@dignetwork/dig-sdk 0.1.0 → 0.2.0

package/README.md

@@ -11,6 +11,10 @@ The typed front door for building dapps on the **DIG Network**. One `npm i` give
 - **`@dignetwork/dig-sdk/spend`** — the canonical CHIP-0035 spend builder
   (`@dignetwork/chip35-dl-coin-wasm`) re-exported. Build store / NFT / CAT spends through the SDK
   and sign them with the wallet. Spends are **never** hand-rolled.
+- **`Paywall`** — a high-level **pay-to-unlock** helper. Charge XCH or a CAT (e.g. $DIG) to unlock a
+  resource, then gate access by verifying the payment — or gate on holding an **NFT** / a
+  **collection** membership. It composes `ChiaProvider` with the canonical monetization spends; the
+  wasm builds every coin spend, the wallet signs it.
 - **Framework adapters** — `@dignetwork/dig-sdk/vite` (a Vite plugin) and `@dignetwork/dig-sdk/next`
   (a Next static-export adapter): inject a `window.chia` dev wallet during `dev`, and ship your
   build to a DIG capsule on a `publish` script. See **[Framework adapters](#framework-adapters)**.
@@ -94,6 +98,45 @@ const aggregatedSignature = await provider.signCoinSpends(/* coinSpends from the
 The hub builds spend bundles in-browser via this wasm and pushes them to the wallet for signing —
 your dapp does the same through the SDK.
 
+## Charge for access (Paywall)
+
+`Paywall` turns the monetization spends into a pay-to-unlock flow. It sources the buyer's coins from
+the connected wallet, asks the wasm to build the payment, pushes those coin spends to the wallet to
+sign, and hands you back a **receipt** — it never assembles a spend itself.
+
+```ts
+import { ChiaProvider, Paywall } from "@dignetwork/dig-sdk";
+
+const provider = await ChiaProvider.connect({ mode: "auto", walletConnect });
+const paywall = new Paywall(provider); // chip35 monetization wasm is loaded lazily under a bundler
+
+// Charge 0.25 XCH to unlock a resource (amount is mojos). `memo` derives a deterministic unlock nonce.
+const { receipt, signature } = await paywall.requestPayment({
+  amount: 250_000_000_000n,
+  owner: dappOwnerPuzzleHashHex,
+  memo: `unlock:${resourceId}:${userId}`,
+});
+
+// …or charge a CAT (e.g. $DIG) by passing its tail hash:
+await paywall.requestPayment({ amount: 100n, owner: dappOwnerPuzzleHashHex, assetId: digTailHashHex });
+
+// Later, gate access by re-checking the on-chain payment against the receipt:
+const { ok } = await paywall.verifyReceipt({
+  observed: observedPayment, // an ObservedPayment you filled in after reading the owner's coin
+  owner: dappOwnerPuzzleHashHex,
+  minAmount: 250_000_000_000n,
+});
+if (ok) grantAccess();
+
+// Or gate on holding an NFT (or a collection membership) instead of a payment:
+const access = await paywall.proveAccess({ parentSpend, owner, nft: nftLauncherIdHex });
+// const access = await paywall.proveAccess({ parentSpend, owner, collection: creatorDidHex });
+```
+
+> No bundler? Pass the spend builder in yourself — `new Paywall(provider, { spends })`, where
+> `spends` is `import * as spends from "@dignetwork/dig-sdk/spend"` (or the chip35 module). The
+> builder is always the canonical wasm; the Paywall only orchestrates it.
+
 ---
 
 ## API surface
@@ -102,7 +145,7 @@ your dapp does the same through the SDK.
 
 | Member | Description |
 |---|---|
-| `static connect(options)` | Connect a wallet. `mode`: `"auto"` (default, prefer injected) / `"injected"` / `"walletconnect"`. |
+| `static connect(options)` | Connect a wallet. See **`ConnectOptions`** below. |
 | `connectWallet(options)` | Convenience alias for `ChiaProvider.connect`. |
 | `backend` / `session` | The connected transport (`"injected"` \| `"walletconnect"`) and session descriptor. |
 | `getAddress()` | The wallet's receive address (cached). |
@@ -119,6 +162,15 @@ Transports are also exported directly (`InjectedTransport`, `WalletConnectTransp
 `isInjectedAvailable`, `getInjectedProvider`) for advanced flows (e.g. restoring a WC session via
 `WalletConnectTransport.restore(...)`).
 
+#### `ConnectOptions`
+
+| Field | Type | Default | Description |
+|---|---|---|---|
+| `mode` | `"auto"` \| `"injected"` \| `"walletconnect"` | `"auto"` | `"auto"` prefers the injected DIG wallet and falls back to WalletConnect; `"injected"` requires the injected wallet (throws `NO_INJECTED_WALLET` if absent); `"walletconnect"` forces WalletConnect→Sage (throws `WC_OPTIONS_REQUIRED` if `walletConnect` is omitted). |
+| `walletConnect` | `WalletConnectOptions` | — | Required for the WalletConnect fallback/force path (`projectId`, `metadata`, `onUri`). Omit if you only target the injected DIG Browser wallet. |
+| `chain` | `string` | `"chia:mainnet"` | CAIP-2 chain id. Mainnet only — there is no testnet flow. |
+| `acceptAnyInjected` | `boolean` | `false` | Accept any `window.chia` for the injected path, not just the DIG Browser's unspoofable `isDIG` provider. Use with care — a non-DIG provider is not feature-detected. |
+
 ### `DigClient`
 
 | Member | Description |
@@ -130,8 +182,23 @@ Transports are also exported directly (`InjectedTransport`, `WalletConnectTransp
 | `deriveUrnKeys({ urn, salt? })` | The root-independent `{ retrievalKey, decryptionKey }` for a URN. |
 | `retrievalKey(storeId, key)` / `deriveKey(storeId, key, salt?)` | The individual derivations. |
 | `verifyInclusion(ciphertext, proof, root)` / `reconstructUrn(...)` | Lower-level read-crypto. |
+| `getCollection({ launcherIds, did? }, opts?)` | Public NFT-collection facts → `{ did, declared_did, item_count, resolved_count, royalty_basis_points }`. |
+| `listCollectionItems({ launcherIds, offset?, limit? }, opts?)` | A page of items resolved to their CURRENT on-chain owner + royalty + CHIP-0007 metadata → `{ items, offset, limit, total, next_offset }`. |
 | `wasm()` | The raw SRI-verified read-crypto wasm (`decryptChunk`, `encryptResource`, `version`, …). |
 
+### `Paywall`
+
+| Member | Description |
+|---|---|
+| `new Paywall(provider, { spends? })` | Wrap a connected `ChiaProvider`. `spends` defaults to a lazy `import("@dignetwork/chip35-dl-coin-wasm")` (pass it for non-bundler runtimes). |
+| `requestPayment({ amount, owner, assetId?, memo?, nonce?, fee?, coinLimit? })` | Build the payment via the wasm (`buildPayment` XCH / `buildCatPayment` CAT) and push it to the wallet to sign. Returns `{ signature, receipt, coinSpends, nonce }`. |
+| `verifyReceipt({ observed, owner, minAmount, asset?, nonce? })` | Verify an observed on-chain payment unlocks the paywall (wasm `verifyPaymentReceipt`). Returns `{ ok, error? }`. |
+| `proveAccess({ parentSpend, owner, nft? \| collection? })` | Prove NFT ownership (`proveNftOwnership`) or collection membership (`proveCollectionMembership`). Returns `{ ok, proof?, error? }`. |
+
+`amount` / `minAmount` / `fee` accept a `number` or `bigint`; hashes/ids/nonces are hex (with or
+without `0x`). The Paywall holds **no** spend-assembly logic — if the canonical wasm builder is
+unavailable it throws rather than fabricate a spend.
+
 ### URN helpers (pure)
 
 `parseUrn`, `isUrn`, `reconstructUrn`, `reconstructUrnWithRoot` and the `ParsedUrn` type — the same
@@ -141,11 +208,13 @@ URN grammar the hub, extension, and companion use.
 
 `import * as spend from "@dignetwork/dig-sdk/spend"` re-exports
 [`@dignetwork/chip35-dl-coin-wasm`](https://www.npmjs.com/package/@dignetwork/chip35-dl-coin-wasm)
-(≥ 0.5.0): store coins (`mintStore`, `meltStore`, `updateStoreMetadata`, `updateStoreOwnership`,
+(≥ 0.7.0): store coins (`mintStore`, `meltStore`, `updateStoreMetadata`, `updateStoreOwnership`,
 `oracleSpend`), assets (`mintNft`, `bulkMint`, `createDid`, `issueCat`), CHIP-0007 metadata
 (`buildChip0007Metadata`, `validateChip0007`, `generateItemMetadata`), offers (`encodeOffer`,
-`decodeOffer`), and helpers (`addFee`, `dataStoreFromSpend`, `hexSpendBundleToCoinSpends`,
-`spendBundleToHex`, `digstoreOwnerHint`, `sha256`, `init`).
+`decodeOffer`), monetization (`buildPayment`, `buildCatPayment`, `paymentNonce`,
+`verifyPaymentReceipt`, `proveNftOwnership`, `proveCollectionMembership` — these back the
+[`Paywall`](#paywall) helper), and helpers (`addFee`, `dataStoreFromSpend`,
+`hexSpendBundleToCoinSpends`, `spendBundleToHex`, `digstoreOwnerHint`, `sha256`, `init`).
 
 ---
 
@@ -156,7 +225,7 @@ things: injects a **`window.chia` dev wallet** during local `dev` (the same inje
 contract `ChiaProvider` detects in production, so the wallet path runs end-to-end locally), and
 ships your build to a **DIG capsule** via `digstore deploy --json` on a `publish` script.
 
-> Deploying **spends DIG** (each deploy publishes a new capsule), so it is a deliberate, credentialed
+> Deploying **spends $DIG** (each deploy publishes a new capsule), so it is a deliberate, credentialed
 > step — never wired into the default `build`. Config + secrets are read from your project's
 > `dig.toml` and `DIGSTORE_*` env vars, exactly like `digstore deploy`; the deploy key and store
 > salt come from the env only (never argv) so they don't leak. Requires the `digstore` CLI on PATH.
@@ -183,7 +252,8 @@ export default defineConfig({
 ```
 
 `digDeploy()` shells out to `digstore deploy --json`, ships the build dir to a new capsule, and
-prints the `dig://` + `https://hub.dig.net/stores/<id>` URL. Disable the dev shim with
+prints the `chia://` content-open address + the `https://hub.dig.net/stores/<id>` DIGHUb view URL
+(`result.chiaUrl` / `result.hubUrl`; `result.digUrl` is a deprecated alias of `chiaUrl`). Disable the dev shim with
 `digVite({ devWallet: false })`; set its mock address with `digVite({ devWalletOptions: { address } })`.
 
 ### Next.js (static export) — `@dignetwork/dig-sdk/next`
@@ -232,6 +302,81 @@ construction, the dev-shim string, the `dig.toml` reader) are exported from
 
 ---
 
+## Machine-readable surface (for agents)
+
+The SDK is self-describing: an agent can introspect its version, modules, methods, chains, and the
+full error catalogue without reading source, and every failure carries a stable machine code.
+
+### Capabilities & version
+
+```ts
+import { SDK_VERSION, capabilities } from "@dignetwork/dig-sdk";
+
+SDK_VERSION;       // "0.2.0" — the published version, injected from package.json at build time
+capabilities();    // (alias: describe()) the machine-readable surface ↓
+```
+
+`capabilities()` (and its alias `describe()`) returns:
+
+| Field | Type | Description |
+|---|---|---|
+| `name` | `string` | `"@dignetwork/dig-sdk"`. |
+| `version` | `string` | `SDK_VERSION`. |
+| `modules` | `{ name, summary, entry }[]` | The pillars: `ChiaProvider`, `DigClient`, `Paywall`, `spend`, `adapters` (each with its import `entry`). |
+| `walletMethods` | `string[]` | The canonical CHIP-0002 method surface both transports negotiate. |
+| `signMethods` | `string[]` | Message-signing methods, in preference order. |
+| `transports` | `("injected" \| "walletconnect")[]` | The wallet transports. |
+| `chains` | `string[]` | CAIP-2 chains — `["chia:mainnet"]` (no testnet flow). |
+| `defaultRpc` | `string` | The default dig RPC endpoint `DigClient` reads from. |
+| `readCryptoWasmSha256` | `string` | SRI digest of the vendored read-crypto wasm (fail-closed on mismatch). |
+| `errorCodes` | `string[]` | The full stable error-code catalogue (see below). |
+
+### Error codes
+
+Every failure the SDK surfaces is a **`DigSdkError`** (an `Error` subclass) with a stable, documented
+`.code` (UPPER_SNAKE) plus structured `.context`. Branch on `err.code` (or the `isDigSdkError(err, code)`
+type guard) — never on the human `.message`.
+
+```ts
+import { DigClient, DigSdkError, isDigSdkError } from "@dignetwork/dig-sdk";
+
+try {
+  await new DigClient().read({ urn });
+} catch (e) {
+  if (isDigSdkError(e, "ROOT_REQUIRED")) promptForRoot();
+  else if (isDigSdkError(e, "RPC_TRANSPORT")) retryLater();
+  else throw e;
+}
+// DigSdkError also has .toJSON() → { code, message, context }
+```
+
+The catalogue is exported as the typed `DIG_SDK_ERROR_CODES` const (and the `DigSdkErrorCode` union),
+and is also returned by `capabilities().errorCodes`:
+
+| Code | Thrown when | Key context fields |
+|---|---|---|
+| `WC_OPTIONS_REQUIRED` | WalletConnect was needed but no `walletConnect` options were given. | `mode` |
+| `NO_INJECTED_WALLET` | `mode:"injected"` (or the injected leg of `auto`) found no usable `window.chia`. | `mode`, `acceptAnyInjected` |
+| `WC_DEPENDENCY_MISSING` | The optional `@walletconnect/sign-client` peer dep is not installed. | — |
+| `METHOD_NOT_SUPPORTED` | The active session/transport does not grant the requested method. | `method` |
+| `WALLET_TIMEOUT` | A wallet RPC timed out (e.g. Sage did not respond). | `method`, `timeoutMs` |
+| `WALLET_NO_KEYS` | The wallet returned no public keys / no key to sign with. | — |
+| `ROOT_REQUIRED` | A content read needs a confirmed on-chain root and none was supplied. | `urn` |
+| `DECRYPT_FAILED` | The resource did not decrypt under this URN (wrong key/salt, or a decoy). | `urn` |
+| `RPC_TRANSPORT` | The dig RPC could not be reached (network/transport failure). | `rpcMethod` |
+| `RPC_ERROR` | The dig RPC returned an HTTP error or a JSON-RPC `error`. | `rpcMethod`, `httpStatus`, `rpcCode` |
+| `RPC_MALFORMED_RESPONSE` | The dig RPC returned a malformed/inconsistent payload. | `rpcMethod` |
+| `WASM_INTEGRITY` | The read-crypto wasm failed its SRI check — fail closed. | `expected`, `actual` |
+| `WASM_LOAD_FAILED` | The read-crypto wasm could not be loaded. | `httpStatus`, `wasmUrl` |
+| `SPEND_BUILDER_UNAVAILABLE` | The canonical chip35 wasm builder for the operation is unavailable (never hand-rolled). | `builder` |
+| `NO_SECURE_RANDOM` | No secure random source to generate a payment nonce. | — |
+| `DIGSTORE_NOT_FOUND` | The `digstore` binary could not be spawned (not installed / not on PATH). | `bin` |
+| `DEPLOY_FAILED` | `digstore deploy` exited non-zero. | `exitCode`, `stderr` |
+| `DEPLOY_OUTPUT_UNPARSEABLE` | `digstore deploy --json` output could not be parsed into a capsule. | `stdout` |
+| `INVALID_ARGUMENT` | A malformed argument (non-hex, bad URN, mutually-exclusive options, malformed capsule). | `value`, `expected` |
+
+---
+
 ## Key concepts
 
 - **URN** — `urn:dig:chia:<storeId>[:<root>]/<resourceKey>[?salt=<hex>]` addresses one resource in

package/dist/adapters.cjs

@@ -107,6 +107,24 @@ function resolveDeployConfig(input) {
     salt: envVal(env, "DIGSTORE_STORE_SALT")
   };
 }
+var DIG_SDK_ERROR_BRAND = "__dignetwork_dig_sdk_error__";
+var DigSdkError = class _DigSdkError extends Error {
+  constructor(code, message, context = {}, options = {}) {
+    super(message);
+    this.name = "DigSdkError";
+    this.code = code;
+    this.context = context;
+    if (options.cause !== void 0) {
+      this.cause = options.cause;
+    }
+    Object.defineProperty(this, DIG_SDK_ERROR_BRAND, { value: true, enumerable: false });
+    Object.setPrototypeOf(this, _DigSdkError.prototype);
+  }
+  /** A JSON-friendly view of the error: `{ code, message, context }`. */
+  toJSON() {
+    return { code: this.code, message: this.message, context: this.context };
+  }
+};
 
 // src/adapters/deploy.ts
 function buildDeployArgs(cfg, opts = {}) {
@@ -130,9 +148,11 @@ var CAPSULE_RE = /^([0-9a-f]{64}):([0-9a-f]{64})$/i;
 function parseDeployResult(stdout) {
   const lines = stdout.split(/\r?\n/).map((l) => l.trim()).filter((l) => l.startsWith("{") && l.endsWith("}"));
   if (lines.length === 0) {
-    throw new Error(
+    throw new DigSdkError(
+      "DEPLOY_OUTPUT_UNPARSEABLE",
       `could not parse digstore deploy output (no JSON object found). Output was:
-${stdout.slice(0, 500)}`
+${stdout.slice(0, 500)}`,
+      { stdout: stdout.slice(0, 500) }
     );
   }
   let obj;
@@ -154,28 +174,40 @@ ${stdout.slice(0, 500)}`
   }
   if (!obj) {
     if (fallback) {
-      throw new Error(
+      throw new DigSdkError(
+        "DEPLOY_OUTPUT_UNPARSEABLE",
         `digstore deploy did not report a capsule (deploy may have failed). Output:
-${JSON.stringify(fallback)}`
+${JSON.stringify(fallback)}`,
+        { output: fallback }
       );
     }
-    throw new Error(`could not parse digstore deploy output as JSON:
-${stdout.slice(0, 500)}`);
+    throw new DigSdkError(
+      "DEPLOY_OUTPUT_UNPARSEABLE",
+      `could not parse digstore deploy output as JSON:
+${stdout.slice(0, 500)}`,
+      { stdout: stdout.slice(0, 500) }
+    );
   }
   const capsule = obj.capsule;
   const m = CAPSULE_RE.exec(capsule);
   if (!m || m[1] === void 0 || m[2] === void 0) {
-    throw new Error(`digstore deploy reported a malformed capsule "${capsule}" (expected storeId:root)`);
+    throw new DigSdkError(
+      "INVALID_ARGUMENT",
+      `digstore deploy reported a malformed capsule "${capsule}" (expected storeId:root)`,
+      { value: capsule, expected: "storeId:root" }
+    );
   }
   const storeId = m[1].toLowerCase();
   const root = (typeof obj.root === "string" ? obj.root : m[2]).toLowerCase();
+  const chiaUrl = typeof obj.content_address === "string" ? obj.content_address : `chia://${storeId}:${root}/`;
   return {
     capsule,
     storeId,
     root,
-    // dig:// names the store on the network (resolves to its latest published version).
-    digUrl: `dig://${storeId}`,
-    // Mirrors digstore deploy.rs::hub_url — the public DIGHub view of an owned store.
+    chiaUrl,
+    // Deprecated alias: same chia:// content-open value (back-compat for consumers reading digUrl).
+    digUrl: chiaUrl,
+    // Mirrors digstore deploy.rs::hub_url — the public DIGHUb view of an owned store.
     hubUrl: `https://hub.dig.net/stores/${storeId}`,
     pushed: typeof obj.pushed === "boolean" ? obj.pushed : void 0
   };
@@ -285,20 +317,29 @@ async function runDeploy(options = {}) {
     });
     child.on("error", (e) => {
       reject(
-        new Error(
-          `could not run "${bin}" \u2014 is digstore installed and on PATH? (${e.message})`
+        new DigSdkError(
+          "DIGSTORE_NOT_FOUND",
+          `could not run "${bin}" \u2014 is digstore installed and on PATH? (${e.message})`,
+          { bin },
+          { cause: e }
         )
       );
     });
     child.on("close", (code) => {
       if (code === 0) resolve(out);
-      else reject(new Error(`digstore deploy failed (exit ${code}).
-${err || out}`));
+      else
+        reject(
+          new DigSdkError("DEPLOY_FAILED", `digstore deploy failed (exit ${code}).
+${err || out}`, {
+            exitCode: code,
+            stderr: err.slice(0, 2e3)
+          })
+        );
     });
   });
   const result = parseDeployResult(stdout);
   log(`\u2713 deployed capsule ${result.capsule}`);
-  log(`  dig://  ${result.digUrl}`);
+  log(`  open    ${result.chiaUrl}`);
   log(`  view    ${result.hubUrl}`);
   return result;
 }

package/dist/adapters.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/adapters/dig-toml.ts","../src/adapters/config.ts","../src/adapters/deploy.ts","../src/provider/injected.ts","../src/adapters/dev-shim.ts","../src/adapters/run.ts"],"names":[],"mappings":";;;AA0BA,IAAM,OAAA,GAA+C;AAAA,EACnD,QAAA,EAAU,SAAA;AAAA,EACV,UAAA,EAAY,SAAA;AAAA,EACZ,UAAA,EAAY,WAAA;AAAA,EACZ,YAAA,EAAc,WAAA;AAAA,EACd,aAAA,EAAe,cAAA;AAAA,EACf,eAAA,EAAiB,cAAA;AAAA,EACjB,OAAA,EAAS,SAAA;AAAA,EACT,OAAA,EAAS,SAAA;AAAA,EACT,MAAA,EAAQ,QAAA;AAAA,EACR,YAAA,EAAc,aAAA;AAAA,EACd,cAAA,EAAgB;AAClB,CAAA;AAGA,IAAM,WAAA,GAAc,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,IAAA;AAAA,EAAK,CAAC,CAAA,KAC7C,CAAA,CAAE,QAAA,CAAS,GAAG,IAAI,CAAA,GAAI;AACxB,CAAA;AAGA,SAAS,aAAa,IAAA,EAAsB;AAC1C,EAAA,IAAI,QAAA,GAAW,KAAA;AACf,EAAA,IAAI,QAAA,GAAW,KAAA;AACf,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,IAAA,CAAK,QAAQ,CAAA,EAAA,EAAK;AACpC,IAAA,MAAM,EAAA,GAAK,KAAK,CAAC,CAAA;AACjB,IAAA,IAAI,EAAA,KAAO,GAAA,IAAO,CAAC,QAAA,aAAqB,CAAC,QAAA;AAAA,SAAA,IAChC,EAAA,KAAO,GAAA,IAAO,CAAC,QAAA,aAAqB,CAAC,QAAA;AAAA,SAAA,IACrC,EAAA,KAAO,GAAA,IAAO,CAAC,QAAA,IAAY,CAAC,UAAU,OAAO,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA;AAAA,EACvE;AACA,EAAA,OAAO,IAAA;AACT;AAGA,SAAS,QAAQ,GAAA,EAAqB;AACpC,EAAA,MAAM,CAAA,GAAI,IAAI,IAAA,EAAK;AACnB,EAAA,IACG,CAAA,CAAE,WAAW,GAAG,CAAA,IAAK,EAAE,QAAA,CAAS,GAAG,KAAK,CAAA,CAAE,MAAA,IAAU,KACpD,CAAA,CAAE,UAAA,CAAW,GAAG,CAAA,IAAK,CAAA,CAAE,SAAS,GAAG,CAAA,IAAK,CAAA,CAAE,MAAA,IAAU,CAAA,EACrD;AACA,IAAA,OAAO,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAAA,EACtB;AACA,EAAA,OAAO,CAAA;AACT;AAOO,SAAS,aAAa,IAAA,EAA6B;AAExD,EAAA,MAAM,MAA8B,EAAC;AACrC,EAAA,KAAA,MAAW,OAAA,IAAW,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA,EAAG;AACzC,IAAA,MAAM,IAAA,GAAO,YAAA,CAAa,OAAO,CAAA,CAAE,IAAA,EAAK;AACxC,IAAA,IAAI,CAAC,IAAA,IAAQ,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG;AACnC,IAAA,MAAM,EAAA,GAAK,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC3B,IAAA,IAAI,MAAM,CAAA,EAAG;AACb,IAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,EAAE,EAAE,IAAA,EAAK;AACnC,IAAA,IAAI,EAAE,OAAO,OAAA,CAAA,EAAU;AACvB,IAAA,GAAA,CAAI,GAAG,CAAA,GAAI,OAAA,CAAQ,KAAK,KAAA,CAAM,EAAA,GAAK,CAAC,CAAC,CAAA;AAAA,EACvC;AAEA,EAAA,MAAM,MAAqB,EAAC;AAC5B,EAAA,KAAA,MAAW,OAAO,WAAA,EAAa;AAC7B,IAAA,MAAM,KAAA,GAAQ,IAAI,GAAG,CAAA;AACrB,IAAA,MAAM,KAAA,GAAQ,QAAQ,GAAG,CAAA;AACzB,IAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,MAAA,EAAW;AAChD,IAAA,IAAI,UAAU,aAAA,EAAe;AAC3B,MAAA,MAAM,CAAA,GAAI,MAAA,CAAO,QAAA,CAAS,KAAA,EAAO,EAAE,CAAA;AACnC,MAAA,IAAI,MAAA,CAAO,QAAA,CAAS,CAAC,CAAA,MAAO,WAAA,GAAc,CAAA;AAAA,IAC5C,CAAA,MAAO;AACL,MAAA,GAAA,CAAI,KAAK,CAAA,GAAI,KAAA;AAAA,IACf;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;;;AC9CA,SAAS,MAAA,CAAO,KAAyC,GAAA,EAAiC;AACxF,EAAA,MAAM,CAAA,GAAI,IAAI,GAAG,CAAA;AACjB,EAAA,IAAI,CAAA,IAAK,MAAM,OAAO,MAAA;AACtB,EAAA,MAAM,CAAA,GAAI,EAAE,IAAA,EAAK;AACjB,EAAA,OAAO,CAAA,KAAM,KAAK,MAAA,GAAY,CAAA;AAChC;AAGA,SAAS,QAAW,UAAA,EAA8C;AAChE,EAAA,KAAA,MAAW,CAAA,IAAK,UAAA,EAAY,IAAI,CAAA,KAAM,QAAW,OAAO,CAAA;AACxD,EAAA,OAAO,MAAA;AACT;AAMO,SAAS,oBAAoB,KAAA,EAA2C;AAC7E,EAAA,MAAM,EAAE,OAAA,EAAS,OAAA,EAAS,GAAA,EAAI,GAAI,KAAA;AAElC,EAAA,MAAM,OAAA,GAAU,IAAA;AAAA,IACd,OAAA,CAAQ,OAAA;AAAA,IACR,MAAA,CAAO,KAAK,mBAAmB,CAAA;AAAA,IAC/B,OAAA,CAAQ;AAAA,GACV;AACA,EAAA,MAAM,SAAA,GACJ,IAAA,CAAK,OAAA,CAAQ,SAAA,EAAW,MAAA,CAAO,KAAK,qBAAqB,CAAA,EAAG,OAAA,CAAQ,SAAS,CAAA,IAAK,MAAA;AACpF,EAAA,MAAM,YAAA,GAAe,IAAA;AAAA,IACnB,OAAA,CAAQ,YAAA;AAAA,IACR,MAAA,CAAO,KAAK,wBAAwB,CAAA;AAAA,IACpC,OAAA,CAAQ;AAAA,GACV;AACA,EAAA,MAAM,OAAA,GAAU,KAAK,OAAA,CAAQ,OAAA,EAAS,OAAO,GAAA,EAAK,kBAAkB,CAAA,EAAG,OAAA,CAAQ,OAAO,CAAA;AACtF,EAAA,MAAM,OAAA,GACJ,IAAA,CAAK,OAAA,CAAQ,OAAA,EAAS,MAAA,CAAO,KAAK,kBAAkB,CAAA,EAAG,OAAA,CAAQ,OAAO,CAAA,IAAK,SAAA;AAC7E,EAAA,MAAM,MAAA,GAAS,KAAK,OAAA,CAAQ,MAAA,EAAQ,OAAO,GAAA,EAAK,iBAAiB,CAAA,EAAG,OAAA,CAAQ,MAAM,CAAA;AAElF,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,GAAA,EAAK,uBAAuB,CAAA;AACvD,EAAA,MAAM,WAAA,GAAc,IAAA;AAAA,IAClB,OAAA,CAAQ,WAAA;AAAA,IACR,eAAe,IAAA,GAAO,MAAA,CAAO,QAAA,CAAS,WAAA,EAAa,EAAE,CAAA,GAAI,MAAA;AAAA,IACzD,OAAA,CAAQ;AAAA,GACV;AAEA,EAAA,OAAO;AAAA,IACL,OAAA;AAAA,IACA,SAAA;AAAA,IACA,YAAA;AAAA,IACA,OAAA;AAAA,IACA,OAAA;AAAA,IACA,MAAA;AAAA,IACA,WAAA,EAAa,MAAA,CAAO,QAAA,CAAS,WAAW,IAAI,WAAA,GAAc,MAAA;AAAA;AAAA,IAE1D,SAAA,EAAW,MAAA,CAAO,GAAA,EAAK,qBAAqB,CAAA;AAAA,IAC5C,IAAA,EAAM,MAAA,CAAO,GAAA,EAAK,qBAAqB;AAAA,GACzC;AACF;;;ACjFO,SAAS,eAAA,CACd,GAAA,EACA,IAAA,GAA0B,EAAC,EACjB;AACV,EAAA,MAAM,IAAA,GAAiB,CAAC,QAAA,EAAU,QAAQ,CAAA;AAC1C,EAAA,IAAI,IAAI,OAAA,EAAS,IAAA,CAAK,IAAA,CAAK,YAAA,EAAc,IAAI,OAAO,CAAA;AACpD,EAAA,IAAI,IAAI,SAAA,EAAW,IAAA,CAAK,IAAA,CAAK,cAAA,EAAgB,IAAI,SAAS,CAAA;AAC1D,EAAA,IAAI,CAAC,KAAK,SAAA,IAAa,GAAA,CAAI,cAAc,IAAA,CAAK,IAAA,CAAK,iBAAA,EAAmB,GAAA,CAAI,YAAY,CAAA;AACtF,EAAA,IAAI,IAAI,OAAA,EAAS,IAAA,CAAK,IAAA,CAAK,WAAA,EAAa,IAAI,OAAO,CAAA;AACnD,EAAA,IAAI,IAAI,OAAA,EAAS,IAAA,CAAK,IAAA,CAAK,WAAA,EAAa,IAAI,OAAO,CAAA;AACnD,EAAA,IAAI,IAAI,MAAA,EAAQ,IAAA,CAAK,IAAA,CAAK,UAAA,EAAY,IAAI,MAAM,CAAA;AAChD,EAAA,IAAI,GAAA,CAAI,eAAe,IAAA,EAAM,IAAA,CAAK,KAAK,gBAAA,EAAkB,MAAA,CAAO,GAAA,CAAI,WAAW,CAAC,CAAA;AAChF,EAAA,OAAO,IAAA;AACT;AAMO,SAAS,eAAe,GAAA,EAAmD;AAChF,EAAA,MAAM,MAA8B,EAAC;AACrC,EAAA,IAAI,GAAA,CAAI,SAAA,EAAW,GAAA,CAAI,mBAAA,GAAsB,GAAA,CAAI,SAAA;AACjD,EAAA,IAAI,GAAA,CAAI,IAAA,EAAM,GAAA,CAAI,mBAAA,GAAsB,GAAA,CAAI,IAAA;AAC5C,EAAA,OAAO,GAAA;AACT;AAkBA,IAAM,UAAA,GAAa,kCAAA;AAQZ,SAAS,kBAAkB,MAAA,EAA8B;AAC9D,EAAA,MAAM,KAAA,GAAQ,OACX,KAAA,CAAM,OAAO,EACb,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,EACnB,MAAA,CAAO,CAAC,MAAM,CAAA,CAAE,UAAA,CAAW,GAAG,CAAA,IAAK,CAAA,CAAE,QAAA,CAAS,GAAG,CAAC,CAAA;AAErD,EAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACtB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA;AAAA,EAA+E,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA;AAAA,KACrG;AAAA,EACF;AAIA,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI,QAAA;AACJ,EAAA,KAAA,IAAS,IAAI,KAAA,CAAM,MAAA,GAAS,CAAA,EAAG,CAAA,IAAK,GAAG,CAAA,EAAA,EAAK;AAC1C,IAAA,MAAM,IAAA,GAAO,MAAM,CAAC,CAAA;AACpB,IAAA,IAAI,SAAS,MAAA,EAAW;AACxB,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAA,GAAS,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,IAC1B,CAAA,CAAA,MAAQ;AACN,MAAA;AAAA,IACF;AACA,IAAA,IAAI,OAAO,MAAA,CAAO,OAAA,KAAY,QAAA,EAAU;AACtC,MAAA,GAAA,GAAM,MAAA;AACN,MAAA;AAAA,IACF;AACA,IAAA,IAAI,CAAC,UAAU,QAAA,GAAW,MAAA;AAAA,EAC5B;AAEA,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA;AAAA,EAA+E,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAC,CAAA;AAAA,OACzG;AAAA,IACF;AACA,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA;AAAA,EAAoD,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA,CAAE,CAAA;AAAA,EAC5F;AAEA,EAAA,MAAM,UAAU,GAAA,CAAI,OAAA;AACpB,EAAA,MAAM,CAAA,GAAI,UAAA,CAAW,IAAA,CAAK,OAAO,CAAA;AACjC,EAAA,IAAI,CAAC,KAAK,CAAA,CAAE,CAAC,MAAM,MAAA,IAAa,CAAA,CAAE,CAAC,CAAA,KAAM,MAAA,EAAW;AAClD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,8CAAA,EAAiD,OAAO,CAAA,yBAAA,CAA2B,CAAA;AAAA,EACrG;AACA,EAAA,MAAM,OAAA,GAAU,CAAA,CAAE,CAAC,CAAA,CAAE,WAAA,EAAY;AACjC,EAAA,MAAM,IAAA,GAAA,CAAQ,OAAO,GAAA,CAAI,IAAA,KAAS,QAAA,GAAW,IAAI,IAAA,GAAO,CAAA,CAAE,CAAC,CAAA,EAAG,WAAA,EAAY;AAE1E,EAAA,OAAO;AAAA,IACL,OAAA;AAAA,IACA,OAAA;AAAA,IACA,IAAA;AAAA;AAAA,IAEA,MAAA,EAAQ,SAAS,OAAO,CAAA,CAAA;AAAA;AAAA,IAExB,MAAA,EAAQ,8BAA8B,OAAO,CAAA,CAAA;AAAA,IAC7C,QAAQ,OAAO,GAAA,CAAI,MAAA,KAAW,SAAA,GAAY,IAAI,MAAA,GAAS;AAAA,GACzD;AACF;;;AC3GO,IAAM,cAAA,GAAiB,UAAA;;;ACVvB,IAAM,eAAA,GAAkB;AAS/B,IAAM,mBAAA,GAAsB,oEAAA;AAG5B,SAAS,IAAI,CAAA,EAAmB;AAC9B,EAAA,OAAO,IAAA,CAAK,UAAU,CAAC,CAAA;AACzB;AAQO,SAAS,aAAA,CAAc,OAAA,GAA0B,EAAC,EAAW;AAClE,EAAA,MAAM,OAAA,GAAU,QAAQ,OAAA,IAAW,mBAAA;AAInC,EAAA,OAAO;AAAA,IACL,MAAM,eAAe,CAAA,4EAAA,CAAA;AAAA,IACrB,CAAA,cAAA,CAAA;AAAA,IACA,CAAA,eAAA,CAAA;AAAA,IACA,CAAA,4CAAA,CAAA;AAAA,IACA,CAAA,0FAAA,CAAA;AAAA,IACA,CAAA,0BAAA,CAAA;AAAA,IACA,CAAA,oBAAA,EAAuB,GAAA,CAAI,OAAO,CAAC,CAAA,CAAA,CAAA;AAAA,IACnC,CAAA,cAAA,EAAiB,GAAA,CAAI,cAAc,CAAC,CAAA,CAAA,CAAA;AAAA,IACpC,CAAA,+DAAA,CAAA;AAAA,IACA,CAAA,yBAAA,CAAA;AAAA,IACA,CAAA,oCAAA,CAAA;AAAA,IACA,CAAA,YAAA,EAAe,GAAA,CAAI,eAAe,CAAC,CAAA,2EAAA,CAAA;AAAA,IACnC,CAAA,wEAAA,CAAA;AAAA,IACA,CAAA,GAAA,CAAA;AAAA,IACA,CAAA,iBAAA,CAAA;AAAA,IACA,CAAA,wEAAA,CAAA;AAAA,IACA,CAAA,iEAAA,CAAA;AAAA,IACA,CAAA,iBAAA,CAAA;AAAA,IACA,CAAA,2DAAA,CAAA;AAAA,IACA,CAAA,8BAAA,CAAA;AAAA,IACA,CAAA,kEAAA,CAAA;AAAA,IACA,CAAA,uBAAA,CAAA;AAAA,IACA,CAAA,iDAAA,CAAA;AAAA,IACA,CAAA,qDAAA,CAAA;AAAA,IACA,CAAA,0BAAA,CAAA;AAAA,IACA,CAAA,uDAAA,CAAA;AAAA,IACA,CAAA,gBAAA,CAAA;AAAA,IACA,CAAA,uDAAA,CAAA;AAAA,IACA,CAAA,8BAAA,CAAA;AAAA,IACA,CAAA,OAAA,CAAA;AAAA,IACA,CAAA,MAAA,CAAA;AAAA,IACA,CAAA,uBAAA,CAAA;AAAA,IACA,CAAA,wBAAA,CAAA;AAAA,IACA,CAAA,IAAA,CAAA;AAAA,IACA,CAAA,8CAAA,CAAA;AAAA,IACA,CAAA,8BAAA,EAAiC,GAAA,CAAI,eAAe,CAAC,CAAA,wEAAA,CAAA;AAAA,IACrD,CAAA,GAAA,CAAA;AAAA,IACA,CAAA,KAAA;AAAA,GACF,CAAE,KAAK,IAAI,CAAA;AACb;;;ACzDA,eAAe,YAAY,GAAA,EAAqC;AAC9D,EAAA,MAAM,EAAE,QAAA,EAAS,GAAI,MAAM,OAAO,aAAkB,CAAA;AACpD,EAAA,MAAM,IAAA,GAAO,MAAM,OAAO,MAAW,CAAA;AACrC,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,CAAK,KAAK,GAAA,EAAK,UAAU,GAAG,MAAM,CAAA;AAC9D,IAAA,OAAO,aAAa,IAAI,CAAA;AAAA,EAC1B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AAOA,eAAsB,SAAA,CAAU,OAAA,GAA4B,EAAC,EAA0B;AACrF,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,IAAO,OAAA,CAAQ,GAAA,EAAI;AACvC,EAAA,MAAM,GAAA,GAAM,QAAQ,WAAA,IAAe,UAAA;AACnC,EAAA,MAAM,MAAM,OAAA,CAAQ,MAAA,KAAW,CAAC,CAAA,KAAc,OAAA,CAAQ,IAAI,CAAC,CAAA,CAAA;AAE3D,EAAA,MAAM,OAAA,GAAU,MAAM,WAAA,CAAY,GAAG,CAAA;AACrC,EAAA,MAAM,MAAM,mBAAA,CAAoB;AAAA,IAC9B,OAAA,EAAS;AAAA,MACP,SAAS,OAAA,CAAQ,OAAA;AAAA,MACjB,WAAW,OAAA,CAAQ,SAAA;AAAA,MACnB,cAAc,OAAA,CAAQ,YAAA;AAAA,MACtB,SAAS,OAAA,CAAQ,OAAA;AAAA,MACjB,SAAS,OAAA,CAAQ,OAAA;AAAA,MACjB,QAAQ,OAAA,CAAQ,MAAA;AAAA,MAChB,aAAa,OAAA,CAAQ;AAAA,KACvB;AAAA,IACA,OAAA;AAAA,IACA,KAAK,OAAA,CAAQ;AAAA,GACd,CAAA;AAED,EAAA,MAAM,OAAO,eAAA,CAAgB,GAAA,EAAK,EAAE,SAAA,EAAW,OAAA,CAAQ,WAAW,CAAA;AAClE,EAAA,MAAM,QAAA,GAAW,EAAE,GAAG,OAAA,CAAQ,KAAK,GAAG,cAAA,CAAe,GAAG,CAAA,EAAE;AAE1D,EAAA,GAAA,CAAI,CAAA,gBAAA,EAAc,IAAA,CAAK,MAAA,CAAO,CAAC,MAAM,CAAA,KAAM,GAAA,CAAI,SAAA,IAAa,CAAA,KAAM,IAAI,IAAI,CAAA,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,CAAE,CAAA;AAEvF,EAAA,MAAM,EAAE,KAAA,EAAM,GAAI,MAAM,OAAO,eAAoB,CAAA;AACnD,EAAA,MAAM,SAAS,MAAM,IAAI,OAAA,CAAgB,CAAC,SAAS,MAAA,KAAW;AAC5D,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,GAAA,EAAK,IAAA,EAAM;AAAA,MAC7B,GAAA;AAAA,MACA,GAAA,EAAK,QAAA;AAAA;AAAA,MAEL,KAAA,EAAO,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM,CAAA;AAAA,MAChC,KAAA,EAAO;AAAA,KACR,CAAA;AACD,IAAA,IAAI,GAAA,GAAM,EAAA;AACV,IAAA,IAAI,GAAA,GAAM,EAAA;AACV,IAAA,KAAA,CAAM,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAc;AACrC,MAAA,GAAA,IAAO,EAAE,QAAA,EAAS;AAAA,IACpB,CAAC,CAAA;AACD,IAAA,KAAA,CAAM,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAc;AACrC,MAAA,GAAA,IAAO,EAAE,QAAA,EAAS;AAAA,IACpB,CAAC,CAAA;AACD,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAa;AAC9B,MAAA,MAAA;AAAA,QACE,IAAI,KAAA;AAAA,UACF,CAAA,eAAA,EAAkB,GAAG,CAAA,6CAAA,EAA2C,CAAA,CAAE,OAAO,CAAA,CAAA;AAAA;AAC3E,OACF;AAAA,IACF,CAAC,CAAA;AACD,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAwB;AACzC,MAAA,IAAI,IAAA,KAAS,CAAA,EAAG,OAAA,CAAQ,GAAG,CAAA;AAAA,WACtB,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,6BAAA,EAAgC,IAAI,CAAA;AAAA,EAAO,GAAA,IAAO,GAAG,CAAA,CAAE,CAAC,CAAA;AAAA,IAChF,CAAC,CAAA;AAAA,EACH,CAAC,CAAA;AAED,EAAA,MAAM,MAAA,GAAS,kBAAkB,MAAM,CAAA;AACvC,EAAA,GAAA,CAAI,CAAA,wBAAA,EAAsB,MAAA,CAAO,OAAO,CAAA,CAAE,CAAA;AAC1C,EAAA,GAAA,CAAI,CAAA,UAAA,EAAa,MAAA,CAAO,MAAM,CAAA,CAAE,CAAA;AAChC,EAAA,GAAA,CAAI,CAAA,UAAA,EAAa,MAAA,CAAO,MAAM,CAAA,CAAE,CAAA;AAChC,EAAA,OAAO,MAAA;AACT","file":"adapters.cjs","sourcesContent":["// Minimal `dig.toml` reader for the framework adapters.\n//\n// `digstore deploy` reads its config from a project's `dig.toml` (digstore-cli/src/dig_toml.rs).\n// The adapters need the SAME few top-level keys so a project's `dig.toml` is the single source of\n// truth across the CLI and the plugins. Rather than pull in a TOML parser dependency for ~7 flat\n// `key = \"value\"` lines, we parse just those keys ourselves. We accept BOTH the canonical\n// kebab-case key and the snake_case alias, exactly like digstore's `#[serde(rename/alias)]`.\n//\n// Anything beyond these keys (tables, arrays, nested values) is intentionally ignored — the\n// adapters only forward the deploy-relevant scalars to `digstore deploy`, which re-reads the full\n// file authoritatively.\n\n/** The deploy-relevant subset of `dig.toml`, in the adapters' camelCase shape. */\nexport interface DigTomlConfig {\n  storeId?: string;\n  outputDir?: string;\n  buildCommand?: string;\n  message?: string;\n  network?: string;\n  remote?: string;\n  waitTimeout?: number;\n}\n\n// Map each canonical/alias TOML key onto the camelCase field. kebab-case is canonical (it is what\n// `digstore new` writes); snake_case is the tolerated alias. When both appear, the canonical\n// kebab-case key wins (it is applied last).\nconst KEY_MAP: Record<string, keyof DigTomlConfig> = {\n  store_id: \"storeId\",\n  \"store-id\": \"storeId\",\n  output_dir: \"outputDir\",\n  \"output-dir\": \"outputDir\",\n  build_command: \"buildCommand\",\n  \"build-command\": \"buildCommand\",\n  message: \"message\",\n  network: \"network\",\n  remote: \"remote\",\n  wait_timeout: \"waitTimeout\",\n  \"wait-timeout\": \"waitTimeout\",\n};\n\n// Apply snake_case first then kebab-case so the canonical kebab form overrides the alias.\nconst APPLY_ORDER = Object.keys(KEY_MAP).sort((a) =>\n  a.includes(\"-\") ? 1 : -1,\n);\n\n/** Strip a `# comment` that is not inside a quoted value. */\nfunction stripComment(line: string): string {\n  let inSingle = false;\n  let inDouble = false;\n  for (let i = 0; i < line.length; i++) {\n    const ch = line[i];\n    if (ch === \"'\" && !inDouble) inSingle = !inSingle;\n    else if (ch === '\"' && !inSingle) inDouble = !inDouble;\n    else if (ch === \"#\" && !inSingle && !inDouble) return line.slice(0, i);\n  }\n  return line;\n}\n\n/** Unquote a TOML scalar: `\"x\"` / `'x'` → `x`; a bare token is returned trimmed. */\nfunction unquote(raw: string): string {\n  const v = raw.trim();\n  if (\n    (v.startsWith('\"') && v.endsWith('\"') && v.length >= 2) ||\n    (v.startsWith(\"'\") && v.endsWith(\"'\") && v.length >= 2)\n  ) {\n    return v.slice(1, -1);\n  }\n  return v;\n}\n\n/**\n * Parse the deploy-relevant keys out of a `dig.toml` string. Unknown keys, tables, and nested\n * structures are ignored. Returns only the keys actually present (so it composes cleanly under the\n * precedence rules in resolveDeployConfig).\n */\nexport function parseDigToml(text: string): DigTomlConfig {\n  // Collect raw (canonical-or-alias) string values keyed by the TOML key as written.\n  const raw: Record<string, string> = {};\n  for (const lineRaw of text.split(/\\r?\\n/)) {\n    const line = stripComment(lineRaw).trim();\n    if (!line || line.startsWith(\"[\")) continue; // skip blanks + table headers\n    const eq = line.indexOf(\"=\");\n    if (eq <= 0) continue;\n    const key = line.slice(0, eq).trim();\n    if (!(key in KEY_MAP)) continue;\n    raw[key] = unquote(line.slice(eq + 1));\n  }\n\n  const out: DigTomlConfig = {};\n  for (const key of APPLY_ORDER) {\n    const value = raw[key];\n    const field = KEY_MAP[key];\n    if (value === undefined || field === undefined) continue;\n    if (field === \"waitTimeout\") {\n      const n = Number.parseInt(value, 10);\n      if (Number.isFinite(n)) out.waitTimeout = n;\n    } else {\n      out[field] = value;\n    }\n  }\n  return out;\n}\n","// Deploy-config resolution for the framework adapters.\n//\n// The final config a deploy runs with is composed from three layers, highest precedence first:\n//   1. plugin options   — what the developer wrote in vite.config / the Next adapter call\n//   2. environment vars  — what CI injects (DIGSTORE_*), incl. the SECRETS (deploy key, salt)\n//   3. dig.toml          — the project's checked-in defaults\n//   4. built-in defaults — outputDir=\"dist\", network=\"mainnet\" (mirrors deploy.rs::resolve_config)\n//\n// This mirrors `digstore deploy`'s own resolution order (flag/env > dig.toml > default) so the\n// adapters never disagree with the CLI about what a project deploys. SECRETS are resolved ONLY from\n// env — never from options or dig.toml — so they can't end up checked into a repo or a config file.\n\nimport type { DigTomlConfig } from \"./dig-toml.js\";\n\n/** Per-call options a developer passes to the Vite plugin / Next adapter. */\nexport interface AdapterOptions {\n  /** On-chain store id (64-hex) to advance. Usually set in dig.toml instead. */\n  storeId?: string;\n  /** Built-output directory to publish. Defaults to the framework's output (or \"dist\"). */\n  outputDir?: string;\n  /** Shell build command for `digstore` to run. Omit when the adapter builds itself. */\n  buildCommand?: string;\n  /** Commit message for the new capsule. */\n  message?: string;\n  /** Chain network. Defaults to \"mainnet\". */\n  network?: string;\n  /** The `origin` remote to publish to (e.g. `dig://<storeId>`). */\n  remote?: string;\n  /** Seconds to wait for on-chain confirmation. */\n  waitTimeout?: number;\n}\n\n/** The fully resolved config a deploy runs with. Secrets are present only if env supplied them. */\nexport interface ResolvedDeployConfig {\n  storeId?: string;\n  outputDir: string;\n  buildCommand?: string;\n  message?: string;\n  network: string;\n  remote?: string;\n  waitTimeout?: number;\n  /** Publisher deploy key (64-hex). From env only. */\n  deployKey?: string;\n  /** Private-store secret salt (64-hex). From env only. */\n  salt?: string;\n}\n\n/** Inputs to resolution — kept explicit so it is a pure function (no process.env read inside). */\nexport interface ResolveInput {\n  options: AdapterOptions;\n  digToml: DigTomlConfig;\n  env: Record<string, string | undefined>;\n}\n\n/** A non-empty, trimmed env value, or undefined. Empty/whitespace env vars count as unset. */\nfunction envVal(env: Record<string, string | undefined>, key: string): string | undefined {\n  const v = env[key];\n  if (v == null) return undefined;\n  const t = v.trim();\n  return t === \"\" ? undefined : t;\n}\n\n/** First defined of the candidates (treating \"\" the caller already filtered as undefined). */\nfunction pick<T>(...candidates: (T | undefined)[]): T | undefined {\n  for (const c of candidates) if (c !== undefined) return c;\n  return undefined;\n}\n\n/**\n * Resolve the final deploy config. Precedence per field: options > env (DIGSTORE_*) > dig.toml >\n * default. Secrets (deployKey, salt) are taken from env ONLY.\n */\nexport function resolveDeployConfig(input: ResolveInput): ResolvedDeployConfig {\n  const { options, digToml, env } = input;\n\n  const storeId = pick(\n    options.storeId,\n    envVal(env, \"DIGSTORE_STORE_ID\"),\n    digToml.storeId,\n  );\n  const outputDir =\n    pick(options.outputDir, envVal(env, \"DIGSTORE_OUTPUT_DIR\"), digToml.outputDir) ?? \"dist\";\n  const buildCommand = pick(\n    options.buildCommand,\n    envVal(env, \"DIGSTORE_BUILD_COMMAND\"),\n    digToml.buildCommand,\n  );\n  const message = pick(options.message, envVal(env, \"DIGSTORE_MESSAGE\"), digToml.message);\n  const network =\n    pick(options.network, envVal(env, \"DIGSTORE_NETWORK\"), digToml.network) ?? \"mainnet\";\n  const remote = pick(options.remote, envVal(env, \"DIGSTORE_REMOTE\"), digToml.remote);\n\n  const waitFromEnv = envVal(env, \"DIGSTORE_WAIT_TIMEOUT\");\n  const waitTimeout = pick(\n    options.waitTimeout,\n    waitFromEnv != null ? Number.parseInt(waitFromEnv, 10) : undefined,\n    digToml.waitTimeout,\n  );\n\n  return {\n    storeId,\n    outputDir,\n    buildCommand,\n    message,\n    network,\n    remote,\n    waitTimeout: Number.isFinite(waitTimeout) ? waitTimeout : undefined,\n    // SECRETS — env only.\n    deployKey: envVal(env, \"DIGSTORE_DEPLOY_KEY\"),\n    salt: envVal(env, \"DIGSTORE_STORE_SALT\"),\n  };\n}\n","// The pure glue around `digstore deploy --json`: build the child argv + env, and parse the result.\n//\n// The adapters SHELL OUT to the installed `digstore` binary (the canonical deployer — it advances\n// the on-chain root, stages the build dir, and pushes the new capsule to DIGHub). They never\n// re-implement deploy. These helpers are the deterministic, side-effect-free pieces:\n//\n//   • buildDeployArgs  — resolved config → argv (always `deploy --json`, only set flags).\n//   • buildDeployEnv   — resolved config → the env overlay carrying the SECRETS to the child, so the\n//                        deploy key / salt are NEVER on the argv (process-table leak), matching\n//                        digstore-cli's own guidance (deploy.rs).\n//   • parseDeployResult— `digstore deploy --json` stdout → { capsule, storeId, root, digUrl, hubUrl,\n//                        pushed }, deriving the URLs exactly as digstore does (capsule = storeId:root;\n//                        hub view = https://hub.dig.net/stores/<id>; dig:// names the store).\n\nimport type { ResolvedDeployConfig } from \"./config.js\";\n\n/** Knobs for argv construction. */\nexport interface DeployArgsOptions {\n  /**\n   * The adapter already ran the framework build, so don't hand `--build-command` to digstore (it\n   * would rebuild). The output dir is staged as-is.\n   */\n  skipBuild?: boolean;\n}\n\n/**\n * Build the argv for `digstore <argv>` from a resolved config. Always `deploy --json`. Only flags\n * whose values are set are emitted. SECRETS (deployKey, salt) are intentionally excluded — they go\n * through the env (buildDeployEnv) so they never appear in the process table.\n */\nexport function buildDeployArgs(\n  cfg: ResolvedDeployConfig,\n  opts: DeployArgsOptions = {},\n): string[] {\n  const argv: string[] = [\"deploy\", \"--json\"];\n  if (cfg.storeId) argv.push(\"--store-id\", cfg.storeId);\n  if (cfg.outputDir) argv.push(\"--output-dir\", cfg.outputDir);\n  if (!opts.skipBuild && cfg.buildCommand) argv.push(\"--build-command\", cfg.buildCommand);\n  if (cfg.message) argv.push(\"--message\", cfg.message);\n  if (cfg.network) argv.push(\"--network\", cfg.network);\n  if (cfg.remote) argv.push(\"--remote\", cfg.remote);\n  if (cfg.waitTimeout != null) argv.push(\"--wait-timeout\", String(cfg.waitTimeout));\n  return argv;\n}\n\n/**\n * The env overlay to merge onto the child process env: the SECRETS, passed out-of-band so they are\n * never visible on the command line. Returns only the keys that have a value.\n */\nexport function buildDeployEnv(cfg: ResolvedDeployConfig): Record<string, string> {\n  const env: Record<string, string> = {};\n  if (cfg.deployKey) env.DIGSTORE_DEPLOY_KEY = cfg.deployKey;\n  if (cfg.salt) env.DIGSTORE_STORE_SALT = cfg.salt;\n  return env;\n}\n\n/** The friendly, parsed outcome of a deploy. */\nexport interface DeployResult {\n  /** `storeId:rootHash` — the capsule identity (the ecosystem-vocabulary id the user shares). */\n  capsule: string;\n  /** Store identity (64-hex). */\n  storeId: string;\n  /** The new on-chain root (64-hex). */\n  root: string;\n  /** The dig:// URL naming this store (resolves through the network to the latest version). */\n  digUrl: string;\n  /** The human \"view it\" URL on DIGHub (the same one `digstore deploy` prints). */\n  hubUrl: string;\n  /** Whether the capsule was pushed to DIGHub (when the JSON reported it). */\n  pushed?: boolean;\n}\n\nconst CAPSULE_RE = /^([0-9a-f]{64}):([0-9a-f]{64})$/i;\n\n/**\n * Parse `digstore deploy --json` stdout into a DeployResult. digstore emits a single JSON object\n * (with at least `capsule` and `root`); we also tolerate extra JSON log lines by scanning lines\n * bottom-up for the first object that carries a `capsule`. Throws a clear error if none is found or\n * the output isn't JSON at all.\n */\nexport function parseDeployResult(stdout: string): DeployResult {\n  const lines = stdout\n    .split(/\\r?\\n/)\n    .map((l) => l.trim())\n    .filter((l) => l.startsWith(\"{\") && l.endsWith(\"}\"));\n\n  if (lines.length === 0) {\n    throw new Error(\n      `could not parse digstore deploy output (no JSON object found). Output was:\\n${stdout.slice(0, 500)}`,\n    );\n  }\n\n  // Prefer the LAST JSON object that has a capsule (deploy emits one final result object). Keep the\n  // first parseable object as a fallback so the error message can show what digstore DID return.\n  let obj: Record<string, unknown> | undefined;\n  let fallback: Record<string, unknown> | undefined;\n  for (let i = lines.length - 1; i >= 0; i--) {\n    const line = lines[i];\n    if (line === undefined) continue;\n    let parsed: Record<string, unknown>;\n    try {\n      parsed = JSON.parse(line) as Record<string, unknown>;\n    } catch {\n      continue; // not JSON — skip this line\n    }\n    if (typeof parsed.capsule === \"string\") {\n      obj = parsed;\n      break;\n    }\n    if (!fallback) fallback = parsed;\n  }\n\n  if (!obj) {\n    if (fallback) {\n      throw new Error(\n        `digstore deploy did not report a capsule (deploy may have failed). Output:\\n${JSON.stringify(fallback)}`,\n      );\n    }\n    throw new Error(`could not parse digstore deploy output as JSON:\\n${stdout.slice(0, 500)}`);\n  }\n\n  const capsule = obj.capsule as string;\n  const m = CAPSULE_RE.exec(capsule);\n  if (!m || m[1] === undefined || m[2] === undefined) {\n    throw new Error(`digstore deploy reported a malformed capsule \"${capsule}\" (expected storeId:root)`);\n  }\n  const storeId = m[1].toLowerCase();\n  const root = (typeof obj.root === \"string\" ? obj.root : m[2]).toLowerCase();\n\n  return {\n    capsule,\n    storeId,\n    root,\n    // dig:// names the store on the network (resolves to its latest published version).\n    digUrl: `dig://${storeId}`,\n    // Mirrors digstore deploy.rs::hub_url — the public DIGHub view of an owned store.\n    hubUrl: `https://hub.dig.net/stores/${storeId}`,\n    pushed: typeof obj.pushed === \"boolean\" ? obj.pushed : undefined,\n  };\n}\n","// Injected-provider transport — the DIG Browser's in-process wallet (and compatible CHIP-0002\n// extensions), exposed on every page as `window.chia`. When present the SDK PREFERS it over\n// WalletConnect: no QR, no relay, no pairing. The native provider returns the SAME response shapes\n// Sage returns over WalletConnect, so the normalizers in provider/methods.ts are unchanged — only\n// the TRANSPORT differs. Genericized from hub.dig.net/apps/web/lib/injected-wallet.js.\n//\n// Detection: we key on the explicit, unspoofable `isDIG` marker the DIG Browser provider sets, not\n// merely the presence of `window.chia` (a different Chia provider could also define that).\n\nimport type { InjectedChiaProvider, WalletBackend } from \"../types.js\";\nimport { WALLET_METHODS, DEFAULT_CHAIN } from \"../methods.js\";\nimport type { WalletTransport } from \"./transport.js\";\n\n/** The injected provider on the current global, or undefined when not running in a DIG Browser. */\nexport function getInjectedProvider(): InjectedChiaProvider | undefined {\n  const g = globalThis as { chia?: InjectedChiaProvider };\n  return typeof g !== \"undefined\" ? g.chia : undefined;\n}\n\n/**\n * True iff an injected DIG wallet is available. Detects on the unspoofable `isDIG` marker. Pass\n * `{ anyChia: true }` to accept any `window.chia` that implements `request` (e.g. a non-DIG\n * CHIP-0002 extension).\n */\nexport function isInjectedAvailable(opts: { anyChia?: boolean } = {}): boolean {\n  const p = getInjectedProvider();\n  if (!p) return false;\n  if (opts.anyChia) return typeof p.request === \"function\";\n  return !!p.isDIG;\n}\n\n/** Sentinel topic for the injected backend (it has no per-session relay topic). */\nexport const INJECTED_TOPIC = \"injected\";\n\n/** A WalletTransport backed by the injected window.chia provider. */\nexport class InjectedTransport implements WalletTransport {\n  readonly backend: WalletBackend = \"injected\";\n  readonly topic = INJECTED_TOPIC;\n  readonly chain: string;\n  private readonly provider: InjectedChiaProvider;\n\n  constructor(provider: InjectedChiaProvider, chain: string = DEFAULT_CHAIN) {\n    this.provider = provider;\n    this.chain = chain;\n  }\n\n  /** Connect: ask the native wallet to approve this origin. Blocks until approved/rejected. */\n  async connect(eager = false): Promise<void> {\n    if (typeof this.provider.connect === \"function\") {\n      await this.provider.connect(eager);\n    }\n    // A provider without connect() (older build) is tolerated — request() will gate per-method.\n  }\n\n  // The native wallet implements the full canonical set (it returns Sage-shaped responses), so\n  // support is a static allowlist — no per-session negotiation as with WalletConnect.\n  supports(method: string): boolean {\n    return (WALLET_METHODS as readonly string[]).includes(method);\n  }\n\n  async request(method: string, params: unknown): Promise<unknown> {\n    if (!this.supports(method)) {\n      throw new Error(`The DIG Browser wallet does not support \"${method}\".`);\n    }\n    return this.provider.request({ method, params });\n  }\n\n  async disconnect(): Promise<void> {\n    // The injected wallet has no per-session teardown; per-origin consent is managed in the wallet.\n  }\n}\n","// The `window.chia` DEV shim the adapters inject during `dev`.\n//\n// In production a dapp's wallet is the REAL injected provider — the DIG Browser's in-process wallet\n// (or a CHIP-0002 extension) — which the SDK's ChiaProvider detects on `window.chia` via the\n// `isDIG` marker (see src/provider/injected.ts). During local `vite dev` / `next dev` there is no\n// such wallet, so calling `ChiaProvider.connect({ mode: \"injected\" })` would fail and the developer\n// couldn't exercise the wallet path at all.\n//\n// This shim installs a MINIMAL, clearly-labelled stub that satisfies the SAME injected-provider\n// contract the SDK detects (`isDIG`, `request({method,params})`, `connect()`), so the wallet code\n// path runs end-to-end in dev. It is a STUB, not a wallet: it returns a configurable mock address\n// and otherwise throws on methods that would need real signing, so a developer is never misled into\n// thinking a signature is real. It is generated as a self-contained, eval-free `<script>` body\n// (CSP-safe) that GUARDS on an existing `window.chia`, so a real wallet always wins.\n//\n// The shim's method names + response envelope mirror src/provider/injected.ts and\n// src/provider/methods.ts (the native provider returns `{ data }`), so the SAME normalizers run in\n// dev as in production — only the values are mocked.\n\nimport { INJECTED_TOPIC } from \"../provider/injected.js\";\n\n/** A literal substring stamped into the shim so it is unmistakably a dev stub (asserted in tests). */\nexport const DEV_SHIM_MARKER = \"dig-sdk:dev-wallet-shim\";\n\n/** Options for the generated dev shim. */\nexport interface DevShimOptions {\n  /** Mock receive address the shim returns from `getAddress`. A clearly-fake default is used. */\n  address?: string;\n}\n\n/** A clearly-fake default dev address (so it is obvious in the UI this is not a real wallet). */\nconst DEFAULT_DEV_ADDRESS = \"xch1dev0000000000000000000000000000000000000000000000000000devshim\";\n\n/** JSON-encode a string for safe inlining into a script literal. */\nfunction lit(s: string): string {\n  return JSON.stringify(s);\n}\n\n/**\n * Generate the dev-shim `<script>` body (no surrounding `<script>` tags). Inline it into the dev\n * server's served HTML. It is an IIFE that installs `window.chia` ONLY if one is not already\n * present, so the DIG Browser / a real extension always takes precedence. Eval-free and\n * dependency-free — safe under a strict CSP.\n */\nexport function devShimScript(options: DevShimOptions = {}): string {\n  const address = options.address ?? DEFAULT_DEV_ADDRESS;\n  // The shim mirrors the injected-provider contract the SDK detects. `request` resolves a small set\n  // of read methods with mock data and rejects signing methods (a dev stub must not fake a\n  // signature). Method names are the bare CHIP-0002 names the SDK normalizes.\n  return [\n    `/* ${DEV_SHIM_MARKER} — DEV ONLY. A stub wallet for local development; NOT a real wallet. */`,\n    `(function () {`,\n    `  \"use strict\";`,\n    `  if (typeof window === \"undefined\") return;`,\n    `  // A real injected wallet (DIG Browser / extension) always wins — never clobber it.`,\n    `  if (window.chia) return;`,\n    `  var DEV_ADDRESS = ${lit(address)};`,\n    `  var TOPIC = ${lit(INJECTED_TOPIC)};`,\n    `  function ok(data) { return Promise.resolve({ data: data }); }`,\n    `  function nope(method) {`,\n    `    return Promise.reject(new Error(`,\n    `      \"[\" + ${lit(DEV_SHIM_MARKER)} + \"] '\" + method + \"' needs a real wallet; the dev shim does not sign. \" +`,\n    `      \"Open in the DIG Browser or connect a wallet to sign for real.\"));`,\n    `  }`,\n    `  window.chia = {`,\n    `    isDIG: true,        // detected by the SDK's injected-provider check`,\n    `    isDevShim: true,    // so the app can tell it is the dev stub`,\n    `    topic: TOPIC,`,\n    `    connect: function () { return Promise.resolve(true); },`,\n    `    request: function (args) {`,\n    `      var method = args && args.method ? String(args.method) : \"\";`,\n    `      switch (method) {`,\n    `        case \"chip0002_connect\": return ok(true);`,\n    `        case \"chip0002_getPublicKeys\": return ok([]);`,\n    `        case \"getAddress\":`,\n    `        case \"chia_getAddress\": return ok(DEV_ADDRESS);`,\n    `        default:`,\n    `          // Signing / spend methods must not be faked.`,\n    `          return nope(method);`,\n    `      }`,\n    `    },`,\n    `    on: function () {},`,\n    `    off: function () {},`,\n    `  };`,\n    `  if (window.console && window.console.info) {`,\n    `    window.console.info(\"[\" + ${lit(DEV_SHIM_MARKER)} + \"] installed a DEV window.chia (mock address \" + DEV_ADDRESS + \").\");`,\n    `  }`,\n    `})();`,\n  ].join(\"\\n\");\n}\n","// The shared, Node-only deploy runner both framework adapters call on their `publish` step.\n//\n// It composes the pure pieces (load dig.toml → resolve config → build argv + env), spawns the\n// installed `digstore` binary with `deploy --json`, and parses the result into a friendly\n// DeployResult ({ capsule, digUrl, hubUrl }). It is intentionally thin: ALL deploy logic lives in\n// `digstore deploy` (the canonical deployer — advances the on-chain root, stages, pushes the\n// capsule); this only marshals config in and the result out.\n//\n// Node-only: it uses node:child_process / node:fs. The framework entrypoints import it lazily on\n// the publish path so importing the plugin in a browser/config context never pulls Node APIs.\n\nimport { resolveDeployConfig, type AdapterOptions } from \"./config.js\";\nimport { parseDigToml, type DigTomlConfig } from \"./dig-toml.js\";\nimport {\n  buildDeployArgs,\n  buildDeployEnv,\n  parseDeployResult,\n  type DeployArgsOptions,\n  type DeployResult,\n} from \"./deploy.js\";\n\n/** Options for {@link runDeploy}. */\nexport interface RunDeployOptions extends AdapterOptions, DeployArgsOptions {\n  /** Project root that holds `dig.toml` and the build output. Defaults to `process.cwd()`. */\n  cwd?: string;\n  /** The `digstore` executable. Defaults to `\"digstore\"` (must be on PATH). */\n  digstoreBin?: string;\n  /** Sink for human-readable progress. Defaults to `console.log`. */\n  logger?: (line: string) => void;\n}\n\n/** Read `dig.toml` from `cwd` (returns {} when absent). */\nasync function readDigToml(cwd: string): Promise<DigTomlConfig> {\n  const { readFile } = await import(\"node:fs/promises\");\n  const path = await import(\"node:path\");\n  try {\n    const text = await readFile(path.join(cwd, \"dig.toml\"), \"utf8\");\n    return parseDigToml(text);\n  } catch {\n    return {}; // no dig.toml — rely on options + env\n  }\n}\n\n/**\n * Resolve config, run `digstore deploy --json`, and parse the capsule. Spawns `digstore` with the\n * SECRETS injected through the child env (never the argv). Rejects with digstore's stderr on\n * non-zero exit. Returns the parsed {@link DeployResult}.\n */\nexport async function runDeploy(options: RunDeployOptions = {}): Promise<DeployResult> {\n  const cwd = options.cwd ?? process.cwd();\n  const bin = options.digstoreBin ?? \"digstore\";\n  const log = options.logger ?? ((l: string) => console.log(l));\n\n  const digToml = await readDigToml(cwd);\n  const cfg = resolveDeployConfig({\n    options: {\n      storeId: options.storeId,\n      outputDir: options.outputDir,\n      buildCommand: options.buildCommand,\n      message: options.message,\n      network: options.network,\n      remote: options.remote,\n      waitTimeout: options.waitTimeout,\n    },\n    digToml,\n    env: process.env,\n  });\n\n  const argv = buildDeployArgs(cfg, { skipBuild: options.skipBuild });\n  const childEnv = { ...process.env, ...buildDeployEnv(cfg) };\n\n  log(`▶ digstore ${argv.filter((a) => a !== cfg.deployKey && a !== cfg.salt).join(\" \")}`);\n\n  const { spawn } = await import(\"node:child_process\");\n  const stdout = await new Promise<string>((resolve, reject) => {\n    const child = spawn(bin, argv, {\n      cwd,\n      env: childEnv,\n      // digstore reads no stdin here; capture stdout (the JSON) and stream stderr through.\n      stdio: [\"ignore\", \"pipe\", \"pipe\"],\n      shell: false,\n    });\n    let out = \"\";\n    let err = \"\";\n    child.stdout.on(\"data\", (d: Buffer) => {\n      out += d.toString();\n    });\n    child.stderr.on(\"data\", (d: Buffer) => {\n      err += d.toString();\n    });\n    child.on(\"error\", (e: Error) => {\n      reject(\n        new Error(\n          `could not run \"${bin}\" — is digstore installed and on PATH? (${e.message})`,\n        ),\n      );\n    });\n    child.on(\"close\", (code: number | null) => {\n      if (code === 0) resolve(out);\n      else reject(new Error(`digstore deploy failed (exit ${code}).\\n${err || out}`));\n    });\n  });\n\n  const result = parseDeployResult(stdout);\n  log(`✓ deployed capsule ${result.capsule}`);\n  log(`  dig://  ${result.digUrl}`);\n  log(`  view    ${result.hubUrl}`);\n  return result;\n}\n"]}
+{"version":3,"sources":["../src/adapters/dig-toml.ts","../src/adapters/config.ts","../src/errors.ts","../src/adapters/deploy.ts","../src/provider/injected.ts","../src/adapters/dev-shim.ts","../src/adapters/run.ts"],"names":[],"mappings":";;;AA0BA,IAAM,OAAA,GAA+C;AAAA,EACnD,QAAA,EAAU,SAAA;AAAA,EACV,UAAA,EAAY,SAAA;AAAA,EACZ,UAAA,EAAY,WAAA;AAAA,EACZ,YAAA,EAAc,WAAA;AAAA,EACd,aAAA,EAAe,cAAA;AAAA,EACf,eAAA,EAAiB,cAAA;AAAA,EACjB,OAAA,EAAS,SAAA;AAAA,EACT,OAAA,EAAS,SAAA;AAAA,EACT,MAAA,EAAQ,QAAA;AAAA,EACR,YAAA,EAAc,aAAA;AAAA,EACd,cAAA,EAAgB;AAClB,CAAA;AAGA,IAAM,WAAA,GAAc,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,IAAA;AAAA,EAAK,CAAC,CAAA,KAC7C,CAAA,CAAE,QAAA,CAAS,GAAG,IAAI,CAAA,GAAI;AACxB,CAAA;AAGA,SAAS,aAAa,IAAA,EAAsB;AAC1C,EAAA,IAAI,QAAA,GAAW,KAAA;AACf,EAAA,IAAI,QAAA,GAAW,KAAA;AACf,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,IAAA,CAAK,QAAQ,CAAA,EAAA,EAAK;AACpC,IAAA,MAAM,EAAA,GAAK,KAAK,CAAC,CAAA;AACjB,IAAA,IAAI,EAAA,KAAO,GAAA,IAAO,CAAC,QAAA,aAAqB,CAAC,QAAA;AAAA,SAAA,IAChC,EAAA,KAAO,GAAA,IAAO,CAAC,QAAA,aAAqB,CAAC,QAAA;AAAA,SAAA,IACrC,EAAA,KAAO,GAAA,IAAO,CAAC,QAAA,IAAY,CAAC,UAAU,OAAO,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA;AAAA,EACvE;AACA,EAAA,OAAO,IAAA;AACT;AAGA,SAAS,QAAQ,GAAA,EAAqB;AACpC,EAAA,MAAM,CAAA,GAAI,IAAI,IAAA,EAAK;AACnB,EAAA,IACG,CAAA,CAAE,WAAW,GAAG,CAAA,IAAK,EAAE,QAAA,CAAS,GAAG,KAAK,CAAA,CAAE,MAAA,IAAU,KACpD,CAAA,CAAE,UAAA,CAAW,GAAG,CAAA,IAAK,CAAA,CAAE,SAAS,GAAG,CAAA,IAAK,CAAA,CAAE,MAAA,IAAU,CAAA,EACrD;AACA,IAAA,OAAO,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAAA,EACtB;AACA,EAAA,OAAO,CAAA;AACT;AAOO,SAAS,aAAa,IAAA,EAA6B;AAExD,EAAA,MAAM,MAA8B,EAAC;AACrC,EAAA,KAAA,MAAW,OAAA,IAAW,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA,EAAG;AACzC,IAAA,MAAM,IAAA,GAAO,YAAA,CAAa,OAAO,CAAA,CAAE,IAAA,EAAK;AACxC,IAAA,IAAI,CAAC,IAAA,IAAQ,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG;AACnC,IAAA,MAAM,EAAA,GAAK,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC3B,IAAA,IAAI,MAAM,CAAA,EAAG;AACb,IAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,EAAE,EAAE,IAAA,EAAK;AACnC,IAAA,IAAI,EAAE,OAAO,OAAA,CAAA,EAAU;AACvB,IAAA,GAAA,CAAI,GAAG,CAAA,GAAI,OAAA,CAAQ,KAAK,KAAA,CAAM,EAAA,GAAK,CAAC,CAAC,CAAA;AAAA,EACvC;AAEA,EAAA,MAAM,MAAqB,EAAC;AAC5B,EAAA,KAAA,MAAW,OAAO,WAAA,EAAa;AAC7B,IAAA,MAAM,KAAA,GAAQ,IAAI,GAAG,CAAA;AACrB,IAAA,MAAM,KAAA,GAAQ,QAAQ,GAAG,CAAA;AACzB,IAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,MAAA,EAAW;AAChD,IAAA,IAAI,UAAU,aAAA,EAAe;AAC3B,MAAA,MAAM,CAAA,GAAI,MAAA,CAAO,QAAA,CAAS,KAAA,EAAO,EAAE,CAAA;AACnC,MAAA,IAAI,MAAA,CAAO,QAAA,CAAS,CAAC,CAAA,MAAO,WAAA,GAAc,CAAA;AAAA,IAC5C,CAAA,MAAO;AACL,MAAA,GAAA,CAAI,KAAK,CAAA,GAAI,KAAA;AAAA,IACf;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;;;AC9CA,SAAS,MAAA,CAAO,KAAyC,GAAA,EAAiC;AACxF,EAAA,MAAM,CAAA,GAAI,IAAI,GAAG,CAAA;AACjB,EAAA,IAAI,CAAA,IAAK,MAAM,OAAO,MAAA;AACtB,EAAA,MAAM,CAAA,GAAI,EAAE,IAAA,EAAK;AACjB,EAAA,OAAO,CAAA,KAAM,KAAK,MAAA,GAAY,CAAA;AAChC;AAGA,SAAS,QAAW,UAAA,EAA8C;AAChE,EAAA,KAAA,MAAW,CAAA,IAAK,UAAA,EAAY,IAAI,CAAA,KAAM,QAAW,OAAO,CAAA;AACxD,EAAA,OAAO,MAAA;AACT;AAMO,SAAS,oBAAoB,KAAA,EAA2C;AAC7E,EAAA,MAAM,EAAE,OAAA,EAAS,OAAA,EAAS,GAAA,EAAI,GAAI,KAAA;AAElC,EAAA,MAAM,OAAA,GAAU,IAAA;AAAA,IACd,OAAA,CAAQ,OAAA;AAAA,IACR,MAAA,CAAO,KAAK,mBAAmB,CAAA;AAAA,IAC/B,OAAA,CAAQ;AAAA,GACV;AACA,EAAA,MAAM,SAAA,GACJ,IAAA,CAAK,OAAA,CAAQ,SAAA,EAAW,MAAA,CAAO,KAAK,qBAAqB,CAAA,EAAG,OAAA,CAAQ,SAAS,CAAA,IAAK,MAAA;AACpF,EAAA,MAAM,YAAA,GAAe,IAAA;AAAA,IACnB,OAAA,CAAQ,YAAA;AAAA,IACR,MAAA,CAAO,KAAK,wBAAwB,CAAA;AAAA,IACpC,OAAA,CAAQ;AAAA,GACV;AACA,EAAA,MAAM,OAAA,GAAU,KAAK,OAAA,CAAQ,OAAA,EAAS,OAAO,GAAA,EAAK,kBAAkB,CAAA,EAAG,OAAA,CAAQ,OAAO,CAAA;AACtF,EAAA,MAAM,OAAA,GACJ,IAAA,CAAK,OAAA,CAAQ,OAAA,EAAS,MAAA,CAAO,KAAK,kBAAkB,CAAA,EAAG,OAAA,CAAQ,OAAO,CAAA,IAAK,SAAA;AAC7E,EAAA,MAAM,MAAA,GAAS,KAAK,OAAA,CAAQ,MAAA,EAAQ,OAAO,GAAA,EAAK,iBAAiB,CAAA,EAAG,OAAA,CAAQ,MAAM,CAAA;AAElF,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,GAAA,EAAK,uBAAuB,CAAA;AACvD,EAAA,MAAM,WAAA,GAAc,IAAA;AAAA,IAClB,OAAA,CAAQ,WAAA;AAAA,IACR,eAAe,IAAA,GAAO,MAAA,CAAO,QAAA,CAAS,WAAA,EAAa,EAAE,CAAA,GAAI,MAAA;AAAA,IACzD,OAAA,CAAQ;AAAA,GACV;AAEA,EAAA,OAAO;AAAA,IACL,OAAA;AAAA,IACA,SAAA;AAAA,IACA,YAAA;AAAA,IACA,OAAA;AAAA,IACA,OAAA;AAAA,IACA,MAAA;AAAA,IACA,WAAA,EAAa,MAAA,CAAO,QAAA,CAAS,WAAW,IAAI,WAAA,GAAc,MAAA;AAAA;AAAA,IAE1D,SAAA,EAAW,MAAA,CAAO,GAAA,EAAK,qBAAqB,CAAA;AAAA,IAC5C,IAAA,EAAM,MAAA,CAAO,GAAA,EAAK,qBAAqB;AAAA,GACzC;AACF;ACFA,IAAM,mBAAA,GAAsB,8BAAA;AAErB,IAAM,WAAA,GAAN,MAAM,YAAA,SAAoB,KAAA,CAAM;AAAA,EAMrC,WAAA,CACE,MACA,OAAA,EACA,OAAA,GAA8B,EAAC,EAC/B,OAAA,GAA+B,EAAC,EAChC;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AAGf,IAAA,IAAI,OAAA,CAAQ,UAAU,MAAA,EAAW;AAC/B,MAAC,IAAA,CAA6B,QAAQ,OAAA,CAAQ,KAAA;AAAA,IAChD;AAEA,IAAA,MAAA,CAAO,cAAA,CAAe,MAAM,mBAAA,EAAqB,EAAE,OAAO,IAAA,EAAM,UAAA,EAAY,OAAO,CAAA;AAEnF,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,YAAA,CAAY,SAAS,CAAA;AAAA,EACnD;AAAA;AAAA,EAGA,MAAA,GAAkF;AAChF,IAAA,OAAO,EAAE,MAAM,IAAA,CAAK,IAAA,EAAM,SAAS,IAAA,CAAK,OAAA,EAAS,OAAA,EAAS,IAAA,CAAK,OAAA,EAAQ;AAAA,EACzE;AACF,CAAA;;;AC7GO,SAAS,eAAA,CACd,GAAA,EACA,IAAA,GAA0B,EAAC,EACjB;AACV,EAAA,MAAM,IAAA,GAAiB,CAAC,QAAA,EAAU,QAAQ,CAAA;AAC1C,EAAA,IAAI,IAAI,OAAA,EAAS,IAAA,CAAK,IAAA,CAAK,YAAA,EAAc,IAAI,OAAO,CAAA;AACpD,EAAA,IAAI,IAAI,SAAA,EAAW,IAAA,CAAK,IAAA,CAAK,cAAA,EAAgB,IAAI,SAAS,CAAA;AAC1D,EAAA,IAAI,CAAC,KAAK,SAAA,IAAa,GAAA,CAAI,cAAc,IAAA,CAAK,IAAA,CAAK,iBAAA,EAAmB,GAAA,CAAI,YAAY,CAAA;AACtF,EAAA,IAAI,IAAI,OAAA,EAAS,IAAA,CAAK,IAAA,CAAK,WAAA,EAAa,IAAI,OAAO,CAAA;AACnD,EAAA,IAAI,IAAI,OAAA,EAAS,IAAA,CAAK,IAAA,CAAK,WAAA,EAAa,IAAI,OAAO,CAAA;AACnD,EAAA,IAAI,IAAI,MAAA,EAAQ,IAAA,CAAK,IAAA,CAAK,UAAA,EAAY,IAAI,MAAM,CAAA;AAChD,EAAA,IAAI,GAAA,CAAI,eAAe,IAAA,EAAM,IAAA,CAAK,KAAK,gBAAA,EAAkB,MAAA,CAAO,GAAA,CAAI,WAAW,CAAC,CAAA;AAChF,EAAA,OAAO,IAAA;AACT;AAMO,SAAS,eAAe,GAAA,EAAmD;AAChF,EAAA,MAAM,MAA8B,EAAC;AACrC,EAAA,IAAI,GAAA,CAAI,SAAA,EAAW,GAAA,CAAI,mBAAA,GAAsB,GAAA,CAAI,SAAA;AACjD,EAAA,IAAI,GAAA,CAAI,IAAA,EAAM,GAAA,CAAI,mBAAA,GAAsB,GAAA,CAAI,IAAA;AAC5C,EAAA,OAAO,GAAA;AACT;AA4BA,IAAM,UAAA,GAAa,kCAAA;AAQZ,SAAS,kBAAkB,MAAA,EAA8B;AAC9D,EAAA,MAAM,KAAA,GAAQ,OACX,KAAA,CAAM,OAAO,EACb,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,EACnB,MAAA,CAAO,CAAC,MAAM,CAAA,CAAE,UAAA,CAAW,GAAG,CAAA,IAAK,CAAA,CAAE,QAAA,CAAS,GAAG,CAAC,CAAA;AAErD,EAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACtB,IAAA,MAAM,IAAI,WAAA;AAAA,MACR,2BAAA;AAAA,MACA,CAAA;AAAA,EAA+E,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA,CAAA;AAAA,MACnG,EAAE,MAAA,EAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA;AAAE,KACjC;AAAA,EACF;AAIA,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI,QAAA;AACJ,EAAA,KAAA,IAAS,IAAI,KAAA,CAAM,MAAA,GAAS,CAAA,EAAG,CAAA,IAAK,GAAG,CAAA,EAAA,EAAK;AAC1C,IAAA,MAAM,IAAA,GAAO,MAAM,CAAC,CAAA;AACpB,IAAA,IAAI,SAAS,MAAA,EAAW;AACxB,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAA,GAAS,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,IAC1B,CAAA,CAAA,MAAQ;AACN,MAAA;AAAA,IACF;AACA,IAAA,IAAI,OAAO,MAAA,CAAO,OAAA,KAAY,QAAA,EAAU;AACtC,MAAA,GAAA,GAAM,MAAA;AACN,MAAA;AAAA,IACF;AACA,IAAA,IAAI,CAAC,UAAU,QAAA,GAAW,MAAA;AAAA,EAC5B;AAEA,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,MAAM,IAAI,WAAA;AAAA,QACR,2BAAA;AAAA,QACA,CAAA;AAAA,EAA+E,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAC,CAAA,CAAA;AAAA,QACvG,EAAE,QAAQ,QAAA;AAAS,OACrB;AAAA,IACF;AACA,IAAA,MAAM,IAAI,WAAA;AAAA,MACR,2BAAA;AAAA,MACA,CAAA;AAAA,EAAoD,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA,CAAA;AAAA,MACxE,EAAE,MAAA,EAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA;AAAE,KACjC;AAAA,EACF;AAEA,EAAA,MAAM,UAAU,GAAA,CAAI,OAAA;AACpB,EAAA,MAAM,CAAA,GAAI,UAAA,CAAW,IAAA,CAAK,OAAO,CAAA;AACjC,EAAA,IAAI,CAAC,KAAK,CAAA,CAAE,CAAC,MAAM,MAAA,IAAa,CAAA,CAAE,CAAC,CAAA,KAAM,MAAA,EAAW;AAClD,IAAA,MAAM,IAAI,WAAA;AAAA,MACR,kBAAA;AAAA,MACA,iDAAiD,OAAO,CAAA,yBAAA,CAAA;AAAA,MACxD,EAAE,KAAA,EAAO,OAAA,EAAS,QAAA,EAAU,cAAA;AAAe,KAC7C;AAAA,EACF;AACA,EAAA,MAAM,OAAA,GAAU,CAAA,CAAE,CAAC,CAAA,CAAE,WAAA,EAAY;AACjC,EAAA,MAAM,IAAA,GAAA,CAAQ,OAAO,GAAA,CAAI,IAAA,KAAS,QAAA,GAAW,IAAI,IAAA,GAAO,CAAA,CAAE,CAAC,CAAA,EAAG,WAAA,EAAY;AAO1E,EAAA,MAAM,OAAA,GACJ,OAAO,GAAA,CAAI,eAAA,KAAoB,QAAA,GAC3B,IAAI,eAAA,GACJ,CAAA,OAAA,EAAU,OAAO,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA,CAAA;AAE/B,EAAA,OAAO;AAAA,IACL,OAAA;AAAA,IACA,OAAA;AAAA,IACA,IAAA;AAAA,IACA,OAAA;AAAA;AAAA,IAEA,MAAA,EAAQ,OAAA;AAAA;AAAA,IAER,MAAA,EAAQ,8BAA8B,OAAO,CAAA,CAAA;AAAA,IAC7C,QAAQ,OAAO,GAAA,CAAI,MAAA,KAAW,SAAA,GAAY,IAAI,MAAA,GAAS;AAAA,GACzD;AACF;;;AC9IO,IAAM,cAAA,GAAiB,UAAA;;;ACXvB,IAAM,eAAA,GAAkB;AAS/B,IAAM,mBAAA,GAAsB,oEAAA;AAG5B,SAAS,IAAI,CAAA,EAAmB;AAC9B,EAAA,OAAO,IAAA,CAAK,UAAU,CAAC,CAAA;AACzB;AAQO,SAAS,aAAA,CAAc,OAAA,GAA0B,EAAC,EAAW;AAClE,EAAA,MAAM,OAAA,GAAU,QAAQ,OAAA,IAAW,mBAAA;AAInC,EAAA,OAAO;AAAA,IACL,MAAM,eAAe,CAAA,4EAAA,CAAA;AAAA,IACrB,CAAA,cAAA,CAAA;AAAA,IACA,CAAA,eAAA,CAAA;AAAA,IACA,CAAA,4CAAA,CAAA;AAAA,IACA,CAAA,0FAAA,CAAA;AAAA,IACA,CAAA,0BAAA,CAAA;AAAA,IACA,CAAA,oBAAA,EAAuB,GAAA,CAAI,OAAO,CAAC,CAAA,CAAA,CAAA;AAAA,IACnC,CAAA,cAAA,EAAiB,GAAA,CAAI,cAAc,CAAC,CAAA,CAAA,CAAA;AAAA,IACpC,CAAA,+DAAA,CAAA;AAAA,IACA,CAAA,yBAAA,CAAA;AAAA,IACA,CAAA,oCAAA,CAAA;AAAA,IACA,CAAA,YAAA,EAAe,GAAA,CAAI,eAAe,CAAC,CAAA,2EAAA,CAAA;AAAA,IACnC,CAAA,wEAAA,CAAA;AAAA,IACA,CAAA,GAAA,CAAA;AAAA,IACA,CAAA,iBAAA,CAAA;AAAA,IACA,CAAA,wEAAA,CAAA;AAAA,IACA,CAAA,iEAAA,CAAA;AAAA,IACA,CAAA,iBAAA,CAAA;AAAA,IACA,CAAA,2DAAA,CAAA;AAAA,IACA,CAAA,8BAAA,CAAA;AAAA,IACA,CAAA,kEAAA,CAAA;AAAA,IACA,CAAA,uBAAA,CAAA;AAAA,IACA,CAAA,iDAAA,CAAA;AAAA,IACA,CAAA,qDAAA,CAAA;AAAA,IACA,CAAA,0BAAA,CAAA;AAAA,IACA,CAAA,uDAAA,CAAA;AAAA,IACA,CAAA,gBAAA,CAAA;AAAA,IACA,CAAA,uDAAA,CAAA;AAAA,IACA,CAAA,8BAAA,CAAA;AAAA,IACA,CAAA,OAAA,CAAA;AAAA,IACA,CAAA,MAAA,CAAA;AAAA,IACA,CAAA,uBAAA,CAAA;AAAA,IACA,CAAA,wBAAA,CAAA;AAAA,IACA,CAAA,IAAA,CAAA;AAAA,IACA,CAAA,8CAAA,CAAA;AAAA,IACA,CAAA,8BAAA,EAAiC,GAAA,CAAI,eAAe,CAAC,CAAA,wEAAA,CAAA;AAAA,IACrD,CAAA,GAAA,CAAA;AAAA,IACA,CAAA,KAAA;AAAA,GACF,CAAE,KAAK,IAAI,CAAA;AACb;;;ACxDA,eAAe,YAAY,GAAA,EAAqC;AAC9D,EAAA,MAAM,EAAE,QAAA,EAAS,GAAI,MAAM,OAAO,aAAkB,CAAA;AACpD,EAAA,MAAM,IAAA,GAAO,MAAM,OAAO,MAAW,CAAA;AACrC,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,CAAK,KAAK,GAAA,EAAK,UAAU,GAAG,MAAM,CAAA;AAC9D,IAAA,OAAO,aAAa,IAAI,CAAA;AAAA,EAC1B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AAOA,eAAsB,SAAA,CAAU,OAAA,GAA4B,EAAC,EAA0B;AACrF,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,IAAO,OAAA,CAAQ,GAAA,EAAI;AACvC,EAAA,MAAM,GAAA,GAAM,QAAQ,WAAA,IAAe,UAAA;AACnC,EAAA,MAAM,MAAM,OAAA,CAAQ,MAAA,KAAW,CAAC,CAAA,KAAc,OAAA,CAAQ,IAAI,CAAC,CAAA,CAAA;AAE3D,EAAA,MAAM,OAAA,GAAU,MAAM,WAAA,CAAY,GAAG,CAAA;AACrC,EAAA,MAAM,MAAM,mBAAA,CAAoB;AAAA,IAC9B,OAAA,EAAS;AAAA,MACP,SAAS,OAAA,CAAQ,OAAA;AAAA,MACjB,WAAW,OAAA,CAAQ,SAAA;AAAA,MACnB,cAAc,OAAA,CAAQ,YAAA;AAAA,MACtB,SAAS,OAAA,CAAQ,OAAA;AAAA,MACjB,SAAS,OAAA,CAAQ,OAAA;AAAA,MACjB,QAAQ,OAAA,CAAQ,MAAA;AAAA,MAChB,aAAa,OAAA,CAAQ;AAAA,KACvB;AAAA,IACA,OAAA;AAAA,IACA,KAAK,OAAA,CAAQ;AAAA,GACd,CAAA;AAED,EAAA,MAAM,OAAO,eAAA,CAAgB,GAAA,EAAK,EAAE,SAAA,EAAW,OAAA,CAAQ,WAAW,CAAA;AAClE,EAAA,MAAM,QAAA,GAAW,EAAE,GAAG,OAAA,CAAQ,KAAK,GAAG,cAAA,CAAe,GAAG,CAAA,EAAE;AAE1D,EAAA,GAAA,CAAI,CAAA,gBAAA,EAAc,IAAA,CAAK,MAAA,CAAO,CAAC,MAAM,CAAA,KAAM,GAAA,CAAI,SAAA,IAAa,CAAA,KAAM,IAAI,IAAI,CAAA,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,CAAE,CAAA;AAEvF,EAAA,MAAM,EAAE,KAAA,EAAM,GAAI,MAAM,OAAO,eAAoB,CAAA;AACnD,EAAA,MAAM,SAAS,MAAM,IAAI,OAAA,CAAgB,CAAC,SAAS,MAAA,KAAW;AAC5D,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,GAAA,EAAK,IAAA,EAAM;AAAA,MAC7B,GAAA;AAAA,MACA,GAAA,EAAK,QAAA;AAAA;AAAA,MAEL,KAAA,EAAO,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM,CAAA;AAAA,MAChC,KAAA,EAAO;AAAA,KACR,CAAA;AACD,IAAA,IAAI,GAAA,GAAM,EAAA;AACV,IAAA,IAAI,GAAA,GAAM,EAAA;AACV,IAAA,KAAA,CAAM,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAc;AACrC,MAAA,GAAA,IAAO,EAAE,QAAA,EAAS;AAAA,IACpB,CAAC,CAAA;AACD,IAAA,KAAA,CAAM,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAc;AACrC,MAAA,GAAA,IAAO,EAAE,QAAA,EAAS;AAAA,IACpB,CAAC,CAAA;AACD,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAa;AAC9B,MAAA,MAAA;AAAA,QACE,IAAI,WAAA;AAAA,UACF,oBAAA;AAAA,UACA,CAAA,eAAA,EAAkB,GAAG,CAAA,6CAAA,EAA2C,CAAA,CAAE,OAAO,CAAA,CAAA,CAAA;AAAA,UACzE,EAAE,GAAA,EAAI;AAAA,UACN,EAAE,OAAO,CAAA;AAAE;AACb,OACF;AAAA,IACF,CAAC,CAAA;AACD,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAwB;AACzC,MAAA,IAAI,IAAA,KAAS,CAAA,EAAG,OAAA,CAAQ,GAAG,CAAA;AAAA;AAEzB,QAAA,MAAA;AAAA,UACE,IAAI,WAAA,CAAY,eAAA,EAAiB,CAAA,6BAAA,EAAgC,IAAI,CAAA;AAAA,EAAO,GAAA,IAAO,GAAG,CAAA,CAAA,EAAI;AAAA,YACxF,QAAA,EAAU,IAAA;AAAA,YACV,MAAA,EAAQ,GAAA,CAAI,KAAA,CAAM,CAAA,EAAG,GAAI;AAAA,WAC1B;AAAA,SACH;AAAA,IACJ,CAAC,CAAA;AAAA,EACH,CAAC,CAAA;AAED,EAAA,MAAM,MAAA,GAAS,kBAAkB,MAAM,CAAA;AACvC,EAAA,GAAA,CAAI,CAAA,wBAAA,EAAsB,MAAA,CAAO,OAAO,CAAA,CAAE,CAAA;AAE1C,EAAA,GAAA,CAAI,CAAA,UAAA,EAAa,MAAA,CAAO,OAAO,CAAA,CAAE,CAAA;AACjC,EAAA,GAAA,CAAI,CAAA,UAAA,EAAa,MAAA,CAAO,MAAM,CAAA,CAAE,CAAA;AAChC,EAAA,OAAO,MAAA;AACT","file":"adapters.cjs","sourcesContent":["// Minimal `dig.toml` reader for the framework adapters.\n//\n// `digstore deploy` reads its config from a project's `dig.toml` (digstore-cli/src/dig_toml.rs).\n// The adapters need the SAME few top-level keys so a project's `dig.toml` is the single source of\n// truth across the CLI and the plugins. Rather than pull in a TOML parser dependency for ~7 flat\n// `key = \"value\"` lines, we parse just those keys ourselves. We accept BOTH the canonical\n// kebab-case key and the snake_case alias, exactly like digstore's `#[serde(rename/alias)]`.\n//\n// Anything beyond these keys (tables, arrays, nested values) is intentionally ignored — the\n// adapters only forward the deploy-relevant scalars to `digstore deploy`, which re-reads the full\n// file authoritatively.\n\n/** The deploy-relevant subset of `dig.toml`, in the adapters' camelCase shape. */\nexport interface DigTomlConfig {\n  storeId?: string;\n  outputDir?: string;\n  buildCommand?: string;\n  message?: string;\n  network?: string;\n  remote?: string;\n  waitTimeout?: number;\n}\n\n// Map each canonical/alias TOML key onto the camelCase field. kebab-case is canonical (it is what\n// `digstore new` writes); snake_case is the tolerated alias. When both appear, the canonical\n// kebab-case key wins (it is applied last).\nconst KEY_MAP: Record<string, keyof DigTomlConfig> = {\n  store_id: \"storeId\",\n  \"store-id\": \"storeId\",\n  output_dir: \"outputDir\",\n  \"output-dir\": \"outputDir\",\n  build_command: \"buildCommand\",\n  \"build-command\": \"buildCommand\",\n  message: \"message\",\n  network: \"network\",\n  remote: \"remote\",\n  wait_timeout: \"waitTimeout\",\n  \"wait-timeout\": \"waitTimeout\",\n};\n\n// Apply snake_case first then kebab-case so the canonical kebab form overrides the alias.\nconst APPLY_ORDER = Object.keys(KEY_MAP).sort((a) =>\n  a.includes(\"-\") ? 1 : -1,\n);\n\n/** Strip a `# comment` that is not inside a quoted value. */\nfunction stripComment(line: string): string {\n  let inSingle = false;\n  let inDouble = false;\n  for (let i = 0; i < line.length; i++) {\n    const ch = line[i];\n    if (ch === \"'\" && !inDouble) inSingle = !inSingle;\n    else if (ch === '\"' && !inSingle) inDouble = !inDouble;\n    else if (ch === \"#\" && !inSingle && !inDouble) return line.slice(0, i);\n  }\n  return line;\n}\n\n/** Unquote a TOML scalar: `\"x\"` / `'x'` → `x`; a bare token is returned trimmed. */\nfunction unquote(raw: string): string {\n  const v = raw.trim();\n  if (\n    (v.startsWith('\"') && v.endsWith('\"') && v.length >= 2) ||\n    (v.startsWith(\"'\") && v.endsWith(\"'\") && v.length >= 2)\n  ) {\n    return v.slice(1, -1);\n  }\n  return v;\n}\n\n/**\n * Parse the deploy-relevant keys out of a `dig.toml` string. Unknown keys, tables, and nested\n * structures are ignored. Returns only the keys actually present (so it composes cleanly under the\n * precedence rules in resolveDeployConfig).\n */\nexport function parseDigToml(text: string): DigTomlConfig {\n  // Collect raw (canonical-or-alias) string values keyed by the TOML key as written.\n  const raw: Record<string, string> = {};\n  for (const lineRaw of text.split(/\\r?\\n/)) {\n    const line = stripComment(lineRaw).trim();\n    if (!line || line.startsWith(\"[\")) continue; // skip blanks + table headers\n    const eq = line.indexOf(\"=\");\n    if (eq <= 0) continue;\n    const key = line.slice(0, eq).trim();\n    if (!(key in KEY_MAP)) continue;\n    raw[key] = unquote(line.slice(eq + 1));\n  }\n\n  const out: DigTomlConfig = {};\n  for (const key of APPLY_ORDER) {\n    const value = raw[key];\n    const field = KEY_MAP[key];\n    if (value === undefined || field === undefined) continue;\n    if (field === \"waitTimeout\") {\n      const n = Number.parseInt(value, 10);\n      if (Number.isFinite(n)) out.waitTimeout = n;\n    } else {\n      out[field] = value;\n    }\n  }\n  return out;\n}\n","// Deploy-config resolution for the framework adapters.\n//\n// The final config a deploy runs with is composed from three layers, highest precedence first:\n//   1. plugin options   — what the developer wrote in vite.config / the Next adapter call\n//   2. environment vars  — what CI injects (DIGSTORE_*), incl. the SECRETS (deploy key, salt)\n//   3. dig.toml          — the project's checked-in defaults\n//   4. built-in defaults — outputDir=\"dist\", network=\"mainnet\" (mirrors deploy.rs::resolve_config)\n//\n// This mirrors `digstore deploy`'s own resolution order (flag/env > dig.toml > default) so the\n// adapters never disagree with the CLI about what a project deploys. SECRETS are resolved ONLY from\n// env — never from options or dig.toml — so they can't end up checked into a repo or a config file.\n\nimport type { DigTomlConfig } from \"./dig-toml.js\";\n\n/** Per-call options a developer passes to the Vite plugin / Next adapter. */\nexport interface AdapterOptions {\n  /** On-chain store id (64-hex) to advance. Usually set in dig.toml instead. */\n  storeId?: string;\n  /** Built-output directory to publish. Defaults to the framework's output (or \"dist\"). */\n  outputDir?: string;\n  /** Shell build command for `digstore` to run. Omit when the adapter builds itself. */\n  buildCommand?: string;\n  /** Commit message for the new capsule. */\n  message?: string;\n  /** Chain network. Defaults to \"mainnet\". */\n  network?: string;\n  /** The `origin` remote to publish to (e.g. `dig://<storeId>`). */\n  remote?: string;\n  /** Seconds to wait for on-chain confirmation. */\n  waitTimeout?: number;\n}\n\n/** The fully resolved config a deploy runs with. Secrets are present only if env supplied them. */\nexport interface ResolvedDeployConfig {\n  storeId?: string;\n  outputDir: string;\n  buildCommand?: string;\n  message?: string;\n  network: string;\n  remote?: string;\n  waitTimeout?: number;\n  /** Publisher deploy key (64-hex). From env only. */\n  deployKey?: string;\n  /** Private-store secret salt (64-hex). From env only. */\n  salt?: string;\n}\n\n/** Inputs to resolution — kept explicit so it is a pure function (no process.env read inside). */\nexport interface ResolveInput {\n  options: AdapterOptions;\n  digToml: DigTomlConfig;\n  env: Record<string, string | undefined>;\n}\n\n/** A non-empty, trimmed env value, or undefined. Empty/whitespace env vars count as unset. */\nfunction envVal(env: Record<string, string | undefined>, key: string): string | undefined {\n  const v = env[key];\n  if (v == null) return undefined;\n  const t = v.trim();\n  return t === \"\" ? undefined : t;\n}\n\n/** First defined of the candidates (treating \"\" the caller already filtered as undefined). */\nfunction pick<T>(...candidates: (T | undefined)[]): T | undefined {\n  for (const c of candidates) if (c !== undefined) return c;\n  return undefined;\n}\n\n/**\n * Resolve the final deploy config. Precedence per field: options > env (DIGSTORE_*) > dig.toml >\n * default. Secrets (deployKey, salt) are taken from env ONLY.\n */\nexport function resolveDeployConfig(input: ResolveInput): ResolvedDeployConfig {\n  const { options, digToml, env } = input;\n\n  const storeId = pick(\n    options.storeId,\n    envVal(env, \"DIGSTORE_STORE_ID\"),\n    digToml.storeId,\n  );\n  const outputDir =\n    pick(options.outputDir, envVal(env, \"DIGSTORE_OUTPUT_DIR\"), digToml.outputDir) ?? \"dist\";\n  const buildCommand = pick(\n    options.buildCommand,\n    envVal(env, \"DIGSTORE_BUILD_COMMAND\"),\n    digToml.buildCommand,\n  );\n  const message = pick(options.message, envVal(env, \"DIGSTORE_MESSAGE\"), digToml.message);\n  const network =\n    pick(options.network, envVal(env, \"DIGSTORE_NETWORK\"), digToml.network) ?? \"mainnet\";\n  const remote = pick(options.remote, envVal(env, \"DIGSTORE_REMOTE\"), digToml.remote);\n\n  const waitFromEnv = envVal(env, \"DIGSTORE_WAIT_TIMEOUT\");\n  const waitTimeout = pick(\n    options.waitTimeout,\n    waitFromEnv != null ? Number.parseInt(waitFromEnv, 10) : undefined,\n    digToml.waitTimeout,\n  );\n\n  return {\n    storeId,\n    outputDir,\n    buildCommand,\n    message,\n    network,\n    remote,\n    waitTimeout: Number.isFinite(waitTimeout) ? waitTimeout : undefined,\n    // SECRETS — env only.\n    deployKey: envVal(env, \"DIGSTORE_DEPLOY_KEY\"),\n    salt: envVal(env, \"DIGSTORE_STORE_SALT\"),\n  };\n}\n","// The SDK's typed error taxonomy — the machine-readable failure contract.\n//\n// Every failure the SDK surfaces is a `DigSdkError` (an `Error` subclass) carrying a STABLE,\n// documented `.code` (UPPER_SNAKE) plus structured context fields. An agent (or a UI) can branch on\n// `err.code` instead of string-matching the human `.message`, and the catalogue is discoverable from\n// the `.d.ts` via the exported `DIG_SDK_ERROR_CODES` const and the `DigSdkErrorCode` union.\n//\n// The codes are symbolic and never derived from the human message — the message is for humans, the\n// code is for machines. Keep this catalogue and the README \"Error codes\" table in lockstep.\n\n/**\n * The stable error-code catalogue. Each value is an UPPER_SNAKE symbolic string that callers may\n * branch on. Frozen so it can't be mutated at runtime; the README documents each meaning.\n */\nexport const DIG_SDK_ERROR_CODES = Object.freeze({\n  // ---- provider / connect (provider/chia-provider.ts, provider/*) ----\n  /** WalletConnect was requested/needed but no `walletConnect` options were supplied. */\n  WC_OPTIONS_REQUIRED: \"WC_OPTIONS_REQUIRED\",\n  /** `mode: \"injected\"` (or the injected leg of `auto`) found no usable `window.chia`. */\n  NO_INJECTED_WALLET: \"NO_INJECTED_WALLET\",\n  /** The optional `@walletconnect/sign-client` peer dependency is not installed/usable. */\n  WC_DEPENDENCY_MISSING: \"WC_DEPENDENCY_MISSING\",\n  /** The active wallet session/transport does not grant the requested method. */\n  METHOD_NOT_SUPPORTED: \"METHOD_NOT_SUPPORTED\",\n  /** A wallet RPC timed out (e.g. Sage did not respond within the per-request timeout). */\n  WALLET_TIMEOUT: \"WALLET_TIMEOUT\",\n  /** The wallet returned no public keys / no key to sign with. */\n  WALLET_NO_KEYS: \"WALLET_NO_KEYS\",\n\n  // ---- read-crypto / RPC (dig-client.ts, loader.ts) ----\n  /** A content read needs a confirmed on-chain root and none was supplied/derivable. */\n  ROOT_REQUIRED: \"ROOT_REQUIRED\",\n  /** The resource did not decrypt+authenticate under this URN (wrong key/salt, or a decoy). */\n  DECRYPT_FAILED: \"DECRYPT_FAILED\",\n  /** The dig RPC could not be reached (network/transport failure). */\n  RPC_TRANSPORT: \"RPC_TRANSPORT\",\n  /** The dig RPC responded with an HTTP error or a JSON-RPC `error` object. */\n  RPC_ERROR: \"RPC_ERROR\",\n  /** The dig RPC returned a malformed / inconsistent payload (e.g. chunk-length mismatch). */\n  RPC_MALFORMED_RESPONSE: \"RPC_MALFORMED_RESPONSE\",\n  /** The vendored read-crypto wasm failed its SRI integrity check — fail closed. */\n  WASM_INTEGRITY: \"WASM_INTEGRITY\",\n  /** The read-crypto wasm could not be loaded (fetch/resolve failure). */\n  WASM_LOAD_FAILED: \"WASM_LOAD_FAILED\",\n\n  // ---- paywall / spends (paywall.ts) ----\n  /** The canonical chip35 wasm builder for this operation is unavailable (never hand-rolled). */\n  SPEND_BUILDER_UNAVAILABLE: \"SPEND_BUILDER_UNAVAILABLE\",\n  /** No secure random source was available to generate a payment nonce. */\n  NO_SECURE_RANDOM: \"NO_SECURE_RANDOM\",\n\n  // ---- deploy / adapters (adapters/run.ts, adapters/deploy.ts) ----\n  /** The `digstore` binary could not be spawned (not installed / not on PATH). */\n  DIGSTORE_NOT_FOUND: \"DIGSTORE_NOT_FOUND\",\n  /** `digstore deploy` exited non-zero. */\n  DEPLOY_FAILED: \"DEPLOY_FAILED\",\n  /** `digstore deploy --json` output could not be parsed into a capsule result. */\n  DEPLOY_OUTPUT_UNPARSEABLE: \"DEPLOY_OUTPUT_UNPARSEABLE\",\n\n  // ---- argument validation (shared) ----\n  /** An argument was malformed (e.g. a non-hex string, a bad URN, mutually-exclusive options). */\n  INVALID_ARGUMENT: \"INVALID_ARGUMENT\",\n} as const);\n\n/** The union of every stable SDK error code. Branch on `err.code` against these. */\nexport type DigSdkErrorCode = (typeof DIG_SDK_ERROR_CODES)[keyof typeof DIG_SDK_ERROR_CODES];\n\n/** Structured, code-specific context attached to a {@link DigSdkError}. All fields optional. */\nexport interface DigSdkErrorContext {\n  /** The dig RPC method involved (RPC_* errors). */\n  rpcMethod?: string;\n  /** The HTTP status returned (RPC_ERROR on a non-2xx). */\n  httpStatus?: number;\n  /** The JSON-RPC error code returned by the server (RPC_ERROR). */\n  rpcCode?: number;\n  /** The `digstore` process exit code (DEPLOY_FAILED). */\n  exitCode?: number | null;\n  /** The wallet method that was unsupported (METHOD_NOT_SUPPORTED). */\n  method?: string;\n  /** The connection mode in play (provider errors). */\n  mode?: string;\n  /** The offending value (INVALID_ARGUMENT — e.g. the bad hex / URN). */\n  value?: string;\n  /** The expected vs actual SRI digest (WASM_INTEGRITY). */\n  expected?: string;\n  actual?: string;\n  /** Any further structured detail; kept open so codes can carry extra fields. */\n  [key: string]: unknown;\n}\n\n/**\n * The SDK's typed error. Always thrown (never a bare `Error`) so consumers can branch on `.code`.\n *\n * @example\n * try {\n *   await dig.read({ urn });\n * } catch (e) {\n *   if (e instanceof DigSdkError && e.code === \"ROOT_REQUIRED\") promptForRoot();\n *   else throw e;\n * }\n */\n/**\n * A brand stamped on every {@link DigSdkError}. The SDK ships several independently-bundled entry\n * points (index, adapters, vite, next, dig-client), each of which inlines its own copy of this\n * module — so two `DigSdkError`s can have DIFFERENT class identities across bundles and a plain\n * `instanceof` would miss one. {@link isDigSdkError} brand-checks instead, so a coded error thrown\n * from `@dignetwork/dig-sdk/adapters` is still recognized by `isDigSdkError` imported from the main\n * entry. Non-enumerable so it never shows up in `toJSON()` / spreads.\n */\nconst DIG_SDK_ERROR_BRAND = \"__dignetwork_dig_sdk_error__\";\n\nexport class DigSdkError extends Error {\n  /** The stable machine code (UPPER_SNAKE). Branch on this, not the message. */\n  readonly code: DigSdkErrorCode;\n  /** Structured, code-specific context (rpcMethod, httpStatus, exitCode, …). */\n  readonly context: DigSdkErrorContext;\n\n  constructor(\n    code: DigSdkErrorCode,\n    message: string,\n    context: DigSdkErrorContext = {},\n    options: { cause?: unknown } = {},\n  ) {\n    super(message);\n    this.name = \"DigSdkError\";\n    this.code = code;\n    this.context = context;\n    // Set `cause` directly (rather than via the ES2022 Error options arg) so the lib target stays\n    // ES2020 while still preserving the underlying error for diagnostics.\n    if (options.cause !== undefined) {\n      (this as { cause?: unknown }).cause = options.cause;\n    }\n    // Brand the instance (non-enumerable) so isDigSdkError recognizes it across bundle boundaries.\n    Object.defineProperty(this, DIG_SDK_ERROR_BRAND, { value: true, enumerable: false });\n    // Preserve a correct prototype chain when compiled to ES5-ish targets / across realms.\n    Object.setPrototypeOf(this, DigSdkError.prototype);\n  }\n\n  /** A JSON-friendly view of the error: `{ code, message, context }`. */\n  toJSON(): { code: DigSdkErrorCode; message: string; context: DigSdkErrorContext } {\n    return { code: this.code, message: this.message, context: this.context };\n  }\n}\n\n/**\n * True iff `e` is a {@link DigSdkError} (optionally with a specific `code`). Uses a non-enumerable\n * BRAND rather than `instanceof` so it recognizes coded errors thrown from any of the SDK's\n * separately-bundled entry points (the main entry and `/adapters` inline distinct class identities).\n */\nexport function isDigSdkError(e: unknown, code?: DigSdkErrorCode): e is DigSdkError {\n  const branded =\n    e instanceof DigSdkError ||\n    (typeof e === \"object\" && e !== null && (e as Record<string, unknown>)[DIG_SDK_ERROR_BRAND] === true);\n  return branded && (code === undefined || (e as DigSdkError).code === code);\n}\n","// The pure glue around `digstore deploy --json`: build the child argv + env, and parse the result.\n//\n// The adapters SHELL OUT to the installed `digstore` binary (the canonical deployer — it advances\n// the on-chain root, stages the build dir, and pushes the new capsule to DIGHUb). They never\n// re-implement deploy. These helpers are the deterministic, side-effect-free pieces:\n//\n//   • buildDeployArgs  — resolved config → argv (always `deploy --json`, only set flags).\n//   • buildDeployEnv   — resolved config → the env overlay carrying the SECRETS to the child, so the\n//                        deploy key / salt are NEVER on the argv (process-table leak), matching\n//                        digstore-cli's own guidance (deploy.rs).\n//   • parseDeployResult— `digstore deploy --json` stdout → { capsule, storeId, root, chiaUrl,\n//                        digUrl, hubUrl, pushed }, deriving the URLs exactly as digstore does\n//                        (capsule = storeId:root; hub view = https://hub.dig.net/stores/<id>;\n//                        chiaUrl = the user-facing content-open address chia://<store>:<root>/,\n//                        matching digstore's printed `content_address`).\n\nimport type { ResolvedDeployConfig } from \"./config.js\";\nimport { DigSdkError } from \"../errors.js\";\n\n/** Knobs for argv construction. */\nexport interface DeployArgsOptions {\n  /**\n   * The adapter already ran the framework build, so don't hand `--build-command` to digstore (it\n   * would rebuild). The output dir is staged as-is.\n   */\n  skipBuild?: boolean;\n}\n\n/**\n * Build the argv for `digstore <argv>` from a resolved config. Always `deploy --json`. Only flags\n * whose values are set are emitted. SECRETS (deployKey, salt) are intentionally excluded — they go\n * through the env (buildDeployEnv) so they never appear in the process table.\n */\nexport function buildDeployArgs(\n  cfg: ResolvedDeployConfig,\n  opts: DeployArgsOptions = {},\n): string[] {\n  const argv: string[] = [\"deploy\", \"--json\"];\n  if (cfg.storeId) argv.push(\"--store-id\", cfg.storeId);\n  if (cfg.outputDir) argv.push(\"--output-dir\", cfg.outputDir);\n  if (!opts.skipBuild && cfg.buildCommand) argv.push(\"--build-command\", cfg.buildCommand);\n  if (cfg.message) argv.push(\"--message\", cfg.message);\n  if (cfg.network) argv.push(\"--network\", cfg.network);\n  if (cfg.remote) argv.push(\"--remote\", cfg.remote);\n  if (cfg.waitTimeout != null) argv.push(\"--wait-timeout\", String(cfg.waitTimeout));\n  return argv;\n}\n\n/**\n * The env overlay to merge onto the child process env: the SECRETS, passed out-of-band so they are\n * never visible on the command line. Returns only the keys that have a value.\n */\nexport function buildDeployEnv(cfg: ResolvedDeployConfig): Record<string, string> {\n  const env: Record<string, string> = {};\n  if (cfg.deployKey) env.DIGSTORE_DEPLOY_KEY = cfg.deployKey;\n  if (cfg.salt) env.DIGSTORE_STORE_SALT = cfg.salt;\n  return env;\n}\n\n/** The friendly, parsed outcome of a deploy. */\nexport interface DeployResult {\n  /** `storeId:rootHash` — the capsule identity (the ecosystem-vocabulary id the user shares). */\n  capsule: string;\n  /** Store identity (64-hex). */\n  storeId: string;\n  /** The new on-chain root (64-hex). */\n  root: string;\n  /**\n   * The user-facing content-open address `chia://<storeId>:<rootHash>/` — what a user types/clicks\n   * to open this verified capsule in the DIG Browser / extension (the scheme they register). This\n   * matches digstore deploy's printed `content_address` exactly. (Distinct from the §21 remote\n   * locator `dig://<host>/<store_id>` and the `urn:dig:` namespace, which stay `dig://`.)\n   */\n  chiaUrl: string;\n  /**\n   * @deprecated Use {@link chiaUrl}. Kept as a back-compat alias for consumers that read `digUrl`;\n   * it now carries the SAME `chia://<storeId>:<rootHash>/` content-open value (NOT a `dig://` URL).\n   */\n  digUrl: string;\n  /** The human \"view it\" URL on DIGHUb (the same one `digstore deploy` prints). */\n  hubUrl: string;\n  /** Whether the capsule was pushed to DIGHUb (when the JSON reported it). */\n  pushed?: boolean;\n}\n\nconst CAPSULE_RE = /^([0-9a-f]{64}):([0-9a-f]{64})$/i;\n\n/**\n * Parse `digstore deploy --json` stdout into a DeployResult. digstore emits a single JSON object\n * (with at least `capsule` and `root`); we also tolerate extra JSON log lines by scanning lines\n * bottom-up for the first object that carries a `capsule`. Throws a clear error if none is found or\n * the output isn't JSON at all.\n */\nexport function parseDeployResult(stdout: string): DeployResult {\n  const lines = stdout\n    .split(/\\r?\\n/)\n    .map((l) => l.trim())\n    .filter((l) => l.startsWith(\"{\") && l.endsWith(\"}\"));\n\n  if (lines.length === 0) {\n    throw new DigSdkError(\n      \"DEPLOY_OUTPUT_UNPARSEABLE\",\n      `could not parse digstore deploy output (no JSON object found). Output was:\\n${stdout.slice(0, 500)}`,\n      { stdout: stdout.slice(0, 500) },\n    );\n  }\n\n  // Prefer the LAST JSON object that has a capsule (deploy emits one final result object). Keep the\n  // first parseable object as a fallback so the error message can show what digstore DID return.\n  let obj: Record<string, unknown> | undefined;\n  let fallback: Record<string, unknown> | undefined;\n  for (let i = lines.length - 1; i >= 0; i--) {\n    const line = lines[i];\n    if (line === undefined) continue;\n    let parsed: Record<string, unknown>;\n    try {\n      parsed = JSON.parse(line) as Record<string, unknown>;\n    } catch {\n      continue; // not JSON — skip this line\n    }\n    if (typeof parsed.capsule === \"string\") {\n      obj = parsed;\n      break;\n    }\n    if (!fallback) fallback = parsed;\n  }\n\n  if (!obj) {\n    if (fallback) {\n      throw new DigSdkError(\n        \"DEPLOY_OUTPUT_UNPARSEABLE\",\n        `digstore deploy did not report a capsule (deploy may have failed). Output:\\n${JSON.stringify(fallback)}`,\n        { output: fallback },\n      );\n    }\n    throw new DigSdkError(\n      \"DEPLOY_OUTPUT_UNPARSEABLE\",\n      `could not parse digstore deploy output as JSON:\\n${stdout.slice(0, 500)}`,\n      { stdout: stdout.slice(0, 500) },\n    );\n  }\n\n  const capsule = obj.capsule as string;\n  const m = CAPSULE_RE.exec(capsule);\n  if (!m || m[1] === undefined || m[2] === undefined) {\n    throw new DigSdkError(\n      \"INVALID_ARGUMENT\",\n      `digstore deploy reported a malformed capsule \"${capsule}\" (expected storeId:root)`,\n      { value: capsule, expected: \"storeId:root\" },\n    );\n  }\n  const storeId = m[1].toLowerCase();\n  const root = (typeof obj.root === \"string\" ? obj.root : m[2]).toLowerCase();\n\n  // The user-facing content-open address. Prefer the value digstore itself printed\n  // (`content_address`, the single source of truth — digstore deploy.rs::branding::content_url) so\n  // the SDK stays byte-identical to the CLI; otherwise derive it the same way digstore does:\n  // chia://<storeId>:<rootHash>/ (trailing slash, no resource). This is what a user opens in the\n  // DIG Browser/extension — NOT the §21 remote dig:// locator.\n  const chiaUrl =\n    typeof obj.content_address === \"string\"\n      ? obj.content_address\n      : `chia://${storeId}:${root}/`;\n\n  return {\n    capsule,\n    storeId,\n    root,\n    chiaUrl,\n    // Deprecated alias: same chia:// content-open value (back-compat for consumers reading digUrl).\n    digUrl: chiaUrl,\n    // Mirrors digstore deploy.rs::hub_url — the public DIGHUb view of an owned store.\n    hubUrl: `https://hub.dig.net/stores/${storeId}`,\n    pushed: typeof obj.pushed === \"boolean\" ? obj.pushed : undefined,\n  };\n}\n","// Injected-provider transport — the DIG Browser's in-process wallet (and compatible CHIP-0002\n// extensions), exposed on every page as `window.chia`. When present the SDK PREFERS it over\n// WalletConnect: no QR, no relay, no pairing. The native provider returns the SAME response shapes\n// Sage returns over WalletConnect, so the normalizers in provider/methods.ts are unchanged — only\n// the TRANSPORT differs. Genericized from hub.dig.net/apps/web/lib/injected-wallet.js.\n//\n// Detection: we key on the explicit, unspoofable `isDIG` marker the DIG Browser provider sets, not\n// merely the presence of `window.chia` (a different Chia provider could also define that).\n\nimport type { InjectedChiaProvider, WalletBackend } from \"../types.js\";\nimport { WALLET_METHODS, DEFAULT_CHAIN } from \"../methods.js\";\nimport type { WalletTransport } from \"./transport.js\";\nimport { DigSdkError } from \"../errors.js\";\n\n/** The injected provider on the current global, or undefined when not running in a DIG Browser. */\nexport function getInjectedProvider(): InjectedChiaProvider | undefined {\n  const g = globalThis as { chia?: InjectedChiaProvider };\n  return typeof g !== \"undefined\" ? g.chia : undefined;\n}\n\n/**\n * True iff an injected DIG wallet is available. Detects on the unspoofable `isDIG` marker. Pass\n * `{ anyChia: true }` to accept any `window.chia` that implements `request` (e.g. a non-DIG\n * CHIP-0002 extension).\n */\nexport function isInjectedAvailable(opts: { anyChia?: boolean } = {}): boolean {\n  const p = getInjectedProvider();\n  if (!p) return false;\n  if (opts.anyChia) return typeof p.request === \"function\";\n  return !!p.isDIG;\n}\n\n/** Sentinel topic for the injected backend (it has no per-session relay topic). */\nexport const INJECTED_TOPIC = \"injected\";\n\n/** A WalletTransport backed by the injected window.chia provider. */\nexport class InjectedTransport implements WalletTransport {\n  readonly backend: WalletBackend = \"injected\";\n  readonly topic = INJECTED_TOPIC;\n  readonly chain: string;\n  private readonly provider: InjectedChiaProvider;\n\n  constructor(provider: InjectedChiaProvider, chain: string = DEFAULT_CHAIN) {\n    this.provider = provider;\n    this.chain = chain;\n  }\n\n  /** Connect: ask the native wallet to approve this origin. Blocks until approved/rejected. */\n  async connect(eager = false): Promise<void> {\n    if (typeof this.provider.connect === \"function\") {\n      await this.provider.connect(eager);\n    }\n    // A provider without connect() (older build) is tolerated — request() will gate per-method.\n  }\n\n  // The native wallet implements the full canonical set (it returns Sage-shaped responses), so\n  // support is a static allowlist — no per-session negotiation as with WalletConnect.\n  supports(method: string): boolean {\n    return (WALLET_METHODS as readonly string[]).includes(method);\n  }\n\n  async request(method: string, params: unknown): Promise<unknown> {\n    if (!this.supports(method)) {\n      throw new DigSdkError(\n        \"METHOD_NOT_SUPPORTED\",\n        `The DIG Browser wallet does not support \"${method}\".`,\n        { method },\n      );\n    }\n    return this.provider.request({ method, params });\n  }\n\n  async disconnect(): Promise<void> {\n    // The injected wallet has no per-session teardown; per-origin consent is managed in the wallet.\n  }\n}\n","// The `window.chia` DEV shim the adapters inject during `dev`.\n//\n// In production a dapp's wallet is the REAL injected provider — the DIG Browser's in-process wallet\n// (or a CHIP-0002 extension) — which the SDK's ChiaProvider detects on `window.chia` via the\n// `isDIG` marker (see src/provider/injected.ts). During local `vite dev` / `next dev` there is no\n// such wallet, so calling `ChiaProvider.connect({ mode: \"injected\" })` would fail and the developer\n// couldn't exercise the wallet path at all.\n//\n// This shim installs a MINIMAL, clearly-labelled stub that satisfies the SAME injected-provider\n// contract the SDK detects (`isDIG`, `request({method,params})`, `connect()`), so the wallet code\n// path runs end-to-end in dev. It is a STUB, not a wallet: it returns a configurable mock address\n// and otherwise throws on methods that would need real signing, so a developer is never misled into\n// thinking a signature is real. It is generated as a self-contained, eval-free `<script>` body\n// (CSP-safe) that GUARDS on an existing `window.chia`, so a real wallet always wins.\n//\n// The shim's method names + response envelope mirror src/provider/injected.ts and\n// src/provider/methods.ts (the native provider returns `{ data }`), so the SAME normalizers run in\n// dev as in production — only the values are mocked.\n\nimport { INJECTED_TOPIC } from \"../provider/injected.js\";\n\n/** A literal substring stamped into the shim so it is unmistakably a dev stub (asserted in tests). */\nexport const DEV_SHIM_MARKER = \"dig-sdk:dev-wallet-shim\";\n\n/** Options for the generated dev shim. */\nexport interface DevShimOptions {\n  /** Mock receive address the shim returns from `getAddress`. A clearly-fake default is used. */\n  address?: string;\n}\n\n/** A clearly-fake default dev address (so it is obvious in the UI this is not a real wallet). */\nconst DEFAULT_DEV_ADDRESS = \"xch1dev0000000000000000000000000000000000000000000000000000devshim\";\n\n/** JSON-encode a string for safe inlining into a script literal. */\nfunction lit(s: string): string {\n  return JSON.stringify(s);\n}\n\n/**\n * Generate the dev-shim `<script>` body (no surrounding `<script>` tags). Inline it into the dev\n * server's served HTML. It is an IIFE that installs `window.chia` ONLY if one is not already\n * present, so the DIG Browser / a real extension always takes precedence. Eval-free and\n * dependency-free — safe under a strict CSP.\n */\nexport function devShimScript(options: DevShimOptions = {}): string {\n  const address = options.address ?? DEFAULT_DEV_ADDRESS;\n  // The shim mirrors the injected-provider contract the SDK detects. `request` resolves a small set\n  // of read methods with mock data and rejects signing methods (a dev stub must not fake a\n  // signature). Method names are the bare CHIP-0002 names the SDK normalizes.\n  return [\n    `/* ${DEV_SHIM_MARKER} — DEV ONLY. A stub wallet for local development; NOT a real wallet. */`,\n    `(function () {`,\n    `  \"use strict\";`,\n    `  if (typeof window === \"undefined\") return;`,\n    `  // A real injected wallet (DIG Browser / extension) always wins — never clobber it.`,\n    `  if (window.chia) return;`,\n    `  var DEV_ADDRESS = ${lit(address)};`,\n    `  var TOPIC = ${lit(INJECTED_TOPIC)};`,\n    `  function ok(data) { return Promise.resolve({ data: data }); }`,\n    `  function nope(method) {`,\n    `    return Promise.reject(new Error(`,\n    `      \"[\" + ${lit(DEV_SHIM_MARKER)} + \"] '\" + method + \"' needs a real wallet; the dev shim does not sign. \" +`,\n    `      \"Open in the DIG Browser or connect a wallet to sign for real.\"));`,\n    `  }`,\n    `  window.chia = {`,\n    `    isDIG: true,        // detected by the SDK's injected-provider check`,\n    `    isDevShim: true,    // so the app can tell it is the dev stub`,\n    `    topic: TOPIC,`,\n    `    connect: function () { return Promise.resolve(true); },`,\n    `    request: function (args) {`,\n    `      var method = args && args.method ? String(args.method) : \"\";`,\n    `      switch (method) {`,\n    `        case \"chip0002_connect\": return ok(true);`,\n    `        case \"chip0002_getPublicKeys\": return ok([]);`,\n    `        case \"getAddress\":`,\n    `        case \"chia_getAddress\": return ok(DEV_ADDRESS);`,\n    `        default:`,\n    `          // Signing / spend methods must not be faked.`,\n    `          return nope(method);`,\n    `      }`,\n    `    },`,\n    `    on: function () {},`,\n    `    off: function () {},`,\n    `  };`,\n    `  if (window.console && window.console.info) {`,\n    `    window.console.info(\"[\" + ${lit(DEV_SHIM_MARKER)} + \"] installed a DEV window.chia (mock address \" + DEV_ADDRESS + \").\");`,\n    `  }`,\n    `})();`,\n  ].join(\"\\n\");\n}\n","// The shared, Node-only deploy runner both framework adapters call on their `publish` step.\n//\n// It composes the pure pieces (load dig.toml → resolve config → build argv + env), spawns the\n// installed `digstore` binary with `deploy --json`, and parses the result into a friendly\n// DeployResult ({ capsule, chiaUrl, hubUrl }). It is intentionally thin: ALL deploy logic lives in\n// `digstore deploy` (the canonical deployer — advances the on-chain root, stages, pushes the\n// capsule); this only marshals config in and the result out.\n//\n// Node-only: it uses node:child_process / node:fs. The framework entrypoints import it lazily on\n// the publish path so importing the plugin in a browser/config context never pulls Node APIs.\n\nimport { resolveDeployConfig, type AdapterOptions } from \"./config.js\";\nimport { parseDigToml, type DigTomlConfig } from \"./dig-toml.js\";\nimport {\n  buildDeployArgs,\n  buildDeployEnv,\n  parseDeployResult,\n  type DeployArgsOptions,\n  type DeployResult,\n} from \"./deploy.js\";\nimport { DigSdkError } from \"../errors.js\";\n\n/** Options for {@link runDeploy}. */\nexport interface RunDeployOptions extends AdapterOptions, DeployArgsOptions {\n  /** Project root that holds `dig.toml` and the build output. Defaults to `process.cwd()`. */\n  cwd?: string;\n  /** The `digstore` executable. Defaults to `\"digstore\"` (must be on PATH). */\n  digstoreBin?: string;\n  /** Sink for human-readable progress. Defaults to `console.log`. */\n  logger?: (line: string) => void;\n}\n\n/** Read `dig.toml` from `cwd` (returns {} when absent). */\nasync function readDigToml(cwd: string): Promise<DigTomlConfig> {\n  const { readFile } = await import(\"node:fs/promises\");\n  const path = await import(\"node:path\");\n  try {\n    const text = await readFile(path.join(cwd, \"dig.toml\"), \"utf8\");\n    return parseDigToml(text);\n  } catch {\n    return {}; // no dig.toml — rely on options + env\n  }\n}\n\n/**\n * Resolve config, run `digstore deploy --json`, and parse the capsule. Spawns `digstore` with the\n * SECRETS injected through the child env (never the argv). Rejects with digstore's stderr on\n * non-zero exit. Returns the parsed {@link DeployResult}.\n */\nexport async function runDeploy(options: RunDeployOptions = {}): Promise<DeployResult> {\n  const cwd = options.cwd ?? process.cwd();\n  const bin = options.digstoreBin ?? \"digstore\";\n  const log = options.logger ?? ((l: string) => console.log(l));\n\n  const digToml = await readDigToml(cwd);\n  const cfg = resolveDeployConfig({\n    options: {\n      storeId: options.storeId,\n      outputDir: options.outputDir,\n      buildCommand: options.buildCommand,\n      message: options.message,\n      network: options.network,\n      remote: options.remote,\n      waitTimeout: options.waitTimeout,\n    },\n    digToml,\n    env: process.env,\n  });\n\n  const argv = buildDeployArgs(cfg, { skipBuild: options.skipBuild });\n  const childEnv = { ...process.env, ...buildDeployEnv(cfg) };\n\n  log(`▶ digstore ${argv.filter((a) => a !== cfg.deployKey && a !== cfg.salt).join(\" \")}`);\n\n  const { spawn } = await import(\"node:child_process\");\n  const stdout = await new Promise<string>((resolve, reject) => {\n    const child = spawn(bin, argv, {\n      cwd,\n      env: childEnv,\n      // digstore reads no stdin here; capture stdout (the JSON) and stream stderr through.\n      stdio: [\"ignore\", \"pipe\", \"pipe\"],\n      shell: false,\n    });\n    let out = \"\";\n    let err = \"\";\n    child.stdout.on(\"data\", (d: Buffer) => {\n      out += d.toString();\n    });\n    child.stderr.on(\"data\", (d: Buffer) => {\n      err += d.toString();\n    });\n    child.on(\"error\", (e: Error) => {\n      reject(\n        new DigSdkError(\n          \"DIGSTORE_NOT_FOUND\",\n          `could not run \"${bin}\" — is digstore installed and on PATH? (${e.message})`,\n          { bin },\n          { cause: e },\n        ),\n      );\n    });\n    child.on(\"close\", (code: number | null) => {\n      if (code === 0) resolve(out);\n      else\n        reject(\n          new DigSdkError(\"DEPLOY_FAILED\", `digstore deploy failed (exit ${code}).\\n${err || out}`, {\n            exitCode: code,\n            stderr: err.slice(0, 2000),\n          }),\n        );\n    });\n  });\n\n  const result = parseDeployResult(stdout);\n  log(`✓ deployed capsule ${result.capsule}`);\n  // chia:// is the user-facing content-open address (what they open in the DIG Browser/extension).\n  log(`  open    ${result.chiaUrl}`);\n  log(`  view    ${result.hubUrl}`);\n  return result;\n}\n"]}

package/dist/adapters.d.cts

@@ -1,5 +1,5 @@
-import { A as AdapterOptions, D as DeployArgsOptions, a as DeployResult } from './dev-shim-Bgw8X2E9.cjs';
-export { b as DEV_SHIM_MARKER, c as DevShimOptions, d as DigTomlConfig, R as ResolveInput, e as ResolvedDeployConfig, f as buildDeployArgs, g as buildDeployEnv, h as devShimScript, p as parseDeployResult, i as parseDigToml, r as resolveDeployConfig } from './dev-shim-Bgw8X2E9.cjs';
+import { A as AdapterOptions, D as DeployArgsOptions, a as DeployResult } from './dev-shim-DfKRA1ok.cjs';
+export { b as DEV_SHIM_MARKER, c as DevShimOptions, d as DigTomlConfig, R as ResolveInput, e as ResolvedDeployConfig, f as buildDeployArgs, g as buildDeployEnv, h as devShimScript, p as parseDeployResult, i as parseDigToml, r as resolveDeployConfig } from './dev-shim-DfKRA1ok.cjs';
 
 /** Options for {@link runDeploy}. */
 interface RunDeployOptions extends AdapterOptions, DeployArgsOptions {

package/dist/adapters.d.ts

@@ -1,5 +1,5 @@
-import { A as AdapterOptions, D as DeployArgsOptions, a as DeployResult } from './dev-shim-Bgw8X2E9.js';
-export { b as DEV_SHIM_MARKER, c as DevShimOptions, d as DigTomlConfig, R as ResolveInput, e as ResolvedDeployConfig, f as buildDeployArgs, g as buildDeployEnv, h as devShimScript, p as parseDeployResult, i as parseDigToml, r as resolveDeployConfig } from './dev-shim-Bgw8X2E9.js';
+import { A as AdapterOptions, D as DeployArgsOptions, a as DeployResult } from './dev-shim-DfKRA1ok.js';
+export { b as DEV_SHIM_MARKER, c as DevShimOptions, d as DigTomlConfig, R as ResolveInput, e as ResolvedDeployConfig, f as buildDeployArgs, g as buildDeployEnv, h as devShimScript, p as parseDeployResult, i as parseDigToml, r as resolveDeployConfig } from './dev-shim-DfKRA1ok.js';
 
 /** Options for {@link runDeploy}. */
 interface RunDeployOptions extends AdapterOptions, DeployArgsOptions {