tenjin-cli 0.1.0-alpha.0 → 0.1.0-alpha.1

package/dist/{config-XVXZ3V2Q.js → config-CEFTL5ZL.js}

@@ -1,4 +1,8 @@
 import { createRequire as __tenjinCreateRequire } from 'node:module'; const require = __tenjinCreateRequire(import.meta.url);
+import {
+  LockTimeoutError,
+  withFileLock
+} from "./chunk-YBMMV4Y4.js";
 import {
   CONFIG_KEYS,
   RawConfigSchema,
@@ -6,65 +10,19 @@ import {
   parseUsdToAtomic,
   resolveSettings,
   toMoney
-} from "./chunk-LTTRND4A.js";
+} from "./chunk-EZROUI5U.js";
 import {
   writeFileAtomic
 } from "./chunk-ZPZFPVDN.js";
 import {
   CliError,
   configPath
-} from "./chunk-FIYZLITH.js";
+} from "./chunk-YG2DO46P.js";
 import "./chunk-3IMLRUZE.js";
 
 // src/commands/config.ts
-import { mkdir as mkdir2 } from "fs/promises";
+import { mkdir } from "fs/promises";
 import { styleText } from "util";
-
-// src/lib/lock.ts
-import { mkdir, rm, writeFile } from "fs/promises";
-import { join } from "path";
-var DEFAULTS = { timeoutMs: 5e3, retryMs: 25 };
-var LockTimeoutError = class extends Error {
-  lockPath;
-  constructor(lockPath, timeoutMs) {
-    super(
-      `Timed out waiting for lock at ${lockPath} after ${timeoutMs}ms; if no other tenjin process is running, remove that directory and retry.`
-    );
-    this.name = "LockTimeoutError";
-    this.lockPath = lockPath;
-  }
-};
-async function withFileLock(lockPath, fn, opts = {}) {
-  const { timeoutMs, retryMs } = { ...DEFAULTS, ...opts };
-  const metaPath = join(lockPath, "meta");
-  const deadline = Date.now() + timeoutMs;
-  for (; ; ) {
-    try {
-      await mkdir(lockPath);
-      break;
-    } catch (err) {
-      if (!isEexist(err)) throw err;
-      if (Date.now() >= deadline) throw new LockTimeoutError(lockPath, timeoutMs);
-      await delay(retryMs);
-    }
-  }
-  await writeFile(metaPath, JSON.stringify({ pid: process.pid, acquiredAt: Date.now() })).catch(
-    () => void 0
-  );
-  try {
-    return await fn();
-  } finally {
-    await rm(lockPath, { recursive: true, force: true }).catch(() => void 0);
-  }
-}
-function isEexist(err) {
-  return typeof err === "object" && err !== null && err.code === "EEXIST";
-}
-function delay(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
-
-// src/commands/config.ts
 var CONFIRM_ABOVE = "above:";
 var KEY_WIDTH = Math.max(...CONFIG_KEYS.map((key) => key.length));
 async function runConfigList(ctx) {
@@ -164,7 +122,7 @@ function parseHttpUrl(value) {
   return value;
 }
 async function persist(dir, key, stored) {
-  await mkdir2(dir, { recursive: true, mode: 448 });
+  await mkdir(dir, { recursive: true, mode: 448 });
   const lockPath = `${configPath(dir)}.lock`;
   try {
     await withFileLock(lockPath, async () => {
@@ -203,4 +161,4 @@ export {
   runConfigList,
   runConfigSet
 };
-//# sourceMappingURL=config-XVXZ3V2Q.js.map
+//# sourceMappingURL=config-CEFTL5ZL.js.map

package/dist/config-CEFTL5ZL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/config.ts"],"sourcesContent":["import { mkdir } from 'node:fs/promises';\nimport { styleText } from 'node:util';\nimport { CliError } from '../lib/errors';\nimport { CONFIG_KEYS, RawConfigSchema, loadRawConfig, resolveSettings } from '../lib/config';\nimport type { Config, EffectiveSettings, Provenance } from '../lib/config';\nimport { configPath } from '../lib/paths';\nimport { writeFileAtomic } from '../lib/atomic-json';\nimport { withFileLock, LockTimeoutError } from '../lib/lock';\nimport { parseUsdToAtomic, toMoney } from '../lib/money';\nimport type { Money } from '../schemas';\nimport type { CommandContext, CommandResult } from '../context';\n\n/**\n * How one config key is presented in `data`. `value` is the machine form: dual\n * Money for the spend keys, the stored string for `confirm`/URLs, the string[]\n * for the allowlist. `threshold` rides along only for `confirm: above:<atomic>`\n * so an agent reads the dollar amount without re-parsing the string.\n */\ninterface RenderedValue {\n  value: Money | string | string[];\n  threshold?: Money;\n}\ninterface RenderedSetting extends RenderedValue {\n  source: Provenance;\n}\n\nconst CONFIRM_ABOVE = 'above:';\nconst KEY_WIDTH = Math.max(...CONFIG_KEYS.map((key) => key.length));\n\n/**\n * Show every effective key with its value and provenance. `data` is keyed by\n * config key; provenance comes from resolveSettings over the *raw* file (not the\n * defaults-merged config), so a key the user never set reads `default`, not\n * `file`.\n */\nexport async function runConfigList(ctx: CommandContext): Promise<CommandResult> {\n  const settings = await resolveFromContext(ctx);\n  const data: Record<string, RenderedSetting> = {};\n  const humanLines: string[] = [];\n  for (const key of CONFIG_KEYS) {\n    const entry = renderSetting(key, settings[key].value, settings[key].source);\n    data[key] = entry;\n    humanLines.push(formatLine(key, entry));\n  }\n  return { data, humanLines };\n}\n\n/** Same per-key shape as list, for one key. Unknown key is a USAGE failure. */\nexport async function runConfigGet(\n  { key }: { key: string },\n  ctx: CommandContext,\n): Promise<CommandResult> {\n  const configKey = assertKey(key);\n  const settings = await resolveFromContext(ctx);\n  const entry = renderSetting(configKey, settings[configKey].value, settings[configKey].source);\n  return { data: { key: configKey, ...entry }, humanLines: [formatLine(configKey, entry)] };\n}\n\n/**\n * Parse the value for this key, then persist it merged into the existing raw\n * file — never materializing defaults for keys the user did not set, so\n * provenance stays truthful. The written key now reads `file`.\n */\nexport async function runConfigSet(\n  { key, value }: { key: string; value: string },\n  ctx: CommandContext,\n): Promise<CommandResult> {\n  const configKey = assertKey(key);\n  const stored = parseValue(configKey, value);\n  await persist(ctx.dataDir, configKey, stored);\n  const entry = renderSetting(configKey, stored, 'file');\n  return { data: { key: configKey, ...entry }, humanLines: [formatLine(configKey, entry)] };\n}\n\nasync function resolveFromContext(ctx: CommandContext): Promise<EffectiveSettings> {\n  const config = await loadRawConfig(ctx.dataDir);\n  return resolveSettings({ config, flags: { baseUrl: ctx.flags.baseUrl }, env: process.env });\n}\n\nfunction assertKey(key: string): keyof Config {\n  if ((CONFIG_KEYS as string[]).includes(key)) return key as keyof Config;\n  throw new CliError('USAGE', `Unknown config key: ${JSON.stringify(key)}`, {\n    fix: `Valid keys: ${CONFIG_KEYS.join(', ')}.`,\n  });\n}\n\nfunction renderSetting(\n  key: keyof Config,\n  stored: string | string[],\n  source: Provenance,\n): RenderedSetting {\n  return { ...renderValue(key, stored), source };\n}\n\nfunction renderValue(key: keyof Config, stored: string | string[]): RenderedValue {\n  if (Array.isArray(stored)) return { value: stored }; // allowlistCreators\n  if (key === 'maxAutoSpend' || key === 'sessionBudget') return { value: toMoney(stored) };\n  if (key === 'confirm' && stored.startsWith(CONFIRM_ABOVE)) {\n    return { value: stored, threshold: toMoney(stored.slice(CONFIRM_ABOVE.length)) };\n  }\n  return { value: stored };\n}\n\n/** Per-key edge parsing. Returns the persisted form; throws USAGE on bad input. */\nfunction parseValue(key: keyof Config, value: string): string | string[] {\n  switch (key) {\n    case 'maxAutoSpend':\n    case 'sessionBudget':\n      return parseUsdToAtomic(value); // throws USAGE on a bad amount\n    case 'confirm':\n      return parseConfirm(value);\n    case 'allowlistCreators':\n      return parseAllowlist(value);\n    case 'baseUrl':\n    case 'rpcUrl':\n      return parseHttpUrl(value);\n  }\n}\n\nfunction parseConfirm(value: string): string {\n  if (value === 'always') return 'always';\n  if (value.startsWith(CONFIRM_ABOVE)) {\n    return `${CONFIRM_ABOVE}${parseUsdToAtomic(value.slice(CONFIRM_ABOVE.length))}`;\n  }\n  throw new CliError('USAGE', `Invalid confirm value: ${JSON.stringify(value)}`, {\n    fix: 'Use \"always\" or \"above:<usd>\", e.g. above:0.25.',\n  });\n}\n\nfunction parseAllowlist(value: string): string[] {\n  // \"\" clears to []; comma-split, trim, drop empties. Reject an entry with\n  // internal whitespace — a creator handle/address is a single token.\n  const entries = value\n    .split(',')\n    .map((entry) => entry.trim())\n    .filter((entry) => entry.length > 0);\n  for (const entry of entries) {\n    if (/\\s/.test(entry)) {\n      throw new CliError('USAGE', `Invalid creator entry: ${JSON.stringify(entry)}`, {\n        fix: 'Creator entries cannot contain spaces; separate multiple with commas.',\n      });\n    }\n  }\n  return entries;\n}\n\nfunction parseHttpUrl(value: string): string {\n  let url: URL;\n  try {\n    url = new URL(value);\n  } catch {\n    throw new CliError('USAGE', `Invalid URL: ${JSON.stringify(value)}`, {\n      fix: 'Pass an absolute http(s) URL like https://tenjin.blog.',\n    });\n  }\n  if (url.protocol !== 'http:' && url.protocol !== 'https:') {\n    throw new CliError('USAGE', `URL must be http or https: ${JSON.stringify(value)}`, {\n      fix: 'Pass an absolute http(s) URL like https://tenjin.blog.',\n    });\n  }\n  return value;\n}\n\n/**\n * Merge one key into the raw file and write it back atomically. Uses the partial\n * schema and writeFileAtomic (not writeConfig, which would materialize every\n * default into the file and corrupt provenance). loadRawConfig surfaces a\n * corrupt existing file as CONFIG_INVALID, which propagates.\n *\n * The whole read-merge-write runs under a cross-process file lock: without it two\n * concurrent `config set` on different keys race on the read, and the last writer\n * drops the other's update (worst case, a zeroed maxAutoSpend resurrected). The\n * data dir is ensured first so the lock's mkdir has a parent on a fresh install.\n */\nasync function persist(dir: string, key: keyof Config, stored: string | string[]): Promise<void> {\n  await mkdir(dir, { recursive: true, mode: 0o700 });\n  const lockPath = `${configPath(dir)}.lock`;\n  try {\n    await withFileLock(lockPath, async () => {\n      const existing = await loadRawConfig(dir);\n      const merged = { ...existing, [key]: stored };\n      const validated = RawConfigSchema.parse(merged);\n      await writeFileAtomic(configPath(dir), `${JSON.stringify(validated, null, 2)}\\n`, {\n        mode: 0o644,\n        dirMode: 0o700,\n      });\n    });\n  } catch (err) {\n    // A lock timeout is not the user's malformed input; surface it as INTERNAL with\n    // the one manual step (there is no auto-steal), keeping the JSON error contract.\n    if (err instanceof LockTimeoutError) {\n      throw new CliError('INTERNAL', err.message, {\n        fix: `If no other tenjin process is running, remove ${lockPath} and retry.`,\n        cause: err,\n      });\n    }\n    throw err;\n  }\n}\n\nfunction formatLine(key: string, entry: RenderedSetting): string {\n  const label = key.padEnd(KEY_WIDTH);\n  return `  ${label}  ${displayValue(entry)}  ${styleText('dim', `(${entry.source})`)}`;\n}\n\nfunction displayValue(entry: RenderedSetting): string {\n  const { value } = entry;\n  if (Array.isArray(value)) return value.length > 0 ? value.join(', ') : '(empty)';\n  if (typeof value === 'object') return `${value.usd} USD`; // Money (spend keys)\n  if (entry.threshold !== undefined) return `above ${entry.threshold.usd} USD`; // confirm\n  return value; // 'always', baseUrl, rpcUrl\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,aAAa;AACtB,SAAS,iBAAiB;AAyB1B,IAAM,gBAAgB;AACtB,IAAM,YAAY,KAAK,IAAI,GAAG,YAAY,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC;AAQlE,eAAsB,cAAc,KAA6C;AAC/E,QAAM,WAAW,MAAM,mBAAmB,GAAG;AAC7C,QAAM,OAAwC,CAAC;AAC/C,QAAM,aAAuB,CAAC;AAC9B,aAAW,OAAO,aAAa;AAC7B,UAAM,QAAQ,cAAc,KAAK,SAAS,GAAG,EAAE,OAAO,SAAS,GAAG,EAAE,MAAM;AAC1E,SAAK,GAAG,IAAI;AACZ,eAAW,KAAK,WAAW,KAAK,KAAK,CAAC;AAAA,EACxC;AACA,SAAO,EAAE,MAAM,WAAW;AAC5B;AAGA,eAAsB,aACpB,EAAE,IAAI,GACN,KACwB;AACxB,QAAM,YAAY,UAAU,GAAG;AAC/B,QAAM,WAAW,MAAM,mBAAmB,GAAG;AAC7C,QAAM,QAAQ,cAAc,WAAW,SAAS,SAAS,EAAE,OAAO,SAAS,SAAS,EAAE,MAAM;AAC5F,SAAO,EAAE,MAAM,EAAE,KAAK,WAAW,GAAG,MAAM,GAAG,YAAY,CAAC,WAAW,WAAW,KAAK,CAAC,EAAE;AAC1F;AAOA,eAAsB,aACpB,EAAE,KAAK,MAAM,GACb,KACwB;AACxB,QAAM,YAAY,UAAU,GAAG;AAC/B,QAAM,SAAS,WAAW,WAAW,KAAK;AAC1C,QAAM,QAAQ,IAAI,SAAS,WAAW,MAAM;AAC5C,QAAM,QAAQ,cAAc,WAAW,QAAQ,MAAM;AACrD,SAAO,EAAE,MAAM,EAAE,KAAK,WAAW,GAAG,MAAM,GAAG,YAAY,CAAC,WAAW,WAAW,KAAK,CAAC,EAAE;AAC1F;AAEA,eAAe,mBAAmB,KAAiD;AACjF,QAAM,SAAS,MAAM,cAAc,IAAI,OAAO;AAC9C,SAAO,gBAAgB,EAAE,QAAQ,OAAO,EAAE,SAAS,IAAI,MAAM,QAAQ,GAAG,KAAK,QAAQ,IAAI,CAAC;AAC5F;AAEA,SAAS,UAAU,KAA2B;AAC5C,MAAK,YAAyB,SAAS,GAAG,EAAG,QAAO;AACpD,QAAM,IAAI,SAAS,SAAS,uBAAuB,KAAK,UAAU,GAAG,CAAC,IAAI;AAAA,IACxE,KAAK,eAAe,YAAY,KAAK,IAAI,CAAC;AAAA,EAC5C,CAAC;AACH;AAEA,SAAS,cACP,KACA,QACA,QACiB;AACjB,SAAO,EAAE,GAAG,YAAY,KAAK,MAAM,GAAG,OAAO;AAC/C;AAEA,SAAS,YAAY,KAAmB,QAA0C;AAChF,MAAI,MAAM,QAAQ,MAAM,EAAG,QAAO,EAAE,OAAO,OAAO;AAClD,MAAI,QAAQ,kBAAkB,QAAQ,gBAAiB,QAAO,EAAE,OAAO,QAAQ,MAAM,EAAE;AACvF,MAAI,QAAQ,aAAa,OAAO,WAAW,aAAa,GAAG;AACzD,WAAO,EAAE,OAAO,QAAQ,WAAW,QAAQ,OAAO,MAAM,cAAc,MAAM,CAAC,EAAE;AAAA,EACjF;AACA,SAAO,EAAE,OAAO,OAAO;AACzB;AAGA,SAAS,WAAW,KAAmB,OAAkC;AACvE,UAAQ,KAAK;AAAA,IACX,KAAK;AAAA,IACL,KAAK;AACH,aAAO,iBAAiB,KAAK;AAAA;AAAA,IAC/B,KAAK;AACH,aAAO,aAAa,KAAK;AAAA,IAC3B,KAAK;AACH,aAAO,eAAe,KAAK;AAAA,IAC7B,KAAK;AAAA,IACL,KAAK;AACH,aAAO,aAAa,KAAK;AAAA,EAC7B;AACF;AAEA,SAAS,aAAa,OAAuB;AAC3C,MAAI,UAAU,SAAU,QAAO;AAC/B,MAAI,MAAM,WAAW,aAAa,GAAG;AACnC,WAAO,GAAG,aAAa,GAAG,iBAAiB,MAAM,MAAM,cAAc,MAAM,CAAC,CAAC;AAAA,EAC/E;AACA,QAAM,IAAI,SAAS,SAAS,0BAA0B,KAAK,UAAU,KAAK,CAAC,IAAI;AAAA,IAC7E,KAAK;AAAA,EACP,CAAC;AACH;AAEA,SAAS,eAAe,OAAyB;AAG/C,QAAM,UAAU,MACb,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC;AACrC,aAAW,SAAS,SAAS;AAC3B,QAAI,KAAK,KAAK,KAAK,GAAG;AACpB,YAAM,IAAI,SAAS,SAAS,0BAA0B,KAAK,UAAU,KAAK,CAAC,IAAI;AAAA,QAC7E,KAAK;AAAA,MACP,CAAC;AAAA,IACH;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,aAAa,OAAuB;AAC3C,MAAI;AACJ,MAAI;AACF,UAAM,IAAI,IAAI,KAAK;AAAA,EACrB,QAAQ;AACN,UAAM,IAAI,SAAS,SAAS,gBAAgB,KAAK,UAAU,KAAK,CAAC,IAAI;AAAA,MACnE,KAAK;AAAA,IACP,CAAC;AAAA,EACH;AACA,MAAI,IAAI,aAAa,WAAW,IAAI,aAAa,UAAU;AACzD,UAAM,IAAI,SAAS,SAAS,8BAA8B,KAAK,UAAU,KAAK,CAAC,IAAI;AAAA,MACjF,KAAK;AAAA,IACP,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAaA,eAAe,QAAQ,KAAa,KAAmB,QAA0C;AAC/F,QAAM,MAAM,KAAK,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACjD,QAAM,WAAW,GAAG,WAAW,GAAG,CAAC;AACnC,MAAI;AACF,UAAM,aAAa,UAAU,YAAY;AACvC,YAAM,WAAW,MAAM,cAAc,GAAG;AACxC,YAAM,SAAS,EAAE,GAAG,UAAU,CAAC,GAAG,GAAG,OAAO;AAC5C,YAAM,YAAY,gBAAgB,MAAM,MAAM;AAC9C,YAAM,gBAAgB,WAAW,GAAG,GAAG,GAAG,KAAK,UAAU,WAAW,MAAM,CAAC,CAAC;AAAA,GAAM;AAAA,QAChF,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AAAA,IACH,CAAC;AAAA,EACH,SAAS,KAAK;AAGZ,QAAI,eAAe,kBAAkB;AACnC,YAAM,IAAI,SAAS,YAAY,IAAI,SAAS;AAAA,QAC1C,KAAK,iDAAiD,QAAQ;AAAA,QAC9D,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,UAAM;AAAA,EACR;AACF;AAEA,SAAS,WAAW,KAAa,OAAgC;AAC/D,QAAM,QAAQ,IAAI,OAAO,SAAS;AAClC,SAAO,KAAK,KAAK,KAAK,aAAa,KAAK,CAAC,KAAK,UAAU,OAAO,IAAI,MAAM,MAAM,GAAG,CAAC;AACrF;AAEA,SAAS,aAAa,OAAgC;AACpD,QAAM,EAAE,MAAM,IAAI;AAClB,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI;AACvE,MAAI,OAAO,UAAU,SAAU,QAAO,GAAG,MAAM,GAAG;AAClD,MAAI,MAAM,cAAc,OAAW,QAAO,SAAS,MAAM,UAAU,GAAG;AACtE,SAAO;AACT;","names":[]}

package/dist/{doctor-MVLZRVPU.js → doctor-3QBYN46N.js}

@@ -3,15 +3,15 @@ import {
   loadRawConfig,
   resolveSettings,
   toMoney
-} from "./chunk-LTTRND4A.js";
+} from "./chunk-EZROUI5U.js";
 import {
   walletFileExists
-} from "./chunk-376LHMK2.js";
+} from "./chunk-DXPYFVKG.js";
 import "./chunk-ZPZFPVDN.js";
 import {
   CliError,
   configPath
-} from "./chunk-FIYZLITH.js";
+} from "./chunk-YG2DO46P.js";
 import "./chunk-3IMLRUZE.js";
 
 // src/commands/doctor.ts
@@ -227,7 +227,7 @@ async function checkReadPath(baseUrl, timeoutMs, fetchImpl) {
 async function checkWallet(ctx, deps, env, rpcUrl) {
   const provider = deps.provider ?? await resolveLocalProviderOrNull(ctx, env);
   if (provider === null) return [noWalletCheck()];
-  const { describeWallet } = await import("./wallet-QUWK2PA4.js");
+  const { describeWallet } = await import("./wallet-ELBTBMXO.js");
   let desc;
   try {
     desc = await describeWallet(provider);
@@ -253,7 +253,7 @@ async function resolveLocalProviderOrNull(ctx, env) {
   const envKey = env.TENJIN_WALLET_KEY;
   const envKeySet = typeof envKey === "string" && envKey.length > 0;
   if (!envKeySet && !await walletFileExists(ctx.dataDir)) return null;
-  const { resolveWalletProvider } = await import("./wallet-QUWK2PA4.js");
+  const { resolveWalletProvider } = await import("./wallet-ELBTBMXO.js");
   return resolveWalletProvider(ctx);
 }
 function noWalletCheck() {
@@ -276,7 +276,7 @@ function walletWarn(err) {
 }
 async function checkBalance(address, rpcUrl) {
   try {
-    const { getUsdcBalance } = await import("./usdc-OQUOFF6R.js");
+    const { getUsdcBalance } = await import("./usdc-44R6XZF2.js");
     const balance = await getUsdcBalance(address, rpcUrl);
     if (balance === 0n) {
       return {
@@ -335,4 +335,4 @@ function trimSlash(url) {
 export {
   runDoctor
 };
-//# sourceMappingURL=doctor-MVLZRVPU.js.map
+//# sourceMappingURL=doctor-3QBYN46N.js.map

package/dist/index.js

@@ -21,6 +21,6 @@ if (Number.isNaN(nodeMajor) || nodeMajor < MIN_NODE_MAJOR) {
 `);
   process.exit(1);
 }
-var { main } = await import("./cli-LMHGCZ5S.js");
+var { main } = await import("./cli-WA65NP4Y.js");
 process.exit(await main(process.argv.slice(2)));
 //# sourceMappingURL=index.js.map

package/dist/{secp256k1-35YNNB6F.js → secp256k1-BEZS642W.js}

@@ -5,8 +5,8 @@ import {
   schnorr,
   secp256k1,
   secp256k1_hasher
-} from "./chunk-TX5T3LKJ.js";
-import "./chunk-CPUZRZ2A.js";
+} from "./chunk-Q53IYV2G.js";
+import "./chunk-CUWUHTIL.js";
 import "./chunk-3IMLRUZE.js";
 export {
   encodeToCurve,
@@ -15,4 +15,4 @@ export {
   secp256k1,
   secp256k1_hasher
 };
-//# sourceMappingURL=secp256k1-35YNNB6F.js.map
+//# sourceMappingURL=secp256k1-BEZS642W.js.map

package/dist/{usdc-OQUOFF6R.js → usdc-44R6XZF2.js}

@@ -3,16 +3,16 @@ import {
   USDC_ADDRESS,
   USDC_DECIMALS,
   getUsdcBalance
-} from "./chunk-PAAL45FJ.js";
-import "./chunk-SXQQ2ZSR.js";
-import "./chunk-TX5T3LKJ.js";
-import "./chunk-WOHCAMDQ.js";
-import "./chunk-F5DZJLU3.js";
-import "./chunk-CPUZRZ2A.js";
+} from "./chunk-IPOWB3G3.js";
+import "./chunk-T4LKNY7T.js";
+import "./chunk-Q53IYV2G.js";
+import "./chunk-LPRVHM7P.js";
+import "./chunk-BRJHUQSY.js";
+import "./chunk-CUWUHTIL.js";
 import "./chunk-3IMLRUZE.js";
 export {
   USDC_ADDRESS,
   USDC_DECIMALS,
   getUsdcBalance
 };
-//# sourceMappingURL=usdc-OQUOFF6R.js.map
+//# sourceMappingURL=usdc-44R6XZF2.js.map

package/dist/{wallet-QUWK2PA4.js → wallet-ELBTBMXO.js}

@@ -2,21 +2,19 @@ import { createRequire as __tenjinCreateRequire } from 'node:module'; const requ
 import {
   createLocalWallet,
   describeWallet,
-  importLocalWallet,
   resolveWalletProvider
-} from "./chunk-QHIEYBLV.js";
-import "./chunk-SXQQ2ZSR.js";
-import "./chunk-TX5T3LKJ.js";
-import "./chunk-F5DZJLU3.js";
-import "./chunk-CPUZRZ2A.js";
-import "./chunk-376LHMK2.js";
+} from "./chunk-EXBMF5X7.js";
+import "./chunk-T4LKNY7T.js";
+import "./chunk-Q53IYV2G.js";
+import "./chunk-BRJHUQSY.js";
+import "./chunk-CUWUHTIL.js";
+import "./chunk-DXPYFVKG.js";
 import "./chunk-ZPZFPVDN.js";
-import "./chunk-FIYZLITH.js";
+import "./chunk-YG2DO46P.js";
 import "./chunk-3IMLRUZE.js";
 export {
   createLocalWallet,
   describeWallet,
-  importLocalWallet,
   resolveWalletProvider
 };
-//# sourceMappingURL=wallet-QUWK2PA4.js.map
+//# sourceMappingURL=wallet-ELBTBMXO.js.map

package/dist/wallet-XD576HF3.js

@@ -0,0 +1,173 @@
+import { createRequire as __tenjinCreateRequire } from 'node:module'; const require = __tenjinCreateRequire(import.meta.url);
+import {
+  LockTimeoutError,
+  withFileLock
+} from "./chunk-YBMMV4Y4.js";
+import {
+  createLocalWallet,
+  describeWallet,
+  resolvePassphraseForCreate,
+  resolveWalletProvider
+} from "./chunk-EXBMF5X7.js";
+import {
+  getUsdcBalance
+} from "./chunk-IPOWB3G3.js";
+import "./chunk-T4LKNY7T.js";
+import "./chunk-Q53IYV2G.js";
+import "./chunk-LPRVHM7P.js";
+import "./chunk-BRJHUQSY.js";
+import "./chunk-CUWUHTIL.js";
+import {
+  loadRawConfig,
+  resolveSettings,
+  toMoney
+} from "./chunk-EZROUI5U.js";
+import {
+  walletFileExists
+} from "./chunk-DXPYFVKG.js";
+import "./chunk-ZPZFPVDN.js";
+import {
+  CliError,
+  walletPath
+} from "./chunk-YG2DO46P.js";
+import "./chunk-3IMLRUZE.js";
+
+// src/commands/wallet.ts
+import { mkdir } from "fs/promises";
+import { join } from "path";
+var FUNDING_LINE = "Send USDC on Base. $5 covers ~50 typical resources.";
+var KEY_STORAGE = "encrypted (keystore v3, scrypt)";
+var isWindows = process.platform === "win32";
+async function runWalletCreate(ctx, opts = {}) {
+  const { address, walletPath: path, source } = await createWalletLocked(ctx.dataDir, opts);
+  const warnings = custodyWarnings();
+  return {
+    data: {
+      address,
+      walletPath: path,
+      provider: "local",
+      policyEnforcement: "client-only",
+      keyStorage: KEY_STORAGE,
+      passphraseSource: source,
+      warnings
+    },
+    humanLines: [
+      `Wallet created: ${address}`,
+      `Key stored ${KEY_STORAGE}.`,
+      passphraseNote(source),
+      FUNDING_LINE,
+      ...warnings
+    ]
+  };
+}
+async function createWalletLocked(dir, opts) {
+  await mkdir(dir, { recursive: true, mode: 448 });
+  const lockPath = join(dir, "wallet.create.lock");
+  try {
+    return await withFileLock(lockPath, async () => {
+      await refuseIfWalletExists(dir);
+      const { passphrase, source } = await resolvePassphraseForCreate({
+        env: process.env,
+        dir,
+        ...opts.passphrase
+      });
+      const { address, walletPath: path } = await createLocalWallet(dir, passphrase);
+      return { address, walletPath: path, source };
+    });
+  } catch (err) {
+    if (err instanceof LockTimeoutError) {
+      throw new CliError("INTERNAL", err.message, {
+        fix: `If no other tenjin process is running, remove ${lockPath} and retry.`,
+        cause: err
+      });
+    }
+    throw err;
+  }
+}
+function passphraseNote(source) {
+  switch (source) {
+    case "keychain":
+      return "Passphrase saved to your macOS keychain (service tenjin-cli); signing will be transparent on this machine.";
+    case "dpapi":
+      return "Passphrase saved to a DPAPI-encrypted file, readable only by you on this Windows machine; signing will be transparent here.";
+    case "secret-service":
+      return "Passphrase saved to your Linux keyring (Secret Service, service tenjin-cli); signing will be transparent on this machine.";
+    case "env":
+      return "Encrypted with TENJIN_WALLET_PASSPHRASE; keep that value to sign.";
+    case "prompt":
+      return "Remember your passphrase: it is required to sign and cannot be recovered.";
+  }
+}
+async function runWalletShow(ctx, opts = {}) {
+  const provider = resolveWalletProvider(ctx, opts);
+  const desc = await describeWallet(provider);
+  const { walletPath: path, keyStorage, passphraseSource, warnings } = await provider.diagnostics();
+  const humanLines = [`Address: ${desc.address}`, `Key source: ${desc.credentialSource}`];
+  if (keyStorage !== void 0) humanLines.push(`Key storage: ${keyStorage}`);
+  if (passphraseSource !== void 0) humanLines.push(`Passphrase: ${passphraseSource}`);
+  humanLines.push(...warnings);
+  return {
+    data: {
+      address: desc.address,
+      provider: desc.provider,
+      credentialSource: desc.credentialSource,
+      policyEnforcement: desc.policyEnforcement,
+      ...path !== void 0 ? { walletPath: path } : {},
+      ...keyStorage !== void 0 ? { keyStorage } : {},
+      ...passphraseSource !== void 0 ? { passphraseSource } : {},
+      warnings
+    },
+    humanLines
+  };
+}
+async function runWalletBalance(ctx, opts = {}) {
+  const provider = resolveWalletProvider(ctx, opts);
+  const desc = await describeWallet(provider);
+  const config = await loadRawConfig(ctx.dataDir);
+  const rpcUrl = resolveSettings({
+    config,
+    flags: { baseUrl: ctx.flags.baseUrl },
+    env: process.env
+  }).rpcUrl.value;
+  let atomic;
+  try {
+    atomic = await getUsdcBalance(desc.address, rpcUrl);
+  } catch (err) {
+    throw new CliError("RPC_ERROR", `Could not read the USDC balance from ${rpcUrl}.`, {
+      fix: "Check your network, or set a working RPC with `tenjin config set rpcUrl <url>`.",
+      cause: err
+    });
+  }
+  const balance = toMoney(atomic.toString());
+  return {
+    data: { address: desc.address, balance },
+    humanLines: [`Balance: ${balance.usd} USDC on Base`]
+  };
+}
+async function refuseIfWalletExists(dir) {
+  if (!await walletFileExists(dir)) return;
+  const path = walletPath(dir);
+  throw new CliError("WALLET_EXISTS", `A wallet already exists at ${path}.`, {
+    fix: `Keys are non-recoverable; move it aside first (e.g. \`mv ${path} ${path}.bak\`) to create a new one.`
+  });
+}
+function custodyWarnings() {
+  const warnings = [];
+  if (hasEnvKey()) {
+    warnings.push("TENJIN_WALLET_KEY is set and shadows this file at runtime.");
+  }
+  if (isWindows) {
+    warnings.push("File permissions are not enforced on Windows; the key file is not restricted.");
+  }
+  return warnings;
+}
+function hasEnvKey() {
+  const envKey = process.env.TENJIN_WALLET_KEY;
+  return envKey !== void 0 && envKey.length > 0;
+}
+export {
+  runWalletBalance,
+  runWalletCreate,
+  runWalletShow
+};
+//# sourceMappingURL=wallet-XD576HF3.js.map

package/dist/wallet-XD576HF3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/wallet.ts"],"sourcesContent":["import { mkdir } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport { CliError } from '../lib/errors';\nimport { walletPath } from '../lib/paths';\nimport { withFileLock, LockTimeoutError } from '../lib/lock';\nimport { loadRawConfig, resolveSettings } from '../lib/config';\nimport { toMoney } from '../lib/money';\nimport { getUsdcBalance } from '../lib/usdc';\nimport {\n  createLocalWallet,\n  describeWallet,\n  resolveWalletProvider,\n  type ResolveWalletProviderOptions,\n} from '../lib/wallet';\nimport { walletFileExists } from '../lib/wallet/store';\nimport { resolvePassphraseForCreate, type PassphraseSource } from '../lib/wallet/passphrase';\nimport type { PassphraseOverrides } from '../lib/wallet/local';\nimport type { CommandContext, CommandResult } from '../context';\n\nconst FUNDING_LINE = 'Send USDC on Base. $5 covers ~50 typical resources.';\nconst KEY_STORAGE = 'encrypted (keystore v3, scrypt)';\nconst isWindows = process.platform === 'win32';\n\nexport interface WalletCreateOptions {\n  /** Test seam for passphrase resolution (keychain exec, TTY prompt, platform). */\n  passphrase?: PassphraseOverrides;\n}\n\nexport async function runWalletCreate(\n  ctx: CommandContext,\n  opts: WalletCreateOptions = {},\n): Promise<CommandResult> {\n  const { address, walletPath: path, source } = await createWalletLocked(ctx.dataDir, opts);\n\n  const warnings = custodyWarnings();\n  return {\n    data: {\n      address,\n      walletPath: path,\n      provider: 'local',\n      policyEnforcement: 'client-only',\n      keyStorage: KEY_STORAGE,\n      passphraseSource: source,\n      warnings,\n    },\n    humanLines: [\n      `Wallet created: ${address}`,\n      `Key stored ${KEY_STORAGE}.`,\n      passphraseNote(source),\n      FUNDING_LINE,\n      ...warnings,\n    ],\n  };\n}\n\n/**\n * Run the whole create critical section under a cross-process file lock: the\n * existence pre-check, the passphrase generate-and-store, and the no-clobber\n * write. Without the lock these interleave across two concurrent creates — each\n * generates a distinct passphrase and persists it to the OS store (which is\n * last-writer-wins on every platform) BEFORE the exclusive file write, so a\n * different process can win the file, orphaning the winning wallet from the\n * passphrase the store now holds (which then decrypts nothing, unrecoverably).\n * Serializing means the loser blocks until the winner commits, then trips\n * refuseIfWalletExists and exits WALLET_EXISTS having never generated or stored a\n * passphrase. The store-before-write ordering stays (it still guards the\n * single-process crash window), and the exclusive write stays the final authority.\n */\nasync function createWalletLocked(\n  dir: string,\n  opts: WalletCreateOptions,\n): Promise<{ address: string; walletPath: string; source: PassphraseSource }> {\n  // Ensure the data dir exists so the lock's own mkdir has a parent on a fresh\n  // install; the exclusive wallet write below re-ensures it at 0700 regardless.\n  await mkdir(dir, { recursive: true, mode: 0o700 });\n  const lockPath = join(dir, 'wallet.create.lock');\n  try {\n    return await withFileLock(lockPath, async () => {\n      await refuseIfWalletExists(dir);\n      const { passphrase, source } = await resolvePassphraseForCreate({\n        env: process.env,\n        dir,\n        ...opts.passphrase,\n      });\n      const { address, walletPath: path } = await createLocalWallet(dir, passphrase);\n      return { address, walletPath: path, source };\n    });\n  } catch (err) {\n    // A lock timeout is not the user's error; surface it as INTERNAL with the one\n    // manual step (there is no auto-steal), keeping the JSON error contract. Every\n    // other error — notably the loser's WALLET_EXISTS — propagates unchanged.\n    if (err instanceof LockTimeoutError) {\n      throw new CliError('INTERNAL', err.message, {\n        fix: `If no other tenjin process is running, remove ${lockPath} and retry.`,\n        cause: err,\n      });\n    }\n    throw err;\n  }\n}\n\n/** Where the encryption passphrase lives, and what the user must remember. */\nfunction passphraseNote(source: PassphraseSource): string {\n  switch (source) {\n    case 'keychain':\n      return 'Passphrase saved to your macOS keychain (service tenjin-cli); signing will be transparent on this machine.';\n    case 'dpapi':\n      return 'Passphrase saved to a DPAPI-encrypted file, readable only by you on this Windows machine; signing will be transparent here.';\n    case 'secret-service':\n      return 'Passphrase saved to your Linux keyring (Secret Service, service tenjin-cli); signing will be transparent on this machine.';\n    case 'env':\n      return 'Encrypted with TENJIN_WALLET_PASSPHRASE; keep that value to sign.';\n    case 'prompt':\n      return 'Remember your passphrase: it is required to sign and cannot be recovered.';\n  }\n}\n\nexport async function runWalletShow(\n  ctx: CommandContext,\n  opts: ResolveWalletProviderOptions = {},\n): Promise<CommandResult> {\n  const provider = resolveWalletProvider(ctx, opts);\n  const desc = await describeWallet(provider);\n  // Diagnostics are the provider's own: a remote provider reports no local file\n  // path or perms warning, so `show` never contaminates a remote wallet's output\n  // with a stale local wallet.json's state. keyStorage/passphraseSource are the\n  // custody posture reported without decrypting or requiring a passphrase.\n  const { walletPath: path, keyStorage, passphraseSource, warnings } = await provider.diagnostics();\n\n  const humanLines = [`Address: ${desc.address}`, `Key source: ${desc.credentialSource}`];\n  if (keyStorage !== undefined) humanLines.push(`Key storage: ${keyStorage}`);\n  if (passphraseSource !== undefined) humanLines.push(`Passphrase: ${passphraseSource}`);\n  humanLines.push(...warnings);\n\n  return {\n    data: {\n      address: desc.address,\n      provider: desc.provider,\n      credentialSource: desc.credentialSource,\n      policyEnforcement: desc.policyEnforcement,\n      ...(path !== undefined ? { walletPath: path } : {}),\n      ...(keyStorage !== undefined ? { keyStorage } : {}),\n      ...(passphraseSource !== undefined ? { passphraseSource } : {}),\n      warnings,\n    },\n    humanLines,\n  };\n}\n\nexport async function runWalletBalance(\n  ctx: CommandContext,\n  opts: ResolveWalletProviderOptions = {},\n): Promise<CommandResult> {\n  const provider = resolveWalletProvider(ctx, opts);\n  const desc = await describeWallet(provider);\n\n  const config = await loadRawConfig(ctx.dataDir);\n  const rpcUrl = resolveSettings({\n    config,\n    flags: { baseUrl: ctx.flags.baseUrl },\n    env: process.env,\n  }).rpcUrl.value;\n\n  let atomic: bigint;\n  try {\n    atomic = await getUsdcBalance(desc.address, rpcUrl);\n  } catch (err) {\n    throw new CliError('RPC_ERROR', `Could not read the USDC balance from ${rpcUrl}.`, {\n      fix: 'Check your network, or set a working RPC with `tenjin config set rpcUrl <url>`.',\n      cause: err,\n    });\n  }\n\n  const balance = toMoney(atomic.toString());\n  return {\n    data: { address: desc.address, balance },\n    humanLines: [`Balance: ${balance.usd} USDC on Base`],\n  };\n}\n\n/** create refuses to overwrite: keys are non-recoverable and may hold funds. */\nasync function refuseIfWalletExists(dir: string): Promise<void> {\n  if (!(await walletFileExists(dir))) return;\n  const path = walletPath(dir);\n  throw new CliError('WALLET_EXISTS', `A wallet already exists at ${path}.`, {\n    fix: `Keys are non-recoverable; move it aside first (e.g. \\`mv ${path} ${path}.bak\\`) to create a new one.`,\n  });\n}\n\nfunction custodyWarnings(): string[] {\n  const warnings: string[] = [];\n  if (hasEnvKey()) {\n    warnings.push('TENJIN_WALLET_KEY is set and shadows this file at runtime.');\n  }\n  if (isWindows) {\n    warnings.push('File permissions are not enforced on Windows; the key file is not restricted.');\n  }\n  return warnings;\n}\n\nfunction hasEnvKey(): boolean {\n  const envKey = process.env.TENJIN_WALLET_KEY;\n  return envKey !== undefined && envKey.length > 0;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,aAAa;AACtB,SAAS,YAAY;AAkBrB,IAAM,eAAe;AACrB,IAAM,cAAc;AACpB,IAAM,YAAY,QAAQ,aAAa;AAOvC,eAAsB,gBACpB,KACA,OAA4B,CAAC,GACL;AACxB,QAAM,EAAE,SAAS,YAAY,MAAM,OAAO,IAAI,MAAM,mBAAmB,IAAI,SAAS,IAAI;AAExF,QAAM,WAAW,gBAAgB;AACjC,SAAO;AAAA,IACL,MAAM;AAAA,MACJ;AAAA,MACA,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,mBAAmB;AAAA,MACnB,YAAY;AAAA,MACZ,kBAAkB;AAAA,MAClB;AAAA,IACF;AAAA,IACA,YAAY;AAAA,MACV,mBAAmB,OAAO;AAAA,MAC1B,cAAc,WAAW;AAAA,MACzB,eAAe,MAAM;AAAA,MACrB;AAAA,MACA,GAAG;AAAA,IACL;AAAA,EACF;AACF;AAeA,eAAe,mBACb,KACA,MAC4E;AAG5E,QAAM,MAAM,KAAK,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACjD,QAAM,WAAW,KAAK,KAAK,oBAAoB;AAC/C,MAAI;AACF,WAAO,MAAM,aAAa,UAAU,YAAY;AAC9C,YAAM,qBAAqB,GAAG;AAC9B,YAAM,EAAE,YAAY,OAAO,IAAI,MAAM,2BAA2B;AAAA,QAC9D,KAAK,QAAQ;AAAA,QACb;AAAA,QACA,GAAG,KAAK;AAAA,MACV,CAAC;AACD,YAAM,EAAE,SAAS,YAAY,KAAK,IAAI,MAAM,kBAAkB,KAAK,UAAU;AAC7E,aAAO,EAAE,SAAS,YAAY,MAAM,OAAO;AAAA,IAC7C,CAAC;AAAA,EACH,SAAS,KAAK;AAIZ,QAAI,eAAe,kBAAkB;AACnC,YAAM,IAAI,SAAS,YAAY,IAAI,SAAS;AAAA,QAC1C,KAAK,iDAAiD,QAAQ;AAAA,QAC9D,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,UAAM;AAAA,EACR;AACF;AAGA,SAAS,eAAe,QAAkC;AACxD,UAAQ,QAAQ;AAAA,IACd,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,EACX;AACF;AAEA,eAAsB,cACpB,KACA,OAAqC,CAAC,GACd;AACxB,QAAM,WAAW,sBAAsB,KAAK,IAAI;AAChD,QAAM,OAAO,MAAM,eAAe,QAAQ;AAK1C,QAAM,EAAE,YAAY,MAAM,YAAY,kBAAkB,SAAS,IAAI,MAAM,SAAS,YAAY;AAEhG,QAAM,aAAa,CAAC,YAAY,KAAK,OAAO,IAAI,eAAe,KAAK,gBAAgB,EAAE;AACtF,MAAI,eAAe,OAAW,YAAW,KAAK,gBAAgB,UAAU,EAAE;AAC1E,MAAI,qBAAqB,OAAW,YAAW,KAAK,eAAe,gBAAgB,EAAE;AACrF,aAAW,KAAK,GAAG,QAAQ;AAE3B,SAAO;AAAA,IACL,MAAM;AAAA,MACJ,SAAS,KAAK;AAAA,MACd,UAAU,KAAK;AAAA,MACf,kBAAkB,KAAK;AAAA,MACvB,mBAAmB,KAAK;AAAA,MACxB,GAAI,SAAS,SAAY,EAAE,YAAY,KAAK,IAAI,CAAC;AAAA,MACjD,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,MACjD,GAAI,qBAAqB,SAAY,EAAE,iBAAiB,IAAI,CAAC;AAAA,MAC7D;AAAA,IACF;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,iBACpB,KACA,OAAqC,CAAC,GACd;AACxB,QAAM,WAAW,sBAAsB,KAAK,IAAI;AAChD,QAAM,OAAO,MAAM,eAAe,QAAQ;AAE1C,QAAM,SAAS,MAAM,cAAc,IAAI,OAAO;AAC9C,QAAM,SAAS,gBAAgB;AAAA,IAC7B;AAAA,IACA,OAAO,EAAE,SAAS,IAAI,MAAM,QAAQ;AAAA,IACpC,KAAK,QAAQ;AAAA,EACf,CAAC,EAAE,OAAO;AAEV,MAAI;AACJ,MAAI;AACF,aAAS,MAAM,eAAe,KAAK,SAAS,MAAM;AAAA,EACpD,SAAS,KAAK;AACZ,UAAM,IAAI,SAAS,aAAa,wCAAwC,MAAM,KAAK;AAAA,MACjF,KAAK;AAAA,MACL,OAAO;AAAA,IACT,CAAC;AAAA,EACH;AAEA,QAAM,UAAU,QAAQ,OAAO,SAAS,CAAC;AACzC,SAAO;AAAA,IACL,MAAM,EAAE,SAAS,KAAK,SAAS,QAAQ;AAAA,IACvC,YAAY,CAAC,YAAY,QAAQ,GAAG,eAAe;AAAA,EACrD;AACF;AAGA,eAAe,qBAAqB,KAA4B;AAC9D,MAAI,CAAE,MAAM,iBAAiB,GAAG,EAAI;AACpC,QAAM,OAAO,WAAW,GAAG;AAC3B,QAAM,IAAI,SAAS,iBAAiB,8BAA8B,IAAI,KAAK;AAAA,IACzE,KAAK,4DAA4D,IAAI,IAAI,IAAI;AAAA,EAC/E,CAAC;AACH;AAEA,SAAS,kBAA4B;AACnC,QAAM,WAAqB,CAAC;AAC5B,MAAI,UAAU,GAAG;AACf,aAAS,KAAK,4DAA4D;AAAA,EAC5E;AACA,MAAI,WAAW;AACb,aAAS,KAAK,+EAA+E;AAAA,EAC/F;AACA,SAAO;AACT;AAEA,SAAS,YAAqB;AAC5B,QAAM,SAAS,QAAQ,IAAI;AAC3B,SAAO,WAAW,UAAa,OAAO,SAAS;AACjD;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tenjin-cli",
-  "version": "0.1.0-alpha.0",
+  "version": "0.1.0-alpha.1",
   "type": "module",
   "description": "Tenjin agent CLI for the x402 knowledge marketplace.",
   "license": "MIT",
@@ -42,6 +42,7 @@
     "format": "prettier --write .",
     "format:check": "prettier --check .",
     "check": "pnpm run build && pnpm run test",
+    "sync:skill": "node scripts/sync-skill.mjs",
     "pack-smoke": "bash scripts/pack-smoke.sh",
     "prepare": "git config core.hooksPath .githooks || true"
   },
@@ -52,6 +53,7 @@
     "commander": "^14.0.1",
     "eslint": "^9",
     "eslint-config-prettier": "^10",
+    "ox": "0.14.30",
     "prettier": "^3",
     "tsup": "^8.5.0",
     "typescript": "^6",

package/dist/chunk-376LHMK2.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/lib/wallet/store.ts"],"sourcesContent":["import { readFile, stat } from 'node:fs/promises';\nimport { z } from 'zod';\nimport { CliError } from '../errors';\nimport { writeFileAtomicExclusive } from '../atomic-json';\nimport { walletPath } from '../paths';\n\n/** A 0x-prefixed 32-byte hex private key (case-insensitive). */\nexport const PRIVATE_KEY_RE = /^0x[0-9a-f]{64}$/i;\nconst ADDRESS_RE = /^0x[0-9a-fA-F]{40}$/;\n\n/**\n * The persisted wallet record. The `provider` discriminator keeps the schema\n * from implying every future wallet embeds a raw key; `address` is stored EIP-55\n * checksummed so `show`/`doctor` never derive it from the key. Validated on read\n * (a corrupt file is WALLET_INVALID_KEY, never a silent partial parse).\n */\nexport const WalletRecordSchema = z.object({\n  schemaVersion: z.literal(1),\n  provider: z.literal('local'),\n  address: z.string().regex(ADDRESS_RE, 'expected a 0x-prefixed 20-byte address'),\n  privateKey: z.string().regex(PRIVATE_KEY_RE, 'expected a 0x-prefixed 32-byte hex key'),\n  createdAt: z.string(),\n});\nexport type WalletRecord = z.infer<typeof WalletRecordSchema>;\n\nexport async function walletFileExists(dir: string): Promise<boolean> {\n  return (await walletFileMode(dir)) !== null;\n}\n\n/** File permission bits (`mode & 0o777`), or null when the wallet file is absent. */\nexport async function walletFileMode(dir: string): Promise<number | null> {\n  try {\n    return (await stat(walletPath(dir))).mode & 0o777;\n  } catch (err) {\n    if (isNotFound(err)) return null;\n    throw err;\n  }\n}\n\n/** Read + validate the wallet record; null when absent, WALLET_INVALID_KEY when corrupt. */\nexport async function readWalletRecord(dir: string): Promise<WalletRecord | null> {\n  const path = walletPath(dir);\n  let raw: string;\n  try {\n    raw = await readFile(path, 'utf8');\n  } catch (err) {\n    if (isNotFound(err)) return null;\n    throw new CliError('WALLET_INVALID_KEY', `Could not read the wallet file at ${path}.`, {\n      fix: `Check file permissions on ${path}.`,\n      cause: err,\n    });\n  }\n  let json: unknown;\n  try {\n    json = JSON.parse(raw);\n  } catch (err) {\n    throw new CliError('WALLET_INVALID_KEY', `The wallet file at ${path} is not valid JSON.`, {\n      fix: `Move ${path} aside, then run \\`tenjin wallet create\\` or \\`tenjin wallet import\\`.`,\n      cause: err,\n    });\n  }\n  const parsed = WalletRecordSchema.safeParse(json);\n  if (!parsed.success) {\n    throw new CliError(\n      'WALLET_INVALID_KEY',\n      `The wallet file at ${path} is not a valid wallet record.`,\n      {\n        fix: `Move ${path} aside, then run \\`tenjin wallet create\\` or \\`tenjin wallet import\\`.`,\n        details: parsed.error.issues,\n      },\n    );\n  }\n  return parsed.data;\n}\n\n/**\n * Persist a validated record at 0600 in a 0700 dir, NO-CLOBBER. The exclusive\n * write — not an earlier existence check — is the authority: two concurrent\n * `create`/`import` runs can both pass a pre-check, but only one can win the\n * atomic commit; the loser surfaces as WALLET_EXISTS instead of silently\n * overwriting (and losing) a non-recoverable key.\n */\nexport async function writeWalletRecord(dir: string, record: WalletRecord): Promise<void> {\n  const validated = WalletRecordSchema.parse(record);\n  const path = walletPath(dir);\n  try {\n    await writeFileAtomicExclusive(path, `${JSON.stringify(validated, null, 2)}\\n`, {\n      mode: 0o600,\n      dirMode: 0o700,\n    });\n  } catch (err) {\n    if (hasCode(err, 'EEXIST')) {\n      throw new CliError('WALLET_EXISTS', `A wallet already exists at ${path}.`, {\n        fix: `Keys are non-recoverable; move it aside first (e.g. \\`mv ${path} ${path}.bak\\`) to create a new one.`,\n        cause: err,\n      });\n    }\n    throw err;\n  }\n}\n\nfunction isNotFound(err: unknown): boolean {\n  return hasCode(err, 'ENOENT');\n}\n\nfunction hasCode(err: unknown, code: string): boolean {\n  return (\n    typeof err === 'object' &&\n    err !== null &&\n    'code' in err &&\n    (err as { code?: unknown }).code === code\n  );\n}\n"],"mappings":";;;;;;;;;;;AAAA,SAAS,UAAU,YAAY;AAOxB,IAAM,iBAAiB;AAC9B,IAAM,aAAa;AAQZ,IAAM,qBAAqB,iBAAE,OAAO;AAAA,EACzC,eAAe,iBAAE,QAAQ,CAAC;AAAA,EAC1B,UAAU,iBAAE,QAAQ,OAAO;AAAA,EAC3B,SAAS,iBAAE,OAAO,EAAE,MAAM,YAAY,wCAAwC;AAAA,EAC9E,YAAY,iBAAE,OAAO,EAAE,MAAM,gBAAgB,wCAAwC;AAAA,EACrF,WAAW,iBAAE,OAAO;AACtB,CAAC;AAGD,eAAsB,iBAAiB,KAA+B;AACpE,SAAQ,MAAM,eAAe,GAAG,MAAO;AACzC;AAGA,eAAsB,eAAe,KAAqC;AACxE,MAAI;AACF,YAAQ,MAAM,KAAK,WAAW,GAAG,CAAC,GAAG,OAAO;AAAA,EAC9C,SAAS,KAAK;AACZ,QAAI,WAAW,GAAG,EAAG,QAAO;AAC5B,UAAM;AAAA,EACR;AACF;AAGA,eAAsB,iBAAiB,KAA2C;AAChF,QAAM,OAAO,WAAW,GAAG;AAC3B,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,SAAS,MAAM,MAAM;AAAA,EACnC,SAAS,KAAK;AACZ,QAAI,WAAW,GAAG,EAAG,QAAO;AAC5B,UAAM,IAAI,SAAS,sBAAsB,qCAAqC,IAAI,KAAK;AAAA,MACrF,KAAK,6BAA6B,IAAI;AAAA,MACtC,OAAO;AAAA,IACT,CAAC;AAAA,EACH;AACA,MAAI;AACJ,MAAI;AACF,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,SAAS,KAAK;AACZ,UAAM,IAAI,SAAS,sBAAsB,sBAAsB,IAAI,uBAAuB;AAAA,MACxF,KAAK,QAAQ,IAAI;AAAA,MACjB,OAAO;AAAA,IACT,CAAC;AAAA,EACH;AACA,QAAM,SAAS,mBAAmB,UAAU,IAAI;AAChD,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI;AAAA,MACR;AAAA,MACA,sBAAsB,IAAI;AAAA,MAC1B;AAAA,QACE,KAAK,QAAQ,IAAI;AAAA,QACjB,SAAS,OAAO,MAAM;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AACA,SAAO,OAAO;AAChB;AASA,eAAsB,kBAAkB,KAAa,QAAqC;AACxF,QAAM,YAAY,mBAAmB,MAAM,MAAM;AACjD,QAAM,OAAO,WAAW,GAAG;AAC3B,MAAI;AACF,UAAM,yBAAyB,MAAM,GAAG,KAAK,UAAU,WAAW,MAAM,CAAC,CAAC;AAAA,GAAM;AAAA,MAC9E,MAAM;AAAA,MACN,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,QAAQ,KAAK,QAAQ,GAAG;AAC1B,YAAM,IAAI,SAAS,iBAAiB,8BAA8B,IAAI,KAAK;AAAA,QACzE,KAAK,4DAA4D,IAAI,IAAI,IAAI;AAAA,QAC7E,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,UAAM;AAAA,EACR;AACF;AAEA,SAAS,WAAW,KAAuB;AACzC,SAAO,QAAQ,KAAK,QAAQ;AAC9B;AAEA,SAAS,QAAQ,KAAc,MAAuB;AACpD,SACE,OAAO,QAAQ,YACf,QAAQ,QACR,UAAU,OACT,IAA2B,SAAS;AAEzC;","names":[]}