vibeiao 0.1.3 → 0.1.4

package/README.md

@@ -13,7 +13,7 @@ npx vibeiao@latest list --type agent --limit 10
 Defaults used by the one-liners:
 
 - `human`: reads `agent.json` if present, writes `handoff.json`
-- `agent`: prefers `handoff.json`, then `agent.json`, and `~/.config/solana/id.json` for keypair
+- `agent`: prefers `handoff.json`, then `agent.json`; uses `~/.config/solana/id.json` if present, otherwise auto-generates it on first run
 
 ## Memory Layout (Required)
 

package/package.json

@@ -2,7 +2,7 @@
   "name": "vibeiao",
   "private": false,
   "type": "module",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "VIBEIAO CLI for agent onboarding and multisig revenue setup.",
   "bin": {
     "vibeiao": "src/index.js"

package/src/index.js

@@ -356,6 +356,40 @@ const loadKeypair = (inputValue) => {
   return Keypair.fromSecretKey(bs58.decode(trimmed));
 };
 
+const writeKeypairFile = (keypair, filePath) => {
+  const expanded = expandTildePath(filePath);
+  const resolved = path.resolve(expanded);
+  const parent = path.dirname(resolved);
+  fs.mkdirSync(parent, { recursive: true });
+  try {
+    fs.chmodSync(parent, 0o700);
+  } catch {
+    // Best-effort hardening for environments that allow permission changes.
+  }
+  const payload = JSON.stringify(Array.from(keypair.secretKey));
+  fs.writeFileSync(resolved, `${payload}\n`, { mode: 0o600 });
+  try {
+    fs.chmodSync(resolved, 0o600);
+  } catch {
+    // Ignore on filesystems that do not support POSIX mode bits.
+  }
+  return resolved;
+};
+
+const resolveAgentKeypair = (flags) => {
+  const explicitInput = flags.keypair || process.env.VIBEIAO_KEYPAIR || null;
+  if (explicitInput) {
+    return { keypair: loadKeypair(explicitInput), generated: false, path: null };
+  }
+  const defaultKeypairPath = findExistingFile(DEFAULT_KEYPAIR_PATH);
+  if (defaultKeypairPath) {
+    return { keypair: loadKeypair(defaultKeypairPath), generated: false, path: defaultKeypairPath };
+  }
+  const generated = Keypair.generate();
+  const outputPath = writeKeypairFile(generated, DEFAULT_KEYPAIR_PATH);
+  return { keypair: generated, generated: true, path: outputPath };
+};
+
 const parseMembers = (flags) => {
   if (flags['members-file']) {
     const entries = readJson(path.resolve(flags['members-file']));
@@ -984,13 +1018,10 @@ const handleAgent = async (flags) => {
   const listing = handoff?.listing
     ? normalizeListing(handoff.listing)
     : await resolveListing(listingFlags, { interactive: false });
-  const defaultKeypairPath = findExistingFile(DEFAULT_KEYPAIR_PATH);
-  const keypairInput = flags.keypair || process.env.VIBEIAO_KEYPAIR || defaultKeypairPath || null;
-  const keypair = loadKeypair(keypairInput);
-  if (!keypair) {
-    throw new Error(
-      `missing_keypair (tried --keypair, VIBEIAO_KEYPAIR, and default ${DEFAULT_KEYPAIR_PATH})`
-    );
+  const { keypair, generated: keypairGenerated, path: keypairPath } = resolveAgentKeypair(flags);
+  if (keypairGenerated && keypairPath) {
+    console.log(`🔐 No keypair found. Generated agent keypair at ${keypairPath}`);
+    console.log('   Keep this file safe. It controls your on-chain agent wallet.');
   }
   const quotedListing = await applyPriceQuote(listing, flags);
   validateListing(quotedListing);
@@ -1485,6 +1516,7 @@ const main = async () => {
 Examples:
   vibeiao human
   vibeiao agent
+  vibeiao agent    # auto-creates ~/.config/solana/id.json if missing
   vibeiao human --owner-keypair ~/.config/solana/id.json --output handoff.json --memory-root memory
   vibeiao agent --keypair ~/.config/solana/id.json --handoff handoff.json --memory-root memory
   vibeiao list --type agent --limit 10