feat(staking): browser-wallet signing for validator-join and wizard

README.md

@@ -478,6 +478,7 @@ COMMON OPTIONS (all commands):
 OPTIONS (validator-join):
  --amount <amount> Amount to stake (in wei or with 'gen' suffix)
  --operator <address> Operator address (defaults to signer)
+ --wallet <mode> 'keystore' (default) or 'browser' (sign in MetaMask)
 
 OPTIONS (delegator-join):
  --validator <address> Validator address to delegate to
@@ -497,6 +498,14 @@ EXAMPLES:
  # Join as validator with 42000 GEN
  genlayer staking validator-join --amount 42000gen
 
+ # Sign the validator-join with a browser wallet (MetaMask) instead of a keystore.
+ # The CLI serves a page on 127.0.0.1 and opens it; connect + confirm in the wallet.
+ # Remote/SSH: forward the printed port first (ssh -L <port>:127.0.0.1:<port> ...).
+ genlayer staking validator-join --amount 42000gen --wallet browser --network testnet-bradbury
+
+ # The wizard can also use a browser wallet as the owner (operator keystore is still generated locally):
+ genlayer staking wizard --wallet browser
+
  # Join as delegator with 42 GEN
  genlayer staking delegator-join --validator 0x... --amount 42gen
 

docs/api-references/_meta.json

@@ -10,5 +10,6 @@
  "estimate-fees": "estimate-fees",
  "finalize": "finalize",
  "finalize-batch": "finalize-batch",
- "vesting": "vesting"
+ "vesting": "vesting",
+ "wallet": "wallet"
 }

docs/api-references/contracts/deploy.mdx

@@ -21,4 +21,5 @@ Deploy intelligent contracts
 | | --fee-value <wei> | Fee deposit value to send with the transaction | No | |
 | | --valid-until <unixTimestamp> | Unix timestamp after which the transaction is invalid | No | |
 | | --args <args...> | Contract arguments. Supported types: | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/contracts/write.mdx

@@ -25,4 +25,5 @@ Sends a transaction to a contract method that modifies the state
 | | --fee-value <wei> | Fee deposit value to send with the transaction | No | |
 | | --valid-until <unixTimestamp> | Unix timestamp after which the transaction is invalid | No | |
 | | --args <args...> | Contract arguments. Supported types: | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/finalize-batch.mdx

@@ -17,4 +17,5 @@ Finalize a batch of idle transactions in a single call (public call)
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/finalize.mdx

@@ -17,4 +17,5 @@ Finalize a transaction that is ready to be finalized (public call)
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/index.mdx

@@ -33,6 +33,7 @@ Version: `0.39.1`
 - `genlayer finalize-batch` — Finalize a batch of idle transactions in a single call (public call)
 - `genlayer staking` — Staking operations for validators and delegators
 - `genlayer vesting` — Vesting operations for beneficiaries
+- `genlayer wallet` — Manage the persistent browser-wallet (MetaMask) signing session
 
 ---
 

docs/api-references/staking/staking/delegator-claim.mdx

@@ -23,4 +23,5 @@ Claim delegator withdrawals after unbonding period
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/delegator-exit.mdx

@@ -23,4 +23,5 @@ Exit as a delegator by withdrawing shares from a validator
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/delegator-join.mdx

@@ -23,4 +23,5 @@ Join as a delegator by staking with a validator
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/prime-all.mdx

@@ -17,4 +17,5 @@ Prime all validators that need priming
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/set-identity.mdx

@@ -30,4 +30,5 @@ Set validator identity metadata (moniker, website, socials, etc.)
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/set-operator.mdx

@@ -23,4 +23,5 @@ Change the operator address for a validator wallet
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-claim.mdx

@@ -21,4 +21,5 @@ Claim validator withdrawals after unbonding period
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-deposit.mdx

@@ -22,4 +22,5 @@ Make an additional deposit to a validator wallet
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-exit.mdx

@@ -22,4 +22,5 @@ Exit as a validator by withdrawing shares
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-join.mdx

@@ -19,4 +19,5 @@ Join as a validator by staking tokens
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-prime.mdx

@@ -22,4 +22,5 @@ Prime a validator to prepare their stake record for the next epoch
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/wizard.mdx

@@ -17,4 +17,5 @@ Interactive wizard to become a validator
 | | --skip-identity | Skip identity setup step | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/transactions/appeal.mdx

@@ -18,4 +18,5 @@ Appeal a transaction by its hash
 | --- | --- | --- | :---: | --- |
 | | --bond <amount> | Appeal bond amount (e.g. 500gen, 0.5gen). Auto-calculated if omitted | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/claim.mdx

@@ -24,4 +24,5 @@ Claim vesting delegation withdrawals after unbonding period
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/delegate.mdx

@@ -25,4 +25,5 @@ Delegate vesting-held tokens to a validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/undelegate.mdx

@@ -24,4 +24,5 @@ Undelegate all vesting delegation shares from a validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/claim.mdx

@@ -16,12 +16,13 @@ Claim vesting validator withdrawals after unbonding period
 
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/create.mdx

@@ -25,4 +25,5 @@ Create a vesting-backed validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/deposit.mdx

@@ -17,12 +17,13 @@ Deposit more vesting-held tokens to a validator wallet
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --amount <amount> | Amount to deposit (in wei or with 'eth'/'gen' suffix) | No | |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/exit.mdx

@@ -17,12 +17,13 @@ Exit vesting validator self-stake by withdrawing shares
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --shares <shares> | Number of shares to withdraw | No | |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/join.mdx

@@ -25,4 +25,5 @@ Create a vesting-backed validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

README.md

@@ -478,6 +478,7 @@ COMMON OPTIONS (all commands):
 OPTIONS (validator-join):
  --amount <amount> Amount to stake (in wei or with 'gen' suffix)
  --operator <address> Operator address (defaults to signer)
+ --wallet <mode> 'keystore' (default) or 'browser' (sign in MetaMask)
 
 OPTIONS (delegator-join):
  --validator <address> Validator address to delegate to
@@ -497,6 +498,14 @@ EXAMPLES:
  # Join as validator with 42000 GEN
  genlayer staking validator-join --amount 42000gen
 
+ # Sign the validator-join with a browser wallet (MetaMask) instead of a keystore.
+ # The CLI serves a page on 127.0.0.1 and opens it; connect + confirm in the wallet.
+ # Remote/SSH: forward the printed port first (ssh -L <port>:127.0.0.1:<port> ...).
+ genlayer staking validator-join --amount 42000gen --wallet browser --network testnet-bradbury
+
+ # The wizard can also use a browser wallet as the owner (operator keystore is still generated locally):
+ genlayer staking wizard --wallet browser
+
  # Join as delegator with 42 GEN
  genlayer staking delegator-join --validator 0x... --amount 42gen
 

docs/api-references/_meta.json

@@ -10,5 +10,6 @@
  "estimate-fees": "estimate-fees",
  "finalize": "finalize",
  "finalize-batch": "finalize-batch",
- "vesting": "vesting"
+ "vesting": "vesting",
+ "wallet": "wallet"
 }

docs/api-references/contracts/deploy.mdx

@@ -21,4 +21,5 @@ Deploy intelligent contracts
 | | --fee-value <wei> | Fee deposit value to send with the transaction | No | |
 | | --valid-until <unixTimestamp> | Unix timestamp after which the transaction is invalid | No | |
 | | --args <args...> | Contract arguments. Supported types: | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/contracts/write.mdx

@@ -25,4 +25,5 @@ Sends a transaction to a contract method that modifies the state
 | | --fee-value <wei> | Fee deposit value to send with the transaction | No | |
 | | --valid-until <unixTimestamp> | Unix timestamp after which the transaction is invalid | No | |
 | | --args <args...> | Contract arguments. Supported types: | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/finalize-batch.mdx

@@ -17,4 +17,5 @@ Finalize a batch of idle transactions in a single call (public call)
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/finalize.mdx

@@ -17,4 +17,5 @@ Finalize a transaction that is ready to be finalized (public call)
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/index.mdx

@@ -33,6 +33,7 @@ Version: `0.39.1`
 - `genlayer finalize-batch` — Finalize a batch of idle transactions in a single call (public call)
 - `genlayer staking` — Staking operations for validators and delegators
 - `genlayer vesting` — Vesting operations for beneficiaries
+- `genlayer wallet` — Manage the persistent browser-wallet (MetaMask) signing session
 
 ---
 

docs/api-references/staking/staking/delegator-claim.mdx

@@ -23,4 +23,5 @@ Claim delegator withdrawals after unbonding period
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/delegator-exit.mdx

@@ -23,4 +23,5 @@ Exit as a delegator by withdrawing shares from a validator
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/delegator-join.mdx

@@ -23,4 +23,5 @@ Join as a delegator by staking with a validator
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/prime-all.mdx

@@ -17,4 +17,5 @@ Prime all validators that need priming
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/set-identity.mdx

@@ -30,4 +30,5 @@ Set validator identity metadata (moniker, website, socials, etc.)
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/set-operator.mdx

@@ -23,4 +23,5 @@ Change the operator address for a validator wallet
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-claim.mdx

@@ -21,4 +21,5 @@ Claim validator withdrawals after unbonding period
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-deposit.mdx

@@ -22,4 +22,5 @@ Make an additional deposit to a validator wallet
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-exit.mdx

@@ -22,4 +22,5 @@ Exit as a validator by withdrawing shares
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-join.mdx

@@ -19,4 +19,5 @@ Join as a validator by staking tokens
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-prime.mdx

@@ -22,4 +22,5 @@ Prime a validator to prepare their stake record for the next epoch
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/wizard.mdx

@@ -17,4 +17,5 @@ Interactive wizard to become a validator
 | | --skip-identity | Skip identity setup step | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/transactions/appeal.mdx

@@ -18,4 +18,5 @@ Appeal a transaction by its hash
 | --- | --- | --- | :---: | --- |
 | | --bond <amount> | Appeal bond amount (e.g. 500gen, 0.5gen). Auto-calculated if omitted | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/claim.mdx

@@ -24,4 +24,5 @@ Claim vesting delegation withdrawals after unbonding period
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/delegate.mdx

@@ -25,4 +25,5 @@ Delegate vesting-held tokens to a validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/undelegate.mdx

@@ -24,4 +24,5 @@ Undelegate all vesting delegation shares from a validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/claim.mdx

@@ -16,12 +16,13 @@ Claim vesting validator withdrawals after unbonding period
 
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/create.mdx

@@ -25,4 +25,5 @@ Create a vesting-backed validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/deposit.mdx

@@ -17,12 +17,13 @@ Deposit more vesting-held tokens to a validator wallet
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --amount <amount> | Amount to deposit (in wei or with 'eth'/'gen' suffix) | No | |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/exit.mdx

@@ -17,12 +17,13 @@ Exit vesting validator self-stake by withdrawing shares
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --shares <shares> | Number of shares to withdraw | No | |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/join.mdx

@@ -25,4 +25,5 @@ Create a vesting-backed validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

README.md

@@ -478,6 +478,7 @@ COMMON OPTIONS (all commands):
 OPTIONS (validator-join):
  --amount <amount> Amount to stake (in wei or with 'gen' suffix)
  --operator <address> Operator address (defaults to signer)
+ --wallet <mode> 'keystore' (default) or 'browser' (sign in MetaMask)
 
 OPTIONS (delegator-join):
  --validator <address> Validator address to delegate to
@@ -497,6 +498,14 @@ EXAMPLES:
  # Join as validator with 42000 GEN
  genlayer staking validator-join --amount 42000gen
 
+ # Sign the validator-join with a browser wallet (MetaMask) instead of a keystore.
+ # The CLI serves a page on 127.0.0.1 and opens it; connect + confirm in the wallet.
+ # Remote/SSH: forward the printed port first (ssh -L <port>:127.0.0.1:<port> ...).
+ genlayer staking validator-join --amount 42000gen --wallet browser --network testnet-bradbury
+
+ # The wizard can also use a browser wallet as the owner (operator keystore is still generated locally):
+ genlayer staking wizard --wallet browser
+
  # Join as delegator with 42 GEN
  genlayer staking delegator-join --validator 0x... --amount 42gen
 

docs/api-references/_meta.json

@@ -10,5 +10,6 @@
  "estimate-fees": "estimate-fees",
  "finalize": "finalize",
  "finalize-batch": "finalize-batch",
- "vesting": "vesting"
+ "vesting": "vesting",
+ "wallet": "wallet"
 }

docs/api-references/contracts/deploy.mdx

@@ -21,4 +21,5 @@ Deploy intelligent contracts
 | | --fee-value <wei> | Fee deposit value to send with the transaction | No | |
 | | --valid-until <unixTimestamp> | Unix timestamp after which the transaction is invalid | No | |
 | | --args <args...> | Contract arguments. Supported types: | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/contracts/write.mdx

@@ -25,4 +25,5 @@ Sends a transaction to a contract method that modifies the state
 | | --fee-value <wei> | Fee deposit value to send with the transaction | No | |
 | | --valid-until <unixTimestamp> | Unix timestamp after which the transaction is invalid | No | |
 | | --args <args...> | Contract arguments. Supported types: | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/finalize-batch.mdx

@@ -17,4 +17,5 @@ Finalize a batch of idle transactions in a single call (public call)
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/finalize.mdx

@@ -17,4 +17,5 @@ Finalize a transaction that is ready to be finalized (public call)
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/index.mdx

@@ -33,6 +33,7 @@ Version: `0.39.1`
 - `genlayer finalize-batch` — Finalize a batch of idle transactions in a single call (public call)
 - `genlayer staking` — Staking operations for validators and delegators
 - `genlayer vesting` — Vesting operations for beneficiaries
+- `genlayer wallet` — Manage the persistent browser-wallet (MetaMask) signing session
 
 ---
 

docs/api-references/staking/staking/delegator-claim.mdx

@@ -23,4 +23,5 @@ Claim delegator withdrawals after unbonding period
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/delegator-exit.mdx

@@ -23,4 +23,5 @@ Exit as a delegator by withdrawing shares from a validator
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/delegator-join.mdx

@@ -23,4 +23,5 @@ Join as a delegator by staking with a validator
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/prime-all.mdx

@@ -17,4 +17,5 @@ Prime all validators that need priming
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/set-identity.mdx

@@ -30,4 +30,5 @@ Set validator identity metadata (moniker, website, socials, etc.)
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/set-operator.mdx

@@ -23,4 +23,5 @@ Change the operator address for a validator wallet
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-claim.mdx

@@ -21,4 +21,5 @@ Claim validator withdrawals after unbonding period
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-deposit.mdx

@@ -22,4 +22,5 @@ Make an additional deposit to a validator wallet
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-exit.mdx

@@ -22,4 +22,5 @@ Exit as a validator by withdrawing shares
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-join.mdx

@@ -19,4 +19,5 @@ Join as a validator by staking tokens
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-prime.mdx

@@ -22,4 +22,5 @@ Prime a validator to prepare their stake record for the next epoch
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/wizard.mdx

@@ -17,4 +17,5 @@ Interactive wizard to become a validator
 | | --skip-identity | Skip identity setup step | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/transactions/appeal.mdx

@@ -18,4 +18,5 @@ Appeal a transaction by its hash
 | --- | --- | --- | :---: | --- |
 | | --bond <amount> | Appeal bond amount (e.g. 500gen, 0.5gen). Auto-calculated if omitted | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/claim.mdx

@@ -24,4 +24,5 @@ Claim vesting delegation withdrawals after unbonding period
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/delegate.mdx

@@ -25,4 +25,5 @@ Delegate vesting-held tokens to a validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/undelegate.mdx

@@ -24,4 +24,5 @@ Undelegate all vesting delegation shares from a validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/claim.mdx

@@ -16,12 +16,13 @@ Claim vesting validator withdrawals after unbonding period
 
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/create.mdx

@@ -25,4 +25,5 @@ Create a vesting-backed validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/deposit.mdx

@@ -17,12 +17,13 @@ Deposit more vesting-held tokens to a validator wallet
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --amount <amount> | Amount to deposit (in wei or with 'eth'/'gen' suffix) | No | |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/exit.mdx

@@ -17,12 +17,13 @@ Exit vesting validator self-stake by withdrawing shares
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --shares <shares> | Number of shares to withdraw | No | |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/join.mdx

@@ -25,4 +25,5 @@ Create a vesting-backed validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

README.md

@@ -478,6 +478,7 @@ COMMON OPTIONS (all commands):
 OPTIONS (validator-join):
  --amount <amount> Amount to stake (in wei or with 'gen' suffix)
  --operator <address> Operator address (defaults to signer)
+ --wallet <mode> 'keystore' (default) or 'browser' (sign in MetaMask)
 
 OPTIONS (delegator-join):
  --validator <address> Validator address to delegate to
@@ -497,6 +498,14 @@ EXAMPLES:
  # Join as validator with 42000 GEN
  genlayer staking validator-join --amount 42000gen
 
+ # Sign the validator-join with a browser wallet (MetaMask) instead of a keystore.
+ # The CLI serves a page on 127.0.0.1 and opens it; connect + confirm in the wallet.
+ # Remote/SSH: forward the printed port first (ssh -L <port>:127.0.0.1:<port> ...).
+ genlayer staking validator-join --amount 42000gen --wallet browser --network testnet-bradbury
+
+ # The wizard can also use a browser wallet as the owner (operator keystore is still generated locally):
+ genlayer staking wizard --wallet browser
+
  # Join as delegator with 42 GEN
  genlayer staking delegator-join --validator 0x... --amount 42gen
 

docs/api-references/_meta.json

@@ -10,5 +10,6 @@
  "estimate-fees": "estimate-fees",
  "finalize": "finalize",
  "finalize-batch": "finalize-batch",
- "vesting": "vesting"
+ "vesting": "vesting",
+ "wallet": "wallet"
 }

docs/api-references/contracts/deploy.mdx

@@ -21,4 +21,5 @@ Deploy intelligent contracts
 | | --fee-value <wei> | Fee deposit value to send with the transaction | No | |
 | | --valid-until <unixTimestamp> | Unix timestamp after which the transaction is invalid | No | |
 | | --args <args...> | Contract arguments. Supported types: | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/contracts/write.mdx

@@ -25,4 +25,5 @@ Sends a transaction to a contract method that modifies the state
 | | --fee-value <wei> | Fee deposit value to send with the transaction | No | |
 | | --valid-until <unixTimestamp> | Unix timestamp after which the transaction is invalid | No | |
 | | --args <args...> | Contract arguments. Supported types: | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/finalize-batch.mdx

@@ -17,4 +17,5 @@ Finalize a batch of idle transactions in a single call (public call)
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/finalize.mdx

@@ -17,4 +17,5 @@ Finalize a transaction that is ready to be finalized (public call)
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/index.mdx

@@ -33,6 +33,7 @@ Version: `0.39.1`
 - `genlayer finalize-batch` — Finalize a batch of idle transactions in a single call (public call)
 - `genlayer staking` — Staking operations for validators and delegators
 - `genlayer vesting` — Vesting operations for beneficiaries
+- `genlayer wallet` — Manage the persistent browser-wallet (MetaMask) signing session
 
 ---
 

docs/api-references/staking/staking/delegator-claim.mdx

@@ -23,4 +23,5 @@ Claim delegator withdrawals after unbonding period
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/delegator-exit.mdx

@@ -23,4 +23,5 @@ Exit as a delegator by withdrawing shares from a validator
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/delegator-join.mdx

@@ -23,4 +23,5 @@ Join as a delegator by staking with a validator
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/prime-all.mdx

@@ -17,4 +17,5 @@ Prime all validators that need priming
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/set-identity.mdx

@@ -30,4 +30,5 @@ Set validator identity metadata (moniker, website, socials, etc.)
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/set-operator.mdx

@@ -23,4 +23,5 @@ Change the operator address for a validator wallet
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-claim.mdx

@@ -21,4 +21,5 @@ Claim validator withdrawals after unbonding period
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-deposit.mdx

@@ -22,4 +22,5 @@ Make an additional deposit to a validator wallet
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-exit.mdx

@@ -22,4 +22,5 @@ Exit as a validator by withdrawing shares
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-join.mdx

@@ -19,4 +19,5 @@ Join as a validator by staking tokens
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-prime.mdx

@@ -22,4 +22,5 @@ Prime a validator to prepare their stake record for the next epoch
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/wizard.mdx

@@ -17,4 +17,5 @@ Interactive wizard to become a validator
 | | --skip-identity | Skip identity setup step | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/transactions/appeal.mdx

@@ -18,4 +18,5 @@ Appeal a transaction by its hash
 | --- | --- | --- | :---: | --- |
 | | --bond <amount> | Appeal bond amount (e.g. 500gen, 0.5gen). Auto-calculated if omitted | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/claim.mdx

@@ -24,4 +24,5 @@ Claim vesting delegation withdrawals after unbonding period
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/delegate.mdx

@@ -25,4 +25,5 @@ Delegate vesting-held tokens to a validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/undelegate.mdx

@@ -24,4 +24,5 @@ Undelegate all vesting delegation shares from a validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/claim.mdx

@@ -16,12 +16,13 @@ Claim vesting validator withdrawals after unbonding period
 
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/create.mdx

@@ -25,4 +25,5 @@ Create a vesting-backed validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/deposit.mdx

@@ -17,12 +17,13 @@ Deposit more vesting-held tokens to a validator wallet
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --amount <amount> | Amount to deposit (in wei or with 'eth'/'gen' suffix) | No | |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/exit.mdx

@@ -17,12 +17,13 @@ Exit vesting validator self-stake by withdrawing shares
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --shares <shares> | Number of shares to withdraw | No | |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/join.mdx

@@ -25,4 +25,5 @@ Create a vesting-backed validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

README.md

@@ -478,6 +478,7 @@ COMMON OPTIONS (all commands):
 OPTIONS (validator-join):
  --amount <amount> Amount to stake (in wei or with 'gen' suffix)
  --operator <address> Operator address (defaults to signer)
+ --wallet <mode> 'keystore' (default) or 'browser' (sign in MetaMask)
 
 OPTIONS (delegator-join):
  --validator <address> Validator address to delegate to
@@ -497,6 +498,14 @@ EXAMPLES:
  # Join as validator with 42000 GEN
  genlayer staking validator-join --amount 42000gen
 
+ # Sign the validator-join with a browser wallet (MetaMask) instead of a keystore.
+ # The CLI serves a page on 127.0.0.1 and opens it; connect + confirm in the wallet.
+ # Remote/SSH: forward the printed port first (ssh -L <port>:127.0.0.1:<port> ...).
+ genlayer staking validator-join --amount 42000gen --wallet browser --network testnet-bradbury
+
+ # The wizard can also use a browser wallet as the owner (operator keystore is still generated locally):
+ genlayer staking wizard --wallet browser
+
  # Join as delegator with 42 GEN
  genlayer staking delegator-join --validator 0x... --amount 42gen
 

docs/api-references/_meta.json

@@ -10,5 +10,6 @@
  "estimate-fees": "estimate-fees",
  "finalize": "finalize",
  "finalize-batch": "finalize-batch",
- "vesting": "vesting"
+ "vesting": "vesting",
+ "wallet": "wallet"
 }

docs/api-references/contracts/deploy.mdx

@@ -21,4 +21,5 @@ Deploy intelligent contracts
 | | --fee-value <wei> | Fee deposit value to send with the transaction | No | |
 | | --valid-until <unixTimestamp> | Unix timestamp after which the transaction is invalid | No | |
 | | --args <args...> | Contract arguments. Supported types: | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/contracts/write.mdx

@@ -25,4 +25,5 @@ Sends a transaction to a contract method that modifies the state
 | | --fee-value <wei> | Fee deposit value to send with the transaction | No | |
 | | --valid-until <unixTimestamp> | Unix timestamp after which the transaction is invalid | No | |
 | | --args <args...> | Contract arguments. Supported types: | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/finalize-batch.mdx

@@ -17,4 +17,5 @@ Finalize a batch of idle transactions in a single call (public call)
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/finalize.mdx

@@ -17,4 +17,5 @@ Finalize a transaction that is ready to be finalized (public call)
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/index.mdx

@@ -33,6 +33,7 @@ Version: `0.39.1`
 - `genlayer finalize-batch` — Finalize a batch of idle transactions in a single call (public call)
 - `genlayer staking` — Staking operations for validators and delegators
 - `genlayer vesting` — Vesting operations for beneficiaries
+- `genlayer wallet` — Manage the persistent browser-wallet (MetaMask) signing session
 
 ---
 

docs/api-references/staking/staking/delegator-claim.mdx

@@ -23,4 +23,5 @@ Claim delegator withdrawals after unbonding period
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/delegator-exit.mdx

@@ -23,4 +23,5 @@ Exit as a delegator by withdrawing shares from a validator
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/delegator-join.mdx

@@ -23,4 +23,5 @@ Join as a delegator by staking with a validator
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/prime-all.mdx

@@ -17,4 +17,5 @@ Prime all validators that need priming
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/set-identity.mdx

@@ -30,4 +30,5 @@ Set validator identity metadata (moniker, website, socials, etc.)
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/set-operator.mdx

@@ -23,4 +23,5 @@ Change the operator address for a validator wallet
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-claim.mdx

@@ -21,4 +21,5 @@ Claim validator withdrawals after unbonding period
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-deposit.mdx

@@ -22,4 +22,5 @@ Make an additional deposit to a validator wallet
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-exit.mdx

@@ -22,4 +22,5 @@ Exit as a validator by withdrawing shares
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-join.mdx

@@ -19,4 +19,5 @@ Join as a validator by staking tokens
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-prime.mdx

@@ -22,4 +22,5 @@ Prime a validator to prepare their stake record for the next epoch
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/wizard.mdx

@@ -17,4 +17,5 @@ Interactive wizard to become a validator
 | | --skip-identity | Skip identity setup step | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/transactions/appeal.mdx

@@ -18,4 +18,5 @@ Appeal a transaction by its hash
 | --- | --- | --- | :---: | --- |
 | | --bond <amount> | Appeal bond amount (e.g. 500gen, 0.5gen). Auto-calculated if omitted | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/claim.mdx

@@ -24,4 +24,5 @@ Claim vesting delegation withdrawals after unbonding period
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/delegate.mdx

@@ -25,4 +25,5 @@ Delegate vesting-held tokens to a validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/undelegate.mdx

@@ -24,4 +24,5 @@ Undelegate all vesting delegation shares from a validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/claim.mdx

@@ -16,12 +16,13 @@ Claim vesting validator withdrawals after unbonding period
 
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/create.mdx

@@ -25,4 +25,5 @@ Create a vesting-backed validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/deposit.mdx

@@ -17,12 +17,13 @@ Deposit more vesting-held tokens to a validator wallet
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --amount <amount> | Amount to deposit (in wei or with 'eth'/'gen' suffix) | No | |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/exit.mdx

@@ -17,12 +17,13 @@ Exit vesting validator self-stake by withdrawing shares
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --shares <shares> | Number of shares to withdraw | No | |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/join.mdx

@@ -25,4 +25,5 @@ Create a vesting-backed validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

README.md

@@ -478,6 +478,7 @@ COMMON OPTIONS (all commands):
 OPTIONS (validator-join):
  --amount <amount> Amount to stake (in wei or with 'gen' suffix)
  --operator <address> Operator address (defaults to signer)
+ --wallet <mode> 'keystore' (default) or 'browser' (sign in MetaMask)
 
 OPTIONS (delegator-join):
  --validator <address> Validator address to delegate to
@@ -497,6 +498,14 @@ EXAMPLES:
  # Join as validator with 42000 GEN
  genlayer staking validator-join --amount 42000gen
 
+ # Sign the validator-join with a browser wallet (MetaMask) instead of a keystore.
+ # The CLI serves a page on 127.0.0.1 and opens it; connect + confirm in the wallet.
+ # Remote/SSH: forward the printed port first (ssh -L <port>:127.0.0.1:<port> ...).
+ genlayer staking validator-join --amount 42000gen --wallet browser --network testnet-bradbury
+
+ # The wizard can also use a browser wallet as the owner (operator keystore is still generated locally):
+ genlayer staking wizard --wallet browser
+
  # Join as delegator with 42 GEN
  genlayer staking delegator-join --validator 0x... --amount 42gen
 

docs/api-references/_meta.json

@@ -10,5 +10,6 @@
  "estimate-fees": "estimate-fees",
  "finalize": "finalize",
  "finalize-batch": "finalize-batch",
- "vesting": "vesting"
+ "vesting": "vesting",
+ "wallet": "wallet"
 }

docs/api-references/contracts/deploy.mdx

@@ -21,4 +21,5 @@ Deploy intelligent contracts
 | | --fee-value <wei> | Fee deposit value to send with the transaction | No | |
 | | --valid-until <unixTimestamp> | Unix timestamp after which the transaction is invalid | No | |
 | | --args <args...> | Contract arguments. Supported types: | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/contracts/write.mdx

@@ -25,4 +25,5 @@ Sends a transaction to a contract method that modifies the state
 | | --fee-value <wei> | Fee deposit value to send with the transaction | No | |
 | | --valid-until <unixTimestamp> | Unix timestamp after which the transaction is invalid | No | |
 | | --args <args...> | Contract arguments. Supported types: | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/finalize-batch.mdx

@@ -17,4 +17,5 @@ Finalize a batch of idle transactions in a single call (public call)
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/finalize.mdx

@@ -17,4 +17,5 @@ Finalize a transaction that is ready to be finalized (public call)
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/index.mdx

@@ -33,6 +33,7 @@ Version: `0.39.1`
 - `genlayer finalize-batch` — Finalize a batch of idle transactions in a single call (public call)
 - `genlayer staking` — Staking operations for validators and delegators
 - `genlayer vesting` — Vesting operations for beneficiaries
+- `genlayer wallet` — Manage the persistent browser-wallet (MetaMask) signing session
 
 ---
 

docs/api-references/staking/staking/delegator-claim.mdx

@@ -23,4 +23,5 @@ Claim delegator withdrawals after unbonding period
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/delegator-exit.mdx

@@ -23,4 +23,5 @@ Exit as a delegator by withdrawing shares from a validator
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/delegator-join.mdx

@@ -23,4 +23,5 @@ Join as a delegator by staking with a validator
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/prime-all.mdx

@@ -17,4 +17,5 @@ Prime all validators that need priming
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/set-identity.mdx

@@ -30,4 +30,5 @@ Set validator identity metadata (moniker, website, socials, etc.)
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/set-operator.mdx

@@ -23,4 +23,5 @@ Change the operator address for a validator wallet
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-claim.mdx

@@ -21,4 +21,5 @@ Claim validator withdrawals after unbonding period
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-deposit.mdx

@@ -22,4 +22,5 @@ Make an additional deposit to a validator wallet
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-exit.mdx

@@ -22,4 +22,5 @@ Exit as a validator by withdrawing shares
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-join.mdx

@@ -19,4 +19,5 @@ Join as a validator by staking tokens
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-prime.mdx

@@ -22,4 +22,5 @@ Prime a validator to prepare their stake record for the next epoch
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/wizard.mdx

@@ -17,4 +17,5 @@ Interactive wizard to become a validator
 | | --skip-identity | Skip identity setup step | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/transactions/appeal.mdx

@@ -18,4 +18,5 @@ Appeal a transaction by its hash
 | --- | --- | --- | :---: | --- |
 | | --bond <amount> | Appeal bond amount (e.g. 500gen, 0.5gen). Auto-calculated if omitted | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/claim.mdx

@@ -24,4 +24,5 @@ Claim vesting delegation withdrawals after unbonding period
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/delegate.mdx

@@ -25,4 +25,5 @@ Delegate vesting-held tokens to a validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/undelegate.mdx

@@ -24,4 +24,5 @@ Undelegate all vesting delegation shares from a validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/claim.mdx

@@ -16,12 +16,13 @@ Claim vesting validator withdrawals after unbonding period
 
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/create.mdx

@@ -25,4 +25,5 @@ Create a vesting-backed validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/deposit.mdx

@@ -17,12 +17,13 @@ Deposit more vesting-held tokens to a validator wallet
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --amount <amount> | Amount to deposit (in wei or with 'eth'/'gen' suffix) | No | |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/exit.mdx

@@ -17,12 +17,13 @@ Exit vesting validator self-stake by withdrawing shares
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --shares <shares> | Number of shares to withdraw | No | |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/join.mdx

@@ -25,4 +25,5 @@ Create a vesting-backed validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

README.md

@@ -478,6 +478,7 @@ COMMON OPTIONS (all commands):
 OPTIONS (validator-join):
  --amount <amount> Amount to stake (in wei or with 'gen' suffix)
  --operator <address> Operator address (defaults to signer)
+ --wallet <mode> 'keystore' (default) or 'browser' (sign in MetaMask)
 
 OPTIONS (delegator-join):
  --validator <address> Validator address to delegate to
@@ -497,6 +498,14 @@ EXAMPLES:
  # Join as validator with 42000 GEN
  genlayer staking validator-join --amount 42000gen
 
+ # Sign the validator-join with a browser wallet (MetaMask) instead of a keystore.
+ # The CLI serves a page on 127.0.0.1 and opens it; connect + confirm in the wallet.
+ # Remote/SSH: forward the printed port first (ssh -L <port>:127.0.0.1:<port> ...).
+ genlayer staking validator-join --amount 42000gen --wallet browser --network testnet-bradbury
+
+ # The wizard can also use a browser wallet as the owner (operator keystore is still generated locally):
+ genlayer staking wizard --wallet browser
+
  # Join as delegator with 42 GEN
  genlayer staking delegator-join --validator 0x... --amount 42gen
 

docs/api-references/_meta.json

@@ -10,5 +10,6 @@
  "estimate-fees": "estimate-fees",
  "finalize": "finalize",
  "finalize-batch": "finalize-batch",
- "vesting": "vesting"
+ "vesting": "vesting",
+ "wallet": "wallet"
 }

docs/api-references/contracts/deploy.mdx

@@ -21,4 +21,5 @@ Deploy intelligent contracts
 | | --fee-value <wei> | Fee deposit value to send with the transaction | No | |
 | | --valid-until <unixTimestamp> | Unix timestamp after which the transaction is invalid | No | |
 | | --args <args...> | Contract arguments. Supported types: | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/contracts/write.mdx

@@ -25,4 +25,5 @@ Sends a transaction to a contract method that modifies the state
 | | --fee-value <wei> | Fee deposit value to send with the transaction | No | |
 | | --valid-until <unixTimestamp> | Unix timestamp after which the transaction is invalid | No | |
 | | --args <args...> | Contract arguments. Supported types: | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/finalize-batch.mdx

@@ -17,4 +17,5 @@ Finalize a batch of idle transactions in a single call (public call)
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/finalize.mdx

@@ -17,4 +17,5 @@ Finalize a transaction that is ready to be finalized (public call)
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/index.mdx

@@ -33,6 +33,7 @@ Version: `0.39.1`
 - `genlayer finalize-batch` — Finalize a batch of idle transactions in a single call (public call)
 - `genlayer staking` — Staking operations for validators and delegators
 - `genlayer vesting` — Vesting operations for beneficiaries
+- `genlayer wallet` — Manage the persistent browser-wallet (MetaMask) signing session
 
 ---
 

docs/api-references/staking/staking/delegator-claim.mdx

@@ -23,4 +23,5 @@ Claim delegator withdrawals after unbonding period
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/delegator-exit.mdx

@@ -23,4 +23,5 @@ Exit as a delegator by withdrawing shares from a validator
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/delegator-join.mdx

@@ -23,4 +23,5 @@ Join as a delegator by staking with a validator
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/prime-all.mdx

@@ -17,4 +17,5 @@ Prime all validators that need priming
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/set-identity.mdx

@@ -30,4 +30,5 @@ Set validator identity metadata (moniker, website, socials, etc.)
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/set-operator.mdx

@@ -23,4 +23,5 @@ Change the operator address for a validator wallet
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-claim.mdx

@@ -21,4 +21,5 @@ Claim validator withdrawals after unbonding period
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-deposit.mdx

@@ -22,4 +22,5 @@ Make an additional deposit to a validator wallet
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-exit.mdx

@@ -22,4 +22,5 @@ Exit as a validator by withdrawing shares
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-join.mdx

@@ -19,4 +19,5 @@ Join as a validator by staking tokens
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-prime.mdx

@@ -22,4 +22,5 @@ Prime a validator to prepare their stake record for the next epoch
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/wizard.mdx

@@ -17,4 +17,5 @@ Interactive wizard to become a validator
 | | --skip-identity | Skip identity setup step | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/transactions/appeal.mdx

@@ -18,4 +18,5 @@ Appeal a transaction by its hash
 | --- | --- | --- | :---: | --- |
 | | --bond <amount> | Appeal bond amount (e.g. 500gen, 0.5gen). Auto-calculated if omitted | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/claim.mdx

@@ -24,4 +24,5 @@ Claim vesting delegation withdrawals after unbonding period
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/delegate.mdx

@@ -25,4 +25,5 @@ Delegate vesting-held tokens to a validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/undelegate.mdx

@@ -24,4 +24,5 @@ Undelegate all vesting delegation shares from a validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/claim.mdx

@@ -16,12 +16,13 @@ Claim vesting validator withdrawals after unbonding period
 
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/create.mdx

@@ -25,4 +25,5 @@ Create a vesting-backed validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/deposit.mdx

@@ -17,12 +17,13 @@ Deposit more vesting-held tokens to a validator wallet
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --amount <amount> | Amount to deposit (in wei or with 'eth'/'gen' suffix) | No | |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/exit.mdx

@@ -17,12 +17,13 @@ Exit vesting validator self-stake by withdrawing shares
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --shares <shares> | Number of shares to withdraw | No | |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/join.mdx

@@ -25,4 +25,5 @@ Create a vesting-backed validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

README.md

@@ -478,6 +478,7 @@ COMMON OPTIONS (all commands):
 OPTIONS (validator-join):
  --amount <amount> Amount to stake (in wei or with 'gen' suffix)
  --operator <address> Operator address (defaults to signer)
+ --wallet <mode> 'keystore' (default) or 'browser' (sign in MetaMask)
 
 OPTIONS (delegator-join):
  --validator <address> Validator address to delegate to
@@ -497,6 +498,14 @@ EXAMPLES:
  # Join as validator with 42000 GEN
  genlayer staking validator-join --amount 42000gen
 
+ # Sign the validator-join with a browser wallet (MetaMask) instead of a keystore.
+ # The CLI serves a page on 127.0.0.1 and opens it; connect + confirm in the wallet.
+ # Remote/SSH: forward the printed port first (ssh -L <port>:127.0.0.1:<port> ...).
+ genlayer staking validator-join --amount 42000gen --wallet browser --network testnet-bradbury
+
+ # The wizard can also use a browser wallet as the owner (operator keystore is still generated locally):
+ genlayer staking wizard --wallet browser
+
  # Join as delegator with 42 GEN
  genlayer staking delegator-join --validator 0x... --amount 42gen
 

docs/api-references/_meta.json

@@ -10,5 +10,6 @@
  "estimate-fees": "estimate-fees",
  "finalize": "finalize",
  "finalize-batch": "finalize-batch",
- "vesting": "vesting"
+ "vesting": "vesting",
+ "wallet": "wallet"
 }

docs/api-references/contracts/deploy.mdx

@@ -21,4 +21,5 @@ Deploy intelligent contracts
 | | --fee-value <wei> | Fee deposit value to send with the transaction | No | |
 | | --valid-until <unixTimestamp> | Unix timestamp after which the transaction is invalid | No | |
 | | --args <args...> | Contract arguments. Supported types: | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/contracts/write.mdx

@@ -25,4 +25,5 @@ Sends a transaction to a contract method that modifies the state
 | | --fee-value <wei> | Fee deposit value to send with the transaction | No | |
 | | --valid-until <unixTimestamp> | Unix timestamp after which the transaction is invalid | No | |
 | | --args <args...> | Contract arguments. Supported types: | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/finalize-batch.mdx

@@ -17,4 +17,5 @@ Finalize a batch of idle transactions in a single call (public call)
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/finalize.mdx

@@ -17,4 +17,5 @@ Finalize a transaction that is ready to be finalized (public call)
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/index.mdx

@@ -33,6 +33,7 @@ Version: `0.39.1`
 - `genlayer finalize-batch` — Finalize a batch of idle transactions in a single call (public call)
 - `genlayer staking` — Staking operations for validators and delegators
 - `genlayer vesting` — Vesting operations for beneficiaries
+- `genlayer wallet` — Manage the persistent browser-wallet (MetaMask) signing session
 
 ---
 

docs/api-references/staking/staking/delegator-claim.mdx

@@ -23,4 +23,5 @@ Claim delegator withdrawals after unbonding period
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/delegator-exit.mdx

@@ -23,4 +23,5 @@ Exit as a delegator by withdrawing shares from a validator
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/delegator-join.mdx

@@ -23,4 +23,5 @@ Join as a delegator by staking with a validator
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/prime-all.mdx

@@ -17,4 +17,5 @@ Prime all validators that need priming
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/set-identity.mdx

@@ -30,4 +30,5 @@ Set validator identity metadata (moniker, website, socials, etc.)
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/set-operator.mdx

@@ -23,4 +23,5 @@ Change the operator address for a validator wallet
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-claim.mdx

@@ -21,4 +21,5 @@ Claim validator withdrawals after unbonding period
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-deposit.mdx

@@ -22,4 +22,5 @@ Make an additional deposit to a validator wallet
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-exit.mdx

@@ -22,4 +22,5 @@ Exit as a validator by withdrawing shares
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-join.mdx

@@ -19,4 +19,5 @@ Join as a validator by staking tokens
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/validator-prime.mdx

@@ -22,4 +22,5 @@ Prime a validator to prepare their stake record for the next epoch
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/staking/staking/wizard.mdx

@@ -17,4 +17,5 @@ Interactive wizard to become a validator
 | | --skip-identity | Skip identity setup step | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --staking-address <address> | Staking contract address (overrides chain config) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/transactions/appeal.mdx

@@ -18,4 +18,5 @@ Appeal a transaction by its hash
 | --- | --- | --- | :---: | --- |
 | | --bond <amount> | Appeal bond amount (e.g. 500gen, 0.5gen). Auto-calculated if omitted | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/claim.mdx

@@ -24,4 +24,5 @@ Claim vesting delegation withdrawals after unbonding period
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/delegate.mdx

@@ -25,4 +25,5 @@ Delegate vesting-held tokens to a validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/undelegate.mdx

@@ -24,4 +24,5 @@ Undelegate all vesting delegation shares from a validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/claim.mdx

@@ -16,12 +16,13 @@ Claim vesting validator withdrawals after unbonding period
 
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/create.mdx

@@ -25,4 +25,5 @@ Create a vesting-backed validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/deposit.mdx

@@ -17,12 +17,13 @@ Deposit more vesting-held tokens to a validator wallet
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --amount <amount> | Amount to deposit (in wei or with 'eth'/'gen' suffix) | No | |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/exit.mdx

@@ -17,12 +17,13 @@ Exit vesting validator self-stake by withdrawing shares
 | Short | Long | Description | Required | Default |
 | --- | --- | --- | :---: | --- |
 | | --shares <shares> | Number of shares to withdraw | No | |
-| | --wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
+| | --validator-wallet <address> | Validator wallet address (deprecated, use positional arg) | No | |
 | | --vesting <address> | Vesting contract address (overrides beneficiary lookup) | No | |
 | | --account <name> | Account to use | No | |
 | | --password <password> | Password to unlock account (skips interactive prompt) | No | |
 | | --network <network> | built-in or custom network alias (see: genlayer network list) | No | |
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |

docs/api-references/vesting/validator/join.mdx

@@ -25,4 +25,5 @@ Create a vesting-backed validator
 | | --rpc <rpcUrl> | RPC URL for the network | No | |
 | | --factory <address> | VestingFactory address (overrides AddressManager lookup) | No | |
 | | --address-manager <address> | AddressManager address (overrides consensus lookup) | No | |
+| | --wallet <mode> | Signing mode: 'keystore' or 'browser' (sign in MetaMask via a local bridge; forward the port for remote/SSH: ssh -L <port>:127.0.0.1:<port>). Defaults to the 'walletMode' config value, else 'keystore'. | No | |
 | -h | --help | display help for command | No | |