@mysten-incubation/dev-wallet 0.0.0 → 0.2.0

package/dist/adapters/devstack-adapter.mjs

@@ -0,0 +1,224 @@
+import { buildManagedAccount } from "./build-managed-account.mjs";
+import { BaseSignerAdapter } from "./base-adapter.mjs";
+import { DEVSTACK_WALLET_HTTP_PATH } from "./devstack-paths.mjs";
+import { fromBase64, toBase64 } from "@mysten/sui/utils";
+import { Ed25519PublicKey } from "@mysten/sui/keypairs/ed25519";
+import { Signer } from "@mysten/sui/cryptography";
+import { Secp256k1PublicKey } from "@mysten/sui/keypairs/secp256k1";
+import { Secp256r1PublicKey } from "@mysten/sui/keypairs/secp256r1";
+//#region src/adapters/devstack-adapter.ts
+const DEVSTACK_WALLET_FEATURES = [
+	"sui:signTransaction",
+	"sui:signAndExecuteTransaction",
+	"sui:signPersonalMessage"
+];
+var AuthError = class extends Error {
+	constructor() {
+		super("Unauthorized");
+		this.name = "AuthError";
+	}
+};
+function publicKeyForScheme(base64, scheme) {
+	const bytes = fromBase64(base64);
+	switch (String(scheme).toLowerCase()) {
+		case "ed25519": return new Ed25519PublicKey(bytes);
+		case "secp256k1": return new Secp256k1PublicKey(bytes);
+		case "secp256r1": return new Secp256r1PublicKey(bytes);
+		default: throw new Error(`Unsupported key scheme: ${scheme}`);
+	}
+}
+/**
+* Signer that delegates transaction signing to the devstack wallet-app
+* over HTTP. Mirrors {@link CliProxySigner} but talks to the
+* `wallet()` plugin's endpoints under `/api/v1/devstack/*`.
+*/
+var DevstackProxySigner = class extends Signer {
+	#address;
+	#publicKey;
+	#scheme;
+	#serverOrigin;
+	#authToken;
+	constructor(options) {
+		super();
+		this.#address = options.address;
+		this.#publicKey = options.publicKey;
+		this.#scheme = options.scheme;
+		this.#serverOrigin = options.serverOrigin;
+		this.#authToken = options.authToken ?? null;
+	}
+	async sign(_bytes) {
+		throw new Error("DevstackProxySigner does not support raw digest signing. Use signTransaction (the wallet-app signs BCS-serialized TransactionData).");
+	}
+	getKeyScheme() {
+		return this.#scheme;
+	}
+	getPublicKey() {
+		return this.#publicKey;
+	}
+	toSuiAddress() {
+		return this.#address;
+	}
+	async signTransaction(bytes) {
+		const headers = { "Content-Type": "application/json" };
+		if (this.#authToken !== null) headers["Authorization"] = `Bearer ${this.#authToken}`;
+		const requestBytes = toBase64(bytes);
+		const res = await fetch(`${this.#serverOrigin}${DEVSTACK_WALLET_HTTP_PATH.SIGN_TRANSACTION}`, {
+			method: "POST",
+			headers,
+			body: JSON.stringify({
+				address: this.#address,
+				bytes: requestBytes
+			})
+		});
+		if (!res.ok) {
+			const message = (await res.json().catch(() => ({}))).error;
+			throw new Error(`Devstack signing failed: ${typeof message === "string" ? message : res.statusText}`);
+		}
+		const { bytes: responseBytes, signature } = await res.json();
+		if (typeof responseBytes !== "string" || responseBytes.length === 0) throw new Error("Devstack signing failed: server returned invalid signed bytes");
+		if (typeof signature !== "string" || signature.length === 0) throw new Error("Devstack signing failed: server returned invalid signature");
+		return {
+			bytes: responseBytes,
+			signature
+		};
+	}
+	async signPersonalMessage(bytes) {
+		const headers = { "Content-Type": "application/json" };
+		if (this.#authToken !== null) headers["Authorization"] = `Bearer ${this.#authToken}`;
+		const res = await fetch(`${this.#serverOrigin}${DEVSTACK_WALLET_HTTP_PATH.SIGN_PERSONAL_MESSAGE}`, {
+			method: "POST",
+			headers,
+			body: JSON.stringify({
+				address: this.#address,
+				bytes: toBase64(bytes)
+			})
+		});
+		if (!res.ok) {
+			const message = (await res.json().catch(() => ({}))).error;
+			throw new Error(`Devstack personal-message signing failed: ${typeof message === "string" ? message : res.statusText}`);
+		}
+		const { bytes: responseBytes, signature } = await res.json();
+		if (typeof responseBytes !== "string" || responseBytes.length === 0) throw new Error("Devstack personal-message signing failed: server returned invalid signed bytes");
+		if (typeof signature !== "string" || signature.length === 0) throw new Error("Devstack personal-message signing failed: server returned no signature");
+		return {
+			bytes: responseBytes,
+			signature
+		};
+	}
+};
+/**
+* {@link SignerAdapter} that surfaces every account resolved by `devstack up`
+* (including `cliSigner`/`envSigner`/`generatedKeypair` slots) without
+* shipping their private keys into the frontend bundle. All signing happens
+* server-side via the `wallet()` plugin.
+*
+* The simplest construction uses devstack's generated `dapp-kit-config.ts`,
+* which bakes the wallet adapter wiring at codegen time — apps spread
+* `devstackDappKitConfig` into `createDAppKit(...)` and never touch the
+* adapter directly.
+*
+* To construct one manually (e.g. from a non-manifest source):
+*
+* ```ts
+* const adapter = new DevstackSignerAdapter({
+*     serverOrigin: 'http://localhost:9420',
+*     token: '<bearer hex>',
+* });
+* ```
+*/
+var DevstackSignerAdapter = class extends BaseSignerAdapter {
+	#serverOrigin;
+	#authToken;
+	constructor(options) {
+		super();
+		this.id = "devstack";
+		this.allowAutoSign = true;
+		try {
+			new URL(options.serverOrigin);
+		} catch {
+			throw new Error(`DevstackSignerAdapter: invalid serverOrigin "${options.serverOrigin}"`);
+		}
+		this.#serverOrigin = options.serverOrigin;
+		this.#authToken = options.token ?? null;
+		this.name = options.name ?? "Devstack";
+	}
+	async initialize() {
+		try {
+			const accounts = await this.#fetchAccounts();
+			this.setInitialAccounts(accounts);
+		} catch (error) {
+			if (error instanceof AuthError) {
+				console.warn("[dev-wallet] devstack adapter: unauthorized — skipping account import");
+				return;
+			}
+			console.warn("[dev-wallet] devstack adapter: initialization failed:", error);
+		}
+	}
+	destroy() {
+		this.#authToken = null;
+		super.destroy();
+	}
+	async #fetchAccounts() {
+		const headers = { "Content-Type": "application/json" };
+		if (this.#authToken !== null) headers["Authorization"] = `Bearer ${this.#authToken}`;
+		const res = await fetch(`${this.#serverOrigin}${DEVSTACK_WALLET_HTTP_PATH.ACCOUNTS}`, { headers });
+		if (res.status === 401 || res.status === 403) throw new AuthError();
+		if (!res.ok) throw new Error(`Failed to fetch devstack accounts: ${res.statusText}`);
+		const { accounts } = await res.json();
+		return accounts.map((info) => {
+			const publicKey = publicKeyForScheme(info.publicKey, info.scheme);
+			return buildManagedAccount(new DevstackProxySigner({
+				address: info.address,
+				publicKey,
+				scheme: info.scheme,
+				serverOrigin: this.#serverOrigin,
+				authToken: this.#authToken
+			}), info.address, info.name, DEVSTACK_WALLET_FEATURES);
+		});
+	}
+};
+/**
+* Pull the bearer token off a paired URL produced by the `wallet()`
+* plugin. Returns `null` if the input is undefined, malformed, or
+* carries a `<redacted>` placeholder (the manifest's pairUrl carries
+* the redacted form; the real token lives in a sibling 0o600 file the
+* consumer reads separately).
+*
+* The token rides in the URL fragment as `#token=<hex>`.
+*/
+function parseDevstackToken(pairedUrl) {
+	if (pairedUrl === void 0) return null;
+	try {
+		const hash = new URL(pairedUrl).hash;
+		if (hash.length <= 1) return null;
+		const token = new URLSearchParams(hash.slice(1)).get("token");
+		if (token === null || token === "<redacted>") return null;
+		return token;
+	} catch {
+		return null;
+	}
+}
+/**
+* Convenience: read the wallet-app endpoint off a devstack manifest and
+* build a configured adapter, or return `null` when the entry isn't
+* present (no `wallet(...)` in the stack, or it hasn't come up yet).
+*
+* The wallet entry's `pairUrl` carries the `#token=…` fragment used to
+* extract the bearer token. The full `Manifest` shape from
+* `@mysten-incubation/devstack` is structurally compatible with
+* {@link DevstackAdapterManifest}, so
+* `createDevstackAdapterFromManifest(devstackManifest)` typechecks
+* without a cast.
+*/
+function createDevstackAdapterFromManifest(manifest) {
+	const wallet = manifest.app?.wallet;
+	if (wallet === void 0) return null;
+	return new DevstackSignerAdapter({
+		serverOrigin: wallet.url,
+		token: parseDevstackToken(wallet.pairUrl)
+	});
+}
+//#endregion
+export { DevstackProxySigner, DevstackSignerAdapter, createDevstackAdapterFromManifest, parseDevstackToken };
+
+//# sourceMappingURL=devstack-adapter.mjs.map

package/dist/adapters/devstack-adapter.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"devstack-adapter.mjs","names":["#address","#publicKey","#scheme","#serverOrigin","#authToken","#fetchAccounts"],"sources":["../../src/adapters/devstack-adapter.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n//\n// Devstack signer adapter — exposes accounts resolved by `devstack up`'s\n// `wallet()` plugin to dApp Kit, signing transactions over HTTP so\n// private keys never enter the frontend bundle. Mirrors RemoteCliAdapter's\n// out-of-process model; the difference is the source of accounts (devstack\n// resolved signers vs `sui keytool list`) and the endpoint paths.\n\nimport { Signer } from '@mysten/sui/cryptography';\nimport type { PublicKey, SignatureScheme } from '@mysten/sui/cryptography';\nimport { Ed25519PublicKey } from '@mysten/sui/keypairs/ed25519';\nimport { Secp256k1PublicKey } from '@mysten/sui/keypairs/secp256k1';\nimport { Secp256r1PublicKey } from '@mysten/sui/keypairs/secp256r1';\nimport { fromBase64, toBase64 } from '@mysten/sui/utils';\n\nimport type { ManagedAccount } from '../types.js';\nimport { BaseSignerAdapter } from './base-adapter.js';\nimport { buildManagedAccount } from './build-managed-account.js';\nimport { DEVSTACK_WALLET_HTTP_PATH } from './devstack-paths.js';\n\nconst DEVSTACK_WALLET_FEATURES = [\n\t'sui:signTransaction',\n\t'sui:signAndExecuteTransaction',\n\t'sui:signPersonalMessage',\n] as const;\n\ninterface ServerAccountInfo {\n\tname: string;\n\taddress: string;\n\tscheme: SignatureScheme;\n\tpublicKey: string;\n}\n\nclass AuthError extends Error {\n\tconstructor() {\n\t\tsuper('Unauthorized');\n\t\tthis.name = 'AuthError';\n\t}\n}\n\nfunction publicKeyForScheme(base64: string, scheme: SignatureScheme | string): PublicKey {\n\tconst bytes = fromBase64(base64);\n\t// The devstack server's wallet-app endpoint surfaces the scheme in\n\t// the lowercase form it standardised at the Account boundary\n\t// (`'ed25519'`, `'secp256k1'`, `'secp256r1'`). The Sui SDK's\n\t// `SignatureScheme` union is mixed-case (`'ED25519'`, `'Secp256k1'`,\n\t// …). Normalise to lowercase before matching so either casing parses.\n\tswitch (String(scheme).toLowerCase()) {\n\t\tcase 'ed25519':\n\t\t\treturn new Ed25519PublicKey(bytes);\n\t\tcase 'secp256k1':\n\t\t\treturn new Secp256k1PublicKey(bytes);\n\t\tcase 'secp256r1':\n\t\t\treturn new Secp256r1PublicKey(bytes);\n\t\tdefault:\n\t\t\tthrow new Error(`Unsupported key scheme: ${scheme}`);\n\t}\n}\n\n/**\n * Signer that delegates transaction signing to the devstack wallet-app\n * over HTTP. Mirrors {@link CliProxySigner} but talks to the\n * `wallet()` plugin's endpoints under `/api/v1/devstack/*`.\n */\nexport class DevstackProxySigner extends Signer {\n\t#address: string;\n\t#publicKey: PublicKey;\n\t#scheme: SignatureScheme;\n\t#serverOrigin: string;\n\t#authToken: string | null;\n\n\tconstructor(options: {\n\t\taddress: string;\n\t\tpublicKey: PublicKey;\n\t\tscheme: SignatureScheme;\n\t\tserverOrigin: string;\n\t\tauthToken?: string | null;\n\t}) {\n\t\tsuper();\n\t\tthis.#address = options.address;\n\t\tthis.#publicKey = options.publicKey;\n\t\tthis.#scheme = options.scheme;\n\t\tthis.#serverOrigin = options.serverOrigin;\n\t\tthis.#authToken = options.authToken ?? null;\n\t}\n\n\tasync sign(_bytes: Uint8Array): Promise<Uint8Array<ArrayBuffer>> {\n\t\tthrow new Error(\n\t\t\t'DevstackProxySigner does not support raw digest signing. ' +\n\t\t\t\t'Use signTransaction (the wallet-app signs BCS-serialized TransactionData).',\n\t\t);\n\t}\n\n\tgetKeyScheme(): SignatureScheme {\n\t\treturn this.#scheme;\n\t}\n\n\tgetPublicKey(): PublicKey {\n\t\treturn this.#publicKey;\n\t}\n\n\toverride toSuiAddress(): string {\n\t\treturn this.#address;\n\t}\n\n\toverride async signTransaction(bytes: Uint8Array) {\n\t\tconst headers: Record<string, string> = { 'Content-Type': 'application/json' };\n\t\tif (this.#authToken !== null) {\n\t\t\theaders['Authorization'] = `Bearer ${this.#authToken}`;\n\t\t}\n\t\tconst requestBytes = toBase64(bytes);\n\t\tconst res = await fetch(`${this.#serverOrigin}${DEVSTACK_WALLET_HTTP_PATH.SIGN_TRANSACTION}`, {\n\t\t\tmethod: 'POST',\n\t\t\theaders,\n\t\t\tbody: JSON.stringify({\n\t\t\t\taddress: this.#address,\n\t\t\t\tbytes: requestBytes,\n\t\t\t}),\n\t\t});\n\t\tif (!res.ok) {\n\t\t\tconst body = await res.json().catch(() => ({}));\n\t\t\tconst message = (body as { error?: unknown }).error;\n\t\t\tthrow new Error(\n\t\t\t\t`Devstack signing failed: ${typeof message === 'string' ? message : res.statusText}`,\n\t\t\t);\n\t\t}\n\t\tconst { bytes: responseBytes, signature } = (await res.json()) as {\n\t\t\tbytes?: string;\n\t\t\tsignature?: string;\n\t\t};\n\t\tif (typeof responseBytes !== 'string' || responseBytes.length === 0) {\n\t\t\tthrow new Error('Devstack signing failed: server returned invalid signed bytes');\n\t\t}\n\t\tif (typeof signature !== 'string' || signature.length === 0) {\n\t\t\tthrow new Error('Devstack signing failed: server returned invalid signature');\n\t\t}\n\t\treturn {\n\t\t\tbytes: responseBytes,\n\t\t\tsignature,\n\t\t};\n\t}\n\n\toverride async signPersonalMessage(bytes: Uint8Array) {\n\t\tconst headers: Record<string, string> = { 'Content-Type': 'application/json' };\n\t\tif (this.#authToken !== null) {\n\t\t\theaders['Authorization'] = `Bearer ${this.#authToken}`;\n\t\t}\n\t\tconst res = await fetch(\n\t\t\t`${this.#serverOrigin}${DEVSTACK_WALLET_HTTP_PATH.SIGN_PERSONAL_MESSAGE}`,\n\t\t\t{\n\t\t\t\tmethod: 'POST',\n\t\t\t\theaders,\n\t\t\t\tbody: JSON.stringify({\n\t\t\t\t\taddress: this.#address,\n\t\t\t\t\tbytes: toBase64(bytes),\n\t\t\t\t}),\n\t\t\t},\n\t\t);\n\t\tif (!res.ok) {\n\t\t\tconst body = await res.json().catch(() => ({}));\n\t\t\tconst message = (body as { error?: unknown }).error;\n\t\t\tthrow new Error(\n\t\t\t\t`Devstack personal-message signing failed: ${\n\t\t\t\t\ttypeof message === 'string' ? message : res.statusText\n\t\t\t\t}`,\n\t\t\t);\n\t\t}\n\t\tconst { bytes: responseBytes, signature } = (await res.json()) as {\n\t\t\tbytes?: string;\n\t\t\tsignature?: string;\n\t\t};\n\t\tif (typeof responseBytes !== 'string' || responseBytes.length === 0) {\n\t\t\tthrow new Error(\n\t\t\t\t'Devstack personal-message signing failed: server returned invalid signed bytes',\n\t\t\t);\n\t\t}\n\t\tif (typeof signature !== 'string' || signature.length === 0) {\n\t\t\tthrow new Error('Devstack personal-message signing failed: server returned no signature');\n\t\t}\n\t\treturn { bytes: responseBytes, signature };\n\t}\n}\n\nexport interface DevstackSignerAdapterOptions {\n\t/** Wallet-app origin (e.g. `http://localhost:9420`). Read from the\n\t * matching endpoint entry on the active manifest. */\n\tserverOrigin: string;\n\t/** Bearer token. Parse `?token=<hex>` from the manifest entry's\n\t * `pairUrl`. Omit if the wallet-app runs without auth. */\n\ttoken?: string | null;\n\t/** Override the adapter's display name. Defaults to `'Devstack'`. */\n\tname?: string;\n}\n\n/**\n * {@link SignerAdapter} that surfaces every account resolved by `devstack up`\n * (including `cliSigner`/`envSigner`/`generatedKeypair` slots) without\n * shipping their private keys into the frontend bundle. All signing happens\n * server-side via the `wallet()` plugin.\n *\n * The simplest construction uses devstack's generated `dapp-kit-config.ts`,\n * which bakes the wallet adapter wiring at codegen time — apps spread\n * `devstackDappKitConfig` into `createDAppKit(...)` and never touch the\n * adapter directly.\n *\n * To construct one manually (e.g. from a non-manifest source):\n *\n * ```ts\n * const adapter = new DevstackSignerAdapter({\n *     serverOrigin: 'http://localhost:9420',\n *     token: '<bearer hex>',\n * });\n * ```\n */\nexport class DevstackSignerAdapter extends BaseSignerAdapter {\n\treadonly id = 'devstack';\n\treadonly name: string;\n\treadonly allowAutoSign = true;\n\n\t#serverOrigin: string;\n\t#authToken: string | null;\n\n\tconstructor(options: DevstackSignerAdapterOptions) {\n\t\tsuper();\n\t\ttry {\n\t\t\tnew URL(options.serverOrigin);\n\t\t} catch {\n\t\t\tthrow new Error(`DevstackSignerAdapter: invalid serverOrigin \"${options.serverOrigin}\"`);\n\t\t}\n\t\tthis.#serverOrigin = options.serverOrigin;\n\t\tthis.#authToken = options.token ?? null;\n\t\tthis.name = options.name ?? 'Devstack';\n\t}\n\n\tasync initialize(): Promise<void> {\n\t\ttry {\n\t\t\tconst accounts = await this.#fetchAccounts();\n\t\t\tthis.setInitialAccounts(accounts);\n\t\t} catch (error) {\n\t\t\tif (error instanceof AuthError) {\n\t\t\t\tconsole.warn('[dev-wallet] devstack adapter: unauthorized — skipping account import');\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconsole.warn('[dev-wallet] devstack adapter: initialization failed:', error);\n\t\t}\n\t}\n\n\toverride destroy(): void {\n\t\tthis.#authToken = null;\n\t\tsuper.destroy();\n\t}\n\n\tasync #fetchAccounts(): Promise<ManagedAccount[]> {\n\t\tconst headers: Record<string, string> = { 'Content-Type': 'application/json' };\n\t\tif (this.#authToken !== null) {\n\t\t\theaders['Authorization'] = `Bearer ${this.#authToken}`;\n\t\t}\n\t\tconst res = await fetch(`${this.#serverOrigin}${DEVSTACK_WALLET_HTTP_PATH.ACCOUNTS}`, {\n\t\t\theaders,\n\t\t});\n\t\tif (res.status === 401 || res.status === 403) throw new AuthError();\n\t\tif (!res.ok) {\n\t\t\tthrow new Error(`Failed to fetch devstack accounts: ${res.statusText}`);\n\t\t}\n\t\tconst { accounts } = (await res.json()) as { accounts: ServerAccountInfo[] };\n\t\treturn accounts.map((info) => {\n\t\t\tconst publicKey = publicKeyForScheme(info.publicKey, info.scheme);\n\t\t\tconst signer = new DevstackProxySigner({\n\t\t\t\taddress: info.address,\n\t\t\t\tpublicKey,\n\t\t\t\tscheme: info.scheme,\n\t\t\t\tserverOrigin: this.#serverOrigin,\n\t\t\t\tauthToken: this.#authToken,\n\t\t\t});\n\t\t\treturn buildManagedAccount(signer, info.address, info.name, DEVSTACK_WALLET_FEATURES);\n\t\t});\n\t}\n}\n\n/**\n * Pull the bearer token off a paired URL produced by the `wallet()`\n * plugin. Returns `null` if the input is undefined, malformed, or\n * carries a `<redacted>` placeholder (the manifest's pairUrl carries\n * the redacted form; the real token lives in a sibling 0o600 file the\n * consumer reads separately).\n *\n * The token rides in the URL fragment as `#token=<hex>`.\n */\nexport function parseDevstackToken(pairedUrl: string | undefined): string | null {\n\tif (pairedUrl === undefined) return null;\n\ttry {\n\t\tconst url = new URL(pairedUrl);\n\t\tconst hash = url.hash; // e.g. \"#token=abcd\"\n\t\tif (hash.length <= 1) return null;\n\t\tconst params = new URLSearchParams(hash.slice(1));\n\t\tconst token = params.get('token');\n\t\tif (token === null || token === '<redacted>') return null;\n\t\treturn token;\n\t} catch {\n\t\treturn null;\n\t}\n}\n\n/** Narrow input — the only field the adapter consumes is\n *  `app.wallet.{url, pairUrl}`. Codegen emits exactly this shape so\n *  generated `dapp-kit-config.ts` doesn't have to fabricate placeholder\n *  manifest fields (`stack.app`, `coins`, etc.) just to satisfy the\n *  full `Manifest` type. Mirrors a slice of `AppManifest` from\n *  `@mysten-incubation/devstack` without importing it (dev-wallet\n *  doesn't depend on devstack — circular). */\nexport interface DevstackAdapterManifest {\n\tapp?: {\n\t\twallet?: {\n\t\t\turl: string;\n\t\t\tpairUrl?: string;\n\t\t};\n\t};\n}\n\n/**\n * Convenience: read the wallet-app endpoint off a devstack manifest and\n * build a configured adapter, or return `null` when the entry isn't\n * present (no `wallet(...)` in the stack, or it hasn't come up yet).\n *\n * The wallet entry's `pairUrl` carries the `#token=…` fragment used to\n * extract the bearer token. The full `Manifest` shape from\n * `@mysten-incubation/devstack` is structurally compatible with\n * {@link DevstackAdapterManifest}, so\n * `createDevstackAdapterFromManifest(devstackManifest)` typechecks\n * without a cast.\n */\nexport function createDevstackAdapterFromManifest(\n\tmanifest: DevstackAdapterManifest,\n): DevstackSignerAdapter | null {\n\tconst wallet = manifest.app?.wallet;\n\tif (wallet === undefined) return null;\n\treturn new DevstackSignerAdapter({\n\t\tserverOrigin: wallet.url,\n\t\ttoken: parseDevstackToken(wallet.pairUrl),\n\t});\n}\n"],"mappings":";;;;;;;;;AAqBA,MAAM,2BAA2B;CAChC;CACA;CACA;CACA;AASD,IAAM,YAAN,cAAwB,MAAM;CAC7B,cAAc;AACb,QAAM,eAAe;AACrB,OAAK,OAAO;;;AAId,SAAS,mBAAmB,QAAgB,QAA6C;CACxF,MAAM,QAAQ,WAAW,OAAO;AAMhC,SAAQ,OAAO,OAAO,CAAC,aAAa,EAApC;EACC,KAAK,UACJ,QAAO,IAAI,iBAAiB,MAAM;EACnC,KAAK,YACJ,QAAO,IAAI,mBAAmB,MAAM;EACrC,KAAK,YACJ,QAAO,IAAI,mBAAmB,MAAM;EACrC,QACC,OAAM,IAAI,MAAM,2BAA2B,SAAS;;;;;;;;AASvD,IAAa,sBAAb,cAAyC,OAAO;CAC/C;CACA;CACA;CACA;CACA;CAEA,YAAY,SAMT;AACF,SAAO;AACP,QAAA,UAAgB,QAAQ;AACxB,QAAA,YAAkB,QAAQ;AAC1B,QAAA,SAAe,QAAQ;AACvB,QAAA,eAAqB,QAAQ;AAC7B,QAAA,YAAkB,QAAQ,aAAa;;CAGxC,MAAM,KAAK,QAAsD;AAChE,QAAM,IAAI,MACT,sIAEA;;CAGF,eAAgC;AAC/B,SAAO,MAAA;;CAGR,eAA0B;AACzB,SAAO,MAAA;;CAGR,eAAgC;AAC/B,SAAO,MAAA;;CAGR,MAAe,gBAAgB,OAAmB;EACjD,MAAM,UAAkC,EAAE,gBAAgB,oBAAoB;AAC9E,MAAI,MAAA,cAAoB,KACvB,SAAQ,mBAAmB,UAAU,MAAA;EAEtC,MAAM,eAAe,SAAS,MAAM;EACpC,MAAM,MAAM,MAAM,MAAM,GAAG,MAAA,eAAqB,0BAA0B,oBAAoB;GAC7F,QAAQ;GACR;GACA,MAAM,KAAK,UAAU;IACpB,SAAS,MAAA;IACT,OAAO;IACP,CAAC;GACF,CAAC;AACF,MAAI,CAAC,IAAI,IAAI;GAEZ,MAAM,WAAW,MADE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE,EACD;AAC9C,SAAM,IAAI,MACT,4BAA4B,OAAO,YAAY,WAAW,UAAU,IAAI,aACxE;;EAEF,MAAM,EAAE,OAAO,eAAe,cAAe,MAAM,IAAI,MAAM;AAI7D,MAAI,OAAO,kBAAkB,YAAY,cAAc,WAAW,EACjE,OAAM,IAAI,MAAM,gEAAgE;AAEjF,MAAI,OAAO,cAAc,YAAY,UAAU,WAAW,EACzD,OAAM,IAAI,MAAM,6DAA6D;AAE9E,SAAO;GACN,OAAO;GACP;GACA;;CAGF,MAAe,oBAAoB,OAAmB;EACrD,MAAM,UAAkC,EAAE,gBAAgB,oBAAoB;AAC9E,MAAI,MAAA,cAAoB,KACvB,SAAQ,mBAAmB,UAAU,MAAA;EAEtC,MAAM,MAAM,MAAM,MACjB,GAAG,MAAA,eAAqB,0BAA0B,yBAClD;GACC,QAAQ;GACR;GACA,MAAM,KAAK,UAAU;IACpB,SAAS,MAAA;IACT,OAAO,SAAS,MAAM;IACtB,CAAC;GACF,CACD;AACD,MAAI,CAAC,IAAI,IAAI;GAEZ,MAAM,WAAW,MADE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE,EACD;AAC9C,SAAM,IAAI,MACT,6CACC,OAAO,YAAY,WAAW,UAAU,IAAI,aAE7C;;EAEF,MAAM,EAAE,OAAO,eAAe,cAAe,MAAM,IAAI,MAAM;AAI7D,MAAI,OAAO,kBAAkB,YAAY,cAAc,WAAW,EACjE,OAAM,IAAI,MACT,iFACA;AAEF,MAAI,OAAO,cAAc,YAAY,UAAU,WAAW,EACzD,OAAM,IAAI,MAAM,yEAAyE;AAE1F,SAAO;GAAE,OAAO;GAAe;GAAW;;;;;;;;;;;;;;;;;;;;;;;AAmC5C,IAAa,wBAAb,cAA2C,kBAAkB;CAK5D;CACA;CAEA,YAAY,SAAuC;AAClD,SAAO;YARM;uBAEW;AAOxB,MAAI;AACH,OAAI,IAAI,QAAQ,aAAa;UACtB;AACP,SAAM,IAAI,MAAM,gDAAgD,QAAQ,aAAa,GAAG;;AAEzF,QAAA,eAAqB,QAAQ;AAC7B,QAAA,YAAkB,QAAQ,SAAS;AACnC,OAAK,OAAO,QAAQ,QAAQ;;CAG7B,MAAM,aAA4B;AACjC,MAAI;GACH,MAAM,WAAW,MAAM,MAAA,eAAqB;AAC5C,QAAK,mBAAmB,SAAS;WACzB,OAAO;AACf,OAAI,iBAAiB,WAAW;AAC/B,YAAQ,KAAK,wEAAwE;AACrF;;AAED,WAAQ,KAAK,yDAAyD,MAAM;;;CAI9E,UAAyB;AACxB,QAAA,YAAkB;AAClB,QAAM,SAAS;;CAGhB,OAAA,gBAAkD;EACjD,MAAM,UAAkC,EAAE,gBAAgB,oBAAoB;AAC9E,MAAI,MAAA,cAAoB,KACvB,SAAQ,mBAAmB,UAAU,MAAA;EAEtC,MAAM,MAAM,MAAM,MAAM,GAAG,MAAA,eAAqB,0BAA0B,YAAY,EACrF,SACA,CAAC;AACF,MAAI,IAAI,WAAW,OAAO,IAAI,WAAW,IAAK,OAAM,IAAI,WAAW;AACnE,MAAI,CAAC,IAAI,GACR,OAAM,IAAI,MAAM,sCAAsC,IAAI,aAAa;EAExE,MAAM,EAAE,aAAc,MAAM,IAAI,MAAM;AACtC,SAAO,SAAS,KAAK,SAAS;GAC7B,MAAM,YAAY,mBAAmB,KAAK,WAAW,KAAK,OAAO;AAQjE,UAAO,oBAAoB,IAPR,oBAAoB;IACtC,SAAS,KAAK;IACd;IACA,QAAQ,KAAK;IACb,cAAc,MAAA;IACd,WAAW,MAAA;IACX,CAC0B,EAAQ,KAAK,SAAS,KAAK,MAAM,yBAAyB;IACpF;;;;;;;;;;;;AAaJ,SAAgB,mBAAmB,WAA8C;AAChF,KAAI,cAAc,OAAW,QAAO;AACpC,KAAI;EAEH,MAAM,OAAO,IADG,IAAI,UACP,CAAI;AACjB,MAAI,KAAK,UAAU,EAAG,QAAO;EAE7B,MAAM,QAAQ,IADK,gBAAgB,KAAK,MAAM,EAAE,CAClC,CAAO,IAAI,QAAQ;AACjC,MAAI,UAAU,QAAQ,UAAU,aAAc,QAAO;AACrD,SAAO;SACA;AACP,SAAO;;;;;;;;;;;;;;;AAgCT,SAAgB,kCACf,UAC+B;CAC/B,MAAM,SAAS,SAAS,KAAK;AAC7B,KAAI,WAAW,OAAW,QAAO;AACjC,QAAO,IAAI,sBAAsB;EAChC,cAAc,OAAO;EACrB,OAAO,mBAAmB,OAAO,QAAQ;EACzC,CAAC"}

package/dist/adapters/devstack-paths.d.mts

@@ -0,0 +1,12 @@
+//#region src/adapters/devstack-paths.d.ts
+declare const DEVSTACK_WALLET_HTTP_PATH: {
+  readonly HEALTH: "/api/v1/devstack/health";
+  readonly ACCOUNTS: "/api/v1/devstack/accounts";
+  readonly SIGN_TRANSACTION: "/api/v1/devstack/sign-transaction";
+  readonly SIGN_PERSONAL_MESSAGE: "/api/v1/devstack/sign-personal-message";
+  readonly EXECUTE: "/api/v1/devstack/execute";
+};
+type DevstackWalletHttpPathValue = (typeof DEVSTACK_WALLET_HTTP_PATH)[keyof typeof DEVSTACK_WALLET_HTTP_PATH];
+//#endregion
+export { DEVSTACK_WALLET_HTTP_PATH, DevstackWalletHttpPathValue };
+//# sourceMappingURL=devstack-paths.d.mts.map

package/dist/adapters/devstack-paths.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"devstack-paths.d.mts","names":[],"sources":["../../src/adapters/devstack-paths.ts"],"mappings":";cAMa,yBAAA;EAAA;;;;;;KAQD,2BAAA,WACH,yBAAA,eAAwC,yBAAA"}

package/dist/adapters/devstack-paths.mjs

@@ -0,0 +1,12 @@
+//#region src/adapters/devstack-paths.ts
+const DEVSTACK_WALLET_HTTP_PATH = {
+	HEALTH: "/api/v1/devstack/health",
+	ACCOUNTS: "/api/v1/devstack/accounts",
+	SIGN_TRANSACTION: "/api/v1/devstack/sign-transaction",
+	SIGN_PERSONAL_MESSAGE: "/api/v1/devstack/sign-personal-message",
+	EXECUTE: "/api/v1/devstack/execute"
+};
+//#endregion
+export { DEVSTACK_WALLET_HTTP_PATH };
+
+//# sourceMappingURL=devstack-paths.mjs.map

package/dist/adapters/devstack-paths.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"devstack-paths.mjs","names":[],"sources":["../../src/adapters/devstack-paths.ts"],"sourcesContent":["// Mirror of `packages/devstack/src/plugins/wallet/protocol.ts` `WalletHttpPath`.\n// Duplicated here rather than imported because devstack already\n// (peer-)depends on `@mysten-incubation/dev-wallet` for codegen-emitted\n// wallet glue, and adding the reverse edge would close the workspace\n// cycle and break turbo's build ordering.\n\nexport const DEVSTACK_WALLET_HTTP_PATH = {\n\tHEALTH: '/api/v1/devstack/health',\n\tACCOUNTS: '/api/v1/devstack/accounts',\n\tSIGN_TRANSACTION: '/api/v1/devstack/sign-transaction',\n\tSIGN_PERSONAL_MESSAGE: '/api/v1/devstack/sign-personal-message',\n\tEXECUTE: '/api/v1/devstack/execute',\n} as const;\n\nexport type DevstackWalletHttpPathValue =\n\t(typeof DEVSTACK_WALLET_HTTP_PATH)[keyof typeof DEVSTACK_WALLET_HTTP_PATH];\n"],"mappings":";AAMA,MAAa,4BAA4B;CACxC,QAAQ;CACR,UAAU;CACV,kBAAkB;CAClB,uBAAuB;CACvB,SAAS;CACT"}

package/dist/adapters/fork-relay.d.mts

@@ -0,0 +1,109 @@
+//#region src/adapters/fork-relay.d.ts
+declare const FORK_RELAY_HTTP_PATH: {
+  readonly STATUS: "/api/v1/devstack/fork/status";
+  readonly ADVANCE_CLOCK: "/api/v1/devstack/fork/advance-clock";
+  readonly ADVANCE_CHECKPOINT: "/api/v1/devstack/fork/advance-checkpoint";
+  readonly IMPERSONATIONS: "/api/v1/devstack/fork/impersonations";
+};
+/** Snapshot of the fork's current head state.
+ *
+ * Mirrors the body of `ForkControl.getStatus()` minus the unused
+ * heartbeat fields. `clockMs` is a Unix-ms timestamp (the value
+ * `clock::timestamp_ms()` returns on chain); `checkpoint` is the
+ * latest sealed sequence number.
+ */
+interface ForkStatus {
+  readonly checkpoint: bigint;
+  readonly clockMs: bigint;
+  readonly autoTickMs?: number;
+  /** Best-effort label of the upstream the fork is pointed at, e.g.
+   *  `'mainnet'` or `'testnet'`. Sourced from the devstack manifest. */
+  readonly upstream?: string;
+}
+/** A single impersonation slot resolved by devstack — typically every
+ *  address that was passed to `Sui({fork:{impersonate:[…]}})`. */
+interface ForkImpersonationSlot {
+  readonly address: string;
+  readonly label?: string;
+  /** Whether the wallet currently routes user-driven tx signing through
+   *  the `executeImpersonated` path for this address. The dev-wallet
+   *  server stores the toggle so it persists across page reloads. */
+  readonly active: boolean;
+}
+interface ForkRelayOptions {
+  /** Wallet-app origin (e.g. `http://localhost:9420`). Same value
+   *  `DevstackSignerAdapter` consumes — read from the manifest entry's
+   *  `app.wallet.url`. */
+  readonly serverOrigin: string;
+  /** Bearer token. Same parsing rules as `DevstackSignerAdapter`. */
+  readonly token?: string | null;
+}
+declare class ForkRelayHttpError extends Error {
+  readonly status: number;
+  constructor(status: number, message: string);
+}
+/** Tagged result so callers can render an inline error without throwing. */
+type ForkRelayResult<T> = {
+  readonly ok: true;
+  readonly value: T;
+} | {
+  readonly ok: false;
+  readonly error: string;
+  readonly status?: number;
+};
+/**
+ * Thin HTTP client for the fork admin relay. Stateless — each call
+ * issues a fresh `fetch`. The UI layer (`dev-wallet-fork-panel`)
+ * polls `getStatus` on a low cadence and only refreshes after action
+ * verbs land, so the lack of caching here is intentional.
+ *
+ * @example
+ * const relay = new ForkRelay({ serverOrigin, token });
+ * const status = await relay.getStatus();
+ * if (status.ok) console.log(`clock=${status.value.clockMs}ms`);
+ */
+declare class ForkRelay {
+  #private;
+  constructor(options: ForkRelayOptions);
+  get serverOrigin(): string;
+  getStatus(): Promise<ForkRelayResult<ForkStatus>>;
+  advanceClock(durationMs: number): Promise<ForkRelayResult<ForkStatus>>;
+  advanceCheckpoint(count: number): Promise<ForkRelayResult<ForkStatus>>;
+  listImpersonations(): Promise<ForkRelayResult<ForkImpersonationSlot[]>>;
+  /** Toggle the impersonation slot identified by `address`. The server
+   *  is the source of truth — the response carries the resulting slot
+   *  list so the panel re-renders consistently. */
+  setImpersonation(address: string, active: boolean): Promise<ForkRelayResult<ForkImpersonationSlot[]>>;
+}
+/** Narrow input mirroring `DevstackAdapterManifest` — enough to
+ *  discover the wallet endpoint + fork-mode flag without pulling in
+ *  the full devstack `Manifest` type (no reverse dependency edge,
+ *  same reasoning as `devstack-adapter.ts`). */
+interface ForkRelayManifest {
+  readonly app?: {
+    readonly wallet?: {
+      readonly url: string;
+      readonly pairUrl?: string;
+    };
+  };
+  readonly meta?: {
+    /** Devstack's `meta.runtime` is `'bundled' | 'forked'`. Only
+     *  `'forked'` triggers fork-controls construction. */
+    readonly runtime?: string;
+    /** Optional upstream label (`'mainnet'`, `'testnet'`, …) used
+     *  by the panel banner. */
+    readonly upstream?: string;
+  };
+}
+/**
+ * Build a configured {@link ForkRelay} from a devstack manifest, or
+ * `null` when fork-mode isn't active (bundled stack, no wallet entry,
+ * or the manifest hasn't loaded yet).
+ *
+ * Codegen-emitted browser glue calls this and forwards the result to
+ * `<dev-wallet-panel forkRelay={…}>`.
+ */
+declare function createForkRelayFromManifest(manifest: ForkRelayManifest): ForkRelay | null;
+//#endregion
+export { ForkImpersonationSlot, ForkRelay, ForkRelayHttpError, ForkRelayManifest, ForkRelayOptions, ForkRelayResult, ForkStatus, createForkRelayFromManifest };
+//# sourceMappingURL=fork-relay.d.mts.map

package/dist/adapters/fork-relay.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fork-relay.d.mts","names":[],"sources":["../../src/adapters/fork-relay.ts"],"mappings":";cASa,oBAAA;EAAA;;;;;;;;;;AAcb;;UAAiB,UAAA;EAAA,SACP,UAAA;EAAA,SACA,OAAA;EAAA,SACA,UAAA;EAAA;;EAAA,SAGA,QAAA;AAAA;AAKV;;AAAA,UAAiB,qBAAA;EAAA,SACP,OAAA;EAAA,SACA,KAAA;EAAA;;;EAAA,SAIA,MAAA;AAAA;AAAA,UAGO,gBAAA;;;;WAIP,YAAA;EAKe;EAAA,SAHf,KAAA;AAAA;AAAA,cAGJ,kBAAA,SAA2B,KAAA;EAAA,SAEf,MAAA;cAAA,MAAA,UAChB,OAAA;AAAA;;KAQU,eAAA;EAAA,SACE,EAAA;EAAA,SAAmB,KAAA,EAAO,CAAA;AAAA;EAAA,SAC1B,EAAA;EAAA,SAAoB,KAAA;EAAA,SAAwB,MAAA;AAAA;;;;;;;;AA6B1D;;;;cAAa,SAAA;EAAA;cAIA,OAAA,EAAS,gBAAA;EAAA,IAUjB,YAAA,CAAA;EAIE,SAAA,CAAA,GAAa,OAAA,CAAQ,eAAA,CAAgB,UAAA;EAcrC,YAAA,CAAa,UAAA,WAAqB,OAAA,CAAQ,eAAA,CAAgB,UAAA;EAoB1D,iBAAA,CAAkB,KAAA,WAAgB,OAAA,CAAQ,eAAA,CAAgB,UAAA;EAoB1D,kBAAA,CAAA,GAAsB,OAAA,CAAQ,eAAA,CAAgB,qBAAA;EApBZ;;;EAoClC,gBAAA,CACL,OAAA,UACA,MAAA,YACE,OAAA,CAAQ,eAAA,CAAgB,qBAAA;AAAA;;;;;UAyEX,iBAAA;EAAA,SACP,GAAA;IAAA,SACC,MAAA;MAAA,SACC,GAAA;MAAA,SACA,OAAA;IAAA;EAAA;EAAA,SAGF,IAAA;IA3IH;;IAAA,SA8II,OAAA;IA9IsC;;IAAA,SAiJtC,QAAA;EAAA;AAAA;;;;;;;;;iBAkCK,2BAAA,CAA4B,QAAA,EAAU,iBAAA,GAAoB,SAAA"}

package/dist/adapters/fork-relay.mjs

@@ -0,0 +1,208 @@
+//#region src/adapters/fork-relay.ts
+const FORK_RELAY_HTTP_PATH = {
+	STATUS: "/api/v1/devstack/fork/status",
+	ADVANCE_CLOCK: "/api/v1/devstack/fork/advance-clock",
+	ADVANCE_CHECKPOINT: "/api/v1/devstack/fork/advance-checkpoint",
+	IMPERSONATIONS: "/api/v1/devstack/fork/impersonations"
+};
+var ForkRelayHttpError = class extends Error {
+	constructor(status, message) {
+		super(message);
+		this.status = status;
+		this.name = "ForkRelayHttpError";
+	}
+};
+function isForkStatusBody(value) {
+	if (value === null || typeof value !== "object") return false;
+	const v = value;
+	return typeof v.checkpoint === "string" && typeof v.clockMs === "string";
+}
+function isImpersonationsBody(value) {
+	if (value === null || typeof value !== "object") return false;
+	const slots = value.slots;
+	return Array.isArray(slots);
+}
+/**
+* Thin HTTP client for the fork admin relay. Stateless — each call
+* issues a fresh `fetch`. The UI layer (`dev-wallet-fork-panel`)
+* polls `getStatus` on a low cadence and only refreshes after action
+* verbs land, so the lack of caching here is intentional.
+*
+* @example
+* const relay = new ForkRelay({ serverOrigin, token });
+* const status = await relay.getStatus();
+* if (status.ok) console.log(`clock=${status.value.clockMs}ms`);
+*/
+var ForkRelay = class {
+	#serverOrigin;
+	#authToken;
+	constructor(options) {
+		try {
+			new URL(options.serverOrigin);
+		} catch {
+			throw new Error(`ForkRelay: invalid serverOrigin "${options.serverOrigin}"`);
+		}
+		this.#serverOrigin = options.serverOrigin;
+		this.#authToken = options.token ?? null;
+	}
+	get serverOrigin() {
+		return this.#serverOrigin;
+	}
+	async getStatus() {
+		return this.#request("GET", FORK_RELAY_HTTP_PATH.STATUS, void 0, (body) => {
+			if (!isForkStatusBody(body)) throw new Error("Malformed fork status response");
+			return {
+				checkpoint: BigInt(body.checkpoint),
+				clockMs: BigInt(body.clockMs),
+				autoTickMs: body.autoTickMs,
+				upstream: body.upstream
+			};
+		});
+	}
+	async advanceClock(durationMs) {
+		if (!Number.isFinite(durationMs) || durationMs <= 0 || !Number.isInteger(durationMs)) return {
+			ok: false,
+			error: `advanceClock: durationMs must be a positive integer (got ${durationMs})`
+		};
+		return this.#request("POST", FORK_RELAY_HTTP_PATH.ADVANCE_CLOCK, { durationMs }, (body) => {
+			if (!isForkStatusBody(body)) throw new Error("Malformed advance-clock response");
+			return {
+				checkpoint: BigInt(body.checkpoint),
+				clockMs: BigInt(body.clockMs),
+				autoTickMs: body.autoTickMs,
+				upstream: body.upstream
+			};
+		});
+	}
+	async advanceCheckpoint(count) {
+		if (!Number.isFinite(count) || count <= 0 || !Number.isInteger(count)) return {
+			ok: false,
+			error: `advanceCheckpoint: count must be a positive integer (got ${count})`
+		};
+		return this.#request("POST", FORK_RELAY_HTTP_PATH.ADVANCE_CHECKPOINT, { count }, (body) => {
+			if (!isForkStatusBody(body)) throw new Error("Malformed advance-checkpoint response");
+			return {
+				checkpoint: BigInt(body.checkpoint),
+				clockMs: BigInt(body.clockMs),
+				autoTickMs: body.autoTickMs,
+				upstream: body.upstream
+			};
+		});
+	}
+	async listImpersonations() {
+		return this.#request("GET", FORK_RELAY_HTTP_PATH.IMPERSONATIONS, void 0, (body) => {
+			if (!isImpersonationsBody(body)) throw new Error("Malformed impersonations response");
+			return body.slots.map((s) => ({
+				address: s.address,
+				label: s.label,
+				active: s.active
+			}));
+		});
+	}
+	/** Toggle the impersonation slot identified by `address`. The server
+	*  is the source of truth — the response carries the resulting slot
+	*  list so the panel re-renders consistently. */
+	async setImpersonation(address, active) {
+		return this.#request("POST", FORK_RELAY_HTTP_PATH.IMPERSONATIONS, {
+			address,
+			active
+		}, (body) => {
+			if (!isImpersonationsBody(body)) throw new Error("Malformed impersonations response");
+			return body.slots.map((s) => ({
+				address: s.address,
+				label: s.label,
+				active: s.active
+			}));
+		});
+	}
+	async #request(method, path, body, parse) {
+		const headers = { "Content-Type": "application/json" };
+		if (this.#authToken !== null) headers["Authorization"] = `Bearer ${this.#authToken}`;
+		const init = {
+			method,
+			headers
+		};
+		if (method === "POST" && body !== void 0) init.body = JSON.stringify(body);
+		let res;
+		try {
+			res = await fetch(`${this.#serverOrigin}${path}`, init);
+		} catch (cause) {
+			return {
+				ok: false,
+				error: `Network error: ${cause instanceof Error ? cause.message : String(cause)}`
+			};
+		}
+		if (!res.ok) return {
+			ok: false,
+			error: await res.text().catch(() => res.statusText) || res.statusText,
+			status: res.status
+		};
+		let parsedBody;
+		try {
+			parsedBody = await res.json();
+		} catch (cause) {
+			return {
+				ok: false,
+				error: `Invalid JSON response: ${cause instanceof Error ? cause.message : String(cause)}`,
+				status: res.status
+			};
+		}
+		try {
+			return {
+				ok: true,
+				value: parse(parsedBody)
+			};
+		} catch (cause) {
+			return {
+				ok: false,
+				error: cause instanceof Error ? cause.message : String(cause),
+				status: res.status
+			};
+		}
+	}
+};
+/** Parse the bearer token off the manifest's `pairUrl`. Duplicates the
+*  logic in `devstack-adapter.ts` rather than importing it because the
+*  fork-relay module must remain dependency-free from the adapter
+*  layer (it's also consumed by codegen-emitted glue that doesn't pull
+*  in the signer adapter bundle). */
+function tokenFromPairUrl(pairedUrl) {
+	if (pairedUrl === void 0) return null;
+	try {
+		const url = new URL(pairedUrl);
+		if (url.hash.length > 1) {
+			const fromHash = new URLSearchParams(url.hash.slice(1)).get("token");
+			if (fromHash !== null && fromHash !== "<redacted>") return fromHash;
+		}
+		const fromQuery = url.searchParams.get("token");
+		if (fromQuery !== null && fromQuery !== "<redacted>") return fromQuery;
+		return null;
+	} catch {
+		return null;
+	}
+}
+/**
+* Build a configured {@link ForkRelay} from a devstack manifest, or
+* `null` when fork-mode isn't active (bundled stack, no wallet entry,
+* or the manifest hasn't loaded yet).
+*
+* Codegen-emitted browser glue calls this and forwards the result to
+* `<dev-wallet-panel forkRelay={…}>`.
+*/
+function createForkRelayFromManifest(manifest) {
+	if (manifest.meta?.runtime !== "forked") return null;
+	const wallet = manifest.app?.wallet;
+	if (wallet === void 0) return null;
+	try {
+		return new ForkRelay({
+			serverOrigin: wallet.url,
+			token: tokenFromPairUrl(wallet.pairUrl)
+		});
+	} catch {
+		return null;
+	}
+}
+//#endregion
+export { ForkRelay, ForkRelayHttpError, createForkRelayFromManifest };
+
+//# sourceMappingURL=fork-relay.mjs.map

package/dist/adapters/fork-relay.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"fork-relay.mjs","names":["#serverOrigin","#authToken","#request"],"sources":["../../src/adapters/fork-relay.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n//\n// Browser-side relay for sui-fork admin RPCs. A compatible devstack\n// wallet endpoint can proxy a curated subset of the fork-control surface\n// (status read, advance-clock, advance-checkpoint, impersonation slot\n// list) over HTTP so the fork panel does not have to ship a gRPC\n// client into the browser bundle.\n\nexport const FORK_RELAY_HTTP_PATH = {\n\tSTATUS: '/api/v1/devstack/fork/status',\n\tADVANCE_CLOCK: '/api/v1/devstack/fork/advance-clock',\n\tADVANCE_CHECKPOINT: '/api/v1/devstack/fork/advance-checkpoint',\n\tIMPERSONATIONS: '/api/v1/devstack/fork/impersonations',\n} as const;\n\n/** Snapshot of the fork's current head state.\n *\n * Mirrors the body of `ForkControl.getStatus()` minus the unused\n * heartbeat fields. `clockMs` is a Unix-ms timestamp (the value\n * `clock::timestamp_ms()` returns on chain); `checkpoint` is the\n * latest sealed sequence number.\n */\nexport interface ForkStatus {\n\treadonly checkpoint: bigint;\n\treadonly clockMs: bigint;\n\treadonly autoTickMs?: number;\n\t/** Best-effort label of the upstream the fork is pointed at, e.g.\n\t *  `'mainnet'` or `'testnet'`. Sourced from the devstack manifest. */\n\treadonly upstream?: string;\n}\n\n/** A single impersonation slot resolved by devstack — typically every\n *  address that was passed to `Sui({fork:{impersonate:[…]}})`. */\nexport interface ForkImpersonationSlot {\n\treadonly address: string;\n\treadonly label?: string;\n\t/** Whether the wallet currently routes user-driven tx signing through\n\t *  the `executeImpersonated` path for this address. The dev-wallet\n\t *  server stores the toggle so it persists across page reloads. */\n\treadonly active: boolean;\n}\n\nexport interface ForkRelayOptions {\n\t/** Wallet-app origin (e.g. `http://localhost:9420`). Same value\n\t *  `DevstackSignerAdapter` consumes — read from the manifest entry's\n\t *  `app.wallet.url`. */\n\treadonly serverOrigin: string;\n\t/** Bearer token. Same parsing rules as `DevstackSignerAdapter`. */\n\treadonly token?: string | null;\n}\n\nclass ForkRelayHttpError extends Error {\n\tconstructor(\n\t\tpublic readonly status: number,\n\t\tmessage: string,\n\t) {\n\t\tsuper(message);\n\t\tthis.name = 'ForkRelayHttpError';\n\t}\n}\n\n/** Tagged result so callers can render an inline error without throwing. */\nexport type ForkRelayResult<T> =\n\t| { readonly ok: true; readonly value: T }\n\t| { readonly ok: false; readonly error: string; readonly status?: number };\n\nfunction isForkStatusBody(\n\tvalue: unknown,\n): value is { checkpoint: string; clockMs: string; autoTickMs?: number; upstream?: string } {\n\tif (value === null || typeof value !== 'object') return false;\n\tconst v = value as Record<string, unknown>;\n\treturn typeof v.checkpoint === 'string' && typeof v.clockMs === 'string';\n}\n\nfunction isImpersonationsBody(\n\tvalue: unknown,\n): value is { slots: { address: string; label?: string; active: boolean }[] } {\n\tif (value === null || typeof value !== 'object') return false;\n\tconst slots = (value as { slots?: unknown }).slots;\n\treturn Array.isArray(slots);\n}\n\n/**\n * Thin HTTP client for the fork admin relay. Stateless — each call\n * issues a fresh `fetch`. The UI layer (`dev-wallet-fork-panel`)\n * polls `getStatus` on a low cadence and only refreshes after action\n * verbs land, so the lack of caching here is intentional.\n *\n * @example\n * const relay = new ForkRelay({ serverOrigin, token });\n * const status = await relay.getStatus();\n * if (status.ok) console.log(`clock=${status.value.clockMs}ms`);\n */\nexport class ForkRelay {\n\t#serverOrigin: string;\n\t#authToken: string | null;\n\n\tconstructor(options: ForkRelayOptions) {\n\t\ttry {\n\t\t\tnew URL(options.serverOrigin);\n\t\t} catch {\n\t\t\tthrow new Error(`ForkRelay: invalid serverOrigin \"${options.serverOrigin}\"`);\n\t\t}\n\t\tthis.#serverOrigin = options.serverOrigin;\n\t\tthis.#authToken = options.token ?? null;\n\t}\n\n\tget serverOrigin(): string {\n\t\treturn this.#serverOrigin;\n\t}\n\n\tasync getStatus(): Promise<ForkRelayResult<ForkStatus>> {\n\t\treturn this.#request('GET', FORK_RELAY_HTTP_PATH.STATUS, undefined, (body) => {\n\t\t\tif (!isForkStatusBody(body)) {\n\t\t\t\tthrow new Error('Malformed fork status response');\n\t\t\t}\n\t\t\treturn {\n\t\t\t\tcheckpoint: BigInt(body.checkpoint),\n\t\t\t\tclockMs: BigInt(body.clockMs),\n\t\t\t\tautoTickMs: body.autoTickMs,\n\t\t\t\tupstream: body.upstream,\n\t\t\t};\n\t\t});\n\t}\n\n\tasync advanceClock(durationMs: number): Promise<ForkRelayResult<ForkStatus>> {\n\t\tif (!Number.isFinite(durationMs) || durationMs <= 0 || !Number.isInteger(durationMs)) {\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terror: `advanceClock: durationMs must be a positive integer (got ${durationMs})`,\n\t\t\t};\n\t\t}\n\t\treturn this.#request('POST', FORK_RELAY_HTTP_PATH.ADVANCE_CLOCK, { durationMs }, (body) => {\n\t\t\tif (!isForkStatusBody(body)) {\n\t\t\t\tthrow new Error('Malformed advance-clock response');\n\t\t\t}\n\t\t\treturn {\n\t\t\t\tcheckpoint: BigInt(body.checkpoint),\n\t\t\t\tclockMs: BigInt(body.clockMs),\n\t\t\t\tautoTickMs: body.autoTickMs,\n\t\t\t\tupstream: body.upstream,\n\t\t\t};\n\t\t});\n\t}\n\n\tasync advanceCheckpoint(count: number): Promise<ForkRelayResult<ForkStatus>> {\n\t\tif (!Number.isFinite(count) || count <= 0 || !Number.isInteger(count)) {\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terror: `advanceCheckpoint: count must be a positive integer (got ${count})`,\n\t\t\t};\n\t\t}\n\t\treturn this.#request('POST', FORK_RELAY_HTTP_PATH.ADVANCE_CHECKPOINT, { count }, (body) => {\n\t\t\tif (!isForkStatusBody(body)) {\n\t\t\t\tthrow new Error('Malformed advance-checkpoint response');\n\t\t\t}\n\t\t\treturn {\n\t\t\t\tcheckpoint: BigInt(body.checkpoint),\n\t\t\t\tclockMs: BigInt(body.clockMs),\n\t\t\t\tautoTickMs: body.autoTickMs,\n\t\t\t\tupstream: body.upstream,\n\t\t\t};\n\t\t});\n\t}\n\n\tasync listImpersonations(): Promise<ForkRelayResult<ForkImpersonationSlot[]>> {\n\t\treturn this.#request('GET', FORK_RELAY_HTTP_PATH.IMPERSONATIONS, undefined, (body) => {\n\t\t\tif (!isImpersonationsBody(body)) {\n\t\t\t\tthrow new Error('Malformed impersonations response');\n\t\t\t}\n\t\t\treturn body.slots.map((s) => ({\n\t\t\t\taddress: s.address,\n\t\t\t\tlabel: s.label,\n\t\t\t\tactive: s.active,\n\t\t\t}));\n\t\t});\n\t}\n\n\t/** Toggle the impersonation slot identified by `address`. The server\n\t *  is the source of truth — the response carries the resulting slot\n\t *  list so the panel re-renders consistently. */\n\tasync setImpersonation(\n\t\taddress: string,\n\t\tactive: boolean,\n\t): Promise<ForkRelayResult<ForkImpersonationSlot[]>> {\n\t\treturn this.#request(\n\t\t\t'POST',\n\t\t\tFORK_RELAY_HTTP_PATH.IMPERSONATIONS,\n\t\t\t{ address, active },\n\t\t\t(body) => {\n\t\t\t\tif (!isImpersonationsBody(body)) {\n\t\t\t\t\tthrow new Error('Malformed impersonations response');\n\t\t\t\t}\n\t\t\t\treturn body.slots.map((s) => ({\n\t\t\t\t\taddress: s.address,\n\t\t\t\t\tlabel: s.label,\n\t\t\t\t\tactive: s.active,\n\t\t\t\t}));\n\t\t\t},\n\t\t);\n\t}\n\n\tasync #request<T>(\n\t\tmethod: 'GET' | 'POST',\n\t\tpath: string,\n\t\tbody: unknown,\n\t\tparse: (raw: unknown) => T,\n\t): Promise<ForkRelayResult<T>> {\n\t\tconst headers: Record<string, string> = { 'Content-Type': 'application/json' };\n\t\tif (this.#authToken !== null) {\n\t\t\theaders['Authorization'] = `Bearer ${this.#authToken}`;\n\t\t}\n\t\tconst init: RequestInit = { method, headers };\n\t\tif (method === 'POST' && body !== undefined) {\n\t\t\tinit.body = JSON.stringify(body);\n\t\t}\n\t\tlet res: Response;\n\t\ttry {\n\t\t\tres = await fetch(`${this.#serverOrigin}${path}`, init);\n\t\t} catch (cause) {\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terror: `Network error: ${cause instanceof Error ? cause.message : String(cause)}`,\n\t\t\t};\n\t\t}\n\t\tif (!res.ok) {\n\t\t\tconst text = await res.text().catch(() => res.statusText);\n\t\t\treturn { ok: false, error: text || res.statusText, status: res.status };\n\t\t}\n\t\tlet parsedBody: unknown;\n\t\ttry {\n\t\t\tparsedBody = await res.json();\n\t\t} catch (cause) {\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terror: `Invalid JSON response: ${cause instanceof Error ? cause.message : String(cause)}`,\n\t\t\t\tstatus: res.status,\n\t\t\t};\n\t\t}\n\t\ttry {\n\t\t\treturn { ok: true, value: parse(parsedBody) };\n\t\t} catch (cause) {\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terror: cause instanceof Error ? cause.message : String(cause),\n\t\t\t\tstatus: res.status,\n\t\t\t};\n\t\t}\n\t}\n}\n\nexport { ForkRelayHttpError };\n\n/** Narrow input mirroring `DevstackAdapterManifest` — enough to\n *  discover the wallet endpoint + fork-mode flag without pulling in\n *  the full devstack `Manifest` type (no reverse dependency edge,\n *  same reasoning as `devstack-adapter.ts`). */\nexport interface ForkRelayManifest {\n\treadonly app?: {\n\t\treadonly wallet?: {\n\t\t\treadonly url: string;\n\t\t\treadonly pairUrl?: string;\n\t\t};\n\t};\n\treadonly meta?: {\n\t\t/** Devstack's `meta.runtime` is `'bundled' | 'forked'`. Only\n\t\t *  `'forked'` triggers fork-controls construction. */\n\t\treadonly runtime?: string;\n\t\t/** Optional upstream label (`'mainnet'`, `'testnet'`, …) used\n\t\t *  by the panel banner. */\n\t\treadonly upstream?: string;\n\t};\n}\n\n/** Parse the bearer token off the manifest's `pairUrl`. Duplicates the\n *  logic in `devstack-adapter.ts` rather than importing it because the\n *  fork-relay module must remain dependency-free from the adapter\n *  layer (it's also consumed by codegen-emitted glue that doesn't pull\n *  in the signer adapter bundle). */\nfunction tokenFromPairUrl(pairedUrl: string | undefined): string | null {\n\tif (pairedUrl === undefined) return null;\n\ttry {\n\t\tconst url = new URL(pairedUrl);\n\t\tif (url.hash.length > 1) {\n\t\t\tconst params = new URLSearchParams(url.hash.slice(1));\n\t\t\tconst fromHash = params.get('token');\n\t\t\tif (fromHash !== null && fromHash !== '<redacted>') return fromHash;\n\t\t}\n\t\tconst fromQuery = url.searchParams.get('token');\n\t\tif (fromQuery !== null && fromQuery !== '<redacted>') return fromQuery;\n\t\treturn null;\n\t} catch {\n\t\treturn null;\n\t}\n}\n\n/**\n * Build a configured {@link ForkRelay} from a devstack manifest, or\n * `null` when fork-mode isn't active (bundled stack, no wallet entry,\n * or the manifest hasn't loaded yet).\n *\n * Codegen-emitted browser glue calls this and forwards the result to\n * `<dev-wallet-panel forkRelay={…}>`.\n */\nexport function createForkRelayFromManifest(manifest: ForkRelayManifest): ForkRelay | null {\n\tif (manifest.meta?.runtime !== 'forked') return null;\n\tconst wallet = manifest.app?.wallet;\n\tif (wallet === undefined) return null;\n\ttry {\n\t\treturn new ForkRelay({\n\t\t\tserverOrigin: wallet.url,\n\t\t\ttoken: tokenFromPairUrl(wallet.pairUrl),\n\t\t});\n\t} catch {\n\t\t// `new URL(…)` failure surfaces as a thrown Error — swallow it\n\t\t// here rather than propagating, the calling app shouldn't\n\t\t// blow up just because the manifest's wallet URL is malformed.\n\t\treturn null;\n\t}\n}\n"],"mappings":";AASA,MAAa,uBAAuB;CACnC,QAAQ;CACR,eAAe;CACf,oBAAoB;CACpB,gBAAgB;CAChB;AAsCD,IAAM,qBAAN,cAAiC,MAAM;CACtC,YACC,QACA,SACC;AACD,QAAM,QAAQ;AAHE,OAAA,SAAA;AAIhB,OAAK,OAAO;;;AASd,SAAS,iBACR,OAC2F;AAC3F,KAAI,UAAU,QAAQ,OAAO,UAAU,SAAU,QAAO;CACxD,MAAM,IAAI;AACV,QAAO,OAAO,EAAE,eAAe,YAAY,OAAO,EAAE,YAAY;;AAGjE,SAAS,qBACR,OAC6E;AAC7E,KAAI,UAAU,QAAQ,OAAO,UAAU,SAAU,QAAO;CACxD,MAAM,QAAS,MAA8B;AAC7C,QAAO,MAAM,QAAQ,MAAM;;;;;;;;;;;;;AAc5B,IAAa,YAAb,MAAuB;CACtB;CACA;CAEA,YAAY,SAA2B;AACtC,MAAI;AACH,OAAI,IAAI,QAAQ,aAAa;UACtB;AACP,SAAM,IAAI,MAAM,oCAAoC,QAAQ,aAAa,GAAG;;AAE7E,QAAA,eAAqB,QAAQ;AAC7B,QAAA,YAAkB,QAAQ,SAAS;;CAGpC,IAAI,eAAuB;AAC1B,SAAO,MAAA;;CAGR,MAAM,YAAkD;AACvD,SAAO,MAAA,QAAc,OAAO,qBAAqB,QAAQ,SAAY,SAAS;AAC7E,OAAI,CAAC,iBAAiB,KAAK,CAC1B,OAAM,IAAI,MAAM,iCAAiC;AAElD,UAAO;IACN,YAAY,OAAO,KAAK,WAAW;IACnC,SAAS,OAAO,KAAK,QAAQ;IAC7B,YAAY,KAAK;IACjB,UAAU,KAAK;IACf;IACA;;CAGH,MAAM,aAAa,YAA0D;AAC5E,MAAI,CAAC,OAAO,SAAS,WAAW,IAAI,cAAc,KAAK,CAAC,OAAO,UAAU,WAAW,CACnF,QAAO;GACN,IAAI;GACJ,OAAO,4DAA4D,WAAW;GAC9E;AAEF,SAAO,MAAA,QAAc,QAAQ,qBAAqB,eAAe,EAAE,YAAY,GAAG,SAAS;AAC1F,OAAI,CAAC,iBAAiB,KAAK,CAC1B,OAAM,IAAI,MAAM,mCAAmC;AAEpD,UAAO;IACN,YAAY,OAAO,KAAK,WAAW;IACnC,SAAS,OAAO,KAAK,QAAQ;IAC7B,YAAY,KAAK;IACjB,UAAU,KAAK;IACf;IACA;;CAGH,MAAM,kBAAkB,OAAqD;AAC5E,MAAI,CAAC,OAAO,SAAS,MAAM,IAAI,SAAS,KAAK,CAAC,OAAO,UAAU,MAAM,CACpE,QAAO;GACN,IAAI;GACJ,OAAO,4DAA4D,MAAM;GACzE;AAEF,SAAO,MAAA,QAAc,QAAQ,qBAAqB,oBAAoB,EAAE,OAAO,GAAG,SAAS;AAC1F,OAAI,CAAC,iBAAiB,KAAK,CAC1B,OAAM,IAAI,MAAM,wCAAwC;AAEzD,UAAO;IACN,YAAY,OAAO,KAAK,WAAW;IACnC,SAAS,OAAO,KAAK,QAAQ;IAC7B,YAAY,KAAK;IACjB,UAAU,KAAK;IACf;IACA;;CAGH,MAAM,qBAAwE;AAC7E,SAAO,MAAA,QAAc,OAAO,qBAAqB,gBAAgB,SAAY,SAAS;AACrF,OAAI,CAAC,qBAAqB,KAAK,CAC9B,OAAM,IAAI,MAAM,oCAAoC;AAErD,UAAO,KAAK,MAAM,KAAK,OAAO;IAC7B,SAAS,EAAE;IACX,OAAO,EAAE;IACT,QAAQ,EAAE;IACV,EAAE;IACF;;;;;CAMH,MAAM,iBACL,SACA,QACoD;AACpD,SAAO,MAAA,QACN,QACA,qBAAqB,gBACrB;GAAE;GAAS;GAAQ,GAClB,SAAS;AACT,OAAI,CAAC,qBAAqB,KAAK,CAC9B,OAAM,IAAI,MAAM,oCAAoC;AAErD,UAAO,KAAK,MAAM,KAAK,OAAO;IAC7B,SAAS,EAAE;IACX,OAAO,EAAE;IACT,QAAQ,EAAE;IACV,EAAE;IAEJ;;CAGF,OAAA,QACC,QACA,MACA,MACA,OAC8B;EAC9B,MAAM,UAAkC,EAAE,gBAAgB,oBAAoB;AAC9E,MAAI,MAAA,cAAoB,KACvB,SAAQ,mBAAmB,UAAU,MAAA;EAEtC,MAAM,OAAoB;GAAE;GAAQ;GAAS;AAC7C,MAAI,WAAW,UAAU,SAAS,OACjC,MAAK,OAAO,KAAK,UAAU,KAAK;EAEjC,IAAI;AACJ,MAAI;AACH,SAAM,MAAM,MAAM,GAAG,MAAA,eAAqB,QAAQ,KAAK;WAC/C,OAAO;AACf,UAAO;IACN,IAAI;IACJ,OAAO,kBAAkB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;IAC/E;;AAEF,MAAI,CAAC,IAAI,GAER,QAAO;GAAE,IAAI;GAAO,OAAO,MADR,IAAI,MAAM,CAAC,YAAY,IAAI,WAAW,IACtB,IAAI;GAAY,QAAQ,IAAI;GAAQ;EAExE,IAAI;AACJ,MAAI;AACH,gBAAa,MAAM,IAAI,MAAM;WACrB,OAAO;AACf,UAAO;IACN,IAAI;IACJ,OAAO,0BAA0B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;IACvF,QAAQ,IAAI;IACZ;;AAEF,MAAI;AACH,UAAO;IAAE,IAAI;IAAM,OAAO,MAAM,WAAW;IAAE;WACrC,OAAO;AACf,UAAO;IACN,IAAI;IACJ,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;IAC7D,QAAQ,IAAI;IACZ;;;;;;;;;AAiCJ,SAAS,iBAAiB,WAA8C;AACvE,KAAI,cAAc,OAAW,QAAO;AACpC,KAAI;EACH,MAAM,MAAM,IAAI,IAAI,UAAU;AAC9B,MAAI,IAAI,KAAK,SAAS,GAAG;GAExB,MAAM,WAAW,IADE,gBAAgB,IAAI,KAAK,MAAM,EAAE,CACnC,CAAO,IAAI,QAAQ;AACpC,OAAI,aAAa,QAAQ,aAAa,aAAc,QAAO;;EAE5D,MAAM,YAAY,IAAI,aAAa,IAAI,QAAQ;AAC/C,MAAI,cAAc,QAAQ,cAAc,aAAc,QAAO;AAC7D,SAAO;SACA;AACP,SAAO;;;;;;;;;;;AAYT,SAAgB,4BAA4B,UAA+C;AAC1F,KAAI,SAAS,MAAM,YAAY,SAAU,QAAO;CAChD,MAAM,SAAS,SAAS,KAAK;AAC7B,KAAI,WAAW,OAAW,QAAO;AACjC,KAAI;AACH,SAAO,IAAI,UAAU;GACpB,cAAc,OAAO;GACrB,OAAO,iBAAiB,OAAO,QAAQ;GACvC,CAAC;SACK;AAIP,SAAO"}