[SDK] Introduce a replacement Rust SDK for the entirety of the existi… by gregnazario · Pull Request #20 · aptos-labs/aptos-rust-sdk

gregnazario · 2026-01-07T00:54:53Z

…ng one

This is based off of the TypeScript SDK, and we'll see how well it goes with more extensive testing.

This is completely AI generated but driven by some specs

…ng one This is based off of the TypeScript SDK, and we'll see how well it goes with more extensive testing.

Copilot

Pull request overview

This PR introduces a comprehensive replacement Rust SDK for Aptos (v2), completely redesigned and AI-generated based on the TypeScript SDK. The implementation provides a modern, feature-rich SDK with extensive API clients, account management, cryptographic support, transaction building, and advanced features like retry logic and connection pooling.

Key Changes

Complete new Rust SDK implementation with modular architecture
Full API client suite (Fullnode, Faucet, Indexer, ANS)
Comprehensive account types supporting multiple signature schemes (Ed25519, Secp256k1, Secp256r1, Multi-key, Keyless)
Transaction building with batching, simulation, and sponsored transaction support
Advanced features including automatic retry with exponential backoff and connection pooling

Reviewed changes

Copilot reviewed 67 out of 110 changed files in this pull request and generated 8 comments.

Show a summary per file

File	Description
crates/aptos-rust-sdk-v2/src/api/response.rs	API response types with header metadata extraction and helper methods
crates/aptos-rust-sdk-v2/src/api/mod.rs	Module organization for API clients with feature gating
crates/aptos-rust-sdk-v2/src/api/indexer.rs	GraphQL indexer client for querying indexed blockchain data
crates/aptos-rust-sdk-v2/src/api/fullnode.rs	REST API client for fullnode operations with retry support
crates/aptos-rust-sdk-v2/src/api/faucet.rs	Faucet client for testnet account funding
crates/aptos-rust-sdk-v2/src/api/ans.rs	Aptos Names Service client for name resolution
crates/aptos-rust-sdk-v2/src/account/*.rs	Account implementations for various signature schemes
crates/aptos-rust-sdk-v2/scripts/coverage.sh	Test coverage script with multiple profiles
crates/aptos-rust-sdk-v2/feature-plans/*.md	Design documentation for implemented features

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

crates/aptos-rust-sdk-v2/src/api/response.rs

crates/aptos-rust-sdk-v2/src/api/fullnode.rs

crates/aptos-rust-sdk-v2/src/account/keyless.rs

crates/aptos-sdk/scripts/coverage.sh

Copilot

Pull request overview

Copilot reviewed 120 out of 232 changed files in this pull request and generated 6 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

crates/aptos-rust-sdk-v2/examples/multi_sig_account.rs

crates/aptos-rust-sdk-v2/examples/deploy_module.rs

crates/aptos-rust-sdk-v2-macros/README.md

crates/aptos-rust-sdk-v2/CHANGELOG.md

CLAUDE.md

Copilot

Pull request overview

Copilot reviewed 120 out of 232 changed files in this pull request and generated 5 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

.github/workflows/release.yml

crates/aptos-rust-sdk-v2-macros/src/lib.rs

crates/aptos-sdk/examples/multi_agent.rs

CLAUDE.md

Copilot

Pull request overview

Copilot reviewed 120 out of 232 changed files in this pull request and generated 4 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

crates/aptos-rust-sdk-v2-macros/src/lib.rs

crates/aptos-rust-sdk-v2/README.md

Copilot · 2026-01-27T02:24:46Z

crates/aptos-sdk/examples/call_contract.rs

+        match resource_result {
+            Ok(_) => println!("  APT CoinStore already registered"),
+            Err(_) => {
+                // Register the coin store
+                let payload = EntryFunction::new(
+                    MoveModuleId::from_str_strict("0x1::managed_coin")?,
+                    "register",
+                    vec![TypeTag::aptos_coin()],
+                    vec![], // No arguments besides type arg
+                );


Treating any error from get_account_resource as “not registered” can cause incorrect behavior (e.g., transient network/HTTP errors will trigger an unnecessary register attempt). Prefer matching specifically on a “not found” condition (like the pattern used in deploy_module.rs with Err(e) if e.is_not_found()) and otherwise surface/log the real error.

Copilot · 2026-01-27T02:24:47Z

crates/aptos-sdk-macros/src/lib.rs

+#[proc_macro_derive(MoveStruct, attributes(move_struct))]
+pub fn derive_move_struct(input: TokenStream) -> TokenStream {
+    let input = parse_macro_input!(input as syn::DeriveInput);


A new public-facing derive macro (MoveStruct) is introduced here, but there’s no accompanying compile-time test in this PR. Since the crate already has trybuild as a dev-dependency, add a small trybuild pass test that derives MoveStruct and asserts the generated methods type-check (and a fail test for invalid/missing attributes if applicable).

Copilot

Pull request overview

Copilot reviewed 119 out of 232 changed files in this pull request and generated 3 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

crates/aptos-rust-sdk-v2/examples/multi_key_account.rs

crates/aptos-rust-sdk-v2-macros/src/lib.rs

Copilot

Pull request overview

Copilot reviewed 119 out of 232 changed files in this pull request and generated 7 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

.github/workflows/release.yml

Copilot · 2026-01-28T02:46:01Z

.github/workflows/release.yml

+      - name: Check formatting
+        run: cargo fmt --all -- --check


cargo fmt requires the rustfmt component, but the workflow only installs clippy. Add rustfmt to the toolchain components (e.g., components: clippy, rustfmt) to avoid format-check failures in CI.

crates/aptos-rust-sdk-v2/examples/multi_key_account.rs

crates/aptos-rust-sdk-v2/examples/call_contract.rs

crates/aptos-rust-sdk-v2/examples/deploy_module.rs

Copilot · 2026-01-28T02:46:02Z

crates/aptos-sdk-macros/src/lib.rs

+        if attr.path().is_ident("move_struct") {
+            let _ = attr.parse_nested_meta(|meta| {
+                if meta.path.is_ident("address") {
+                    let value: LitStr = meta.value()?.parse()?;
+                    address = Some(value.value());
+                } else if meta.path.is_ident("module") {
+                    let value: LitStr = meta.value()?.parse()?;
+                    module = Some(value.value());
+                } else if meta.path.is_ident("name") {
+                    let value: LitStr = meta.value()?.parse()?;
+                    struct_name = Some(value.value());
+                }
+                Ok(())
+            });
+        }


The result of parse_nested_meta(...) is ignored (let _ = ...), so malformed #[move_struct(...)] attributes won’t produce a compile error and will silently fall back to defaults (e.g., module=unknown). Propagate parse errors by handling the Result and returning to_compile_error() so users get actionable diagnostics.

- Add rustfmt component to release.yml workflow - Fix deploy_module.rs BCS encoding comment (clarify bytes are passed directly) - Fix multi_key_account.rs to use chain_id().id() and propagate errors - Fix call_contract.rs to check specifically for "not found" errors - Add clearer comment in multi_agent.rs about example limitations These changes address the copilot-pull-request-reviewer comments from PR #20.

Copilot

Pull request overview

Copilot reviewed 119 out of 232 changed files in this pull request and generated 3 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-01-28T04:09:15Z

crates/aptos-sdk-macros/src/lib.rs

+    for attr in &input.attrs {
+        if attr.path().is_ident("move_struct") {
+            let _ = attr.parse_nested_meta(|meta| {
+                if meta.path.is_ident("address") {
+                    let value: LitStr = meta.value()?.parse()?;
+                    address = Some(value.value());
+                } else if meta.path.is_ident("module") {
+                    let value: LitStr = meta.value()?.parse()?;
+                    module = Some(value.value());
+                } else if meta.path.is_ident("name") {
+                    let value: LitStr = meta.value()?.parse()?;
+                    struct_name = Some(value.value());
+                }
+                Ok(())
+            });
+        }
+    }


Attribute parse errors are being ignored (let _ = ...). This means malformed #[move_struct(...)] attributes can silently produce defaulted values and confusing generated code. Recommend propagating parse errors by returning syn::Error::to_compile_error() so invalid attributes fail compilation with a clear message.

crates/aptos-rust-sdk-v2/examples/multi_key_account.rs

Copilot · 2026-01-28T04:09:16Z

.github/workflows/e2e.yml

+      - uses: actions/checkout@v4
+
+      - name: Install Rust
+        uses: dtolnay/rust-toolchain@stable


Same as the release workflow: installing stable can cause CI drift relative to the repo MSRV/toolchain. Pin to the repo toolchain (e.g., 1.90.0) or ensure the action uses the rust-toolchain.toml toolchain for consistent E2E builds.

Suggested change

uses: dtolnay/rust-toolchain@stable

uses: dtolnay/rust-toolchain@master

orderless transactions upport

banool · 2026-01-31T02:43:32Z

crates/aptos-sdk-macros/src/codegen.rs

@@ -0,0 +1,426 @@
+//! Code generation for contract bindings.
+


Looks like the view function code you get from the macro feature return just serde_json::Value rather than a typed struct, we should improve that.

banool · 2026-01-31T02:44:34Z

crates/aptos-sdk-macros/src/abi.rs

+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct MoveModuleABI {
+    /// The module address.
+    pub address: String,


We need a way to override the account address in the ABI when building txn payloads and view functions and the like (from the macro generated code). I usually deploy contracts to different addresses on different networks, so I'd rather not rely on the value from the ABI.

banool · 2026-01-31T02:45:53Z

crates/aptos-sdk/src/types/address.rs

+
+    /// The fungible asset framework address (0x4).
+    pub const FOUR: Self = Self::from_u64(4);
+


Let's have A here too, for the APT fungible asset metadata address.

banool · 2026-01-31T02:47:40Z

crates/aptos-sdk/src/types/address.rs

+    pub fn to_bytes(&self) -> [u8; ADDRESS_LENGTH] {
+        self.0
+    }
+


The Display impl should be the AIP-40 representation (LONG for normal account addresses, SHORT for special addresses). Then there should be to_short_string and to_long_string functions.

See https://github.com/aptos-foundation/AIPs/blob/main/aips/aip-40.md.

Copilot

Pull request overview

Copilot reviewed 123 out of 242 changed files in this pull request and generated 4 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-01-31T14:53:57Z

Cargo.toml

+edition = "2024"
 homepage = "https://aptoslabs.com"
 license = "Apache-2.0"
 publish = false


The workspace sets publish = false, which is inherited by member crates unless overridden. This will cause the new release workflow’s cargo publish step to fail for aptos-rust-sdk-v2 (and the macros crate, if you intend to publish it). If publishing is intended, set publish = true explicitly in the crate(s) that should be publishable (e.g. crates/aptos-rust-sdk-v2/Cargo.toml, and crates/aptos-rust-sdk-v2-macros/Cargo.toml), or adjust the workflow to avoid publishing.

Suggested change

publish = false

publish = true

Copilot · 2026-01-31T14:53:58Z

crates/aptos-sdk/examples/balance_checker.rs

+async fn check_account_exists(aptos: &Aptos, address: AccountAddress) -> bool {
+    aptos.get_sequence_number(address).await.is_ok()


This treats any error (e.g., transient network failures, rate limiting) as “account does not exist”, which can produce incorrect results. Consider returning anyhow::Result<bool> and only mapping “not found” into Ok(false) while propagating other errors, or performing a request that has an explicit “not found” classification and branching on e.is_not_found().

Suggested change

async fn check_account_exists(aptos: &Aptos, address: AccountAddress) -> bool {

aptos.get_sequence_number(address).await.is_ok()

async fn check_account_exists(aptos: &Aptos, address: AccountAddress) -> anyhow::Result<bool> {

match aptos.get_sequence_number(address).await {

Ok(_) => Ok(true),

Err(e) if e.is_not_found() => Ok(false),

Err(e) => Err(e.into()),

}

Copilot · 2026-01-31T14:53:58Z

crates/aptos-sdk/examples/account_management.rs

+    // Get the private key bytes and convert to hex
+    let pk_bytes = random_account.private_key().to_bytes();
+    let pk_hex = hex::encode(pk_bytes);
+    println!("Private key (hex): {}", pk_hex);


Printing private keys in examples is easy for users to copy-paste into real usage and can lead to accidental key disclosure via terminal logs/CI logs/shell history. Consider either removing the private key print, masking it (e.g., show only prefix/suffix), or gating it behind an explicit environment variable (e.g., SHOW_PRIVATE_KEY=1) while keeping the restoration example.

Copilot · 2026-01-31T14:53:58Z

crates/aptos-sdk-macros/src/lib.rs

+/// ```
+#[proc_macro]
+pub fn aptos_contract(input: TokenStream) -> TokenStream {


The proc-macro surface (aptos_contract!, aptos_contract_file!, and #[derive(MoveStruct)]) introduces non-trivial parsing and error-reporting behavior, but this diff doesn’t include any compile-fail/trybuild coverage for invalid ABI JSON, missing files, or malformed #[move_struct(...)] attributes. Adding trybuild tests for both success and failure cases would help keep diagnostics stable and prevent silent parsing regressions.

Copilot

Pull request overview

Copilot reviewed 122 out of 242 changed files in this pull request and generated 3 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-02-01T00:06:51Z

crates/aptos-sdk-macros/README.md

+let payload = MyCoin::transfer(recipient, amount)?;
+let balance = MyCoin::view_balance(&aptos, owner).await?;


The README shows calling generated methods as associated functions (MyCoin::transfer, MyCoin::view_balance), but the same README later documents the generated code as instance methods on &self. Update the usage example to match the actual generated API shape (either consistently instance methods, or consistently associated fns) to avoid confusing users.

Suggested change

let payload = MyCoin::transfer(recipient, amount)?;

let balance = MyCoin::view_balance(&aptos, owner).await?;

let my_coin = /* obtain a `MyCoin` client instance */;

let payload = my_coin.transfer(recipient, amount)?;

let balance = my_coin.view_balance(owner).await?;

Copilot · 2026-02-01T00:06:52Z

crates/aptos-sdk/examples/account_management.rs

+    println!("Private key (hex): {}", pk_hex);
+


This example prints the raw private key to stdout, which is easy for users to copy/paste into logs or CI artifacts accidentally. Consider either removing the private-key print entirely, redacting it (e.g., show only prefix/suffix), or gating it behind an explicit opt-in (like an environment variable) while still demonstrating from_private_key_hex.

Suggested change

println!("Private key (hex): {}", pk_hex);

// For safety, avoid printing the full private key. Show only a redacted version.

let redacted_pk = if pk_hex.len() > 16 {

format!("{}...{}", &pk_hex[..8], &pk_hex[pk_hex.len() - 8..])

} else {

"[redacted]".to_string()

};

println!("Private key (hex, redacted): {}", redacted_pk);

Copilot · 2026-02-01T00:06:52Z

.github/workflows/release.yml

+    name: Publish to crates.io
+    runs-on: ubuntu-latest
+    needs: verify
+    if: startsWith(github.ref, 'refs/tags/v')


The workflow declares a workflow_dispatch input (dry_run), but the publish job is gated only on startsWith(github.ref, 'refs/tags/v'). For manual runs on a branch (a common way to validate cargo publish --dry-run before tagging), the job will never execute. Consider updating the job-level if to also allow github.event_name == 'workflow_dispatch' (and then ensure the steps use --dry-run accordingly).

Suggested change

if: startsWith(github.ref, 'refs/tags/v')

if: startsWith(github.ref, 'refs/tags/v') || github.event_name == 'workflow_dispatch'

- actions/checkout v4 -> v6 - actions/configure-pages v4 -> v5 - actions/upload-pages-artifact v3 -> v4 - softprops/action-gh-release v1 -> v2

Use single braces for import statement in the printed code example. The code is inside a raw string (not a format string), so double braces render literally instead of being escaped.

Copilot

Pull request overview

Copilot reviewed 122 out of 242 changed files in this pull request and generated 1 comment.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-02-02T05:08:31Z

crates/aptos-sdk/examples/balance_checker.rs

+fn format_apt(octas: u64) -> String {
+    let apt = octas as f64 / OCTAS_PER_APT;
+    if apt >= 1.0 {
+        format!("{:.4}", apt)
+    } else if apt >= 0.0001 {
+        format!("{:.6}", apt)
+    } else {
+        format!("{:.8}", apt)
+    }
+}


Converting u64 octas to f64 can lose precision for large balances (f64 has ~53 bits of integer precision), so the displayed APT amount may be inaccurate. Prefer integer-based formatting (split into whole/octas via division/modulo with OCTAS_PER_APT as u64) or use a decimal type for exact display.

Copilot

Pull request overview

Copilot reviewed 134 out of 242 changed files in this pull request and generated 6 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Cargo.toml

crates/aptos-sdk/Cargo.toml

crates/aptos-sdk-macros/Cargo.toml

Copilot · 2026-02-04T17:28:07Z

crates/aptos-sdk/examples/account_management.rs

+    println!("  {}", mnemonic_phrase);
+    println!("\n  ⚠️  IMPORTANT: Store this phrase securely!");


This example prints the full mnemonic phrase and a private key to stdout. Even with warnings, this pattern is easy to cargo-run in shared terminals/CI logs and can leak secrets. Prefer not printing secrets at all, or gate printing behind an explicit opt-in (e.g., PRINT_SECRETS=1) and otherwise print only public information (address/public key) or a redacted/truncated preview.

Suggested change

println!(" {}", mnemonic_phrase);

println!("\n ⚠️ IMPORTANT: Store this phrase securely!");

let print_secrets = std::env::var("PRINT_SECRETS")

.map(|v| v == "1" || v.eq_ignore_ascii_case("true"))

.unwrap_or(false);

if print_secrets {

println!(" {}", mnemonic_phrase);

println!("\n ⚠️ IMPORTANT: Store this phrase securely!");

} else {

println!(" [hidden]");

println!("\n ⚠️ IMPORTANT: This mnemonic gives full control over your funds.");

println!(" It is hidden by default. Set PRINT_SECRETS=1 to display it in this example.");

}

.github/workflows/e2e.yml

- Add security.yml workflow with cargo-audit and cargo-deny checks - Runs on push, PR, and daily schedule to catch new advisories - Update bytes crate 1.11.0 -> 1.11.1 to fix RUSTSEC-2026-0007 (integer overflow in BytesMut::reserve)

[SDK] Introduce a replacement Rust SDK for the entirety of the existi…

a2a5dd4

…ng one This is based off of the TypeScript SDK, and we'll see how well it goes with more extensive testing.

gregnazario requested a review from Copilot January 7, 2026 00:54

Copilot AI reviewed Jan 7, 2026

View reviewed changes

gregnazario added 2 commits January 26, 2026 12:29

more additions to rust SDK v2

e333ce5

[sdkv2] Add feature flags to gate features and reduce overhead

247a8d5

gregnazario requested a review from Copilot January 26, 2026 17:52

format files

3acd662

Copilot AI reviewed Jan 26, 2026

View reviewed changes

gregnazario added 2 commits January 26, 2026 12:57

address comments

dea9609

address comments

35e5f39

gregnazario requested a review from Copilot January 26, 2026 19:19

Copilot AI reviewed Jan 26, 2026

View reviewed changes

fix formatting

325f7c2

gregnazario requested a review from Copilot January 27, 2026 02:22

Copilot AI reviewed Jan 27, 2026

View reviewed changes

gregnazario added 2 commits January 26, 2026 22:02

update some fixes for CI and PR comments

5415c61

more cleanup

3d3f278

gregnazario requested a review from Copilot January 27, 2026 22:58

Copilot AI reviewed Jan 27, 2026

View reviewed changes

crates/aptos-rust-sdk-v2/examples/multi_key_account.rs Outdated Show resolved Hide resolved

crates/aptos-rust-sdk-v2-macros/src/lib.rs Outdated Show resolved Hide resolved

crates/aptos-rust-sdk-v2-macros/src/lib.rs Outdated Show resolved Hide resolved

more fixes

3d6c1cc

gregnazario requested a review from Copilot January 28, 2026 02:42

Copilot AI reviewed Jan 28, 2026

View reviewed changes

gregnazario added 2 commits January 27, 2026 22:31

Fix clippy lint: remove unnecessary to_string() in println

2f06a37

gregnazario requested a review from Copilot January 28, 2026 04:06

Copilot AI reviewed Jan 28, 2026

View reviewed changes

gregnazario added 4 commits January 28, 2026 08:59

add more examples

c9f2a1f

remove ANS for now

e98f5db

add migration guide

35b0e49

cleanup security issues

a46b8c2

gregnazario added 3 commits January 30, 2026 02:56

lint more pedantic

1eee71c

add error messaging, and single key support

7c501fb

Fix single key handling, AIP80 formatting, signed integer type, and

13a90e5

orderless transactions upport

banool reviewed Jan 31, 2026

View reviewed changes

gregnazario added 2 commits January 30, 2026 22:35

add significantly more testing

44c9cb0

add security fixes

5c804a3

gregnazario requested a review from Copilot January 31, 2026 14:50

fix some PR comments

3b259b0

Copilot AI reviewed Jan 31, 2026

View reviewed changes

gregnazario added 3 commits January 31, 2026 10:24

fix clippy warnings, and CI issues

4e0d8f2

fix lints

a87215d

Address PR comments

3694281

gregnazario requested a review from Copilot February 1, 2026 00:04

Copilot AI reviewed Feb 1, 2026

View reviewed changes

gregnazario added 3 commits January 31, 2026 20:21

update GitHub Actions to latest versions

bb28450

- actions/checkout v4 -> v6 - actions/configure-pages v4 -> v5 - actions/upload-pages-artifact v3 -> v4 - softprops/action-gh-release v1 -> v2

fix invalid Rust syntax in deploy_module example

3e77edd

Use single braces for import statement in the printed code example. The code is inside a raw string (not a format string), so double braces render literally instead of being escaped.

fix format string lint

1c81003

gregnazario requested review from banool and Copilot February 2, 2026 05:06

Copilot AI reviewed Feb 2, 2026

View reviewed changes

gregnazario added 2 commits February 4, 2026 12:23

address PR comments

3e81012

rename crates to more publishable crate names

0a23635

gregnazario requested a review from Copilot February 4, 2026 17:25

Copilot AI reviewed Feb 4, 2026

View reviewed changes

gregnazario added 4 commits February 4, 2026 12:31

fix remaining renames

c7311c4

finalize renames

629cefe

Fix invalid string

d46dd7d

Add security audit CI and fix bytes vulnerability

1076ff8

- Add security.yml workflow with cargo-audit and cargo-deny checks - Runs on push, PR, and daily schedule to catch new advisories - Update bytes crate 1.11.0 -> 1.11.1 to fix RUSTSEC-2026-0007 (integer overflow in BytesMut::reserve)

gregnazario merged commit cd8f28d into main Feb 5, 2026

gregnazario deleted the rust-sdk-v2 branch February 5, 2026 18:36

	uses: dtolnay/rust-toolchain@stable
	uses: dtolnay/rust-toolchain@master


		/// The fungible asset framework address (0x4).
		pub const FOUR: Self = Self::from_u64(4);

		async fn check_account_exists(aptos: &Aptos, address: AccountAddress) -> bool {
		aptos.get_sequence_number(address).await.is_ok()

-async fn check_account_exists(aptos: &Aptos, address: AccountAddress) -> bool {
-    aptos.get_sequence_number(address).await.is_ok()
+async fn check_account_exists(aptos: &Aptos, address: AccountAddress) -> anyhow::Result<bool> {
+    match aptos.get_sequence_number(address).await {
+        Ok(_) => Ok(true),
+        Err(e) if e.is_not_found() => Ok(false),
+        Err(e) => Err(e.into()),
+    }

		let payload = MyCoin::transfer(recipient, amount)?;
		let balance = MyCoin::view_balance(&aptos, owner).await?;

-let payload = MyCoin::transfer(recipient, amount)?;
-let balance = MyCoin::view_balance(&aptos, owner).await?;
+let my_coin = /* obtain a `MyCoin` client instance */;
+let payload = my_coin.transfer(recipient, amount)?;
+let balance = my_coin.view_balance(owner).await?;

-    println!("Private key (hex): {}", pk_hex);
+    // For safety, avoid printing the full private key. Show only a redacted version.
+    let redacted_pk = if pk_hex.len() > 16 {
+        format!("{}...{}", &pk_hex[..8], &pk_hex[pk_hex.len() - 8..])
+    } else {
+        "[redacted]".to_string()
+    };
+    println!("Private key (hex, redacted): {}", redacted_pk);

	if: startsWith(github.ref, 'refs/tags/v')
	if: startsWith(github.ref, 'refs/tags/v') \|\| github.event_name == 'workflow_dispatch'

		println!(" {}", mnemonic_phrase);
		println!("\n ⚠️ IMPORTANT: Store this phrase securely!");

-    println!("  {}", mnemonic_phrase);
-    println!("\n  ⚠️  IMPORTANT: Store this phrase securely!");
+    let print_secrets = std::env::var("PRINT_SECRETS")
+        .map(|v| v == "1" || v.eq_ignore_ascii_case("true"))
+        .unwrap_or(false);
+    if print_secrets {
+        println!("  {}", mnemonic_phrase);
+        println!("\n  ⚠️  IMPORTANT: Store this phrase securely!");
+    } else {
+        println!("  [hidden]");
+        println!("\n  ⚠️  IMPORTANT: This mnemonic gives full control over your funds.");
+        println!("      It is hidden by default. Set PRINT_SECRETS=1 to display it in this example.");
+    }

Conversation

gregnazario commented Jan 7, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Key Changes

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Copilot AI Jan 27, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Jan 27, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Copilot AI Jan 28, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI Jan 28, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI Jan 28, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Copilot AI Jan 28, 2026

Choose a reason for hiding this comment