movehat 0.1.8 → 0.2.0

package/dist/core/movementProfile.js

@@ -0,0 +1,150 @@
+import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from "fs";
+import { readFile } from "fs/promises";
+import { dirname } from "path";
+import { randomUUID } from "crypto";
+import * as yaml from "js-yaml";
+/**
+ * Shared helpers for working with the Movement CLI's `~/.aptos/config.yaml`
+ * profile file and the SIGINT/SIGTERM cleanup pipeline.
+ *
+ * Extracted from `core/Publisher.ts` so both the existing `move publish`
+ * flow (`Publisher`) and the new `move deploy-object` / `upgrade-object`
+ * flows (`harness/codeObject.ts`) can share the bug #36 / #37 / #43
+ * hardening without duplicating it.
+ *
+ * @internal — not exported from `src/index.ts`.
+ */
+/**
+ * In-process serializer for `~/.aptos/config.yaml` mutations. Without it,
+ * two concurrent profile writes would race in the read-modify-write cycle
+ * and the second writer would silently drop the first's profile. See #37.
+ */
+let yamlLock = Promise.resolve();
+export function withYamlLock(fn) {
+    const prev = yamlLock;
+    // .then(success, failure) — continue even if the previous holder rejected,
+    // so a failure in one deploy doesn't poison the lock for the others.
+    const next = prev.then(() => fn(), () => fn());
+    yamlLock = next.catch(() => { }); // swallow on the shared chain; caller still gets the original
+    return next;
+}
+/**
+ * Atomic write: write payload to a temp sibling → chmod the temp to 0o600
+ * → rename over the target. The chmod-before-rename order eliminates a
+ * window where the target file could be observable with default umask
+ * perms (typically 0o644) while carrying the private key.
+ */
+function atomicWriteYaml(path, content) {
+    const tmpPath = `${path}.tmp.${randomUUID().slice(0, 8)}`;
+    writeFileSync(tmpPath, content, { mode: 0o600 });
+    chmodSync(tmpPath, 0o600); // defense in depth in case umask filtered the open mode
+    renameSync(tmpPath, path);
+}
+/** Add the deploy's profile to ~/.aptos/config.yaml. Creates the file if absent. */
+export async function addProfile(configPath, name, data) {
+    const configDir = dirname(configPath);
+    if (!existsSync(configDir)) {
+        mkdirSync(configDir, { recursive: true, mode: 0o700 });
+    }
+    let yamlObj = {};
+    if (existsSync(configPath)) {
+        const raw = await readFile(configPath, "utf-8");
+        yamlObj = yaml.load(raw) || {};
+    }
+    if (!yamlObj.profiles)
+        yamlObj.profiles = {};
+    yamlObj.profiles[name] = data;
+    atomicWriteYaml(configPath, yaml.dump(yamlObj));
+}
+/**
+ * Remove the deploy's profile from ~/.aptos/config.yaml. Idempotent —
+ * a missing file or missing profile is a no-op. If removal leaves the
+ * yaml with only an empty `profiles:` block, the whole file is unlinked
+ * to preserve the "didn't exist before" semantic for the first-ever deploy.
+ */
+export async function removeProfile(configPath, name) {
+    if (!existsSync(configPath))
+        return;
+    const raw = await readFile(configPath, "utf-8");
+    const yamlObj = yaml.load(raw) || {};
+    if (!yamlObj.profiles || !(name in yamlObj.profiles))
+        return;
+    delete yamlObj.profiles[name];
+    const profilesEmpty = Object.keys(yamlObj.profiles).length === 0;
+    const onlyProfilesKey = Object.keys(yamlObj).length === 1 && "profiles" in yamlObj;
+    if (profilesEmpty && onlyProfilesKey) {
+        // We created this file fresh; remove it.
+        try {
+            unlinkSync(configPath);
+        }
+        catch {
+            // best-effort
+        }
+        return;
+    }
+    atomicWriteYaml(configPath, yaml.dump(yamlObj));
+}
+/**
+ * Synchronous twin of `removeProfile` for the SIGINT/SIGTERM handler.
+ * The event loop is dead by the time the handler runs — we cannot
+ * await. Bypasses the async mutex because signal handlers are
+ * sequential by construction; the operation is idempotent so a
+ * benign double-delete (handler then finally, or vice versa) is fine.
+ */
+export function removeProfileSync(configPath, name) {
+    try {
+        if (!existsSync(configPath))
+            return;
+        const raw = readFileSync(configPath, "utf-8");
+        const yamlObj = yaml.load(raw) || {};
+        if (!yamlObj.profiles || !(name in yamlObj.profiles))
+            return;
+        delete yamlObj.profiles[name];
+        const profilesEmpty = Object.keys(yamlObj.profiles).length === 0;
+        const onlyProfilesKey = Object.keys(yamlObj).length === 1 && "profiles" in yamlObj;
+        if (profilesEmpty && onlyProfilesKey) {
+            unlinkSync(configPath);
+            return;
+        }
+        atomicWriteYaml(configPath, yaml.dump(yamlObj));
+    }
+    catch {
+        // Signal handlers should never throw — swallow and exit. Better to
+        // leave a stale profile (recoverable by re-running the deploy) than
+        // to crash the parent process mid-shutdown.
+    }
+}
+/**
+ * Process-level signal handling. A single registered handler iterates
+ * the per-deploy cleanup callbacks. Install-once because multiple
+ * concurrent deploys share the same parent process — installing per
+ * deploy would re-add the listener and exceed Node's max-listeners
+ * warning threshold under heavy parallelism.
+ */
+export const cleanupCallbacks = new Set();
+let signalHandlerInstalled = false;
+export function ensureSignalHandler() {
+    if (signalHandlerInstalled)
+        return;
+    signalHandlerInstalled = true;
+    const handler = (sig) => {
+        // Synchronous cleanup of every active deploy's profile entry.
+        for (const cb of [...cleanupCallbacks]) {
+            try {
+                cb();
+            }
+            catch {
+                /* sync best-effort */
+            }
+        }
+        // Defer the actual exit one tick so other listeners (vitest's own
+        // SIGINT handler, app-level shutdown hooks) still get to run.
+        // Without this we'd stomp on vitest's afterEach if a dev Ctrl+C'd
+        // a test run mid-suite.
+        const code = sig === "SIGTERM" ? 143 : 130;
+        setImmediate(() => process.exit(code));
+    };
+    process.on("SIGINT", handler);
+    process.on("SIGTERM", handler);
+}
+//# sourceMappingURL=movementProfile.js.map

package/dist/core/movementProfile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"movementProfile.js","sourceRoot":"","sources":["../../src/core/movementProfile.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,KAAK,IAAI,MAAM,SAAS,CAAC;AAEhC;;;;;;;;;;GAUG;AAEH;;;;GAIG;AACH,IAAI,QAAQ,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;AACnD,MAAM,UAAU,YAAY,CAAI,EAAoB;IAClD,MAAM,IAAI,GAAG,QAAQ,CAAC;IACtB,2EAA2E;IAC3E,qEAAqE;IACrE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CACpB,GAAG,EAAE,CAAC,EAAE,EAAE,EACV,GAAG,EAAE,CAAC,EAAE,EAAE,CACX,CAAC;IACF,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,8DAA8D;IAC/F,OAAO,IAAI,CAAC;AACd,CAAC;AAcD;;;;;GAKG;AACH,SAAS,eAAe,CAAC,IAAY,EAAE,OAAe;IACpD,MAAM,OAAO,GAAG,GAAG,IAAI,QAAQ,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC1D,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,wDAAwD;IACnF,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,UAAkB,EAClB,IAAY,EACZ,IAAiB;IAEjB,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,OAAO,GAAoB,EAAE,CAAC;IAClC,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAChD,OAAO,GAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAqB,IAAI,EAAE,CAAC;IACtD,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,QAAQ;QAAE,OAAO,CAAC,QAAQ,GAAG,EAAE,CAAC;IAC7C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC9B,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAkB,EAAE,IAAY;IAClE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO;IACpC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,OAAO,GAAqB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAqB,IAAI,EAAE,CAAC;IAC3E,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO;IAC7D,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE9B,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IACjE,MAAM,eAAe,GACnB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,IAAI,OAAO,CAAC;IAC7D,IAAI,aAAa,IAAI,eAAe,EAAE,CAAC;QACrC,yCAAyC;QACzC,IAAI,CAAC;YACH,UAAU,CAAC,UAAU,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,OAAO;IACT,CAAC;IACD,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,IAAY;IAChE,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO;QACpC,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAqB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAqB,IAAI,EAAE,CAAC;QAC3E,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC;YAAE,OAAO;QAC7D,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAE9B,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;QACjE,MAAM,eAAe,GACnB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,IAAI,OAAO,CAAC;QAC7D,IAAI,aAAa,IAAI,eAAe,EAAE,CAAC;YACrC,UAAU,CAAC,UAAU,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QACD,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,oEAAoE;QACpE,4CAA4C;IAC9C,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAc,CAAC;AACtD,IAAI,sBAAsB,GAAG,KAAK,CAAC;AAEnC,MAAM,UAAU,mBAAmB;IACjC,IAAI,sBAAsB;QAAE,OAAO;IACnC,sBAAsB,GAAG,IAAI,CAAC;IAC9B,MAAM,OAAO,GAAG,CAAC,GAAmB,EAAE,EAAE;QACtC,8DAA8D;QAC9D,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,gBAAgB,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,EAAE,EAAE,CAAC;YACP,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;QACH,CAAC;QACD,kEAAkE;QAClE,8DAA8D;QAC9D,kEAAkE;QAClE,wBAAwB;QACxB,MAAM,IAAI,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC3C,YAAY,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AACjC,CAAC"}

package/dist/core/shell.d.ts

@@ -7,19 +7,35 @@
  */
 export declare function escapeShellArg(arg: string): string;
 /**
- * Validates that a path is safe (no command injection characters)
- * and returns the escaped version
+ * Validates that a path is safe (no command injection characters) and
+ * returns it unchanged. Use this for callers that pass paths to spawn-with-
+ * args (no shell), where shell quoting would be incorrect.
  *
- * @param path - The path to validate and escape
+ * @param path - The path to validate
  * @param name - Name for error messages (e.g., "package directory")
+ * @returns The original path, after validation
+ */
+export declare function validatePathSafety(path: string, name?: string): string;
+/**
+ * Validates a path and returns the shell-escaped form. Wraps
+ * `validatePathSafety` for callers that pass paths into shell-style
+ * commands (e.g. `exec`).
+ *
+ * @param path - The path to validate and escape
+ * @param name - Name for error messages
  * @returns The escaped path safe for shell execution
  */
 export declare function validateAndEscapePath(path: string, name?: string): string;
 /**
- * Validates that a profile name is safe
- *
- * @param profile - The profile name to validate
- * @returns The escaped profile name
+ * Validates that a profile name is safe and returns it unchanged. Mirrors
+ * `validatePathSafety` — use this for callers that pass the profile to
+ * spawn-with-args (no shell), where shell quoting would be incorrect.
+ */
+export declare function validateProfileSafety(profile: string): string;
+/**
+ * Validates a profile and returns the shell-escaped form. Wraps
+ * `validateProfileSafety` for callers that pass the profile into shell-style
+ * commands (e.g. `exec`).
  */
 export declare function validateAndEscapeProfile(profile: string): string;
 //# sourceMappingURL=shell.d.ts.map

package/dist/core/shell.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../src/core/shell.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQlD;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,MAAe,GAAG,MAAM,CAiBjF;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAehE"}
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../src/core/shell.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQlD;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,MAAe,GAAG,MAAM,CAgB9E;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,MAAe,GAAG,MAAM,CAEjF;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAc7D;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEhE"}

package/dist/core/shell.js

@@ -14,43 +14,61 @@ export function escapeShellArg(arg) {
     return `'${arg.replace(/'/g, "'\\''")}'`;
 }
 /**
- * Validates that a path is safe (no command injection characters)
- * and returns the escaped version
+ * Validates that a path is safe (no command injection characters) and
+ * returns it unchanged. Use this for callers that pass paths to spawn-with-
+ * args (no shell), where shell quoting would be incorrect.
  *
- * @param path - The path to validate and escape
+ * @param path - The path to validate
  * @param name - Name for error messages (e.g., "package directory")
- * @returns The escaped path safe for shell execution
+ * @returns The original path, after validation
  */
-export function validateAndEscapePath(path, name = "path") {
+export function validatePathSafety(path, name = "path") {
     if (!path || typeof path !== "string") {
         throw new Error(`Invalid ${name}: must be a non-empty string`);
     }
-    // Check for obvious command injection attempts
+    // Check for obvious command injection attempts.
     const dangerousChars = /[;&|`$(){}[\]<>]/;
     if (dangerousChars.test(path)) {
         throw new Error(`Invalid ${name}: "${path}"\n` +
             `Path contains potentially dangerous characters.\n` +
             `Allowed characters: letters, numbers, ., -, _, /, \\, spaces`);
     }
-    // Escape for shell safety
-    return escapeShellArg(path);
+    return path;
 }
 /**
- * Validates that a profile name is safe
+ * Validates a path and returns the shell-escaped form. Wraps
+ * `validatePathSafety` for callers that pass paths into shell-style
+ * commands (e.g. `exec`).
  *
- * @param profile - The profile name to validate
- * @returns The escaped profile name
+ * @param path - The path to validate and escape
+ * @param name - Name for error messages
+ * @returns The escaped path safe for shell execution
  */
-export function validateAndEscapeProfile(profile) {
+export function validateAndEscapePath(path, name = "path") {
+    return escapeShellArg(validatePathSafety(path, name));
+}
+/**
+ * Validates that a profile name is safe and returns it unchanged. Mirrors
+ * `validatePathSafety` — use this for callers that pass the profile to
+ * spawn-with-args (no shell), where shell quoting would be incorrect.
+ */
+export function validateProfileSafety(profile) {
     if (!profile || typeof profile !== "string") {
         throw new Error("Invalid profile name: must be a non-empty string");
     }
-    // Profile names should only contain alphanumeric, hyphens, underscores
     const safePattern = /^[a-zA-Z0-9_-]+$/;
     if (!safePattern.test(profile)) {
         throw new Error(`Invalid profile name: "${profile}"\n` +
             `Only alphanumeric characters, hyphens (-), and underscores (_) are allowed.`);
     }
-    return escapeShellArg(profile);
+    return profile;
+}
+/**
+ * Validates a profile and returns the shell-escaped form. Wraps
+ * `validateProfileSafety` for callers that pass the profile into shell-style
+ * commands (e.g. `exec`).
+ */
+export function validateAndEscapeProfile(profile) {
+    return escapeShellArg(validateProfileSafety(profile));
 }
 //# sourceMappingURL=shell.js.map

package/dist/core/shell.js.map

@@ -1 +1 @@
-{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../src/core/shell.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,iFAAiF;IACjF,gEAAgE;IAChE,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC3C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,OAAe,MAAM;IACvE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,8BAA8B,CAAC,CAAC;IACjE,CAAC;IAED,+CAA+C;IAC/C,MAAM,cAAc,GAAG,kBAAkB,CAAC;IAC1C,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,WAAW,IAAI,MAAM,IAAI,KAAK;YAC9B,mDAAmD;YACnD,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IAED,0BAA0B;IAC1B,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IAED,uEAAuE;IACvE,MAAM,WAAW,GAAG,kBAAkB,CAAC;IACvC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,0BAA0B,OAAO,KAAK;YACtC,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IAED,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC"}
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../src/core/shell.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,iFAAiF;IACjF,gEAAgE;IAChE,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC3C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,OAAe,MAAM;IACpE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,8BAA8B,CAAC,CAAC;IACjE,CAAC;IAED,gDAAgD;IAChD,MAAM,cAAc,GAAG,kBAAkB,CAAC;IAC1C,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,WAAW,IAAI,MAAM,IAAI,KAAK;YAC9B,mDAAmD;YACnD,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,OAAe,MAAM;IACvE,OAAO,cAAc,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,WAAW,GAAG,kBAAkB,CAAC;IACvC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,0BAA0B,OAAO,KAAK;YACtC,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,OAAO,cAAc,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;AACxD,CAAC"}

package/dist/errors.d.ts

@@ -9,4 +9,39 @@ export declare class ModuleAlreadyDeployedError extends Error {
     readonly txHash?: string | undefined;
     constructor(message: string, moduleName: string, network: string, address: string, timestamp: number, txHash?: string | undefined);
 }
+import type { DeploymentInfo } from './core/deployments.js';
+/**
+ * Thrown when the on-chain publish succeeded but a subsequent local
+ * step (saveDeployment, profile cleanup, etc.) failed.
+ *
+ * Distinct from `CliExecutionError`: by the time this error fires, the
+ * module IS deployed on-chain. Callers that want to recover can read
+ * `deployment` and re-attempt the local-side persistence manually
+ * (e.g. write the JSON to `deployments/{network}/{moduleName}.json`).
+ *
+ * Without this distinction, the same outer catch would surface a
+ * post-publish filesystem failure as "Failed to publish module",
+ * inviting an accidental redeploy that wastes gas.
+ */
+export declare class PostPublishError extends Error {
+    readonly deployment: DeploymentInfo;
+    readonly cause: Error;
+    constructor(message: string, deployment: DeploymentInfo, cause: Error);
+}
+/**
+ * Thrown by runCli when a spawned process exits with a non-zero status.
+ *
+ * `stderr`, `stdoutPreview`, and each entry in `args` are redacted of
+ * well-known secret shapes (private keys, etc.) in the constructor, so the
+ * error is safe to log regardless of how it was raised. Redaction is
+ * idempotent.
+ */
+export declare class CliExecutionError extends Error {
+    readonly command: string;
+    readonly exitCode: number;
+    readonly stderr: string;
+    readonly stdoutPreview: string;
+    readonly args: readonly string[];
+    constructor(message: string, command: string, args: readonly string[], exitCode: number, stderr: string, stdoutPreview: string);
+}
 //# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;aAGjC,UAAU,EAAE,MAAM;aAClB,OAAO,EAAE,MAAM;aACf,OAAO,EAAE,MAAM;aACf,SAAS,EAAE,MAAM;aACjB,MAAM,CAAC,EAAE,MAAM;gBAL/B,OAAO,EAAE,MAAM,EACC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,YAAA;CAUlC"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;aAGjC,UAAU,EAAE,MAAM;aAClB,OAAO,EAAE,MAAM;aACf,OAAO,EAAE,MAAM;aACf,SAAS,EAAE,MAAM;aACjB,MAAM,CAAC,EAAE,MAAM;gBAL/B,OAAO,EAAE,MAAM,EACC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,YAAA;CAUlC;AAGD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D;;;;;;;;;;;;GAYG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;aAGvB,UAAU,EAAE,cAAc;aAC1B,KAAK,EAAE,KAAK;gBAF5B,OAAO,EAAE,MAAM,EACC,UAAU,EAAE,cAAc,EAC1B,KAAK,EAAE,KAAK;CAS/B;AAED;;;;;;;GAOG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;aAKxB,OAAO,EAAE,MAAM;aAEf,QAAQ,EAAE,MAAM;aAChB,MAAM,EAAE,MAAM;aACd,aAAa,EAAE,MAAM;IARvC,SAAgB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;gBAGtC,OAAO,EAAE,MAAM,EACC,OAAO,EAAE,MAAM,EAC/B,IAAI,EAAE,SAAS,MAAM,EAAE,EACP,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM;CAUxC"}

package/dist/errors.js

@@ -21,4 +21,58 @@ export class ModuleAlreadyDeployedError extends Error {
         }
     }
 }
+import { redactSecrets } from './utils/redact.js';
+/**
+ * Thrown when the on-chain publish succeeded but a subsequent local
+ * step (saveDeployment, profile cleanup, etc.) failed.
+ *
+ * Distinct from `CliExecutionError`: by the time this error fires, the
+ * module IS deployed on-chain. Callers that want to recover can read
+ * `deployment` and re-attempt the local-side persistence manually
+ * (e.g. write the JSON to `deployments/{network}/{moduleName}.json`).
+ *
+ * Without this distinction, the same outer catch would surface a
+ * post-publish filesystem failure as "Failed to publish module",
+ * inviting an accidental redeploy that wastes gas.
+ */
+export class PostPublishError extends Error {
+    deployment;
+    cause;
+    constructor(message, deployment, cause) {
+        super(message);
+        this.deployment = deployment;
+        this.cause = cause;
+        this.name = 'PostPublishError';
+        if (Error.captureStackTrace) {
+            Error.captureStackTrace(this, PostPublishError);
+        }
+    }
+}
+/**
+ * Thrown by runCli when a spawned process exits with a non-zero status.
+ *
+ * `stderr`, `stdoutPreview`, and each entry in `args` are redacted of
+ * well-known secret shapes (private keys, etc.) in the constructor, so the
+ * error is safe to log regardless of how it was raised. Redaction is
+ * idempotent.
+ */
+export class CliExecutionError extends Error {
+    command;
+    exitCode;
+    stderr;
+    stdoutPreview;
+    args;
+    constructor(message, command, args, exitCode, stderr, stdoutPreview) {
+        super(message);
+        this.command = command;
+        this.exitCode = exitCode;
+        this.stderr = stderr;
+        this.stdoutPreview = stdoutPreview;
+        this.name = 'CliExecutionError';
+        this.args = args.map(redactSecrets);
+        if (Error.captureStackTrace) {
+            Error.captureStackTrace(this, CliExecutionError);
+        }
+    }
+}
 //# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAGjC;IACA;IACA;IACA;IACA;IANlB,YACE,OAAe,EACC,UAAkB,EAClB,OAAe,EACf,OAAe,EACf,SAAiB,EACjB,MAAe;QAE/B,KAAK,CAAC,OAAO,CAAC,CAAC;QANC,eAAU,GAAV,UAAU,CAAQ;QAClB,YAAO,GAAP,OAAO,CAAQ;QACf,YAAO,GAAP,OAAO,CAAQ;QACf,cAAS,GAAT,SAAS,CAAQ;QACjB,WAAM,GAAN,MAAM,CAAS;QAG/B,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QAEzC,qFAAqF;QACrF,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAGjC;IACA;IACA;IACA;IACA;IANlB,YACE,OAAe,EACC,UAAkB,EAClB,OAAe,EACf,OAAe,EACf,SAAiB,EACjB,MAAe;QAE/B,KAAK,CAAC,OAAO,CAAC,CAAC;QANC,eAAU,GAAV,UAAU,CAAQ;QAClB,YAAO,GAAP,OAAO,CAAQ;QACf,YAAO,GAAP,OAAO,CAAQ;QACf,cAAS,GAAT,SAAS,CAAQ;QACjB,WAAM,GAAN,MAAM,CAAS;QAG/B,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QAEzC,qFAAqF;QACrF,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;CACF;AAED,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGlD;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAGvB;IACA;IAHlB,YACE,OAAe,EACC,UAA0B,EAC1B,KAAY;QAE5B,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,eAAU,GAAV,UAAU,CAAgB;QAC1B,UAAK,GAAL,KAAK,CAAO;QAG5B,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAE/B,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAKxB;IAEA;IACA;IACA;IARF,IAAI,CAAoB;IAExC,YACE,OAAe,EACC,OAAe,EAC/B,IAAuB,EACP,QAAgB,EAChB,MAAc,EACd,aAAqB;QAErC,KAAK,CAAC,OAAO,CAAC,CAAC;QANC,YAAO,GAAP,OAAO,CAAQ;QAEf,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAAQ;QACd,kBAAa,GAAb,aAAa,CAAQ;QAGrC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAEpC,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;CACF"}

package/dist/fork/__tests__/manager.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=manager.test.d.ts.map

package/dist/fork/__tests__/manager.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.test.d.ts","sourceRoot":"","sources":["../../../src/fork/__tests__/manager.test.ts"],"names":[],"mappings":""}