clawncher 0.1.8 → 0.1.11

package/README.md

@@ -34,6 +34,11 @@ Deploy a new token on Base with Uniswap V4 pool:
 # Basic deployment
 clawncher deploy --name "My Token" --symbol MYTKN
 
+# Pay the mandatory 1,000,000 $CLAWNCH launch burn (required to deploy while
+# burn enforcement is on). Your wallet must hold >= 1,000,000 $CLAWNCH; the CLI
+# burns it to the dead address, then deploys — in one command.
+clawncher deploy --name "My Token" --symbol MYTKN --burn
+
 # With image and description
 clawncher deploy --name "My Token" --symbol MYTKN \
   --image "https://example.com/logo.png" \

package/dist/cli.js

@@ -9,13 +9,29 @@ import chalk from 'chalk';
 import ora from 'ora';
 import Table from 'cli-table3';
 import { readFileSync, writeFileSync, existsSync, mkdirSync } from 'fs';
-import { join } from 'path';
+import { join, dirname } from 'path';
 import { homedir } from 'os';
+import { fileURLToPath } from 'url';
 import { createWalletClient, createPublicClient, http, formatEther, parseEther, } from 'viem';
 import { privateKeyToAccount } from 'viem/accounts';
 import { base, baseSepolia } from 'viem/chains';
-import { ClawnchReader, ClawnchClient, ClawncherClaimer, ClawnchPortfolio, ClawnchWatcher, ClawnchSwapper, ClawnchLiquidity, ClawnchApiDeployer, WayfinderClient, getAddresses, NATIVE_TOKEN_ADDRESS, WAYFINDER_CHAIN_NAMES, ClawnchFeeLockerABI, HerdIntelligence, HerdAuth, } from '@clawnch/clawncher-sdk';
-const VERSION = '0.1.1';
+import { ClawnchReader, ClawnchClient, ClawncherClaimer, ClawnchPortfolio, ClawnchWatcher, ClawnchSwapper, ClawnchLiquidity, ClawnchApiDeployer, WayfinderClient, BankrFeeClaimer, getAddresses, NATIVE_TOKEN_ADDRESS, WAYFINDER_CHAIN_NAMES, ClawnchFeeLockerABI, HerdIntelligence, HerdAuth, } from '@clawnch/clawncher-sdk';
+// Read VERSION from package.json at runtime instead of hardcoding it.
+// The previous hardcoded constant drifted from the published package
+// version on every release and showed users an inaccurate banner.
+// dist/cli.js → ../package.json (package root).
+const VERSION = (() => {
+    try {
+        const pkgPath = join(dirname(fileURLToPath(import.meta.url)), '..', 'package.json');
+        const pkg = JSON.parse(readFileSync(pkgPath, 'utf-8'));
+        return pkg.version || '0.0.0';
+    }
+    catch {
+        // package.json missing / unreadable — return a sentinel that's
+        // clearly wrong so the bug is visible instead of silently stale.
+        return '0.0.0';
+    }
+})();
 // ============================================================================
 // UI Toolkit
 // ============================================================================
@@ -329,7 +345,8 @@ program
     .option('--dev-buy-recipient <address>', 'Dev buy recipient')
     .option('--pair <token>', 'Paired token: "weth" (default) or "usdc"', 'weth')
     .option('--no-vanity', 'Disable vanity address')
-    .option('--bypass-rate-limit', 'Burn 10,000 $CLAWNCH to skip 1-per-hour cooldown')
+    .option('--bypass-rate-limit', 'Burn 10,000 $CLAWNCH to skip 24h per-agent cooldown')
+    .option('--burn', 'Pay the mandatory 1,000,000 $CLAWNCH launch burn (required when burn enforcement is on)')
     .option('--network <network>', 'Network (mainnet/sepolia)', 'mainnet')
     .option('--private-key <key>', 'Private key')
     .option('--rpc <url>', 'RPC URL')
@@ -354,6 +371,7 @@ program
             name: opts.name,
             symbol: opts.symbol,
             bypassRateLimit: opts.bypassRateLimit || false,
+            burn: opts.burn || false,
         };
         if (opts.image)
             request.image = opts.image;
@@ -391,7 +409,9 @@ program
                 recipient: opts.devBuyRecipient ? validateAddress(opts.devBuyRecipient, 'dev buy recipient') : account.address,
             };
         }
-        spinner.text = `Deploying ${opts.symbol} on ${network}...`;
+        spinner.text = opts.burn
+            ? `Burning 1,000,000 $CLAWNCH + deploying ${opts.symbol} on ${network}...`
+            : `Deploying ${opts.symbol} on ${network}...`;
         const result = await deployer.deploy(request);
         spinner.succeed('Token deployed');
         if (opts.json) {
@@ -421,6 +441,9 @@ program
     }
     catch (err) {
         spinner.stop();
+        if (!opts.burn && err instanceof Error && /burn/i.test(err.message)) {
+            console.error(`\n  ${c.muted('This launch path requires a 1,000,000 $CLAWNCH burn. Re-run with')} ${c.highlight('--burn')} ${c.muted('to burn + deploy in one step.')}\n`);
+        }
         handleError(err);
     }
 });
@@ -873,6 +896,191 @@ fees
     }
 });
 // ============================================================================
+// Bankr Fee Commands (Doppler protocol)
+// ============================================================================
+fees
+    .command('bankr-check')
+    .description('Check claimable Bankr/Doppler fees for a wallet')
+    .argument('<wallet>', 'Wallet address')
+    .option('-d, --days <days>', 'Lookback period in days (1-90)', '30')
+    .option('--json', 'Output as JSON')
+    .action(async (wallet, opts) => {
+    const walletAddr = validateAddress(wallet, 'wallet');
+    const spinner = ora('Checking Bankr fees...').start();
+    try {
+        const days = parseInt(opts.days, 10);
+        const dashboard = await BankrFeeClaimer.getCreatorFees(walletAddr, days);
+        spinner.stop();
+        if (opts.json) {
+            console.log(JSON.stringify(dashboard, null, 2));
+            return;
+        }
+        console.log();
+        console.log(sectionHeader('Bankr Fee Dashboard'));
+        console.log(kv('Wallet', fmtAddr(wallet)));
+        console.log(kv('Period', c.value(`${dashboard.days} days`)));
+        console.log();
+        console.log(kv('Claimable WETH', c.accent(dashboard.totals.claimableWeth + ' WETH')));
+        console.log(kv('Claimed WETH', c.muted(dashboard.totals.claimedWeth + ' WETH')));
+        console.log(kv('Claim Count', c.value(dashboard.totals.claimCount.toString())));
+        console.log();
+        if (!dashboard.tokens || dashboard.tokens.length === 0) {
+            console.log(c.muted('  No Bankr tokens with fees found'));
+            console.log();
+            return;
+        }
+        console.log(styledTable(['Symbol', 'Token', 'Claimable WETH', 'Claimed WETH'], dashboard.tokens.map((t) => {
+            const wethIsToken0 = t.token0Label === 'WETH';
+            const claimableWeth = wethIsToken0 ? t.claimable.token0 : t.claimable.token1;
+            const claimedWeth = wethIsToken0 ? t.claimed.token0 : t.claimed.token1;
+            return [
+                c.highlight(t.symbol),
+                fmtAddr(t.tokenAddress, true),
+                c.accent(claimableWeth),
+                c.muted(claimedWeth),
+            ];
+        })));
+        console.log();
+    }
+    catch (err) {
+        spinner.stop();
+        handleError(err);
+    }
+});
+fees
+    .command('bankr-claim')
+    .description('Claim Bankr/Doppler fees for a specific token')
+    .argument('<token>', 'Token contract address')
+    .option('--private-key <key>', 'Private key (or use CLAWNCHER_PRIVATE_KEY env)')
+    .option('--rpc <url>', 'Custom RPC URL')
+    .option('--json', 'Output as JSON')
+    .action(async (token, opts) => {
+    const spinner = ora('Preparing Bankr fee claim...').start();
+    try {
+        const tokenAddress = validateAddress(token, 'token');
+        const privateKey = await getPrivateKeyOrWallet(opts);
+        const rpcUrl = opts.rpc || 'https://mainnet.base.org';
+        const account = privateKeyToAccount(privateKey);
+        const wallet = createWalletClient({
+            account,
+            chain: base,
+            transport: http(rpcUrl),
+        });
+        const publicClient = createPublicClient({
+            chain: base,
+            transport: http(rpcUrl),
+        });
+        // First, look up this token's fee data
+        spinner.text = 'Looking up token fees...';
+        const dashboard = await BankrFeeClaimer.getCreatorFees(account.address);
+        const tokenData = dashboard.tokens?.find((t) => t.tokenAddress.toLowerCase() === tokenAddress.toLowerCase());
+        if (!tokenData) {
+            spinner.stop();
+            console.log();
+            console.log(c.error('  No Bankr fees found for this token'));
+            console.log(c.muted('  Make sure this is a Bankr-deployed token and you are the creator'));
+            console.log();
+            return;
+        }
+        if (!tokenData.initializer || !tokenData.poolId) {
+            spinner.stop();
+            console.log();
+            console.log(c.error('  Missing initializer or poolId — cannot claim'));
+            console.log();
+            return;
+        }
+        const wethIsToken0 = tokenData.token0Label === 'WETH';
+        const claimableWeth = wethIsToken0 ? tokenData.claimable.token0 : tokenData.claimable.token1;
+        spinner.text = `Claiming ${tokenData.symbol} fees (${claimableWeth} WETH)...`;
+        const claimer = new BankrFeeClaimer({ wallet, publicClient });
+        const result = await claimer.claimToken(tokenData);
+        spinner.stop();
+        if (opts.json) {
+            console.log(JSON.stringify(result, null, 2));
+            return;
+        }
+        console.log();
+        console.log(sectionHeader('Bankr Fee Claim'));
+        console.log(kv('Token', `${c.highlight(tokenData.symbol)} ${fmtAddr(tokenAddress, true)}`));
+        console.log(kv('Caller', fmtAddr(account.address)));
+        console.log();
+        if (result.success) {
+            console.log(`  ${c.success('\u2713')} ${c.label('Claimed')}  ${c.accent(claimableWeth + ' WETH')}`);
+            console.log(`  ${c.muted('tx:')} ${c.dim(result.txHash)}`);
+        }
+        else {
+            console.log(`  ${c.error('\u2717')} ${c.label('Failed')}  ${c.error(result.error || 'Unknown error')}`);
+        }
+        console.log();
+    }
+    catch (err) {
+        spinner.stop();
+        handleError(err);
+    }
+});
+fees
+    .command('bankr-claim-all')
+    .description('Claim Bankr/Doppler fees for all tokens with claimable fees')
+    .option('--private-key <key>', 'Private key (or use CLAWNCHER_PRIVATE_KEY env)')
+    .option('--rpc <url>', 'Custom RPC URL')
+    .option('--json', 'Output as JSON')
+    .action(async (opts) => {
+    const spinner = ora('Scanning for claimable Bankr fees...').start();
+    try {
+        const privateKey = await getPrivateKeyOrWallet(opts);
+        const rpcUrl = opts.rpc || 'https://mainnet.base.org';
+        const account = privateKeyToAccount(privateKey);
+        const wallet = createWalletClient({
+            account,
+            chain: base,
+            transport: http(rpcUrl),
+        });
+        const publicClient = createPublicClient({
+            chain: base,
+            transport: http(rpcUrl),
+        });
+        const claimer = new BankrFeeClaimer({ wallet, publicClient });
+        const result = await claimer.claimAll({
+            onProgress: (progress) => {
+                spinner.text = `Scanning launches... ${progress.scanned}/${progress.total}`;
+            },
+            onClaim: (claimResult, index, total) => {
+                const icon = claimResult.success ? c.success('\u2713') : c.error('\u2717');
+                spinner.text = `${icon} ${claimResult.symbol} (${index + 1}/${total})`;
+            },
+        });
+        spinner.stop();
+        if (opts.json) {
+            console.log(JSON.stringify(result, null, 2));
+            return;
+        }
+        console.log();
+        console.log(sectionHeader('Bankr Batch Claim Results'));
+        console.log(kv('Wallet', fmtAddr(account.address)));
+        console.log(kv('WETH Estimate', c.accent(result.totalWethEstimate + ' WETH')));
+        console.log();
+        if (result.results.length === 0) {
+            console.log(c.muted('  No claimable Bankr fees found'));
+            console.log();
+            return;
+        }
+        for (const r of result.results) {
+            const icon = r.success ? c.success('\u2713') : c.error('\u2717');
+            const status = r.success
+                ? c.dim(r.txHash.slice(0, 14) + '...')
+                : c.error(r.error || 'failed');
+            console.log(`  ${icon} ${c.highlight(r.symbol.padEnd(10))} ${fmtAddr(r.tokenAddress, true)} ${c.dim('\u2500')} ${status}`);
+        }
+        console.log();
+        console.log(c.dim(`  ${result.successCount}/${result.results.length} tokens claimed successfully`));
+        console.log();
+    }
+    catch (err) {
+        spinner.stop();
+        handleError(err);
+    }
+});
+// ============================================================================
 // Portfolio Command
 // ============================================================================
 program
@@ -1120,6 +1328,158 @@ program
     }
 });
 // ============================================================================
+// Connect Command (Telegram Bot Pairing)
+// ============================================================================
+program
+    .command('connect')
+    .description('Connect to a wallet set up via the Telegram bot (@OpenClawnchBot)')
+    .argument('<code>', 'Pairing code from the Telegram bot (e.g. CLAW-A7X9)')
+    .option('--api-url <url>', 'Clawnch API URL')
+    .option('--json', 'Output as JSON')
+    .action(async (code, opts) => {
+    const spinner = ora('Connecting...').start();
+    try {
+        const baseUrl = (opts.apiUrl || getClawnchApiUrl()).replace(/\/$/, '');
+        // Strip ALL whitespace (not just leading/trailing) — paste from the
+        // Telegram bot occasionally includes a non-breaking space or a stray
+        // newline between the prefix and the random suffix. The previous
+        // `.trim()` only handled outer whitespace, which made codes that
+        // looked right to the user fail the server-side `^CLAW-[A-Z0-9]{4}$`
+        // regex with no useful feedback.
+        const normalizedCode = code.replace(/\s+/g, '').toUpperCase();
+        // Exchange pairing code for encrypted credentials
+        spinner.text = 'Exchanging pairing code...';
+        const res = await fetch(`${baseUrl}/api/pair/exchange`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ code: normalizedCode }),
+        });
+        if (!res.ok) {
+            const err = await res.json().catch(() => ({ error: 'Exchange failed' }));
+            spinner.fail(`Failed: ${err.error || 'Unknown error'}`);
+            // Echo the exact string we sent. Codes are single-use + 5-minute TTL
+            // so this isn't a secret leak by the time the user sees the error,
+            // and it's the only way to debug "I pasted the right thing"
+            // mismatches caused by invisible characters surviving the trim.
+            // JSON.stringify reveals invisible chars as escape sequences.
+            console.log(c.muted(`  Sent code: ${JSON.stringify(normalizedCode)}`));
+            console.log(c.muted(`  Expected format: CLAW-XXXX (4 alphanumeric chars, uppercase)`));
+            if (err.suggestion)
+                console.log(c.muted(`  ${err.suggestion}`));
+            process.exit(1);
+        }
+        const data = await res.json();
+        spinner.text = 'Decrypting wallet...';
+        // Ask for PIN to decrypt the private key
+        const { createInterface } = await import('readline');
+        const rl = createInterface({ input: process.stdin, output: process.stdout });
+        const pin = await new Promise((resolve) => {
+            // Use stderr for the prompt so it doesn't interfere with JSON output
+            process.stderr.write(c.label('\n  Enter the PIN you set in the Telegram bot: '));
+            rl.question('', (answer) => {
+                rl.close();
+                resolve(answer.trim());
+            });
+        });
+        if (!pin) {
+            spinner.fail('PIN is required to decrypt the wallet.');
+            process.exit(1);
+        }
+        // Decrypt private key
+        const { scryptSync, createDecipheriv } = await import('crypto');
+        const salt = Buffer.from(data.salt, 'hex');
+        const iv = Buffer.from(data.iv, 'hex');
+        const authTag = Buffer.from(data.authTag, 'hex');
+        const ciphertext = Buffer.from(data.encryptedKey, 'hex');
+        let privateKey;
+        try {
+            // Match the bot's scrypt params (N=2^14, r=8, p=1)
+            const key = scryptSync(pin, salt, 32, { N: 2 ** 14, r: 8, p: 1 });
+            const decipher = createDecipheriv('aes-256-gcm', key, iv);
+            decipher.setAuthTag(authTag);
+            const decrypted = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+            privateKey = decrypted.toString('utf8');
+        }
+        catch {
+            spinner.fail('Wrong PIN. Could not decrypt the wallet.');
+            process.exit(1);
+        }
+        // Verify it's a valid private key
+        if (!privateKey.startsWith('0x') || privateKey.length !== 66) {
+            spinner.fail('Decrypted data is not a valid private key. Try again with /start in the bot.');
+            process.exit(1);
+        }
+        // Import the wallet using the existing encrypted wallet system
+        // Re-encrypt with the CLI's stronger scrypt params for local storage
+        const { importFromPrivateKey, setActiveWallet, listWallets } = await import('./wallet.js');
+        const walletName = data.agentName
+            ? data.agentName.toLowerCase().replace(/[^a-z0-9-_]/g, '-')
+            : `tg-${data.wallet.slice(2, 8).toLowerCase()}`;
+        // Check if wallet name already exists
+        const existing = listWallets();
+        let finalName = walletName;
+        if (existing.some((w) => w.name === walletName)) {
+            finalName = `${walletName}-${Date.now().toString(36).slice(-4)}`;
+        }
+        // Prompt for a local password (stronger than PIN, for CLI encryption)
+        const rl2 = createInterface({ input: process.stdin, output: process.stdout });
+        const password = await new Promise((resolve) => {
+            process.stderr.write(c.label('  Choose a password for local wallet encryption (8+ chars): '));
+            rl2.question('', (answer) => {
+                rl2.close();
+                resolve(answer.trim());
+            });
+        });
+        if (password.length < 8) {
+            spinner.fail('Password must be at least 8 characters.');
+            process.exit(1);
+        }
+        spinner.text = 'Importing wallet...';
+        // Import with the CLI's wallet system (uses scrypt N=2^18)
+        importFromPrivateKey(finalName, privateKey, password);
+        setActiveWallet(finalName);
+        // Save agent config if present
+        const config = loadConfig();
+        config.network = data.network || 'mainnet';
+        if (!config.privateKey) {
+            // Don't overwrite existing raw key, but set network
+        }
+        saveConfig(config);
+        spinner.succeed('Connected!');
+        if (opts.json) {
+            console.log(JSON.stringify({
+                wallet: data.wallet,
+                walletName: finalName,
+                agentName: data.agentName,
+                hasApiKey: !!data.agentApiKey,
+                network: data.network,
+            }, null, 2));
+        }
+        else {
+            console.log();
+            console.log(kv('Wallet', c.value(data.wallet)));
+            console.log(kv('Wallet name', c.accent(finalName)));
+            console.log(kv('Network', networkBadge(data.network || 'mainnet')));
+            if (data.agentName) {
+                console.log(kv('Agent', c.value(data.agentName)));
+            }
+            if (data.agentApiKey) {
+                console.log(kv('API Key', c.accent(data.agentApiKey)));
+                console.log();
+                console.log(c.warn('  Save your API key — you\'ll need it for verified deploys.'));
+            }
+            console.log();
+            console.log(c.muted('  Your wallet is encrypted and stored locally.'));
+            console.log(c.muted('  Next: clawncher deploy --verified --api-key <key>'));
+            console.log();
+        }
+    }
+    catch (err) {
+        spinner.stop();
+        handleError(err);
+    }
+});
+// ============================================================================
 // Tokens Command (API)
 // ============================================================================
 program