@meddleware/token-deployer-ui 0.0.10 → 0.0.11

package/AGENTS.md

@@ -1,39 +0,0 @@
-# AGENTS.md — token-deployer-ui
-
-Browser app for permissionless Sui token deployment. See [CLAUDE.md](CLAUDE.md) for full architecture and invariant documentation.
-
-## Responsibilities
-
-- Bytecode patching of the pre-compiled Move template (`src/lib/template.ts`)
-- PTB construction for two-phase publish + finalize (`src/lib/buildPublishTx.ts`)
-- Source package generation and zip download (`src/lib/generatePackage.ts`)
-- Walrus icon upload via the operator relay (`@meddleware/sui-walrus`)
-- NFT-gate ownership check and access-proof attachment when `VITE_ACCESS_GATE_*` is configured
-
-## Non-responsibilities
-
-- On-chain accounting or financial enforcement — the contracts handle that
-- Any backend process; no server dependency
-- Custody of keys or user funds
-
-## Testing
-
-Three distinct categories — do not collapse:
-
-1. **Unit tests** (`npm test`, Vitest): validation, template patching, PTB builders, generatePackage, deploy orchestration.
-2. **Mocked-RPC e2e** (`npm run test:e2e`, Playwright, Chromium + Firefox): UI flow with fetch mock + mock wallet. Specs live in `integrations/token-deployer/e2e/`.
-3. **Real-chain e2e** (`npm run e2e:localnet|testnet|mainnet`): publishes a real token; **never run in automatic CI**; gated by `E2E_MAINNET_CONFIRM=1` on mainnet.
-
-## Key invariants
-
-- **Template parity:** `.mv` bytes and `files.json` must derive from the same `sui-token-template` commit. Verify with `npm run verify:template`; regenerate with `npm run regen:template && npm run sync:template`.
-- **Fee integrity:** treasury fee is split from gas inside the publish PTB. The vite prod build fails if `VITE_FEE_TREASURY` is unset (`assertTreasuryConfigured`).
-- **Injection safety:** validation in `validation.ts` + independent re-assertion in `generatePackage.ts` and `template.ts`. Never remove a downstream guard.
-- **No wallet-standard proxying:** Sui wallet objects must be wrapped in `markRaw()` before storing in Vue reactive state (private-field getters crash under Vue's Proxy).
-
-## Key paths
-
-- E2e specs: `e2e/` (mocked-RPC Playwright suite; `testDir` in `playwright.config.ts`)
-- Move template: `@meddleware/sui-token-template` (`optionalDependencies` in `package.json`; local checkout at `../sui-token-template/` if working from the workspace)
-- NFT gate client: `@meddleware/nft-gate-client` (`repos/nft-gate-client/` in the workspace)
-- CI workflow: `.github/workflows/token-deployer-e2e.yml`

package/CLAUDE.md

@@ -1,166 +0,0 @@
-# CLAUDE.md — `token-deployer-ui`
-
-`@meddleware/token-deployer-ui` is a Vue 3 + Vite browser app that lets any user deploy
-their own Sui coin fully client-side (their wallet signs + pays gas + a trivial fee to
-the operator treasury) and download a matching source package. It is the browser
-equivalent of the `@meddleware/sui-token-template` Move package (from which it derives
-its pre-compiled bytecode and source templates). See the repo-root
-[CLAUDE.md](../../../../CLAUDE.md) for context and [README.md](README.md) for the
-user/operator guide.
-
-## Dual app + library pattern
-
-This package ships as both a **standalone SPA** and an **embeddable library component**:
-
-- **Standalone SPA** (`npm run dev` / `npm run build`): `src/main.ts` mounts `App.vue`, which
-  is a thin shell that renders `WalletBar` + `TokenDeployerView`. All deploy logic lives in
-  `TokenDeployerView` — `App.vue` contains no state.
-- **Library component** (consumed by `@meddleware/dashboard`): `src/index.ts` exports
-  `TokenDeployerView`, which is imported via the `exports["."]` entry in `package.json`. The
-  dashboard's Vite build resolves TypeScript source directly — no separate lib build step.
-  The dashboard supplies the wallet connection via `@meddleware/wallet-adapter`'s shared
-  module singleton; `TokenDeployerView` reads `useWallet()` / `useNetwork()` from it and is
-  wrapped in `WalletGuard` so it shows a connect prompt when no wallet is connected.
-
-The pattern mirrors `@meddleware/walrus-ui`, `@meddleware/seal-ui`, and
-`@meddleware/access-gate-ui`. See the dashboard `CLAUDE.md` for the invariant: every tool view
-must **not** render its own wallet bar, header, or footer when embedded.
-
-**Deploy executor note:** The wallet-adapter `Executor` only returns `{ digest }` — insufficient
-for the deploy flow, which requires the created objects to extract the packageId, coin type,
-TreasuryCap, MetadataCap and the Currency ref. `src/lib/deployExecutor.ts` uses the wallet-adapter
-singleton for wallet connection state, but executes through the app's own `SuiGrpcClient`
-(`getReadClient`) with `include: { effects, objectTypes }`, and `toSuiTxResult` (`src/lib/deploy.ts`)
-maps `effects.changedObjects` onto the `objectChanges` shape `extractPublishResult` reads. This is
-intentional — do not replace it with the wallet-adapter `buildExecutor`.
-
-**gRPC only.** Public fullnodes have deprecated JSON-RPC; every chain call (app and `scripts/`)
-goes through `SuiGrpcClient`, and `VITE_RPC_*` / `E2E_RPC` must be gRPC(-web) endpoints. Do not
-reintroduce `@mysten/sui/jsonRpc`. gRPC may render framework addresses in long form
-(`0x000…02::coin::…`) — match types tolerantly. E2E builds (`VITE_E2E=1`) inject a stub client via
-`setReadClient` because gRPC-web responses cannot be faked at the `fetch` layer.
-
-## Architecture (the money/parity paths matter most)
-
-- **Bytecode patching** — [src/lib/template.ts](src/lib/template.ts) deserialises
-  one pre-compiled template module ([src/move-template/](src/move-template/)),
-  renames the module/OTW-struct identifiers in place, and overwrites five DISTINCT
-  named constants (decimals, symbol, name, description, iconUrl), then re-serialises.
-  Binary format v7 cannot be round-tripped by `update_identifiers`/`update_constants`
-  ("missing field version"); `deserialize`→mutate JSON→`serialize` is the path.
-- **Two-phase publish** — TreasuryCap/MetadataCap are created in `init()` and sent
-  to the sender, so they are NOT `tx.publish` results. Publish PTB
-  ([src/lib/buildPublishTx.ts](src/lib/buildPublishTx.ts)) = publish + UpgradeCap
-  policy + fee split from gas. A finalize PTB (only when needed —
-  `needsFinalize`) mints supply and applies supply/metadata policies.
-- **Orchestration** — [src/lib/deploy.ts](src/lib/deploy.ts) sequences patch →
-  publish → wait → (finalize) via an injectable `Executor` (so it is unit-testable;
-  the real one is built from the wallet in
-  [src/lib/deployExecutor.ts](src/lib/deployExecutor.ts)).
-- **Package generation** — [src/lib/generatePackage.ts](src/lib/generatePackage.ts)
-  substitutes the same inputs into the canonical template text
-  ([src/template-src/files.json](src/template-src/files.json)) and zips it.
-
-## Invariants (do not break)
-
-1. **Bytecode ↔ source parity.** The shipped `.mv` and `files.json` must both derive
-   from the same `sui-token-template` commit. Enforced by
-   [tests/templateArtifact.test.ts](tests/templateArtifact.test.ts) (defaults present
-   in the `.mv`) and [tests/templateParity.test.ts](tests/templateParity.test.ts)
-   (`files.json` == canonical sources). After changing the template run
-   `npm run regen:template && npm run sync:template && npm run verify:template`.
-2. **Injection safety is layered.** `validation.ts` gates the form, but
-   `generatePackage.ts` (`assertSafeConfig`) and `template.ts` (`patchVecConstant`)
-   re-assert `SAFE_TEXT`/`MOVE_IDENT`/length/keyword rules independently. Never
-   remove a downstream guard on the assumption the form already checked.
-3. **Fee integrity.** The fee is split from `tx.gas` to the config treasury inside
-   the publish PTB. The vite production build fails on a zero-address treasury
-   (`assertTreasuryConfigured` in [vite.config.ts](vite.config.ts)).
-4. **No backend / no custody / no endorsement.** Keep all financial truth on-chain;
-   the app only previews and constructs transactions. Do not add a server dependency.
-5. **Lazy heavy deps.** `@mysten/walrus` and `@mysten/move-bytecode-template` (wasm)
-   are loaded on demand (dynamic import / `?url`). Keep the shared `ICON_EPOCHS`
-   constant in [src/lib/walrus-constants.ts](src/lib/walrus-constants.ts) so the
-   eagerly-rendered widget doesn't pull the Walrus chunk into the main bundle.
-
-## Walrus icons
-
-Icons are RAW blobs (not quilts) so `GET /v1/blobs/<id>` renders the exact image;
-an upload relay is required from browsers. `ICON_EPOCHS = 53` (Walrus's
-`max_epochs_ahead`; a larger single reservation aborts). Longer retention needs
-`extendBlobLifetime` (no keeper — operator step). Verified on testnet via
-`scripts/e2e-walrus-browser.mjs`.
-
-## Walrus relay economics & deferred decisions
-
-The icon upload can charge users per upload via Walrus's **native relay tip** —
-no custom backend. This section records the decisions and their rationale so they
-survive independently of any planning doc. (Verified against walrus SDK 1.1.7 and
-the relay source `crates/walrus-upload-relay`.)
-
-- **Native `linear` tip is enforced on-chain — chosen for launch.** `register`
-  bakes an auth payload `blobDigest ‖ SHA256(nonce) ‖ size` **plus** a tip transfer
-  to the operator's address into the *same* tx the user signs. The relay verifies
-  that on-chain tip (amount checked against the *actual received body length*, bound
-  by nonce/size) **before** the expensive storage-node fan-out. Stripping or lowering
-  the tip → the relay rejects the upload; no operator cost. This refutes an earlier
-  finding that the tip "could be removed" — it is enforced now.
-- **The relay does no on-chain tx** (README L27) → the operator never pays gas.
-  Storage (WAL) is paid by the **user** at registration; read/serve bandwidth is the
-  separate public **aggregator**. The tip only needs to cover the relay's
-  ingress + fan-out egress + RPC lookups.
-- **NFT / usage-ticket per-wallet gating is IMPLEMENTED (2026-08-05)** via the standalone
-  `nft-gate` project: an `nft-gate` gateway fronts the operator relay and admits only
-  holders of an `access_gate` NFT. The app gates the operator-relay option on ownership
-  (`useAccessGate` → `listOwnedObjects`), offers a permissionless purchase CTA, and attaches
-  a wallet-signed access proof (`sui:signPersonalMessage` → `uploadRelayAuthToken`) when the
-  operator relay is used. Unset `VITE_ACCESS_GATE_*` → no gating (unchanged behaviour). The
-  tip and the NFT are **independent levers** (tip = per-upload cost; NFT = access/abuse).
-- **Per-wallet rate limiting** — previously rejected at the edge (which can't resolve the
-  wallet), it is now enforced by the `nft-gate` gateway *after* verification. Keep a per-IP
-  edge limit as a coarse pre-auth control.
-- **Autonomous price-fed tip tuner DEFERRED** — the relay reads its tip only at
-  **startup** (no hot-reload/SIGHUP), so adjusting = rewrite YAML + restart. That's a
-  keeper with a liveness dependency. For launch use a **single static tip with a fat
-  SUI-denominated margin**: icons are cents-scale, so a large margin costs users
-  nothing and absorbs *both* SUI/fiat drift and storage-node retry amplification in
-  one lever. A later tuner (read Pyth on-chain, clamp to `[min,max]`, rolling-restart)
-  must stay under the client `max` headroom below.
-- **Client `WALRUS_MAX_TIP_MIST` ↔ relay-tip COUPLING** — the SDK **throws** if the
-  relay's tip exceeds this client ceiling ([config.ts](src/config.ts) documents it).
-  Set it with generous headroom above the relay tip; raising the relay tip past it
-  needs a frontend redeploy.
-- **Client-side icon size/type limits are UX only — NOT security.** The authoritative
-  cap is a hard request-body limit at the edge (the relay otherwise buffers up to a
-  hardcoded 1 GiB body into RAM *before* the tip check — the one real abuse vector:
-  ingress/RAM/RPC on rejected uploads). See the relay runbook in [README.md](README.md).
-
-## Testing
-
-Three distinct categories — do not collapse them (repo convention):
-
-- **Pure unit (Vitest, `npm test`):** validation, licenses, github, template patch, PTB
-  builders, generatePackage, deploy orchestration, provenance/parity.
-- **Mocked-RPC UI e2e (Playwright, `npm run test:e2e`):** wallet/form/publish flow against the
-  `VITE_E2E` fetch mock + mock wallet in [src/main.ts](src/main.ts) (tree-shaken from prod). Specs
-  live in `e2e/` (`playwright.config.ts` builds with `VITE_E2E=1` + previews). **Migrated from Cypress
-  2026-08-07** (Cypress dropped — it exits SIGILL in the sandbox; Playwright is the one browser-e2e
-  tool now, shared with the real-chain harness). Run `npm run e2e:install` once, then `npm run test:e2e`.
-  Cannot reach real confirmation, the result panel, or the source download — those need a real chain
-  (see below). This is the automatic gate alongside `npm test`.
-- **Real-chain deploy e2e (Playwright, NOT in `npm test`):** `scripts/e2e-deploy.mjs` — the
-  single network-parametrized harness (`E2E_NETWORK=localnet|testnet|mainnet`) driven by
-  `npm run e2e:localnet|e2e:testnet|e2e:mainnet`. Injects a wallet-standard wallet backed by a
-  node keypair, does a REAL publish, waits for real confirmation, checks the result panel,
-  downloads the zip, and verifies coin type + fee on-chain. Two axes are distinct: `E2E_NETWORK`
-  (physical chain) vs the app network (testnet/mainnet UI mode; localnet borrows testnet mode with
-  the RPC pointed at the local node). Mainnet is fail-safe: aborts unless `E2E_MAINNET_CONFIRM=1`.
-  `scripts/e2e-browser.mjs` is a thin `E2E_NETWORK=localnet` wrapper; `scripts/e2e-walrus-browser.mjs`
-  (testnet icon upload) uses the E2E-only `window.__getSuiClient` hook in `src/main.ts`. Testnet/
-  mainnet are **manual only** — never in automatic CI (see the README launch runbook). The
-  `.github/workflows/token-deployer-e2e.yml` `workflow_dispatch` job is the gated manual runner.
-
-## Docs
-
-TSDoc on every exported symbol in `src/lib`, `src/composables`, and `src/config.ts`;
-`npm run docs` renders a TypeDoc site to `docs/api/` (config: [typedoc.json](typedoc.json)).

package/Dockerfile

@@ -1,96 +0,0 @@
-# ── build stage ───────────────────────────────────────────────────────────────
-# Standalone build — the Docker context is this repo root. All @meddleware/*
-# dependencies resolve from the npm registry, so they must be published before
-# this image is built.
-#
-#   docker build \
-#     --build-arg VITE_NETWORK=testnet \
-#     --build-arg VITE_FEE_TREASURY_TESTNET=0x... \
-#     --build-arg VITE_FEE_TREASURY_MAINNET=0x... \
-#     -t token-deployer-ui:<tag> .
-#
-# Build args (VITE_* are baked into the static bundle at build time):
-#   VITE_NETWORK                        — "testnet" | "mainnet"  (default: testnet)
-#   VITE_FEE_TREASURY_TESTNET           — operator treasury for testnet (REQUIRED — build fails without it)
-#   VITE_FEE_TREASURY_MAINNET           — operator treasury for mainnet (REQUIRED — build fails without it)
-#   VITE_FEE_MIST                       — fee in MIST (optional, default 1000000000)
-#   VITE_WALRUS_RELAY_TESTNET           — operator relay URL for testnet (optional)
-#   VITE_WALRUS_RELAY_MAINNET           — operator relay URL for mainnet (optional)
-#   VITE_WALRUS_RPC_TESTNET             — gRPC fullnode for Walrus testnet (optional)
-#   VITE_WALRUS_RPC_MAINNET             — gRPC fullnode for Walrus mainnet (optional)
-#   VITE_RPC_TESTNET / VITE_RPC_MAINNET — override gRPC fullnode URLs (optional)
-#   VITE_ACCESS_GATE_ID_{NET}           — operator's Gate shared object ID (optional)
-#   VITE_ACCESS_GATE_NFT_TYPE_{NET}     — access NFT type (optional)
-#   VITE_ACCESS_GATE_SOULBOUND_{NET}    — "true" if soulbound (optional)
-#   VITE_ACCESS_GATE_PRICE_MIST_{NET}   — purchase price in MIST (optional)
-#   VITE_WALRUS_MAX_TIP_MIST            — max relay tip cap in MIST (optional)
-#   VITE_PUBLIC_URL                     — canonical origin for OG/JSON-LD (optional)
-#
-# .env.production is gitignored — treasury addresses must be supplied via build args.
-FROM node:24-slim AS build
-
-WORKDIR /app
-
-COPY package.json package-lock.json ./
-
-RUN npm ci
-
-COPY . .
-
-ARG VITE_NETWORK=testnet
-ARG VITE_FEE_TREASURY_TESTNET
-ARG VITE_FEE_TREASURY_MAINNET
-ARG VITE_FEE_MIST
-ARG VITE_WALRUS_RELAY_TESTNET
-ARG VITE_WALRUS_RELAY_MAINNET
-ARG VITE_WALRUS_RPC_TESTNET
-ARG VITE_WALRUS_RPC_MAINNET
-ARG VITE_RPC_TESTNET
-ARG VITE_RPC_MAINNET
-ARG VITE_ACCESS_GATE_ID_TESTNET
-ARG VITE_ACCESS_GATE_NFT_TYPE_TESTNET
-ARG VITE_ACCESS_GATE_SOULBOUND_TESTNET
-ARG VITE_ACCESS_GATE_PRICE_MIST_TESTNET
-ARG VITE_ACCESS_GATE_ID_MAINNET
-ARG VITE_ACCESS_GATE_NFT_TYPE_MAINNET
-ARG VITE_ACCESS_GATE_SOULBOUND_MAINNET
-ARG VITE_ACCESS_GATE_PRICE_MIST_MAINNET
-ARG VITE_WALRUS_MAX_TIP_MIST
-ARG VITE_PUBLIC_URL
-
-ENV VITE_NETWORK=${VITE_NETWORK} \
-    VITE_FEE_TREASURY_TESTNET=${VITE_FEE_TREASURY_TESTNET} \
-    VITE_FEE_TREASURY_MAINNET=${VITE_FEE_TREASURY_MAINNET} \
-    VITE_FEE_MIST=${VITE_FEE_MIST} \
-    VITE_WALRUS_RELAY_TESTNET=${VITE_WALRUS_RELAY_TESTNET} \
-    VITE_WALRUS_RELAY_MAINNET=${VITE_WALRUS_RELAY_MAINNET} \
-    VITE_WALRUS_RPC_TESTNET=${VITE_WALRUS_RPC_TESTNET} \
-    VITE_WALRUS_RPC_MAINNET=${VITE_WALRUS_RPC_MAINNET} \
-    VITE_RPC_TESTNET=${VITE_RPC_TESTNET} \
-    VITE_RPC_MAINNET=${VITE_RPC_MAINNET} \
-    VITE_ACCESS_GATE_ID_TESTNET=${VITE_ACCESS_GATE_ID_TESTNET} \
-    VITE_ACCESS_GATE_NFT_TYPE_TESTNET=${VITE_ACCESS_GATE_NFT_TYPE_TESTNET} \
-    VITE_ACCESS_GATE_SOULBOUND_TESTNET=${VITE_ACCESS_GATE_SOULBOUND_TESTNET} \
-    VITE_ACCESS_GATE_PRICE_MIST_TESTNET=${VITE_ACCESS_GATE_PRICE_MIST_TESTNET} \
-    VITE_ACCESS_GATE_ID_MAINNET=${VITE_ACCESS_GATE_ID_MAINNET} \
-    VITE_ACCESS_GATE_NFT_TYPE_MAINNET=${VITE_ACCESS_GATE_NFT_TYPE_MAINNET} \
-    VITE_ACCESS_GATE_SOULBOUND_MAINNET=${VITE_ACCESS_GATE_SOULBOUND_MAINNET} \
-    VITE_ACCESS_GATE_PRICE_MIST_MAINNET=${VITE_ACCESS_GATE_PRICE_MIST_MAINNET} \
-    VITE_WALRUS_MAX_TIP_MIST=${VITE_WALRUS_MAX_TIP_MIST} \
-    VITE_PUBLIC_URL=${VITE_PUBLIC_URL}
-
-RUN npm run build
-
-# ── runtime stage ─────────────────────────────────────────────────────────────
-# static-server is a minimal Go binary image — no shell, no package manager.
-# SPA_FALLBACK serves index.html for any extensionless path (Vue Router history mode).
-# CACHE_IMMUTABLE_PREFIX matches the /assets/ directory Vite emits with content hashes.
-FROM quay.io/meddleware-org/static-server:0.1.1
-
-COPY --from=build /app/dist /app/public
-
-ENV SERVE_DIR=/app/public \
-    SPA_FALLBACK=true \
-    CACHE_IMMUTABLE_PREFIX=/assets/
-
-EXPOSE 8080

package/eslint.config.ts

@@ -1,63 +0,0 @@
-import { globalIgnores } from 'eslint/config'
-import { defineConfigWithVueTs, vueTsConfigs } from '@vue/eslint-config-typescript'
-import pluginVue from 'eslint-plugin-vue'
-import pluginA11y from 'eslint-plugin-vuejs-accessibility'
-
-// Flat ESLint config: layers vue-a11y (WAI-ARIA linting for templates) on top of
-// the standard Vue + TypeScript recommended rules, so accessibility regressions
-// are caught in CI.
-export default defineConfigWithVueTs(
-  {
-    name: 'token-deployer-ui/files-to-lint',
-    files: ['**/*.{vue,ts,mts,tsx}'],
-  },
-
-  globalIgnores(['**/dist/**', '**/coverage/**', '**/*.d.ts', 'docs/api/**']),
-
-  ...pluginVue.configs['flat/essential'],
-  ...pluginA11y.configs['flat/recommended'],
-  vueTsConfigs.recommended,
-
-  {
-    name: 'token-deployer-ui/overrides',
-    rules: {
-      // Accept both valid label-association patterns: a label wrapping its
-      // control (nesting) or a label[for] pointing at a control[id]. UiSelect renders a native
-      // <select>, so a label nesting it is labelling a control.
-      'vuejs-accessibility/label-has-for': [
-        'error',
-        { required: { some: ['nesting', 'id'] }, controlComponents: ['UiSelect'] },
-      ],
-      // UiFormField renders the <label for> for the control in its default slot.
-      'vuejs-accessibility/form-control-has-label': ['error', { labelComponents: ['UiFormField'] }],
-      // role="list" on styled lists is a deliberate Safari/VoiceOver workaround: WebKit drops
-      // list semantics when list-style is removed, so the explicit role stays.
-      'vuejs-accessibility/no-redundant-roles': 'off',
-      // Underscore-prefixed args/vars are an intentional "unused" marker.
-      '@typescript-eslint/no-unused-vars': [
-        'error',
-        { argsIgnorePattern: '^_', varsIgnorePattern: '^_' },
-      ],
-    },
-  },
-
-  {
-    // Tests use deliberately loose typing for mocks/stubs.
-    name: 'token-deployer-ui/test-overrides',
-    files: ['**/*.{test,spec}.{ts,tsx}', 'tests/**', 'e2e/**'],
-    rules: {
-      '@typescript-eslint/no-explicit-any': 'off',
-    },
-  },
-
-  {
-    // ConfigForm intentionally edits a parent-owned reactive FormModel in place
-    // (the parent passes `:form` and reads the same object back). Converting to
-    // defineModel is deferred; the in-place mutation is the current contract.
-    name: 'token-deployer-ui/config-form',
-    files: ['src/components/ConfigForm.vue'],
-    rules: {
-      'vue/no-mutating-props': 'off',
-    },
-  },
-)

package/index.html

@@ -1,22 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-  <head>
-    <meta charset="UTF-8">
-    <link rel="icon" href="/favicon.svg" type="image/svg+xml">
-    <link rel="icon" href="/favicon.ico" sizes="any">
-    <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title>Token Deployer · MeddleWare</title>
-    <meta name="description" content="Create your own Sui coin in the browser — your wallet signs and pays gas, nothing is compiled or signed on a server, and you keep the full, verifiable source package.">
-    <link rel="canonical" href="%VITE_PUBLIC_URL%/">
-    <meta property="og:type" content="website">
-    <meta property="og:title" content="Token Deployer · MeddleWare">
-    <meta property="og:description" content="Create your own Sui coin in the browser — no server, no custody, full source included.">
-    <meta property="og:url" content="%VITE_PUBLIC_URL%/">
-    <meta property="og:image" content="%VITE_PUBLIC_URL%/og-image.png">
-    <meta name="twitter:card" content="summary_large_image">
-  </head>
-  <body>
-    <div id="app"></div>
-    <script type="module" src="/src/main.ts"></script>
-  </body>
-</html>

package/playwright.config.ts

@@ -1,30 +0,0 @@
-import { defineConfig, devices } from '@playwright/test'
-
-// Mocked-RPC UI e2e. Standardised on Playwright (robust; replaces the former
-// Cypress mocked suite, which exits SIGILL in the sandbox). The app is built with
-// VITE_E2E=1 so main.ts registers the mock wallet + fetch mock (tree-shaken from
-// prod). Real-chain e2e stays in scripts/e2e-deploy.mjs (npm run e2e:localnet…).
-const PORT = 4173
-
-export default defineConfig({
-  testDir: './e2e',
-  fullyParallel: true,
-  forbidOnly: !!process.env.CI,
-  retries: process.env.CI ? 2 : 0,
-  reporter: 'list',
-  use: {
-    baseURL: `http://localhost:${PORT}`,
-    viewport: { width: 1280, height: 800 },
-    trace: 'on-first-retry',
-  },
-  webServer: {
-    command: `npm run build:e2e && npm run preview -- --port ${PORT} --strictPort`,
-    url: `http://localhost:${PORT}/`,
-    reuseExistingServer: !process.env.CI,
-    timeout: 180_000,
-  },
-  projects: [
-    { name: 'chromium', use: { ...devices['Desktop Chrome'] } },
-    { name: 'firefox', use: { ...devices['Desktop Firefox'] } },
-  ],
-})

package/postcss.config.js

@@ -1,8 +0,0 @@
-// Autoprefixer runs over the library's shipped CSS (base.css) during `vite build`,
-// using the `browserslist` field in package.json as the target. Consumers therefore
-// receive vendor-prefixed component CSS without needing their own prefixing step.
-import autoprefixer from 'autoprefixer'
-
-export default {
-  plugins: [autoprefixer()],
-}

package/public/CNAME

@@ -1 +0,0 @@
-sui-token-deployer.meddleware.co.uk

package/public/_headers

@@ -1,12 +0,0 @@
-# Cloudflare Pages headers. Security baseline; connect-src stays broad because
-# wallet extensions, Walrus relays, and per-network Sui RPCs vary.
-/*
-  X-Content-Type-Options: nosniff
-  Referrer-Policy: strict-origin-when-cross-origin
-  X-Frame-Options: DENY
-  Permissions-Policy: geolocation=(), camera=(), microphone=(), payment=()
-  Content-Security-Policy: default-src 'self'; script-src 'self' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self'; connect-src 'self' https: wss:; object-src 'none'; base-uri 'self'; frame-ancestors 'none'
-
-# Long-cache hashed build assets.
-/assets/*
-  Cache-Control: public, max-age=31536000, immutable

package/public/_redirects

@@ -1 +0,0 @@
-/*  /index.html  200

package/public/favicon.svg

@@ -1,5 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32" role="img" aria-label="Token Deployer">
-  <circle cx="16" cy="16" r="15" fill="#2f6feb"/>
-  <circle cx="16" cy="16" r="15" fill="none" stroke="#1b4fc0" stroke-width="2"/>
-  <text x="16" y="21" font-family="system-ui, sans-serif" font-size="14" font-weight="700" fill="#fff" text-anchor="middle">S</text>
-</svg>

package/public/robots.txt

@@ -1,3 +0,0 @@
-User-agent: *
-Allow: /
-Sitemap: https://sui-token-deployer.meddleware.co.uk/sitemap.xml

package/public/sitemap.xml

@@ -1,8 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
-  <url>
-    <loc>https://sui-token-deployer.meddleware.co.uk/</loc>
-    <changefreq>monthly</changefreq>
-    <priority>1.0</priority>
-  </url>
-</urlset>

package/scripts/e2e-browser.mjs

@@ -1,15 +0,0 @@
-// Thin wrapper: localnet deploy e2e. The real implementation is the network-parametrized
-// `e2e-deploy.mjs`; this just pins E2E_NETWORK=localnet so the historical entry point and its
-// localnet defaults (fresh keypair + faucet, 0xfee… treasury, 1 SUI fee assertion) keep working.
-//
-// Prereq (as before): build the app with the testnet RPC pointed at the local node and a
-// treasury set, then serve dist on APP_URL (default http://localhost:4173):
-//   VITE_RPC_TESTNET=http://127.0.0.1:9000 VITE_FEE_TREASURY_TESTNET=<addr> vite build
-//
-// Equivalent to `E2E_NETWORK=localnet node scripts/e2e-deploy.mjs` — or just `npm run e2e:localnet`.
-
-process.env.E2E_NETWORK = 'localnet'
-// Preserve the legacy FEE_ADDR override name for anyone still setting it.
-if (process.env.FEE_ADDR && !process.env.E2E_FEE_ADDR) process.env.E2E_FEE_ADDR = process.env.FEE_ADDR
-
-await import('./e2e-deploy.mjs')