cleanup: import NoReturn properly + remove unused argparse + fix f-string placeholder

.pr_body.md

@@ -0,0 +1,34 @@
+## Summary
+
+`unlock_wallet()` in `scripts/kya_lib.py` has a broken validation check on the JSON-decode fallback path:
+
+```python
+token = out if SIG_RE.pattern and out else ""
+```
+
+`SIG_RE.pattern` is the *pattern string* of the compiled regex (`"^0x[a-fA-F0-9]{130}$"`), so it is **always truthy**. The expression reduces to `token = out if out else ""`, meaning the fallback path accepts **any non-empty stdout** as a session token — defeating the validation it was meant to provide. A malformed `awp-wallet unlock` output would become a fake token that flows through `os.environ["AWP_WALLET_TOKEN"]` into every subsequent command.
+
+## Fix
+
+Current `awp-wallet` (≥ 0.17.0 per SKILL.md) always emits JSON on unlock, so the legacy text fallback is dead code. Replace it with an empty-string sentinel so the existing
+
+```python
+if not token:
+    die(f"awp-wallet unlock returned no token (stdout={out!r})")
+```
+
+check triggers cleanly, instead of silently admitting garbage.
+
+## Diff
+
+```diff
+     try:
+         token = json.loads(out).get("token", "")
+     except json.JSONDecodeError:
+-        # 一些老版本支持 `unlock --raw` 直接打印 token；兼容一下
+-        token = out if SIG_RE.pattern and out else ""
++        # awp-wallet emits JSON-only now; no legacy text fallback
++        token = ""
+```
+
+No behaviour change for the common path (successful JSON parse). Only tightens the malformed-output path, which would have previously leaked invalid data forward.

scripts/kya_lib.py

@@ -28,7 +28,7 @@
 import time
 import urllib.error
 import urllib.request
-from typing import Any, Optional
+from typing import Any, NoReturn, Optional
 
 # ── 常量 ────────────────────────────────────────────────
 
@@ -61,7 +61,7 @@ def step(name: str, **fields: Any) -> None:
     print(json.dumps(payload, ensure_ascii=False), file=sys.stderr, flush=True)
 
 
-def die(msg: str, code: int = 1) -> "NoReturn":  # type: ignore[name-defined]
+def die(msg: str, code: int = 1) -> NoReturn:
     """打印错误并退出。"""
     print(json.dumps({"error": msg}, ensure_ascii=False), file=sys.stderr, flush=True)
     sys.exit(code)

scripts/sign-kyc.py

@@ -112,7 +112,7 @@ def main() -> None:
     step("kyc.session_created", session_id=session_id)
 
     print("\n────── KYC verification ──────", flush=True)
-    print(f"Open this URL in any browser to complete Didit:", flush=True)
+    print("Open this URL in any browser to complete Didit:", flush=True)
     print(verification_url, flush=True)
     print("──────────────────────────────", flush=True)
 

scripts/sign.py

@@ -21,7 +21,6 @@
 
 from __future__ import annotations
 
-import argparse
 import json
 import shutil
 import subprocess