@meddleware/token-deployer-ui 0.0.1

package/scripts/e2e-localnet.mjs

@@ -0,0 +1,65 @@
+// End-to-end: patch -> publish (fee + immutable) -> finalize (mint + fixed supply
+// + frozen metadata) against localnet, using the actual app lib.
+import init from '@mysten/move-bytecode-template';
+import { SuiJsonRpcClient } from '@mysten/sui/jsonRpc';
+import { requestSuiFromFaucetV2 } from '@mysten/sui/faucet';
+import { Ed25519Keypair } from '@mysten/sui/keypairs/ed25519';
+import { patchTemplateModule } from '../src/lib/template.ts';
+import { buildPublishTransaction, buildFinalizeTransaction, extractPublishResult, needsFinalize } from '../src/lib/buildPublishTx.ts';
+
+await (init)();
+const client = new SuiJsonRpcClient({ url: 'http://127.0.0.1:9000' });
+const kp = new Ed25519Keypair(); const sender = kp.toSuiAddress();
+const feeRecipient = new Ed25519Keypair().toSuiAddress();
+await requestSuiFromFaucetV2({ host: 'http://127.0.0.1:9123', recipient: sender });
+for (let i=0;i<25;i++){ const b=await client.getBalance({owner:sender}); if(BigInt(b.totalBalance)>0n)break; await new Promise(r=>setTimeout(r,1000)); }
+
+const config = {
+  packageName:'fixed_token', moduleName:'fixedtok', structName:'FIXEDTOK',
+  symbol:'FIX', name:'Fixed Token', description:'Fixed supply token', iconUrl:'', decimals:6,
+  initialSupply: 1000n, supplyPolicy:'fixed', metadataPolicy:'frozen', packagePolicy:'immutable',
+  recipient: sender, license:'MIT', packageDescription:'', projectName:'',
+};
+
+const moduleBytes = await patchTemplateModule(config);
+const feeMist = 250000000n;
+const pubTx = buildPublishTransaction({ moduleBytes, sender, feeMist, feeRecipient, gasBudget: 500000000n, packagePolicy: config.packagePolicy });
+const pub = await client.signAndExecuteTransaction({ signer: kp, transaction: pubTx, options: { showEffects:true, showObjectChanges:true, showBalanceChanges:true } });
+console.log('publish status:', pub.effects?.status?.status);
+if (pub.effects?.status?.status !== 'success') { console.log(JSON.stringify(pub.effects?.status)); process.exit(1); }
+
+await client.waitForTransaction({ digest: pub.digest });
+
+const result = extractPublishResult(pub.objectChanges ?? [], { network:'localnet', digest: pub.digest, feeRecipient, feeMist });
+console.log('coinType:', result.coinType);
+console.log('caps:', { t: !!result.treasuryCapId, m: !!result.metadataCapId, upgrade: result.upgradeCapId ?? '(burned=immutable)' });
+
+// fee arrived?
+const feeBal = await client.getBalance({ owner: feeRecipient });
+console.log('fee recipient balance:', feeBal.totalBalance, feeBal.totalBalance === feeMist.toString() ? 'OK' : 'MISMATCH');
+
+// finalize
+console.log('needsFinalize:', needsFinalize(config, sender));
+const finTx = buildFinalizeTransaction({ config, coinType: result.coinType, treasuryCapId: result.treasuryCapId, metadataCapId: result.metadataCapId, sender, gasBudget: 500000000n });
+const fin = await client.signAndExecuteTransaction({ signer: kp, transaction: finTx, options: { showEffects:true, showObjectChanges:true } });
+await client.waitForTransaction({ digest: fin.digest });
+console.log('finalize status:', fin.effects?.status?.status);
+if (fin.effects?.status?.status !== 'success') { console.log(JSON.stringify(fin.effects?.status)); process.exit(1); }
+
+// minted coin present?
+const coins = await client.getCoins({ owner: sender, coinType: result.coinType });
+const total = coins.data.reduce((a,c)=>a+BigInt(c.balance), 0n);
+const expected = 1000n * 10n**6n;
+console.log('minted balance:', total.toString(), total===expected ? 'OK (1000 * 10^6)' : 'MISMATCH exp '+expected);
+
+// treasury cap frozen (immutable owner)?
+const tcap = await client.getObject({ id: result.treasuryCapId, options:{ showOwner:true } });
+const owner = tcap.data?.owner ?? tcap.object?.owner ?? tcap.owner;
+console.log('treasuryCap owner after fixed-supply freeze:', JSON.stringify(owner));
+
+const ok = result.coinType.endsWith('::fixedtok::FIXEDTOK')
+  && feeBal.totalBalance === feeMist.toString()
+  && !result.upgradeCapId
+  && total === expected;
+console.log('\nE2E', ok ? 'PASS ✓' : 'FAIL ✗');
+process.exit(ok ? 0 : 1);

package/scripts/e2e-walrus-browser.mjs

@@ -0,0 +1,115 @@
+// Headless browser verification of the Walrus icon-upload widget on TESTNET.
+// Injects a wallet-standard wallet backed by the FUNDED keypair (SUI_PRIV env),
+// drives the widget's file upload, and asserts the icon field is filled with a
+// working aggregator URL that serves the exact uploaded image.
+//
+// Prereq: build the app + serve on APP_URL, and export SUI_PRIV for the funded
+// testnet address (with SUI + WAL).
+
+import { readFileSync } from 'node:fs'
+import { chromium } from 'playwright'
+import { SuiJsonRpcClient } from '@mysten/sui/jsonRpc'
+import { Ed25519Keypair } from '@mysten/sui/keypairs/ed25519'
+import { toBase64 } from '@mysten/sui/utils'
+
+const APP_URL = process.env.APP_URL || 'http://localhost:4173'
+const RPC = process.env.RPC || 'https://sui-testnet-rpc.publicnode.com'
+const ICON = '/tmp/test-icon.svg'
+
+const _client = new SuiJsonRpcClient({ url: RPC, network: 'testnet' })
+const keypair = Ed25519Keypair.fromSecretKey(process.env.SUI_PRIV)
+const address = keypair.toSuiAddress()
+
+function fail(m) {
+  console.error('WALRUS BROWSER E2E FAIL:', m)
+  process.exit(1)
+}
+
+async function main() {
+  console.log('signer:', address)
+  const browser = await chromium.launch({
+    headless: true,
+    executablePath: process.env.CHROME_PATH || '/usr/bin/google-chrome',
+    // Bypass CORS so the in-browser tx.build() can hit the testnet RPC.
+    args: ['--disable-web-security', '--disable-features=IsolateOrigins,site-per-process'],
+  })
+  const page = await browser.newPage()
+  page.on('pageerror', (e) => console.log('[pageerror]', e.message))
+
+  // Node just signs raw bytes; the browser builds the tx (resolving CoinWithBalance).
+  await page.exposeFunction('__mockSignBytes', async (byteArr) => {
+    const bytes = new Uint8Array(byteArr)
+    const { signature } = await keypair.signTransaction(bytes)
+    return { bytes: toBase64(bytes), signature }
+  })
+
+  await page.addInitScript(
+    ({ address, pubkey }) => {
+      const account = { address, publicKey: new Uint8Array(pubkey), chains: ['sui:testnet'], features: ['sui:signTransaction'], label: 'Mock' }
+      const wallet = {
+        version: '1.0.0', name: 'Mock Test Wallet',
+        icon: 'data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciLz4=',
+        chains: ['sui:testnet'], accounts: [account],
+        features: {
+          'standard:connect': { version: '1.0.0', connect: async () => ({ accounts: [account] }) },
+          'standard:events': { version: '1.0.0', on: () => () => {} },
+          'sui:signTransaction': {
+            version: '2.0.0',
+            signTransaction: async (input) => {
+              // A real wallet sets the sender from the connected account; do the same.
+              const client = window.__getSuiClient('testnet')
+              input.transaction.setSenderIfNotSet(input.account.address)
+              const bytes = await input.transaction.build({ client })
+              return window.__mockSignBytes(Array.from(bytes))
+            },
+          },
+        },
+      }
+      const cb = ({ register }) => register(wallet)
+      window.dispatchEvent(new CustomEvent('wallet-standard:register-wallet', { detail: cb }))
+      window.addEventListener('wallet-standard:app-ready', (e) => cb(e.detail))
+    },
+    { address, pubkey: Array.from(keypair.getPublicKey().toRawBytes()) },
+  )
+
+  await page.goto(APP_URL, { waitUntil: 'networkidle' })
+  await page.getByRole('button', { name: /Connect Mock Test Wallet/ }).click()
+  await page.getByText(/Mock Test Wallet ·/).waitFor({ timeout: 10000 })
+  console.log('wallet connected')
+
+  // Drive the widget: choose the file + click upload.
+  await page.locator('#walrus-file').setInputFiles(ICON)
+  await page.getByRole('button', { name: /Upload to Walrus/ }).click()
+  console.log('uploading to Walrus (2 wallet approvals, relay)…')
+
+  // Wait for the icon field to be populated with an aggregator URL.
+  // (arg must precede options in waitForFunction.)
+  try {
+    await page.waitForFunction(
+      () => (document.querySelector('#icon') ?? {}).value?.includes('/v1/blobs/'),
+      undefined,
+      { timeout: 180000, polling: 1000 },
+    )
+  } catch (e) {
+    const status = await page.locator('.hint[aria-live]').allInnerTexts().catch(() => [])
+    const err = await page.locator('.field-error').allInnerTexts().catch(() => [])
+    console.log('widget status:', JSON.stringify(status))
+    console.log('widget errors:', JSON.stringify(err))
+    throw e
+  }
+  const url = await page.locator('#icon').inputValue()
+  console.log('icon URL:', url)
+  await browser.close()
+
+  if (!url.includes('aggregator.walrus-testnet') || !url.includes('/v1/blobs/')) fail(`unexpected URL: ${url}`)
+  const res = await fetch(url)
+  const body = new Uint8Array(await res.arrayBuffer())
+  const expected = new Uint8Array(readFileSync(ICON))
+  const match = body.length === expected.length && body.every((b, i) => b === expected[i])
+  console.log('aggregator serves', body.length, 'bytes, matches uploaded image:', match)
+  if (!match) fail('aggregator content does not match uploaded image')
+
+  console.log('\nWALRUS BROWSER E2E PASS ✓ (widget upload -> renderable icon URL on testnet)')
+}
+
+main().catch((e) => fail(e.message))

package/scripts/gen-og-image.mjs

@@ -0,0 +1,31 @@
+// Regenerates public/og-image.png (1200x630 social card) via headless Chrome.
+// Run from the app dir: `node scripts/gen-og-image.mjs`. Re-run if branding changes.
+import { chromium } from 'playwright'
+import { writeFileSync } from 'node:fs'
+import { fileURLToPath } from 'node:url'
+
+const OUT = fileURLToPath(new URL('../public/og-image.png', import.meta.url))
+const html = `<!doctype html><html><head><meta charset="utf-8"><style>
+*{margin:0;box-sizing:border-box;font-family:-apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif}
+body{width:1200px;height:630px;background:linear-gradient(135deg,#0b1120 0%,#111c33 60%,#0e2a3f 100%);color:#f4f7fb;display:flex;flex-direction:column;justify-content:center;padding:80px}
+.badge{display:inline-block;font-size:26px;letter-spacing:.12em;text-transform:uppercase;color:#6ea8fe;border:2px solid #2b3a55;border-radius:999px;padding:10px 26px;width:max-content;margin-bottom:36px}
+h1{font-size:82px;line-height:1.04;font-weight:800;letter-spacing:-.02em;margin-bottom:28px}
+h1 .accent{color:#6ea8fe}
+p{font-size:34px;line-height:1.35;color:#aebfd6;max-width:960px}
+.row{display:flex;gap:18px;margin-top:52px}
+.chip{font-size:24px;color:#cfe0f7;background:#16233d;border:1px solid #26365a;border-radius:10px;padding:12px 20px}
+.url{position:absolute;bottom:56px;right:80px;font-size:26px;color:#6ea8fe;font-weight:600}
+</style></head><body>
+<div class="badge">Sui &middot; client-side</div>
+<h1>Create your own <span class="accent">Sui coin</span><br>in the browser</h1>
+<p>Your wallet signs and pays gas &mdash; nothing is compiled or signed on a server. Keep the full, verifiable source package.</p>
+<div class="row"><div class="chip">No server</div><div class="chip">No custody</div><div class="chip">Full source included</div></div>
+<div class="url">tokens.meddleware.co.uk</div>
+</body></html>`
+
+const browser = await chromium.launch({ executablePath: process.env.CHROME_PATH || '/usr/bin/google-chrome' })
+const page = await browser.newPage({ viewport: { width: 1200, height: 630 }, deviceScaleFactor: 1 })
+await page.setContent(html, { waitUntil: 'networkidle' })
+writeFileSync(OUT, await page.screenshot({ type: 'png' }))
+await browser.close()
+console.log('wrote', OUT)

package/scripts/publish-localnet.mjs

@@ -0,0 +1,55 @@
+import { readFileSync } from 'node:fs';
+import { bcs } from '@mysten/bcs';
+import * as tpl from '@mysten/move-bytecode-template';
+import { SuiJsonRpcClient } from '@mysten/sui/jsonRpc';
+import { requestSuiFromFaucetV2 } from '@mysten/sui/faucet';
+import { Transaction } from '@mysten/sui/transactions';
+import { Ed25519Keypair } from '@mysten/sui/keypairs/ed25519';
+import { toBase64 } from '@mysten/sui/utils';
+
+const init = tpl.default ?? tpl.init;
+try { if (typeof init === 'function') await init(); } catch {}
+
+const client = new SuiJsonRpcClient({ url: 'http://127.0.0.1:9000' });
+
+const orig = new Uint8Array(readFileSync(new URL('../src/move-template/sui_token_template.mv', import.meta.url)));
+const json = tpl.deserialize(orig);
+const rename = { sui_token_template: 'mycoin', SUI_TOKEN_TEMPLATE: 'MYCOIN' };
+json.identifiers = json.identifiers.map((id) => rename[id] ?? id);
+const vec = (s) => Array.from(bcs.string().serialize(s).toBytes());
+const patch = (cur, nw) => { const c = json.constant_pool.find((k)=>JSON.stringify(k.data)===JSON.stringify(vec(cur))); c.data = vec(nw); };
+json.constant_pool.find((c)=>c.type_==='U8').data = [6];
+patch('TEMPLATE_SYMBOL','MYC'); patch('TEMPLATE_NAME','My Coin');
+patch('TEMPLATE_DESCRIPTION','A great coin'); patch('TEMPLATE_ICON_URL','https://x/y.svg');
+const moduleBytes = new Uint8Array(tpl.serialize(json));
+console.log('identifiers sorted?', JSON.stringify(json.identifiers) === JSON.stringify([...json.identifiers].sort()));
+
+const kp = new Ed25519Keypair();
+const addr = kp.toSuiAddress();
+console.log('address:', addr);
+await requestSuiFromFaucetV2({ host: 'http://127.0.0.1:9123', recipient: addr });
+let bal = '0';
+for (let i=0;i<25;i++){ const b = await client.getBalance({ owner: addr }); if (BigInt(b.totalBalance) > 0n){ bal=b.totalBalance; break;} await new Promise(r=>setTimeout(r,1000)); }
+console.log('balance:', bal);
+
+const tx = new Transaction();
+tx.setSender(addr);
+const [upgradeCap] = tx.publish({ modules: [toBase64(moduleBytes)], dependencies: ['0x1', '0x2'] });
+tx.transferObjects([upgradeCap], addr);
+tx.setGasBudget(500000000);
+
+try {
+  const res = await client.signAndExecuteTransaction({ signer: kp, transaction: tx, options: { showEffects: true, showObjectChanges: true } });
+  const status = res.effects?.status?.status;
+  console.log('\nstatus:', status);
+  if (status !== 'success') { console.log('ERR:', JSON.stringify(res.effects?.status)); process.exit(1); }
+  for (const c of (res.objectChanges ?? [])) {
+    if (c.type==='published') console.log('packageId:', c.packageId);
+    if (c.type==='created') console.log('  created:', c.objectType);
+  }
+  console.log('\nPUBLISH PASS - verifier accepted the in-place patched module');
+} catch (e) {
+  console.log('\nPUBLISH FAIL:', e.message);
+  process.exit(2);
+}
+

package/scripts/regen-template.sh

@@ -0,0 +1,45 @@
+#!/usr/bin/env bash
+set -euo pipefail
+# Recompiles the canonical sui-token-template Move module and refreshes the
+# bytecode artifact the deployer ships (src/move-template/*). Run this whenever
+# blockchain/sui/sui-token-template/sources/sui_token_template.move changes, so
+# the shipped bytecode stays in lock-step with the downloadable source generator.
+#
+# IMPORTANT: use `sui move build` (NOT `sui move test`) — the test profile emits
+# instrumented bytecode (magic 0xDEADC0DE) that is not publishable.
+
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+APP_DIR="$HERE/.."
+# The canonical template ships as the published @meddleware/sui-token-template
+# package; resolve it from node_modules. A local checkout can be pointed at via
+# SUI_TOKEN_TEMPLATE_DIR (e.g. during template co-development before publish).
+TEMPLATE_DIR="${SUI_TOKEN_TEMPLATE_DIR:-$(cd "$APP_DIR" && node -e "process.stdout.write(require('path').dirname(require.resolve('@meddleware/sui-token-template/package.json')))" 2>/dev/null || true)}"
+if [[ -z "${TEMPLATE_DIR:-}" || ! -f "$TEMPLATE_DIR/Move.toml" ]]; then
+  echo "ERROR: sui-token-template sources not found. Install @meddleware/sui-token-template or set SUI_TOKEN_TEMPLATE_DIR to a local checkout." >&2
+  exit 1
+fi
+
+echo "Building $TEMPLATE_DIR (testnet build-env)…"
+( cd "$TEMPLATE_DIR" && rm -rf build && sui move build --build-env testnet >/dev/null )
+
+MV="$TEMPLATE_DIR/build/sui_token_template/bytecode_modules/sui_token_template.mv"
+MAGIC="$(head -c 4 "$MV" | xxd -p)"
+if [[ "$MAGIC" != "a11ceb0b" ]]; then
+  echo "ERROR: unexpected bytecode magic $MAGIC (expected a11ceb0b)" >&2
+  exit 1
+fi
+
+cp "$MV" "$APP_DIR/src/move-template/sui_token_template.mv"
+B64="$(base64 -w0 "$MV")"
+
+# Refresh only the base64 literal in template.ts, preserving the rest.
+node - "$APP_DIR/src/move-template/template.ts" "$B64" <<'NODE'
+const fs = require('node:fs');
+const [file, b64] = process.argv.slice(2);
+let s = fs.readFileSync(file, 'utf8');
+s = s.replace(/export const TEMPLATE_MODULE_B64 =\n\s*'[^']*';/, `export const TEMPLATE_MODULE_B64 =\n  '${b64}';`);
+fs.writeFileSync(file, s);
+console.log('updated TEMPLATE_MODULE_B64 (%d base64 chars)', b64.length);
+NODE
+
+echo "Done. Verify the DEFAULT_* constants in template.ts still match the source."

package/scripts/sync-template-src.sh

@@ -0,0 +1,36 @@
+#!/usr/bin/env bash
+set -euo pipefail
+# Copies the canonical sui-token-template text files into the app as a single
+# JSON module (src/template-src/files.json), so the downloadable-package
+# generator stays the single source of truth with the CLI generator. Re-run
+# whenever the template's source/docs/scripts change.
+
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+APP_DIR="$HERE/.."
+# Canonical template = the published @meddleware/sui-token-template package
+# (resolved from node_modules); override with SUI_TOKEN_TEMPLATE_DIR for a local checkout.
+T="${SUI_TOKEN_TEMPLATE_DIR:-$(cd "$APP_DIR" && node -e "process.stdout.write(require('path').dirname(require.resolve('@meddleware/sui-token-template/package.json')))" 2>/dev/null || true)}"
+if [[ -z "${T:-}" || ! -f "$T/Move.toml" ]]; then
+  echo "ERROR: sui-token-template sources not found. Install @meddleware/sui-token-template or set SUI_TOKEN_TEMPLATE_DIR to a local checkout." >&2
+  exit 1
+fi
+OUT="$APP_DIR/src/template-src/files.json"
+mkdir -p "$APP_DIR/src/template-src"
+
+node - "$T" "$OUT" <<'NODE'
+const fs = require('node:fs');
+const [T, OUT] = process.argv.slice(2);
+const read = (p) => fs.readFileSync(`${T}/${p}`, 'utf8');
+const files = {
+  'Move.toml': read('Move.toml'),
+  'source.move': read('sources/sui_token_template.move'),
+  'scripts/publish.sh': read('templates/publish.sh'),
+  '.gitignore': read('templates/.gitignore'),
+  'README.md': read('templates/README.md'),
+  'deployments.md': read('templates/deployments.md'),
+  'CLAUDE.md': read('templates/CLAUDE.md'),
+  'AGENTS.md': read('templates/AGENTS.md'),
+};
+fs.writeFileSync(OUT, JSON.stringify(files, null, 2) + '\n');
+console.log('wrote %s (%d files)', OUT, Object.keys(files).length);
+NODE

package/scripts/verify-bytecode.mjs

@@ -0,0 +1,49 @@
+// v7-safe patch via direct JSON mutation (deserialize -> mutate -> serialize),
+// bypassing update_identifiers/update_constants which cannot re-serialize v7.
+import { readFileSync } from 'node:fs';
+import { bcs } from '@mysten/bcs';
+import * as tpl from '@mysten/move-bytecode-template';
+
+const init = tpl.default ?? tpl.init;
+try { if (typeof init === 'function') await init(); } catch {}
+
+const orig = new Uint8Array(readFileSync(new URL('../src/move-template/sui_token_template.mv', import.meta.url)));
+const json = tpl.deserialize(orig);
+
+// 1) rename identifiers in place (indices preserved => all handle refs stay valid)
+const rename = { sui_token_template: 'mycoin', SUI_TOKEN_TEMPLATE: 'MYCOIN' };
+json.identifiers = json.identifiers.map((id) => rename[id] ?? id);
+
+// 2) patch constant_pool by matching the known default values
+const vec = (s) => Array.from(bcs.string().serialize(s).toBytes()); // uleb len + utf8 bytes (== vector<u8>)
+const patchByCurrent = (currentStr, newStr) => {
+  const cur = vec(currentStr);
+  const c = json.constant_pool.find((k) => JSON.stringify(k.data) === JSON.stringify(cur));
+  if (!c) throw new Error('constant not found: ' + currentStr);
+  c.data = vec(newStr);
+};
+// decimals (U8)
+json.constant_pool.find((c) => c.type_ === 'U8').data = [6];
+patchByCurrent('TEMPLATE_SYMBOL', 'MYC');
+patchByCurrent('TEMPLATE_NAME', 'My Coin');
+patchByCurrent('TEMPLATE_DESCRIPTION', 'A great coin');
+patchByCurrent('TEMPLATE_ICON_URL', 'https://x/y.svg');
+
+const out = new Uint8Array(tpl.serialize(json));
+const magic = Buffer.from(out.slice(0, 4)).toString('hex');
+console.log('patched bytes=%d magic=%s (orig=%d)', out.length, magic, orig.length);
+
+// re-deserialize the patched module to confirm structural validity
+const back = tpl.deserialize(out);
+const asStr = (d) => Buffer.from(d.slice(1)).toString('utf8');
+console.log('identifiers now include:', back.identifiers.filter((i) => ['mycoin','MYCOIN','sui_token_template','SUI_TOKEN_TEMPLATE'].includes(i)));
+console.log('constants now:', back.constant_pool.map((c) => c.type_==='U8'?`u8=${c.data[0]}`:asStr(c.data)));
+
+const ok = magic === 'a11ceb0b'
+  && back.identifiers.includes('mycoin') && back.identifiers.includes('MYCOIN')
+  && !back.identifiers.includes('sui_token_template') && !back.identifiers.includes('SUI_TOKEN_TEMPLATE')
+  && back.constant_pool.some((c) => c.type_==='U8' && c.data[0]===6)
+  && ['MYC','My Coin','A great coin','https://x/y.svg'].every((v) => back.constant_pool.some((c)=>c.type_!=='U8'&&asStr(c.data)===v))
+  && !back.constant_pool.some((c)=>c.type_!=='U8'&&asStr(c.data).startsWith('TEMPLATE_'));
+console.log('\nJSON-MUTATION ROUND-TRIP', ok ? 'PASS ✓' : 'FAIL ✗');
+process.exit(ok ? 0 : 1);

package/src/App.vue

@@ -0,0 +1,41 @@
+<script setup lang="ts">
+import WalletBar from './components/WalletBar.vue'
+import TokenDeployerView from './components/TokenDeployerView.vue'
+import ColorModeControl from './components/ColorModeControl.vue'
+import { useColorMode } from './composables/useColorMode.js'
+
+const { mode: colorMode, set: setColorMode } = useColorMode('system')
+</script>
+
+<template>
+  <a class="skip-link" href="#main-content">Skip to main content</a>
+  <main id="main-content">
+    <div class="theme-bar">
+      <ColorModeControl :model-value="colorMode" @update:model-value="setColorMode" />
+    </div>
+    <header v-once>
+      <h1>Create your own Sui coin</h1>
+      <p class="lede">
+        Deploy a coin on Sui directly from your browser. Your wallet signs and pays gas — nothing is
+        compiled or signed on a server — and you keep the full, verifiable source package.
+      </p>
+    </header>
+
+    <WalletBar />
+
+    <TokenDeployerView />
+
+    <footer v-once style="margin-top: 3rem; color: var(--muted); font-size: 0.9rem">
+      <p>
+        Client-side token deployment. This tool never takes custody of your token or keys. Symbol,
+        name, and decimals are permanent once published.
+      </p>
+      <p>
+        <strong>No endorsement.</strong> This is a neutral, self-serve tool. It does not review,
+        verify, or endorse any token created with it, nor its creator. A token existing here implies
+        nothing about its legitimacy or value — always do your own research before acquiring or
+        trading any coin.
+      </p>
+    </footer>
+  </main>
+</template>

package/src/__tests__/App.spec.js

@@ -0,0 +1,11 @@
+import { describe, it, expect } from 'vitest'
+
+import { mount } from '@vue/test-utils'
+import App from '../App.vue'
+
+describe('App', () => {
+  it('mounts renders properly', () => {
+    const wrapper = mount(App)
+    expect(wrapper.text()).toContain('You did it!')
+  })
+})

package/src/components/AppNotice.vue

@@ -0,0 +1,15 @@
+<script setup lang="ts">
+import { computed } from 'vue'
+
+const props = defineProps<{ type?: 'info' | 'error' | 'ok' }>()
+
+const role = computed(() => {
+  if (props.type === 'error') return 'alert'
+  if (props.type === 'ok') return 'status'
+  return undefined
+})
+</script>
+
+<template>
+  <p :class="['notice', type && type !== 'info' ? type : '']" :role="role"><slot /></p>
+</template>

package/src/components/ColorModeControl.vue

@@ -0,0 +1,81 @@
+<script setup lang="ts">
+import type { ColorMode } from '../composables/useColorMode'
+
+/**
+ * Presentational light/dark/system control. Owns no state — bind with `v-model`
+ * to external state (`useColorMode`). Vendored mirror of `@meddleware/ui`'s
+ * `ColorModeControl` for parity with the dashboard.
+ * TODO(unify): consume `@meddleware/ui` once published.
+ */
+withDefaults(
+  defineProps<{
+    modelValue: ColorMode
+    modes?: ColorMode[]
+  }>(),
+  { modes: () => ['light', 'dark', 'system'] },
+)
+
+defineEmits<{ 'update:modelValue': [ColorMode] }>()
+
+const LABEL: Record<ColorMode, string> = { light: 'Light', dark: 'Dark', system: 'System' }
+const GLYPH: Record<ColorMode, string> = { light: '☀', dark: '☾', system: '◐' }
+</script>
+
+<template>
+  <div class="mode-control" role="group" aria-label="Colour mode">
+    <button
+      v-for="m in modes"
+      :key="m"
+      type="button"
+      class="mode-control__btn"
+      :class="{ 'is-active': modelValue === m }"
+      :aria-pressed="modelValue === m"
+      :title="LABEL[m]"
+      @click="$emit('update:modelValue', m)"
+    >
+      <span aria-hidden="true">{{ GLYPH[m] }}</span>
+      <span class="mode-control__label">{{ LABEL[m] }}</span>
+    </button>
+  </div>
+</template>
+
+<style scoped>
+.mode-control {
+  display: inline-flex;
+  gap: 2px;
+  padding: 2px;
+  border: 1px solid var(--border);
+  border-radius: var(--radius);
+  background: var(--surface);
+}
+.mode-control__btn {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.35rem;
+  padding: 0.25rem 0.5rem;
+  border: 0;
+  border-radius: calc(var(--radius) - 3px);
+  background: transparent;
+  color: var(--text);
+  font: inherit;
+  font-size: 0.8rem;
+  cursor: pointer;
+  opacity: 0.7;
+}
+.mode-control__btn:hover {
+  opacity: 1;
+}
+.mode-control__btn.is-active {
+  opacity: 1;
+  background: var(--lift);
+}
+.mode-control__btn:focus-visible {
+  outline: 2px solid var(--accent);
+  outline-offset: 1px;
+}
+@media (max-width: 640px) {
+  .mode-control__label {
+    display: none;
+  }
+}
+</style>