x402agent/pump-shell-scripts

Shell Scripting & CLI Tools — Production Bash Scripts

Production-quality Bash scripts for vanity generation, keypair verification, batch operations, dependency auditing, and test orchestration with security-hardened patterns.

Scripts Overview

| Script | Purpose | |--------|---------| | scripts/utils.sh | Shared library (colors, logging, validation, cleanup) | | scripts/generate-vanity.sh | Vanity address generation via solana-keygen | | scripts/batch-generate.sh | Parallel batch generation | | scripts/verify-keypair.sh | 7-point keypair verification | | scripts/test-rust.sh | 10-step Rust test orchestration | | tools/audit-dependencies.sh | Dependency security audit | | tools/check-file-permissions.sh | File permission validation | | tools/verify-keypair.ts | TypeScript 9-point verifier |

Keypair Verification (7 Points)

verify_keypair() {
    # 1. File exists
    # 2. Valid JSON array
    # 3. Exactly 64 bytes
    # 4. File permissions are 0600
    # 5. solana-keygen verify passes
    # 6. Public key matches filename
    # 7. Re-derive public key from secret matches
}

Security Patterns

# Cleanup trap
trap 'cleanup_temp_files' EXIT ERR INT TERM

# File permissions
chmod 600 "$keypair_file"

# Input validation
validate_base58() {
    [[ "$1" =~ ^[1-9A-HJ-NP-Za-km-z]+$ ]] || die "Invalid Base58"
}

# No shell injection
# Use "$var" (quoted) everywhere, never $var

Makefile Integration

| Target | Description | |--------|-------------| | make test-rust | Run Rust test suite | | make bench | Run Criterion benchmarks | | make generate | Generate a vanity address | | make verify | Verify a keypair file | | make audit | Audit dependencies |

Patterns to Follow

• Source scripts/utils.sh in all scripts for shared utilities
• Use set -euo pipefail at the top of every script
• Quote all variable expansions: "$var" not $var
• Use trap for cleanup of temporary files
• Validate all user input (Base58, paths, integers)
• Set chmod 600 on any keypair file immediately after creation

Common Pitfalls

• solana-keygen verify expects the address as the first argument, not the file
• shred is not available on all systems — check with command -v
• mktemp patterns differ between macOS and Linux
• read -r is essential to prevent backslash interpretation
• Always use [[ ]] over [ ] for conditionals