mnemonad-cli 0.3.0 → 0.3.1

package/README.md

@@ -118,6 +118,7 @@ Every command prints the installed CLI version as its first line of output.
 | `--pinata-jwt <jwt>` | Pinata JWT for IPFS offload of large files (or `PINATA_JWT` env var) |
 | `--manifest` | Write/use `.mnemonad` manifest for faster change detection. With no stream-id given, every command recovers it from an existing `.mnemonad` in the folder instead of requiring it explicitly |
 | `--force-snapshot` | Push a full snapshot regardless of prior history (repairs a corrupt stream) |
+| `--detach` | `push`: build the next version here, send it from a background process, and return right away. Existing streams only. See "Push in the background" below |
 | `--index` | `push`/`watch`: update the folder's search index before every push (takes `--db`/`--model`/`--chunk-size`/`--chunk-overlap`); if indexing fails, nothing is pushed |
 | `--poll-interval <s>` | `watch`: seconds between remote version checks (default: `2`) |
 | `--debounce <ms>` | `watch`: quiet period in ms before pushing after a local change (default: `1000`) |
@@ -349,6 +350,48 @@ mnemonad burn 123
 mnemonad burn 123 --yes
 ```
 
+### Push in the background
+
+A push spends most of its time waiting for the chain. `--detach` does everything that can
+fail for your own reasons first, here and now: the owner check, unlocking, `--index`, "no
+changes", and the balance against the estimated cost. Then it hands only the sending to a
+background process and returns:
+
+```bash
+mnemonad push ~/my-data --manifest --detach
+#   version 8 prepared (diff, gzip compressed, 2.1 KB)
+#   estimated cost: 0.0041 MON
+#   stream: 0x68d9…
+#   sending in the background: job 8f3c1a2b (pid 41210)
+#   log:   ~/.cache/mnemonad/jobs/8f3c1a2b/push.log
+#   check: mnemonad info ~/my-data --manifest
+```
+
+- **The version is frozen when the command runs.** Edits made after it returns go into the
+  next push, not this one.
+- **Existing streams only.** It needs a stream id, or `--manifest` on a folder that has a
+  `.mnemonad`. Create a stream with a normal push first. `--passkey` can't be used: the browser
+  tab that signs for it closes when the command exits.
+- **The next command waits for it.** A `push`, `pull`, `compact` or `watch` of the same stream
+  waits until the background push has finished, so nothing builds on, or restores, the version
+  before it. A push from the same wallet to another stream waits too, so the two don't race for
+  one nonce. `diff` only notes that a push is still sending.
+- **Results:** `mnemonad info <path>` shows the last background push for the stream, and when
+  it failed, why. If one fails, the next command on that stream also prints a warning, once.
+- **Nothing half-lands.** The background process refuses to send a version whose base is gone
+  (the stream changed after it was prepared), and the contract rejects any write that doesn't
+  land at the index it names. A failed background push leaves the stream as it was. Push again.
+- **Secrets stay in memory.** The key, the password and a Pinata JWT are handed to the
+  background process over a pipe. They are never written to the job folder, the log, or the
+  process list.
+- If the background process is killed mid-send, the job is reported as failed the next time a
+  command looks at it. A large push that was staged over several transactions, or paid for an
+  IPFS upload, can't be resumed. A paid but unused upload can be refunded after the gateway's
+  time limit, with the SDK's `MnemonadUploadGateway.refund()` (the CLI has no command for it).
+
+Jobs live in `~/.cache/mnemonad/jobs/` (set `MNEMONAD_JOBS_DIR` to move them). Finished ones are
+removed after 14 days.
+
 ### Repair a corrupt stream with a force snapshot
 
 If a diff patch was pushed against a stale base (e.g. a race condition in `watch`),

package/bin/mnemonad.js

@@ -20,6 +20,7 @@ import { dirname, join } from 'node:path';
 import { push, pull, info, diff, watch, compact, burn, buildIndex, search } from '../lib/commands/index.js';
 import { parseQualifiedStreamId } from '../lib/commands/shared.js';
 import { closePasskeyBridge } from '../lib/passkeyBridge.js';
+import { runPushJob } from '../lib/jobs.js';
 import defaultConfig from '../mnemonad.config.js';
 
 const PKG_ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
@@ -104,6 +105,10 @@ Options:
                             With no stream-id given, every command recovers it from an
                             existing .mnemonad in <path> instead of requiring it explicitly
   --force-snapshot          Push a full snapshot regardless of prior history (repairs corrupt streams)
+  --detach                  push: build the next version here, send it from a background process,
+                            and return right away. Existing streams only (an id, or --manifest).
+                            Later pushes and pulls of that stream wait for it; \`mnemonad info\`
+                            shows how it went
   --index                   push/watch: update the folder's search index (search_index.db)
                             before every push, so the stream is searchable right after a pull.
                             Takes --db/--model/--chunk-size/--chunk-overlap like \`index\`
@@ -162,6 +167,7 @@ function parseArgs(argv) {
         index: false,
         rebuild: false,
         forceSnapshot: false,
+        detach: false,
         pollInterval: 2,
         debounce: 1000,
         pushOnly: false,
@@ -281,6 +287,8 @@ function parseArgs(argv) {
             args.rebuild = true;
         } else if (flag === '--force-snapshot') {
             args.forceSnapshot = true;
+        } else if (flag === '--detach') {
+            args.detach = true;
         } else if (flag === '--poll-interval' && i + 1 < raw.length) {
             args.pollInterval = Number(raw[++i]);
         } else if (flag === '--debounce' && i + 1 < raw.length) {
@@ -363,6 +371,9 @@ try {
         await buildIndex(args);
     } else if (args.command === 'search') {
         await search(args);
+    } else if (args.command === '__push-job') {
+        // The detached half of `push --detach` (lib/jobs.js) — never typed by a person.
+        await runPushJob(args.path);
     } else {
         console.error('Unknown command:', args.command);
         console.log(USAGE);

package/lib/commands/compact.js

@@ -12,6 +12,7 @@ import {
     resolveOffloadParams,
     discoverStreamId,
 } from './shared.js';
+import { settleStreamJobs } from '../jobs.js';
 
 /**
  * Monad has no rebate/refund concept — truncating a stream's history here gives back no
@@ -28,6 +29,7 @@ export async function compact(args) {
     if (!args.streamId) {
         throw new Error('stream-id is required for compact');
     }
+    await settleStreamJobs(args, { reason: 'before replacing the history with a fresh snapshot' });
 
     const fsFolder = new FSFolder(destPath, makeExcludes(args));
 

package/lib/commands/diff.js

@@ -12,6 +12,7 @@ import {
     folderExists,
     discoverStreamId,
 } from './shared.js';
+import { settleStreamJobs } from '../jobs.js';
 
 export function compareFileMaps(localFiles, remoteFiles) {
     const added = [];
@@ -55,6 +56,7 @@ export async function diff(args) {
     if (!args.streamId) {
         throw new Error('stream-id is required for diff');
     }
+    await settleStreamJobs(args, { wait: false });
 
     const client = await makeChainClient(args);
 

package/lib/commands/info.js

@@ -12,6 +12,7 @@ import {
     readManifest,
     streamIdsEqual,
 } from './shared.js';
+import { streamKey, latestJob, describeJob } from '../jobs.js';
 
 export async function info(args) {
     const client = await makeChainClient(args);
@@ -45,6 +46,14 @@ export async function info(args) {
         }
     }
 
+    // The last background push (`push --detach`) for this stream, whichever way its id is
+    // known — even with no --manifest, the folder's own manifest names the stream.
+    const jobStreamId = args.streamId || manifest?.streamId;
+    if (jobStreamId) {
+        const job = latestJob(streamKey({ chain: args.chain, contractAddress: args.contractAddress, streamId: jobStreamId }));
+        if (job) console.log('  background push:', describeJob(job));
+    }
+
     if (!args.streamId) {
         return;
     }

package/lib/commands/pull.js

@@ -11,6 +11,7 @@ import {
     formatStreamId,
     discoverStreamId,
 } from './shared.js';
+import { settleStreamJobs } from '../jobs.js';
 
 export async function pull(args) {
     // Resolved up front (throws if missing) so a missing path fails fast, before any chain
@@ -24,6 +25,10 @@ export async function pull(args) {
         throw new Error('stream-id is required for pull');
     }
 
+    // Pulling while a background push of this folder is still sending would restore the
+    // version before it — and delete the very files that push is uploading.
+    await settleStreamJobs(args, { reason: 'so the pull includes it' });
+
     const client = await makeChainClient(args);
 
     const mn = new Mnemonad({

package/lib/commands/push.js

@@ -19,8 +19,12 @@ import {
     streamIdsEqual,
     discoverStreamId,
     userError,
+    formatBytes,
+    formatPath,
 } from './shared.js';
 import { updateIndex, checkIndex, indexDbName } from './buildIndex.js';
+import { streamKey, waitForJobs, settleStreamJobs, startPushJob } from '../jobs.js';
+import { formatEther } from 'viem';
 
 export async function push(args) {
     const destPath = resolvePath(args.path, { mustExist: true });
@@ -31,6 +35,25 @@ export async function push(args) {
     await discoverStreamId(args, destPath);
     let streamId = args.streamId;
 
+    if (args.detach) {
+        // Creating a stream prints the id the user has to keep, and needs signatures that have
+        // to be seen to succeed — nothing worth handing off. --passkey's signer is a browser
+        // tab that closes when this process exits.
+        if (!streamId) {
+            throw userError(
+                '--detach only pushes to an existing stream. Pass its id, or --manifest on a folder\n' +
+                '  that has a .mnemonad, or push once without --detach to create the stream first.'
+            );
+        }
+        if (args.passkey) {
+            throw userError('--detach can\'t be combined with --passkey: the browser tab signing for it closes when this command exits.');
+        }
+    }
+
+    // A background push still sending to this stream means its next version isn't on chain
+    // yet — building on top of the current tip now would only lose the race to it.
+    await settleStreamJobs(args, { reason: 'before building the next version on top of it' });
+
     // Before anything is scanned or signed: the push below then picks the updated index up
     // like any other file. A failure stops the push outright — a push that silently went out
     // without the index asked for would leave the stream unsearchable with no sign of why.
@@ -67,6 +90,12 @@ export async function push(args) {
     const client = await makeChainClient(args);
     requireWalletClient(client);
 
+    // Same wallet, different stream: two processes sending at once would race for one nonce.
+    await waitForJobs(
+        { signer: client.account.address, chain: args.chain },
+        { reason: 'so the two pushes don\'t race for the same wallet nonce' },
+    );
+
     const baseParams = {
         publicClient: client.publicClient,
         walletClient: client.walletClient,
@@ -139,6 +168,11 @@ export async function push(args) {
         }
     }
 
+    if (args.detach) {
+        await detachPush({ args, mn, monadSync, fsFolder, client, streamId, destPath, existingVersions });
+        return;
+    }
+
     console.log('  building patch + pushing to chain...');
     const result = await monadSync.push(fsFolder);
 
@@ -156,6 +190,80 @@ export async function push(args) {
     }
 }
 
+/**
+ * `push --detach`: everything up to a finished patch runs here, so every error a user can act
+ * on still surfaces before this command exits. Only the sending — transactions, receipts, an
+ * IPFS upload — goes to a detached child (see lib/jobs.js), and this process exits as soon
+ * as it has started.
+ *
+ * The patch is frozen now: files edited after this command returns go into the next push,
+ * not this one. The manifest's file hashes are taken at the same moment for the same reason.
+ */
+async function detachPush({ args, mn, monadSync, fsFolder, client, streamId, destPath, existingVersions }) {
+    console.log('  building patch...');
+    const prepared = await monadSync.preparePush(fsFolder);
+
+    // A single-item patch is the common case and the only one estimatePushCost models; a
+    // segmented one (over 8 MB) just goes without an estimate rather than a wrong one.
+    let cost = null;
+    if (prepared.itemCount === 1) {
+        try {
+            cost = await mn.estimatePushCost(prepared.patchBytes);
+        } catch {
+            // No estimate is not a reason to stop — the child surfaces any real send error.
+        }
+    }
+    if (cost) {
+        const balance = await client.publicClient.getBalance({ address: client.account.address });
+        if (balance < cost.total) {
+            throw userError(
+                `not enough MON to push: about ${formatEther(cost.total)} needed, ` +
+                `${formatEther(balance)} in ${client.account.address}. Nothing was sent.`
+            );
+        }
+    }
+
+    const files = args.manifest ? await hashLocalTree(fsFolder) : null;
+    const job = await startPushJob(
+        {
+            streamId: formatStreamId(streamId),
+            streamKey: streamKey({ chain: args.chain, contractAddress: args.contractAddress, streamId }),
+            chain: args.chain,
+            signer: client.account.address,
+            folder: destPath,
+            baseLength: prepared.baseLength,
+            version: prepared.version,
+            kind: prepared.kind,
+            bytes: prepared.patchBytes.length,
+            manifest: files ? { files } : null,
+            // Everything the child needs to rebuild the same chain client — never a secret.
+            args: {
+                chain: args.chain,
+                rpcUrl: args.rpcUrl,
+                contractAddress: args.contractAddress,
+                gatewayUrl: args.gatewayUrl,
+                presignUrl: args.presignUrl,
+            },
+        },
+        prepared.patchBytes,
+        {
+            key: args.key || process.env.MNEMONAD_KEY || null,
+            phrase: args.phrase,
+            password: args.password,
+            pinataJwt: args.pinataJwt,
+        },
+    );
+
+    const patchType = existingVersions === 0 || prepared.kind === 'patch' ? 'full snapshot' : 'diff';
+    const compressedNote = args.compress !== false ? ', gzip compressed' : '';
+    console.log('  version', prepared.version, 'prepared (' + patchType + compressedNote + ', ' + formatBytes(prepared.patchBytes.length) + ')');
+    if (cost) console.log('  estimated cost:', formatEther(cost.total), 'MON');
+    console.log('  stream:', formatStreamId(streamId));
+    console.log('  sending in the background: job', job.id, '(pid ' + job.pid + ')');
+    console.log('  log:  ', formatPath(job.dir + '/push.log'));
+    console.log('  check: mnemonad info', formatPath(destPath) + (args.manifest ? ' --manifest' : ''));
+}
+
 /**
  * A folder that already carries an index, pushed without `--index` after its files changed,
  * would publish an index that no longer matches them — searches keep returning the old text's

package/lib/commands/watch.js

@@ -18,6 +18,7 @@ import {
     discoverStreamId,
     userError,
 } from './shared.js';
+import { settleStreamJobs } from '../jobs.js';
 import { makeIndexer, updateIndex } from './buildIndex.js';
 
 function timestamp() {
@@ -37,6 +38,7 @@ export async function watch(args) {
     // no need to require it again.
     await discoverStreamId(args, cwd);
     if (!args.streamId) throw new Error('stream-id is required for watch');
+    await settleStreamJobs(args, { reason: 'before watching' });
     const debounceMs = args.debounce ?? 5000;
     const pollIntervalMs = (args.pollInterval ?? 2) * 1000;
     const pushEnabled = !args.pullOnly;

package/lib/jobs.js

@@ -0,0 +1,380 @@
+/**
+ * Background push jobs — what `mnemonad push --detach` leaves behind.
+ *
+ * A detached push builds its patch in the foreground (every check that can fail for the
+ * user's own reasons runs there: ownership, unlocking, indexing, "nothing to push", the
+ * balance), then hands only the sending to a detached child process and exits. Each job is a
+ * folder under `~/.cache/mnemonad/jobs/<id>/`:
+ *
+ *   job.json   — what to send where, and the job's status (see JOB_STATUS)
+ *   patch.bin  — the prepared patch, frozen when the command ran; deleted once sent
+ *   push.log   — the child's own output
+ *
+ * Secrets (a key, a phrase, a password, a Pinata JWT) never touch this folder or the child's
+ * argv: the parent writes them to the child's stdin and closes it.
+ *
+ * Correctness never depends on the locking below. The child refuses to send a patch whose
+ * base version is gone (`MonadSync.commitPush`), and the contract rejects any write that
+ * doesn't land at the index it names. The waiting here only keeps the next command from
+ * racing a job it would lose to anyway — or, for a pull, from overwriting the folder with the
+ * version before the one still being sent.
+ */
+import { spawn } from 'node:child_process';
+import { openSync, closeSync, readdirSync, readFileSync, writeFileSync, renameSync, rmSync } from 'node:fs';
+import { mkdir, readFile, writeFile, rm } from 'node:fs/promises';
+import { randomBytes } from 'node:crypto';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import Mnemonad from 'mnemonad';
+import { MonadSync } from 'monadsync';
+import { makeChainClient, requireWalletClient } from './chainClient.js';
+import {
+    formatStreamId,
+    formatPath,
+    unlockStream,
+    resolveOffloadParams,
+    writeManifest,
+    userError,
+} from './commands/shared.js';
+
+const BIN_PATH = join(dirname(fileURLToPath(import.meta.url)), '..', 'bin', 'mnemonad.js');
+
+/** pending: written, child not started yet · waiting: queued behind an earlier job from the
+ *  same signer · sending: transactions in flight · done / failed: finished. */
+export const JOB_STATUS = { PENDING: 'pending', WAITING: 'waiting', SENDING: 'sending', DONE: 'done', FAILED: 'failed' };
+
+const ACTIVE = new Set([JOB_STATUS.PENDING, JOB_STATUS.WAITING, JOB_STATUS.SENDING]);
+
+/** A job still `pending` with no pid after this long never got its child started. */
+const SPAWN_GRACE_MS = 60_000;
+
+/** Finished jobs older than this are removed the next time a job is created. */
+const KEEP_FINISHED_MS = 14 * 24 * 60 * 60 * 1000;
+
+const POLL_MS = 1000;
+
+/** `MNEMONAD_JOBS_DIR` overrides the location (the tests use a temp dir). */
+export function jobsRoot() {
+    return process.env.MNEMONAD_JOBS_DIR || join(homedir(), '.cache', 'mnemonad', 'jobs');
+}
+
+/**
+ * Identifies a stream across commands: the same token id is a different stream on another
+ * chain or registry.
+ *
+ * @param {{chain: string, contractAddress: ?string, streamId: bigint|string}} where
+ */
+export function streamKey({ chain, contractAddress, streamId }) {
+    return `${chain}|${String(contractAddress || '').toLowerCase()}|${formatStreamId(streamId)}`;
+}
+
+function signerKey({ chain, signer }) {
+    return `${chain}|${String(signer || '').toLowerCase()}`;
+}
+
+function isPidAlive(pid) {
+    if (!pid) return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    } catch (err) {
+        // EPERM: the process exists, it's just not ours to signal.
+        return err.code === 'EPERM';
+    }
+}
+
+function writeJobSync(dir, job) {
+    // Synchronous on purpose: callers read-modify-write job.json from two processes, and a
+    // torn async write would leave a half-written file for the other side to parse.
+    const tmp = join(dir, `job.json.${process.pid}.tmp`);
+    writeFileSync(tmp, JSON.stringify(job, null, 2));
+    renameSync(tmp, join(dir, 'job.json'));
+}
+
+function readJobSync(dir) {
+    try {
+        return JSON.parse(readFileSync(join(dir, 'job.json'), 'utf8'));
+    } catch {
+        return null;
+    }
+}
+
+/**
+ * Re-reads a job and settles it as failed when it claims to be running but nothing is: the
+ * child was killed, the machine slept through a crash, or the spawn never happened.
+ */
+function refreshJob(dir) {
+    const job = readJobSync(dir);
+    if (!job || !ACTIVE.has(job.status)) return job;
+
+    const neverStarted = !job.pid && Date.now() - Date.parse(job.createdAt) > SPAWN_GRACE_MS;
+    if (neverStarted || (job.pid && !isPidAlive(job.pid))) {
+        const settled = {
+            ...job,
+            status: JOB_STATUS.FAILED,
+            error: neverStarted
+                ? 'the background process never started'
+                : 'the background process exited before finishing',
+            finishedAt: new Date().toISOString(),
+            reported: false,
+        };
+        writeJobSync(dir, settled);
+        return settled;
+    }
+    return job;
+}
+
+/** Every job on disk, oldest first, with dead ones settled as failed. */
+export function listJobs() {
+    let names;
+    try {
+        names = readdirSync(jobsRoot());
+    } catch {
+        return [];
+    }
+    const jobs = [];
+    for (const name of names) {
+        const dir = join(jobsRoot(), name);
+        const job = refreshJob(dir);
+        if (job) jobs.push({ ...job, dir });
+    }
+    return jobs.sort((a, b) => a.createdAt.localeCompare(b.createdAt) || a.id.localeCompare(b.id));
+}
+
+export function isActive(job) {
+    return ACTIVE.has(job.status);
+}
+
+/** Jobs still running for a stream (`{streamKey}`) or a signer (`{signer, chain}`). */
+export function activeJobs(selector) {
+    return listJobs().filter((job) => isActive(job) && matches(job, selector));
+}
+
+function matches(job, selector) {
+    if (selector.streamKey) return job.streamKey === selector.streamKey;
+    return signerKey(job) === signerKey(selector);
+}
+
+/** The most recent job for a stream, active or not. */
+export function latestJob(key) {
+    const jobs = listJobs().filter((job) => job.streamKey === key);
+    return jobs.length ? jobs[jobs.length - 1] : null;
+}
+
+/**
+ * Blocks until no job matching `selector` is still running, printing one line while it
+ * waits. Returns how many it waited for.
+ *
+ * @param {{streamKey: string}|{signer: string, chain: string}} selector
+ * @param {Object} [opts]
+ * @param {string} [opts.reason] - why this command has to wait, for the printed line
+ */
+export async function waitForJobs(selector, { reason = 'before continuing' } = {}) {
+    let first = activeJobs(selector);
+    if (!first.length) return 0;
+
+    const job = first[first.length - 1];
+    console.log(
+        `  waiting for background push ${job.id} (version ${job.version}) to finish ${reason}...\n` +
+        `  log: ${formatPath(join(job.dir, 'push.log'))}`
+    );
+    while (first.length) {
+        await new Promise((r) => setTimeout(r, POLL_MS));
+        first = activeJobs(selector);
+    }
+    return 1;
+}
+
+/**
+ * Prints a failed job's error once — the next command on that stream after the failure —
+ * then marks it reported, so a failure is never silent past one run but doesn't nag forever.
+ * `mnemonad info` keeps showing it regardless (see describeJob).
+ */
+export function reportFailedJob(key) {
+    const job = latestJob(key);
+    if (!job || job.status !== JOB_STATUS.FAILED || job.reported) return;
+    console.log(
+        `  warning: background push ${job.id} (version ${job.version}) failed: ${job.error}\n` +
+        `           nothing from it reached the stream. Log: ${formatPath(join(job.dir, 'push.log'))}`
+    );
+    writeJobSync(job.dir, { ...readJobSync(job.dir), reported: true });
+}
+
+/**
+ * What every command that touches a stream calls once its id is known: reports a failed
+ * background push (once), then either waits for a running one (`wait: true` — push, pull,
+ * compact, watch: anything that would build on, or overwrite with, the version before it) or
+ * just says one is running (diff, which only reads).
+ *
+ * @param {Object} args - parsed CLI args; needs `chain`, `contractAddress`, `streamId`
+ * @param {Object} [opts]
+ * @param {boolean} [opts.wait=true]
+ * @param {string} [opts.reason] - see waitForJobs
+ */
+export async function settleStreamJobs(args, { wait = true, reason } = {}) {
+    if (!args.streamId) return;
+    const key = streamKey({ chain: args.chain, contractAddress: args.contractAddress, streamId: args.streamId });
+    reportFailedJob(key);
+    if (wait) {
+        await waitForJobs({ streamKey: key }, { reason });
+        return;
+    }
+    const running = activeJobs({ streamKey: key });
+    if (running.length) {
+        const job = running[running.length - 1];
+        console.log(
+            `  note: background push ${job.id} (version ${job.version}) is still sending —\n` +
+            '        this compares against the chain as it is before that version lands'
+        );
+    }
+}
+
+/** One line for `mnemonad info`. */
+export function describeJob(job) {
+    const log = formatPath(join(job.dir, 'push.log'));
+    switch (job.status) {
+        case JOB_STATUS.DONE:
+            return `version ${job.version} sent ${job.finishedAt} (job ${job.id})`;
+        case JOB_STATUS.FAILED:
+            return `version ${job.version} FAILED: ${job.error} (job ${job.id}, log: ${log})`;
+        case JOB_STATUS.WAITING:
+            return `version ${job.version} queued behind another push from the same wallet (job ${job.id}, log: ${log})`;
+        default:
+            return `version ${job.version} still sending (job ${job.id}, pid ${job.pid ?? '?'}, log: ${log})`;
+    }
+}
+
+function pruneFinishedJobs() {
+    for (const job of listJobs()) {
+        if (isActive(job) || !job.finishedAt) continue;
+        if (Date.now() - Date.parse(job.finishedAt) > KEEP_FINISHED_MS) {
+            rmSync(job.dir, { recursive: true, force: true });
+        }
+    }
+}
+
+/**
+ * Writes a job and starts its detached child.
+ *
+ * @param {Object} job - everything the child needs except secrets; see push.js's detachPush
+ * @param {Uint8Array} patchBytes
+ * @param {{key?: ?string, phrase?: ?string, password?: ?string, pinataJwt?: ?string}} secrets
+ * @returns {Promise<{id: string, dir: string, pid: number}>}
+ */
+export async function startPushJob(job, patchBytes, secrets) {
+    pruneFinishedJobs();
+
+    const id = randomBytes(4).toString('hex');
+    const dir = join(jobsRoot(), id);
+    await mkdir(dir, { recursive: true });
+    await writeFile(join(dir, 'patch.bin'), patchBytes);
+    writeJobSync(dir, { ...job, id, status: JOB_STATUS.PENDING, pid: null, createdAt: new Date().toISOString() });
+
+    const logFd = openSync(join(dir, 'push.log'), 'a');
+    let child;
+    try {
+        child = spawn(process.execPath, [BIN_PATH, '__push-job', dir], {
+            detached: true,
+            stdio: ['pipe', logFd, logFd],
+            windowsHide: true,
+        });
+    } finally {
+        closeSync(logFd);
+    }
+
+    writeJobSync(dir, { ...readJobSync(dir), pid: child.pid });
+    child.stdin.end(JSON.stringify(secrets));
+    child.unref();
+    return { id, dir, pid: child.pid };
+}
+
+async function readStdin() {
+    const parts = [];
+    for await (const part of process.stdin) parts.push(part);
+    const raw = Buffer.concat(parts).toString('utf8');
+    return raw ? JSON.parse(raw) : {};
+}
+
+function log(...parts) {
+    console.log(new Date().toISOString(), ...parts);
+}
+
+/**
+ * The detached child: `mnemonad __push-job <dir>`. Never typed by a person — not in --help.
+ *
+ * Waits its turn behind earlier jobs from the same signer (two processes sending with one key
+ * would race for the same nonce), then sends the prepared patch from a fresh, never-replayed
+ * Mnemonad instance, and on success writes the folder's .mnemonad exactly like a foreground
+ * `push --manifest` would have.
+ *
+ * @param {string} dir - the job folder
+ */
+export async function runPushJob(dir) {
+    if (!dir) throw userError('__push-job needs a job folder');
+    const secrets = await readStdin();
+
+    let job = readJobSync(dir);
+    if (!job) throw userError(`no job at ${dir}`);
+    const update = (fields) => {
+        job = { ...readJobSync(dir), ...fields };
+        writeJobSync(dir, job);
+    };
+    update({ pid: process.pid });
+
+    try {
+        const earlier = () => activeJobs({ signer: job.signer, chain: job.chain })
+            .filter((other) => other.createdAt < job.createdAt || (other.createdAt === job.createdAt && other.id < job.id));
+        if (earlier().length) {
+            update({ status: JOB_STATUS.WAITING });
+            log(`waiting for earlier background push(es) from ${job.signer}...`);
+            while (earlier().length) await new Promise((r) => setTimeout(r, POLL_MS));
+        }
+
+        update({ status: JOB_STATUS.SENDING, startedAt: new Date().toISOString() });
+        log(`sending version ${job.version} of ${job.streamId} on ${job.chain}...`);
+
+        const args = { ...job.args, key: secrets.key ?? null, phrase: secrets.phrase ?? null, password: secrets.password ?? null, pinataJwt: secrets.pinataJwt ?? null, passkey: false };
+        const client = await makeChainClient(args);
+        requireWalletClient(client);
+
+        const mn = new Mnemonad({
+            publicClient: client.publicClient,
+            walletClient: client.walletClient,
+            contractAddress: client.contractAddress,
+            id: job.streamId,
+            ...resolveOffloadParams(args, client.account),
+        });
+        await unlockStream(mn, { password: args.password, signer: client.walletClient });
+
+        const patchBytes = new Uint8Array(await readFile(join(dir, 'patch.bin')));
+        const result = await new MonadSync({ mnemonad: mn }).commitPush({ patchBytes, baseLength: job.baseLength });
+
+        if (job.manifest) {
+            await writeManifest(job.folder, { streamId: job.streamId, version: result.version, files: job.manifest.files });
+        }
+        update({ status: JOB_STATUS.DONE, version: result.version, finishedAt: new Date().toISOString() });
+        log(`version ${result.version} pushed`);
+    } catch (err) {
+        const error = err.code === 'STREAM_MOVED'
+            ? `the stream changed after this push was prepared (it was built on version ${job.baseLength}) — push again`
+            : err.message;
+        update({ status: JOB_STATUS.FAILED, error, finishedAt: new Date().toISOString(), reported: false });
+        log('failed:', err.stack || err.message);
+        process.exitCode = 1;
+    } finally {
+        await rm(join(dir, 'patch.bin'), { force: true });
+    }
+}
+
+/** For tests: blocks until a job has finished, and returns it. */
+export async function waitForJob(dir, { timeoutMs = 60_000 } = {}) {
+    const deadline = Date.now() + timeoutMs;
+    for (;;) {
+        const job = refreshJob(dir);
+        if (job && !isActive(job)) return job;
+        if (Date.now() > deadline) throw new Error(`job ${dir} still ${job?.status} after ${timeoutMs} ms`);
+        await new Promise((r) => setTimeout(r, 200));
+    }
+}
+

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mnemonad-cli",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "CLI to sync local folders to versioned, diffed on-chain streams on Monad, backed by Mnemonad + monadsync.",
   "repository": {
     "type": "git",
@@ -26,7 +26,7 @@
     "@sqliteai/sqlite-vector": "^1.1.2",
     "better-sqlite3": "^13.0.3",
     "mnemonad": "^0.0.1",
-    "monadsync": "^0.0.1",
+    "monadsync": "^0.0.2",
     "open": "^11.0.4",
     "viem": "^2.56.3",
     "ws": "^8.22.0"