gora8-signer 0.1.0 → 0.1.2

package/dist/cli.js

@@ -45,7 +45,22 @@ async function main() {
             break;
         }
         case "start": {
-            const policyEngine = new PolicyEngine({ fetchMandate: () => fetchMandate(agentId, apiBase) }, auditLog);
+            // The local storage key (agentId, this command's positional arg —
+            // e.g. a slugified name chosen before gora8 ever issued a real id;
+            // see cli/cmd/deploy.go's initSigner()) and the id gora8's Mandate
+            // endpoint actually looks up by (its own database cuid) are not the
+            // same value and never can be: `gora8-signer init` has to run
+            // *before* POST /v1/agents to put wallet_address in the request
+            // body, so at init time gora8's real id doesn't exist yet. Nothing
+            // in the wire protocol between gora8's API and this signer ever
+            // carries that real id either (requestAgentSignature's payload is
+            // just {operation, params}) — so without this, `start` would fetch
+            // /v1/agents/<local-slug>/mandate, always 404, and every signature
+            // would be refused forever. GORA8_AGENT_ID is the one place that
+            // real id is threaded through, set by whatever printed this
+            // command's invocation (deploy.go) once registration returns it.
+            const mandateAgentId = process.env.GORA8_AGENT_ID || agentId;
+            const policyEngine = new PolicyEngine({ fetchMandate: () => fetchMandate(mandateAgentId, apiBase) }, auditLog);
             const signer = new Signer({
                 keyStore,
                 policyEngine,

package/dist/keystore.js

@@ -27,8 +27,15 @@ export class OsKeychainStore {
     async hasKey() {
         try {
             const entry = await this.entry();
-            entry.getPassword();
-            return true;
+            // @napi-rs/keyring's getPassword() returns null for a missing entry
+            // rather than throwing — treating "didn't throw" as "key exists"
+            // (the previous implementation here) is a false positive on every
+            // backend that behaves this way: hasKey() would report true for an
+            // agent that has never had a key generated, and the subsequent
+            // withPrivateKey()/address() call would then try to derive an
+            // address from null and crash. A missing entry is only genuinely
+            // "no key" when the returned password is a non-empty string.
+            return typeof entry.getPassword() === "string";
         }
         catch {
             return false;
@@ -47,6 +54,9 @@ export class OsKeychainStore {
     async withPrivateKey(fn) {
         const entry = await this.entry();
         const privateKey = entry.getPassword();
+        if (typeof privateKey !== "string") {
+            throw new Error(`No key found for agent "${this.account}" in the OS keychain — run \`gora8-signer init\` first.`);
+        }
         return fn(privateKey);
     }
     async address() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gora8-signer",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Local, self-custodied key signing for gora8 agents — the key is generated and used wherever your agent runs, never inside gora8's own infrastructure. See SELF_CUSTODY_ARCHITECTURE.md in the gora8 monorepo for the full design.",
   "license": "MIT",
   "type": "module",