movehat 0.2.0 → 0.2.2

package/dist/harness/codeObject.js

@@ -1,14 +1,12 @@
-import { homedir } from "os";
-import { join } from "path";
-import { randomUUID } from "crypto";
+import { PrivateKey, PrivateKeyVariants } from "@aptos-labs/ts-sdk";
 import { extractNamedAddresses } from "../commands/compile.js";
 import { saveDeployment, loadDeployment, validateSafeName, } from "../core/deployments.js";
-import { validatePathSafety, validateProfileSafety } from "../core/shell.js";
+import { validatePathSafety } from "../core/shell.js";
 import { CliExecutionError, ModuleAlreadyDeployedError, PostPublishError, } from "../errors.js";
 import { runCli } from "../utils/runCli.js";
 import { parseTxHash } from "../utils/parseCliOutput.js";
 import { logger } from "../ui/index.js";
-import { withYamlLock, addProfile, removeProfile, removeProfileSync, ensureSignalHandler, cleanupCallbacks, } from "../core/movementProfile.js";
+import { writeTempKeyFile, removeKeyFile, removeKeyFileSyncBestEffort, ensureSignalHandler, cleanupCallbacks, } from "../core/movementProfile.js";
 /**
  * Deploy a Move package as a code object via `movement move deploy-object`.
  *
@@ -97,9 +95,7 @@ async function executeMovementMoveObject(opts) {
         }
     }
     const dir = opts.packageDir || config.moveDir;
-    const profile = `movehat-deploy-${randomUUID().slice(0, 8)}`;
     const safeDir = validatePathSafety(dir, "package directory");
-    const safeProfile = validateProfileSafety(profile);
     logger.step(`${subcommand === "deploy-object" ? "Deploying" : "Upgrading"} module "${moduleName}" from ${dir}...`);
     try {
         const deployerAddress = account.accountAddress.toString();
@@ -132,24 +128,22 @@ async function executeMovementMoveObject(opts) {
         }, { adapter: opts.adapter });
         if (buildResult.stdout)
             console.log(buildResult.stdout.trim());
-        // Strip `ed25519-priv-` prefix if present — Movement CLI expects the
-        // raw hex.
-        let cleanPrivateKey = config.privateKey;
-        if (cleanPrivateKey.startsWith("ed25519-priv-")) {
-            cleanPrivateKey = cleanPrivateKey.replace("ed25519-priv-", "");
-        }
-        const movementConfigPath = join(homedir(), ".aptos", "config.yaml");
-        // Register SIGINT-safe sync cleanup BEFORE writing the key (same
-        // pattern as Publisher — closes bug #36).
+        // Format the private key into AIP-80 shape so the Movement CLI
+        // doesn't emit its raw-hex deprecation warning. `formatPrivateKey`
+        // is idempotent for already-prefixed inputs.
+        const formattedPrivateKey = PrivateKey.formatPrivateKey(config.privateKey, PrivateKeyVariants.Ed25519);
+        // Pass the private key via a 0o600 temp file (--private-key-file)
+        // and the on-chain address via --sender-account. This avoids the
+        // CLI's profile-yaml lookup entirely — no CWD / HOME / .aptos /
+        // .movement dance, no CLI-variant dependency.
+        const keyFilePath = writeTempKeyFile(formattedPrivateKey);
+        // Register SIGINT-safe sync cleanup BEFORE invoking the CLI so
+        // the private key never persists on disk after an abnormal exit.
+        // The signal-handler path uses the best-effort variant because the
+        // event loop is dead and we cannot logger.warning.
         ensureSignalHandler();
-        const syncCleanup = () => removeProfileSync(movementConfigPath, profile);
+        const syncCleanup = () => removeKeyFileSyncBestEffort(keyFilePath);
         cleanupCallbacks.add(syncCleanup);
-        await withYamlLock(() => addProfile(movementConfigPath, profile, {
-            private_key: cleanPrivateKey,
-            public_key: account.publicKey.toString(),
-            account: deployerAddress,
-            rest_url: config.rpc,
-        }));
         let deployOut = "";
         try {
             logger.step(`Running 'movement move ${subcommand}'${subcommand === "upgrade-object" ? "" : " (this may take a moment)"}...`);
@@ -167,8 +161,10 @@ async function executeMovementMoveObject(opts) {
                     safeDir,
                     "--url",
                     config.rpc,
-                    "--profile",
-                    safeProfile,
+                    "--private-key-file",
+                    keyFilePath,
+                    "--sender-account",
+                    deployerAddress,
                     "--assume-yes",
                     ...includedArtifacts,
                     ...namedAddrArgs,
@@ -183,19 +179,18 @@ async function executeMovementMoveObject(opts) {
                 console.error(result.stderr.trim());
         }
         finally {
-            // Best-effort profile removal. CRITICAL: catch + log instead of
-            // re-throwing — an await-in-finally that throws would clobber the
-            // try block's success/error (the bug-#37 lesson from Publisher).
-            await withYamlLock(() => removeProfile(movementConfigPath, profile)).catch((err) => {
-                const cleanupMsg = err instanceof Error ? err.message : String(err);
-                logger.warning(`Failed to remove deploy profile "${profile}" from ${movementConfigPath}: ${cleanupMsg}. ` +
-                    `Run 'movement config delete-profile --profile ${profile}' to clean up manually.`);
-            });
+            // Unlink via the observable helper — emit a warning if the file
+            // could not be removed AND still exists on disk (private key
+            // would persist silently otherwise). ENOENT and races are
+            // treated as benign success.
+            const cleanupErr = removeKeyFile(keyFilePath);
+            if (cleanupErr) {
+                logger.warning(`Failed to remove temp key file '${keyFilePath}': ${cleanupErr.message}. ` +
+                    `The file has mode 0o600 but should be removed manually: rm ${keyFilePath}`);
+            }
             cleanupCallbacks.delete(syncCleanup);
         }
         // Parse object address (for deploy-object) and txHash (both flows).
-        // No captured fixture exists at M2.2 commit time; M4 integration
-        // tests validate against real CLI output.
         const objectAddress = opts.fixedAddress ?? parseObjectAddress(deployOut);
         const txHash = parseTxHash(deployOut);
         if (!objectAddress) {
@@ -247,9 +242,7 @@ async function executeMovementMoveObject(opts) {
 /**
  * Extract a code-object address from `movement move deploy-object` stdout.
  *
- * Movement CLI typically emits the address in one of these shapes (none
- * of them captured at M2.2 commit time — patterns are speculative, with
- * M4 integration tests as the validation gate):
+ * Movement CLI typically emits the address in one of these shapes:
  *
  *   - Free text: `Code was successfully deployed to object address 0x…`
  *   - Free text: `Object address: 0x…`

package/dist/harness/codeObject.js.map

@@ -1 +1 @@
-{"version":3,"file":"codeObject.js","sourceRoot":"","sources":["../../src/harness/codeObject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAOpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EACL,cAAc,EACd,cAAc,EACd,gBAAgB,GAEjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EACL,iBAAiB,EACjB,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EACL,YAAY,EACZ,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAuB,EACvB,OAAgC;IAEhC,OAAO,yBAAyB,CAAC;QAC/B,OAAO;QACP,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,eAAe;QAC3B,SAAS,EAAE,EAAE;QACb,gBAAgB,EAAE,IAAI;KACvB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAuB,EACvB,OAAiC;IAEjC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;IACJ,CAAC;IACD,OAAO,yBAAyB,CAAC;QAC/B,OAAO;QACP,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,gBAAgB;QAC5B,SAAS,EAAE,CAAC,kBAAkB,EAAE,OAAO,CAAC,aAAa,CAAC;QACtD,gBAAgB,EAAE,KAAK;QACvB,YAAY,EAAE,OAAO,CAAC,aAAa;KACpC,CAAC,CAAC;AACL,CAAC;AAyBD,KAAK,UAAU,yBAAyB,CACtC,IAAoB;IAEpB,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAEhC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAEvC,4EAA4E;IAC5E,iEAAiE;IACjE,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,MAAM,CAAC;IAC7D,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC5D,IAAI,QAAQ,IAAI,CAAC,aAAa,EAAE,CAAC;YAC/B,MAAM,YAAY,GAAG;gBACnB,WAAW,UAAU,4BAA4B,MAAM,CAAC,OAAO,EAAE;gBACjE,YAAY,QAAQ,CAAC,OAAO,EAAE;gBAC9B,gBAAgB,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,EAAE;gBAC/D,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;gBAC1D,+FAA+F,QAAQ,CAAC,OAAO,YAAY;aAC5H;iBACE,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,IAAI,CAAC,CAAC;YAEd,MAAM,CAAC,KAAK,CACV,WAAW,UAAU,4BAA4B,MAAM,CAAC,OAAO,EAAE,CAClE,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,eAAe,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;YAChD,MAAM,CAAC,KAAK,CACV,mBAAmB,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,EAAE,CACnE,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM;gBAAE,MAAM,CAAC,KAAK,CAAC,mBAAmB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACxE,MAAM,CAAC,OAAO,EAAE,CAAC;YAEjB,MAAM,IAAI,0BAA0B,CAClC,YAAY,EACZ,UAAU,EACV,MAAM,CAAC,OAAO,EACd,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,MAAM,CAChB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,CAAC;IAC9C,MAAM,OAAO,GAAG,kBAAkB,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC7D,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAEnD,MAAM,CAAC,IAAI,CACT,GAAG,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,YAAY,UAAU,UAAU,GAAG,KAAK,CACtG,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;QAE1D,mEAAmE;QACnE,8DAA8D;QAC9D,mDAAmD;QACnD,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,iBAAiB;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACzE,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,aAAa,GACjB,OAAO,CAAC,IAAI,GAAG,CAAC;YACd,CAAC,CAAC;gBACE,mBAAmB;gBACnB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;qBAC1B,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;qBAC5B,IAAI,CAAC,GAAG,CAAC;aACb;YACH,CAAC,CAAC,EAAE,CAAC;QAET,4DAA4D;QAC5D,oCAAoC;QACpC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACnC,MAAM,WAAW,GAAG,MAAM,MAAM,CAC9B;YACE,OAAO,EAAE,UAAU;YACnB,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC;YACnE,SAAS,EAAE,MAAM;SAClB,EACD,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAC1B,CAAC;QACF,IAAI,WAAW,CAAC,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAE/D,qEAAqE;QACrE,WAAW;QACX,IAAI,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC;QACxC,IAAI,eAAe,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAChD,eAAe,GAAG,eAAe,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAEpE,iEAAiE;QACjE,0CAA0C;QAC1C,mBAAmB,EAAE,CAAC;QACtB,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;QACzE,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAElC,MAAM,YAAY,CAAC,GAAG,EAAE,CACtB,UAAU,CAAC,kBAAkB,EAAE,OAAO,EAAE;YACtC,WAAW,EAAE,eAAe;YAC5B,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE;YACxC,OAAO,EAAE,eAAe;YACxB,QAAQ,EAAE,MAAM,CAAC,GAAG;SACrB,CAAC,CACH,CAAC;QAEF,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CACT,0BAA0B,UAAU,IAAI,UAAU,KAAK,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,2BAA2B,KAAK,CAChH,CAAC;YACF,MAAM,iBAAiB,GACrB,IAAI,CAAC,iBAAiB;gBACpB,CAAC,CAAC,CAAC,sBAAsB,EAAE,IAAI,CAAC,iBAAiB,CAAC;gBAClD,CAAC,CAAC,EAAE,CAAC;YACT,MAAM,MAAM,GAAG,MAAM,MAAM,CACzB;gBACE,OAAO,EAAE,UAAU;gBACnB,IAAI,EAAE;oBACJ,MAAM;oBACN,UAAU;oBACV,gBAAgB;oBAChB,IAAI,CAAC,WAAW,IAAI,UAAU;oBAC9B,eAAe;oBACf,OAAO;oBACP,OAAO;oBACP,MAAM,CAAC,GAAG;oBACV,WAAW;oBACX,WAAW;oBACX,cAAc;oBACd,GAAG,iBAAiB;oBACpB,GAAG,aAAa;oBAChB,GAAG,IAAI,CAAC,SAAS;iBAClB;gBACD,SAAS,EAAE,MAAM,EAAE,6DAA6D;aACjF,EACD,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAC1B,CAAC;YACF,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;YAC1B,IAAI,MAAM,CAAC,MAAM;gBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACrD,IAAI,MAAM,CAAC,MAAM;gBAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;gBAAS,CAAC;YACT,gEAAgE;YAChE,kEAAkE;YAClE,iEAAiE;YACjE,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CACxE,CAAC,GAAG,EAAE,EAAE;gBACN,MAAM,UAAU,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACpE,MAAM,CAAC,OAAO,CACZ,oCAAoC,OAAO,UAAU,kBAAkB,KAAK,UAAU,IAAI;oBACxF,iDAAiD,OAAO,yBAAyB,CACpF,CAAC;YACJ,CAAC,CACF,CAAC;YACF,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;QAED,oEAAoE;QACpE,iEAAiE;QACjE,0CAA0C;QAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QAEtC,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,wCAAwC,UAAU,YAAY;gBAC5D,8DAA8D;gBAC9D,oEAAoE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CACjG,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,OAAO,CACZ,GAAG,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,gBAAgB,CAC1F,CAAC;QAEF,qEAAqE;QACrE,gEAAgE;QAEhE,MAAM,UAAU,GAAmB;YACjC,OAAO,EAAE,aAAa;YACtB,UAAU;YACV,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,eAAe;YACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC;QAEF,IAAI,CAAC;YACH,cAAc,CAAC,UAAU,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtE,MAAM,IAAI,gBAAgB,CACxB,WAAW,UAAU,KAAK,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,OAAO,UAAU,CAAC,OAAO,GAAG;gBAC5G,qDAAqD,GAAG,CAAC,OAAO,EAAE,EACpE,UAAU,EACV,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;YACtC,MAAM,CAAC,OAAO,CACZ,UAAU,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,oBAAoB,KAAK,CAAC,UAAU,CAAC,OAAO,GAAG;gBAC/G,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,SAAS,qDAAqD,CACnG,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,aAAa,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACnD,MAAM,CAAC,OAAO,CACZ,+DAA+D,KAAK,CAAC,UAAU,CAAC,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,QAAQ,CAC/H,CAAC;YACF,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACvC,IAAI,KAAK,CAAC,aAAa;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC1D,MAAM,CAAC,KAAK,CACV,aAAa,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,YAAY,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,MAAM,EAAE,CAC/G,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtE,MAAM,CAAC,KAAK,CACV,aAAa,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,YAAY,GAAG,CAAC,OAAO,EAAE,CAC5F,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,kBAAkB,CAAC,MAAc;IACxC,mCAAmC;IACnC,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAC9B,kDAAkD,CACnD,CAAC;IACF,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;IAE5C,8BAA8B;IAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAC5B,gDAAgD,CACjD,CAAC;IACF,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;IAExC,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"codeObject.js","sourceRoot":"","sources":["../../src/harness/codeObject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAOpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EACL,cAAc,EACd,cAAc,EACd,gBAAgB,GAEjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EACL,iBAAiB,EACjB,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,2BAA2B,EAC3B,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAuB,EACvB,OAAgC;IAEhC,OAAO,yBAAyB,CAAC;QAC/B,OAAO;QACP,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,eAAe;QAC3B,SAAS,EAAE,EAAE;QACb,gBAAgB,EAAE,IAAI;KACvB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAuB,EACvB,OAAiC;IAEjC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;IACJ,CAAC;IACD,OAAO,yBAAyB,CAAC;QAC/B,OAAO;QACP,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,gBAAgB;QAC5B,SAAS,EAAE,CAAC,kBAAkB,EAAE,OAAO,CAAC,aAAa,CAAC;QACtD,gBAAgB,EAAE,KAAK;QACvB,YAAY,EAAE,OAAO,CAAC,aAAa;KACpC,CAAC,CAAC;AACL,CAAC;AAyBD,KAAK,UAAU,yBAAyB,CACtC,IAAoB;IAEpB,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAEhC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAEvC,4EAA4E;IAC5E,iEAAiE;IACjE,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,MAAM,CAAC;IAC7D,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC5D,IAAI,QAAQ,IAAI,CAAC,aAAa,EAAE,CAAC;YAC/B,MAAM,YAAY,GAAG;gBACnB,WAAW,UAAU,4BAA4B,MAAM,CAAC,OAAO,EAAE;gBACjE,YAAY,QAAQ,CAAC,OAAO,EAAE;gBAC9B,gBAAgB,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,EAAE;gBAC/D,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;gBAC1D,+FAA+F,QAAQ,CAAC,OAAO,YAAY;aAC5H;iBACE,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,IAAI,CAAC,CAAC;YAEd,MAAM,CAAC,KAAK,CACV,WAAW,UAAU,4BAA4B,MAAM,CAAC,OAAO,EAAE,CAClE,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,eAAe,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;YAChD,MAAM,CAAC,KAAK,CACV,mBAAmB,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,EAAE,CACnE,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM;gBAAE,MAAM,CAAC,KAAK,CAAC,mBAAmB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACxE,MAAM,CAAC,OAAO,EAAE,CAAC;YAEjB,MAAM,IAAI,0BAA0B,CAClC,YAAY,EACZ,UAAU,EACV,MAAM,CAAC,OAAO,EACd,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,MAAM,CAChB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,CAAC;IAC9C,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAE7D,MAAM,CAAC,IAAI,CACT,GAAG,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,YAAY,UAAU,UAAU,GAAG,KAAK,CACtG,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;QAE1D,mEAAmE;QACnE,8DAA8D;QAC9D,mDAAmD;QACnD,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,iBAAiB;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACzE,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,aAAa,GACjB,OAAO,CAAC,IAAI,GAAG,CAAC;YACd,CAAC,CAAC;gBACE,mBAAmB;gBACnB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;qBAC1B,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;qBAC5B,IAAI,CAAC,GAAG,CAAC;aACb;YACH,CAAC,CAAC,EAAE,CAAC;QAET,4DAA4D;QAC5D,oCAAoC;QACpC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACnC,MAAM,WAAW,GAAG,MAAM,MAAM,CAC9B;YACE,OAAO,EAAE,UAAU;YACnB,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC;YACnE,SAAS,EAAE,MAAM;SAClB,EACD,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAC1B,CAAC;QACF,IAAI,WAAW,CAAC,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAE/D,+DAA+D;QAC/D,mEAAmE;QACnE,6CAA6C;QAC7C,MAAM,mBAAmB,GAAG,UAAU,CAAC,gBAAgB,CACrD,MAAM,CAAC,UAAU,EACjB,kBAAkB,CAAC,OAAO,CAC3B,CAAC;QAEF,kEAAkE;QAClE,iEAAiE;QACjE,gEAAgE;QAChE,8CAA8C;QAC9C,MAAM,WAAW,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;QAE1D,+DAA+D;QAC/D,iEAAiE;QACjE,mEAAmE;QACnE,mDAAmD;QACnD,mBAAmB,EAAE,CAAC;QACtB,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,2BAA2B,CAAC,WAAW,CAAC,CAAC;QACnE,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAElC,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CACT,0BAA0B,UAAU,IAAI,UAAU,KAAK,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,2BAA2B,KAAK,CAChH,CAAC;YACF,MAAM,iBAAiB,GACrB,IAAI,CAAC,iBAAiB;gBACpB,CAAC,CAAC,CAAC,sBAAsB,EAAE,IAAI,CAAC,iBAAiB,CAAC;gBAClD,CAAC,CAAC,EAAE,CAAC;YACT,MAAM,MAAM,GAAG,MAAM,MAAM,CACzB;gBACE,OAAO,EAAE,UAAU;gBACnB,IAAI,EAAE;oBACJ,MAAM;oBACN,UAAU;oBACV,gBAAgB;oBAChB,IAAI,CAAC,WAAW,IAAI,UAAU;oBAC9B,eAAe;oBACf,OAAO;oBACP,OAAO;oBACP,MAAM,CAAC,GAAG;oBACV,oBAAoB;oBACpB,WAAW;oBACX,kBAAkB;oBAClB,eAAe;oBACf,cAAc;oBACd,GAAG,iBAAiB;oBACpB,GAAG,aAAa;oBAChB,GAAG,IAAI,CAAC,SAAS;iBAClB;gBACD,SAAS,EAAE,MAAM,EAAE,6DAA6D;aACjF,EACD,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAC1B,CAAC;YACF,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;YAC1B,IAAI,MAAM,CAAC,MAAM;gBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACrD,IAAI,MAAM,CAAC,MAAM;gBAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;gBAAS,CAAC;YACT,gEAAgE;YAChE,6DAA6D;YAC7D,0DAA0D;YAC1D,6BAA6B;YAC7B,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;YAC9C,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,CAAC,OAAO,CACZ,mCAAmC,WAAW,MAAM,UAAU,CAAC,OAAO,IAAI;oBACxE,8DAA8D,WAAW,EAAE,CAC9E,CAAC;YACJ,CAAC;YACD,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;QAED,oEAAoE;QACpE,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QAEtC,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,wCAAwC,UAAU,YAAY;gBAC5D,8DAA8D;gBAC9D,oEAAoE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CACjG,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,OAAO,CACZ,GAAG,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,gBAAgB,CAC1F,CAAC;QAEF,qEAAqE;QACrE,gEAAgE;QAEhE,MAAM,UAAU,GAAmB;YACjC,OAAO,EAAE,aAAa;YACtB,UAAU;YACV,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,eAAe;YACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC;QAEF,IAAI,CAAC;YACH,cAAc,CAAC,UAAU,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtE,MAAM,IAAI,gBAAgB,CACxB,WAAW,UAAU,KAAK,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,OAAO,UAAU,CAAC,OAAO,GAAG;gBAC5G,qDAAqD,GAAG,CAAC,OAAO,EAAE,EACpE,UAAU,EACV,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;YACtC,MAAM,CAAC,OAAO,CACZ,UAAU,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,oBAAoB,KAAK,CAAC,UAAU,CAAC,OAAO,GAAG;gBAC/G,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,SAAS,qDAAqD,CACnG,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,aAAa,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACnD,MAAM,CAAC,OAAO,CACZ,+DAA+D,KAAK,CAAC,UAAU,CAAC,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,QAAQ,CAC/H,CAAC;YACF,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACvC,IAAI,KAAK,CAAC,aAAa;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC1D,MAAM,CAAC,KAAK,CACV,aAAa,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,YAAY,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,MAAM,EAAE,CAC/G,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtE,MAAM,CAAC,KAAK,CACV,aAAa,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,YAAY,GAAG,CAAC,OAAO,EAAE,CAC5F,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,kBAAkB,CAAC,MAAc;IACxC,mCAAmC;IACnC,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAC9B,kDAAkD,CACnD,CAAC;IACF,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;IAE5C,8BAA8B;IAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAC5B,gDAAgD,CACjD,CAAC;IACF,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;IAExC,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/harness/script.d.ts

@@ -8,9 +8,9 @@ import type { RunMoveScriptOptions, MoveScriptResult } from "../types/harness.js
  *   - `.mv` compiled bytecode → `--compiled-script-path`
  *
  * Reuses Publisher's security model via the shared `movementProfile`
- * helpers: per-deploy unique profile, atomic 0o600 yaml writes under
- * the mutex, SIGINT-safe sync cleanup, `--profile` auth (key never
- * appears in `ps` output).
+ * helpers: per-invocation temp key file (0o600), SIGINT-safe sync
+ * cleanup, `--private-key-file` auth (key never appears in `ps`
+ * output or in the user's `~/.aptos/config.yaml`).
  *
  * Returns {@link MoveScriptResult}. `txHash` is guaranteed; `success`
  * and `vmStatus` are best-effort parsed from the CLI's Result JSON.

package/dist/harness/script.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"script.d.ts","sourceRoot":"","sources":["../../src/harness/script.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EACV,oBAAoB,EACpB,gBAAgB,EACjB,MAAM,qBAAqB,CAAC;AAe7B;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,gBAAgB,CAAC,CAqI3B"}
+{"version":3,"file":"script.d.ts","sourceRoot":"","sources":["../../src/harness/script.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EACV,oBAAoB,EACpB,gBAAgB,EACjB,MAAM,qBAAqB,CAAC;AAc7B;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,gBAAgB,CAAC,CAwI3B"}

package/dist/harness/script.js

@@ -1,13 +1,12 @@
 import { existsSync } from "fs";
-import { homedir } from "os";
-import { extname, join } from "path";
-import { randomUUID } from "crypto";
-import { validatePathSafety, validateProfileSafety } from "../core/shell.js";
+import { extname } from "path";
+import { PrivateKey, PrivateKeyVariants } from "@aptos-labs/ts-sdk";
+import { validatePathSafety } from "../core/shell.js";
 import { CliExecutionError } from "../errors.js";
 import { runCli } from "../utils/runCli.js";
 import { parseTxHash } from "../utils/parseCliOutput.js";
 import { logger } from "../ui/index.js";
-import { withYamlLock, addProfile, removeProfile, removeProfileSync, ensureSignalHandler, cleanupCallbacks, } from "../core/movementProfile.js";
+import { writeTempKeyFile, removeKeyFile, removeKeyFileSyncBestEffort, ensureSignalHandler, cleanupCallbacks, } from "../core/movementProfile.js";
 /**
  * Execute a Move script via `movement move run-script`.
  *
@@ -16,9 +15,9 @@ import { withYamlLock, addProfile, removeProfile, removeProfileSync, ensureSigna
  *   - `.mv` compiled bytecode → `--compiled-script-path`
  *
  * Reuses Publisher's security model via the shared `movementProfile`
- * helpers: per-deploy unique profile, atomic 0o600 yaml writes under
- * the mutex, SIGINT-safe sync cleanup, `--profile` auth (key never
- * appears in `ps` output).
+ * helpers: per-invocation temp key file (0o600), SIGINT-safe sync
+ * cleanup, `--private-key-file` auth (key never appears in `ps`
+ * output or in the user's `~/.aptos/config.yaml`).
  *
  * Returns {@link MoveScriptResult}. `txHash` is guaranteed; `success`
  * and `vmStatus` are best-effort parsed from the CLI's Result JSON.
@@ -48,25 +47,25 @@ export async function runMoveScript(runtime, options) {
         throw new Error(`Harness.runMoveScript: script not found at '${options.scriptPath}'.`);
     }
     const safeScriptPath = validatePathSafety(options.scriptPath, "script path");
-    const profile = `movehat-script-${randomUUID().slice(0, 8)}`;
-    const safeProfile = validateProfileSafety(profile);
     logger.step(`Running Move script '${options.scriptPath}' on ${config.network}...`);
     try {
         const deployerAddress = account.accountAddress.toString();
-        let cleanPrivateKey = config.privateKey;
-        if (cleanPrivateKey.startsWith("ed25519-priv-")) {
-            cleanPrivateKey = cleanPrivateKey.replace("ed25519-priv-", "");
-        }
-        const movementConfigPath = join(homedir(), ".aptos", "config.yaml");
+        // Format the private key into AIP-80 shape before writing to the
+        // temp key file. `formatPrivateKey` is idempotent for already-
+        // prefixed inputs.
+        const formattedPrivateKey = PrivateKey.formatPrivateKey(config.privateKey, PrivateKeyVariants.Ed25519);
+        // Pass the private key via a 0o600 temp file (--private-key-file)
+        // and the on-chain address via --sender-account. Avoids the CLI's
+        // profile-yaml lookup chain entirely (no CWD / HOME / .aptos /
+        // .movement dance, no CLI-variant dependency).
+        const keyFilePath = writeTempKeyFile(formattedPrivateKey);
+        // SIGINT-safe sync cleanup BEFORE the CLI call so the private key
+        // never persists on disk after an abnormal exit. The signal-handler
+        // path uses the best-effort variant because the event loop is dead
+        // and we cannot logger.warning.
         ensureSignalHandler();
-        const syncCleanup = () => removeProfileSync(movementConfigPath, profile);
+        const syncCleanup = () => removeKeyFileSyncBestEffort(keyFilePath);
         cleanupCallbacks.add(syncCleanup);
-        await withYamlLock(() => addProfile(movementConfigPath, profile, {
-            private_key: cleanPrivateKey,
-            public_key: account.publicKey.toString(),
-            account: deployerAddress,
-            rest_url: config.rpc,
-        }));
         let scriptOut = "";
         try {
             const typeArgsFragment = options.typeArgs && options.typeArgs.length > 0
@@ -80,8 +79,10 @@ export async function runMoveScript(runtime, options) {
                 args: [
                     "move",
                     "run-script",
-                    "--profile",
-                    safeProfile,
+                    "--private-key-file",
+                    keyFilePath,
+                    "--sender-account",
+                    deployerAddress,
                     "--url",
                     config.rpc,
                     "--assume-yes",
@@ -99,11 +100,14 @@ export async function runMoveScript(runtime, options) {
                 console.error(result.stderr.trim());
         }
         finally {
-            await withYamlLock(() => removeProfile(movementConfigPath, profile)).catch((err) => {
-                const cleanupMsg = err instanceof Error ? err.message : String(err);
-                logger.warning(`Failed to remove script profile "${profile}" from ${movementConfigPath}: ${cleanupMsg}. ` +
-                    `Run 'movement config delete-profile --profile ${profile}' to clean up manually.`);
-            });
+            // Observable cleanup — emit a warning if the unlink failed and
+            // the file is still on disk (private key would persist silently
+            // otherwise).
+            const cleanupErr = removeKeyFile(keyFilePath);
+            if (cleanupErr) {
+                logger.warning(`Failed to remove temp key file '${keyFilePath}': ${cleanupErr.message}. ` +
+                    `The file has mode 0o600 but should be removed manually: rm ${keyFilePath}`);
+            }
             cleanupCallbacks.delete(syncCleanup);
         }
         const txHash = parseTxHash(scriptOut);

package/dist/harness/script.js.map

@@ -1 +1 @@
-{"version":3,"file":"script.js","sourceRoot":"","sources":["../../src/harness/script.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAMpC,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EACL,YAAY,EACZ,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAuB,EACvB,OAA6B;IAE7B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAEhC,8CAA8C;IAC9C,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,UAAsD,CAAC;IAC3D,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,UAAU,GAAG,eAAe,CAAC;IAC/B,CAAC;SAAM,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QACzB,UAAU,GAAG,wBAAwB,CAAC;IACxC,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CACb,wDAAwD,GAAG,IAAI,QAAQ,KAAK;YAC1E,iFAAiF,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,+CAA+C,OAAO,CAAC,UAAU,IAAI,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,kBAAkB,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC7D,MAAM,WAAW,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAEnD,MAAM,CAAC,IAAI,CACT,wBAAwB,OAAO,CAAC,UAAU,QAAQ,MAAM,CAAC,OAAO,KAAK,CACtE,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;QAE1D,IAAI,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC;QACxC,IAAI,eAAe,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAChD,eAAe,GAAG,eAAe,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAEpE,mBAAmB,EAAE,CAAC;QACtB,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;QACzE,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAElC,MAAM,YAAY,CAAC,GAAG,EAAE,CACtB,UAAU,CAAC,kBAAkB,EAAE,OAAO,EAAE;YACtC,WAAW,EAAE,eAAe;YAC5B,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE;YACxC,OAAO,EAAE,eAAe;YACxB,QAAQ,EAAE,MAAM,CAAC,GAAG;SACrB,CAAC,CACH,CAAC;QAEF,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,gBAAgB,GACpB,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAC7C,CAAC,CAAC,CAAC,aAAa,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;gBACtC,CAAC,CAAC,EAAE,CAAC;YACT,MAAM,YAAY,GAChB,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;gBACrC,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;gBAC7B,CAAC,CAAC,EAAE,CAAC;YAET,MAAM,MAAM,GAAG,MAAM,MAAM,CACzB;gBACE,OAAO,EAAE,UAAU;gBACnB,IAAI,EAAE;oBACJ,MAAM;oBACN,YAAY;oBACZ,WAAW;oBACX,WAAW;oBACX,OAAO;oBACP,MAAM,CAAC,GAAG;oBACV,cAAc;oBACd,UAAU;oBACV,cAAc;oBACd,GAAG,gBAAgB;oBACnB,GAAG,YAAY;iBAChB;gBACD,SAAS,EAAE,MAAM;aAClB,EACD,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAC7B,CAAC;YACF,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;YAC1B,IAAI,MAAM,CAAC,MAAM;gBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACrD,IAAI,MAAM,CAAC,MAAM;gBAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;gBAAS,CAAC;YACT,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CACxE,CAAC,GAAG,EAAE,EAAE;gBACN,MAAM,UAAU,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACpE,MAAM,CAAC,OAAO,CACZ,oCAAoC,OAAO,UAAU,kBAAkB,KAAK,UAAU,IAAI;oBACxF,iDAAiD,OAAO,yBAAyB,CACpF,CAAC;YACJ,CAAC,CACF,CAAC;YACF,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,kEAAkE;gBAChE,qBAAqB,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAClD,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QAE1C,MAAM,CAAC,OAAO,CAAC,4BAA4B,MAAM,IAAI,CAAC,CAAC;QAEvD,MAAM,GAAG,GAAqB,EAAE,MAAM,EAAE,CAAC;QACzC,IAAI,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QACjD,IAAI,QAAQ,KAAK,SAAS;YAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACpD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACvC,IAAI,KAAK,CAAC,aAAa;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC1D,MAAM,CAAC,KAAK,CAAC,8BAA8B,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/E,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtE,MAAM,CAAC,KAAK,CAAC,8BAA8B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACtD,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAChB,CAAC"}
+{"version":3,"file":"script.js","sourceRoot":"","sources":["../../src/harness/script.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAMpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,2BAA2B,EAC3B,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAuB,EACvB,OAA6B;IAE7B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAEhC,8CAA8C;IAC9C,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,UAAsD,CAAC;IAC3D,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,UAAU,GAAG,eAAe,CAAC;IAC/B,CAAC;SAAM,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QACzB,UAAU,GAAG,wBAAwB,CAAC;IACxC,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CACb,wDAAwD,GAAG,IAAI,QAAQ,KAAK;YAC1E,iFAAiF,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,+CAA+C,OAAO,CAAC,UAAU,IAAI,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAE7E,MAAM,CAAC,IAAI,CACT,wBAAwB,OAAO,CAAC,UAAU,QAAQ,MAAM,CAAC,OAAO,KAAK,CACtE,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;QAE1D,iEAAiE;QACjE,+DAA+D;QAC/D,mBAAmB;QACnB,MAAM,mBAAmB,GAAG,UAAU,CAAC,gBAAgB,CACrD,MAAM,CAAC,UAAU,EACjB,kBAAkB,CAAC,OAAO,CAC3B,CAAC;QAEF,kEAAkE;QAClE,kEAAkE;QAClE,+DAA+D;QAC/D,+CAA+C;QAC/C,MAAM,WAAW,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;QAE1D,kEAAkE;QAClE,oEAAoE;QACpE,mEAAmE;QACnE,gCAAgC;QAChC,mBAAmB,EAAE,CAAC;QACtB,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,2BAA2B,CAAC,WAAW,CAAC,CAAC;QACnE,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAElC,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,gBAAgB,GACpB,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAC7C,CAAC,CAAC,CAAC,aAAa,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;gBACtC,CAAC,CAAC,EAAE,CAAC;YACT,MAAM,YAAY,GAChB,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;gBACrC,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;gBAC7B,CAAC,CAAC,EAAE,CAAC;YAET,MAAM,MAAM,GAAG,MAAM,MAAM,CACzB;gBACE,OAAO,EAAE,UAAU;gBACnB,IAAI,EAAE;oBACJ,MAAM;oBACN,YAAY;oBACZ,oBAAoB;oBACpB,WAAW;oBACX,kBAAkB;oBAClB,eAAe;oBACf,OAAO;oBACP,MAAM,CAAC,GAAG;oBACV,cAAc;oBACd,UAAU;oBACV,cAAc;oBACd,GAAG,gBAAgB;oBACnB,GAAG,YAAY;iBAChB;gBACD,SAAS,EAAE,MAAM;aAClB,EACD,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAC7B,CAAC;YACF,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;YAC1B,IAAI,MAAM,CAAC,MAAM;gBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACrD,IAAI,MAAM,CAAC,MAAM;gBAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;gBAAS,CAAC;YACT,+DAA+D;YAC/D,gEAAgE;YAChE,cAAc;YACd,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;YAC9C,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,CAAC,OAAO,CACZ,mCAAmC,WAAW,MAAM,UAAU,CAAC,OAAO,IAAI;oBACxE,8DAA8D,WAAW,EAAE,CAC9E,CAAC;YACJ,CAAC;YACD,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,kEAAkE;gBAChE,qBAAqB,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAClD,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QAE1C,MAAM,CAAC,OAAO,CAAC,4BAA4B,MAAM,IAAI,CAAC,CAAC;QAEvD,MAAM,GAAG,GAAqB,EAAE,MAAM,EAAE,CAAC;QACzC,IAAI,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QACjD,IAAI,QAAQ,KAAK,SAAS;YAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACpD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACvC,IAAI,KAAK,CAAC,aAAa;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC1D,MAAM,CAAC,KAAK,CAAC,8BAA8B,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/E,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtE,MAAM,CAAC,KAAK,CAAC,8BAA8B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACtD,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAChB,CAAC"}

package/dist/helpers/__tests__/setupLocalTesting.fork-network.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=setupLocalTesting.fork-network.test.d.ts.map

package/dist/helpers/__tests__/setupLocalTesting.fork-network.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setupLocalTesting.fork-network.test.d.ts","sourceRoot":"","sources":["../../../src/helpers/__tests__/setupLocalTesting.fork-network.test.ts"],"names":[],"mappings":""}

package/dist/helpers/__tests__/setupLocalTesting.fork-network.test.js

@@ -0,0 +1,172 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+const initializeCalls = [];
+vi.mock("../../fork/manager.js", async () => {
+    const fs = await import("node:fs");
+    return {
+        ForkManager: class {
+            forkPath;
+            metadata = null;
+            constructor(forkPath) {
+                this.forkPath = forkPath;
+            }
+            async initialize(nodeUrl, networkName, apiKey) {
+                const entry = { nodeUrl };
+                if (networkName !== undefined)
+                    entry.networkName = networkName;
+                if (apiKey !== undefined)
+                    entry.apiKey = apiKey;
+                initializeCalls.push(entry);
+                this.metadata = { network: networkName ?? "custom", nodeUrl };
+            }
+            load() {
+                const raw = fs.readFileSync(`${this.forkPath}/metadata.json`, "utf-8");
+                this.metadata = JSON.parse(raw);
+            }
+            getMetadata() {
+                if (!this.metadata) {
+                    throw new Error("Fork not initialized");
+                }
+                return this.metadata;
+            }
+            setApiKey() { }
+            async resetState() { }
+            async fundAccount() { }
+            async fundMultipleAccounts() { }
+        },
+    };
+});
+vi.mock("../../fork/server.js", () => {
+    return {
+        ForkServer: class {
+            constructor(_p, _port) { }
+            async start() { }
+            async stop() { }
+        },
+    };
+});
+vi.mock("../../runtime.js", () => ({
+    initRuntime: vi.fn(async () => ({})),
+}));
+vi.mock("../../core/AccountManager.js", () => {
+    let _seq = 0;
+    return {
+        AccountManager: {
+            createBatch(labels) {
+                const out = {};
+                for (const l of labels) {
+                    _seq++;
+                    const addr = "0x" + _seq.toString(16).padStart(64, "0");
+                    out[l] = { accountAddress: { toString: () => addr } };
+                }
+                return out;
+            },
+            exportPrivateKeys(_labels) {
+                return { deployer: "0x" + "1".repeat(64) };
+            },
+        },
+    };
+});
+// Imported after mocks so vi.hoisted ordering applies.
+import { setupLocalTesting } from "../setupLocalTesting.js";
+import { logger } from "../../ui/index.js";
+describe("F1 — setupLocalTesting honors forkNetwork", () => {
+    let cwdBackup;
+    let tmpRoot;
+    beforeEach(() => {
+        initializeCalls.length = 0;
+        cwdBackup = process.cwd();
+        tmpRoot = mkdtempSync(join(tmpdir(), "movehat-f1-"));
+        process.chdir(tmpRoot);
+        vi.spyOn(logger, "step").mockImplementation(() => undefined);
+        vi.spyOn(logger, "success").mockImplementation(() => undefined);
+        vi.spyOn(logger, "plain").mockImplementation(() => undefined);
+        vi.spyOn(logger, "newline").mockImplementation(() => undefined);
+        vi.spyOn(logger, "warning").mockImplementation(() => undefined);
+        vi.spyOn(logger, "error").mockImplementation(() => undefined);
+    });
+    afterEach(() => {
+        process.chdir(cwdBackup);
+        rmSync(tmpRoot, { recursive: true, force: true });
+        vi.restoreAllMocks();
+    });
+    it("uses the mainnet RPC when forkNetwork = 'mainnet'", async () => {
+        await setupLocalTesting({
+            mode: "fork",
+            forkNetwork: "mainnet",
+            accountLabels: ["deployer"],
+            autoFund: false,
+        });
+        expect(initializeCalls).toHaveLength(1);
+        const call = initializeCalls[0];
+        expect(call.networkName).toBe("mainnet");
+        expect(call.nodeUrl).not.toMatch(/testnet/i);
+        expect(call.nodeUrl).toMatch(/mainnet/i);
+    });
+    it("uses the testnet RPC when forkNetwork = 'testnet'", async () => {
+        await setupLocalTesting({
+            mode: "fork",
+            forkNetwork: "testnet",
+            accountLabels: ["deployer"],
+            autoFund: false,
+        });
+        expect(initializeCalls).toHaveLength(1);
+        const call = initializeCalls[0];
+        expect(call.networkName).toBe("testnet");
+        expect(call.nodeUrl).toMatch(/testnet/i);
+    });
+    it("uses forkRpcUrl override when supplied for a custom network", async () => {
+        await setupLocalTesting({
+            mode: "fork",
+            forkNetwork: "custom",
+            forkRpcUrl: "https://my-custom-node.example/v1",
+            accountLabels: ["deployer"],
+            autoFund: false,
+        });
+        expect(initializeCalls).toHaveLength(1);
+        const call = initializeCalls[0];
+        expect(call.networkName).toBe("custom");
+        expect(call.nodeUrl).toBe("https://my-custom-node.example/v1");
+    });
+    it("rejects a non-built-in forkNetwork when no forkRpcUrl is provided", async () => {
+        await expect(setupLocalTesting({
+            mode: "fork",
+            forkNetwork: "some-unknown-network",
+            accountLabels: ["deployer"],
+            autoFund: false,
+        })).rejects.toThrow(/forkRpcUrl/i);
+        expect(initializeCalls).toHaveLength(0);
+    });
+    it("rejects when an existing fork's saved network does not match the requested one (audit-f1 follow-up)", async () => {
+        // Pre-seed `.movehat/forks/test-local/metadata.json` with the
+        // wrong network so the `forkExists` branch fires and loads stale
+        // metadata. Without the metadata-mismatch guard, setupLocalTesting
+        // would silently serve a testnet snapshot while the caller thinks
+        // it's reading mainnet.
+        const forkDir = join(tmpRoot, ".movehat", "forks", "test-local");
+        mkdirSync(forkDir, { recursive: true });
+        writeFileSync(join(forkDir, "metadata.json"), JSON.stringify({
+            network: "testnet",
+            nodeUrl: "https://testnet.movementnetwork.xyz/v1",
+            chainId: 250,
+            ledgerVersion: "0",
+            timestamp: "0",
+            epoch: "0",
+            blockHeight: "0",
+            createdAt: new Date().toISOString(),
+        }));
+        await expect(setupLocalTesting({
+            mode: "fork",
+            forkNetwork: "mainnet",
+            accountLabels: ["deployer"],
+            autoFund: false,
+        })).rejects.toThrow(/network mismatch|created for|requested/i);
+        // Must not have re-initialized — the existing dir is what poisons
+        // the load path, and silently reinitializing would clobber the
+        // user's saved snapshot.
+        expect(initializeCalls).toHaveLength(0);
+    });
+});
+//# sourceMappingURL=setupLocalTesting.fork-network.test.js.map

package/dist/helpers/__tests__/setupLocalTesting.fork-network.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setupLocalTesting.fork-network.test.js","sourceRoot":"","sources":["../../../src/helpers/__tests__/setupLocalTesting.fork-network.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAoBjC,MAAM,eAAe,GAAe,EAAE,CAAC;AAEvC,EAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;IAC1C,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IACnC,OAAO;QACL,WAAW,EAAE;YACX,QAAQ,CAAS;YACjB,QAAQ,GAAgD,IAAI,CAAC;YAC7D,YAAY,QAAgB;gBAC1B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC3B,CAAC;YACD,KAAK,CAAC,UAAU,CAAC,OAAe,EAAE,WAAoB,EAAE,MAAe;gBACrE,MAAM,KAAK,GAAa,EAAE,OAAO,EAAE,CAAC;gBACpC,IAAI,WAAW,KAAK,SAAS;oBAAE,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;gBAC/D,IAAI,MAAM,KAAK,SAAS;oBAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;gBAChD,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC5B,IAAI,CAAC,QAAQ,GAAG,EAAE,OAAO,EAAE,WAAW,IAAI,QAAQ,EAAE,OAAO,EAAE,CAAC;YAChE,CAAC;YACD,IAAI;gBACF,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,QAAQ,gBAAgB,EAAE,OAAO,CAAC,CAAC;gBACvE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClC,CAAC;YACD,WAAW;gBACT,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACnB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;gBAC1C,CAAC;gBACD,OAAO,IAAI,CAAC,QAAQ,CAAC;YACvB,CAAC;YACD,SAAS,KAAI,CAAC;YACd,KAAK,CAAC,UAAU,KAAI,CAAC;YACrB,KAAK,CAAC,WAAW,KAAI,CAAC;YACtB,KAAK,CAAC,oBAAoB,KAAI,CAAC;SAChC;KACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACnC,OAAO;QACL,UAAU,EAAE;YACV,YAAY,EAAU,EAAE,KAAa,IAAG,CAAC;YACzC,KAAK,CAAC,KAAK,KAAI,CAAC;YAChB,KAAK,CAAC,IAAI,KAAI,CAAC;SAChB;KACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;IACjC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;CACrC,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC3C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,OAAO;QACL,cAAc,EAAE;YACd,WAAW,CAAC,MAAyB;gBACnC,MAAM,GAAG,GAA+D,EAAE,CAAC;gBAC3E,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;oBACvB,IAAI,EAAE,CAAC;oBACP,MAAM,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;oBACxD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;gBACxD,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC;YACD,iBAAiB,CAAC,OAA0B;gBAC1C,OAAO,EAAE,QAAQ,EAAE,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7C,CAAC;SACF;KACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,uDAAuD;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,IAAI,SAAiB,CAAC;IACtB,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,GAAG,EAAE;QACd,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;QAC3B,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvB,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7D,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9D,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzB,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,iBAAiB,CAAC;YACtB,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,SAAS;YACtB,aAAa,EAAE,CAAC,UAAU,CAAC;YAC3B,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,MAAM,CAAC,eAAe,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,iBAAiB,CAAC;YACtB,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,SAAS;YACtB,aAAa,EAAE,CAAC,UAAU,CAAC;YAC3B,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,MAAM,CAAC,eAAe,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,iBAAiB,CAAC;YACtB,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,QAAQ;YACrB,UAAU,EAAE,mCAAmC;YAC/C,aAAa,EAAE,CAAC,UAAU,CAAC;YAC3B,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,MAAM,CAAC,eAAe,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,MAAM,CACV,iBAAiB,CAAC;YAChB,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,sBAAsB;YACnC,aAAa,EAAE,CAAC,UAAU,CAAC;YAC3B,QAAQ,EAAE,KAAK;SAChB,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACjC,MAAM,CAAC,eAAe,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qGAAqG,EAAE,KAAK,IAAI,EAAE;QACnH,8DAA8D;QAC9D,iEAAiE;QACjE,mEAAmE;QACnE,kEAAkE;QAClE,wBAAwB;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QACjE,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,aAAa,CACX,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,EAC9B,IAAI,CAAC,SAAS,CAAC;YACb,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,wCAAwC;YACjD,OAAO,EAAE,GAAG;YACZ,aAAa,EAAE,GAAG;YAClB,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,GAAG;YACV,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CACH,CAAC;QAEF,MAAM,MAAM,CACV,iBAAiB,CAAC;YAChB,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,SAAS;YACtB,aAAa,EAAE,CAAC,UAAU,CAAC;YAC3B,QAAQ,EAAE,KAAK;SAChB,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC;QAC7D,kEAAkE;QAClE,+DAA+D;QAC/D,yBAAyB;QACzB,MAAM,CAAC,eAAe,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/helpers/setupLocalTesting.d.ts

@@ -14,8 +14,7 @@ import type { LocalTestOptions } from "../types/config.js";
  * @public The `runtime` and `teardown` fields are the supported surface.
  *         `localNode`, `forkServer`, and `forkManager` are exposed for
  *         escape hatches (e.g. mid-test `forkManager.resetState()`) but
- *         their concrete shapes are considered `@internal` until the M5
- *         TypeDoc pass formalizes the public API.
+ *         their concrete shapes are `@internal`.
  */
 export interface LocalTestingContext {
     runtime: MovehatRuntime;

package/dist/helpers/setupLocalTesting.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setupLocalTesting.d.ts","sourceRoot":"","sources":["../../src/helpers/setupLocalTesting.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAG/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,cAAc,CAAC;IACxB,gBAAgB;IAChB,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,gBAAgB;IAChB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,gBAAgB;IAChB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,oEAAoE;IACpE,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,mBAAmB,CAAC,CA4C9B"}
+{"version":3,"file":"setupLocalTesting.d.ts","sourceRoot":"","sources":["../../src/helpers/setupLocalTesting.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAG/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAqB3D;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,cAAc,CAAC;IACxB,gBAAgB;IAChB,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,gBAAgB;IAChB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,gBAAgB;IAChB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,oEAAoE;IACpE,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,mBAAmB,CAAC,CA4C9B"}

package/dist/helpers/setupLocalTesting.js

@@ -6,6 +6,20 @@ import { ForkServer } from "../fork/server.js";
 import { LocalNodeManager } from "../node/LocalNodeManager.js";
 import { AccountManager } from "../core/AccountManager.js";
 import { logger } from "../ui/index.js";
+const BUILTIN_FORK_RPCS = {
+    testnet: "https://testnet.movementnetwork.xyz/v1",
+    mainnet: "https://mainnet.movementnetwork.xyz/v1",
+};
+function resolveForkRpcUrl(network, override) {
+    if (override !== undefined)
+        return override;
+    const builtin = BUILTIN_FORK_RPCS[network];
+    if (builtin !== undefined)
+        return builtin;
+    throw new Error(`Cannot fork unknown network "${network}" without a forkRpcUrl. ` +
+        `Either pass forkRpcUrl in LocalTestOptions or use one of: ` +
+        `${Object.keys(BUILTIN_FORK_RPCS).join(", ")}.`);
+}
 /**
  * Setup a local testing environment with either a local node or fork server
  *
@@ -200,8 +214,8 @@ async function setupWithFork(options, accountLabels, autoFund, defaultBalance) {
     const forkExists = existsSync(join(forkPath, "metadata.json"));
     if (!forkExists) {
         logger.step(`Creating fork from ${forkNetwork}...`);
-        const testnetRpc = "https://testnet.movementnetwork.xyz/v1";
-        await forkManager.initialize(testnetRpc, forkNetwork, options.forkApiKey);
+        const rpcUrl = resolveForkRpcUrl(forkNetwork, options.forkRpcUrl);
+        await forkManager.initialize(rpcUrl, forkNetwork, options.forkApiKey);
         logger.success(`Fork created at ${forkPath}`);
         logger.newline();
     }
@@ -214,6 +228,18 @@ async function setupWithFork(options, accountLabels, autoFund, defaultBalance) {
             forkManager.setApiKey(options.forkApiKey);
         }
         forkManager.load();
+        // Guard against the audit-f1 follow-up case: the default forkName
+        // ("test-local") doesn't encode the network, so a fork created for
+        // testnet would silently serve mainnet requests. Refuse to load
+        // when the saved metadata's network doesn't match what the caller
+        // asked for — the user must either pass a network-specific
+        // `forkName` or delete the stale directory.
+        const savedNetwork = forkManager.getMetadata().network;
+        if (savedNetwork !== forkNetwork) {
+            throw new Error(`Fork at ${forkPath} was created for network "${savedNetwork}" but ` +
+                `you requested "${forkNetwork}". Use a different forkName ` +
+                `(e.g. "${forkNetwork}-local") or delete ${forkPath} to recreate.`);
+        }
         if (forkResetState) {
             logger.step("Resetting fork state...");
             await forkManager.resetState();