movehat 0.1.9 → 0.2.1

package/dist/fork/__tests__/test.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=test.test.d.ts.map

package/dist/fork/__tests__/test.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test.test.d.ts","sourceRoot":"","sources":["../../../src/fork/__tests__/test.test.ts"],"names":[],"mappings":""}

package/dist/fork/__tests__/test.test.js

@@ -0,0 +1,81 @@
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { snapshot, viewForkResource } from '../test.js';
+/**
+ * Guards the exitCode-failure path that CodeRabbit flagged on PR #100:
+ * before this hardening, an `aptos` command that exited non-zero with a
+ * stderr containing the word "Success" (or no stderr at all) could slip
+ * past the stderr-defense check in `snapshot`, and a non-JSON stderr from
+ * `view-resource` produced a cryptic JSON parse error instead of the
+ * actual aptos failure.
+ */
+describe('fork/test — exitCode failure paths', () => {
+    let tmpCwd;
+    let origCwd;
+    beforeEach(() => {
+        tmpCwd = mkdtempSync(join(tmpdir(), 'movehat-fork-test-'));
+        origCwd = process.cwd();
+        process.chdir(tmpCwd);
+    });
+    afterEach(() => {
+        try {
+            process.chdir(origCwd);
+        }
+        finally {
+            rmSync(tmpCwd, { recursive: true, force: true });
+        }
+    });
+    function adapterReturning(result) {
+        return {
+            async run() {
+                return result;
+            },
+            spawn() {
+                throw new Error('spawn not used in fork/test failure-path tests');
+            },
+        };
+    }
+    it("snapshot throws on non-zero exit even when stderr contains 'Success'", async () => {
+        // The pre-fix edge case: aptos exits 1, stderr says
+        // "Failed: Success criteria not met" → the stderr.includes('Success')
+        // gate returned false-positive ok, and a stale directory from a prior
+        // run would mask the failure entirely.
+        const adapter = adapterReturning({
+            exitCode: 1,
+            stdout: '',
+            stderr: 'Failed: Success criteria not met for snapshot init',
+        });
+        await expect(snapshot({ name: 'edge', adapter })).rejects.toThrow(/Success criteria not met/);
+    });
+    it('snapshot still throws when a stale directory from a prior run exists (the full edge case)', async () => {
+        // The pre-fix combined edge case: aptos exits non-zero, stderr happens
+        // to contain "Success" (so the stderr.includes('Success') gate would
+        // false-positive), AND the snapshot directory already exists from a
+        // previous successful run (so the existsSync check would false-positive
+        // too). The new exitCode check fires first and throws regardless.
+        const stalePath = join(tmpCwd, '.movehat', 'snapshots', 'stale');
+        mkdirSync(stalePath, { recursive: true });
+        writeFileSync(join(stalePath, 'config.json'), '{}');
+        const adapter = adapterReturning({
+            exitCode: 1,
+            stdout: '',
+            stderr: 'Failed but Success was nearby',
+        });
+        await expect(snapshot({ name: 'stale', path: stalePath, adapter })).rejects.toThrow(/Failed but Success was nearby/);
+    });
+    it('viewForkResource throws on non-zero exit with non-JSON stderr (informative message)', async () => {
+        // Pre-fix the failure surfaced as "Unexpected token ..." from
+        // JSON.parse, which obscured the actual aptos error.
+        const adapter = adapterReturning({
+            exitCode: 1,
+            stdout: '',
+            stderr: 'Error: session not found',
+        });
+        await expect(viewForkResource('/nonexistent/session', '0x1', '0x1::coin::CoinStore', {
+            adapter,
+        })).rejects.toThrow(/session not found/);
+    });
+});
+//# sourceMappingURL=test.test.js.map

package/dist/fork/__tests__/test.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test.test.js","sourceRoot":"","sources":["../../../src/fork/__tests__/test.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGxD;;;;;;;GAOG;AACH,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,IAAI,MAAc,CAAC;IACnB,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;QAC3D,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,SAAS,gBAAgB,CAAC,MAAiB;QACzC,OAAO;YACL,KAAK,CAAC,GAAG;gBACP,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,KAAK;gBACH,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACpE,CAAC;SACF,CAAC;IACJ,CAAC;IAED,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,oDAAoD;QACpD,sEAAsE;QACtE,sEAAsE;QACtE,uCAAuC;QACvC,MAAM,OAAO,GAAG,gBAAgB,CAAC;YAC/B,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,oDAAoD;SAC7D,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC/D,0BAA0B,CAC3B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;QACzG,uEAAuE;QACvE,qEAAqE;QACrE,oEAAoE;QACpE,wEAAwE;QACxE,kEAAkE;QAClE,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QACjE,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,CAAC;QAEpD,MAAM,OAAO,GAAG,gBAAgB,CAAC;YAC/B,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,+BAA+B;SACxC,CAAC,CAAC;QAEH,MAAM,MAAM,CACV,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CACtD,CAAC,OAAO,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,8DAA8D;QAC9D,qDAAqD;QACrD,MAAM,OAAO,GAAG,gBAAgB,CAAC;YAC/B,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,0BAA0B;SACnC,CAAC,CAAC;QAEH,MAAM,MAAM,CACV,gBAAgB,CAAC,sBAAsB,EAAE,KAAK,EAAE,sBAAsB,EAAE;YACtE,OAAO;SACR,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/fork/api.d.ts

@@ -1,12 +1,23 @@
 import type { LedgerInfo, AccountData, AccountResource } from '../types/fork.js';
 /**
- * Client for interacting with Movement/Aptos-compatible JSON API
+ * Client for interacting with Movement L1 JSON API.
+ *
+ * When constructed with an `apiKey`, every outgoing request carries
+ * an `Authorization: Bearer <apiKey>` header. Use this for rate-
+ * limited public endpoints (e.g. Movement testnet under load) or
+ * auth-gated nodes.
  */
 export declare class MovementApiClient {
     private nodeUrl;
-    constructor(nodeUrl: string);
+    private readonly apiKey?;
+    constructor(nodeUrl: string, apiKey?: string);
     /**
-     * Make a GET request to the API
+     * Make a GET request to the API.
+     *
+     * Adds `Authorization: Bearer <apiKey>` when the client was
+     * constructed with an `apiKey`. The header is omitted otherwise
+     * to preserve backwards-compatible behavior for unauthenticated
+     * public endpoints.
      */
     private get;
     /**

package/dist/fork/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/fork/api.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEjF;;GAEG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,EAAE,MAAM;IAa3B;;OAEG;YACW,GAAG;IAqCjB;;OAEG;IACH,OAAO,CAAC,OAAO;IAMf;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC;IAI1C;;OAEG;IACG,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IASvD;;OAEG;IACG,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAW7E;;OAEG;IACG,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;CAOvE"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/fork/api.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGjF;;;;;;;GAOG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAS;gBAErB,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;IAc5C;;;;;;;OAOG;YACW,GAAG;IA6CjB;;OAEG;IACH,OAAO,CAAC,OAAO;IAMf;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC;IAI1C;;OAEG;IACG,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAMvD;;OAEG;IACG,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAS7E;;OAEG;IACG,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;CAKvE"}

package/dist/fork/api.js

@@ -1,12 +1,19 @@
 import https from 'https';
 import http from 'http';
 import { URL } from 'url';
+import { normalizeAddressShort } from '../utils/address.js';
 /**
- * Client for interacting with Movement/Aptos-compatible JSON API
+ * Client for interacting with Movement L1 JSON API.
+ *
+ * When constructed with an `apiKey`, every outgoing request carries
+ * an `Authorization: Bearer <apiKey>` header. Use this for rate-
+ * limited public endpoints (e.g. Movement testnet under load) or
+ * auth-gated nodes.
  */
 export class MovementApiClient {
     nodeUrl;
-    constructor(nodeUrl) {
+    apiKey;
+    constructor(nodeUrl, apiKey) {
         // Remove trailing slash
         let normalized = nodeUrl.replace(/\/$/, '');
         // If URL already ends with /v1, use as is
@@ -15,17 +22,28 @@ export class MovementApiClient {
             // Base URL without /v1, we'll add it in requests
         }
         this.nodeUrl = normalized;
+        if (apiKey !== undefined)
+            this.apiKey = apiKey;
     }
     /**
-     * Make a GET request to the API
+     * Make a GET request to the API.
+     *
+     * Adds `Authorization: Bearer <apiKey>` when the client was
+     * constructed with an `apiKey`. The header is omitted otherwise
+     * to preserve backwards-compatible behavior for unauthenticated
+     * public endpoints.
      */
     async get(path) {
         const fullUrl = `${this.nodeUrl}${path}`;
         const parsedUrl = new URL(fullUrl);
         const isHttps = parsedUrl.protocol === 'https:';
         const client = isHttps ? https : http;
+        const requestOptions = { method: 'GET' };
+        if (this.apiKey !== undefined) {
+            requestOptions.headers = { Authorization: `Bearer ${this.apiKey}` };
+        }
         return new Promise((resolve, reject) => {
-            const req = client.get(fullUrl, (res) => {
+            const req = client.get(fullUrl, requestOptions, (res) => {
                 let data = '';
                 res.on('data', (chunk) => {
                     data += chunk;
@@ -68,19 +86,14 @@ export class MovementApiClient {
      * Get account information
      */
     async getAccount(address) {
-        // Normalize address (ensure 0x prefix and lowercase)
-        const normalizedAddress = address.toLowerCase().startsWith('0x')
-            ? address.toLowerCase()
-            : `0x${address.toLowerCase()}`;
+        const normalizedAddress = normalizeAddressShort(address);
         return this.get(this.apiPath(`/accounts/${normalizedAddress}`));
     }
     /**
      * Get a specific account resource
      */
     async getAccountResource(address, resourceType) {
-        const normalizedAddress = address.toLowerCase().startsWith('0x')
-            ? address.toLowerCase()
-            : `0x${address.toLowerCase()}`;
+        const normalizedAddress = normalizeAddressShort(address);
         // URL encode the resource type
         const encodedType = encodeURIComponent(resourceType);
         return this.get(this.apiPath(`/accounts/${normalizedAddress}/resource/${encodedType}`));
@@ -89,9 +102,7 @@ export class MovementApiClient {
      * Get all resources for an account
      */
     async getAccountResources(address) {
-        const normalizedAddress = address.toLowerCase().startsWith('0x')
-            ? address.toLowerCase()
-            : `0x${address.toLowerCase()}`;
+        const normalizedAddress = normalizeAddressShort(address);
         return this.get(this.apiPath(`/accounts/${normalizedAddress}/resources`));
     }
 }

package/dist/fork/api.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/fork/api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC;AAG1B;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACpB,OAAO,CAAS;IAExB,YAAY,OAAe;QACzB,wBAAwB;QACxB,IAAI,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAE5C,0CAA0C;QAC1C,sCAAsC;QACtC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,iDAAiD;QACnD,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC;IAC5B,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,GAAG,CAAI,IAAY;QAC/B,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAChD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAEtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACtC,IAAI,IAAI,GAAG,EAAE,CAAC;gBAEd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;oBACvB,IAAI,IAAI,KAAK,CAAC;gBAChB,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;wBAC3B,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,GAAG,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;wBAC/E,OAAO;oBACT,CAAC;oBAED,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAChC,OAAO,CAAC,MAAM,CAAC,CAAC;oBAClB,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC,CAAC;oBAC7D,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC1D,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,OAAO,CAAC,MAAc;QAC5B,wDAAwD;QACxD,2BAA2B;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,GAAG,CAAa,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,OAAe;QAC9B,qDAAqD;QACrD,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAC9D,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE;YACvB,CAAC,CAAC,KAAK,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QAEjC,OAAO,IAAI,CAAC,GAAG,CAAc,IAAI,CAAC,OAAO,CAAC,aAAa,iBAAiB,EAAE,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CAAC,OAAe,EAAE,YAAoB;QAC5D,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAC9D,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE;YACvB,CAAC,CAAC,KAAK,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QAEjC,+BAA+B;QAC/B,MAAM,WAAW,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAErD,OAAO,IAAI,CAAC,GAAG,CAAM,IAAI,CAAC,OAAO,CAAC,aAAa,iBAAiB,aAAa,WAAW,EAAE,CAAC,CAAC,CAAC;IAC/F,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CAAC,OAAe;QACvC,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAC9D,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE;YACvB,CAAC,CAAC,KAAK,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QAEjC,OAAO,IAAI,CAAC,GAAG,CAAoB,IAAI,CAAC,OAAO,CAAC,aAAa,iBAAiB,YAAY,CAAC,CAAC,CAAC;IAC/F,CAAC;CACF"}
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/fork/api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC;AAE1B,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE5D;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IACpB,OAAO,CAAS;IACP,MAAM,CAAU;IAEjC,YAAY,OAAe,EAAE,MAAe;QAC1C,wBAAwB;QACxB,IAAI,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAE5C,0CAA0C;QAC1C,sCAAsC;QACtC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,iDAAiD;QACnD,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC;QAC1B,IAAI,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACjD,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,GAAG,CAAI,IAAY;QAC/B,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAChD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAEtC,MAAM,cAAc,GAGhB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,cAAc,CAAC,OAAO,GAAG,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACtE,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC,GAAG,EAAE,EAAE;gBACtD,IAAI,IAAI,GAAG,EAAE,CAAC;gBAEd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;oBACvB,IAAI,IAAI,KAAK,CAAC;gBAChB,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;wBAC3B,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,GAAG,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;wBAC/E,OAAO;oBACT,CAAC;oBAED,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAChC,OAAO,CAAC,MAAM,CAAC,CAAC;oBAClB,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC,CAAC;oBAC7D,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC1D,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,OAAO,CAAC,MAAc;QAC5B,wDAAwD;QACxD,2BAA2B;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,GAAG,CAAa,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,OAAe;QAC9B,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAEzD,OAAO,IAAI,CAAC,GAAG,CAAc,IAAI,CAAC,OAAO,CAAC,aAAa,iBAAiB,EAAE,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CAAC,OAAe,EAAE,YAAoB;QAC5D,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAEzD,+BAA+B;QAC/B,MAAM,WAAW,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAErD,OAAO,IAAI,CAAC,GAAG,CAAM,IAAI,CAAC,OAAO,CAAC,aAAa,iBAAiB,aAAa,WAAW,EAAE,CAAC,CAAC,CAAC;IAC/F,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CAAC,OAAe;QACvC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAEzD,OAAO,IAAI,CAAC,GAAG,CAAoB,IAAI,CAAC,OAAO,CAAC,aAAa,iBAAiB,YAAY,CAAC,CAAC,CAAC;IAC/F,CAAC;CACF"}

package/dist/fork/manager.d.ts

@@ -7,53 +7,47 @@ export declare class ForkManager {
     private storage;
     private apiClient;
     private metadata;
-    constructor(forkPath: string);
     /**
-     * Initialize a new fork from a network
+     * Optional API key sent as `Authorization: Bearer <key>` on every
+     * outgoing Movement API request. Not persisted to disk via
+     * {@link ForkMetadata} (keys stay in process memory). For the
+     * load-then-set pattern, call {@link setApiKey} after `load()`.
      */
-    initialize(nodeUrl: string, networkName?: string): Promise<void>;
+    private apiKey?;
+    constructor(forkPath: string);
     /**
-     * Load an existing fork
+     * Set or update the API key used for upstream Movement API requests.
+     * Reconstructs the internal `MovementApiClient` if one exists.
      */
-    load(): void;
+    setApiKey(apiKey: string | undefined): void;
     /**
-     * Get fork metadata
+     * Initialize a new fork from a network.
+     *
+     * @param nodeUrl - Upstream JSON-RPC base URL.
+     * @param networkName - Logical network label (defaults to `'custom'`).
+     * @param apiKey - Optional API key for `Authorization: Bearer` header.
      */
-    getMetadata(): ForkMetadata;
+    initialize(nodeUrl: string, networkName?: string, apiKey?: string): Promise<void>;
     /**
-     * Get account state (with lazy loading)
+     * Load an existing fork. The API key is NOT persisted to disk —
+     * callers needing authenticated upstream reads after `load()` must
+     * call {@link setApiKey} explicitly.
      */
+    load(): void;
+    getMetadata(): ForkMetadata;
     getAccount(address: string): Promise<AccountState>;
-    /**
-     * Get a specific resource (with lazy loading)
-     */
     getResource(address: string, resourceType: string): Promise<any>;
-    /**
-     * Get all resources for an account (with lazy loading)
-     */
     getAllResources(address: string): Promise<Record<string, any>>;
-    /**
-     * Set a resource value (for testing/mocking)
-     */
-    setResource(address: string, resourceType: string, data: any): Promise<void>;
-    /**
-     * Fund an account with coins (adds to existing balance)
-     */
+    setResource(address: string, resourceType: string, data: unknown): Promise<void>;
+    /** Adds to the existing balance rather than replacing it. */
     fundAccount(address: string, amount: number, coinType?: string): Promise<void>;
-    /**
-     * Normalize address format
-     */
-    private normalizeAddress;
-    /**
-     * List all accounts in the fork
-     */
     listAccounts(): string[];
     /**
      * Fund multiple accounts at once (batch operation)
      *
      * @param addresses Array of addresses to fund
      * @param amount Amount of coins per account
-     * @param coinType Coin type (defaults to AptosCoin)
+     * @param coinType Coin type (defaults to the chain's native coin)
      *
      * @example
      * await forkManager.fundMultipleAccounts(

package/dist/fork/manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/fork/manager.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEnE;;;GAGG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,SAAS,CAAkC;IACnD,OAAO,CAAC,QAAQ,CAA6B;gBAEjC,QAAQ,EAAE,MAAM;IAI5B;;OAEG;IACG,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,GAAE,MAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BhF;;OAEG;IACH,IAAI,IAAI,IAAI;IASZ;;OAEG;IACH,WAAW,IAAI,YAAY;IAO3B;;OAEG;IACG,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IA6BxD;;OAEG;IACG,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAgCtE;;OAEG;IACG,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IA4BpE;;OAEG;IACG,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAMlF;;OAEG;IACG,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAqC,GAAG,OAAO,CAAC,IAAI,CAAC;IA4DlH;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAexB;;OAEG;IACH,YAAY,IAAI,MAAM,EAAE;IAIxB;;;;;;;;;;;;OAYG;IACG,oBAAoB,CACxB,SAAS,EAAE,MAAM,EAAE,EACnB,MAAM,EAAE,MAAM,EACd,QAAQ,GAAE,MAAqC,GAC9C,OAAO,CAAC,IAAI,CAAC;IAUhB;;;;;;OAMG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAUjC;;;;;;;;;OASG;IACG,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;CAmBjE"}
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/fork/manager.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAmBnE;;;GAGG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,SAAS,CAAkC;IACnD,OAAO,CAAC,QAAQ,CAA6B;IAE7C;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,CAAS;gBAEZ,QAAQ,EAAE,MAAM;IAI5B;;;OAGG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAW3C;;;;;;OAMG;IACG,UAAU,CACd,OAAO,EAAE,MAAM,EACf,WAAW,GAAE,MAAiB,EAC9B,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAyBhB;;;;OAIG;IACH,IAAI,IAAI,IAAI;IASZ,WAAW,IAAI,YAAY;IAOrB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAyBlD,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IA8BhE,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAyB9D,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAMtF,6DAA6D;IACvD,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAqC,GAAG,OAAO,CAAC,IAAI,CAAC;IA6DlH,YAAY,IAAI,MAAM,EAAE;IAIxB;;;;;;;;;;;;OAYG;IACG,oBAAoB,CACxB,SAAS,EAAE,MAAM,EAAE,EACnB,MAAM,EAAE,MAAM,EACd,QAAQ,GAAE,MAAqC,GAC9C,OAAO,CAAC,IAAI,CAAC;IAYhB;;;;;;OAMG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAYjC;;;;;;;;;OASG;IACG,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;CAiBjE"}

package/dist/fork/manager.js

@@ -1,5 +1,22 @@
+import { createHash } from 'node:crypto';
 import { MovementApiClient } from './api.js';
 import { ForkStorage } from './storage.js';
+import { normalizeAddress } from '../utils/address.js';
+import { logger } from '../ui/index.js';
+/**
+ * Derive a deterministic 32-byte hex placeholder for the `authentication_key`
+ * of a fork-funded account. The real auth_key is `sha3_256(public_key || 0x00)`
+ * for Ed25519; the fork has no public key material, so we hash the address
+ * itself. This is NOT a real auth key — downstream code must not treat it as
+ * trustworthy key material. Distinguishable from the address by construction
+ * (#63 — prior code used `address.padEnd(66, '0')` which was a no-op since
+ * normalized addresses are already 66 chars).
+ */
+function forkAuthKeyPlaceholder(normalizedAddress) {
+    const stripped = normalizedAddress.startsWith('0x') ? normalizedAddress.slice(2) : normalizedAddress;
+    const digest = createHash('sha3-256').update(stripped, 'hex').digest('hex');
+    return `0x${digest}`;
+}
 /**
  * Manager for fork operations
  * Orchestrates API client and storage
@@ -8,20 +25,44 @@ export class ForkManager {
     storage;
     apiClient = null;
     metadata = null;
+    /**
+     * Optional API key sent as `Authorization: Bearer <key>` on every
+     * outgoing Movement API request. Not persisted to disk via
+     * {@link ForkMetadata} (keys stay in process memory). For the
+     * load-then-set pattern, call {@link setApiKey} after `load()`.
+     */
+    apiKey;
     constructor(forkPath) {
         this.storage = new ForkStorage(forkPath);
     }
     /**
-     * Initialize a new fork from a network
+     * Set or update the API key used for upstream Movement API requests.
+     * Reconstructs the internal `MovementApiClient` if one exists.
+     */
+    setApiKey(apiKey) {
+        if (apiKey === undefined) {
+            delete this.apiKey;
+        }
+        else {
+            this.apiKey = apiKey;
+        }
+        if (this.apiClient && this.metadata) {
+            this.apiClient = new MovementApiClient(this.metadata.nodeUrl, this.apiKey);
+        }
+    }
+    /**
+     * Initialize a new fork from a network.
+     *
+     * @param nodeUrl - Upstream JSON-RPC base URL.
+     * @param networkName - Logical network label (defaults to `'custom'`).
+     * @param apiKey - Optional API key for `Authorization: Bearer` header.
      */
-    async initialize(nodeUrl, networkName = 'custom') {
-        // Create API client
-        this.apiClient = new MovementApiClient(nodeUrl);
-        // Fetch network info
+    async initialize(nodeUrl, networkName = 'custom', apiKey) {
+        if (apiKey !== undefined)
+            this.apiKey = apiKey;
+        this.apiClient = new MovementApiClient(nodeUrl, this.apiKey);
         const ledgerInfo = await this.apiClient.getLedgerInfo();
-        // Create fork structure
         this.storage.initialize();
-        // Save metadata
         this.metadata = {
             network: networkName,
             nodeUrl,
@@ -36,34 +77,27 @@ export class ForkManager {
         console.log(`✓ Fork initialized at ledger version ${ledgerInfo.ledger_version}`);
     }
     /**
-     * Load an existing fork
+     * Load an existing fork. The API key is NOT persisted to disk —
+     * callers needing authenticated upstream reads after `load()` must
+     * call {@link setApiKey} explicitly.
      */
     load() {
         if (!this.storage.exists()) {
             throw new Error('Fork does not exist. Run `initialize()` first.');
         }
         this.metadata = this.storage.loadMetadata();
-        this.apiClient = new MovementApiClient(this.metadata.nodeUrl);
+        this.apiClient = new MovementApiClient(this.metadata.nodeUrl, this.apiKey);
     }
-    /**
-     * Get fork metadata
-     */
     getMetadata() {
         if (!this.metadata) {
             this.metadata = this.storage.loadMetadata();
         }
         return this.metadata;
     }
-    /**
-     * Get account state (with lazy loading)
-     */
     async getAccount(address) {
-        // Normalize address
-        const normalizedAddress = this.normalizeAddress(address);
-        // Check cache first
+        const normalizedAddress = normalizeAddress(address);
         let accountState = this.storage.getAccount(normalizedAddress);
         if (!accountState) {
-            // Fetch from network
             if (!this.apiClient) {
                 throw new Error('Fork not initialized. Call initialize() or load() first.');
             }
@@ -73,21 +107,15 @@ export class ForkManager {
                 sequenceNumber: accountData.sequence_number,
                 authenticationKey: accountData.authentication_key,
             };
-            // Cache it
             this.storage.saveAccount(normalizedAddress, accountState);
             console.log(`  ✓ Cached account ${normalizedAddress}`);
         }
         return accountState;
     }
-    /**
-     * Get a specific resource (with lazy loading)
-     */
     async getResource(address, resourceType) {
-        const normalizedAddress = this.normalizeAddress(address);
-        // Check cache first
+        const normalizedAddress = normalizeAddress(address);
         let resource = this.storage.getResource(normalizedAddress, resourceType);
         if (!resource) {
-            // Fetch from network
             if (!this.apiClient) {
                 throw new Error('Fork not initialized. Call initialize() or load() first.');
             }
@@ -95,12 +123,12 @@ export class ForkManager {
             try {
                 const resourceData = await this.apiClient.getAccountResource(normalizedAddress, resourceType);
                 resource = resourceData.data;
-                // Cache it
                 this.storage.saveResource(normalizedAddress, resourceType, resource);
                 console.log(`  ✓ Cached resource ${resourceType}`);
             }
             catch (error) {
-                if (error.message.includes('404')) {
+                const msg = error instanceof Error ? error.message : String(error);
+                if (msg.includes('404')) {
                     throw new Error(`Resource ${resourceType} not found for account ${normalizedAddress}`);
                 }
                 throw error;
@@ -108,14 +136,9 @@ export class ForkManager {
         }
         return resource;
     }
-    /**
-     * Get all resources for an account (with lazy loading)
-     */
     async getAllResources(address) {
-        const normalizedAddress = this.normalizeAddress(address);
-        // Check if we have any cached resources
+        const normalizedAddress = normalizeAddress(address);
         let resources = this.storage.getAllResources(normalizedAddress);
-        // If no cached resources, fetch all from network
         if (Object.keys(resources).length === 0) {
             if (!this.apiClient) {
                 throw new Error('Fork not initialized. Call initialize() or load() first.');
@@ -126,37 +149,35 @@ export class ForkManager {
             for (const resource of resourcesList) {
                 resources[resource.type] = resource.data;
             }
-            // Cache them
             this.storage.saveAllResources(normalizedAddress, resources);
             console.log(`  ✓ Cached ${Object.keys(resources).length} resources`);
         }
         return resources;
     }
-    /**
-     * Set a resource value (for testing/mocking)
-     */
     async setResource(address, resourceType, data) {
-        const normalizedAddress = this.normalizeAddress(address);
+        const normalizedAddress = normalizeAddress(address);
         this.storage.saveResource(normalizedAddress, resourceType, data);
         console.log(`  ✓ Updated resource ${resourceType} for ${normalizedAddress}`);
     }
-    /**
-     * Fund an account with coins (adds to existing balance)
-     */
+    /** Adds to the existing balance rather than replacing it. */
     async fundAccount(address, amount, coinType = '0x1::aptos_coin::AptosCoin') {
-        const normalizedAddress = this.normalizeAddress(address);
+        const normalizedAddress = normalizeAddress(address);
         const resourceType = `0x1::coin::CoinStore<${coinType}>`;
-        // Try to get existing coin store
+        // Try to get existing coin store. The coin store is a CoinStore<T>
+        // resource whose `data` is Movement-side untyped JSON; we shape it
+        // locally as a structural object with `coin.value: string`.
+        // any: full CoinStore schema lives at the Movement REST boundary —
+        // proper validation deferred to the boundary-validation follow-up of #57.
         let coinStore;
         try {
             coinStore = await this.getResource(normalizedAddress, resourceType);
         }
         catch (error) {
             // Only catch "not found" errors, rethrow others (network, API, etc.)
-            if (!error.message || !error.message.includes('not found')) {
+            const msg = error instanceof Error ? error.message : String(error);
+            if (!msg.includes('not found')) {
                 throw error;
             }
-            // If doesn't exist, create new one
             coinStore = {
                 coin: { value: '0' },
                 deposit_events: {
@@ -180,40 +201,20 @@ export class ForkManager {
                 frozen: false,
             };
         }
-        // Add to existing balance (instead of replacing it)
         const currentBalance = BigInt(coinStore.coin.value ?? '0');
         const newBalance = currentBalance + BigInt(amount);
         coinStore.coin.value = newBalance.toString();
-        // Save
         await this.setResource(normalizedAddress, resourceType, coinStore);
-        // Also ensure account exists
         let account = this.storage.getAccount(normalizedAddress);
         if (!account) {
             account = {
                 sequenceNumber: '0',
-                authenticationKey: normalizedAddress.padEnd(66, '0'),
+                authenticationKey: forkAuthKeyPlaceholder(normalizedAddress),
             };
             this.storage.saveAccount(normalizedAddress, account);
         }
         console.log(`  ✓ Funded ${normalizedAddress} with ${amount} coins`);
     }
-    /**
-     * Normalize address format
-     */
-    normalizeAddress(address) {
-        let normalized = address.toLowerCase();
-        if (!normalized.startsWith('0x')) {
-            normalized = `0x${normalized}`;
-        }
-        // Pad to 66 characters (0x + 64 hex chars)
-        if (normalized.length < 66) {
-            normalized = '0x' + normalized.slice(2).padStart(64, '0');
-        }
-        return normalized;
-    }
-    /**
-     * List all accounts in the fork
-     */
     listAccounts() {
         return this.storage.listAccounts();
     }
@@ -222,7 +223,7 @@ export class ForkManager {
      *
      * @param addresses Array of addresses to fund
      * @param amount Amount of coins per account
-     * @param coinType Coin type (defaults to AptosCoin)
+     * @param coinType Coin type (defaults to the chain's native coin)
      *
      * @example
      * await forkManager.fundMultipleAccounts(
@@ -231,11 +232,13 @@ export class ForkManager {
      * );
      */
     async fundMultipleAccounts(addresses, amount, coinType = '0x1::aptos_coin::AptosCoin') {
-        console.log(`\n💰 Funding ${addresses.length} accounts with ${amount} coins each...`);
+        logger.newline();
+        logger.step(`Funding ${addresses.length} accounts with ${amount} coins each...`);
         for (const address of addresses) {
             await this.fundAccount(address, amount, coinType);
         }
-        console.log(`✓ All accounts funded successfully\n`);
+        logger.success("All accounts funded successfully");
+        logger.newline();
     }
     /**
      * Reset fork state to initial snapshot
@@ -245,11 +248,13 @@ export class ForkManager {
      * await forkManager.resetState();
      */
     async resetState() {
-        console.log(`\n🔄 Resetting fork state...`);
+        logger.newline();
+        logger.step("Resetting fork state...");
         // Clear all accounts and resources from storage
         this.storage.clearAccounts();
         this.storage.clearResources();
-        console.log(`✓ Fork state reset to initial snapshot\n`);
+        logger.success("Fork state reset to initial snapshot");
+        logger.newline();
     }
     /**
      * Get or create an account, ensuring it exists in the fork
@@ -262,16 +267,14 @@ export class ForkManager {
      * const account = await forkManager.getOrCreateAccount("0x123...");
      */
     async getOrCreateAccount(address) {
-        const normalizedAddress = this.normalizeAddress(address);
-        // Try to get existing account
+        const normalizedAddress = normalizeAddress(address);
         try {
             return await this.getAccount(normalizedAddress);
         }
         catch (error) {
-            // If account doesn't exist, create a minimal one
             const newAccount = {
                 sequenceNumber: '0',
-                authenticationKey: normalizedAddress.padEnd(66, '0'),
+                authenticationKey: forkAuthKeyPlaceholder(normalizedAddress),
             };
             this.storage.saveAccount(normalizedAddress, newAccount);
             console.log(`  ✓ Created new account ${normalizedAddress}`);