@meddleware/dashboard-ui 0.1.96 → 0.1.98

package/CHANGELOG.md

@@ -5,6 +5,26 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); version
 [Semantic Versioning](https://semver.org/). Before 0.2.0, breaking changes ship as patch releases.
 Releases before 0.1.85 are recorded in the git history only.
 
+## [0.1.98] - 2026-11-08
+
+### Changed
+
+- The network selector reads the deployment records instead of a hard-coded option: Mainnet is selectable only when every hosted product (Access Gate, Sealed Storage) has a mainnet record, and until then it reads "Mainnet (not open yet)" with a tooltip that says what is missing or that mainnet is coming. A stored mainnet choice goes back to testnet only while mainnet is not open, with or without a wallet connected.
+- Token Issuance no longer carries a committed mainnet fee address: `.env.production` holds testnet only and the mainnet treasury is an optional build argument, so Token Issuance stays closed on mainnet until the build is given one.
+- Takes the embedded tools' 2026-11-07 releases (access-gate-ui 0.1.48, sealed-storage-ui 0.0.48, token-issuance-ui 0.0.46, treasury-ui 0.0.27, walrus-storage-ui 0.1.69), `@meddleware/wallet-adapter` ^0.0.22 (one copy, shared by all five), `@meddleware/ui` ^0.1.40, `@meddleware/web-utils` ^0.0.4 and `@meddleware/frontend-config` ^0.0.7. The explorer link beside the connected address uses wallet-adapter's `explorerNetwork`.
+- Describes the app for the people who use it (five tools, one wallet connection) in `package.json`, the README, `index.html` and CLAUDE.md.
+
+### Internal
+
+- Shared tooling replaces the local copies: `mw-audit-gate`, `mw-third-party-licenses` and `mw-check-csp-inline` (the `check:dist` script is now `check:csp`, which checks inline scripts against the Dockerfile's CSP by hash), `meddlewareApp`, `vueTestConfig` and the shared tsconfig base. `mw-sync --check` runs in CI; the `chain-wasm` CSP profile is configured in `package.json`.
+- New dependencies `@meddleware/access-gate-client` and `@meddleware/sealed-storage-client` (their deployment records feed the selector). New tests for the availability, the selector and the stored-network guard with the records mocked, and an end-to-end check of the selector.
+
+## [0.1.97] - 2026-11-06
+
+### Changed
+
+- Takes the embedded tools' 2026-11-06 releases (access-gate-ui 0.1.47, sealed-storage-ui 0.0.47, token-issuance-ui 0.0.45, treasury-ui 0.0.26 — now swept with data in its own end-to-end build —, walrus-storage-ui 0.1.68), `@meddleware/ui` ^0.1.39, and the Dependabot merges of 2026-11-06 (image bases, dev tools). Adds a README and a `LICENSE`.
+
 ## [0.1.96] - 2026-11-06
 
 ### Changed

package/README.md

@@ -1,8 +1,8 @@
 # @meddleware/dashboard-ui
 
-The organisation-level Meddleware dashboard, served at [`dash.meddleware.co.uk`](https://dash.meddleware.co.uk): a Vue 3 + Vite single-page
-app that embeds each tool from its own package (Treasury, and under *Blockchain* the Walrus Storage, Sealed Storage, Access Gate and Token
-Issuance consoles) inside one shell with a chain selector. It holds no financial logic: every number is read from the chain by the embedded tool.
+The Meddleware dashboard, served at [`dash.meddleware.co.uk`](https://dash.meddleware.co.uk): a Vue 3 + Vite single-page app with the five
+tools in one place and one wallet connection for all of them (Treasury, and under *Blockchain* the Walrus Storage, Sealed Storage, Access Gate
+and Token Issuance consoles). Each tool comes from its own package, inside one shell with a chain and network selector. It holds no financial logic: every number is read from the chain by the embedded tool.
 
 - **Stack:** Vue 3, Vite, `@meddleware/design-tokens`, `@meddleware/ui`, `@meddleware/wallet-adapter`.
 - **Image:** `quay.io/meddleware-org/dashboard-ui`, built on `quay.io/meddleware-org/static-server` (see `Dockerfile`).
@@ -17,7 +17,7 @@ npm run dev          # Vite dev server
 npm test             # unit tests (Vitest)
 npm run test:e2e     # builds the e2e variant and runs the Playwright sweep (E2E_BROWSERS=all adds Firefox, WebKit and two mobile profiles)
 npm run lint && npm run type-check
-npm run build && npm run check:bundle && npm run check:dist
+npm run build && npm run check:bundle && npm run check:csp
 ```
 
-`npm run check:bundle` fails if a test hook reached the production bundle; `npm run check:dist` fails if the build has an inline script the CSP would refuse.
+`npm run check:bundle` fails if a test hook reached the production bundle; `npm run check:csp` fails if the build has an inline script the image's Content-Security-Policy would refuse.

package/index.html

@@ -5,7 +5,7 @@
     <link rel="icon" type="image/svg+xml" href="/favicon.svg">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>Meddleware</title>
-    <meta name="description" content="The Meddleware dashboard: the organisation's treasury and the Sui tools (Walrus storage, sealed storage, access gates, token issuance) in one place." />
+    <meta name="description" content="The Meddleware dashboard: the treasury and the Sui tools (Walrus storage, sealed storage, access gates, token issuance) in one place, with one wallet connection for all of them." />
   </head>
   <body>
     <div id="app"><p role="status">Loading the Meddleware dashboard…</p></div>

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@meddleware/dashboard-ui",
-  "version": "0.1.96",
+  "version": "0.1.98",
   "homepage": "https://docs.meddleware.co.uk/",
-  "description": "Meddleware tools hub — Vue 3 SPA listing hosted services (Walrus, Access Gate) with white-label deploy options.",
+  "description": "The Meddleware dashboard: the treasury, Walrus storage, sealed storage, access gates and token issuance in one place, with one wallet connection for all five tools. Vue 3 single-page app.",
   "author": "Meddleware <dev@meddleware.co.uk>",
   "license": "0BSD",
   "repository": {
@@ -31,9 +31,9 @@
     "lint:js": "eslint .",
     "lint": "npm run lint:css && npm run lint:js && npm run lint:html",
     "lint:html": "html-validate \"src/**/*.vue\"",
-    "licenses": "node scripts/third-party-licenses.mjs",
-    "check:licenses": "node scripts/third-party-licenses.mjs --check",
-    "check:dist": "node scripts/check-inline-scripts.mjs",
+    "licenses": "mw-third-party-licenses",
+    "check:licenses": "mw-third-party-licenses --check",
+    "check:csp": "mw-check-csp-inline @Dockerfile dist",
     "shots": "SHOTS=1 playwright test",
     "lhci": "npm run build && lhci autorun",
     "check:bundle": "check-prod-bundle dist"
@@ -42,22 +42,24 @@
     "access": "public"
   },
   "dependencies": {
-    "@meddleware/access-gate-ui": "^0.1.46",
+    "@meddleware/access-gate-client": "^0.0.13",
+    "@meddleware/access-gate-ui": "^0.1.48",
     "@meddleware/design-tokens": "^0.1.13",
-    "@meddleware/sealed-storage-ui": "^0.0.46",
-    "@meddleware/token-issuance-ui": "^0.0.44",
-    "@meddleware/treasury-ui": "^0.0.25",
-    "@meddleware/ui": "^0.1.38",
-    "@meddleware/wallet-adapter": "^0.0.21",
-    "@meddleware/walrus-storage-ui": "^0.1.67",
-    "@meddleware/web-utils": "^0.0.2",
+    "@meddleware/sealed-storage-client": "^0.0.26",
+    "@meddleware/sealed-storage-ui": "^0.0.48",
+    "@meddleware/token-issuance-ui": "^0.0.46",
+    "@meddleware/treasury-ui": "^0.0.27",
+    "@meddleware/ui": "^0.1.40",
+    "@meddleware/wallet-adapter": "^0.0.22",
+    "@meddleware/walrus-storage-ui": "^0.1.69",
+    "@meddleware/web-utils": "^0.0.4",
     "@mysten/sui": "^2.36.0",
     "vue": "^3.5.44",
     "vue-router": "^5.4.0"
   },
   "devDependencies": {
-    "@lhci/cli": "^0.15.1",
-    "@meddleware/frontend-config": "^0.0.2",
+    "@lhci/cli": "^0.16.0",
+    "@meddleware/frontend-config": "^0.0.7",
     "@playwright/test": "~1.64.1",
     "@types/node": "~26.6.5",
     "@vitejs/plugin-vue": "^6.0.10",
@@ -77,7 +79,7 @@
     "stylelint-config-standard": "^40.0.0",
     "typescript": "~6.0.0",
     "vite": "^8.3.4",
-    "vitest": "~5.0.2",
+    "vitest": "~5.1.0",
     "vue-eslint-parser": "^10.4.1",
     "vue-tsc": "~3.3.13"
   },
@@ -91,5 +93,10 @@
     "basic-ftp": "^6.2.4",
     "tmp": "^0.2.7",
     "zod": "^4.6.7"
+  },
+  "meddleware": {
+    "kind": "app",
+    "csp": "chain-wasm",
+    "lhci": true
   }
 }

package/src/App.vue

@@ -24,10 +24,12 @@ import { useNetwork, useWallet } from '@meddleware/wallet-adapter'
 import { DEFAULT_CHAIN } from './chains.js'
 import ChainSelector from './components/ChainSelector.vue'
 import NetworkSelector from './components/NetworkSelector.vue'
+import { keepToOpenNetwork } from './network.js'
 
 const { mode } = useColorMode('dark')
 const route = useRoute()
-const { network } = useNetwork()
+const { network, explorerNetwork } = useNetwork()
+keepToOpenNetwork()
 
 // The sidebar has two modes. Top level shows the organisation sections (Treasury, Blockchain). Entering the Blockchain section swaps it to a
 // chain selector with an up-one-level control that returns to the top level without leaving the page. The mode follows the route (so a
@@ -60,8 +62,8 @@ const { account, disconnect } = useWallet({ requiredFeatures: ['sui:signTransact
 const DOCS_URL = import.meta.env.VITE_DOCS_URL || 'https://docs.meddleware.co.uk/'
 const DEV_URL = import.meta.env.VITE_DEV_URL || 'https://meddleware.dev/'
 
-// SuiVision has no localnet explorer, so a link exists only for public networks; otherwise the address is copy-only.
-const accountExplorerNetwork = computed(() => (network.value === 'mainnet' ? 'mainnet' : network.value === 'testnet' ? 'testnet' : null))
+// SuiVision has no localnet explorer, so the address links to it only on a public network; on localnet it is copy-only.
+const hasExplorer = computed(() => network.value !== 'localnet')
 const title = computed(() => (typeof route.meta.title === 'string' ? route.meta.title : 'Meddleware'))
 </script>
 
@@ -111,7 +113,7 @@ const title = computed(() => (typeof route.meta.title === 'string' ? route.meta.
         <template #foot>
           <p v-if="account" class="foot">
             <CopyableAddress :address="account.address">
-              <ExplorerLink v-if="accountExplorerNetwork" :href="suiExplorerUrl('account', account.address, accountExplorerNetwork)" :value="account.address" />
+              <ExplorerLink v-if="hasExplorer" :href="suiExplorerUrl('account', account.address, explorerNetwork)" :value="account.address" />
             </CopyableAddress>
             <UiButton variant="link" size="sm" @click="disconnect">Disconnect</UiButton>
           </p>

package/src/components/NetworkSelector.vue

@@ -1,9 +1,11 @@
 <script setup lang="ts">
 // Network selector for the dashboard sidebar. Reads and writes the shared useNetwork() singleton so every embedded tool view reacts to the
-// chosen network immediately. Mainnet is listed but not selectable before launch, and a stored mainnet choice is reset to testnet.
-import { onMounted, ref, watch } from 'vue'
+// chosen network immediately. Mainnet is selectable only when the deployment records say it is live (`src/network.ts`); until then it is
+// listed, disabled, with what is missing.
+import { ref, watch } from 'vue'
 import { UiFormField, UiSelect, UiTextField } from '@meddleware/ui'
 import { useNetwork, type MwNetwork } from '@meddleware/wallet-adapter'
+import { networkOptions } from '../network.js'
 
 const { network, localnetRpc, setNetwork, setLocalnetRpc } = useNetwork()
 
@@ -22,9 +24,7 @@ function commitLocalnetUrl(): void {
   if (url) setLocalnetRpc(url)
 }
 
-onMounted(() => {
-  if (network.value === 'mainnet') setNetwork('testnet')
-})
+const options = networkOptions()
 </script>
 
 <template>
@@ -32,9 +32,7 @@ onMounted(() => {
     <UiFormField id="ns-select" label="Network">
       <template #default="{ attrs }">
         <UiSelect :id="attrs.id" :model-value="network" @change="onNetworkChange">
-          <option value="testnet">Testnet</option>
-          <option value="mainnet" disabled title="Coming soon">Mainnet</option>
-          <option value="localnet">Localnet</option>
+          <option v-for="o in options" :key="o.value" :value="o.value" :disabled="o.disabled" :title="o.title">{{ o.label }}</option>
         </UiSelect>
       </template>
     </UiFormField>

package/src/network.ts

@@ -0,0 +1,64 @@
+// Which networks the dashboard offers, from the deployment records and nothing else. A tool's record lists the networks it is published on
+// (the keys of its `*_DEPLOYMENTS` object); `networkAvailability` reports a network as `live` only when every product the dashboard hosts
+// has a record there. Adding a `mainnet` key to both records is therefore the one switch that opens mainnet in the selector: no page here
+// states which network is live in prose, and the platform's mainnet-readiness structure check fails on a hand-written disabled option.
+//
+// The two records are the products whose on-chain deployment a network choice depends on: the Access Gate (also read by the Walrus relay
+// gate, Token Issuance and the Treasury) and the Sealed Storage policies. Walrus Storage and Token Issuance have no record of their own.
+import { ACCESS_GATE_DEPLOYMENTS } from '@meddleware/access-gate-client/deployments'
+import { SEAL_POLICIES_DEPLOYMENTS } from '@meddleware/sealed-storage-client/deployments'
+import { networkAvailability, type NetworkAvailability } from '@meddleware/web-utils'
+import { useNetwork, type MwNetwork } from '@meddleware/wallet-adapter'
+
+/** The availability of testnet and mainnet, from the records. */
+export const AVAILABILITY = networkAvailability({
+  'access gate': Object.keys(ACCESS_GATE_DEPLOYMENTS),
+  'sealed storage': Object.keys(SEAL_POLICIES_DEPLOYMENTS),
+})
+
+export interface MainnetChoice {
+  /** Mainnet can be selected. */
+  readonly open: boolean
+  /** The option's text. */
+  readonly label: string
+  /** The option's tooltip: what is missing, or that mainnet is coming. Absent when mainnet is open. */
+  readonly title?: string
+}
+
+/** How the mainnet option reads for the given availability (default: the records). */
+export function mainnetChoice(mainnet: NetworkAvailability = AVAILABILITY.mainnet): MainnetChoice {
+  switch (mainnet.status) {
+    case 'live':
+      return { open: true, label: 'Mainnet' }
+    case 'partial':
+      return { open: false, label: 'Mainnet (not open yet)', title: `Mainnet is not open yet. Still missing: ${mainnet.missing.join(', ')}.` }
+    case 'coming':
+      return { open: false, label: 'Mainnet (not open yet)', title: 'Mainnet is coming' }
+  }
+}
+
+export interface NetworkOption {
+  readonly value: MwNetwork
+  readonly label: string
+  readonly disabled: boolean
+  readonly title?: string
+}
+
+/** The options of the network selector: testnet and localnet always, mainnet as the records allow. */
+export function networkOptions(mainnet: NetworkAvailability = AVAILABILITY.mainnet): NetworkOption[] {
+  const choice = mainnetChoice(mainnet)
+  return [
+    { value: 'testnet', label: 'Testnet', disabled: false },
+    { value: 'mainnet', label: choice.label, disabled: !choice.open, title: choice.title },
+    { value: 'localnet', label: 'Localnet', disabled: false },
+  ]
+}
+
+/**
+ * Keep the shared network on one the dashboard offers: a stored mainnet choice (from a time mainnet was open, or edited by hand) goes back to
+ * testnet unless mainnet is live. Every tool view reads the shared choice, so this runs in the shell, with or without a wallet connected.
+ */
+export function keepToOpenNetwork(mainnet: NetworkAvailability = AVAILABILITY.mainnet): void {
+  const { network, setNetwork } = useNetwork()
+  if (network.value === 'mainnet' && mainnet.status !== 'live') setNetwork('testnet')
+}

package/tsconfig.json

@@ -1,18 +1,4 @@
 {
-  "compilerOptions": {
-    "target": "ESNext",
-    "module": "ESNext",
-    "moduleResolution": "Bundler",
-    "lib": ["ESNext", "DOM", "DOM.Iterable"],
-    "strict": true,
-    "esModuleInterop": true,
-    "skipLibCheck": true,
-    "resolveJsonModule": true,
-    "isolatedModules": true,
-    "verbatimModuleSyntax": true,
-    "jsx": "preserve",
-    "types": ["node"],
-    "noEmit": true
-  },
+  "extends": "@meddleware/frontend-config/tsconfig/vue-app.json",
   "include": ["src/**/*.ts", "src/**/*.vue", "src/**/*.d.ts", "tests/**/*.ts", "e2e/**/*.ts", "vite.config.ts", "vitest.config.ts", "playwright.config.ts"]
 }

package/vite.config.ts

@@ -1,20 +1,19 @@
-import { defineConfig } from 'vite'
 import vue from '@vitejs/plugin-vue'
-import { assertE2eOnlyInE2eMode, themeInit, viteTarget } from '@meddleware/frontend-config/vite'
+import { defineConfig } from 'vite'
+import { meddlewareApp } from '@meddleware/frontend-config/vite'
 
-// @meddleware/* resolve from node_modules (published packages — no monorepo aliases).
-export default defineConfig(({ mode }) => {
-  // The end-to-end build (`--mode e2e`) includes a mock wallet; nothing else may.
-  assertE2eOnlyInE2eMode(mode)
-  return {
-    build: { target: viteTarget() },
-    plugins: [vue(), themeInit({ default: 'dark' })],
-    optimizeDeps: {
-      // The Walrus wasm client is dynamically imported inside the inline WalrusStorageView upload flow;
-      // keep it out of the eager dep-optimization graph so it stays a lazy chunk.
-      // @meddleware/wallet-adapter ships TS + .vue source and holds the shared wallet singleton; if it
-      // were pre-bundled, its .vue files (served raw) would load a second copy of the singleton in dev.
-      exclude: ['@mysten/walrus', '@mysten/walrus-wasm', '@meddleware/wallet-adapter'],
+// meddlewareApp refuses VITE_E2E outside the end-to-end mode (`--mode e2e`: a mock wallet and a stub chain; nothing else may include them),
+// sets the browserslist build target and the dark default colour mode, and keeps @meddleware/wallet-adapter (the shared wallet singleton,
+// shipped as TS + .vue source) out of pre-bundling, so dev does not load a second copy of it.
+export default defineConfig(
+  meddlewareApp({
+    plugins: [vue()],
+    config: {
+      optimizeDeps: {
+        // The Walrus wasm client is dynamically imported inside the inline WalrusStorageView upload flow; keep it out of the eager
+        // dep-optimization graph so it stays a lazy chunk.
+        exclude: ['@mysten/walrus', '@mysten/walrus-wasm'],
+      },
     },
-  }
-})
+  }),
+)