movehat 0.1.8 → 0.2.0

package/dist/harness/Harness.js

@@ -0,0 +1,193 @@
+import { setupLocalTesting } from "../helpers/setupLocalTesting.js";
+import { initRuntime } from "../runtime.js";
+import { createHarnessProxy } from "./proxy.js";
+import { deployCodeObject, upgradeCodeObject } from "./codeObject.js";
+import { runViewFunction } from "./view.js";
+import { runMoveScript } from "./script.js";
+/**
+ * Hardhat-style testing harness for Movehat.
+ *
+ * Construct via the static factories — `createLocal`, `createFork`,
+ * `createLive` — never via `new Harness(...)`. The returned instance is
+ * a Proxy that synchronously throws {@link HarnessDisposedError} on any
+ * post-`cleanup()` call to one of the deployment / script / view methods.
+ *
+ * Methods `deployCodeObject`, `upgradeCodeObject`, `runViewFunction`,
+ * and `runMoveScript` are stubbed in M2.1 — they throw at runtime until
+ * M2.2/M2.3 lands. The type surface is complete so callers and docs can
+ * be written against it ahead of time.
+ *
+ * AccountManager note: as of M2.1 the underlying account pool is a
+ * process-wide static (see `core/AccountManager.ts`). Two Harness
+ * instances in the same process share account labels; this is the same
+ * constraint that already governs `setupTestFixture`. A per-Harness pool
+ * is a future change.
+ */
+export class Harness {
+    mode;
+    runtime;
+    /** @internal */
+    localNode;
+    /** @internal */
+    forkServer;
+    /** @internal */
+    forkManager;
+    _poisoned = false;
+    constructor(init) {
+        this.mode = init.mode;
+        this.runtime = init.runtime;
+        if (init.localNode)
+            this.localNode = init.localNode;
+        if (init.forkServer)
+            this.forkServer = init.forkServer;
+        if (init.forkManager)
+            this.forkManager = init.forkManager;
+    }
+    /** True once `cleanup()` has been awaited at least once. */
+    get poisoned() {
+        return this._poisoned;
+    }
+    /**
+     * Spin up a local Movement node and return a Harness bound to it.
+     *
+     * Forwards to `setupLocalTesting({ mode: 'local-node', ... })` so all
+     * existing options (`nodeApiPort`, `accountLabels`, `autoDeploy`, ...)
+     * apply unchanged.
+     */
+    static async createLocal(options = {}) {
+        const ctx = await setupLocalTesting({ ...options, mode: "local-node" });
+        const init = {
+            mode: "local",
+            runtime: ctx.runtime,
+        };
+        if (ctx.localNode)
+            init.localNode = ctx.localNode;
+        const instance = new Harness(init);
+        return createHarnessProxy(instance, () => instance._poisoned);
+    }
+    /**
+     * Create a fork-mode Harness reading from a snapshot of `network`.
+     *
+     * Fork mode is read-only: `deployCodeObject`, `upgradeCodeObject`,
+     * and `runMoveScript` throw with a message pointing at `createLocal`.
+     * `runViewFunction` works (read-only path).
+     *
+     * @param network - Network to fork (e.g. `"testnet"`).
+     * @param apiKey - Optional Movement API key. When set, every upstream
+     *   request from the fork's `MovementApiClient` carries
+     *   `Authorization: Bearer <apiKey>`. Use for rate-limited public
+     *   endpoints or auth-gated nodes. The key stays in process memory
+     *   (not persisted to the fork's on-disk metadata).
+     */
+    static async createFork(network, apiKey) {
+        const setupOpts = {
+            mode: "fork",
+            forkNetwork: network,
+        };
+        if (apiKey !== undefined)
+            setupOpts.forkApiKey = apiKey;
+        const ctx = await setupLocalTesting(setupOpts);
+        const init = {
+            mode: "fork",
+            runtime: ctx.runtime,
+        };
+        if (ctx.forkServer)
+            init.forkServer = ctx.forkServer;
+        if (ctx.forkManager)
+            init.forkManager = ctx.forkManager;
+        const instance = new Harness(init);
+        return createHarnessProxy(instance, () => instance._poisoned);
+    }
+    /**
+     * Bind a Harness to a real running network (testnet, mainnet, or any
+     * custom network defined in `movehat.config.ts`). No local process is
+     * spawned; transactions are submitted to the configured RPC.
+     *
+     * @param network - Named network from movehat.config.ts.
+     * @param _faucetUrl - Reserved for M2.2 (auto-fund on networks with a faucet).
+     */
+    static async createLive(network, _faucetUrl) {
+        const runtime = await initRuntime({ network });
+        const instance = new Harness({ mode: "live", runtime });
+        return createHarnessProxy(instance, () => instance._poisoned);
+    }
+    /**
+     * Release resources owned by this harness (local node or fork server)
+     * and poison it. Idempotent: subsequent calls are no-ops.
+     *
+     * After `cleanup()` resolves, any call to `deployCodeObject`,
+     * `upgradeCodeObject`, `runViewFunction`, or `runMoveScript` throws
+     * `HarnessDisposedError` synchronously on property access.
+     */
+    async cleanup() {
+        if (this._poisoned)
+            return;
+        this._poisoned = true;
+        if (this.localNode) {
+            await this.localNode.stop().catch(() => { });
+        }
+        if (this.forkServer) {
+            await this.forkServer.stop().catch(() => { });
+        }
+    }
+    /**
+     * Deploy a Move package as a code object via `movement move deploy-object`.
+     *
+     * The derived object address is bound to `options.moduleName` as a
+     * named address at compile time, then captured into the returned
+     * {@link CodeObjectInfo.address} for later use with
+     * `harness.runtime.getContract(address, moduleName)`.
+     *
+     * Not available on fork-mode harnesses (forks are read-only). Calling
+     * this on a `Harness.createFork(...)` instance throws synchronously.
+     */
+    async deployCodeObject(options) {
+        if (this.mode === "fork") {
+            throw new Error("Harness.createFork is read-only; code-object deployment requires Harness.createLocal or createLive.");
+        }
+        return deployCodeObject(this.runtime, options);
+    }
+    /**
+     * Upgrade an existing code object via `movement move upgrade-object`.
+     *
+     * Requires {@link UpgradeCodeObjectOptions.objectAddress} (the existing
+     * on-chain object). Overwrites the local deployment record's timestamp
+     * + txHash; address stays the same.
+     *
+     * Not available on fork-mode harnesses (forks are read-only).
+     */
+    async upgradeCodeObject(options) {
+        if (this.mode === "fork") {
+            throw new Error("Harness.createFork is read-only; code-object upgrade requires Harness.createLocal or createLive.");
+        }
+        return upgradeCodeObject(this.runtime, options);
+    }
+    /**
+     * Execute a Move view function via the Aptos SDK.
+     *
+     * Returns the raw view-function result array. For single-value
+     * returns, destructure: `const [count] = await harness.runViewFunction(...)`.
+     *
+     * Works on all 3 harness modes (createLocal, createFork, createLive)
+     * — view functions are read-only.
+     */
+    async runViewFunction(options) {
+        return runViewFunction(this.runtime, options);
+    }
+    /**
+     * Execute a Move script via `movement move run-script`.
+     *
+     * Accepts either a `.move` source path (CLI auto-compiles) or a
+     * pre-compiled `.mv` bytecode path. Other extensions throw
+     * synchronously.
+     *
+     * Not available on fork-mode harnesses (forks are read-only).
+     */
+    async runMoveScript(options) {
+        if (this.mode === "fork") {
+            throw new Error("Harness.createFork is read-only; script execution requires Harness.createLocal or createLive.");
+        }
+        return runMoveScript(this.runtime, options);
+    }
+}
+//# sourceMappingURL=Harness.js.map

package/dist/harness/Harness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Harness.js","sourceRoot":"","sources":["../../src/harness/Harness.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAY5C;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,OAAO;IACF,IAAI,CAAc;IAClB,OAAO,CAAiB;IAExC,gBAAgB;IACA,SAAS,CAAoB;IAC7C,gBAAgB;IACA,UAAU,CAAc;IACxC,gBAAgB;IACA,WAAW,CAAe;IAElC,SAAS,GAAG,KAAK,CAAC;IAE1B,YAAoB,IAAiB;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACpD,IAAI,IAAI,CAAC,UAAU;YAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACvD,IAAI,IAAI,CAAC,WAAW;YAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IAC5D,CAAC;IAED,4DAA4D;IAC5D,IAAW,QAAQ;QACjB,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,UAA4B,EAAE;QACrD,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QACxE,MAAM,IAAI,GAAgB;YACxB,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC;QACF,IAAI,GAAG,CAAC,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,kBAAkB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAe,EAAE,MAAe;QACtD,MAAM,SAAS,GAAkD;YAC/D,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,OAAO;SACrB,CAAC;QACF,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS,CAAC,UAAU,GAAG,MAAM,CAAC;QACxD,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAgB;YACxB,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC;QACF,IAAI,GAAG,CAAC,UAAU;YAAE,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QACrD,IAAI,GAAG,CAAC,WAAW;YAAE,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,kBAAkB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAe,EAAE,UAAmB;QAC1D,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACxD,OAAO,kBAAkB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,gBAAgB,CAAC,OAAgC;QACrD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,qGAAqG,CACtG,CAAC;QACJ,CAAC;QACD,OAAO,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,iBAAiB,CACrB,OAAiC;QAEjC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAC;QACJ,CAAC;QACD,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,eAAe,CAAC,OAA+B;QACnD,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,aAAa,CAAC,OAA6B;QAC/C,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;QACJ,CAAC;QACD,OAAO,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;CACF"}

package/dist/harness/codeObject.d.ts

@@ -0,0 +1,31 @@
+import type { MovehatRuntime } from "../types/runtime.js";
+import type { DeployCodeObjectOptions, UpgradeCodeObjectOptions, CodeObjectInfo } from "../types/harness.js";
+/**
+ * Deploy a Move package as a code object via `movement move deploy-object`.
+ *
+ * Mirrors `core/Publisher.deploy` exactly for the security-critical parts
+ * (per-deploy unique profile, atomic ~/.aptos/config.yaml mutation under
+ * the shared mutex, SIGINT-safe sync cleanup, stderr redaction via
+ * `runCli`). The only differences are:
+ *
+ *   1. CLI subcommand: `deploy-object` instead of `publish` + a required
+ *      `--address-name <moduleName>` flag that binds the derived object
+ *      address to the package's named-address slot.
+ *   2. `DeploymentInfo.address` is the derived **object address** parsed
+ *      from CLI output, not the deployer's account address.
+ *
+ * @internal — called from `Harness.deployCodeObject`.
+ */
+export declare function deployCodeObject(runtime: MovehatRuntime, options: DeployCodeObjectOptions): Promise<CodeObjectInfo>;
+/**
+ * Upgrade an existing code object via `movement move upgrade-object`.
+ *
+ * Requires {@link UpgradeCodeObjectOptions.objectAddress} — the address
+ * of the existing on-chain object. The local `DeploymentInfo` record
+ * for `moduleName` is overwritten with a new timestamp + txHash; the
+ * address stays the same.
+ *
+ * @internal — called from `Harness.upgradeCodeObject`.
+ */
+export declare function upgradeCodeObject(runtime: MovehatRuntime, options: UpgradeCodeObjectOptions): Promise<CodeObjectInfo>;
+//# sourceMappingURL=codeObject.d.ts.map

package/dist/harness/codeObject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codeObject.d.ts","sourceRoot":"","sources":["../../src/harness/codeObject.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EACV,uBAAuB,EACvB,wBAAwB,EACxB,cAAc,EACf,MAAM,qBAAqB,CAAC;AA0B7B;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,cAAc,CAAC,CAazB;AAED;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,cAAc,CAAC,CAmBzB"}

package/dist/harness/codeObject.js

@@ -0,0 +1,271 @@
+import { homedir } from "os";
+import { join } from "path";
+import { randomUUID } from "crypto";
+import { extractNamedAddresses } from "../commands/compile.js";
+import { saveDeployment, loadDeployment, validateSafeName, } from "../core/deployments.js";
+import { validatePathSafety, validateProfileSafety } from "../core/shell.js";
+import { CliExecutionError, ModuleAlreadyDeployedError, PostPublishError, } from "../errors.js";
+import { runCli } from "../utils/runCli.js";
+import { parseTxHash } from "../utils/parseCliOutput.js";
+import { logger } from "../ui/index.js";
+import { withYamlLock, addProfile, removeProfile, removeProfileSync, ensureSignalHandler, cleanupCallbacks, } from "../core/movementProfile.js";
+/**
+ * Deploy a Move package as a code object via `movement move deploy-object`.
+ *
+ * Mirrors `core/Publisher.deploy` exactly for the security-critical parts
+ * (per-deploy unique profile, atomic ~/.aptos/config.yaml mutation under
+ * the shared mutex, SIGINT-safe sync cleanup, stderr redaction via
+ * `runCli`). The only differences are:
+ *
+ *   1. CLI subcommand: `deploy-object` instead of `publish` + a required
+ *      `--address-name <moduleName>` flag that binds the derived object
+ *      address to the package's named-address slot.
+ *   2. `DeploymentInfo.address` is the derived **object address** parsed
+ *      from CLI output, not the deployer's account address.
+ *
+ * @internal — called from `Harness.deployCodeObject`.
+ */
+export async function deployCodeObject(runtime, options) {
+    return executeMovementMoveObject({
+        runtime,
+        moduleName: options.moduleName,
+        addressName: options.addressName,
+        packageDir: options.packageDir,
+        namedAddresses: options.namedAddresses,
+        includedArtifacts: options.includedArtifacts,
+        adapter: options.adapter,
+        subcommand: "deploy-object",
+        extraArgs: [],
+        checkIdempotency: true,
+    });
+}
+/**
+ * Upgrade an existing code object via `movement move upgrade-object`.
+ *
+ * Requires {@link UpgradeCodeObjectOptions.objectAddress} — the address
+ * of the existing on-chain object. The local `DeploymentInfo` record
+ * for `moduleName` is overwritten with a new timestamp + txHash; the
+ * address stays the same.
+ *
+ * @internal — called from `Harness.upgradeCodeObject`.
+ */
+export async function upgradeCodeObject(runtime, options) {
+    if (!options.objectAddress) {
+        throw new Error("Harness.upgradeCodeObject requires options.objectAddress (the existing object's address).");
+    }
+    return executeMovementMoveObject({
+        runtime,
+        moduleName: options.moduleName,
+        addressName: options.addressName,
+        packageDir: options.packageDir,
+        namedAddresses: options.namedAddresses,
+        includedArtifacts: options.includedArtifacts,
+        adapter: options.adapter,
+        subcommand: "upgrade-object",
+        extraArgs: ["--object-address", options.objectAddress],
+        checkIdempotency: false,
+        fixedAddress: options.objectAddress,
+    });
+}
+async function executeMovementMoveObject(opts) {
+    const { runtime, moduleName, subcommand } = opts;
+    const config = runtime.config;
+    const account = runtime.account;
+    validateSafeName(moduleName, "module");
+    // Idempotency: deploy-object refuses re-deploy unless MH_CLI_REDEPLOY=true.
+    // Upgrade does not check this (the whole point is to overwrite).
+    const forceRedeploy = process.env.MH_CLI_REDEPLOY === "true";
+    if (opts.checkIdempotency) {
+        const existing = loadDeployment(config.network, moduleName);
+        if (existing && !forceRedeploy) {
+            const errorDetails = [
+                `Module "${moduleName}" is already deployed on ${config.network}`,
+                `Address: ${existing.address}`,
+                `Deployed at: ${new Date(existing.timestamp).toLocaleString()}`,
+                existing.txHash ? `Transaction: ${existing.txHash}` : null,
+                `\nTo redeploy, set MH_CLI_REDEPLOY=true or call harness.upgradeCodeObject({ objectAddress: "${existing.address}", ... }).`,
+            ]
+                .filter(Boolean)
+                .join("\n");
+            logger.error(`Module "${moduleName}" is already deployed on ${config.network}`);
+            logger.plain(`   Address: ${existing.address}`);
+            logger.plain(`   Deployed at: ${new Date(existing.timestamp).toLocaleString()}`);
+            if (existing.txHash)
+                logger.plain(`   Transaction: ${existing.txHash}`);
+            logger.newline();
+            throw new ModuleAlreadyDeployedError(errorDetails, moduleName, config.network, existing.address, existing.timestamp, existing.txHash);
+        }
+    }
+    const dir = opts.packageDir || config.moveDir;
+    const profile = `movehat-deploy-${randomUUID().slice(0, 8)}`;
+    const safeDir = validatePathSafety(dir, "package directory");
+    const safeProfile = validateProfileSafety(profile);
+    logger.step(`${subcommand === "deploy-object" ? "Deploying" : "Upgrading"} module "${moduleName}" from ${dir}...`);
+    try {
+        const deployerAddress = account.accountAddress.toString();
+        // Build named-addresses arg: auto-detected names from Move sources
+        // are bound to the deployer's address (Publisher convention).
+        // Caller-supplied `namedAddresses` overlay on top.
+        const detectedAddresses = extractNamedAddresses(dir);
+        const addrMap = new Map();
+        for (const name of detectedAddresses)
+            addrMap.set(name, deployerAddress);
+        if (opts.namedAddresses) {
+            for (const [k, v] of Object.entries(opts.namedAddresses))
+                addrMap.set(k, v);
+        }
+        const namedAddrArgs = addrMap.size > 0
+            ? [
+                "--named-addresses",
+                Array.from(addrMap.entries())
+                    .map(([k, v]) => `${k}=${v}`)
+                    .join(","),
+            ]
+            : [];
+        // Build step (same as Publisher — produces the bytecode the
+        // subcommand will publish/upgrade).
+        logger.step("Building package...");
+        const buildResult = await runCli({
+            command: "movement",
+            args: ["move", "build", "--package-dir", safeDir, ...namedAddrArgs],
+            timeoutMs: 120000,
+        }, { adapter: opts.adapter });
+        if (buildResult.stdout)
+            console.log(buildResult.stdout.trim());
+        // Strip `ed25519-priv-` prefix if present — Movement CLI expects the
+        // raw hex.
+        let cleanPrivateKey = config.privateKey;
+        if (cleanPrivateKey.startsWith("ed25519-priv-")) {
+            cleanPrivateKey = cleanPrivateKey.replace("ed25519-priv-", "");
+        }
+        const movementConfigPath = join(homedir(), ".aptos", "config.yaml");
+        // Register SIGINT-safe sync cleanup BEFORE writing the key (same
+        // pattern as Publisher — closes bug #36).
+        ensureSignalHandler();
+        const syncCleanup = () => removeProfileSync(movementConfigPath, profile);
+        cleanupCallbacks.add(syncCleanup);
+        await withYamlLock(() => addProfile(movementConfigPath, profile, {
+            private_key: cleanPrivateKey,
+            public_key: account.publicKey.toString(),
+            account: deployerAddress,
+            rest_url: config.rpc,
+        }));
+        let deployOut = "";
+        try {
+            logger.step(`Running 'movement move ${subcommand}'${subcommand === "upgrade-object" ? "" : " (this may take a moment)"}...`);
+            const includedArtifacts = opts.includedArtifacts
+                ? ["--included-artifacts", opts.includedArtifacts]
+                : [];
+            const result = await runCli({
+                command: "movement",
+                args: [
+                    "move",
+                    subcommand,
+                    "--address-name",
+                    opts.addressName ?? moduleName,
+                    "--package-dir",
+                    safeDir,
+                    "--url",
+                    config.rpc,
+                    "--profile",
+                    safeProfile,
+                    "--assume-yes",
+                    ...includedArtifacts,
+                    ...namedAddrArgs,
+                    ...opts.extraArgs,
+                ],
+                timeoutMs: 180000, // 3 min — deploy-object can be slow with chunked publishing.
+            }, { adapter: opts.adapter });
+            deployOut = result.stdout;
+            if (result.stdout)
+                console.log(result.stdout.trim());
+            if (result.stderr)
+                console.error(result.stderr.trim());
+        }
+        finally {
+            // Best-effort profile removal. CRITICAL: catch + log instead of
+            // re-throwing — an await-in-finally that throws would clobber the
+            // try block's success/error (the bug-#37 lesson from Publisher).
+            await withYamlLock(() => removeProfile(movementConfigPath, profile)).catch((err) => {
+                const cleanupMsg = err instanceof Error ? err.message : String(err);
+                logger.warning(`Failed to remove deploy profile "${profile}" from ${movementConfigPath}: ${cleanupMsg}. ` +
+                    `Run 'movement config delete-profile --profile ${profile}' to clean up manually.`);
+            });
+            cleanupCallbacks.delete(syncCleanup);
+        }
+        // Parse object address (for deploy-object) and txHash (both flows).
+        // No captured fixture exists at M2.2 commit time; M4 integration
+        // tests validate against real CLI output.
+        const objectAddress = opts.fixedAddress ?? parseObjectAddress(deployOut);
+        const txHash = parseTxHash(deployOut);
+        if (!objectAddress) {
+            throw new Error(`Could not parse object address from '${subcommand}' output. ` +
+                `Expected a line containing 'object address 0x...' or a JSON ` +
+                `'Result' block with an 'object_address' field. Captured stdout:\n${deployOut.slice(0, 1000)}`);
+        }
+        logger.success(`${subcommand === "deploy-object" ? "Module deployed" : "Module upgraded"} successfully!`);
+        // Publish/upgrade succeeded. Everything below this point that throws
+        // is a local-side bookkeeping failure, not an on-chain failure.
+        const deployment = {
+            address: objectAddress,
+            moduleName,
+            network: config.network,
+            deployer: deployerAddress,
+            timestamp: Date.now(),
+            ...(txHash !== undefined ? { txHash } : {}),
+        };
+        try {
+            saveDeployment(deployment);
+        }
+        catch (error) {
+            const err = error instanceof Error ? error : new Error(String(error));
+            throw new PostPublishError(`Module "${moduleName}" ${subcommand === "deploy-object" ? "deployed" : "upgraded"} to ${deployment.address} ` +
+                `but local deployment record could not be written: ${err.message}`, deployment, err);
+        }
+        return deployment;
+    }
+    catch (error) {
+        if (error instanceof PostPublishError) {
+            logger.warning(`Module ${subcommand === "deploy-object" ? "deployed" : "upgraded"} successfully to ${error.deployment.address} ` +
+                `(tx=${error.deployment.txHash ?? "unknown"}) but local deployment record could not be written.`);
+            logger.warning(`   Cause: ${error.cause.message}`);
+            logger.warning(`   To recover, manually write the deployment to deployments/${error.deployment.network}/${error.deployment.moduleName}.json.`);
+            throw error;
+        }
+        if (error instanceof CliExecutionError) {
+            if (error.stdoutPreview)
+                console.log(error.stdoutPreview);
+            logger.error(`Failed to ${subcommand === "deploy-object" ? "deploy" : "upgrade"} module: ${error.message}\n${error.stderr}`);
+        }
+        else {
+            const err = error instanceof Error ? error : new Error(String(error));
+            logger.error(`Failed to ${subcommand === "deploy-object" ? "deploy" : "upgrade"} module: ${err.message}`);
+        }
+        throw error;
+    }
+}
+/**
+ * Extract a code-object address from `movement move deploy-object` stdout.
+ *
+ * Movement CLI typically emits the address in one of these shapes (none
+ * of them captured at M2.2 commit time — patterns are speculative, with
+ * M4 integration tests as the validation gate):
+ *
+ *   - Free text: `Code was successfully deployed to object address 0x…`
+ *   - Free text: `Object address: 0x…`
+ *   - JSON `Result` block with `"object_address": "0x…"`
+ *
+ * Falls through the patterns in order. Returns `undefined` on no match.
+ */
+function parseObjectAddress(stdout) {
+    // Pattern 1: phrase-context match.
+    const phraseMatch = stdout.match(/object\s+address[:\s]+\b(0x[a-fA-F0-9]{1,64})\b/i);
+    if (phraseMatch?.[1])
+        return phraseMatch[1];
+    // Pattern 2: JSON-shaped key.
+    const jsonMatch = stdout.match(/"object_address"\s*:\s*"(0x[a-fA-F0-9]{1,64})"/);
+    if (jsonMatch?.[1])
+        return jsonMatch[1];
+    return undefined;
+}
+//# sourceMappingURL=codeObject.js.map

package/dist/harness/codeObject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codeObject.js","sourceRoot":"","sources":["../../src/harness/codeObject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAOpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EACL,cAAc,EACd,cAAc,EACd,gBAAgB,GAEjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EACL,iBAAiB,EACjB,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EACL,YAAY,EACZ,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAuB,EACvB,OAAgC;IAEhC,OAAO,yBAAyB,CAAC;QAC/B,OAAO;QACP,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,eAAe;QAC3B,SAAS,EAAE,EAAE;QACb,gBAAgB,EAAE,IAAI;KACvB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAuB,EACvB,OAAiC;IAEjC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;IACJ,CAAC;IACD,OAAO,yBAAyB,CAAC;QAC/B,OAAO;QACP,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,gBAAgB;QAC5B,SAAS,EAAE,CAAC,kBAAkB,EAAE,OAAO,CAAC,aAAa,CAAC;QACtD,gBAAgB,EAAE,KAAK;QACvB,YAAY,EAAE,OAAO,CAAC,aAAa;KACpC,CAAC,CAAC;AACL,CAAC;AAyBD,KAAK,UAAU,yBAAyB,CACtC,IAAoB;IAEpB,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAEhC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAEvC,4EAA4E;IAC5E,iEAAiE;IACjE,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,MAAM,CAAC;IAC7D,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC5D,IAAI,QAAQ,IAAI,CAAC,aAAa,EAAE,CAAC;YAC/B,MAAM,YAAY,GAAG;gBACnB,WAAW,UAAU,4BAA4B,MAAM,CAAC,OAAO,EAAE;gBACjE,YAAY,QAAQ,CAAC,OAAO,EAAE;gBAC9B,gBAAgB,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,EAAE;gBAC/D,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;gBAC1D,+FAA+F,QAAQ,CAAC,OAAO,YAAY;aAC5H;iBACE,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,IAAI,CAAC,CAAC;YAEd,MAAM,CAAC,KAAK,CACV,WAAW,UAAU,4BAA4B,MAAM,CAAC,OAAO,EAAE,CAClE,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,eAAe,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;YAChD,MAAM,CAAC,KAAK,CACV,mBAAmB,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,EAAE,CACnE,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM;gBAAE,MAAM,CAAC,KAAK,CAAC,mBAAmB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACxE,MAAM,CAAC,OAAO,EAAE,CAAC;YAEjB,MAAM,IAAI,0BAA0B,CAClC,YAAY,EACZ,UAAU,EACV,MAAM,CAAC,OAAO,EACd,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,MAAM,CAChB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,CAAC;IAC9C,MAAM,OAAO,GAAG,kBAAkB,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC7D,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAEnD,MAAM,CAAC,IAAI,CACT,GAAG,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,YAAY,UAAU,UAAU,GAAG,KAAK,CACtG,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;QAE1D,mEAAmE;QACnE,8DAA8D;QAC9D,mDAAmD;QACnD,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,iBAAiB;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACzE,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,aAAa,GACjB,OAAO,CAAC,IAAI,GAAG,CAAC;YACd,CAAC,CAAC;gBACE,mBAAmB;gBACnB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;qBAC1B,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;qBAC5B,IAAI,CAAC,GAAG,CAAC;aACb;YACH,CAAC,CAAC,EAAE,CAAC;QAET,4DAA4D;QAC5D,oCAAoC;QACpC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACnC,MAAM,WAAW,GAAG,MAAM,MAAM,CAC9B;YACE,OAAO,EAAE,UAAU;YACnB,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC;YACnE,SAAS,EAAE,MAAM;SAClB,EACD,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAC1B,CAAC;QACF,IAAI,WAAW,CAAC,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAE/D,qEAAqE;QACrE,WAAW;QACX,IAAI,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC;QACxC,IAAI,eAAe,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAChD,eAAe,GAAG,eAAe,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAEpE,iEAAiE;QACjE,0CAA0C;QAC1C,mBAAmB,EAAE,CAAC;QACtB,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;QACzE,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAElC,MAAM,YAAY,CAAC,GAAG,EAAE,CACtB,UAAU,CAAC,kBAAkB,EAAE,OAAO,EAAE;YACtC,WAAW,EAAE,eAAe;YAC5B,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE;YACxC,OAAO,EAAE,eAAe;YACxB,QAAQ,EAAE,MAAM,CAAC,GAAG;SACrB,CAAC,CACH,CAAC;QAEF,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CACT,0BAA0B,UAAU,IAAI,UAAU,KAAK,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,2BAA2B,KAAK,CAChH,CAAC;YACF,MAAM,iBAAiB,GACrB,IAAI,CAAC,iBAAiB;gBACpB,CAAC,CAAC,CAAC,sBAAsB,EAAE,IAAI,CAAC,iBAAiB,CAAC;gBAClD,CAAC,CAAC,EAAE,CAAC;YACT,MAAM,MAAM,GAAG,MAAM,MAAM,CACzB;gBACE,OAAO,EAAE,UAAU;gBACnB,IAAI,EAAE;oBACJ,MAAM;oBACN,UAAU;oBACV,gBAAgB;oBAChB,IAAI,CAAC,WAAW,IAAI,UAAU;oBAC9B,eAAe;oBACf,OAAO;oBACP,OAAO;oBACP,MAAM,CAAC,GAAG;oBACV,WAAW;oBACX,WAAW;oBACX,cAAc;oBACd,GAAG,iBAAiB;oBACpB,GAAG,aAAa;oBAChB,GAAG,IAAI,CAAC,SAAS;iBAClB;gBACD,SAAS,EAAE,MAAM,EAAE,6DAA6D;aACjF,EACD,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAC1B,CAAC;YACF,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;YAC1B,IAAI,MAAM,CAAC,MAAM;gBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACrD,IAAI,MAAM,CAAC,MAAM;gBAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;gBAAS,CAAC;YACT,gEAAgE;YAChE,kEAAkE;YAClE,iEAAiE;YACjE,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CACxE,CAAC,GAAG,EAAE,EAAE;gBACN,MAAM,UAAU,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACpE,MAAM,CAAC,OAAO,CACZ,oCAAoC,OAAO,UAAU,kBAAkB,KAAK,UAAU,IAAI;oBACxF,iDAAiD,OAAO,yBAAyB,CACpF,CAAC;YACJ,CAAC,CACF,CAAC;YACF,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;QAED,oEAAoE;QACpE,iEAAiE;QACjE,0CAA0C;QAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QAEtC,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,wCAAwC,UAAU,YAAY;gBAC5D,8DAA8D;gBAC9D,oEAAoE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CACjG,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,OAAO,CACZ,GAAG,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,gBAAgB,CAC1F,CAAC;QAEF,qEAAqE;QACrE,gEAAgE;QAEhE,MAAM,UAAU,GAAmB;YACjC,OAAO,EAAE,aAAa;YACtB,UAAU;YACV,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,eAAe;YACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC;QAEF,IAAI,CAAC;YACH,cAAc,CAAC,UAAU,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtE,MAAM,IAAI,gBAAgB,CACxB,WAAW,UAAU,KAAK,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,OAAO,UAAU,CAAC,OAAO,GAAG;gBAC5G,qDAAqD,GAAG,CAAC,OAAO,EAAE,EACpE,UAAU,EACV,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;YACtC,MAAM,CAAC,OAAO,CACZ,UAAU,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,oBAAoB,KAAK,CAAC,UAAU,CAAC,OAAO,GAAG;gBAC/G,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,SAAS,qDAAqD,CACnG,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,aAAa,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACnD,MAAM,CAAC,OAAO,CACZ,+DAA+D,KAAK,CAAC,UAAU,CAAC,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,QAAQ,CAC/H,CAAC;YACF,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACvC,IAAI,KAAK,CAAC,aAAa;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC1D,MAAM,CAAC,KAAK,CACV,aAAa,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,YAAY,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,MAAM,EAAE,CAC/G,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtE,MAAM,CAAC,KAAK,CACV,aAAa,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,YAAY,GAAG,CAAC,OAAO,EAAE,CAC5F,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,kBAAkB,CAAC,MAAc;IACxC,mCAAmC;IACnC,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAC9B,kDAAkD,CACnD,CAAC;IACF,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;IAE5C,8BAA8B;IAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAC5B,gDAAgD,CACjD,CAAC;IACF,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;IAExC,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/harness/errors.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Thrown synchronously when any method other than `cleanup` is invoked
+ * on a Harness instance whose `cleanup()` has already run.
+ *
+ * The throw happens on property access (Proxy `get` trap), not after the
+ * async method body. That means `await harness.deployCodeObject(...)`
+ * throws *before* the call site awaits — callers can use a plain
+ * `try`/`catch` or rely on the rejected promise; either form will fire.
+ */
+export declare class HarnessDisposedError extends Error {
+    readonly methodName: string;
+    constructor(methodName: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/harness/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/harness/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;aACjB,UAAU,EAAE,MAAM;gBAAlB,UAAU,EAAE,MAAM;CAW/C"}

package/dist/harness/errors.js

@@ -0,0 +1,22 @@
+/**
+ * Thrown synchronously when any method other than `cleanup` is invoked
+ * on a Harness instance whose `cleanup()` has already run.
+ *
+ * The throw happens on property access (Proxy `get` trap), not after the
+ * async method body. That means `await harness.deployCodeObject(...)`
+ * throws *before* the call site awaits — callers can use a plain
+ * `try`/`catch` or rely on the rejected promise; either form will fire.
+ */
+export class HarnessDisposedError extends Error {
+    methodName;
+    constructor(methodName) {
+        super(`Harness is disposed; call to '${methodName}' is not allowed. ` +
+            `Create a new Harness via Harness.createLocal/createFork/createLive instead.`);
+        this.methodName = methodName;
+        this.name = "HarnessDisposedError";
+        if (Error.captureStackTrace) {
+            Error.captureStackTrace(this, HarnessDisposedError);
+        }
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/harness/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/harness/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACjB;IAA5B,YAA4B,UAAkB;QAC5C,KAAK,CACH,iCAAiC,UAAU,oBAAoB;YAC7D,6EAA6E,CAChF,CAAC;QAJwB,eAAU,GAAV,UAAU,CAAQ;QAK5C,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QAEnC,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;CACF"}

package/dist/harness/index.d.ts

@@ -0,0 +1,4 @@
+export { Harness } from "./Harness.js";
+export type { HarnessMode } from "./Harness.js";
+export { HarnessDisposedError } from "./errors.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/harness/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/harness/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC"}

package/dist/harness/index.js

@@ -0,0 +1,3 @@
+export { Harness } from "./Harness.js";
+export { HarnessDisposedError } from "./errors.js";
+//# sourceMappingURL=index.js.map

package/dist/harness/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/harness/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC"}

package/dist/harness/proxy.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Wrap a Harness instance in a Proxy that throws `HarnessDisposedError`
+ * synchronously on access to any method in {@link POISONED_METHODS} once
+ * `isPoisoned()` returns true.
+ */
+export declare function createHarnessProxy<T extends object>(target: T, isPoisoned: () => boolean): T;
+//# sourceMappingURL=proxy.d.ts.map

package/dist/harness/proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/harness/proxy.ts"],"names":[],"mappings":"AAsBA;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,MAAM,EACjD,MAAM,EAAE,CAAC,EACT,UAAU,EAAE,MAAM,OAAO,GACxB,CAAC,CASH"}

package/dist/harness/proxy.js

@@ -0,0 +1,36 @@
+import { HarnessDisposedError } from "./errors.js";
+/**
+ * Names of Harness methods that must throw `HarnessDisposedError`
+ * synchronously once the harness has been disposed (via `cleanup()`).
+ *
+ * Properties NOT in this set — `cleanup`, `mode`, `poisoned`, the runtime
+ * accessors, well-known Symbols, and the promise-protocol hooks
+ * (`then`/`catch`/`finally`) — always pass through. That keeps:
+ *  - `await harness` from breaking on `.then` access
+ *  - debug tools (`console.log`, `util.inspect`) from throwing
+ *  - idempotent `cleanup()` callable post-poisoning
+ *
+ * New Harness methods that should fail post-cleanup MUST be added here.
+ */
+const POISONED_METHODS = new Set([
+    "deployCodeObject",
+    "upgradeCodeObject",
+    "runViewFunction",
+    "runMoveScript",
+]);
+/**
+ * Wrap a Harness instance in a Proxy that throws `HarnessDisposedError`
+ * synchronously on access to any method in {@link POISONED_METHODS} once
+ * `isPoisoned()` returns true.
+ */
+export function createHarnessProxy(target, isPoisoned) {
+    return new Proxy(target, {
+        get(obj, prop, receiver) {
+            if (typeof prop === "string" && POISONED_METHODS.has(prop) && isPoisoned()) {
+                throw new HarnessDisposedError(prop);
+            }
+            return Reflect.get(obj, prop, receiver);
+        },
+    });
+}
+//# sourceMappingURL=proxy.js.map

package/dist/harness/proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../src/harness/proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD;;;;;;;;;;;;GAYG;AACH,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IACpD,kBAAkB;IAClB,mBAAmB;IACnB,iBAAiB;IACjB,eAAe;CAChB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAS,EACT,UAAyB;IAEzB,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE;QACvB,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ;YACrB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,UAAU,EAAE,EAAE,CAAC;gBAC3E,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC;YACD,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1C,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}