nodpay 0.2.2 → 0.2.3

package/SKILL.md

@@ -39,12 +39,19 @@ The wallet is a **Safe 2-of-3 multisig**. You hold 1 key, the user holds 2 (pass
 ### 1. Generate an agent key
 
 ```bash
-node -e "const w=require('ethers').Wallet.createRandom();console.log('Address:',w.address,'\nKey:',w.privateKey)"
+npx nodpay keygen --env-file .env
 ```
 
-Store the private key as `NODPAY_AGENT_KEY` in your environment. The address is your public agent identity.
+This outputs your agent's **public address** (stdout). The private key is written directly to `.env` — it never appears in your output or context.
 
-**⚠️ Storing the env var may trigger a restart.** Complete all config/env changes and wait for the restart to finish BEFORE sending any message to the user. Do not send messages and update config in parallel — the restart will truncate your message.
+If `NODPAY_AGENT_KEY` already exists in the file, it reuses the existing key and prints the address.
+
+**After keygen**, trigger a gateway restart so the env var takes effect. Send your wallet link message to the user BEFORE restarting — the restart will interrupt your session.
+
+Recommended sequence:
+1. Run `npx nodpay keygen --env-file .env` → note the address
+2. Send the wallet link to your user (step 2 below)
+3. Trigger gateway restart
 
 ### 2. Send the user a wallet link
 

package/bin/nodpay.mjs

@@ -7,6 +7,10 @@ if (command === 'propose') {
   const scriptPath = new URL('../scripts/propose.mjs', import.meta.url).pathname;
   process.argv = [process.argv[0], scriptPath, ...process.argv.slice(3)];
   await import(scriptPath);
+} else if (command === 'keygen') {
+  const scriptPath = new URL('../scripts/keygen.mjs', import.meta.url).pathname;
+  process.argv = [process.argv[0], scriptPath, ...process.argv.slice(3)];
+  await import(scriptPath);
 } else if (command === 'version' || command === '--version' || command === '-v') {
   const { readFileSync } = await import('fs');
   const pkg = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8'));
@@ -15,9 +19,11 @@ if (command === 'propose') {
   console.log(`Usage: nodpay <command>
 
 Commands:
+  keygen    Generate (or reuse) agent keypair
   propose   Propose a transaction for human approval
 
-Example:
+Examples:
+  nodpay keygen --env-file .env
   nodpay propose --safe 0x... --to 0x... --value-eth 0.01 --signer-type passkey
 
 Docs: https://nodpay.ai/skill.md`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nodpay",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "description": "NodPay CLI — propose on-chain payments from agent-human shared wallets",
   "type": "module",
   "bin": {

package/scripts/keygen.mjs

@@ -0,0 +1,61 @@
+#!/usr/bin/env node
+/**
+ * Generate (or reuse) an agent keypair.
+ *
+ * - If NODPAY_AGENT_KEY already exists in --env-file, derives and prints the address.
+ * - Otherwise generates a new keypair, appends to --env-file, prints the address.
+ *
+ * The private key NEVER appears in stdout — only the public address.
+ *
+ * Usage:
+ *   npx nodpay keygen --env-file .env
+ */
+
+import { Wallet } from 'ethers';
+import { readFileSync, appendFileSync, existsSync } from 'fs';
+import { resolve } from 'path';
+
+const args = process.argv.slice(2);
+const envFileIdx = args.indexOf('--env-file');
+const envFile = envFileIdx !== -1 ? resolve(args[envFileIdx + 1]) : null;
+
+if (!envFile) {
+  console.error('Usage: npx nodpay keygen --env-file <path>');
+  process.exit(1);
+}
+
+const ENV_VAR = 'NODPAY_AGENT_KEY';
+
+// Check if key already exists in the env file
+function findExistingKey() {
+  if (!existsSync(envFile)) return null;
+  const lines = readFileSync(envFile, 'utf8').split('\n');
+  for (const line of lines) {
+    const trimmed = line.trim();
+    if (trimmed.startsWith('#') || !trimmed.includes('=')) continue;
+    const [name, ...rest] = trimmed.split('=');
+    if (name.trim() === ENV_VAR) {
+      const value = rest.join('=').trim().replace(/^["']|["']$/g, '');
+      if (value) return value;
+    }
+  }
+  return null;
+}
+
+const existing = findExistingKey();
+
+if (existing) {
+  try {
+    const wallet = new Wallet(existing);
+    console.log(wallet.address);
+    console.error(`${ENV_VAR} already configured in ${envFile}`);
+  } catch {
+    console.error(`${ENV_VAR} exists in ${envFile} but is invalid. Remove it and re-run.`);
+    process.exit(1);
+  }
+} else {
+  const wallet = Wallet.createRandom();
+  appendFileSync(envFile, `\n${ENV_VAR}=${wallet.privateKey}\n`);
+  console.log(wallet.address);
+  console.error(`Generated new agent key → ${envFile}`);
+}