everything-dev 1.53.1 → 2.0.0-rc.0

package/dist/near-cli.mjs

@@ -1,19 +1,22 @@
-import { colors } from "./utils/theme.mjs";
+import { Data, Effect } from "effect";
 import { generateKeyPairSync } from "node:crypto";
-import { Effect } from "effect";
 import { execa } from "execa";
 
 //#region src/near-cli.ts
 const INSTALLER_URL = `https://github.com/near/near-cli-rs/releases/download/v0.23.5/near-cli-rs-installer.sh`;
 const BASE58_ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
-var NearCliNotFoundError = class extends Error {
-	_tag = "NearCliNotFoundError";
-	constructor() {
-		super("NEAR CLI not found");
+var NearCliNotFoundError = class extends Data.TaggedError("NearCliNotFoundError") {
+	get message() {
+		return "NEAR CLI not found";
 	}
 };
-var NearTransactionError = class extends Error {
-	_tag = "NearTransactionError";
+var NearTransactionError = class extends Data.TaggedError("NearTransactionError") {
+	constructor(detail) {
+		super({ detail });
+	}
+	get message() {
+		return this.detail;
+	}
 };
 function base64UrlToBytes(input) {
 	const normalized = input.replace(/-/g, "+").replace(/_/g, "/");
@@ -55,54 +58,25 @@ function generateNearKeyPair() {
 		privateKey: `ed25519:${base58Encode(secretBytes)}`
 	};
 }
-const checkNearCliInstalled = Effect.tryPromise({
-	try: async () => {
-		try {
-			await execa("near", ["--version"], { stdio: "pipe" });
-			return true;
-		} catch {
-			return false;
-		}
-	},
-	catch: () => /* @__PURE__ */ new Error("Failed to check NEAR CLI")
-});
-async function runNearCommand(args) {
-	if (!process.stdin.isTTY) throw new NearTransactionError("No TTY available for keychain signing. Set NEAR_PRIVATE_KEY environment variable to sign locally.");
-	await execa("near", args, {
-		stdin: "inherit",
-		stdout: "inherit",
-		stderr: "inherit"
-	});
-}
-function resolveNearSigningMode(privateKey) {
-	if (privateKey) return {
-		_tag: "privateKey",
-		privateKey
-	};
-	if (!process.stdin.isTTY) throw new NearTransactionError("No private key provided and no TTY available for keychain signing. Set NEAR_PRIVATE_KEY environment variable to sign locally.");
-	console.log(colors.yellow("  Warning: No NEAR_PRIVATE_KEY set — falling back to interactive keychain signing."));
-	return { _tag: "interactiveKeychain" };
+async function isNearCliInstalled() {
+	try {
+		await execa("near", ["--version"], { stdio: "pipe" });
+		return true;
+	} catch {
+		return false;
+	}
 }
-const ensureNearCli = Effect.gen(function* () {
-	if (yield* checkNearCliInstalled) return;
-	console.log();
-	console.log("  NEAR CLI not found");
-	console.log();
-	console.log(`  To install manually: curl --proto '=https' --tlsv1.2 -LsSf ${INSTALLER_URL} | sh`);
-	console.log();
-	yield* Effect.fail(new NearCliNotFoundError());
-});
 function combineNearOutput(stdout, stderr) {
 	return [stdout, stderr].filter((value) => value && value.trim().length > 0).join("\n");
 }
 function extractTransactionHash(output) {
 	return output.match(/Transaction ID:\s*([A-Za-z0-9]+)/i)?.[1];
 }
-const executeTransaction = (config, signingMode) => Effect.gen(function* () {
-	const resolvedSigningMode = signingMode ?? resolveNearSigningMode(config.privateKey);
-	const gas = (config.gas || "300Tgas").replace(/\s+/g, "");
-	const deposit = (config.deposit || "0NEAR").replace(/\s+/g, "");
-	const network = config.network || (config.account.endsWith(".testnet") ? "testnet" : "mainnet");
+async function executeKeychainTransaction(config) {
+	if (!process.stdin.isTTY) throw new NearTransactionError("No TTY available for keychain signing. Set NEAR_PRIVATE_KEY environment variable to sign locally.");
+	const gas = "300Tgas";
+	const deposit = "0NEAR";
+	const argsBase64 = Buffer.from(JSON.stringify(config.args)).toString("base64");
 	const args = [
 		"contract",
 		"call-function",
@@ -110,7 +84,7 @@ const executeTransaction = (config, signingMode) => Effect.gen(function* () {
 		config.contract,
 		config.method,
 		"base64-args",
-		config.argsBase64,
+		argsBase64,
 		"prepaid-gas",
 		gas,
 		"attached-deposit",
@@ -118,48 +92,42 @@ const executeTransaction = (config, signingMode) => Effect.gen(function* () {
 		"sign-as",
 		config.account,
 		"network-config",
-		network
+		config.network,
+		"sign-with-keychain",
+		"send"
 	];
-	if (resolvedSigningMode._tag === "privateKey") args.push("sign-with-plaintext-private-key", resolvedSigningMode.privateKey, "send");
-	else args.push("sign-with-keychain", "send");
-	const output = yield* Effect.tryPromise({
-		try: async () => {
-			const isPrivateKeyMode = resolvedSigningMode._tag === "privateKey";
-			const verbose = config.verbose ?? false;
-			const proc = execa("near", args, {
-				stdin: isPrivateKeyMode ? "ignore" : "inherit",
-				stdout: "pipe",
-				stderr: "pipe",
-				reject: false,
-				timeout: 300 * 1e3
-			});
-			proc.stdout?.on("data", (chunk) => {
-				if (verbose) process.stdout.write(chunk);
-			});
-			proc.stderr?.on("data", (chunk) => {
-				if (verbose) process.stderr.write(chunk);
-			});
-			const result = await proc;
-			const combined = combineNearOutput(result.stdout ?? "", result.stderr ?? "");
-			const txHash = extractTransactionHash(combined);
-			const hasCodeDoesNotExist = /CodeDoesNotExist/i.test(combined);
-			if (result.exitCode === 0 || hasCodeDoesNotExist) {
-				if (hasCodeDoesNotExist) console.log(`  ${colors.green("✓")} Transaction confirmed${txHash ? ` ${colors.dim(txHash)}` : ""}`);
-				return {
-					success: true,
-					txHash,
-					output: combined || void 0
-				};
-			}
-			throw new NearTransactionError(combined || `Transaction failed with code ${result.exitCode}`);
-		},
-		catch: (error) => error
+	const result = await execa("near", args, {
+		stdin: "inherit",
+		stdout: "pipe",
+		stderr: "pipe",
+		reject: false,
+		timeout: 3e5
 	});
-	return {
+	const combined = combineNearOutput(result.stdout, result.stderr);
+	const txHash = extractTransactionHash(combined);
+	const hasCodeDoesNotExist = /CodeDoesNotExist/i.test(combined);
+	if (result.exitCode === 0 || hasCodeDoesNotExist) return {
 		success: true,
-		txHash: output.txHash,
-		output: output.output
+		txHash
 	};
+	throw new NearTransactionError(combined || `Transaction failed with code ${result.exitCode}`);
+}
+async function runNearCommand(args) {
+	if (!process.stdin.isTTY) throw new NearTransactionError("No TTY available for keychain signing. Set NEAR_PRIVATE_KEY environment variable to sign locally.");
+	await execa("near", args, {
+		stdin: "inherit",
+		stdout: "inherit",
+		stderr: "inherit"
+	});
+}
+const ensureNearCli = Effect.gen(function* () {
+	if (yield* Effect.promise(() => isNearCliInstalled())) return;
+	yield* Effect.log("");
+	yield* Effect.log("  NEAR CLI not found");
+	yield* Effect.log("");
+	yield* Effect.log(`  To install manually: curl --proto '=https' --tlsv1.2 -LsSf ${INSTALLER_URL} | sh`);
+	yield* Effect.log("");
+	return yield* new NearCliNotFoundError({});
 });
 async function listPublishKeys(config) {
 	const listResult = await execa("near", [
@@ -197,7 +165,7 @@ async function deleteAccessKeys(account, publicKeys, network) {
 	]);
 }
 async function addFunctionCallAccessKey(config) {
-	const keyPair = generateNearKeyPair();
+	const keyPair = config.keyPair ?? generateNearKeyPair();
 	await runNearCommand([
 		"account",
 		"add-key",
@@ -220,5 +188,5 @@ async function addFunctionCallAccessKey(config) {
 }
 
 //#endregion
-export { NearCliNotFoundError, NearTransactionError, addFunctionCallAccessKey, deleteAccessKeys, ensureNearCli, executeTransaction, generateNearKeyPair, listPublishKeys, resolveNearSigningMode };
+export { NearCliNotFoundError, NearTransactionError, addFunctionCallAccessKey, deleteAccessKeys, ensureNearCli, executeKeychainTransaction, generateNearKeyPair, isNearCliInstalled, listPublishKeys };
 //# sourceMappingURL=near-cli.mjs.map

package/dist/near-cli.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"near-cli.mjs","names":[],"sources":["../src/near-cli.ts"],"sourcesContent":["import { generateKeyPairSync } from \"node:crypto\";\nimport { Effect } from \"effect\";\nimport { execa } from \"execa\";\nimport { colors } from \"./utils/theme\";\n\nexport interface NearTransactionConfig {\n  account: string;\n  contract: string;\n  method: string;\n  argsBase64: string;\n  network?: \"mainnet\" | \"testnet\";\n  privateKey?: string;\n  gas?: string;\n  deposit?: string;\n  verbose?: boolean;\n}\n\nexport interface NearTransactionResult {\n  success: true;\n  txHash?: string;\n  output?: string;\n}\n\nexport interface NearKeyPair {\n  publicKey: string;\n  privateKey: string;\n}\n\nexport interface FunctionCallAccessKeyConfig {\n  account: string;\n  contract: string;\n  allowance: string;\n  functionNames: string[];\n  network?: \"mainnet\" | \"testnet\";\n}\n\nconst NEAR_CLI_VERSION = \"0.23.5\";\nconst INSTALLER_URL = `https://github.com/near/near-cli-rs/releases/download/v${NEAR_CLI_VERSION}/near-cli-rs-installer.sh`;\nconst BASE58_ALPHABET = \"123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz\";\n\nexport class NearCliNotFoundError extends Error {\n  readonly _tag = \"NearCliNotFoundError\";\n  constructor() {\n    super(\"NEAR CLI not found\");\n  }\n}\n\nexport class NearTransactionError extends Error {\n  readonly _tag = \"NearTransactionError\";\n}\n\nexport type NearSigningMode =\n  | { _tag: \"privateKey\"; privateKey: string }\n  | { _tag: \"interactiveKeychain\" };\n\nfunction base64UrlToBytes(input: string): Uint8Array {\n  const normalized = input.replace(/-/g, \"+\").replace(/_/g, \"/\");\n  return new Uint8Array(Buffer.from(normalized, \"base64\"));\n}\n\nfunction base58Encode(input: Uint8Array): string {\n  if (input.length === 0) return \"\";\n\n  const digits: number[] = [0];\n  for (const byte of input) {\n    let carry = byte;\n    for (let i = 0; i < digits.length; i++) {\n      carry += digits[i]! << 8;\n      digits[i] = carry % 58;\n      carry = Math.floor(carry / 58);\n    }\n    while (carry > 0) {\n      digits.push(carry % 58);\n      carry = Math.floor(carry / 58);\n    }\n  }\n\n  let output = \"\";\n  for (const byte of input) {\n    if (byte === 0) output += BASE58_ALPHABET[0];\n    else break;\n  }\n\n  for (let i = digits.length - 1; i >= 0; i--) {\n    output += BASE58_ALPHABET[digits[i]!]!;\n  }\n\n  return output;\n}\n\nexport function generateNearKeyPair(): NearKeyPair {\n  const { publicKey, privateKey } = generateKeyPairSync(\"ed25519\");\n  const publicJwk = publicKey.export({ format: \"jwk\" }) as JsonWebKey;\n  const privateJwk = privateKey.export({ format: \"jwk\" }) as JsonWebKey;\n\n  if (!publicJwk.x || !privateJwk.d) {\n    throw new Error(\"Failed to generate NEAR keypair\");\n  }\n\n  const publicBytes = base64UrlToBytes(publicJwk.x);\n  const privateSeed = base64UrlToBytes(privateJwk.d);\n  const secretBytes = new Uint8Array(privateSeed.length + publicBytes.length);\n  secretBytes.set(privateSeed, 0);\n  secretBytes.set(publicBytes, privateSeed.length);\n\n  return {\n    publicKey: `ed25519:${base58Encode(publicBytes)}`,\n    privateKey: `ed25519:${base58Encode(secretBytes)}`,\n  };\n}\n\nconst checkNearCliInstalled = Effect.tryPromise({\n  try: async () => {\n    try {\n      await execa(\"near\", [\"--version\"], { stdio: \"pipe\" });\n      return true;\n    } catch {\n      return false;\n    }\n  },\n  catch: () => new Error(\"Failed to check NEAR CLI\"),\n});\n\nasync function runNearCommand(args: string[]): Promise<void> {\n  if (!process.stdin.isTTY) {\n    throw new NearTransactionError(\n      \"No TTY available for keychain signing. Set NEAR_PRIVATE_KEY environment variable to sign locally.\",\n    );\n  }\n\n  await execa(\"near\", args, { stdin: \"inherit\", stdout: \"inherit\", stderr: \"inherit\" });\n}\n\nexport function resolveNearSigningMode(privateKey?: string): NearSigningMode {\n  if (privateKey) {\n    return { _tag: \"privateKey\", privateKey };\n  }\n\n  if (!process.stdin.isTTY) {\n    throw new NearTransactionError(\n      \"No private key provided and no TTY available for keychain signing. Set NEAR_PRIVATE_KEY environment variable to sign locally.\",\n    );\n  }\n\n  console.log(\n    colors.yellow(\n      \"  Warning: No NEAR_PRIVATE_KEY set — falling back to interactive keychain signing.\",\n    ),\n  );\n  return { _tag: \"interactiveKeychain\" };\n}\n\nexport const ensureNearCli = Effect.gen(function* () {\n  const isInstalled = yield* checkNearCliInstalled;\n  if (isInstalled) return;\n\n  console.log();\n  console.log(\"  NEAR CLI not found\");\n\n  console.log();\n  console.log(`  To install manually: curl --proto '=https' --tlsv1.2 -LsSf ${INSTALLER_URL} | sh`);\n  console.log();\n  yield* Effect.fail(new NearCliNotFoundError());\n});\n\nfunction combineNearOutput(stdout?: string, stderr?: string): string {\n  return [stdout, stderr].filter((value) => value && value.trim().length > 0).join(\"\\n\");\n}\n\nfunction extractTransactionHash(output: string): string | undefined {\n  const match = output.match(/Transaction ID:\\s*([A-Za-z0-9]+)/i);\n  return match?.[1];\n}\n\nexport const executeTransaction = (\n  config: NearTransactionConfig,\n  signingMode?: NearSigningMode,\n): Effect.Effect<NearTransactionResult, Error> =>\n  Effect.gen(function* () {\n    const resolvedSigningMode = signingMode ?? resolveNearSigningMode(config.privateKey);\n    const gas = (config.gas || \"300Tgas\").replace(/\\s+/g, \"\");\n    const deposit = (config.deposit || \"0NEAR\").replace(/\\s+/g, \"\");\n    const network = config.network || (config.account.endsWith(\".testnet\") ? \"testnet\" : \"mainnet\");\n\n    const args = [\n      \"contract\",\n      \"call-function\",\n      \"as-transaction\",\n      config.contract,\n      config.method,\n      \"base64-args\",\n      config.argsBase64,\n      \"prepaid-gas\",\n      gas,\n      \"attached-deposit\",\n      deposit,\n      \"sign-as\",\n      config.account,\n      \"network-config\",\n      network,\n    ];\n\n    if (resolvedSigningMode._tag === \"privateKey\") {\n      args.push(\"sign-with-plaintext-private-key\", resolvedSigningMode.privateKey, \"send\");\n    } else {\n      args.push(\"sign-with-keychain\", \"send\");\n    }\n\n    const output = yield* Effect.tryPromise({\n      try: async () => {\n        const isPrivateKeyMode = resolvedSigningMode._tag === \"privateKey\";\n        const verbose = config.verbose ?? false;\n\n        const proc = execa(\"near\", args, {\n          stdin: isPrivateKeyMode ? \"ignore\" : \"inherit\",\n          stdout: \"pipe\",\n          stderr: \"pipe\",\n          reject: false,\n          timeout: 5 * 60 * 1000,\n        });\n\n        proc.stdout?.on(\"data\", (chunk: Buffer) => {\n          if (verbose) {\n            process.stdout.write(chunk);\n          }\n        });\n\n        proc.stderr?.on(\"data\", (chunk: Buffer) => {\n          if (verbose) {\n            process.stderr.write(chunk);\n          }\n        });\n\n        const result = await proc;\n        const stdoutStr = result.stdout ?? \"\";\n        const stderrStr = result.stderr ?? \"\";\n        const combined = combineNearOutput(stdoutStr, stderrStr);\n        const txHash = extractTransactionHash(combined);\n        const hasCodeDoesNotExist = /CodeDoesNotExist/i.test(combined);\n\n        if (result.exitCode === 0 || hasCodeDoesNotExist) {\n          if (hasCodeDoesNotExist) {\n            console.log(\n              `  ${colors.green(\"✓\")} Transaction confirmed${txHash ? ` ${colors.dim(txHash)}` : \"\"}`,\n            );\n          }\n          return {\n            success: true,\n            txHash,\n            output: combined || undefined,\n          };\n        }\n\n        throw new NearTransactionError(\n          combined || `Transaction failed with code ${result.exitCode}`,\n        );\n      },\n      catch: (error) => error as Error,\n    });\n\n    return {\n      success: true,\n      txHash: output.txHash,\n      output: output.output,\n    };\n  });\n\nexport async function listPublishKeys(config: {\n  account: string;\n  contract: string;\n  network: \"mainnet\" | \"testnet\";\n}): Promise<string[]> {\n  const listResult = await execa(\n    \"near\",\n    [\"account\", \"list-keys\", config.account, \"network-config\", config.network, \"now\"],\n    { stdout: \"pipe\", stderr: \"pipe\", reject: false },\n  );\n\n  if (listResult.exitCode !== 0) {\n    throw new NearTransactionError(\n      `Failed to list account keys: ${listResult.stderr || listResult.stdout || \"unknown error\"}`,\n    );\n  }\n\n  const output = listResult.stdout ?? \"\";\n  const oldKeys: string[] = [];\n\n  for (const line of output.split(\"\\n\")) {\n    if (line.includes(config.contract) && line.includes(\"__fastdata_kv\")) {\n      const match = line.match(/ed25519:[A-Za-z0-9]+/);\n      if (match) {\n        oldKeys.push(match[0]);\n      }\n    }\n  }\n\n  return oldKeys;\n}\n\nexport async function deleteAccessKeys(\n  account: string,\n  publicKeys: string[],\n  network: \"mainnet\" | \"testnet\",\n): Promise<void> {\n  const args = [\n    \"account\",\n    \"delete-keys\",\n    account,\n    \"public-keys\",\n    publicKeys.join(\",\"),\n    \"network-config\",\n    network,\n    \"sign-with-keychain\",\n    \"send\",\n  ];\n  await runNearCommand(args);\n}\n\nexport async function addFunctionCallAccessKey(\n  config: FunctionCallAccessKeyConfig,\n): Promise<NearKeyPair> {\n  const keyPair = generateNearKeyPair();\n  const args = [\n    \"account\",\n    \"add-key\",\n    config.account,\n    \"grant-function-call-access\",\n    \"--allowance\",\n    config.allowance,\n    \"--contract-account-id\",\n    config.contract,\n    \"--function-names\",\n    config.functionNames.join(\", \"),\n    \"use-manually-provided-public-key\",\n    keyPair.publicKey,\n    \"network-config\",\n    config.network || (config.account.endsWith(\".testnet\") ? \"testnet\" : \"mainnet\"),\n    \"sign-with-keychain\",\n    \"send\",\n  ];\n\n  await runNearCommand(args);\n  return keyPair;\n}\n"],"mappings":";;;;;;AAqCA,MAAM,gBAAgB;AACtB,MAAM,kBAAkB;AAExB,IAAa,uBAAb,cAA0C,MAAM;CAC9C,AAAS,OAAO;CAChB,cAAc;EACZ,MAAM,oBAAoB;CAC5B;AACF;AAEA,IAAa,uBAAb,cAA0C,MAAM;CAC9C,AAAS,OAAO;AAClB;AAMA,SAAS,iBAAiB,OAA2B;CACnD,MAAM,aAAa,MAAM,QAAQ,MAAM,GAAG,CAAC,CAAC,QAAQ,MAAM,GAAG;CAC7D,OAAO,IAAI,WAAW,OAAO,KAAK,YAAY,QAAQ,CAAC;AACzD;AAEA,SAAS,aAAa,OAA2B;CAC/C,IAAI,MAAM,WAAW,GAAG,OAAO;CAE/B,MAAM,SAAmB,CAAC,CAAC;CAC3B,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,QAAQ;EACZ,KAAK,IAAI,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;GACtC,SAAS,OAAO,MAAO;GACvB,OAAO,KAAK,QAAQ;GACpB,QAAQ,KAAK,MAAM,QAAQ,EAAE;EAC/B;EACA,OAAO,QAAQ,GAAG;GAChB,OAAO,KAAK,QAAQ,EAAE;GACtB,QAAQ,KAAK,MAAM,QAAQ,EAAE;EAC/B;CACF;CAEA,IAAI,SAAS;CACb,KAAK,MAAM,QAAQ,OACjB,IAAI,SAAS,GAAG,UAAU,gBAAgB;MACrC;CAGP,KAAK,IAAI,IAAI,OAAO,SAAS,GAAG,KAAK,GAAG,KACtC,UAAU,gBAAgB,OAAO;CAGnC,OAAO;AACT;AAEA,SAAgB,sBAAmC;CACjD,MAAM,EAAE,WAAW,eAAe,oBAAoB,SAAS;CAC/D,MAAM,YAAY,UAAU,OAAO,EAAE,QAAQ,MAAM,CAAC;CACpD,MAAM,aAAa,WAAW,OAAO,EAAE,QAAQ,MAAM,CAAC;CAEtD,IAAI,CAAC,UAAU,KAAK,CAAC,WAAW,GAC9B,MAAM,IAAI,MAAM,iCAAiC;CAGnD,MAAM,cAAc,iBAAiB,UAAU,CAAC;CAChD,MAAM,cAAc,iBAAiB,WAAW,CAAC;CACjD,MAAM,cAAc,IAAI,WAAW,YAAY,SAAS,YAAY,MAAM;CAC1E,YAAY,IAAI,aAAa,CAAC;CAC9B,YAAY,IAAI,aAAa,YAAY,MAAM;CAE/C,OAAO;EACL,WAAW,WAAW,aAAa,WAAW;EAC9C,YAAY,WAAW,aAAa,WAAW;CACjD;AACF;AAEA,MAAM,wBAAwB,OAAO,WAAW;CAC9C,KAAK,YAAY;EACf,IAAI;GACF,MAAM,MAAM,QAAQ,CAAC,WAAW,GAAG,EAAE,OAAO,OAAO,CAAC;GACpD,OAAO;EACT,QAAQ;GACN,OAAO;EACT;CACF;CACA,6BAAa,IAAI,MAAM,0BAA0B;AACnD,CAAC;AAED,eAAe,eAAe,MAA+B;CAC3D,IAAI,CAAC,QAAQ,MAAM,OACjB,MAAM,IAAI,qBACR,mGACF;CAGF,MAAM,MAAM,QAAQ,MAAM;EAAE,OAAO;EAAW,QAAQ;EAAW,QAAQ;CAAU,CAAC;AACtF;AAEA,SAAgB,uBAAuB,YAAsC;CAC3E,IAAI,YACF,OAAO;EAAE,MAAM;EAAc;CAAW;CAG1C,IAAI,CAAC,QAAQ,MAAM,OACjB,MAAM,IAAI,qBACR,+HACF;CAGF,QAAQ,IACN,OAAO,OACL,oFACF,CACF;CACA,OAAO,EAAE,MAAM,sBAAsB;AACvC;AAEA,MAAa,gBAAgB,OAAO,IAAI,aAAa;CAEnD,IAAI,OADuB,uBACV;CAEjB,QAAQ,IAAI;CACZ,QAAQ,IAAI,sBAAsB;CAElC,QAAQ,IAAI;CACZ,QAAQ,IAAI,gEAAgE,cAAc,MAAM;CAChG,QAAQ,IAAI;CACZ,OAAO,OAAO,KAAK,IAAI,qBAAqB,CAAC;AAC/C,CAAC;AAED,SAAS,kBAAkB,QAAiB,QAAyB;CACnE,OAAO,CAAC,QAAQ,MAAM,CAAC,CAAC,QAAQ,UAAU,SAAS,MAAM,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI;AACvF;AAEA,SAAS,uBAAuB,QAAoC;CAElE,OADc,OAAO,MAAM,mCAChB,CAAC,GAAG;AACjB;AAEA,MAAa,sBACX,QACA,gBAEA,OAAO,IAAI,aAAa;CACtB,MAAM,sBAAsB,eAAe,uBAAuB,OAAO,UAAU;CACnF,MAAM,OAAO,OAAO,OAAO,UAAS,CAAE,QAAQ,QAAQ,EAAE;CACxD,MAAM,WAAW,OAAO,WAAW,QAAO,CAAE,QAAQ,QAAQ,EAAE;CAC9D,MAAM,UAAU,OAAO,YAAY,OAAO,QAAQ,SAAS,UAAU,IAAI,YAAY;CAErF,MAAM,OAAO;EACX;EACA;EACA;EACA,OAAO;EACP,OAAO;EACP;EACA,OAAO;EACP;EACA;EACA;EACA;EACA;EACA,OAAO;EACP;EACA;CACF;CAEA,IAAI,oBAAoB,SAAS,cAC/B,KAAK,KAAK,mCAAmC,oBAAoB,YAAY,MAAM;MAEnF,KAAK,KAAK,sBAAsB,MAAM;CAGxC,MAAM,SAAS,OAAO,OAAO,WAAW;EACtC,KAAK,YAAY;GACf,MAAM,mBAAmB,oBAAoB,SAAS;GACtD,MAAM,UAAU,OAAO,WAAW;GAElC,MAAM,OAAO,MAAM,QAAQ,MAAM;IAC/B,OAAO,mBAAmB,WAAW;IACrC,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,SAAS,MAAS;GACpB,CAAC;GAED,KAAK,QAAQ,GAAG,SAAS,UAAkB;IACzC,IAAI,SACF,QAAQ,OAAO,MAAM,KAAK;GAE9B,CAAC;GAED,KAAK,QAAQ,GAAG,SAAS,UAAkB;IACzC,IAAI,SACF,QAAQ,OAAO,MAAM,KAAK;GAE9B,CAAC;GAED,MAAM,SAAS,MAAM;GAGrB,MAAM,WAAW,kBAFC,OAAO,UAAU,IACjB,OAAO,UAAU,EACoB;GACvD,MAAM,SAAS,uBAAuB,QAAQ;GAC9C,MAAM,sBAAsB,oBAAoB,KAAK,QAAQ;GAE7D,IAAI,OAAO,aAAa,KAAK,qBAAqB;IAChD,IAAI,qBACF,QAAQ,IACN,KAAK,OAAO,MAAM,GAAG,EAAE,wBAAwB,SAAS,IAAI,OAAO,IAAI,MAAM,MAAM,IACrF;IAEF,OAAO;KACL,SAAS;KACT;KACA,QAAQ,YAAY;IACtB;GACF;GAEA,MAAM,IAAI,qBACR,YAAY,gCAAgC,OAAO,UACrD;EACF;EACA,QAAQ,UAAU;CACpB,CAAC;CAED,OAAO;EACL,SAAS;EACT,QAAQ,OAAO;EACf,QAAQ,OAAO;CACjB;AACF,CAAC;AAEH,eAAsB,gBAAgB,QAIhB;CACpB,MAAM,aAAa,MAAM,MACvB,QACA;EAAC;EAAW;EAAa,OAAO;EAAS;EAAkB,OAAO;EAAS;CAAK,GAChF;EAAE,QAAQ;EAAQ,QAAQ;EAAQ,QAAQ;CAAM,CAClD;CAEA,IAAI,WAAW,aAAa,GAC1B,MAAM,IAAI,qBACR,gCAAgC,WAAW,UAAU,WAAW,UAAU,iBAC5E;CAGF,MAAM,SAAS,WAAW,UAAU;CACpC,MAAM,UAAoB,CAAC;CAE3B,KAAK,MAAM,QAAQ,OAAO,MAAM,IAAI,GAClC,IAAI,KAAK,SAAS,OAAO,QAAQ,KAAK,KAAK,SAAS,eAAe,GAAG;EACpE,MAAM,QAAQ,KAAK,MAAM,sBAAsB;EAC/C,IAAI,OACF,QAAQ,KAAK,MAAM,EAAE;CAEzB;CAGF,OAAO;AACT;AAEA,eAAsB,iBACpB,SACA,YACA,SACe;CAYf,MAAM,eAAe;EAVnB;EACA;EACA;EACA;EACA,WAAW,KAAK,GAAG;EACnB;EACA;EACA;EACA;CAEsB,CAAC;AAC3B;AAEA,eAAsB,yBACpB,QACsB;CACtB,MAAM,UAAU,oBAAoB;CAoBpC,MAAM,eAAe;EAlBnB;EACA;EACA,OAAO;EACP;EACA;EACA,OAAO;EACP;EACA,OAAO;EACP;EACA,OAAO,cAAc,KAAK,IAAI;EAC9B;EACA,QAAQ;EACR;EACA,OAAO,YAAY,OAAO,QAAQ,SAAS,UAAU,IAAI,YAAY;EACrE;EACA;CAGsB,CAAC;CACzB,OAAO;AACT"}
+{"version":3,"file":"near-cli.mjs","names":[],"sources":["../src/near-cli.ts"],"sourcesContent":["import { generateKeyPairSync } from \"node:crypto\";\nimport { Data, Effect } from \"effect\";\nimport { execa } from \"execa\";\n\nexport interface NearKeyPair {\n  publicKey: string;\n  privateKey: string;\n}\n\nexport interface KeychainTransactionConfig {\n  account: string;\n  contract: string;\n  method: string;\n  args: Record<string, string>;\n  network: \"mainnet\" | \"testnet\";\n  verbose?: boolean;\n}\n\nexport interface KeychainTransactionResult {\n  success: true;\n  txHash?: string;\n}\n\nexport interface FunctionCallAccessKeyConfig {\n  account: string;\n  contract: string;\n  allowance: string;\n  functionNames: string[];\n  network?: \"mainnet\" | \"testnet\";\n  keyPair?: NearKeyPair;\n}\n\nconst NEAR_CLI_VERSION = \"0.23.5\";\nconst INSTALLER_URL = `https://github.com/near/near-cli-rs/releases/download/v${NEAR_CLI_VERSION}/near-cli-rs-installer.sh`;\nconst BASE58_ALPHABET = \"123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz\";\n\nexport class NearCliNotFoundError extends Data.TaggedError(\"NearCliNotFoundError\")<{\n  readonly detail?: string;\n}> {\n  override get message() {\n    return \"NEAR CLI not found\";\n  }\n}\n\nexport class NearTransactionError extends Data.TaggedError(\"NearTransactionError\")<{\n  readonly detail: string;\n}> {\n  constructor(detail: string) {\n    super({ detail });\n  }\n\n  override get message() {\n    return this.detail;\n  }\n}\n\nfunction base64UrlToBytes(input: string): Uint8Array {\n  const normalized = input.replace(/-/g, \"+\").replace(/_/g, \"/\");\n  return new Uint8Array(Buffer.from(normalized, \"base64\"));\n}\n\nfunction base58Encode(input: Uint8Array): string {\n  if (input.length === 0) return \"\";\n\n  const digits: number[] = [0];\n  for (const byte of input) {\n    let carry = byte;\n    for (let i = 0; i < digits.length; i++) {\n      carry += digits[i]! << 8;\n      digits[i] = carry % 58;\n      carry = Math.floor(carry / 58);\n    }\n    while (carry > 0) {\n      digits.push(carry % 58);\n      carry = Math.floor(carry / 58);\n    }\n  }\n\n  let output = \"\";\n  for (const byte of input) {\n    if (byte === 0) output += BASE58_ALPHABET[0];\n    else break;\n  }\n\n  for (let i = digits.length - 1; i >= 0; i--) {\n    output += BASE58_ALPHABET[digits[i]!]!;\n  }\n\n  return output;\n}\n\nexport function generateNearKeyPair(): NearKeyPair {\n  const { publicKey, privateKey } = generateKeyPairSync(\"ed25519\");\n  const publicJwk = publicKey.export({ format: \"jwk\" }) as JsonWebKey;\n  const privateJwk = privateKey.export({ format: \"jwk\" }) as JsonWebKey;\n\n  if (!publicJwk.x || !privateJwk.d) {\n    throw new Error(\"Failed to generate NEAR keypair\");\n  }\n\n  const publicBytes = base64UrlToBytes(publicJwk.x);\n  const privateSeed = base64UrlToBytes(privateJwk.d);\n  const secretBytes = new Uint8Array(privateSeed.length + publicBytes.length);\n  secretBytes.set(privateSeed, 0);\n  secretBytes.set(publicBytes, privateSeed.length);\n\n  return {\n    publicKey: `ed25519:${base58Encode(publicBytes)}`,\n    privateKey: `ed25519:${base58Encode(secretBytes)}`,\n  };\n}\n\nexport async function isNearCliInstalled(): Promise<boolean> {\n  try {\n    await execa(\"near\", [\"--version\"], { stdio: \"pipe\" });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nfunction combineNearOutput(stdout?: string, stderr?: string): string {\n  return [stdout, stderr].filter((value) => value && value.trim().length > 0).join(\"\\n\");\n}\n\nfunction extractTransactionHash(output: string): string | undefined {\n  const match = output.match(/Transaction ID:\\s*([A-Za-z0-9]+)/i);\n  return match?.[1];\n}\n\nexport async function executeKeychainTransaction(\n  config: KeychainTransactionConfig,\n): Promise<KeychainTransactionResult> {\n  if (!process.stdin.isTTY) {\n    throw new NearTransactionError(\n      \"No TTY available for keychain signing. Set NEAR_PRIVATE_KEY environment variable to sign locally.\",\n    );\n  }\n\n  const gas = \"300Tgas\";\n  const deposit = \"0NEAR\";\n  const argsBase64 = Buffer.from(JSON.stringify(config.args)).toString(\"base64\");\n\n  const args = [\n    \"contract\",\n    \"call-function\",\n    \"as-transaction\",\n    config.contract,\n    config.method,\n    \"base64-args\",\n    argsBase64,\n    \"prepaid-gas\",\n    gas,\n    \"attached-deposit\",\n    deposit,\n    \"sign-as\",\n    config.account,\n    \"network-config\",\n    config.network,\n    \"sign-with-keychain\",\n    \"send\",\n  ];\n\n  const result = await execa(\"near\", args, {\n    stdin: \"inherit\",\n    stdout: \"pipe\",\n    stderr: \"pipe\",\n    reject: false,\n    timeout: 5 * 60 * 1000,\n  });\n\n  const combined = combineNearOutput(result.stdout, result.stderr);\n  const txHash = extractTransactionHash(combined);\n  const hasCodeDoesNotExist = /CodeDoesNotExist/i.test(combined);\n\n  if (result.exitCode === 0 || hasCodeDoesNotExist) {\n    return { success: true, txHash };\n  }\n\n  throw new NearTransactionError(combined || `Transaction failed with code ${result.exitCode}`);\n}\n\nasync function runNearCommand(args: string[]): Promise<void> {\n  if (!process.stdin.isTTY) {\n    throw new NearTransactionError(\n      \"No TTY available for keychain signing. Set NEAR_PRIVATE_KEY environment variable to sign locally.\",\n    );\n  }\n\n  await execa(\"near\", args, { stdin: \"inherit\", stdout: \"inherit\", stderr: \"inherit\" });\n}\n\nexport const ensureNearCli = Effect.gen(function* () {\n  const isInstalled = yield* Effect.promise(() => isNearCliInstalled());\n  if (isInstalled) return;\n\n  yield* Effect.log(\"\");\n  yield* Effect.log(\"  NEAR CLI not found\");\n  yield* Effect.log(\"\");\n  yield* Effect.log(\n    `  To install manually: curl --proto '=https' --tlsv1.2 -LsSf ${INSTALLER_URL} | sh`,\n  );\n  yield* Effect.log(\"\");\n  return yield* new NearCliNotFoundError({});\n});\n\nexport async function listPublishKeys(config: {\n  account: string;\n  contract: string;\n  network: \"mainnet\" | \"testnet\";\n}): Promise<string[]> {\n  const listResult = await execa(\n    \"near\",\n    [\"account\", \"list-keys\", config.account, \"network-config\", config.network, \"now\"],\n    { stdout: \"pipe\", stderr: \"pipe\", reject: false },\n  );\n\n  if (listResult.exitCode !== 0) {\n    throw new NearTransactionError(\n      `Failed to list account keys: ${listResult.stderr || listResult.stdout || \"unknown error\"}`,\n    );\n  }\n\n  const output = listResult.stdout ?? \"\";\n  const oldKeys: string[] = [];\n\n  for (const line of output.split(\"\\n\")) {\n    if (line.includes(config.contract) && line.includes(\"__fastdata_kv\")) {\n      const match = line.match(/ed25519:[A-Za-z0-9]+/);\n      if (match) {\n        oldKeys.push(match[0]);\n      }\n    }\n  }\n\n  return oldKeys;\n}\n\nexport async function deleteAccessKeys(\n  account: string,\n  publicKeys: string[],\n  network: \"mainnet\" | \"testnet\",\n): Promise<void> {\n  const args = [\n    \"account\",\n    \"delete-keys\",\n    account,\n    \"public-keys\",\n    publicKeys.join(\",\"),\n    \"network-config\",\n    network,\n    \"sign-with-keychain\",\n    \"send\",\n  ];\n  await runNearCommand(args);\n}\n\nexport async function addFunctionCallAccessKey(\n  config: FunctionCallAccessKeyConfig,\n): Promise<NearKeyPair> {\n  const keyPair = config.keyPair ?? generateNearKeyPair();\n  const args = [\n    \"account\",\n    \"add-key\",\n    config.account,\n    \"grant-function-call-access\",\n    \"--allowance\",\n    config.allowance,\n    \"--contract-account-id\",\n    config.contract,\n    \"--function-names\",\n    config.functionNames.join(\", \"),\n    \"use-manually-provided-public-key\",\n    keyPair.publicKey,\n    \"network-config\",\n    config.network || (config.account.endsWith(\".testnet\") ? \"testnet\" : \"mainnet\"),\n    \"sign-with-keychain\",\n    \"send\",\n  ];\n\n  await runNearCommand(args);\n  return keyPair;\n}\n"],"mappings":";;;;;AAiCA,MAAM,gBAAgB;AACtB,MAAM,kBAAkB;AAExB,IAAa,uBAAb,cAA0C,KAAK,YAAY,sBAAsB,CAAC,CAE/E;CACD,IAAa,UAAU;EACrB,OAAO;CACT;AACF;AAEA,IAAa,uBAAb,cAA0C,KAAK,YAAY,sBAAsB,CAAC,CAE/E;CACD,YAAY,QAAgB;EAC1B,MAAM,EAAE,OAAO,CAAC;CAClB;CAEA,IAAa,UAAU;EACrB,OAAO,KAAK;CACd;AACF;AAEA,SAAS,iBAAiB,OAA2B;CACnD,MAAM,aAAa,MAAM,QAAQ,MAAM,GAAG,CAAC,CAAC,QAAQ,MAAM,GAAG;CAC7D,OAAO,IAAI,WAAW,OAAO,KAAK,YAAY,QAAQ,CAAC;AACzD;AAEA,SAAS,aAAa,OAA2B;CAC/C,IAAI,MAAM,WAAW,GAAG,OAAO;CAE/B,MAAM,SAAmB,CAAC,CAAC;CAC3B,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,QAAQ;EACZ,KAAK,IAAI,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;GACtC,SAAS,OAAO,MAAO;GACvB,OAAO,KAAK,QAAQ;GACpB,QAAQ,KAAK,MAAM,QAAQ,EAAE;EAC/B;EACA,OAAO,QAAQ,GAAG;GAChB,OAAO,KAAK,QAAQ,EAAE;GACtB,QAAQ,KAAK,MAAM,QAAQ,EAAE;EAC/B;CACF;CAEA,IAAI,SAAS;CACb,KAAK,MAAM,QAAQ,OACjB,IAAI,SAAS,GAAG,UAAU,gBAAgB;MACrC;CAGP,KAAK,IAAI,IAAI,OAAO,SAAS,GAAG,KAAK,GAAG,KACtC,UAAU,gBAAgB,OAAO;CAGnC,OAAO;AACT;AAEA,SAAgB,sBAAmC;CACjD,MAAM,EAAE,WAAW,eAAe,oBAAoB,SAAS;CAC/D,MAAM,YAAY,UAAU,OAAO,EAAE,QAAQ,MAAM,CAAC;CACpD,MAAM,aAAa,WAAW,OAAO,EAAE,QAAQ,MAAM,CAAC;CAEtD,IAAI,CAAC,UAAU,KAAK,CAAC,WAAW,GAC9B,MAAM,IAAI,MAAM,iCAAiC;CAGnD,MAAM,cAAc,iBAAiB,UAAU,CAAC;CAChD,MAAM,cAAc,iBAAiB,WAAW,CAAC;CACjD,MAAM,cAAc,IAAI,WAAW,YAAY,SAAS,YAAY,MAAM;CAC1E,YAAY,IAAI,aAAa,CAAC;CAC9B,YAAY,IAAI,aAAa,YAAY,MAAM;CAE/C,OAAO;EACL,WAAW,WAAW,aAAa,WAAW;EAC9C,YAAY,WAAW,aAAa,WAAW;CACjD;AACF;AAEA,eAAsB,qBAAuC;CAC3D,IAAI;EACF,MAAM,MAAM,QAAQ,CAAC,WAAW,GAAG,EAAE,OAAO,OAAO,CAAC;EACpD,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,kBAAkB,QAAiB,QAAyB;CACnE,OAAO,CAAC,QAAQ,MAAM,CAAC,CAAC,QAAQ,UAAU,SAAS,MAAM,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI;AACvF;AAEA,SAAS,uBAAuB,QAAoC;CAElE,OADc,OAAO,MAAM,mCAChB,CAAC,GAAG;AACjB;AAEA,eAAsB,2BACpB,QACoC;CACpC,IAAI,CAAC,QAAQ,MAAM,OACjB,MAAM,IAAI,qBACR,mGACF;CAGF,MAAM,MAAM;CACZ,MAAM,UAAU;CAChB,MAAM,aAAa,OAAO,KAAK,KAAK,UAAU,OAAO,IAAI,CAAC,CAAC,CAAC,SAAS,QAAQ;CAE7E,MAAM,OAAO;EACX;EACA;EACA;EACA,OAAO;EACP,OAAO;EACP;EACA;EACA;EACA;EACA;EACA;EACA;EACA,OAAO;EACP;EACA,OAAO;EACP;EACA;CACF;CAEA,MAAM,SAAS,MAAM,MAAM,QAAQ,MAAM;EACvC,OAAO;EACP,QAAQ;EACR,QAAQ;EACR,QAAQ;EACR,SAAS;CACX,CAAC;CAED,MAAM,WAAW,kBAAkB,OAAO,QAAQ,OAAO,MAAM;CAC/D,MAAM,SAAS,uBAAuB,QAAQ;CAC9C,MAAM,sBAAsB,oBAAoB,KAAK,QAAQ;CAE7D,IAAI,OAAO,aAAa,KAAK,qBAC3B,OAAO;EAAE,SAAS;EAAM;CAAO;CAGjC,MAAM,IAAI,qBAAqB,YAAY,gCAAgC,OAAO,UAAU;AAC9F;AAEA,eAAe,eAAe,MAA+B;CAC3D,IAAI,CAAC,QAAQ,MAAM,OACjB,MAAM,IAAI,qBACR,mGACF;CAGF,MAAM,MAAM,QAAQ,MAAM;EAAE,OAAO;EAAW,QAAQ;EAAW,QAAQ;CAAU,CAAC;AACtF;AAEA,MAAa,gBAAgB,OAAO,IAAI,aAAa;CAEnD,IAAI,OADuB,OAAO,cAAc,mBAAmB,CAAC,GACnD;CAEjB,OAAO,OAAO,IAAI,EAAE;CACpB,OAAO,OAAO,IAAI,sBAAsB;CACxC,OAAO,OAAO,IAAI,EAAE;CACpB,OAAO,OAAO,IACZ,gEAAgE,cAAc,MAChF;CACA,OAAO,OAAO,IAAI,EAAE;CACpB,OAAO,OAAO,IAAI,qBAAqB,CAAC,CAAC;AAC3C,CAAC;AAED,eAAsB,gBAAgB,QAIhB;CACpB,MAAM,aAAa,MAAM,MACvB,QACA;EAAC;EAAW;EAAa,OAAO;EAAS;EAAkB,OAAO;EAAS;CAAK,GAChF;EAAE,QAAQ;EAAQ,QAAQ;EAAQ,QAAQ;CAAM,CAClD;CAEA,IAAI,WAAW,aAAa,GAC1B,MAAM,IAAI,qBACR,gCAAgC,WAAW,UAAU,WAAW,UAAU,iBAC5E;CAGF,MAAM,SAAS,WAAW,UAAU;CACpC,MAAM,UAAoB,CAAC;CAE3B,KAAK,MAAM,QAAQ,OAAO,MAAM,IAAI,GAClC,IAAI,KAAK,SAAS,OAAO,QAAQ,KAAK,KAAK,SAAS,eAAe,GAAG;EACpE,MAAM,QAAQ,KAAK,MAAM,sBAAsB;EAC/C,IAAI,OACF,QAAQ,KAAK,MAAM,EAAE;CAEzB;CAGF,OAAO;AACT;AAEA,eAAsB,iBACpB,SACA,YACA,SACe;CAYf,MAAM,eAAe;EAVnB;EACA;EACA;EACA;EACA,WAAW,KAAK,GAAG;EACnB;EACA;EACA;EACA;CAEsB,CAAC;AAC3B;AAEA,eAAsB,yBACpB,QACsB;CACtB,MAAM,UAAU,OAAO,WAAW,oBAAoB;CAoBtD,MAAM,eAAe;EAlBnB;EACA;EACA,OAAO;EACP;EACA;EACA,OAAO;EACP;EACA,OAAO;EACP;EACA,OAAO,cAAc,KAAK,IAAI;EAC9B;EACA,QAAQ;EACR;EACA,OAAO,YAAY,OAAO,QAAQ,SAAS,UAAU,IAAI,YAAY;EACrE;EACA;CAGsB,CAAC;CACzB,OAAO;AACT"}

package/dist/near-signer.cjs

@@ -0,0 +1,73 @@
+const require_near_cli = require('./near-cli.cjs');
+let near_kit = require("near-kit");
+let near_kit_keys_file = require("near-kit/keys/file");
+
+//#region src/near-signer.ts
+function assertPrivateKey(key) {
+	if (!(0, near_kit.isPrivateKey)(key)) throw new require_near_cli.NearTransactionError(`Invalid private key format: must start with "ed25519:" or "secp256k1:" (got a ${key.length}-character value).`);
+	return key;
+}
+async function resolveSigningKey(opts) {
+	const explicitKey = opts.privateKey || process.env.NEAR_PRIVATE_KEY || process.env.BOS_NEAR_PRIVATE_KEY;
+	if (explicitKey) return {
+		source: "provided",
+		privateKey: explicitKey
+	};
+	const keyPair = await new near_kit_keys_file.FileKeyStore("~/.near-credentials", opts.network).get(opts.account);
+	if (keyPair?.secretKey) return {
+		source: "credentials-file",
+		privateKey: keyPair.secretKey
+	};
+	throw new require_near_cli.NearTransactionError("No signing key available");
+}
+async function resolveSigningStrategy(opts) {
+	try {
+		const resolved = await resolveSigningKey(opts);
+		return {
+			strategy: "near-kit",
+			privateKey: resolved.privateKey,
+			source: resolved.source
+		};
+	} catch {}
+	if (process.stdin.isTTY && await require_near_cli.isNearCliInstalled()) return { strategy: "near-cli-keychain" };
+	throw new require_near_cli.NearTransactionError(`No signing key available for ${opts.account} on ${opts.network}. Set NEAR_PRIVATE_KEY (or BOS_NEAR_PRIVATE_KEY), store credentials at ~/.near-credentials/${opts.network}/${opts.account}.json, or sign with the near-cli-rs keychain (install it, then retry from an interactive terminal). Generate a publish key with: bos key generate`);
+}
+function describeSigningStrategy(strategy) {
+	if (strategy.strategy === "near-cli-keychain") return "near-cli-rs keychain";
+	return strategy.source === "provided" ? "the environment or --private-key flag" : `~/.near-credentials`;
+}
+async function submitWithNearKit(tx, privateKey) {
+	return {
+		success: true,
+		txHash: (await new near_kit.Near({
+			network: tx.network,
+			defaultSignerId: tx.account,
+			privateKey: assertPrivateKey(privateKey)
+		}).transaction(tx.account).functionCall(tx.contract, tx.method, tx.args, {
+			gas: "300 Tgas",
+			attachedDeposit: "0 yocto"
+		}).send({ waitUntil: "NONE" }))?.transaction?.hash,
+		signedWith: "env"
+	};
+}
+async function submitRegistryWrite(tx, strategy) {
+	const resolved = strategy ?? await resolveSigningStrategy(tx);
+	if (resolved.strategy === "near-cli-keychain") return {
+		...await require_near_cli.executeKeychainTransaction({
+			account: tx.account,
+			contract: tx.contract,
+			method: tx.method,
+			args: tx.args,
+			network: tx.network
+		}),
+		signedWith: "near-cli-keychain"
+	};
+	return submitWithNearKit(tx, resolved.privateKey);
+}
+
+//#endregion
+exports.describeSigningStrategy = describeSigningStrategy;
+exports.resolveSigningKey = resolveSigningKey;
+exports.resolveSigningStrategy = resolveSigningStrategy;
+exports.submitRegistryWrite = submitRegistryWrite;
+//# sourceMappingURL=near-signer.cjs.map

package/dist/near-signer.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"near-signer.cjs","names":["isPrivateKey","NearTransactionError","FileKeyStore","isNearCliInstalled","Near","executeKeychainTransaction"],"sources":["../src/near-signer.ts"],"sourcesContent":["import { isPrivateKey, Near, type PrivateKey } from \"near-kit\";\nimport { FileKeyStore } from \"near-kit/keys/file\";\n\nimport type { NetworkId } from \"./fastkv\";\nimport { executeKeychainTransaction, isNearCliInstalled, NearTransactionError } from \"./near-cli\";\n\nexport type SigningKeySource = \"provided\" | \"credentials-file\";\n\nexport interface ResolvedSigningKey {\n  source: SigningKeySource;\n  privateKey: string;\n}\n\nexport interface RegistryWriteRequest {\n  account: string;\n  contract: string;\n  method: string;\n  args: Record<string, string>;\n  network: NetworkId;\n  privateKey?: string;\n}\n\nexport type SigningStrategy =\n  | { strategy: \"near-kit\"; privateKey: string; source: SigningKeySource }\n  | { strategy: \"near-cli-keychain\" };\n\nexport interface NearTransactionResult {\n  success: true;\n  txHash?: string;\n  signedWith: \"env\" | \"credentials-file\" | \"near-cli-keychain\";\n}\n\nfunction assertPrivateKey(key: string): PrivateKey {\n  if (!isPrivateKey(key)) {\n    throw new NearTransactionError(\n      `Invalid private key format: must start with \"ed25519:\" or \"secp256k1:\" (got a ${key.length}-character value).`,\n    );\n  }\n  return key as PrivateKey;\n}\n\nexport async function resolveSigningKey(opts: {\n  privateKey?: string;\n  account: string;\n  network: NetworkId;\n}): Promise<ResolvedSigningKey> {\n  const explicitKey =\n    opts.privateKey || process.env.NEAR_PRIVATE_KEY || process.env.BOS_NEAR_PRIVATE_KEY;\n  if (explicitKey) {\n    return { source: \"provided\", privateKey: explicitKey };\n  }\n\n  const keyStore = new FileKeyStore(\"~/.near-credentials\", opts.network);\n  const keyPair = await keyStore.get(opts.account);\n  if (keyPair?.secretKey) {\n    return { source: \"credentials-file\", privateKey: keyPair.secretKey };\n  }\n\n  throw new NearTransactionError(\"No signing key available\");\n}\n\nexport async function resolveSigningStrategy(opts: {\n  privateKey?: string;\n  account: string;\n  network: NetworkId;\n}): Promise<SigningStrategy> {\n  try {\n    const resolved = await resolveSigningKey(opts);\n    return { strategy: \"near-kit\", privateKey: resolved.privateKey, source: resolved.source };\n  } catch {\n    // fall through to the near-cli-rs keychain\n  }\n\n  if (process.stdin.isTTY && (await isNearCliInstalled())) {\n    return { strategy: \"near-cli-keychain\" };\n  }\n\n  throw new NearTransactionError(\n    `No signing key available for ${opts.account} on ${opts.network}. ` +\n      `Set NEAR_PRIVATE_KEY (or BOS_NEAR_PRIVATE_KEY), store credentials at ` +\n      `~/.near-credentials/${opts.network}/${opts.account}.json, or sign with the ` +\n      `near-cli-rs keychain (install it, then retry from an interactive terminal). ` +\n      `Generate a publish key with: bos key generate`,\n  );\n}\n\nexport function describeSigningStrategy(strategy: SigningStrategy): string {\n  if (strategy.strategy === \"near-cli-keychain\") {\n    return \"near-cli-rs keychain\";\n  }\n  return strategy.source === \"provided\"\n    ? \"the environment or --private-key flag\"\n    : `~/.near-credentials`;\n}\n\nasync function submitWithNearKit(\n  tx: RegistryWriteRequest,\n  privateKey: string,\n): Promise<NearTransactionResult> {\n  const near = new Near({\n    network: tx.network,\n    defaultSignerId: tx.account,\n    privateKey: assertPrivateKey(privateKey),\n  });\n\n  const outcome = await near\n    .transaction(tx.account)\n    .functionCall(tx.contract, tx.method, tx.args, {\n      gas: \"300 Tgas\",\n      attachedDeposit: \"0 yocto\",\n    })\n    .send({ waitUntil: \"NONE\" });\n\n  return { success: true, txHash: outcome?.transaction?.hash, signedWith: \"env\" };\n}\n\nexport async function submitRegistryWrite(\n  tx: RegistryWriteRequest,\n  strategy?: SigningStrategy,\n): Promise<NearTransactionResult> {\n  const resolved = strategy ?? (await resolveSigningStrategy(tx));\n\n  if (resolved.strategy === \"near-cli-keychain\") {\n    const result = await executeKeychainTransaction({\n      account: tx.account,\n      contract: tx.contract,\n      method: tx.method,\n      args: tx.args,\n      network: tx.network,\n    });\n    return { ...result, signedWith: \"near-cli-keychain\" };\n  }\n\n  return submitWithNearKit(tx, resolved.privateKey);\n}\n"],"mappings":";;;;;AAgCA,SAAS,iBAAiB,KAAyB;CACjD,IAAI,KAACA,uBAAa,GAAG,GACnB,MAAM,IAAIC,sCACR,iFAAiF,IAAI,OAAO,mBAC9F;CAEF,OAAO;AACT;AAEA,eAAsB,kBAAkB,MAIR;CAC9B,MAAM,cACJ,KAAK,cAAc,QAAQ,IAAI,oBAAoB,QAAQ,IAAI;CACjE,IAAI,aACF,OAAO;EAAE,QAAQ;EAAY,YAAY;CAAY;CAIvD,MAAM,UAAU,MAAM,IADDC,gCAAa,uBAAuB,KAAK,OACjC,CAAC,CAAC,IAAI,KAAK,OAAO;CAC/C,IAAI,SAAS,WACX,OAAO;EAAE,QAAQ;EAAoB,YAAY,QAAQ;CAAU;CAGrE,MAAM,IAAID,sCAAqB,0BAA0B;AAC3D;AAEA,eAAsB,uBAAuB,MAIhB;CAC3B,IAAI;EACF,MAAM,WAAW,MAAM,kBAAkB,IAAI;EAC7C,OAAO;GAAE,UAAU;GAAY,YAAY,SAAS;GAAY,QAAQ,SAAS;EAAO;CAC1F,QAAQ,CAER;CAEA,IAAI,QAAQ,MAAM,SAAU,MAAME,oCAAmB,GACnD,OAAO,EAAE,UAAU,oBAAoB;CAGzC,MAAM,IAAIF,sCACR,gCAAgC,KAAK,QAAQ,MAAM,KAAK,QAAQ,6FAEvC,KAAK,QAAQ,GAAG,KAAK,QAAQ,kJAGxD;AACF;AAEA,SAAgB,wBAAwB,UAAmC;CACzE,IAAI,SAAS,aAAa,qBACxB,OAAO;CAET,OAAO,SAAS,WAAW,aACvB,0CACA;AACN;AAEA,eAAe,kBACb,IACA,YACgC;CAehC,OAAO;EAAE,SAAS;EAAM,SAAQ,MARV,IANLG,cAAK;GACpB,SAAS,GAAG;GACZ,iBAAiB,GAAG;GACpB,YAAY,iBAAiB,UAAU;EACzC,CAEyB,CAAC,CACvB,YAAY,GAAG,OAAO,CAAC,CACvB,aAAa,GAAG,UAAU,GAAG,QAAQ,GAAG,MAAM;GAC7C,KAAK;GACL,iBAAiB;EACnB,CAAC,CAAC,CACD,KAAK,EAAE,WAAW,OAAO,CAAC,EAEU,EAAE,aAAa;EAAM,YAAY;CAAM;AAChF;AAEA,eAAsB,oBACpB,IACA,UACgC;CAChC,MAAM,WAAW,YAAa,MAAM,uBAAuB,EAAE;CAE7D,IAAI,SAAS,aAAa,qBAQxB,OAAO;EAAE,GAAG,MAPSC,4CAA2B;GAC9C,SAAS,GAAG;GACZ,UAAU,GAAG;GACb,QAAQ,GAAG;GACX,MAAM,GAAG;GACT,SAAS,GAAG;EACd,CAAC;EACmB,YAAY;CAAoB;CAGtD,OAAO,kBAAkB,IAAI,SAAS,UAAU;AAClD"}

package/dist/near-signer.mjs

@@ -0,0 +1,70 @@
+import { NearTransactionError, executeKeychainTransaction, isNearCliInstalled } from "./near-cli.mjs";
+import { Near, isPrivateKey } from "near-kit";
+import { FileKeyStore } from "near-kit/keys/file";
+
+//#region src/near-signer.ts
+function assertPrivateKey(key) {
+	if (!isPrivateKey(key)) throw new NearTransactionError(`Invalid private key format: must start with "ed25519:" or "secp256k1:" (got a ${key.length}-character value).`);
+	return key;
+}
+async function resolveSigningKey(opts) {
+	const explicitKey = opts.privateKey || process.env.NEAR_PRIVATE_KEY || process.env.BOS_NEAR_PRIVATE_KEY;
+	if (explicitKey) return {
+		source: "provided",
+		privateKey: explicitKey
+	};
+	const keyPair = await new FileKeyStore("~/.near-credentials", opts.network).get(opts.account);
+	if (keyPair?.secretKey) return {
+		source: "credentials-file",
+		privateKey: keyPair.secretKey
+	};
+	throw new NearTransactionError("No signing key available");
+}
+async function resolveSigningStrategy(opts) {
+	try {
+		const resolved = await resolveSigningKey(opts);
+		return {
+			strategy: "near-kit",
+			privateKey: resolved.privateKey,
+			source: resolved.source
+		};
+	} catch {}
+	if (process.stdin.isTTY && await isNearCliInstalled()) return { strategy: "near-cli-keychain" };
+	throw new NearTransactionError(`No signing key available for ${opts.account} on ${opts.network}. Set NEAR_PRIVATE_KEY (or BOS_NEAR_PRIVATE_KEY), store credentials at ~/.near-credentials/${opts.network}/${opts.account}.json, or sign with the near-cli-rs keychain (install it, then retry from an interactive terminal). Generate a publish key with: bos key generate`);
+}
+function describeSigningStrategy(strategy) {
+	if (strategy.strategy === "near-cli-keychain") return "near-cli-rs keychain";
+	return strategy.source === "provided" ? "the environment or --private-key flag" : `~/.near-credentials`;
+}
+async function submitWithNearKit(tx, privateKey) {
+	return {
+		success: true,
+		txHash: (await new Near({
+			network: tx.network,
+			defaultSignerId: tx.account,
+			privateKey: assertPrivateKey(privateKey)
+		}).transaction(tx.account).functionCall(tx.contract, tx.method, tx.args, {
+			gas: "300 Tgas",
+			attachedDeposit: "0 yocto"
+		}).send({ waitUntil: "NONE" }))?.transaction?.hash,
+		signedWith: "env"
+	};
+}
+async function submitRegistryWrite(tx, strategy) {
+	const resolved = strategy ?? await resolveSigningStrategy(tx);
+	if (resolved.strategy === "near-cli-keychain") return {
+		...await executeKeychainTransaction({
+			account: tx.account,
+			contract: tx.contract,
+			method: tx.method,
+			args: tx.args,
+			network: tx.network
+		}),
+		signedWith: "near-cli-keychain"
+	};
+	return submitWithNearKit(tx, resolved.privateKey);
+}
+
+//#endregion
+export { describeSigningStrategy, resolveSigningKey, resolveSigningStrategy, submitRegistryWrite };
+//# sourceMappingURL=near-signer.mjs.map

package/dist/near-signer.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"near-signer.mjs","names":[],"sources":["../src/near-signer.ts"],"sourcesContent":["import { isPrivateKey, Near, type PrivateKey } from \"near-kit\";\nimport { FileKeyStore } from \"near-kit/keys/file\";\n\nimport type { NetworkId } from \"./fastkv\";\nimport { executeKeychainTransaction, isNearCliInstalled, NearTransactionError } from \"./near-cli\";\n\nexport type SigningKeySource = \"provided\" | \"credentials-file\";\n\nexport interface ResolvedSigningKey {\n  source: SigningKeySource;\n  privateKey: string;\n}\n\nexport interface RegistryWriteRequest {\n  account: string;\n  contract: string;\n  method: string;\n  args: Record<string, string>;\n  network: NetworkId;\n  privateKey?: string;\n}\n\nexport type SigningStrategy =\n  | { strategy: \"near-kit\"; privateKey: string; source: SigningKeySource }\n  | { strategy: \"near-cli-keychain\" };\n\nexport interface NearTransactionResult {\n  success: true;\n  txHash?: string;\n  signedWith: \"env\" | \"credentials-file\" | \"near-cli-keychain\";\n}\n\nfunction assertPrivateKey(key: string): PrivateKey {\n  if (!isPrivateKey(key)) {\n    throw new NearTransactionError(\n      `Invalid private key format: must start with \"ed25519:\" or \"secp256k1:\" (got a ${key.length}-character value).`,\n    );\n  }\n  return key as PrivateKey;\n}\n\nexport async function resolveSigningKey(opts: {\n  privateKey?: string;\n  account: string;\n  network: NetworkId;\n}): Promise<ResolvedSigningKey> {\n  const explicitKey =\n    opts.privateKey || process.env.NEAR_PRIVATE_KEY || process.env.BOS_NEAR_PRIVATE_KEY;\n  if (explicitKey) {\n    return { source: \"provided\", privateKey: explicitKey };\n  }\n\n  const keyStore = new FileKeyStore(\"~/.near-credentials\", opts.network);\n  const keyPair = await keyStore.get(opts.account);\n  if (keyPair?.secretKey) {\n    return { source: \"credentials-file\", privateKey: keyPair.secretKey };\n  }\n\n  throw new NearTransactionError(\"No signing key available\");\n}\n\nexport async function resolveSigningStrategy(opts: {\n  privateKey?: string;\n  account: string;\n  network: NetworkId;\n}): Promise<SigningStrategy> {\n  try {\n    const resolved = await resolveSigningKey(opts);\n    return { strategy: \"near-kit\", privateKey: resolved.privateKey, source: resolved.source };\n  } catch {\n    // fall through to the near-cli-rs keychain\n  }\n\n  if (process.stdin.isTTY && (await isNearCliInstalled())) {\n    return { strategy: \"near-cli-keychain\" };\n  }\n\n  throw new NearTransactionError(\n    `No signing key available for ${opts.account} on ${opts.network}. ` +\n      `Set NEAR_PRIVATE_KEY (or BOS_NEAR_PRIVATE_KEY), store credentials at ` +\n      `~/.near-credentials/${opts.network}/${opts.account}.json, or sign with the ` +\n      `near-cli-rs keychain (install it, then retry from an interactive terminal). ` +\n      `Generate a publish key with: bos key generate`,\n  );\n}\n\nexport function describeSigningStrategy(strategy: SigningStrategy): string {\n  if (strategy.strategy === \"near-cli-keychain\") {\n    return \"near-cli-rs keychain\";\n  }\n  return strategy.source === \"provided\"\n    ? \"the environment or --private-key flag\"\n    : `~/.near-credentials`;\n}\n\nasync function submitWithNearKit(\n  tx: RegistryWriteRequest,\n  privateKey: string,\n): Promise<NearTransactionResult> {\n  const near = new Near({\n    network: tx.network,\n    defaultSignerId: tx.account,\n    privateKey: assertPrivateKey(privateKey),\n  });\n\n  const outcome = await near\n    .transaction(tx.account)\n    .functionCall(tx.contract, tx.method, tx.args, {\n      gas: \"300 Tgas\",\n      attachedDeposit: \"0 yocto\",\n    })\n    .send({ waitUntil: \"NONE\" });\n\n  return { success: true, txHash: outcome?.transaction?.hash, signedWith: \"env\" };\n}\n\nexport async function submitRegistryWrite(\n  tx: RegistryWriteRequest,\n  strategy?: SigningStrategy,\n): Promise<NearTransactionResult> {\n  const resolved = strategy ?? (await resolveSigningStrategy(tx));\n\n  if (resolved.strategy === \"near-cli-keychain\") {\n    const result = await executeKeychainTransaction({\n      account: tx.account,\n      contract: tx.contract,\n      method: tx.method,\n      args: tx.args,\n      network: tx.network,\n    });\n    return { ...result, signedWith: \"near-cli-keychain\" };\n  }\n\n  return submitWithNearKit(tx, resolved.privateKey);\n}\n"],"mappings":";;;;;AAgCA,SAAS,iBAAiB,KAAyB;CACjD,IAAI,CAAC,aAAa,GAAG,GACnB,MAAM,IAAI,qBACR,iFAAiF,IAAI,OAAO,mBAC9F;CAEF,OAAO;AACT;AAEA,eAAsB,kBAAkB,MAIR;CAC9B,MAAM,cACJ,KAAK,cAAc,QAAQ,IAAI,oBAAoB,QAAQ,IAAI;CACjE,IAAI,aACF,OAAO;EAAE,QAAQ;EAAY,YAAY;CAAY;CAIvD,MAAM,UAAU,MAAM,IADD,aAAa,uBAAuB,KAAK,OACjC,CAAC,CAAC,IAAI,KAAK,OAAO;CAC/C,IAAI,SAAS,WACX,OAAO;EAAE,QAAQ;EAAoB,YAAY,QAAQ;CAAU;CAGrE,MAAM,IAAI,qBAAqB,0BAA0B;AAC3D;AAEA,eAAsB,uBAAuB,MAIhB;CAC3B,IAAI;EACF,MAAM,WAAW,MAAM,kBAAkB,IAAI;EAC7C,OAAO;GAAE,UAAU;GAAY,YAAY,SAAS;GAAY,QAAQ,SAAS;EAAO;CAC1F,QAAQ,CAER;CAEA,IAAI,QAAQ,MAAM,SAAU,MAAM,mBAAmB,GACnD,OAAO,EAAE,UAAU,oBAAoB;CAGzC,MAAM,IAAI,qBACR,gCAAgC,KAAK,QAAQ,MAAM,KAAK,QAAQ,6FAEvC,KAAK,QAAQ,GAAG,KAAK,QAAQ,kJAGxD;AACF;AAEA,SAAgB,wBAAwB,UAAmC;CACzE,IAAI,SAAS,aAAa,qBACxB,OAAO;CAET,OAAO,SAAS,WAAW,aACvB,0CACA;AACN;AAEA,eAAe,kBACb,IACA,YACgC;CAehC,OAAO;EAAE,SAAS;EAAM,SAAQ,MARV,IANL,KAAK;GACpB,SAAS,GAAG;GACZ,iBAAiB,GAAG;GACpB,YAAY,iBAAiB,UAAU;EACzC,CAEyB,CAAC,CACvB,YAAY,GAAG,OAAO,CAAC,CACvB,aAAa,GAAG,UAAU,GAAG,QAAQ,GAAG,MAAM;GAC7C,KAAK;GACL,iBAAiB;EACnB,CAAC,CAAC,CACD,KAAK,EAAE,WAAW,OAAO,CAAC,EAEU,EAAE,aAAa;EAAM,YAAY;CAAM;AAChF;AAEA,eAAsB,oBACpB,IACA,UACgC;CAChC,MAAM,WAAW,YAAa,MAAM,uBAAuB,EAAE;CAE7D,IAAI,SAAS,aAAa,qBAQxB,OAAO;EAAE,GAAG,MAPS,2BAA2B;GAC9C,SAAS,GAAG;GACZ,UAAU,GAAG;GACb,QAAQ,GAAG;GACX,MAAM,GAAG;GACT,SAAS,GAAG;EACd,CAAC;EACmB,YAAY;CAAoB;CAGtD,OAAO,kBAAkB,IAAI,SAAS,UAAU;AAClD"}

package/dist/network.cjs

@@ -1,4 +1,3 @@
-
 //#region src/network.ts
 function getNetworkIdForAccount(account) {
 	return account.endsWith(".testnet") ? "testnet" : "mainnet";

package/dist/network.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"network.cjs","names":[],"sources":["../src/network.ts"],"sourcesContent":["export function getNetworkIdForAccount(account: string): \"mainnet\" | \"testnet\" {\n  return account.endsWith(\".testnet\") ? \"testnet\" : \"mainnet\";\n}\n"],"mappings":";;AAAA,SAAgB,uBAAuB,SAAwC;CAC7E,OAAO,QAAQ,SAAS,UAAU,IAAI,YAAY;AACpD"}
+{"version":3,"file":"network.cjs","names":[],"sources":["../src/network.ts"],"sourcesContent":["export function getNetworkIdForAccount(account: string): \"mainnet\" | \"testnet\" {\n  return account.endsWith(\".testnet\") ? \"testnet\" : \"mainnet\";\n}\n"],"mappings":";AAAA,SAAgB,uBAAuB,SAAwC;CAC7E,OAAO,QAAQ,SAAS,UAAU,IAAI,YAAY;AACpD"}