@unconfirmed/publish 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 unconfirmedlabs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,246 @@
+# publish
+
+An SDK for composing immutable Sui Move package publishes, plus a thin CLI that
+publishes one package with a fresh in-memory signer and
+[Onara](https://github.com/unconfirmedlabs/onara)-sponsored gas.
+
+```sh
+publish . --network testnet --onara-url <URL> --dry-run
+publish . --network testnet --onara-url <URL>
+
+publish . --network mainnet --onara-url <URL> --dry-run
+publish . --network mainnet --onara-url <URL> --yes
+```
+
+Every successful publish is one atomic programmable transaction:
+
+```text
+Publish(modules, dependencies) -> UpgradeCap
+0x2::package::make_immutable(UpgradeCap)
+```
+
+If either command fails, neither takes effect. The Ed25519 key is generated only
+after compilation, kept in process memory, used to sign that transaction, and
+never printed or written to disk. Onara pays gas from its address balance.
+
+## SDK
+
+`@unconfirmed/publish` exposes transaction composition separately from build,
+signing, gas selection, execution, and deployment metadata:
+
+```ts
+import { Transaction } from '@mysten/sui/transactions'
+import { addImmutablePublish } from '@unconfirmed/publish'
+
+const transaction = new Transaction()
+addImmutablePublish(transaction, artifact)
+
+// The caller chooses the sender, gas strategy, signer, and executor.
+```
+
+For independent package batches, `createImmutablePublishTransaction(artifacts)`
+creates the complete PTB. It accepts one through five artifacts, matching Sui's
+publish-command limit, and adds one `make_immutable` call immediately after each
+publish. Neither transaction helper sets sender or gas data.
+
+The root export also provides:
+
+- `buildMovePackage` and `parseBuildOutput` for argv-safe stock Sui builds;
+- `OnaraHttpClient` and `createBoundedFetch` for sponsored execution;
+- `extractExecutionResult` and `extractPublishedPackageIds` for execution-effect
+  normalization, including all package IDs from a batch;
+- `transactionStatus` and `sponsorshipError` for digest-based reconciliation;
+- `updatePublishedFile` and `updatePublishedText` for explicit, atomic deployment
+  metadata updates; and
+- `publishPackage` as the one-package ephemeral-signer convenience workflow used
+  by the CLI.
+
+The core publishing options contain network and execution inputs only. CLI
+presentation, confirmation, and metadata-write switches are intentionally not
+part of the SDK contract. `Published.toml` is never changed by transaction
+composition or effect parsing; callers invoke the metadata helper explicitly
+after an applied publish.
+
+Mutation receipts and errors use `effect: "applied" | "not_applied" |
+"unknown"`. An unknown outcome carries the locally derived digest whenever one
+is available and must be reconciled before retrying.
+
+## Why the CLI builds the package
+
+The package directory—not prebuilt bytecode—is the primary input. `publish`
+invokes the installed stock Sui CLI as an argv-safe child process:
+
+```sh
+sui move build \
+  --path <PACKAGE_PATH> \
+  --dump-bytecode-as-base64 \
+  --build-env <NETWORK>
+```
+
+This is preferable to accepting an arbitrary bytecode file by default:
+
+- the bytecode and transitive dependency IDs come from the same build;
+- the chosen network is used for both compilation and submission;
+- already-published root packages are rebuilt at `0x0`, so republishing does not
+  require deleting or editing `Published.toml` first;
+- compiler failures stop before a key is generated or Onara is contacted; and
+- the exact Sui CLI version and package digest are recorded in the result.
+
+The CLI creates a temporary, empty Sui client configuration pointed at the
+selected RPC. It never uses an ambient Sui address or keystore. The compiler
+still uses the package's normal `Move.lock`, dependency cache, and `build/`
+directory.
+
+After a successful transaction, the selected network section in
+`Published.toml` is updated atomically. Other networks and surrounding comments
+are preserved. The new record intentionally has no `upgrade-capability` field.
+Use `--no-write-published` for a read-only checkout.
+
+## Install
+
+Requirements:
+
+- Node.js 22 or newer (Bun also works);
+- the `sui` CLI on `PATH`; and
+- network access to the chosen Sui RPC and Onara endpoint.
+
+From a checkout:
+
+```sh
+bun install --frozen-lockfile
+bun run build
+bun link
+```
+
+The package name is `@unconfirmed/publish` and the installed executable is
+`publish`.
+
+## Networks
+
+`--network` and `--onara-url` are always required. There are no ambient
+defaults for either one; callers bring their own Onara deployment.
+
+| Network | Default Sui gRPC |
+| --- | --- |
+| testnet | `https://fullnode.testnet.sui.io:443` |
+| mainnet | `https://fullnode.mainnet.sui.io:443` |
+
+The CLI verifies both endpoints' immutable chain identifiers before generating
+the signer. Override private or mirrored Sui infrastructure explicitly with
+`--rpc-url`; the network identity checks still apply.
+
+The resolved Onara and RPC URLs are included in every JSON publish receipt.
+
+Mainnet execution requires `--yes` and never opens a prompt. A mainnet dry run
+does not require `--yes`.
+
+The client uses Onara's versioned HTTP surface directly (`/status`, `/sponsor`,
+and `/sponsor/:digest/status`), so it runs consistently under both Node and Bun.
+
+## Dry runs
+
+```sh
+publish ./move/my-package --network testnet --onara-url <URL> --dry-run --json
+```
+
+A dry run compiles the package, constructs the full transaction, lets the Sui
+SDK simulate it while resolving the gas budget, signs it with a new ephemeral
+key, and asks Onara to validate its sponsorship policy. Onara does not submit or
+sponsor-sign it. The receipt reports `effect: "not_applied"`.
+
+Each invocation deliberately gets a new sender. A later executable invocation
+therefore has different transaction bytes, while retaining the same modules,
+dependencies, package digest, and command shape.
+
+## Machine contract
+
+Use `--json` for one JSON result document on stdout. Progress is JSONL on stderr
+and can be disabled with `--quiet`. Before a result is available, stdout stays
+empty on failure.
+
+```sh
+publish . --network testnet --onara-url <URL> --dry-run --json --quiet
+```
+
+```json
+{
+  "schemaVersion": 1,
+  "operation": "publish",
+  "outcome": "validated",
+  "effect": "not_applied",
+  "network": "testnet",
+  "packagePath": "/absolute/path/to/package",
+  "packageDigest": "0x...",
+  "moduleCount": 1,
+  "dependencyCount": 2,
+  "sender": "0x...",
+  "sponsor": "0x...",
+  "immutable": true,
+  "onaraUrl": "<URL>",
+  "rpcUrl": "https://fullnode.testnet.sui.io:443",
+  "suiCliVersion": "sui 1.78.1-...",
+  "policy": "allow-all"
+}
+```
+
+An executed receipt additionally includes `transactionDigest`, `packageId`, and
+the `Published.toml` update state. Field names and enum values are part of the
+CLI's public protocol; additive fields may be introduced in schema version 1.
+
+Errors are structured on stderr:
+
+```json
+{
+  "type": "error",
+  "error": {
+    "code": "SPONSORSHIP_DENIED",
+    "message": "Transaction is not eligible for sponsorship.",
+    "effect": "not_applied"
+  }
+}
+```
+
+Exit statuses are typed:
+
+| Status | Meaning |
+| --- | --- |
+| `0` | Publish, dry run, or status read succeeded. |
+| `1` | Operational failure with a known applied/not-applied outcome. |
+| `2` | Invalid usage or missing mainnet confirmation. |
+| `3` | Submission outcome is unknown; reconcile before retrying. |
+
+The CLI does not retry the publish request. A timeout or lost response can hide
+a committed transaction, and retrying with a fresh key would create another
+package. The locally derived transaction digest is returned whenever possible.
+
+```sh
+publish status <TRANSACTION_DIGEST> --network testnet --onara-url <URL> --json
+```
+
+## Important package constraints
+
+Immutability is permanent. A successful package cannot be upgraded, rolled back,
+or repaired through an upgrade.
+
+The transaction sender is a disposable address. If a package `init` function
+creates an admin capability or any other address-owned object for
+`tx_context::sender`, that object will be owned by the ephemeral address and
+become inaccessible after the process exits. Use this tool only for packages
+whose initialization leaves no authority or assets that must remain controlled.
+
+`Published.toml` is local deployment metadata, not proof that the transaction
+succeeded. The onchain transaction digest and package ID in the success receipt
+are authoritative.
+
+## Full help
+
+```text
+publish --help
+```
+
+Help, version, and argument errors are local and do not initialize the SDK,
+inspect credentials, or contact a network.
+
+## License
+
+MIT

package/dist/args.d.ts

@@ -0,0 +1,5 @@
+import type { CliOptions } from './cli-types.js';
+export declare const VERSION = "0.1.0";
+export declare const HELP = "Publish a Sui Move package immutably with an ephemeral signer and Onara-sponsored gas.\n\nUsage:\n  publish [PACKAGE_PATH] --network <testnet|mainnet> --onara-url <url> [options]\n  publish status <TRANSACTION_DIGEST> --network <testnet|mainnet> --onara-url <url> [options]\n\nThe publish operation runs the stock Sui compiler, publishes the resulting modules,\nand consumes the returned UpgradeCap with 0x2::package::make_immutable in one atomic\ntransaction. PACKAGE_PATH defaults to the current directory.\n\nPublish options:\n  --network <network>   Required. Either testnet or mainnet.\n  --dry-run             Build, sign, simulate for gas resolution, and validate with Onara;\n                        do not submit the transaction.\n  --yes                 Required for a mainnet submission. Never prompts.\n  --sui <path>          Sui CLI executable (default: sui).\n  --no-write-published  Do not update Published.toml after a successful publish.\n\nConnection options:\n  --rpc-url <url>       Override the selected network's Sui gRPC endpoint.\n  --onara-url <url>     Required. Onara sponsorship service endpoint.\n  --timeout-ms <ms>     Per-request client timeout (default: 70000).\n\nOutput options:\n  --json                Emit one JSON document on stdout; structured errors go to stderr.\n  --quiet               Suppress progress diagnostics on stderr.\n  --help                Show this help without network access.\n  --version             Show the version without network access.\n\nExit status:\n  0  Success, including a successful dry run or status lookup.\n  1  Operational failure with a known applied/not-applied outcome.\n  2  Invalid usage or missing mainnet confirmation.\n  3  Mutation outcome is unknown; reconcile with \"publish status\" before retrying.\n";
+export declare function parseArgs(argv: string[]): CliOptions;
+//# sourceMappingURL=args.d.ts.map

package/dist/args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAEhD,eAAO,MAAM,OAAO,UAAU,CAAA;AAE9B,eAAO,MAAM,IAAI,mwDAkChB,CAAA;AAiHD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CA2CpD"}

package/dist/args.js

@@ -0,0 +1,185 @@
+import { PublishError } from './errors.js';
+export const VERSION = '0.1.0';
+export const HELP = `Publish a Sui Move package immutably with an ephemeral signer and Onara-sponsored gas.
+
+Usage:
+  publish [PACKAGE_PATH] --network <testnet|mainnet> --onara-url <url> [options]
+  publish status <TRANSACTION_DIGEST> --network <testnet|mainnet> --onara-url <url> [options]
+
+The publish operation runs the stock Sui compiler, publishes the resulting modules,
+and consumes the returned UpgradeCap with 0x2::package::make_immutable in one atomic
+transaction. PACKAGE_PATH defaults to the current directory.
+
+Publish options:
+  --network <network>   Required. Either testnet or mainnet.
+  --dry-run             Build, sign, simulate for gas resolution, and validate with Onara;
+                        do not submit the transaction.
+  --yes                 Required for a mainnet submission. Never prompts.
+  --sui <path>          Sui CLI executable (default: sui).
+  --no-write-published  Do not update Published.toml after a successful publish.
+
+Connection options:
+  --rpc-url <url>       Override the selected network's Sui gRPC endpoint.
+  --onara-url <url>     Required. Onara sponsorship service endpoint.
+  --timeout-ms <ms>     Per-request client timeout (default: 70000).
+
+Output options:
+  --json                Emit one JSON document on stdout; structured errors go to stderr.
+  --quiet               Suppress progress diagnostics on stderr.
+  --help                Show this help without network access.
+  --version             Show the version without network access.
+
+Exit status:
+  0  Success, including a successful dry run or status lookup.
+  1  Operational failure with a known applied/not-applied outcome.
+  2  Invalid usage or missing mainnet confirmation.
+  3  Mutation outcome is unknown; reconcile with "publish status" before retrying.
+`;
+const VALUE_FLAGS = new Set(['--network', '--sui', '--rpc-url', '--onara-url', '--timeout-ms']);
+function usageError(message) {
+    throw new PublishError('INVALID_USAGE', message, { exitCode: 2 });
+}
+function readValue(argv, index, inline) {
+    if (inline !== undefined) {
+        if (!inline)
+            usageError(`Missing value for ${argv[index]?.split('=')[0]}.`);
+        return [inline, index];
+    }
+    const value = argv[index + 1];
+    if (value === undefined)
+        usageError(`Missing value for ${argv[index]}.`);
+    return [value, index + 1];
+}
+function parseFlags(argv) {
+    const parsed = {
+        json: false,
+        quiet: false,
+        dryRun: false,
+        confirm: false,
+        suiBinary: 'sui',
+        writePublished: true,
+        timeoutMs: 70_000,
+        positionals: [],
+    };
+    let operandsOnly = false;
+    for (let index = 0; index < argv.length; index += 1) {
+        const token = argv[index];
+        if (operandsOnly) {
+            parsed.positionals.push(token);
+            continue;
+        }
+        if (token === '--') {
+            operandsOnly = true;
+            continue;
+        }
+        if (!token.startsWith('--')) {
+            parsed.positionals.push(token);
+            continue;
+        }
+        const equals = token.indexOf('=');
+        const name = equals === -1 ? token : token.slice(0, equals);
+        const inline = equals === -1 ? undefined : token.slice(equals + 1);
+        if (inline !== undefined && !VALUE_FLAGS.has(name)) {
+            usageError(`${name} does not take a value.`);
+        }
+        if (name === '--json')
+            parsed.json = true;
+        else if (name === '--quiet')
+            parsed.quiet = true;
+        else if (name === '--dry-run')
+            parsed.dryRun = true;
+        else if (name === '--yes')
+            parsed.confirm = true;
+        else if (name === '--no-write-published')
+            parsed.writePublished = false;
+        else if (name === '--help' || name === '--version') {
+            usageError(`${name} must be handled before argument parsing.`);
+        }
+        else if (VALUE_FLAGS.has(name)) {
+            const [value, valueIndex] = readValue(argv, index, inline);
+            index = valueIndex;
+            if (name === '--network') {
+                if (value !== 'mainnet' && value !== 'testnet') {
+                    usageError('--network must be either "testnet" or "mainnet".');
+                }
+                parsed.network = value;
+            }
+            else if (name === '--sui')
+                parsed.suiBinary = value;
+            else if (name === '--rpc-url')
+                parsed.rpcUrl = validateUrl(name, value);
+            else if (name === '--onara-url')
+                parsed.onaraUrl = validateUrl(name, value);
+            else {
+                const timeout = Number(value);
+                if (!Number.isSafeInteger(timeout) || timeout < 1_000 || timeout > 300_000) {
+                    usageError('--timeout-ms must be an integer from 1000 through 300000.');
+                }
+                parsed.timeoutMs = timeout;
+            }
+        }
+        else {
+            usageError(`Unknown option: ${name}`);
+        }
+    }
+    return parsed;
+}
+function validateUrl(flag, value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        usageError(`${flag} must be an absolute HTTP or HTTPS URL.`);
+    }
+    if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+        usageError(`${flag} must use http or https.`);
+    }
+    return url.toString().replace(/\/$/, '');
+}
+export function parseArgs(argv) {
+    const flags = parseFlags(argv);
+    if (!flags.network)
+        usageError('--network is required.');
+    if (!flags.onaraUrl)
+        usageError('--onara-url is required.');
+    if (flags.positionals[0] === 'status') {
+        if (flags.dryRun || flags.confirm || flags.suiBinary !== 'sui' || !flags.writePublished || flags.rpcUrl) {
+            usageError('--dry-run, --yes, --sui, --no-write-published, and --rpc-url apply only to publishing.');
+        }
+        if (flags.positionals.length !== 2) {
+            usageError('status requires exactly one transaction digest.');
+        }
+        if (!/^[1-9A-HJ-NP-Za-km-z]{32,64}$/.test(flags.positionals[1])) {
+            usageError('status requires a base58 Sui transaction digest.');
+        }
+        return {
+            operation: 'status',
+            network: flags.network,
+            digest: flags.positionals[1],
+            json: flags.json,
+            quiet: flags.quiet,
+            timeoutMs: flags.timeoutMs,
+            onaraUrl: flags.onaraUrl,
+        };
+    }
+    if (flags.positionals.length > 1)
+        usageError('Publish accepts at most one package path.');
+    if (flags.dryRun && flags.confirm)
+        usageError('--yes is not used with --dry-run.');
+    return {
+        operation: 'publish',
+        network: flags.network,
+        packagePath: flags.positionals[0] ?? '.',
+        dryRun: flags.dryRun,
+        confirm: flags.confirm,
+        suiBinary: flags.suiBinary,
+        writePublished: flags.writePublished,
+        json: flags.json,
+        quiet: flags.quiet,
+        timeoutMs: flags.timeoutMs,
+        ...(flags.rpcUrl ? { rpcUrl: flags.rpcUrl } : {}),
+        onaraUrl: flags.onaraUrl,
+    };
+}
+//# sourceMappingURL=args.js.map

package/dist/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAG1C,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAA;AAE9B,MAAM,CAAC,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCnB,CAAA;AAgBD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC,CAAA;AAE/F,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAA;AACnE,CAAC;AAED,SAAS,SAAS,CAAC,IAAc,EAAE,KAAa,EAAE,MAA0B;IAC1E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM;YAAE,UAAU,CAAC,qBAAqB,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAC3E,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACxB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;IAC7B,IAAI,KAAK,KAAK,SAAS;QAAE,UAAU,CAAC,qBAAqB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACxE,OAAO,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;AAC3B,CAAC;AAED,SAAS,UAAU,CAAC,IAAc;IAChC,MAAM,MAAM,GAAgB;QAC1B,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,KAAK;QAChB,cAAc,EAAE,IAAI;QACpB,SAAS,EAAE,MAAM;QACjB,WAAW,EAAE,EAAE;KAChB,CAAA;IACD,IAAI,YAAY,GAAG,KAAK,CAAA;IAExB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAE,CAAA;QAC1B,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAC9B,SAAQ;QACV,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,YAAY,GAAG,IAAI,CAAA;YACnB,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAC9B,SAAQ;QACV,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACjC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QAC3D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;QAClE,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,UAAU,CAAC,GAAG,IAAI,yBAAyB,CAAC,CAAA;QAC9C,CAAC;QAED,IAAI,IAAI,KAAK,QAAQ;YAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAA;aACpC,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,GAAG,IAAI,CAAA;aAC3C,IAAI,IAAI,KAAK,WAAW;YAAE,MAAM,CAAC,MAAM,GAAG,IAAI,CAAA;aAC9C,IAAI,IAAI,KAAK,OAAO;YAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAA;aAC3C,IAAI,IAAI,KAAK,sBAAsB;YAAE,MAAM,CAAC,cAAc,GAAG,KAAK,CAAA;aAClE,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACnD,UAAU,CAAC,GAAG,IAAI,2CAA2C,CAAC,CAAA;QAChE,CAAC;aAAM,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;YAC1D,KAAK,GAAG,UAAU,CAAA;YAClB,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBACzB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBAC/C,UAAU,CAAC,kDAAkD,CAAC,CAAA;gBAChE,CAAC;gBACD,MAAM,CAAC,OAAO,GAAG,KAAK,CAAA;YACxB,CAAC;iBAAM,IAAI,IAAI,KAAK,OAAO;gBAAE,MAAM,CAAC,SAAS,GAAG,KAAK,CAAA;iBAChD,IAAI,IAAI,KAAK,WAAW;gBAAE,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;iBAClE,IAAI,IAAI,KAAK,aAAa;gBAAE,MAAM,CAAC,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;iBACtE,CAAC;gBACJ,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;gBAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,KAAK,IAAI,OAAO,GAAG,OAAO,EAAE,CAAC;oBAC3E,UAAU,CAAC,2DAA2D,CAAC,CAAA;gBACzE,CAAC;gBACD,MAAM,CAAC,SAAS,GAAG,OAAO,CAAA;YAC5B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAA;QACvC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,CAAC,GAAG,IAAI,yCAAyC,CAAC,CAAA;IAC9D,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,UAAU,CAAC,GAAG,IAAI,0BAA0B,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAC1C,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,UAAU,CAAC,wBAAwB,CAAC,CAAA;IACxD,IAAI,CAAC,KAAK,CAAC,QAAQ;QAAE,UAAU,CAAC,0BAA0B,CAAC,CAAA;IAE3D,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACxG,UAAU,CAAC,wFAAwF,CAAC,CAAA;QACtG,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,UAAU,CAAC,iDAAiD,CAAC,CAAA;QAC/D,CAAC;QACD,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;YACjE,UAAU,CAAC,kDAAkD,CAAC,CAAA;QAChE,CAAC;QACD,OAAO;YACL,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAE;YAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAA;IACH,CAAC;IAED,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,UAAU,CAAC,2CAA2C,CAAC,CAAA;IACzF,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO;QAAE,UAAU,CAAC,mCAAmC,CAAC,CAAA;IAElF,OAAO;QACL,SAAS,EAAE,SAAS;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,GAAG;QACxC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAA;AACH,CAAC"}

package/dist/cli-types.d.ts

@@ -0,0 +1,24 @@
+import type { Network } from './config.js';
+type CommonCliOptions = {
+    network: Network;
+    json: boolean;
+    quiet: boolean;
+    onaraUrl: string;
+    timeoutMs: number;
+};
+export type CliPublishOptions = CommonCliOptions & {
+    operation: 'publish';
+    packagePath: string;
+    dryRun: boolean;
+    confirm: boolean;
+    suiBinary: string;
+    writePublished: boolean;
+    rpcUrl?: string;
+};
+export type CliStatusOptions = CommonCliOptions & {
+    operation: 'status';
+    digest: string;
+};
+export type CliOptions = CliPublishOptions | CliStatusOptions;
+export {};
+//# sourceMappingURL=cli-types.d.ts.map

package/dist/cli-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-types.d.ts","sourceRoot":"","sources":["../src/cli-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAE1C,KAAK,gBAAgB,GAAG;IACtB,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,EAAE,OAAO,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG,gBAAgB,GAAG;IACjD,SAAS,EAAE,SAAS,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,OAAO,CAAA;IACf,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,OAAO,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG,gBAAgB,GAAG;IAChD,SAAS,EAAE,QAAQ,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAED,MAAM,MAAM,UAAU,GAAG,iBAAiB,GAAG,gBAAgB,CAAA"}

package/dist/cli-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cli-types.js.map

package/dist/cli-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-types.js","sourceRoot":"","sources":["../src/cli-types.ts"],"names":[],"mappings":""}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}