perp-cli 0.9.8 → 0.11.0

package/dist/signer/ows-evm.d.ts

@@ -0,0 +1,18 @@
+import type { EvmSigner } from "./interface.js";
+/**
+ * EVM signer backed by Open Wallet Standard.
+ * Keys never leave the OWS encrypted vault.
+ */
+export declare class OwsEvmSigner implements EvmSigner {
+    private _address;
+    private _walletName;
+    private _passphrase;
+    private constructor();
+    static create(walletName: string, passphrase?: string): OwsEvmSigner;
+    getAddress(): string;
+    signTypedData(domain: Record<string, unknown>, types: Record<string, Array<{
+        name: string;
+        type: string;
+    }>>, value: Record<string, unknown>): Promise<string>;
+    signMessage(message: string | Uint8Array): Promise<string>;
+}

package/dist/signer/ows-evm.js

@@ -0,0 +1,67 @@
+import { loadOws } from "./ows-loader.js";
+/**
+ * EVM signer backed by Open Wallet Standard.
+ * Keys never leave the OWS encrypted vault.
+ */
+export class OwsEvmSigner {
+    _address;
+    _walletName;
+    _passphrase;
+    constructor(walletName, address, passphrase) {
+        this._walletName = walletName;
+        this._address = address;
+        this._passphrase = passphrase;
+    }
+    static create(walletName, passphrase = "") {
+        const ows = loadOws();
+        const wallet = ows.getWallet(walletName);
+        const evmAccount = wallet.accounts.find((a) => a.chainId.startsWith("eip155:"));
+        if (!evmAccount) {
+            throw new Error(`OWS wallet "${walletName}" has no EVM account`);
+        }
+        return new OwsEvmSigner(walletName, evmAccount.address, passphrase);
+    }
+    getAddress() {
+        return this._address;
+    }
+    async signTypedData(domain, types, value) {
+        const ows = loadOws();
+        // Build EIP-712 structure expected by OWS
+        const typedData = JSON.stringify({
+            types: {
+                EIP712Domain: Object.keys(domain).map((key) => ({
+                    name: key,
+                    type: inferEip712DomainType(key),
+                })),
+                ...types,
+            },
+            primaryType: Object.keys(types)[0],
+            domain,
+            message: value,
+        });
+        const result = ows.signTypedData(this._walletName, "evm", typedData, this._passphrase);
+        // OWS returns hex signature + recoveryId; combine to 65-byte EIP-712 sig
+        const sig = result.signature.startsWith("0x") ? result.signature : `0x${result.signature}`;
+        const v = result.recoveryId !== undefined ? result.recoveryId + 27 : 27;
+        return `${sig}${v.toString(16).padStart(2, "0")}`;
+    }
+    async signMessage(message) {
+        const ows = loadOws();
+        const msgStr = typeof message === "string"
+            ? message
+            : Buffer.from(message).toString("hex");
+        const encoding = typeof message === "string" ? "utf8" : "hex";
+        const result = ows.signMessage(this._walletName, "evm", msgStr, this._passphrase, encoding);
+        const sig = result.signature.startsWith("0x") ? result.signature : `0x${result.signature}`;
+        const v = result.recoveryId !== undefined ? result.recoveryId + 27 : 27;
+        return `${sig}${v.toString(16).padStart(2, "0")}`;
+    }
+}
+function inferEip712DomainType(key) {
+    switch (key) {
+        case "chainId": return "uint256";
+        case "verifyingContract": return "address";
+        case "salt": return "bytes32";
+        default: return "string";
+    }
+}

package/dist/signer/ows-loader.d.ts

@@ -0,0 +1,2 @@
+/** Lazy-load the OWS native module (NAPI binding, requires CJS require). */
+export declare function loadOws(): typeof import("@open-wallet-standard/core");

package/dist/signer/ows-loader.js

@@ -0,0 +1,6 @@
+import { createRequire } from "node:module";
+const _require = createRequire(import.meta.url);
+/** Lazy-load the OWS native module (NAPI binding, requires CJS require). */
+export function loadOws() {
+    return _require("@open-wallet-standard/core");
+}

package/dist/signer/ows-solana.d.ts

@@ -0,0 +1,25 @@
+import type { SolanaSigner } from "./interface.js";
+/**
+ * Solana signer backed by Open Wallet Standard.
+ * Keys never leave the OWS encrypted vault.
+ */
+export declare class OwsSolanaSigner implements SolanaSigner {
+    private _address;
+    private _walletName;
+    private _passphrase;
+    private constructor();
+    static create(walletName: string, passphrase?: string): OwsSolanaSigner;
+    getPublicKeyBase58(): string;
+    signMessage(message: Uint8Array): Promise<Uint8Array>;
+    signTransaction(tx: {
+        sign(keypair: unknown): void;
+    }): void;
+    partialSignTransaction(tx: {
+        partialSign(keypair: unknown): void;
+    }): void;
+    /**
+     * Sign raw Solana transaction bytes via OWS.
+     * The caller is responsible for serializing/deserializing the transaction.
+     */
+    signTransactionBytes(txBytes: Uint8Array): Uint8Array;
+}

package/dist/signer/ows-solana.js

@@ -0,0 +1,56 @@
+import { loadOws } from "./ows-loader.js";
+/**
+ * Solana signer backed by Open Wallet Standard.
+ * Keys never leave the OWS encrypted vault.
+ */
+export class OwsSolanaSigner {
+    _address;
+    _walletName;
+    _passphrase;
+    constructor(walletName, address, passphrase) {
+        this._walletName = walletName;
+        this._address = address;
+        this._passphrase = passphrase;
+    }
+    static create(walletName, passphrase = "") {
+        const ows = loadOws();
+        const wallet = ows.getWallet(walletName);
+        const solAccount = wallet.accounts.find((a) => a.chainId.startsWith("solana:"));
+        if (!solAccount) {
+            throw new Error(`OWS wallet "${walletName}" has no Solana account`);
+        }
+        return new OwsSolanaSigner(walletName, solAccount.address, passphrase);
+    }
+    getPublicKeyBase58() {
+        return this._address;
+    }
+    async signMessage(message) {
+        const ows = loadOws();
+        const msgHex = Buffer.from(message).toString("hex");
+        const result = ows.signMessage(this._walletName, "solana", msgHex, this._passphrase, "hex");
+        // Convert hex signature to Uint8Array
+        const sigHex = result.signature.startsWith("0x") ? result.signature.slice(2) : result.signature;
+        return Uint8Array.from(Buffer.from(sigHex, "hex"));
+    }
+    signTransaction(tx) {
+        // OWS doesn't expose raw keypairs. For Solana transactions that require
+        // a keypair, we serialize -> sign via OWS -> inject signature back.
+        throw new Error("OWS signer does not support in-place tx.sign(). " +
+            "Use signTransactionBytes() or the deposit relayer instead.");
+    }
+    partialSignTransaction(tx) {
+        throw new Error("OWS signer does not support in-place tx.partialSign(). " +
+            "Use signTransactionBytes() or the deposit relayer instead.");
+    }
+    /**
+     * Sign raw Solana transaction bytes via OWS.
+     * The caller is responsible for serializing/deserializing the transaction.
+     */
+    signTransactionBytes(txBytes) {
+        const ows = loadOws();
+        const txHex = Buffer.from(txBytes).toString("hex");
+        const result = ows.signTransaction(this._walletName, "solana", txHex, this._passphrase);
+        const sigHex = result.signature.startsWith("0x") ? result.signature.slice(2) : result.signature;
+        return Uint8Array.from(Buffer.from(sigHex, "hex"));
+    }
+}

package/package.json

@@ -1,10 +1,11 @@
 {
   "name": "perp-cli",
-  "version": "0.9.8",
+  "version": "0.11.0",
   "description": "Multi-DEX Perpetual Futures CLI - Pacifica, Hyperliquid, Lighter, Aster",
   "bin": {
     "perp": "dist/index.js",
-    "perp-mcp": "dist/mcp-server.js"
+    "perp-mcp": "dist/mcp-server.js",
+    "perp-guardrail": "dist/guardrail/perp-guardrail.js"
   },
   "files": [
     "dist",
@@ -45,6 +46,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.27.1",
     "@msgpack/msgpack": "^3.1.3",
+    "@open-wallet-standard/core": "1.2.0",
     "@solana/web3.js": "^1.98.0",
     "@types/react": "^19.2.14",
     "bs58": "^6.0.0",