cspr402 0.4.7

package/dist/client.js

@@ -0,0 +1,400 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CSPR402Client = exports.Cards402Client = exports.ResumableError = exports.WaitTimeoutError = exports.OrderFailedError = exports.AuthError = exports.InvalidAmountError = exports.PriceUnavailableError = exports.ServiceUnavailableError = exports.RateLimitError = exports.SpendLimitError = exports.Cards402Error = void 0;
+var errors_1 = require("./errors");
+Object.defineProperty(exports, "Cards402Error", { enumerable: true, get: function () { return errors_1.Cards402Error; } });
+Object.defineProperty(exports, "SpendLimitError", { enumerable: true, get: function () { return errors_1.SpendLimitError; } });
+Object.defineProperty(exports, "RateLimitError", { enumerable: true, get: function () { return errors_1.RateLimitError; } });
+Object.defineProperty(exports, "ServiceUnavailableError", { enumerable: true, get: function () { return errors_1.ServiceUnavailableError; } });
+Object.defineProperty(exports, "PriceUnavailableError", { enumerable: true, get: function () { return errors_1.PriceUnavailableError; } });
+Object.defineProperty(exports, "InvalidAmountError", { enumerable: true, get: function () { return errors_1.InvalidAmountError; } });
+Object.defineProperty(exports, "AuthError", { enumerable: true, get: function () { return errors_1.AuthError; } });
+Object.defineProperty(exports, "OrderFailedError", { enumerable: true, get: function () { return errors_1.OrderFailedError; } });
+Object.defineProperty(exports, "WaitTimeoutError", { enumerable: true, get: function () { return errors_1.WaitTimeoutError; } });
+Object.defineProperty(exports, "ResumableError", { enumerable: true, get: function () { return errors_1.ResumableError; } });
+const errors_2 = require("./errors");
+// Shared order-ID shape validator. Keeps the client, the MCP tool,
+// and anything else that stamps an order id into a URL in lockstep.
+// The backend mints UUIDv4 but we allow any 1–64 char alphanumeric +
+// `_` + `-` string so hand-crafted test ids still work.
+const ORDER_ID_PATTERN = /^[a-zA-Z0-9_-]{1,64}$/;
+function validateOrderId(orderId) {
+    if (typeof orderId !== 'string' || !ORDER_ID_PATTERN.test(orderId)) {
+        throw new errors_2.Cards402Error(`Invalid order id: ${String(orderId).slice(0, 32)}`, 'invalid_order_id', 400);
+    }
+}
+class Cards402Client {
+    baseUrl;
+    apiKey;
+    retry;
+    constructor({ baseUrl, apiKey, retry = {}, } = {}) {
+        // Resolve api key + base URL in priority order:
+        //   1. Explicit constructor args
+        //   2. CARDS402_API_KEY / CARDS402_BASE_URL env vars
+        //   3. ~/.cards402/config.json (written by `cards402 onboard`)
+        // This lets agents that went through the claim-code onboarding
+        // flow just do `new Cards402Client()` without passing anything.
+        //
+        // Use a synchronous require of ./config so the auto-load path
+        // doesn't force callers into an async constructor.
+        let resolvedKey = apiKey;
+        let resolvedBase = baseUrl;
+        if (!resolvedKey || !resolvedBase) {
+            try {
+                // Synchronous require avoids forcing the constructor to be async.
+                // eslint-disable-next-line @typescript-eslint/no-require-imports
+                const config = require('./config');
+                const resolved = config.resolveCredentials({ apiKey: resolvedKey, baseUrl: resolvedBase });
+                if (!resolvedKey)
+                    resolvedKey = resolved.apiKey;
+                if (!resolvedBase)
+                    resolvedBase = resolved.baseUrl;
+            }
+            catch {
+                /* config helper unavailable (e.g. in a browser bundle) — fall through */
+            }
+        }
+        if (!resolvedKey || !resolvedKey.trim())
+            throw new errors_2.AuthError();
+        // F1-client-constructor (2026-04-16): validate baseUrl unconditionally.
+        // Pre-fix, assertSafeBaseUrl only ran inside resolveCredentials —
+        // which is skipped entirely when both apiKey and baseUrl are passed
+        // explicitly (the common case for MCP, CLI purchase, and OWS callers).
+        // An http:// or ftp:// URL would be used as-is, sending the agent's
+        // API key over plaintext. Now every code path is covered.
+        const finalBase = resolvedBase || 'https://api.cspr402.xyz/v1';
+        try {
+            // Lazy-require to avoid circular deps in the browser-bundle path
+            // where config.ts isn't available. If assertSafeBaseUrl isn't
+            // loadable (browser, bundler that tree-shook config.ts), fall
+            // through to the bare URL — the same behaviour as before the fix,
+            // which is correct for environments without a filesystem.
+            // eslint-disable-next-line @typescript-eslint/no-require-imports
+            const { assertSafeBaseUrl } = require('./config');
+            assertSafeBaseUrl(finalBase, { context: 'Cards402Client constructor' });
+        }
+        catch (err) {
+            // Re-throw URL-safety rejections (non-HTTPS, userinfo, etc.)
+            // but swallow "module not found" errors from environments where
+            // config.ts isn't bundled.
+            if (err instanceof Error && !err.message.includes('Cannot find module')) {
+                throw err;
+            }
+        }
+        this.baseUrl = finalBase.replace(/\/$/, '');
+        this.apiKey = resolvedKey;
+        // Audit A-23: default to retry on transient errors so every agent doesn't
+        // reimplement its own backoff loop. 2 retries with 500ms base + 5s cap
+        // covers brief network blips without punishing a persistent outage.
+        this.retry = {
+            attempts: retry.attempts ?? 2,
+            baseDelayMs: retry.baseDelayMs ?? 500,
+            maxDelayMs: retry.maxDelayMs ?? 5000,
+        };
+    }
+    async handleError(res) {
+        const body = (await res.json().catch(() => ({})));
+        throw (0, errors_2.parseApiError)(res.status, body);
+    }
+    // Retry only on transient/network errors. Non-idempotent 2xx-class errors
+    // (validation, auth, policy) are NOT retried because they're not transient.
+    // createOrder is special-cased: it passes an Idempotency-Key so retries are
+    // safe for 5xx and network errors only.
+    shouldRetry(status) {
+        return status === 429 || status === 503 || status === 504 || status === 502 || status === 0;
+    }
+    async fetchWithRetry(url, init) {
+        const { attempts, baseDelayMs, maxDelayMs } = this.retry;
+        let lastErr;
+        for (let i = 0; i <= attempts; i++) {
+            try {
+                const res = await fetch(url, init);
+                if (res.ok || !this.shouldRetry(res.status) || i === attempts)
+                    return res;
+                lastErr = new Error(`HTTP ${res.status}`);
+            }
+            catch (err) {
+                lastErr = err;
+                if (i === attempts)
+                    throw err;
+            }
+            // F3-sdk (2026-04-16): full-range jitter. Pre-fix the jitter was
+            // [0, delay/4] (always additive), so in a thundering-herd scenario
+            // (many agents 429'd simultaneously) they all retried within
+            // [delay, 1.25*delay] — too narrow to decorrelate. Standard "full
+            // jitter" is [0, delay], which spreads retries across the entire
+            // backoff window and avoids the herd re-colliding at each level.
+            const delay = Math.min(baseDelayMs * Math.pow(2, i), maxDelayMs);
+            const jitter = Math.floor(Math.random() * delay);
+            await new Promise((r) => setTimeout(r, jitter));
+        }
+        // Unreachable because we always either return or throw above.
+        throw lastErr ?? new Error('fetchWithRetry: exhausted without result');
+    }
+    async createOrder(opts) {
+        const { idempotencyKey: providedKey, ...body } = opts;
+        const idempotencyKey = providedKey ?? crypto.randomUUID();
+        // Safe to retry: the Idempotency-Key collapses duplicate creates on the
+        // backend, so replaying on a 5xx/timeout can't charge twice.
+        const res = await this.fetchWithRetry(`${this.baseUrl}/orders`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'X-Api-Key': this.apiKey,
+                'Idempotency-Key': idempotencyKey,
+            },
+            body: JSON.stringify(body),
+        });
+        if (!res.ok)
+            return this.handleError(res);
+        return res.json();
+    }
+    async getOrder(orderId) {
+        // Validate and encode — path param must be a UUID-shaped identifier.
+        // The server also validates, but failing here avoids a round-trip
+        // on typos and eliminates a path-traversal surface on misuse.
+        validateOrderId(orderId);
+        const res = await this.fetchWithRetry(`${this.baseUrl}/orders/${encodeURIComponent(orderId)}`, {
+            headers: { 'X-Api-Key': this.apiKey },
+        });
+        if (!res.ok)
+            return this.handleError(res);
+        return res.json();
+    }
+    async verifyCasperPayment(orderId, deployHash, opts = {}) {
+        validateOrderId(orderId);
+        if (!/^[0-9a-fA-F]{64}$/.test(deployHash)) {
+            throw new errors_2.Cards402Error('Invalid Casper deploy hash', 'invalid_deploy_hash', 400);
+        }
+        const res = await this.fetchWithRetry(`${this.baseUrl}/orders/${encodeURIComponent(orderId)}/verify-payment`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'X-Api-Key': this.apiKey,
+            },
+            body: JSON.stringify({
+                deploy_hash: deployHash,
+                ...(opts.senderPublicKey ? { sender_public_key: opts.senderPublicKey } : {}),
+            }),
+        });
+        if (!res.ok)
+            return this.handleError(res);
+        return res.json();
+    }
+    // Wait until the card is ready. Uses SSE (GET /orders/:id/stream) by
+    // default — one open connection pushed to as the phase changes — and
+    // falls back to HTTP polling if SSE fails for any reason (old backend,
+    // hostile middlebox stripping text/event-stream, etc.).
+    async waitForCard(orderId, { timeoutMs = 300000, intervalMs = 3000 } = {}) {
+        validateOrderId(orderId);
+        // Shared deadline so an SSE attempt that eats most of the budget
+        // can't also grant polling its own full timeoutMs. Pre-fix, a
+        // stream that aborted at t=timeoutMs fell through to a polling
+        // loop that ran for another full timeoutMs — total wait 2×
+        // requested. Now the polling fallback inherits whatever time is
+        // left and the total stays within timeoutMs ± a few ms.
+        const deadlineMs = Date.now() + timeoutMs;
+        try {
+            return await this.waitForCardStream(orderId, timeoutMs);
+        }
+        catch (err) {
+            // Typed order-lifecycle errors must propagate unchanged — the stream
+            // correctly reported a terminal failure / expiry / timeout.
+            if (err instanceof errors_2.OrderFailedError ||
+                err instanceof errors_2.WaitTimeoutError ||
+                err instanceof errors_2.Cards402Error) {
+                throw err;
+            }
+            // An AbortError from the timer firing means we hit the stream's
+            // own deadline — that's a WaitTimeoutError, not "fall back to
+            // polling". Only genuine transport failures fall through.
+            if (err instanceof Error && (err.name === 'AbortError' || err.message.includes('aborted'))) {
+                throw new errors_2.WaitTimeoutError(orderId, timeoutMs);
+            }
+            const remainingMs = Math.max(0, deadlineMs - Date.now());
+            if (remainingMs === 0)
+                throw new errors_2.WaitTimeoutError(orderId, timeoutMs);
+            return this.waitForCardPoll(orderId, remainingMs, intervalMs);
+        }
+    }
+    // SSE fast path.
+    async waitForCardStream(orderId, timeoutMs) {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), timeoutMs);
+        try {
+            const res = await fetch(`${this.baseUrl}/orders/${orderId}/stream`, {
+                headers: { 'X-Api-Key': this.apiKey, Accept: 'text/event-stream' },
+                signal: controller.signal,
+            });
+            if (!res.ok) {
+                if (res.status === 404)
+                    throw new errors_2.OrderFailedError(orderId, 'order_not_found', undefined);
+                if (res.status === 401)
+                    throw new errors_2.AuthError();
+                // Fall back to polling on any other non-2xx.
+                throw new Error(`stream http ${res.status}`);
+            }
+            if (!res.body)
+                throw new Error('stream has no body');
+            const reader = res.body.getReader();
+            const decoder = new TextDecoder();
+            let buffer = '';
+            // F2-sdk (2026-04-16): cap the SSE buffer so a misbehaving server
+            // or MITM can't OOM the agent process by injecting a single
+            // multi-megabyte "event" between delimiters. 1 MB is generous for
+            // any realistic SSE payload (the backend sends <2 KB per phase
+            // change); anything larger is definitionally adversarial or corrupt.
+            const SSE_BUFFER_CAP = 1024 * 1024;
+            while (true) {
+                const { value, done } = await reader.read();
+                if (done)
+                    break;
+                // F1-sdk (2026-04-16): normalize CRLF and bare CR to LF before
+                // accumulating into the buffer. The SSE spec (HTML Living
+                // Standard § EventSource) defines end-of-line as \r\n, \r, or
+                // \n. The backend sends \n, but a transparent HTTP proxy
+                // (nginx on Windows, some Cloudflare configs, corporate proxy
+                // appliances) can rewrite line endings to \r\n. Pre-fix, the
+                // parser split on '\n\n' only — a \r\n rewrite meant
+                // buffer.indexOf('\n\n') never matched and the buffer grew
+                // unbounded until OOM. Normalizing at ingestion fixes all
+                // three delimiter variants in one step.
+                const chunk = decoder
+                    .decode(value, { stream: true })
+                    .replace(/\r\n/g, '\n')
+                    .replace(/\r/g, '\n');
+                buffer += chunk;
+                // F2-sdk: abort if the buffer exceeds the cap — drop the stream
+                // and fall through to the polling fallback (or re-throw as a
+                // generic error that waitForCard's catch handler routes to
+                // polling).
+                if (buffer.length > SSE_BUFFER_CAP) {
+                    reader.cancel();
+                    throw new Error('sse buffer exceeded 1 MB — aborting stream');
+                }
+                // Split on blank lines — each SSE event is terminated by \n\n.
+                let idx;
+                while ((idx = buffer.indexOf('\n\n')) !== -1) {
+                    const raw = buffer.slice(0, idx);
+                    buffer = buffer.slice(idx + 2);
+                    const dataLine = raw.split('\n').find((line) => line.startsWith('data: '));
+                    if (!dataLine)
+                        continue;
+                    const json = dataLine.slice(6);
+                    let payload;
+                    try {
+                        payload = JSON.parse(json);
+                    }
+                    catch {
+                        continue;
+                    }
+                    if (payload.phase === 'ready' && payload.card) {
+                        return payload.card;
+                    }
+                    if (payload.phase === 'failed' ||
+                        payload.phase === 'refunded' ||
+                        payload.phase === 'rejected') {
+                        throw new errors_2.OrderFailedError(orderId, payload.error ?? payload.phase, payload.refund);
+                    }
+                    if (payload.phase === 'expired') {
+                        throw new errors_2.OrderFailedError(orderId, 'Payment window expired — no funds were taken', undefined);
+                    }
+                }
+            }
+            // Stream ended without a terminal event — treat as timeout.
+            throw new errors_2.WaitTimeoutError(orderId, timeoutMs);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    // Legacy polling path — kept as the fallback so old backends still work.
+    async waitForCardPoll(orderId, timeoutMs, intervalMs) {
+        const deadline = Date.now() + timeoutMs;
+        while (Date.now() < deadline) {
+            const order = await this.getOrder(orderId);
+            if (order.phase === 'ready' && order.card)
+                return order.card;
+            if (order.phase === 'failed' || order.phase === 'refunded' || order.phase === 'rejected') {
+                throw new errors_2.OrderFailedError(orderId, order.error ?? order.phase, order.refund);
+            }
+            if (order.phase === 'expired') {
+                throw new errors_2.OrderFailedError(orderId, 'Payment window expired — no funds were taken', undefined);
+            }
+            await new Promise((r) => setTimeout(r, intervalMs));
+        }
+        throw new errors_2.WaitTimeoutError(orderId, timeoutMs);
+    }
+    // List this agent's recent orders — useful for resuming after a crash.
+    // Audit A-19: supports `since_created_at` / `since_updated_at` so agents
+    // can poll for delta without re-fetching the full history.
+    async listOrders({ status, limit = 20, offset, since_created_at, since_updated_at, } = {}) {
+        const params = new URLSearchParams();
+        if (status)
+            params.set('status', status);
+        if (limit)
+            params.set('limit', String(limit));
+        if (offset)
+            params.set('offset', String(offset));
+        if (since_created_at)
+            params.set('since_created_at', since_created_at);
+        if (since_updated_at)
+            params.set('since_updated_at', since_updated_at);
+        const qs = params.toString() ? `?${params}` : '';
+        const res = await this.fetchWithRetry(`${this.baseUrl}/orders${qs}`, {
+            headers: { 'X-Api-Key': this.apiKey },
+        });
+        if (!res.ok)
+            return this.handleError(res);
+        return res.json();
+    }
+    // Get the agent's own spend and budget summary — useful for reporting to owners.
+    async getUsage() {
+        const res = await this.fetchWithRetry(`${this.baseUrl}/usage`, {
+            headers: { 'X-Api-Key': this.apiKey },
+        });
+        if (!res.ok)
+            return this.handleError(res);
+        return res.json();
+    }
+    // Report a setup lifecycle transition to the backend. The owner's
+    // admin dashboard and the agent's own dashboard subscribe to these
+    // via SSE and show a live "onboarding state" pill, so operators can
+    // see at a glance which agents are setting up, which are awaiting
+    // deposits, and which are active.
+    //
+    // Valid states:
+    //   'initializing'     — the agent is just starting setup
+    //   'awaiting_funding' — wallet created, waiting for on-chain deposit
+    //
+    // 'minted' (never contacted) and 'active' (first delivered order) are
+    // derived by the backend from activity, so you don't report those.
+    //
+    // Errors are swallowed: dashboard state is a best-effort signal, not
+    // something that should break the purchase flow if the endpoint is
+    // transiently unreachable.
+    async reportStatus(state, opts = {}) {
+        try {
+            await this.fetchWithRetry(`${this.baseUrl}/agent/status`, {
+                method: 'POST',
+                headers: {
+                    'X-Api-Key': this.apiKey,
+                    'Content-Type': 'application/json',
+                },
+                body: JSON.stringify({
+                    state,
+                    wallet_public_key: opts.wallet_public_key,
+                    detail: opts.detail,
+                }),
+            });
+        }
+        catch {
+            /* best-effort; do not block the caller */
+        }
+    }
+}
+exports.Cards402Client = Cards402Client;
+class CSPR402Client extends Cards402Client {
+}
+exports.CSPR402Client = CSPR402Client;
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";;;AAAA,mCAWkB;AAVhB,uGAAA,aAAa,OAAA;AACb,yGAAA,eAAe,OAAA;AACf,wGAAA,cAAc,OAAA;AACd,iHAAA,uBAAuB,OAAA;AACvB,+GAAA,qBAAqB,OAAA;AACrB,4GAAA,kBAAkB,OAAA;AAClB,mGAAA,SAAS,OAAA;AACT,0GAAA,gBAAgB,OAAA;AAChB,0GAAA,gBAAgB,OAAA;AAChB,wGAAA,cAAc,OAAA;AAEhB,qCAMkB;AAmMlB,mEAAmE;AACnE,oEAAoE;AACpE,qEAAqE;AACrE,wDAAwD;AACxD,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AACjD,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,sBAAiB,CACzB,qBAAqB,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EACnD,kBAAkB,EAClB,GAAG,CACJ,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAa,cAAc;IACjB,OAAO,CAAS;IAChB,MAAM,CAAS;IACf,KAAK,CAAyB;IAEtC,YAAY,EACV,OAAO,EACP,MAAM,EACN,KAAK,GAAG,EAAE,MAKR,EAAE;QACJ,gDAAgD;QAChD,iCAAiC;QACjC,qDAAqD;QACrD,+DAA+D;QAC/D,+DAA+D;QAC/D,gEAAgE;QAChE,EAAE;QACF,8DAA8D;QAC9D,mDAAmD;QACnD,IAAI,WAAW,GAAG,MAAM,CAAC;QACzB,IAAI,YAAY,GAAG,OAAO,CAAC;QAC3B,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,kEAAkE;gBAClE,iEAAiE;gBACjE,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;gBACnC,MAAM,QAAQ,GACZ,MAMD,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;gBACrE,IAAI,CAAC,WAAW;oBAAE,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAChD,IAAI,CAAC,YAAY;oBAAE,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC;gBACP,yEAAyE;YAC3E,CAAC;QACH,CAAC;QACD,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,kBAAa,EAAE,CAAC;QACnE,wEAAwE;QACxE,kEAAkE;QAClE,oEAAoE;QACpE,uEAAuE;QACvE,oEAAoE;QACpE,0DAA0D;QAC1D,MAAM,SAAS,GAAG,YAAY,IAAI,4BAA4B,CAAC;QAC/D,IAAI,CAAC;YACH,iEAAiE;YACjE,8DAA8D;YAC9D,8DAA8D;YAC9D,kEAAkE;YAClE,0DAA0D;YAC1D,iEAAiE;YACjE,MAAM,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,UAAU,CAE/C,CAAC;YACF,iBAAiB,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,6DAA6D;YAC7D,gEAAgE;YAChE,2BAA2B;YAC3B,IAAI,GAAG,YAAY,KAAK,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBACxE,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC;QAC1B,0EAA0E;QAC1E,uEAAuE;QACvE,oEAAoE;QACpE,IAAI,CAAC,KAAK,GAAG;YACX,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,CAAC;YAC7B,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,GAAG;YACrC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;SACrC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,GAAa;QACrC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA4B,CAAC;QAC7E,MAAM,IAAA,sBAAa,EAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,wCAAwC;IAChC,WAAW,CAAC,MAAc;QAChC,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,CAAC,CAAC;IAC9F,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,GAAW,EAAE,IAAiB;QACzD,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QACzD,IAAI,OAAgB,CAAC;QACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACnC,IAAI,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,QAAQ;oBAAE,OAAO,GAAG,CAAC;gBAC1E,OAAO,GAAG,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,GAAG,GAAG,CAAC;gBACd,IAAI,CAAC,KAAK,QAAQ;oBAAE,MAAM,GAAG,CAAC;YAChC,CAAC;YACD,iEAAiE;YACjE,mEAAmE;YACnE,6DAA6D;YAC7D,kEAAkE;YAClE,iEAAiE;YACjE,iEAAiE;YACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;YACjE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC;YACjD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,8DAA8D;QAC9D,MAAM,OAAO,IAAI,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAgD;QAChE,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QACtD,MAAM,cAAc,GAAG,WAAW,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAC1D,wEAAwE;QACxE,6DAA6D;QAC7D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,OAAO,SAAS,EAAE;YAC9D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,IAAI,CAAC,MAAM;gBACxB,iBAAiB,EAAE,cAAc;aAClC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1C,OAAO,GAAG,CAAC,IAAI,EAA4B,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAe;QAC5B,qEAAqE;QACrE,kEAAkE;QAClE,8DAA8D;QAC9D,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,OAAO,WAAW,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE;YAC7F,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE;SACtC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1C,OAAO,GAAG,CAAC,IAAI,EAA0B,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,OAAe,EACf,UAAkB,EAClB,OAAqC,EAAE;QAEvC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,sBAAiB,CAAC,4BAA4B,EAAE,qBAAqB,EAAE,GAAG,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CACnC,GAAG,IAAI,CAAC,OAAO,WAAW,kBAAkB,CAAC,OAAO,CAAC,iBAAiB,EACtE;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,IAAI,CAAC,MAAM;aACzB;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,WAAW,EAAE,UAAU;gBACvB,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7E,CAAC;SACH,CACF,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1C,OAAO,GAAG,CAAC,IAAI,EAA0C,CAAC;IAC5D,CAAC;IAED,qEAAqE;IACrE,qEAAqE;IACrE,uEAAuE;IACvE,wDAAwD;IACxD,KAAK,CAAC,WAAW,CACf,OAAe,EACf,EAAE,SAAS,GAAG,MAAM,EAAE,UAAU,GAAG,IAAI,KAAkD,EAAE;QAE3F,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,iEAAiE;QACjE,8DAA8D;QAC9D,+DAA+D;QAC/D,2DAA2D;QAC3D,gEAAgE;QAChE,wDAAwD;QACxD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC1C,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,qEAAqE;YACrE,4DAA4D;YAC5D,IACE,GAAG,YAAY,yBAAgB;gBAC/B,GAAG,YAAY,yBAAgB;gBAC/B,GAAG,YAAY,sBAAiB,EAChC,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,gEAAgE;YAChE,8DAA8D;YAC9D,0DAA0D;YAC1D,IAAI,GAAG,YAAY,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;gBAC3F,MAAM,IAAI,yBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACzD,IAAI,WAAW,KAAK,CAAC;gBAAE,MAAM,IAAI,yBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACtE,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,iBAAiB;IACT,KAAK,CAAC,iBAAiB,CAAC,OAAe,EAAE,SAAiB;QAChE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,WAAW,OAAO,SAAS,EAAE;gBAClE,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE;gBAClE,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;oBAAE,MAAM,IAAI,yBAAgB,CAAC,OAAO,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;gBAC1F,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;oBAAE,MAAM,IAAI,kBAAa,EAAE,CAAC;gBAClD,6CAA6C;gBAC7C,MAAM,IAAI,KAAK,CAAC,eAAe,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAErD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;YAClC,IAAI,MAAM,GAAG,EAAE,CAAC;YAEhB,kEAAkE;YAClE,4DAA4D;YAC5D,kEAAkE;YAClE,+DAA+D;YAC/D,qEAAqE;YACrE,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,CAAC;YAEnC,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI;oBAAE,MAAM;gBAChB,+DAA+D;gBAC/D,0DAA0D;gBAC1D,8DAA8D;gBAC9D,yDAAyD;gBACzD,8DAA8D;gBAC9D,6DAA6D;gBAC7D,qDAAqD;gBACrD,2DAA2D;gBAC3D,0DAA0D;gBAC1D,wCAAwC;gBACxC,MAAM,KAAK,GAAG,OAAO;qBAClB,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;qBAC/B,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC;qBACtB,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC;gBAEhB,gEAAgE;gBAChE,6DAA6D;gBAC7D,2DAA2D;gBAC3D,YAAY;gBACZ,IAAI,MAAM,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;oBACnC,MAAM,CAAC,MAAM,EAAE,CAAC;oBAChB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;gBAChE,CAAC;gBAED,+DAA+D;gBAC/D,IAAI,GAAW,CAAC;gBAChB,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oBACjC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;oBAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;oBAC3E,IAAI,CAAC,QAAQ;wBAAE,SAAS;oBACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC/B,IAAI,OAAoB,CAAC;oBACzB,IAAI,CAAC;wBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;oBAC5C,CAAC;oBAAC,MAAM,CAAC;wBACP,SAAS;oBACX,CAAC;oBAED,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;wBAC9C,OAAO,OAAO,CAAC,IAAI,CAAC;oBACtB,CAAC;oBACD,IACE,OAAO,CAAC,KAAK,KAAK,QAAQ;wBAC1B,OAAO,CAAC,KAAK,KAAK,UAAU;wBAC5B,OAAO,CAAC,KAAK,KAAK,UAAU,EAC5B,CAAC;wBACD,MAAM,IAAI,yBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;oBACtF,CAAC;oBACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;wBAChC,MAAM,IAAI,yBAAgB,CACxB,OAAO,EACP,8CAA8C,EAC9C,SAAS,CACV,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YACD,4DAA4D;YAC5D,MAAM,IAAI,yBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACjD,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,yEAAyE;IACjE,KAAK,CAAC,eAAe,CAC3B,OAAe,EACf,SAAiB,EACjB,UAAkB;QAElB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAE3C,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAC,IAAI,CAAC;YAE7D,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBACzF,MAAM,IAAI,yBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAChF,CAAC;YAED,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,IAAI,yBAAgB,CACxB,OAAO,EACP,8CAA8C,EAC9C,SAAS,CACV,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,IAAI,yBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACjD,CAAC;IAED,uEAAuE;IACvE,yEAAyE;IACzE,2DAA2D;IAC3D,KAAK,CAAC,UAAU,CAAC,EACf,MAAM,EACN,KAAK,GAAG,EAAE,EACV,MAAM,EACN,gBAAgB,EAChB,gBAAgB,MAOd,EAAE;QACJ,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9C,IAAI,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACjD,IAAI,gBAAgB;YAAE,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC;QACvE,IAAI,gBAAgB;YAAE,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC;QACvE,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,OAAO,UAAU,EAAE,EAAE,EAAE;YACnE,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE;SACtC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1C,OAAO,GAAG,CAAC,IAAI,EAA8B,CAAC;IAChD,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,QAAQ;QACZ,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,OAAO,QAAQ,EAAE;YAC7D,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE;SACtC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1C,OAAO,GAAG,CAAC,IAAI,EAA2B,CAAC;IAC7C,CAAC;IAED,kEAAkE;IAClE,mEAAmE;IACnE,oEAAoE;IACpE,kEAAkE;IAClE,kCAAkC;IAClC,EAAE;IACF,gBAAgB;IAChB,0DAA0D;IAC1D,sEAAsE;IACtE,EAAE;IACF,sEAAsE;IACtE,mEAAmE;IACnE,EAAE;IACF,qEAAqE;IACrE,mEAAmE;IACnE,2BAA2B;IAC3B,KAAK,CAAC,YAAY,CAChB,KAA0C,EAC1C,OAAwD,EAAE;QAE1D,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,OAAO,eAAe,EAAE;gBACxD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,WAAW,EAAE,IAAI,CAAC,MAAM;oBACxB,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK;oBACL,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;oBACzC,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;QAC5C,CAAC;IACH,CAAC;CACF;AAraD,wCAqaC;AAED,MAAa,aAAc,SAAQ,cAAc;CAAG;AAApD,sCAAoD"}

package/dist/commands/onboard.d.ts

@@ -0,0 +1,4 @@
+export { deriveDefaultWalletName as _deriveDefaultWalletName };
+declare function deriveDefaultWalletName(claim: string, label: string | null): string;
+export declare function onboardCommand(argv: string[]): Promise<number>;
+//# sourceMappingURL=onboard.d.ts.map

package/dist/commands/onboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboard.d.ts","sourceRoot":"","sources":["../../src/commands/onboard.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,uBAAuB,IAAI,wBAAwB,EAAE,CAAC;AAsE/D,iBAAS,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAU5E;AAyBD,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA6GpE"}

package/dist/commands/onboard.js

@@ -0,0 +1,192 @@
+"use strict";
+// `cspr402 onboard --claim <code>` - one-shot agent setup.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._deriveDefaultWalletName = deriveDefaultWalletName;
+exports.onboardCommand = onboardCommand;
+const config_1 = require("../config");
+const client_1 = require("../client");
+const CASPER_PUBLIC_KEY_RE = /^(01[0-9a-fA-F]{64}|02[0-9a-fA-F]{66})$/;
+function parseArgs(argv) {
+    const out = {};
+    for (let i = 0; i < argv.length; i++) {
+        const arg = argv[i];
+        if (arg === undefined)
+            continue;
+        if (arg === '--help' || arg === '-h')
+            out.help = true;
+        else if (arg === '--claim')
+            out.claim = argv[++i];
+        else if (arg.startsWith('--claim='))
+            out.claim = arg.slice('--claim='.length);
+        else if (arg === '--agent-name')
+            out.agentName = argv[++i];
+        else if (arg.startsWith('--agent-name='))
+            out.agentName = arg.slice('--agent-name='.length);
+        else if (arg === '--wallet-name')
+            out.walletName = argv[++i];
+        else if (arg.startsWith('--wallet-name='))
+            out.walletName = arg.slice('--wallet-name='.length);
+        else if (arg === '--api-base')
+            out.apiBase = argv[++i];
+        else if (arg.startsWith('--api-base='))
+            out.apiBase = arg.slice('--api-base='.length);
+        else if (arg === '--casper-public-key' || arg === '--public-key')
+            out.casperPublicKey = argv[++i];
+        else if (arg.startsWith('--casper-public-key='))
+            out.casperPublicKey = arg.slice('--casper-public-key='.length);
+        else if (arg.startsWith('--public-key='))
+            out.casperPublicKey = arg.slice('--public-key='.length);
+        else if (arg === '--casper-key-path' || arg === '--key-path')
+            out.casperKeyPath = argv[++i];
+        else if (arg.startsWith('--casper-key-path='))
+            out.casperKeyPath = arg.slice('--casper-key-path='.length);
+        else if (arg.startsWith('--key-path='))
+            out.casperKeyPath = arg.slice('--key-path='.length);
+    }
+    return out;
+}
+function usage() {
+    process.stderr
+        .write(`Usage: cspr402 onboard --claim <code> [--casper-public-key <hex>] [--casper-key-path <path>] [--api-base <url>]
+
+Exchanges a one-time claim code from the CSPR402 dashboard for an api key and
+writes ~/.cspr402/config.json with 0600 permissions. The config can store a
+Casper public key or a path to a local key file, but never stores private key
+material directly.
+
+Options:
+  --claim <code>             One-time claim code from the dashboard. Required.
+  --casper-public-key <hex>  Casper testnet public key for payer binding.
+  --casper-key-path <path>   Local key-file path. Keep the file outside git.
+  --api-base <url>           Override the default https://api.cspr402.xyz/v1
+  -h, --help                 Show this message
+`);
+}
+function deriveDefaultWalletName(claim, label) {
+    const raw = claim.replace(/^(cspr402_claim_|c402_)/i, '');
+    const suffix = raw.slice(0, 8).toLowerCase();
+    const slug = (label ?? 'agent')
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-+|-+$/g, '')
+        .slice(0, 24) || 'agent';
+    return `cspr402-${slug}-${suffix}`;
+}
+function normalizeCasperPublicKey(value) {
+    const normalized = value?.trim().toLowerCase();
+    if (!normalized)
+        return undefined;
+    if (!CASPER_PUBLIC_KEY_RE.test(normalized)) {
+        throw new Error('Casper public key must be a valid public key hex string.');
+    }
+    return normalized;
+}
+async function redeemClaim(apiBase, claim) {
+    const claimUrl = new URL(`${apiBase.replace(/\/$/, '')}/agent/claim`);
+    const res = await fetch(claimUrl, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ code: claim }),
+    });
+    const body = (await res.json().catch(() => ({})));
+    if (!res.ok) {
+        throw new Error(body.message || body.error || `claim failed with HTTP ${res.status}`);
+    }
+    return body;
+}
+async function onboardCommand(argv) {
+    const args = parseArgs(argv);
+    if (args.help) {
+        usage();
+        return 0;
+    }
+    if (!args.claim) {
+        process.stderr.write('error: --claim <code> is required\n\n');
+        usage();
+        return 2;
+    }
+    const claim = args.claim.trim();
+    if (!/^(cspr402_claim_|c402_)[a-f0-9]{16,}$/i.test(claim)) {
+        process.stderr.write(`error: '${claim.slice(0, 16)}...' does not look like a valid claim code.\n` +
+            'Expected format: cspr402_claim_<hex>.\n');
+        return 2;
+    }
+    let apiBase = args.apiBase ||
+        process.env.CSPR402_BASE_URL ||
+        process.env.CARDS402_BASE_URL ||
+        'https://api.cspr402.xyz/v1';
+    try {
+        apiBase = (0, config_1.assertSafeBaseUrl)(apiBase, { context: '--api-base / CSPR402_BASE_URL' });
+    }
+    catch (err) {
+        process.stderr.write(`error: ${err instanceof Error ? err.message : String(err)}\n`);
+        return 2;
+    }
+    let casperPublicKey;
+    try {
+        casperPublicKey = normalizeCasperPublicKey(args.casperPublicKey || process.env.CSPR402_CASPER_PUBLIC_KEY);
+    }
+    catch (err) {
+        process.stderr.write(`error: ${err instanceof Error ? err.message : String(err)}\n`);
+        return 2;
+    }
+    const casperKeyPath = args.casperKeyPath || process.env.CSPR402_CASPER_KEY_PATH;
+    const existing = (0, config_1.loadCards402Config)();
+    if (existing) {
+        process.stderr.write('An existing cspr402 config was found at ~/.cspr402/config.json; proceeding with the new claim.\n\n');
+    }
+    process.stdout.write('Redeeming CSPR402 claim...\n');
+    let claimResponse;
+    try {
+        claimResponse = await redeemClaim(apiBase, claim);
+    }
+    catch (err) {
+        process.stderr.write(`error: ${err instanceof Error ? err.message : String(err)}\n`);
+        return 1;
+    }
+    if (!claimResponse.api_key) {
+        process.stderr.write('error: claim response missing api_key.\n');
+        return 1;
+    }
+    const finalApiUrl = (0, config_1.assertSafeBaseUrl)(claimResponse.api_url || apiBase, {
+        context: 'claim response api_url',
+    });
+    const agentName = args.agentName ||
+        args.walletName ||
+        deriveDefaultWalletName(claim, claimResponse.label ?? null);
+    const { path: configPath } = (0, config_1.saveCards402Config)({
+        api_key: claimResponse.api_key,
+        api_url: finalApiUrl,
+        webhook_secret: claimResponse.webhook_secret ?? null,
+        wallet_name: agentName,
+        casper_public_key: casperPublicKey,
+        casper_key_path: casperKeyPath,
+        created_at: new Date().toISOString(),
+    });
+    const client = new client_1.CSPR402Client({ apiKey: claimResponse.api_key, baseUrl: finalApiUrl });
+    await client.reportStatus(casperPublicKey ? 'awaiting_funding' : 'initializing', {
+        wallet_public_key: casperPublicKey,
+        detail: casperPublicKey
+            ? 'Casper public key configured'
+            : 'Claim redeemed; Casper public key not configured yet',
+    });
+    process.stdout.write('\n');
+    process.stdout.write('cspr402 agent ready\n');
+    process.stdout.write(`  Label:          ${claimResponse.label ?? '(none)'}\n`);
+    process.stdout.write(`  Config:         ${configPath}\n`);
+    process.stdout.write(`  API base:       ${finalApiUrl}\n`);
+    if (casperPublicKey)
+        process.stdout.write(`  Casper key:     ${casperPublicKey}\n`);
+    if (casperKeyPath)
+        process.stdout.write(`  Key file path:  ${casperKeyPath}\n`);
+    process.stdout.write('\n');
+    if (!casperPublicKey) {
+        process.stdout.write('Next step: set CSPR402_CASPER_PUBLIC_KEY or rerun with --casper-public-key.\n');
+    }
+    else {
+        process.stdout.write('Next step: fund that public key with Casper testnet CSPR for native transfers.\n');
+    }
+    process.stdout.write('Your operator sees setup progress live in the CSPR402 dashboard.\n');
+    return 0;
+}
+//# sourceMappingURL=onboard.js.map

package/dist/commands/onboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboard.js","sourceRoot":"","sources":["../../src/commands/onboard.ts"],"names":[],"mappings":";AAAA,2DAA2D;;AAKvB,2DAAwB;AAyG5D,wCA6GC;AAzND,sCAAsF;AACtF,sCAA0C;AAI1C,MAAM,oBAAoB,GAAG,yCAAyC,CAAC;AAsBvE,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAChC,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;aACjD,IAAI,GAAG,KAAK,SAAS;YAAE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aAC7C,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;aACzE,IAAI,GAAG,KAAK,cAAc;YAAE,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aACtD,IAAI,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC;YAAE,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;aACvF,IAAI,GAAG,KAAK,eAAe;YAAE,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aACxD,IAAI,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAAE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;aAC1F,IAAI,GAAG,KAAK,YAAY;YAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aAClD,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC;YAAE,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;aACjF,IAAI,GAAG,KAAK,qBAAqB,IAAI,GAAG,KAAK,cAAc;YAC9D,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aAC7B,IAAI,GAAG,CAAC,UAAU,CAAC,sBAAsB,CAAC;YAC7C,GAAG,CAAC,eAAe,GAAG,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;aAC5D,IAAI,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC;YACtC,GAAG,CAAC,eAAe,GAAG,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;aACrD,IAAI,GAAG,KAAK,mBAAmB,IAAI,GAAG,KAAK,YAAY;YAAE,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aACvF,IAAI,GAAG,CAAC,UAAU,CAAC,oBAAoB,CAAC;YAC3C,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;aACxD,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC;YAAE,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,KAAK;IACZ,OAAO,CAAC,MAAM;SACX,KAAK,CAAC;;;;;;;;;;;;;CAaV,CAAC,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa,EAAE,KAAoB;IAClE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,IAAI,GACR,CAAC,KAAK,IAAI,OAAO,CAAC;SACf,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC;IAC7B,OAAO,WAAW,IAAI,IAAI,MAAM,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAyB;IACzD,MAAM,UAAU,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/C,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,KAAa;IACvD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;KACtC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAkB,CAAC;IACnE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,0BAA0B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAEM,KAAK,UAAU,cAAc,CAAC,IAAc;IACjD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,KAAK,EAAE,CAAC;QACR,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC9D,KAAK,EAAE,CAAC;QACR,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,WAAW,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,+CAA+C;YAC1E,yCAAyC,CAC5C,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,OAAO,GACT,IAAI,CAAC,OAAO;QACZ,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC5B,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC7B,4BAA4B,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,GAAG,IAAA,0BAAiB,EAAC,OAAO,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;IACrF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,eAAmC,CAAC;IACxC,IAAI,CAAC;QACH,eAAe,GAAG,wBAAwB,CACxC,IAAI,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAC9D,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IAEhF,MAAM,QAAQ,GAAG,IAAA,2BAAkB,GAAE,CAAC;IACtC,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oGAAoG,CACrG,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACrD,IAAI,aAA4B,CAAC;IACjC,IAAI,CAAC;QACH,aAAa,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACjE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,WAAW,GAAG,IAAA,0BAAiB,EAAC,aAAa,CAAC,OAAO,IAAI,OAAO,EAAE;QACtE,OAAO,EAAE,wBAAwB;KAClC,CAAC,CAAC;IACH,MAAM,SAAS,GACb,IAAI,CAAC,SAAS;QACd,IAAI,CAAC,UAAU;QACf,uBAAuB,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;IAC9D,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,IAAA,2BAAkB,EAAC;QAC9C,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,OAAO,EAAE,WAAW;QACpB,cAAc,EAAE,aAAa,CAAC,cAAc,IAAI,IAAI;QACpD,WAAW,EAAE,SAAS;QACtB,iBAAiB,EAAE,eAAe;QAClC,eAAe,EAAE,aAAa;QAC9B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,sBAAa,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1F,MAAM,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,cAAc,EAAE;QAC/E,iBAAiB,EAAE,eAAe;QAClC,MAAM,EAAE,eAAe;YACrB,CAAC,CAAC,8BAA8B;YAChC,CAAC,CAAC,sDAAsD;KAC3D,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,aAAa,CAAC,KAAK,IAAI,QAAQ,IAAI,CAAC,CAAC;IAC/E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,UAAU,IAAI,CAAC,CAAC;IAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,WAAW,IAAI,CAAC,CAAC;IAC3D,IAAI,eAAe;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,eAAe,IAAI,CAAC,CAAC;IACpF,IAAI,aAAa;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,aAAa,IAAI,CAAC,CAAC;IAChF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+EAA+E,CAChF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;IAC3F,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/onboard.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=onboard.test.d.ts.map

package/dist/commands/onboard.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboard.test.d.ts","sourceRoot":"","sources":["../../src/commands/onboard.test.ts"],"names":[],"mappings":""}