@meddleware/token-deployer-ui 0.0.10 → 0.0.12

package/tests/validation.test.ts

@@ -1,117 +0,0 @@
-import { describe, it, expect } from 'vitest'
-import {
-  validateForm,
-  deriveStructName,
-  parseSupply,
-  isValid,
-  validateIdentifier,
-  hasAllowedIconScheme,
-  MAX_IDENT_LEN,
-} from '../src/lib/validation.js'
-
-const good = {
-  packageName: 'my_token',
-  moduleName: 'mytoken',
-  symbol: 'MTK',
-  name: 'My Token',
-  description: 'A friendly token',
-  iconUrl: 'https://example.com/i.png',
-  decimals: 9,
-  initialSupply: '1000000',
-  recipient: '',
-}
-
-describe('deriveStructName', () => {
-  it('uppercases the module name (Sui OTW rule)', () => {
-    expect(deriveStructName('mwsui')).toBe('MWSUI')
-    expect(deriveStructName('sui_token_template')).toBe('SUI_TOKEN_TEMPLATE')
-  })
-})
-
-describe('validateForm', () => {
-  it('accepts a well-formed config', () => {
-    expect(isValid(validateForm(good))).toBe(true)
-  })
-
-  it('rejects invalid identifiers', () => {
-    expect(validateForm({ ...good, packageName: 'My-Token' }).packageName).toBeTruthy()
-    expect(validateForm({ ...good, moduleName: '1coin' }).moduleName).toBeTruthy()
-  })
-
-  it('rejects unsafe characters that would break the Move byte-string', () => {
-    expect(validateForm({ ...good, symbol: 'A"B' }).symbol).toBeTruthy()
-    expect(validateForm({ ...good, name: 'back\\slash' }).name).toBeTruthy()
-  })
-
-  it('requires symbol and name', () => {
-    expect(validateForm({ ...good, symbol: '' }).symbol).toBeTruthy()
-    expect(validateForm({ ...good, name: '   ' }).name).toBeTruthy()
-  })
-
-  it('bounds decimals to 0..18', () => {
-    expect(validateForm({ ...good, decimals: 19 }).decimals).toBeTruthy()
-    expect(validateForm({ ...good, decimals: -1 }).decimals).toBeTruthy()
-    expect(validateForm({ ...good, decimals: 6 }).decimals).toBeUndefined()
-  })
-
-  it('rejects supply that overflows u64 for the decimals', () => {
-    expect(validateForm({ ...good, initialSupply: '99999999999999', decimals: 18 }).initialSupply).toBeTruthy()
-    expect(validateForm({ ...good, initialSupply: 'abc' }).initialSupply).toBeTruthy()
-    expect(validateForm({ ...good, initialSupply: '' }).initialSupply).toBeUndefined()
-  })
-
-  it('validates an optional recipient address', () => {
-    expect(validateForm({ ...good, recipient: '0x123' }).recipient).toBeTruthy()
-    expect(validateForm({ ...good, recipient: '0x' + 'a'.repeat(64) }).recipient).toBeUndefined()
-  })
-
-  it('rejects Move reserved words as package/module names', () => {
-    expect(validateForm({ ...good, packageName: 'module' }).packageName).toBeTruthy()
-    expect(validateForm({ ...good, moduleName: 'struct' }).moduleName).toBeTruthy()
-    expect(validateForm({ ...good, moduleName: 'public' }).moduleName).toBeTruthy()
-  })
-
-  it('rejects over-length identifiers', () => {
-    const tooLong = 'a'.repeat(MAX_IDENT_LEN + 1)
-    expect(validateForm({ ...good, packageName: tooLong }).packageName).toBeTruthy()
-    expect(validateForm({ ...good, moduleName: 'a'.repeat(MAX_IDENT_LEN) }).moduleName).toBeUndefined()
-  })
-
-  it('rejects a whitespace-only symbol even though it contains "safe" chars', () => {
-    expect(validateForm({ ...good, symbol: '   ' }).symbol).toBeTruthy()
-  })
-})
-
-describe('iconUrl scheme allowlist', () => {
-  it('accepts https:// and ipfs:// (and empty = no icon)', () => {
-    expect(isValid(validateForm({ ...good, iconUrl: 'https://x.io/a.png' }))).toBe(true)
-    expect(isValid(validateForm({ ...good, iconUrl: 'ipfs://bafy.../a.png' }))).toBe(true)
-    expect(isValid(validateForm({ ...good, iconUrl: '' }))).toBe(true)
-    expect(hasAllowedIconScheme('HTTPS://X.IO/a.png')).toBe(true) // case-insensitive
-  })
-
-  it('rejects javascript:, data:, and insecure http:', () => {
-    expect(validateForm({ ...good, iconUrl: 'javascript:alert(1)' }).iconUrl).toBeTruthy()
-    expect(validateForm({ ...good, iconUrl: 'data:image/png;base64,AAAA' }).iconUrl).toBeTruthy()
-    expect(validateForm({ ...good, iconUrl: 'http://x.io/a.png' }).iconUrl).toBeTruthy()
-    expect(hasAllowedIconScheme('javascript:alert(1)')).toBe(false)
-  })
-})
-
-describe('validateIdentifier', () => {
-  it('accepts a valid identifier and rejects shape/keyword/length violations', () => {
-    expect(validateIdentifier('my_token')).toBeNull()
-    expect(validateIdentifier('My-Token')).toBeTruthy()
-    expect(validateIdentifier('const')).toBeTruthy()
-    expect(validateIdentifier('a'.repeat(MAX_IDENT_LEN + 1))).toBeTruthy()
-  })
-})
-
-describe('parseSupply', () => {
-  it('parses whole numbers and blank', () => {
-    expect(parseSupply('')).toBe(0n)
-    expect(parseSupply('  42 ')).toBe(42n)
-    expect(parseSupply('1.5')).toBeNull()
-    expect(parseSupply('-1')).toBeNull()
-  })
-})

package/tests/walrusUpload.test.ts

@@ -1,93 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest'
-
-// Capture the options handed to `walrus(...)` and the SuiGrpcClient so we can
-// assert the relay host + tip guard are wired, without a live network. `vi.mock`
-// is hoisted, so the mock fns are declared via `vi.hoisted`.
-const { walrusMock, grpcCtor, extendMock } = vi.hoisted(() => {
-  const extendMock = vi.fn<(ext: unknown) => { extendedWith: unknown }>((ext: unknown) => ({ extendedWith: ext }))
-  return {
-    walrusMock: vi.fn<(_cfg?: unknown) => { __walrusExtension: boolean }>((_cfg?: unknown) => ({ __walrusExtension: true })),
-    extendMock,
-    // `src/lib/walrus.ts` calls `new SuiGrpcClient(...)`, so the mock must be newable — an
-    // arrow function is not a constructor (`new arrowFn()` throws). Use a function expression.
-    grpcCtor: vi.fn<() => { $extend: typeof extendMock }>(function () {
-      return { $extend: extendMock }
-    }),
-  }
-})
-vi.mock('@mysten/walrus', () => ({ walrus: walrusMock }))
-vi.mock('@mysten/sui/grpc', () => ({ SuiGrpcClient: grpcCtor }))
-
-import { createWalrusClient, walrusBlobUrl } from '../src/lib/walrus.js'
-import {
-  WALRUS_RELAY_HOSTS,
-  WALRUS_MAX_TIP_MIST,
-  validateIconFile,
-  ICON_MAX_BYTES,
-} from '../src/config.js'
-
-type WalrusCfg = { wasmUrl?: string; uploadRelay: { host: string; sendTip: { max: number } } }
-
-describe('createWalrusClient', () => {
-  beforeEach(() => {
-    walrusMock.mockClear()
-    grpcCtor.mockClear()
-    extendMock.mockClear()
-  })
-
-  it('defaults to the configured relay host + max-tip guard', () => {
-    createWalrusClient('testnet', 'wasm-url')
-    expect(walrusMock).toHaveBeenCalledTimes(1)
-    const cfg = walrusMock.mock.calls[0][0] as unknown as WalrusCfg
-    expect(cfg.uploadRelay.host).toBe(WALRUS_RELAY_HOSTS.testnet)
-    expect(cfg.uploadRelay.sendTip.max).toBe(Number(WALRUS_MAX_TIP_MIST))
-    // The bare-string arg is treated as the WASM URL (back-compat).
-    expect(cfg.wasmUrl).toBe('wasm-url')
-  })
-
-  it('honours an explicit relay host + max-tip override', () => {
-    createWalrusClient('mainnet', {
-      uploadRelayHost: 'https://my.relay.example',
-      uploadRelayMaxTipMist: 123n,
-    })
-    const cfg = walrusMock.mock.calls[0][0] as unknown as WalrusCfg
-    expect(cfg.uploadRelay.host).toBe('https://my.relay.example')
-    expect(cfg.uploadRelay.sendTip.max).toBe(123)
-  })
-
-  it('never sets a tip address/kind (the relay declares those via /v1/tip-config)', () => {
-    createWalrusClient('testnet')
-    const cfg = walrusMock.mock.calls[0][0] as unknown as WalrusCfg & {
-      uploadRelay: { sendTip: Record<string, unknown> }
-    }
-    expect(cfg.uploadRelay.sendTip).not.toHaveProperty('address')
-    expect(cfg.uploadRelay.sendTip).not.toHaveProperty('kind')
-  })
-})
-
-describe('walrusBlobUrl', () => {
-  it('points at the network aggregator raw-blob route', () => {
-    expect(walrusBlobUrl('testnet', 'BLOB123')).toContain('/v1/blobs/BLOB123')
-  })
-})
-
-describe('validateIconFile (UX/cost gate — not a security control)', () => {
-  it('accepts an in-spec PNG', () => {
-    expect(validateIconFile({ type: 'image/png', size: 10 * 1024 })).toBeNull()
-  })
-
-  it('rejects a disallowed MIME type', () => {
-    const msg = validateIconFile({ type: 'application/pdf', size: 1024 })
-    expect(msg).toMatch(/Unsupported image type/)
-    expect(msg).toContain('pdf')
-  })
-
-  it('rejects a file over the size cap', () => {
-    const msg = validateIconFile({ type: 'image/png', size: ICON_MAX_BYTES + 1 })
-    expect(msg).toMatch(/too large/)
-  })
-
-  it('accepts a file exactly at the cap', () => {
-    expect(validateIconFile({ type: 'image/webp', size: ICON_MAX_BYTES })).toBeNull()
-  })
-})

package/tests/walrus_url_patch.test.ts

@@ -1,26 +0,0 @@
-import { describe, it, expect } from 'vitest'
-import init, { deserialize } from '@mysten/move-bytecode-template'
-import { patchTemplateModule } from '../src/lib/template.js'
-
-const asStr = (data: number[]) => Buffer.from(data.slice(1)).toString('utf8')
-interface Decoded { constant_pool: { type_: unknown; data: number[] }[] }
-
-describe('Walrus blob URL patching', () => {
-  it('patches a 99-char Walrus blob URL correctly', async () => {
-    await (init as unknown as () => Promise<unknown>)()
-    const BLOB_URL = 'https://aggregator.walrus-testnet.walrus.space/v1/blobs/OVB5WTWEqkOktRXHIXTBybPAERD0wfORn8NQ1a2lbFQ'
-    const bytes = await patchTemplateModule({
-      moduleName: 'mycoin', structName: 'MYCOIN',
-      symbol: 'MYC', name: 'My Coin', description: 'A test',
-      iconUrl: BLOB_URL, decimals: 9,
-    })
-    // Valid magic bytes
-    expect(Buffer.from(bytes.slice(0, 4)).toString('hex')).toBe('a11ceb0b')
-    // Round-trips through deserialize
-    const back = deserialize(bytes) as unknown as Decoded
-    // Icon URL constant present
-    const iconEntry = back.constant_pool.find(c => c.type_ !== 'U8' && asStr(c.data).startsWith('https://aggregator'))
-    expect(iconEntry).toBeTruthy()
-    expect(asStr(iconEntry!.data)).toBe(BLOB_URL)
-  })
-})

package/tsconfig.json

@@ -1,19 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "esnext",
-    "lib": ["esnext", "DOM", "DOM.Iterable"],
-    "module": "esnext",
-    "moduleResolution": "Bundler",
-    "resolveJsonModule": true,
-    "isolatedModules": true,
-    "allowSyntheticDefaultImports": true,
-    "esModuleInterop": true,
-    "forceConsistentCasingInFileNames": true,
-    "strict": true,
-    "skipLibCheck": true,
-    "noEmit": true,
-    "jsx": "preserve",
-    "types": ["node", "vite/client"]
-  },
-  "include": ["src/**/*.ts", "src/**/*.vue", "tests/**/*.ts", "env.d.ts"]
-}

package/typedoc.json

@@ -1,34 +0,0 @@
-{
-  "$schema": "https://typedoc.org/schema.json",
-  "entryPoints": [
-    "src/config.ts",
-    "src/lib/types.ts",
-    "src/lib/validation.ts",
-    "src/lib/form.ts",
-    "src/lib/template.ts",
-    "src/lib/buildPublishTx.ts",
-    "src/lib/deploy.ts",
-    "src/lib/generatePackage.ts",
-    "src/lib/licenses.ts",
-    "src/lib/github.ts",
-    "src/lib/walrus.ts",
-    "src/lib/walrus-constants.ts",
-    "src/composables/useAccessGate.ts",
-    "src/composables/useWalrusRelay.ts"
-  ],
-  "out": "docs/api",
-  "readme": "none",
-  "excludeInternal": true,
-  "excludePrivate": true,
-  "excludeExternals": true,
-  "includeVersion": true,
-  "skipErrorChecking": true,
-  "categorizeByGroup": true,
-  "validation": {
-    "invalidLink": false,
-    "notExported": false
-  },
-  "navigationLinks": {
-    "Repository": "https://github.com/meddleware"
-  }
-}

package/vite.config.ts

@@ -1,73 +0,0 @@
-import { defineConfig, loadEnv } from 'vite'
-import vue from '@vitejs/plugin-vue'
-
-const ZERO_ADDR = '0x' + '0'.repeat(64)
-
-// Networks a production build must have a real (non-zero) treasury for. Mirrors
-// SELECTABLE_NETWORKS in src/config.ts — kept as a literal here to avoid importing
-// app code into the build config.
-const REQUIRED_TREASURY_NETWORKS = ['TESTNET', 'MAINNET'] as const
-
-/**
- * Fail a production build when a selectable network's fee treasury is still the
- * zero address, so revenue can never silently burn to 0x0. Bypass for dev/e2e
- * builds with VITE_ALLOW_UNSET_TREASURY=1 (or VITE_E2E=1).
- */
-function assertTreasuryConfigured(env: Record<string, string>): void {
-  if (env.VITE_ALLOW_UNSET_TREASURY === '1' || env.VITE_E2E === '1') return
-  const unset = REQUIRED_TREASURY_NETWORKS.filter((n) => {
-    const v = env[`VITE_FEE_TREASURY_${n}`]
-    return !v || v === ZERO_ADDR
-  })
-  if (unset.length > 0) {
-    throw new Error(
-      `Refusing to build: fee treasury unset (zero address) for ${unset.join(', ')}. ` +
-        `Set VITE_FEE_TREASURY_${unset[0]} (see .env.production/.env.example), ` +
-        `or set VITE_ALLOW_UNSET_TREASURY=1 for a dev/e2e build.`,
-    )
-  }
-}
-
-// The move-bytecode-template package ships a .wasm that must be served as an
-// asset; `wasm` is excluded from dep-optimization so its URL import resolves.
-/** Public origin used for the canonical URL + Open Graph tags (`%VITE_PUBLIC_URL%` in index.html). */
-const DEFAULT_PUBLIC_URL = 'https://sui-token-deployer.meddleware.co.uk'
-
-export default defineConfig(({ command, mode }) => {
-  const env = loadEnv(mode, process.cwd(), '')
-  if (command === 'build' && mode === 'production') assertTreasuryConfigured(env)
-  // Every mode (dev, e2e, production) resolves the placeholder; a white-label deployment overrides it
-  // with VITE_PUBLIC_URL (Docker build arg / CI var / .env file).
-  process.env.VITE_PUBLIC_URL = (env.VITE_PUBLIC_URL || DEFAULT_PUBLIC_URL).replace(/\/+$/, '')
-
-  return {
-    base: "/",
-    plugins: [vue()],
-    optimizeDeps: {
-      // @meddleware/wallet-adapter ships TS + .vue source and holds the shared wallet singleton; if it
-      // were pre-bundled, its .vue files (served raw) would load a second copy of the singleton in dev.
-      exclude: ['@mysten/move-bytecode-template', '@meddleware/wallet-adapter'],
-    },
-    build: {
-      target: 'esnext',
-      rollupOptions: {
-        output: {
-          // Pin the Sui SDK into its own long-lived vendor chunk so app changes
-          // don't bust its cache. Matched by module id (not package entry, which
-          // @mysten/sui does not expose). @mysten/walrus + move-bytecode-template
-          // are explicitly left out so they stay in their lazy dynamic chunks.
-          manualChunks(id: string) {
-            if (id.includes('@mysten/walrus') || id.includes('move-bytecode-template')) return
-            if (
-              id.includes('@mysten/sui') ||
-              id.includes('@mysten/bcs') ||
-              id.includes('@mysten/wallet-standard')
-            ) {
-              return 'vendor-sui'
-            }
-          },
-        },
-      },
-    },
-  }
-})

package/vitest.config.ts

@@ -1,10 +0,0 @@
-import { defineConfig } from 'vitest/config'
-import vue from '@vitejs/plugin-vue'
-
-export default defineConfig({
-  plugins: [vue()],
-  test: {
-    environment: 'jsdom',
-    include: ['tests/**/*.test.ts'],
-  },
-})