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,MAAM,IAAI,MAAM,EAAE,CAC3E,CACF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,kBAAkB,kBAAkB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CACP,iBAAiB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACpE,CACF,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,8EAA8E;IAC9E,IAAI;SACD,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,8DAA8D,CAAC;SAC3E,MAAM,CAAC,oBAAoB,EAAE,qBAAqB,CAAC;SACnD,MAAM,CAAC,KAAK,EAAE,IAA4B,EAAE,EAAE;QAC7C,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAE1B,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,GAAG,GAAG,cAAc,EAAE;oBAChC,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;oBAC7C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,mDAAmD;YACrD,CAAC;YACD,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/chat.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+export declare function registerChatCommand(program: Command): void;
+//# sourceMappingURL=chat.d.ts.map

package/dist/commands/chat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.d.ts","sourceRoot":"","sources":["../../src/commands/chat.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAwqBpC,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA+I1D"}