Ci/ts workflow

.github/workflows/ts-ci.yml

@@ -0,0 +1,96 @@
+name: TypeScript CI
+
+on:
+  pull_request:
+    branches:
+      - develop
+  push:
+    branches:
+      - develop
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ts-ci-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  quality:
+    name: Quality / Node ${{ matrix.node }}
+    runs-on: ubuntu-24.04
+    timeout-minutes: 20
+
+    strategy:
+      fail-fast: false
+      matrix:
+        node:
+          - "22"
+          - "24"
+
+    defaults:
+      run:
+        working-directory: ts
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: ${{ matrix.node }}
+          cache: npm
+          cache-dependency-path: ts/package-lock.json
+
+      - name: Install locked dependencies
+        run: npm ci
+
+      - name: Check architecture boundaries
+        run: npm run depcruise
+
+      - name: Type-check
+        run: npm run typecheck
+
+      - name: Run tests
+        run: npm test
+
+      - name: Build npm bundle
+        run: npm run build
+
+      - name: Validate npm package contents
+        run: npm pack --dry-run
+
+  standalone:
+    name: Standalone / Linux x64
+    needs: quality
+    runs-on: ubuntu-24.04
+    timeout-minutes: 15
+
+    defaults:
+      run:
+        working-directory: ts
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: "24"
+          cache: npm
+          cache-dependency-path: ts/package-lock.json
+
+      - name: Install locked dependencies
+        run: npm ci
+
+      - name: Build standalone executable
+        run: >-
+          npm run build:standalone --
+          --target bun-linux-x64-baseline
+          --outfile standalone/wallet-cli
+
+      - name: Verify executable and Ledger addon
+        run: node scripts/verify-standalone.mjs standalone/wallet-cli

.github/workflows/ts-standalone-release.yml

@@ -0,0 +1,217 @@
+name: TypeScript Standalone Release
+
+on:
+  push:
+    tags:
+      - "ts-v*"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+env:
+  NODE_VERSION: "20"
+
+jobs:
+  quality:
+    name: TypeScript quality gates
+    runs-on: ubuntu-24.04
+    defaults:
+      run:
+        working-directory: ts
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: npm
+          cache-dependency-path: ts/package-lock.json
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Validate release tag
+        if: startsWith(github.ref, 'refs/tags/ts-v')
+        shell: bash
+        run: |
+          set -euo pipefail
+          package_version="$(node -p "require('./package.json').version")"
+          test "${GITHUB_REF_NAME}" = "ts-v${package_version}"
+
+      - name: Check architecture boundaries
+        run: npm run depcruise
+
+      - name: Type-check
+        run: npm run typecheck
+
+      - name: Test
+        run: npm test
+
+      - name: Build npm bundle
+        run: npm run build
+
+  binaries:
+    name: ${{ matrix.asset }}
+    needs: quality
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - os: ubuntu-22.04
+            target: bun-linux-x64-baseline
+            asset: linux-x64
+            executable: wallet-cli
+            archive: tar.gz
+          - os: ubuntu-24.04-arm
+            target: bun-linux-arm64
+            asset: linux-arm64
+            executable: wallet-cli
+            archive: tar.gz
+          - os: macos-15-intel
+            target: bun-darwin-x64
+            asset: macos-x64
+            executable: wallet-cli
+            archive: tar.gz
+          - os: macos-15
+            target: bun-darwin-arm64
+            asset: macos-arm64
+            executable: wallet-cli
+            archive: tar.gz
+          - os: windows-2022
+            target: bun-windows-x64-baseline
+            asset: windows-x64
+            executable: wallet-cli.exe
+            archive: zip
+    runs-on: ${{ matrix.os }}
+    defaults:
+      run:
+        working-directory: ts
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: npm
+          cache-dependency-path: ts/package-lock.json
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build standalone executable
+        run: >-
+          npm run build:standalone --
+          --target ${{ matrix.target }}
+          --outfile standalone/${{ matrix.executable }}
+
+      - name: Verify executable and embedded Ledger addon
+        run: node scripts/verify-standalone.mjs standalone/${{ matrix.executable }}
+
+      - name: Verify macOS code signature
+        if: runner.os == 'macOS'
+        run: codesign --verify --verbose standalone/${{ matrix.executable }}
+
+      - name: Package Unix archive
+        if: matrix.archive == 'tar.gz'
+        shell: bash
+        run: |
+          set -euo pipefail
+          version="$(node -p "require('./package.json').version")"
+          package="wallet-cli-${version}-${{ matrix.asset }}"
+          mkdir -p "release-assets/${package}"
+          cp "standalone/${{ matrix.executable }}" "release-assets/${package}/wallet-cli"
+          cp LICENSE "release-assets/${package}/LICENSE"
+          tar -C release-assets -czf "release-assets/${package}.tar.gz" "${package}"
+          rm -r "release-assets/${package}"
+
+      - name: Package Windows archive
+        if: matrix.archive == 'zip'
+        shell: pwsh
+        run: |
+          $ErrorActionPreference = "Stop"
+          $version = node -p "require('./package.json').version"
+          $package = "wallet-cli-$version-${{ matrix.asset }}"
+          New-Item -ItemType Directory -Force "release-assets/$package" | Out-Null
+          Copy-Item "standalone/${{ matrix.executable }}" "release-assets/$package/wallet-cli.exe"
+          Copy-Item "LICENSE" "release-assets/$package/LICENSE"
+          Compress-Archive -Path "release-assets/$package" -DestinationPath "release-assets/$package.zip"
+          Remove-Item -Recurse "release-assets/$package"
+
+      - name: Upload release candidate
+        uses: actions/upload-artifact@v4
+        with:
+          name: wallet-cli-${{ matrix.asset }}
+          path: ts/release-assets/*
+          if-no-files-found: error
+
+  release:
+    name: Publish GitHub Release
+    if: startsWith(github.ref, 'refs/tags/ts-v')
+    needs: binaries
+    runs-on: ubuntu-24.04
+    permissions:
+      artifact-metadata: write
+      attestations: write
+      contents: write
+      id-token: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Refuse an existing versioned release
+        env:
+          GH_TOKEN: ${{ github.token }}
+        shell: bash
+        run: |
+          set -euo pipefail
+          if gh release view "${GITHUB_REF_NAME}" >/dev/null 2>&1; then
+            echo "::error::release ${GITHUB_REF_NAME} already exists; versioned assets are immutable"
+            exit 1
+          fi
+
+      - name: Download binaries
+        uses: actions/download-artifact@v4
+        with:
+          pattern: wallet-cli-*
+          path: release-assets
+          merge-multiple: true
+
+      - name: Create checksums
+        shell: bash
+        run: |
+          set -euo pipefail
+          cd release-assets
+          sha256sum wallet-cli-* > SHA256SUMS.txt
+
+      - name: Attest release archives
+        uses: actions/attest@v4
+        with:
+          subject-checksums: release-assets/SHA256SUMS.txt
+
+      - name: Publish release assets
+        env:
+          GH_TOKEN: ${{ github.token }}
+        shell: bash
+        run: |
+          set -euo pipefail
+          version="${GITHUB_REF_NAME#ts-v}"
+          previous_tag="$(git tag --list 'ts-v*' --sort=-version:refname | grep -Fvx "${GITHUB_REF_NAME}" | head -n 1 || true)"
+          notes_args=(--generate-notes)
+          if [ -n "${previous_tag}" ]; then
+            notes_args+=(--notes-start-tag "${previous_tag}")
+          fi
+          gh release create "${GITHUB_REF_NAME}" release-assets/* \
+            --verify-tag \
+            --latest=false \
+            "${notes_args[@]}" \
+            --title "wallet-cli TypeScript v${version}"

CLAUDE.md

@@ -25,6 +25,8 @@ are used only for secret input (create / import / backup / delete). **All `ts/`
 cd ts
 npm ci                 # install
 npm run build          # bundle to dist/ via tsup (bin: wallet-cli -> dist/index.js)
+npm run build:standalone -- --outfile standalone/wallet-cli
+                       # Bun (pinned devDependency) standalone executable for the native OS/CPU
 npm run dev -- <args>  # run from source via tsx (e.g. npm run dev -- create --label main)
 npm test               # vitest (tests are co-located as *.test.ts)
 npm run typecheck      # tsc --noEmit

README.md

@@ -24,8 +24,8 @@ Both manage the same kind of wallet on the same networks — your address is ide
 |                        | [**Java**](java/README.md) — the original                                                                                                  | [**TypeScript**](ts/README.md) — agent-first rewrite                                                                                                              |
 | ---------------------- | ------------------------------------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | **What it is**         | The mature, full-feature reference CLI.                                                                                                    | A newer rewrite focused on programmatic integration.                                                                                                              |
-| **Runtime**            | JVM — built with Gradle, run as a `.jar`. Uses the [Trident](https://github.com/tronprotocol/trident) SDK.                                 | [Node.js](https://nodejs.org) **20+**.                                                                                                                            |
-| **Install**            | `git clone` + `./gradlew build` (see [Setup](java/README.md#setup))                                                                        | `npm install -g @tron-walletcli/wallet-cli`                                                                                                                       |
+| **Runtime**            | JVM — built with Gradle, run as a `.jar`. Uses the [Trident](https://github.com/tronprotocol/trident) SDK.                                 | Standalone executable, or [Node.js](https://nodejs.org) **20+** for the npm package.                                                                              |
+| **Install**            | `git clone` + `./gradlew build` (see [Setup](java/README.md#setup))                                                                        | Download from [GitHub Releases](https://github.com/tronprotocol/wallet-cli/releases), or `npm install -g @tron-walletcli/wallet-cli`.                              |
 | **How you drive it**   | An **interactive prompt only** — start it, then type commands at `>`.                                                                      | **One-shot subcommands** — `wallet-cli <command>` from your shell. Interactive prompts only for secret input.                                                     |
 | **Command style**      | PascalCase verbs: `RegisterWallet`, `SendCoin`, `GetBalance`. Amounts in **SUN** (1 TRX = 1,000,000 SUN).                                  | Noun-verb subcommands: `create`, `tx send`, `account balance`, with `--flags`.                                                                                    |
 | **Output for scripts** | Human-readable text.                                                                                                                       | Stable JSON via `-o json` ([`wallet-cli.result.v1`](ts/docs/machine-interface.md)) + fixed exit codes (`0`/`1`/`2`).                                              |
@@ -53,7 +53,7 @@ Full setup (config.conf, connecting to a node), the complete A–Z command list,
 
 ## TypeScript — get a taste
 
-Install from npm, then run subcommands directly from your shell:
+Download the standalone executable from [GitHub Releases](https://github.com/tronprotocol/wallet-cli/releases), or install from npm when Node.js 20+ is already available. Then run subcommands directly from your shell:
 
 ```console
 $ npm install -g @tron-walletcli/wallet-cli
@@ -73,4 +73,4 @@ Every command has a reference page, and the JSON contract, exit codes, and agent
 
 - **Scripting, CI, or building an AI agent?** → the [TypeScript version](ts/README.md) — the JSON envelope and deterministic exit codes exist for exactly this.
 - **Working interactively and want the complete TRON toolkit** — GasFree, TRC10 issuance, on-chain DEX/governance, or multi-sig? → the [Java version](java/README.md).
-- **Just sending TRX/tokens or staking from your own machine?** → either works; the TypeScript CLI is the lighter install (`npm install -g`, no build step).
+- **Just sending TRX/tokens or staking from your own machine?** → either works; the TypeScript CLI can run from a downloaded executable with no runtime installation.

java/src/main/java/org/tron/common/utils/Utils.java

@@ -138,7 +138,7 @@ public class Utils {
 
   public static final int MIN_LENGTH = 2;
   public static final int MAX_LENGTH = 14;
-  public static final String VERSION = " v4.10.0";
+  public static final String VERSION = " v4.11.0";
   public static final String TRANSFER_METHOD_ID = "a9059cbb";
 
   private static SecureRandom random = new SecureRandom();

ts/.gitignore

@@ -1,7 +1,9 @@
 node_modules/
 dist/
+/standalone/
+/release-assets/
 *.log
 .wallet-cli/
 .env
 .private/
-docs/superpowers
+docs/superpowers