@mysten-incubation/devstack 0.0.1 → 0.1.0

package/dist/contracts/plugin-expander.mjs

@@ -0,0 +1,60 @@
+//#region src/contracts/plugin-expander.ts
+/** Globally registered symbol the composer probes for on every
+*  member. `Symbol.for(...)` avoids leaking a `unique symbol` identity
+*  into inferred Stack types (TS2742). */
+const PLUGIN_EXPANDER = Symbol.for("@devstack/contracts/plugin-expander");
+/** Read the expander hook from a member. Returns `undefined` when no
+*  hook is attached — the composer leaves the member alone in that
+*  case. */
+const readPluginExpander = (member) => {
+	const slot = member[PLUGIN_EXPANDER];
+	return typeof slot === "function" ? slot : void 0;
+};
+/** Attach an expander hook to a placeholder member. The symbol is
+*  written as a value-level property only — plugin factories MUST NOT
+*  surface the hook on the member's TS return type or the symbol
+*  identity leaks into inferred Stack types. */
+const attachPluginExpander = (placeholder, expander) => {
+	placeholder[PLUGIN_EXPANDER] = expander;
+};
+/**
+* Run every registered expander once. Iterates the member tuple, finds
+* placeholders carrying a `PluginExpander`, and substitutes each with
+* the expander's resolved member. Members without a hook pass through
+* unchanged.
+*
+* Returns the input array verbatim (zero allocation) when no member
+* carries an expander — the explicit-tuple path remains the common case.
+*
+* **Single-pass contract.** This pass is single-shot: it scans the input
+* tuple once and substitutes in place. If an expander returns a member
+* that ITSELF carries `PLUGIN_EXPANDER`, that nested expander does NOT
+* fire — `runPluginExpanders` does not recurse. The composer is
+* responsible for re-invoking both `runPluginExpanders` and
+* `expandPluginDependencies` until fixed-point (typically: run expanders,
+* then re-run dependency closure so the now-resolved edges fold into the
+* member tuple; loop until neither pass produces a change). Keeping this
+* module ignorant of fixpoint policy means the substrate decides how
+* many iterations are allowed and what counts as convergence.
+*/
+const runPluginExpanders = (members) => {
+	let hasAny = false;
+	for (const m of members) if (readPluginExpander(m) !== void 0) {
+		hasAny = true;
+		break;
+	}
+	if (!hasAny) return members;
+	return members.map((m) => {
+		const expand = readPluginExpander(m);
+		return expand === void 0 ? m : expand(members);
+	});
+};
+/** True when the placeholder + replacement form an expansion pair —
+*  same id, at least one side carries the expander hook. Used by the
+*  composer's duplicate-provider check to allow the "placeholder + its
+*  expanded form" pair (both share an id by construction). */
+const isPluginExpanderPair = (a, b) => a.id === b.id && (readPluginExpander(a) !== void 0 || readPluginExpander(b) !== void 0);
+//#endregion
+export { attachPluginExpander, isPluginExpanderPair, runPluginExpanders };
+
+//# sourceMappingURL=plugin-expander.mjs.map

package/dist/contracts/plugin-expander.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-expander.mjs","names":[],"sources":["../../src/contracts/plugin-expander.ts"],"sourcesContent":["// PluginExpander — compose-time plugin-rewrite contract.\n//\n// Some plugins cannot know their final `dependsOn` tuple at their\n// factory's call site because the relevant members are introduced\n// LATER (positionally, to `defineDevstack(...)`). The wallet's\n// `accounts: 'all'` mode is the canonical case: the wallet's hard\n// ordering edge against every account member is required, but the\n// wallet factory has no view of which accounts the user passes in.\n//\n// The fix is a compose-time rewrite: the plugin returns a PLACEHOLDER\n// member carrying an expander hook at a substrate-owned well-known\n// symbol; the composer detects the symbol, calls the expander with the\n// full member tuple, and substitutes the result. This module owns\n// that symbol + expander shape so the composer does not import any\n// plugin module to perform the rewrite.\n//\n// Architecture (Plugin-author surface = user-surface): any plugin\n// — built-in or custom — that needs this rewrite attaches the same\n// substrate-owned symbol with the same expander shape. The composer\n// dispatches uniformly; no per-plugin special-case lives in\n// `api/define-devstack.ts`.\n//\n// Note: this is a COMPOSE-TIME hook, distinct from the runtime\n// `CapabilitySinks` harvest path. Capability sinks dispatch\n// contributions AFTER plugin acquire; expanders run BEFORE the\n// supervisor sees the member list at all. Both surfaces are\n// substrate-owned but they fire at different times.\n\nimport type { AnyPlugin } from '../substrate/plugin.ts';\n\n/** Globally registered symbol the composer probes for on every\n *  member. `Symbol.for(...)` avoids leaking a `unique symbol` identity\n *  into inferred Stack types (TS2742). */\nexport const PLUGIN_EXPANDER: symbol = Symbol.for('@devstack/contracts/plugin-expander');\n\n/** Compose-time expander closure. Receives the FULL composed-member\n *  tuple (post-dependency-closure expansion) and returns the member\n *  the composer should substitute for the placeholder. The substrate\n *  treats the closure opaquely — plugin authors interpret `members`\n *  through whatever filter matches their domain (the wallet picks\n *  members whose id starts with `account/`; a hypothetical role-based\n *  expander would pick members by `role` or by capability). */\nexport type PluginExpander = (members: ReadonlyArray<AnyPlugin>) => AnyPlugin;\n\n/** Read the expander hook from a member. Returns `undefined` when no\n *  hook is attached — the composer leaves the member alone in that\n *  case. */\nexport const readPluginExpander = (member: AnyPlugin): PluginExpander | undefined => {\n\tconst slot = (member as unknown as Record<symbol, unknown>)[PLUGIN_EXPANDER];\n\treturn typeof slot === 'function' ? (slot as PluginExpander) : undefined;\n};\n\n/** Attach an expander hook to a placeholder member. The symbol is\n *  written as a value-level property only — plugin factories MUST NOT\n *  surface the hook on the member's TS return type or the symbol\n *  identity leaks into inferred Stack types. */\nexport const attachPluginExpander = (placeholder: AnyPlugin, expander: PluginExpander): void => {\n\t(placeholder as unknown as Record<symbol, unknown>)[PLUGIN_EXPANDER] = expander;\n};\n\n/**\n * Run every registered expander once. Iterates the member tuple, finds\n * placeholders carrying a `PluginExpander`, and substitutes each with\n * the expander's resolved member. Members without a hook pass through\n * unchanged.\n *\n * Returns the input array verbatim (zero allocation) when no member\n * carries an expander — the explicit-tuple path remains the common case.\n *\n * **Single-pass contract.** This pass is single-shot: it scans the input\n * tuple once and substitutes in place. If an expander returns a member\n * that ITSELF carries `PLUGIN_EXPANDER`, that nested expander does NOT\n * fire — `runPluginExpanders` does not recurse. The composer is\n * responsible for re-invoking both `runPluginExpanders` and\n * `expandPluginDependencies` until fixed-point (typically: run expanders,\n * then re-run dependency closure so the now-resolved edges fold into the\n * member tuple; loop until neither pass produces a change). Keeping this\n * module ignorant of fixpoint policy means the substrate decides how\n * many iterations are allowed and what counts as convergence.\n */\nexport const runPluginExpanders = (members: ReadonlyArray<AnyPlugin>): ReadonlyArray<AnyPlugin> => {\n\tlet hasAny = false;\n\tfor (const m of members) {\n\t\tif (readPluginExpander(m) !== undefined) {\n\t\t\thasAny = true;\n\t\t\tbreak;\n\t\t}\n\t}\n\tif (!hasAny) return members;\n\n\treturn members.map((m) => {\n\t\tconst expand = readPluginExpander(m);\n\t\treturn expand === undefined ? m : expand(members);\n\t});\n};\n\n/** True when the placeholder + replacement form an expansion pair —\n *  same id, at least one side carries the expander hook. Used by the\n *  composer's duplicate-provider check to allow the \"placeholder + its\n *  expanded form\" pair (both share an id by construction). */\nexport const isPluginExpanderPair = (a: AnyPlugin, b: AnyPlugin): boolean =>\n\ta.id === b.id && (readPluginExpander(a) !== undefined || readPluginExpander(b) !== undefined);\n"],"mappings":";;;;AAiCA,MAAa,kBAA0B,OAAO,IAAI,sCAAsC;;;;AAcxF,MAAa,sBAAsB,WAAkD;CACpF,MAAM,OAAQ,OAA8C;AAC5D,QAAO,OAAO,SAAS,aAAc,OAA0B,KAAA;;;;;;AAOhE,MAAa,wBAAwB,aAAwB,aAAmC;AAC9F,aAAmD,mBAAmB;;;;;;;;;;;;;;;;;;;;;;AAuBxE,MAAa,sBAAsB,YAAgE;CAClG,IAAI,SAAS;AACb,MAAK,MAAM,KAAK,QACf,KAAI,mBAAmB,EAAE,KAAK,KAAA,GAAW;AACxC,WAAS;AACT;;AAGF,KAAI,CAAC,OAAQ,QAAO;AAEpB,QAAO,QAAQ,KAAK,MAAM;EACzB,MAAM,SAAS,mBAAmB,EAAE;AACpC,SAAO,WAAW,KAAA,IAAY,IAAI,OAAO,QAAQ;GAChD;;;;;;AAOH,MAAa,wBAAwB,GAAc,MAClD,EAAE,OAAO,EAAE,OAAO,mBAAmB,EAAE,KAAK,KAAA,KAAa,mBAAmB,EAAE,KAAK,KAAA"}

package/dist/contracts/projection.d.mts

@@ -1,10 +1,12 @@
 import { EngineEvent } from "../substrate/events.mjs";
 
 //#region src/contracts/projection.d.ts
+/** The single name-blind projection event variant. Plugin authors
+ *  build a `ProjectionDecl` carrying one of these; the substrate
+ *  routes it to the projection orchestrator, which decodes the
+ *  opaque `payload` per `kind`. */
 type ProjectionEvent = Extract<EngineEvent, {
-  readonly tag: 'account.updated';
-}> | Extract<EngineEvent, {
-  readonly tag: 'package.updated';
+  readonly tag: 'projection.updated';
 }>;
 interface ProjectionDecl {
   readonly kind: 'projection';

package/dist/contracts/renderer.d.mts

@@ -0,0 +1,23 @@
+import { SubscribableState } from "../substrate/projection.mjs";
+import { EngineEvent } from "../substrate/events.mjs";
+import { Effect, Scope, Stream, SubscriptionRef } from "effect";
+
+//#region src/contracts/renderer.d.ts
+/**
+ * Renderer contract — TUI, plain, silent all satisfy this. The
+ * renderer subscribes to the live event stream OR samples the
+ * subscribable state-ref; the engine never sees the renderer's
+ * choice.
+ */
+interface Renderer {
+  readonly mount: (stateRef: SubscriptionRef.SubscriptionRef<SubscribableState>, events: Stream.Stream<EngineEvent, never>) => Effect.Effect<void, RendererError, Scope.Scope>;
+  readonly flush: Effect.Effect<void, RendererError>;
+}
+interface RendererError {
+  readonly _tag: 'RendererError';
+  readonly reason: 'mount-failed' | 'subscription-lost';
+  readonly detail: string;
+}
+//#endregion
+export { Renderer, RendererError };
+//# sourceMappingURL=renderer.d.mts.map

package/dist/contracts/routable.d.mts

@@ -33,6 +33,10 @@ interface RoutableBase {
   readonly endpointName: string;
   readonly dispatchId: DispatchId;
   readonly upstream: RoutableUpstream;
+  /** Routes whose upstream starts after capability harvest can publish
+   *  their dispatch file without waiting for the public proxy to serve
+   *  the backend during route contribution. */
+  readonly readiness?: 'deferred';
 }
 /** HTTP variant — Host-header dispatched, CORS-aware. */
 interface RoutableHttpDecl extends RoutableBase {
@@ -48,6 +52,15 @@ interface RoutableTcpDecl extends RoutableBase {
 }
 /** Routable declaration. Plugin emits one per endpoint it serves. */
 type RoutableDecl = RoutableHttpDecl | RoutableTcpDecl;
+/** A plugin-owned router entrypoint declaration: the public listener
+ *  name, host port, and wire family that a Routable endpoint may
+ *  reference by `endpointName`. The router orchestrator owns registry
+ *  validation and collision checks; plugins own these names. */
+interface EntrypointDecl {
+  readonly name: string;
+  readonly port: number;
+  readonly protocol: 'http' | 'h2c' | 'tcp';
+}
 //#endregion
-export { DevstackRoutableUpstreamRegistry, DispatchId, RoutableDecl, RoutableHttpDecl, RoutableTcpDecl, RoutableUpstream, RoutableUpstreamKind };
+export { DevstackRoutableUpstreamRegistry, DispatchId, EntrypointDecl, RoutableDecl, RoutableHttpDecl, RoutableTcpDecl, RoutableUpstream, RoutableUpstreamKind };
 //# sourceMappingURL=routable.d.mts.map

package/dist/contracts/snapshotable.d.mts

@@ -9,13 +9,32 @@ interface ContainerLabelTuple {
   readonly plugin: string;
   readonly role: string;
 }
+/** A JSON-serializable value allowed inside an identity contribution.
+ *  Excludes functions, symbols, undefined-valued slots inside objects,
+ *  and class instances (anything `JSON.stringify` would drop or
+ *  stringify lossy). */
+type IdentityContributionValue = string | number | boolean | null | ReadonlyArray<IdentityContributionValue> | {
+  readonly [field: string]: IdentityContributionValue | undefined;
+};
+/** Identity contribution shape returned by `preRestore`. Plugins MUST
+ *  use a string-literal `kind` and JSON-serializable values; see the
+ *  top-of-file convention section. The `[field]` index signature is
+ *  permissive so existing payloads with `ReadonlyArray<string>` or
+ *  nested object fields (e.g. postgres's `databases`) typecheck without
+ *  per-plugin schema duplication. */
+interface IdentityContributionShape {
+  readonly kind: string;
+  readonly [field: string]: IdentityContributionValue | undefined;
+}
 /** Capture descriptor: zero or more subtrees + managed containers +
  *  optional typed metadata slice. */
 interface SnapshotableDecl {
   readonly kind: 'snapshotable';
   /** Host-tree subtrees, relative to the substrate's runtime-dir
    *  root. Auto-included subtrees under `runtime/<plugin-key>/`
-   *  are added by the substrate; this list is opt-in extras. */
+   *  are added by the substrate; this list is opt-in extras. See
+   *  the top-of-file "Subtree convention" section for trailing-slash
+   *  + file-path rules. */
   readonly subtrees: ReadonlyArray<string>;
   /** Managed containers identified by label tuples — orchestrator
    *  is name-blind. */
@@ -24,8 +43,11 @@ interface SnapshotableDecl {
    *  Default is "pause container"; postgres / RocksDB declare
    *  longer grace. */
   readonly quiesce?: Effect.Effect<void, never, Scope.Scope>;
-  /** Pre-restore hook: contribute to the identity guard. */
-  readonly preRestore?: Effect.Effect<unknown, never>;
+  /** Pre-restore hook: contribute to the identity guard. The returned
+   *  object is JSON-stringified to derive a stable comparison string.
+   *  See `IdentityContributionShape` + the top-of-file convention
+   *  section for the required shape. */
+  readonly preRestore?: Effect.Effect<IdentityContributionShape, never>;
   /** Post-restore hook. */
   readonly postRestore?: Effect.Effect<void, never>;
   /** Missing-tolerance flag: is absence on restore fatal or fine? */

package/dist/contracts/wallet-protocol.d.mts

@@ -0,0 +1,52 @@
+//#region src/contracts/wallet-protocol.d.ts
+/**
+ * Canonical path constants under the `/api/v1/devstack/*` prefix.
+ *
+ * Distilled-doc note (15-wallet.md "Fork-control routes declared but
+ * unimplemented"): the legacy server declared four `FORK_*` path
+ * constants whose handlers never landed. Per "no compat for never-
+ * cases", we drop them from the wire protocol entirely — when the
+ * fork-control surface is wired, those routes will be added (and the
+ * dev-wallet adapter shipped together). No half-done stubs.
+ */
+declare const WalletHttpPath: {
+  readonly HEALTH: "/api/v1/devstack/health";
+  readonly ACCOUNTS: "/api/v1/devstack/accounts";
+  readonly SIGN_TRANSACTION: "/api/v1/devstack/sign-transaction";
+  readonly SIGN_PERSONAL_MESSAGE: "/api/v1/devstack/sign-personal-message";
+};
+type WalletHttpPathValue = (typeof WalletHttpPath)[keyof typeof WalletHttpPath];
+/** Prefix gate: ANY path under this prefix is treated as protocol traffic
+ *  (and subject to mandatory Origin + bearer); anything else is a flat
+ *  404. */
+declare const WALLET_PROTOCOL_PREFIX: "/api/v1/devstack/";
+declare const WALLET_AUTH_HEADER: "authorization";
+declare const WALLET_BEARER_PREFIX: "Bearer ";
+/** URL-fragment key the pair-URL carries the token under
+ *  (`<wallet-url>/#token=<32-hex>`). Fragments are not sent to the
+ *  server, so the token never appears in access logs / referrers. */
+declare const WALLET_TOKEN_FRAGMENT_KEY: "token";
+/** Constant carried token byte length (16 random bytes → 32 hex chars).
+ *  The on-disk token file is rejected + re-minted if it doesn't match. */
+declare const WALLET_TOKEN_HEX_LENGTH: 32;
+/** Canonical endpoint name. The router orchestrator surfaces this in
+ *  the manifest under `endpoints['wallet-app']`; downstream consumers
+ *  (codegen, TUI, doctor) read it by this key.
+ *
+ *  Stable across rewrite + legacy so existing consumers don't break. */
+declare const WALLET_ENDPOINT_NAME: "wallet-app";
+/** Conventional short endpoint key for the wallet plugin. Matches the
+ *  substrate's `EndpointKey` brand. Build integrations (Playwright,
+ *  vitest helpers) and the conventional-routes alias table look the
+ *  endpoint up under this key; the substrate's alias resolver folds
+ *  `'wallet'` → `WALLET_ENDPOINT_NAME` (`'wallet-app'`) before
+ *  consulting the manifest.
+ *
+ *  Paired with the canonical name so both stay in lockstep when the
+ *  plugin's HTTP server is renamed; the L5 conventional-routes table
+ *  consumes the same constant so there is exactly one source of
+ *  truth. */
+declare const WALLET_ENDPOINT_KEY: "wallet";
+//#endregion
+export { WALLET_AUTH_HEADER, WALLET_BEARER_PREFIX, WALLET_ENDPOINT_KEY, WALLET_ENDPOINT_NAME, WALLET_PROTOCOL_PREFIX, WALLET_TOKEN_FRAGMENT_KEY, WALLET_TOKEN_HEX_LENGTH, WalletHttpPath, WalletHttpPathValue };
+//# sourceMappingURL=wallet-protocol.d.mts.map

package/dist/contracts/wallet-protocol.mjs

@@ -0,0 +1,52 @@
+//#region src/contracts/wallet-protocol.ts
+/**
+* Canonical path constants under the `/api/v1/devstack/*` prefix.
+*
+* Distilled-doc note (15-wallet.md "Fork-control routes declared but
+* unimplemented"): the legacy server declared four `FORK_*` path
+* constants whose handlers never landed. Per "no compat for never-
+* cases", we drop them from the wire protocol entirely — when the
+* fork-control surface is wired, those routes will be added (and the
+* dev-wallet adapter shipped together). No half-done stubs.
+*/
+const WalletHttpPath = {
+	HEALTH: "/api/v1/devstack/health",
+	ACCOUNTS: "/api/v1/devstack/accounts",
+	SIGN_TRANSACTION: "/api/v1/devstack/sign-transaction",
+	SIGN_PERSONAL_MESSAGE: "/api/v1/devstack/sign-personal-message"
+};
+/** Prefix gate: ANY path under this prefix is treated as protocol traffic
+*  (and subject to mandatory Origin + bearer); anything else is a flat
+*  404. */
+const WALLET_PROTOCOL_PREFIX = "/api/v1/devstack/";
+const WALLET_AUTH_HEADER = "authorization";
+const WALLET_BEARER_PREFIX = "Bearer ";
+/** URL-fragment key the pair-URL carries the token under
+*  (`<wallet-url>/#token=<32-hex>`). Fragments are not sent to the
+*  server, so the token never appears in access logs / referrers. */
+const WALLET_TOKEN_FRAGMENT_KEY = "token";
+/** Constant carried token byte length (16 random bytes → 32 hex chars).
+*  The on-disk token file is rejected + re-minted if it doesn't match. */
+const WALLET_TOKEN_HEX_LENGTH = 32;
+/** Canonical endpoint name. The router orchestrator surfaces this in
+*  the manifest under `endpoints['wallet-app']`; downstream consumers
+*  (codegen, TUI, doctor) read it by this key.
+*
+*  Stable across rewrite + legacy so existing consumers don't break. */
+const WALLET_ENDPOINT_NAME = "wallet-app";
+/** Conventional short endpoint key for the wallet plugin. Matches the
+*  substrate's `EndpointKey` brand. Build integrations (Playwright,
+*  vitest helpers) and the conventional-routes alias table look the
+*  endpoint up under this key; the substrate's alias resolver folds
+*  `'wallet'` → `WALLET_ENDPOINT_NAME` (`'wallet-app'`) before
+*  consulting the manifest.
+*
+*  Paired with the canonical name so both stay in lockstep when the
+*  plugin's HTTP server is renamed; the L5 conventional-routes table
+*  consumes the same constant so there is exactly one source of
+*  truth. */
+const WALLET_ENDPOINT_KEY = "wallet";
+//#endregion
+export { WALLET_AUTH_HEADER, WALLET_BEARER_PREFIX, WALLET_ENDPOINT_KEY, WALLET_ENDPOINT_NAME, WALLET_PROTOCOL_PREFIX, WALLET_TOKEN_FRAGMENT_KEY, WALLET_TOKEN_HEX_LENGTH, WalletHttpPath };
+
+//# sourceMappingURL=wallet-protocol.mjs.map

package/dist/contracts/wallet-protocol.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-protocol.mjs","names":[],"sources":["../../src/contracts/wallet-protocol.ts"],"sourcesContent":["// Wallet wire-protocol constants — name-blind substrate contract.\n//\n// These are the PURE wire-protocol invariants shared across layers:\n// HTTP path strings, the protocol prefix gate, header/token constants,\n// and the canonical routed-endpoint name/key. They carry no runtime,\n// Effect, or service dependencies — only string/number literals.\n//\n// Lifted here (ARCHITECTURE.md § Layer table) because L5 build\n// integrations (`build-integrations/runtime/wallet-paths.ts` and the\n// Playwright/vitest helpers) need them but MUST NOT import L2 plugin\n// modules — there is no L5→L0–L3 carve-out. STYLE_GUIDE §7: shared\n// cross-layer shapes that no single layer should own live in\n// `src/contracts/`; plugin barrels re-export for ergonomics.\n//\n// One decl per file, no `contracts/index.ts` barrel (STYLE_GUIDE §8 /\n// §199): package-internal callers import this module directly; the\n// public root barrel re-exports the wallet-plugin barrel, which in\n// turn re-exports from here, so the public value/type identity is\n// unchanged.\n//\n// The wallet plugin's `protocol.ts` / `routable.ts` re-export these so\n// plugin-internal callers keep their current import sites. The Schema-\n// based request/response envelopes stay in `protocol.ts` (they drag in\n// `effect`'s Schema runtime and are not needed by the L5 surfaces).\n\n// ----------------------------------------------------------------------\n// Path constants\n// ----------------------------------------------------------------------\n\n/**\n * Canonical path constants under the `/api/v1/devstack/*` prefix.\n *\n * Distilled-doc note (15-wallet.md \"Fork-control routes declared but\n * unimplemented\"): the legacy server declared four `FORK_*` path\n * constants whose handlers never landed. Per \"no compat for never-\n * cases\", we drop them from the wire protocol entirely — when the\n * fork-control surface is wired, those routes will be added (and the\n * dev-wallet adapter shipped together). No half-done stubs.\n */\nexport const WalletHttpPath = {\n\tHEALTH: '/api/v1/devstack/health',\n\tACCOUNTS: '/api/v1/devstack/accounts',\n\tSIGN_TRANSACTION: '/api/v1/devstack/sign-transaction',\n\tSIGN_PERSONAL_MESSAGE: '/api/v1/devstack/sign-personal-message',\n} as const;\n\nexport type WalletHttpPathValue = (typeof WalletHttpPath)[keyof typeof WalletHttpPath];\n\n/** Prefix gate: ANY path under this prefix is treated as protocol traffic\n *  (and subject to mandatory Origin + bearer); anything else is a flat\n *  404. */\nexport const WALLET_PROTOCOL_PREFIX = '/api/v1/devstack/' as const;\n\n// ----------------------------------------------------------------------\n// Header / token constants (shared so the dev-wallet adapter doesn't\n// open-code the same strings).\n// ----------------------------------------------------------------------\n\nexport const WALLET_AUTH_HEADER = 'authorization' as const;\nexport const WALLET_BEARER_PREFIX = 'Bearer ' as const;\n\n/** URL-fragment key the pair-URL carries the token under\n *  (`<wallet-url>/#token=<32-hex>`). Fragments are not sent to the\n *  server, so the token never appears in access logs / referrers. */\nexport const WALLET_TOKEN_FRAGMENT_KEY = 'token' as const;\n\n/** Constant carried token byte length (16 random bytes → 32 hex chars).\n *  The on-disk token file is rejected + re-minted if it doesn't match. */\nexport const WALLET_TOKEN_HEX_LENGTH = 32 as const;\n\n// ----------------------------------------------------------------------\n// Routed-endpoint identity\n// ----------------------------------------------------------------------\n\n/** Canonical endpoint name. The router orchestrator surfaces this in\n *  the manifest under `endpoints['wallet-app']`; downstream consumers\n *  (codegen, TUI, doctor) read it by this key.\n *\n *  Stable across rewrite + legacy so existing consumers don't break. */\nexport const WALLET_ENDPOINT_NAME = 'wallet-app' as const;\n\n/** Conventional short endpoint key for the wallet plugin. Matches the\n *  substrate's `EndpointKey` brand. Build integrations (Playwright,\n *  vitest helpers) and the conventional-routes alias table look the\n *  endpoint up under this key; the substrate's alias resolver folds\n *  `'wallet'` → `WALLET_ENDPOINT_NAME` (`'wallet-app'`) before\n *  consulting the manifest.\n *\n *  Paired with the canonical name so both stay in lockstep when the\n *  plugin's HTTP server is renamed; the L5 conventional-routes table\n *  consumes the same constant so there is exactly one source of\n *  truth. */\nexport const WALLET_ENDPOINT_KEY = 'wallet' as const;\n"],"mappings":";;;;;;;;;;;AAuCA,MAAa,iBAAiB;CAC7B,QAAQ;CACR,UAAU;CACV,kBAAkB;CAClB,uBAAuB;CACvB;;;;AAOD,MAAa,yBAAyB;AAOtC,MAAa,qBAAqB;AAClC,MAAa,uBAAuB;;;;AAKpC,MAAa,4BAA4B;;;AAIzC,MAAa,0BAA0B;;;;;;AAWvC,MAAa,uBAAuB;;;;;;;;;;;;AAapC,MAAa,sBAAsB"}

package/dist/index.d.mts

@@ -1,52 +1,45 @@
-import { AppName, Brand, ChainId, ContentHash, EndpointKey, StackName, appName, chainId, contentHash, endpointKey, stackName } from "./substrate/brand.mjs";
-import { ManifestExtras, ManifestExtrasContext, ManifestExtrasInput } from "./substrate/manifest.mjs";
+import { ManifestExtras, ManifestExtrasContext, ManifestExtrasInput, ManifestExtrasInvalid, ManifestExtrasLookupError } from "./substrate/manifest.mjs";
+import { runtime_decode_d_exports } from "./substrate/runtime/runtime-decode.mjs";
 import { CodegenEmitContext, CodegenEmitDone, CodegenableDecl } from "./contracts/codegenable.mjs";
-import { LivenessClassification, LivenessClassifierDecl, LivenessHints } from "./contracts/liveness-classifier.mjs";
+import { AppName, Brand, ChainId, ContentHash, EndpointKey, StackName, appName, chainId, contentHash, endpointKey, stackName } from "./substrate/brand.mjs";
 import { LifecycleStatus, PhaseNarration, PluginRole } from "./substrate/lifecycle.mjs";
 import { ProjectionDecl, ProjectionEvent } from "./contracts/projection.mjs";
-import { DevstackRoutableUpstreamRegistry, DispatchId, RoutableDecl, RoutableHttpDecl, RoutableTcpDecl, RoutableUpstream, RoutableUpstreamKind } from "./contracts/routable.mjs";
+import { DevstackRoutableUpstreamRegistry, DispatchId, EntrypointDecl, RoutableDecl, RoutableHttpDecl, RoutableTcpDecl, RoutableUpstream, RoutableUpstreamKind } from "./contracts/routable.mjs";
 import { ContainerLabelTuple, SnapshotableDecl } from "./contracts/snapshotable.mjs";
 import { StrategyContributorDecl, StrategyFor } from "./contracts/strategy-contributor.mjs";
 import { CapabilityDecl, CapabilityKind, CapabilityPayloadFor, DevstackCapabilityRegistry, ExactCapabilityPayload } from "./contracts/capability-decl.mjs";
-import { AnyPlugin, AnyResourceRef, DependencyInput, DependencyList, Plugin, PluginSpec, ResolvedDependencies, ResourceIdOf, ResourceRef, ResourceValueOf, defineId, definePlugin, resource } from "./substrate/plugin.mjs";
-import { DefaultNetwork, DevstackNetworkModeRegistry, NetworkConfig, NetworkMode } from "./substrate/network.mjs";
+import { AnyPlugin, AnyResourceRef, DependencyInput, DependencyList, Plugin, PluginErrorContribution, PluginSpec, ResolvedDependencies, ResourceIdOf, ResourceRef, ResourceValueOf, defineId, definePlugin, resource } from "./substrate/plugin.mjs";
+import { DevstackNetworkModeRegistry, NetworkConfig, NetworkMode } from "./substrate/network.mjs";
 import { DevstackOptions } from "./substrate/options.mjs";
 import { Stack, defineDevstack } from "./api/define-devstack.mjs";
 import { BuildCtx, DevstackOptionsWith, defineDevstackWith } from "./api/define-devstack-with.mjs";
+import { RedactionRule, redaction_d_exports } from "./substrate/runtime/observability/redaction.mjs";
 import { ContainerHandle, ContainerRuntime, ContainerRuntimeError, ImageRef, LoadedImageBundle, TaggedImageRef } from "./contracts/container-runtime.mjs";
 import { IdentityContext } from "./substrate/runtime/paths.mjs";
 import { ContainerRuntimeService } from "./runtime/docker/service.mjs";
 import { http_probe_d_exports } from "./substrate/runtime/http-probe.mjs";
-import { RedactionRule, Redactor, redaction_d_exports } from "./substrate/runtime/observability/redaction.mjs";
+import { LogLevel, LogLine, LogPayload, Logger, LoggerShape, TagBuffer } from "./substrate/runtime/observability/logger.mjs";
+import { process_lines_d_exports } from "./substrate/runtime/observability/process-lines.mjs";
 import { BootError, RunHandle, RunStackIdentityOptions, RunStackOptions, runStack } from "./api/run-stack.mjs";
 import { capability, capabilitySink, codegenable, defineCapability, projection, routable, snapshotable, strategyContributor } from "./api/define-capabilities.mjs";
+import { pluginErrorContributions } from "./api/plugin-errors.mjs";
+import { DEFAULT_DEVSTACK_NETWORK, DEFAULT_STACK_NAME, DEVSTACK_NETWORK_NAMES, DevstackNetworkName, DevstackNetworkParseError, ParsedDevstackNetwork, ResolveNetworkOptions, ResolveStateDirOptions, ResolvedDevstackNetwork, parseDevstackNetwork, parseDevstackNetworkName, resolveAppName, resolveNetwork, resolveNetworkSync, resolveStackName, resolveStateDir } from "./api/inference-network.mjs";
 import { FactoriesByMode, FactoriesFor, ModeNamespace, defineModeNamespace } from "./api/mode-narrowed-factory.mjs";
 import { config_validation_d_exports } from "./substrate/runtime/config-validation.mjs";
 import { managed_container_d_exports } from "./substrate/runtime/managed-container.mjs";
-import { LogLevel, LogLine, LogPayload, Logger, LoggerShape, TagBuffer } from "./substrate/runtime/observability/logger.mjs";
-import { process_lines_d_exports } from "./substrate/runtime/observability/process-lines.mjs";
 import { process_supervisor_d_exports } from "./substrate/runtime/process-supervisor.mjs";
 import { probes_d_exports } from "./substrate/runtime/probes.mjs";
 import { retry_policy_d_exports } from "./substrate/runtime/retry-policy.mjs";
-import { runtime_decode_d_exports } from "./substrate/runtime/runtime-decode.mjs";
+import { Renderer, RendererError } from "./contracts/renderer.mjs";
 import { ChainProbe, ChainProbeError, ChainProbeMode } from "./contracts/chain-probe.mjs";
 import { FaucetBodyError, FaucetConfigError, FaucetError, FaucetExhausted, FaucetUnreachable } from "./plugins/faucet/errors.mjs";
-import { FaucetStrategy } from "./plugins/faucet/strategies/sui-local.mjs";
-import { FaucetStrategyContribution } from "./plugins/faucet/service.mjs";
-import { defineFaucetStrategy } from "./plugins/faucet/index.mjs";
-import { ForkUnsupportedError, SeedManifestMismatchError, SuiCliError, SuiConfigError, SuiError, SuiFundsReadyError, SuiPluginError } from "./plugins/sui/errors.mjs";
+import { FaucetStrategy } from "./plugins/faucet/dispatcher.mjs";
+import { FaucetStrategyContribution, defineFaucetStrategy } from "./plugins/faucet/index.mjs";
+import { ForkUnsupportedError, SuiCliError, SuiConfigError, SuiError, SuiPluginError } from "./plugins/sui/errors.mjs";
 import { SuiForkOptions, SuiLiveOptions, SuiLocalOptions, SuiLocalRpcOptions, SuiOptions } from "./plugins/sui/mode/spec.mjs";
-import { FundsReadyError, FundsReadyStrategy } from "./contracts/network-resolver.mjs";
 import { ResolvedSuiNetwork } from "./plugins/sui/network-resolver.mjs";
 import { SuiNetworkBindings } from "./plugins/sui/codegen.mjs";
 import { sui, suiFor } from "./plugins/sui/index.mjs";
-import { CoinError, CoinPhase } from "./plugins/coin/errors.mjs";
-import { isBareCoinType, validateBareCoinType } from "./plugins/coin/metadata.mjs";
-import { BUILTIN_COINS, BuiltinCoinName, ResolvedCoin } from "./plugins/coin/address-resolution.mjs";
-import { CoinAddressForm, CoinValue } from "./plugins/coin/service.mjs";
-import { CoinBindings } from "./plugins/coin/codegen.mjs";
-import { DiscoveredCoin } from "./plugins/coin/discovery.mjs";
-import { PackageMember, coin } from "./plugins/coin/index.mjs";
 import { AccountAcquireError, AccountAcquirePhase, AccountError, AccountSignError, AccountSignPhase, AccountVariantKind } from "./plugins/account/errors.mjs";
 import { AccountOptions, AccountValue, TxResult } from "./plugins/account/service.mjs";
 import { AccountFunding, AccountFundingCoinValue, AccountFundingEntry, AccountFundingRequest, AccountFundingResult, AccountFundingStrategy, CoinMember, CrossCuttingFundingEntry, CrossCuttingFundingProvider, DEFAULT_EPHEMERAL_FUND_MIST, SUI_FULL_COIN_TYPE, SuiFundingEntry } from "./plugins/account/funding.mjs";
@@ -58,9 +51,17 @@ import { ResolvedKnownPackage, ResolvedLocalPackage } from "./plugins/package/re
 import { PublishError } from "./plugins/package/errors.mjs";
 import { PackageBindings } from "./plugins/package/codegen.mjs";
 import { KnownPackageOptions, KnownPackageResolved, LocalPackageOptions, LocalPackageResolved, PackageCapture, PackageResolved, PublisherAccountMember, knownPackage, localPackage } from "./plugins/package/index.mjs";
+import { CoinError, CoinPhase } from "./plugins/coin/errors.mjs";
+import { isBareCoinType, validateBareCoinType } from "./plugins/coin/metadata.mjs";
+import { BUILTIN_COINS, BuiltinCoinName, ResolvedCoin } from "./plugins/coin/address-resolution.mjs";
+import { CoinAddressForm, CoinValue } from "./plugins/coin/service.mjs";
+import { CoinBindings } from "./plugins/coin/codegen.mjs";
+import { DiscoveredCoin } from "./plugins/coin/discovery.mjs";
+import { PackageMember, coin } from "./plugins/coin/index.mjs";
 import { WalletBootError, WalletBootPhase, WalletError, WalletRequestError, WalletRequestPhase } from "./plugins/wallet/errors.mjs";
 import { WalletAccountMember, WalletOptions, WalletValue } from "./plugins/wallet/service.mjs";
 import { wallet } from "./plugins/wallet/index.mjs";
+import { DashboardOptions, DashboardValue, dashboard } from "./plugins/dashboard/index.mjs";
 import { HostServiceError } from "./plugins/host-service/errors.mjs";
 import { HOST_SERVICE_PORT_TOKEN, HostServiceOptions, HostServiceReadyProbe, HostServiceValue } from "./plugins/host-service/service.mjs";
 import { hostService } from "./plugins/host-service/index.mjs";
@@ -78,12 +79,12 @@ import { WalrusLocalClusterOptions } from "./plugins/walrus/mode/local-cluster.m
 import { WalrusKnownDeploymentOptions, WalrusKnownNetwork } from "./plugins/walrus/mode/known-deploy.mjs";
 import { WalrusBindings, WalrusNodeBinding } from "./plugins/walrus/codegen.mjs";
 import { WalCoinValue, WalrusResolved, walCoin, walrus, walrusFor } from "./plugins/walrus/index.mjs";
-import { SealAnyError, SealConfigError, SealError } from "./plugins/seal/errors.mjs";
 import { SealKeyServer, SealKeyServerEntry, SealKnownResolved, SealLocalKeygenResolved, SealResolved } from "./plugins/seal/registry-publish.mjs";
+import { SealAnyError, SealConfigError, SealError } from "./plugins/seal/errors.mjs";
 import { SealBindings } from "./plugins/seal/codegen.mjs";
 import { SealCommonOptions, SealForkKnownOptions, SealLiveOptions, SealLocalKeygenOptions, SealOptions, seal, sealFor } from "./plugins/seal/index.mjs";
 import { DeepbookConfigError, DeepbookError, DeepbookPhase, DeepbookPluginError } from "./plugins/deepbook/errors.mjs";
-import { AccountMemberAlias, CoinMemberAlias, DEEP_PRICE_FEED_ID, DeepbookPackageMember, DeepbookPool, DeepbookPoolCoin, DeepbookPoolSeedLiquidity, DeepbookPoolSeedOrder, DeepbookPoolSpec, PythFeed, PythHandle, PythOptions, PythPackageMember, PythPriceFeedId, SUI_PRICE_FEED_ID, USDC_PRICE_FEED_ID, pythPriceFeedId } from "./plugins/deepbook/types.mjs";
+import { AccountMemberAlias, CoinMemberAlias, DEEP_PRICE_FEED_ID, DeepbookPackageMember, DeepbookPool, DeepbookPoolCoin, DeepbookPoolSeedLiquidity, DeepbookPoolSeedOrder, DeepbookPoolSpec, SUI_PRICE_FEED_ID, USDC_PRICE_FEED_ID, pythPriceFeedId } from "./plugins/deepbook/types.mjs";
 import { DeepbookBindings, DeepbookPoolBinding } from "./plugins/deepbook/codegen.mjs";
 import { DeepbookCommonOptions, DeepbookKnownNetwork, DeepbookKnownOptions, DeepbookOptions, DeepbookOverrideOptions, DeepbookResolved, deepbookCore, deepbookFor } from "./plugins/deepbook/index.mjs";
-export { type AccountAcquireError, type AccountAcquirePhase, type AccountBindings, type AccountError, type AccountFunding, type AccountFundingCoinValue, type AccountFundingEntry, type AccountFundingRequest, type AccountFundingResult, type AccountFundingStrategy, type AccountMemberAlias, type AccountOptions, type AccountSignError, type AccountSignPhase, type AccountValue, type AccountVariantKind, type ActionBuildContext, type ActionError, type ActionOptions, type ActionPhase, type ActionReceipt, type ActionUpstreamRef, type AnyPlugin, type AnyResourceRef, type AppName, BUILTIN_COINS, type BootError, type Brand, type BuildCtx, type BuiltinCoinName, type CapabilityDecl, type CapabilityKind, type CapabilityPayloadFor, type ChainId, type ChainProbe, type ChainProbeError, type ChainProbeMode, type CodegenEmitContext, type CodegenEmitDone, type CodegenableDecl, type CoinAddressForm, type CoinBindings, type CoinError, type CoinMember, type CoinMemberAlias, type CoinPhase, type CoinValue, config_validation_d_exports as ConfigValidation, type ContainerHandle, type ContainerLabelTuple, type ContainerRuntime, type ContainerRuntimeError, ContainerRuntimeService, type ContentHash, type CrossCuttingFundingEntry, type CrossCuttingFundingProvider, DEEP_PRICE_FEED_ID, DEFAULT_EPHEMERAL_FUND_MIST, type DatabaseCreateFailed, type DeepbookBindings, type DeepbookCommonOptions, type DeepbookConfigError, type DeepbookError, type DeepbookKnownNetwork, type DeepbookKnownOptions, type DeepbookOptions, type DeepbookOverrideOptions, type DeepbookPackageMember, type DeepbookPhase, type DeepbookPluginError, type DeepbookPool, type DeepbookPoolBinding, type DeepbookPoolCoin, type DeepbookPoolSeedLiquidity, type DeepbookPoolSeedOrder, type DeepbookPoolSpec, type DeepbookResolved, type DefaultNetwork, type DependencyInput, type DependencyList, type DevstackCapabilityRegistry, type DevstackNetworkModeRegistry, type DevstackOptions, type DevstackOptionsWith, type DevstackRoutableUpstreamRegistry, type DiscoveredCoin, type DispatchId, type EndpointKey, type ExactCapabilityPayload, type FactoriesByMode, type FactoriesFor, type FaucetBodyError, type FaucetConfigError, type FaucetError, type FaucetExhausted, type FaucetStrategy, type FaucetStrategyContribution, type FaucetUnreachable, type ForkUnsupportedError, type FundsReadyError, type FundsReadyStrategy, HOST_SERVICE_PORT_TOKEN, type HostServiceError, type HostServiceOptions, type HostServiceReadyProbe, type HostServiceValue, http_probe_d_exports as HttpProbes, IdentityContext, type ImageRef, type KnownPackageOptions, type KnownPackageResolved, type LifecycleStatus, type LivenessClassification, type LivenessClassifierDecl, type LivenessHints, type LoadedImageBundle, type LocalPackageOptions, type LocalPackageResolved, type LogLevel, type LogLine, type LogPayload, Logger, type LoggerShape, managed_container_d_exports as ManagedContainers, type ManifestExtras, type ManifestExtrasContext, type ManifestExtrasInput, type ModeNamespace, type NetworkConfig, type NetworkMode, type PackageBindings, type PackageCapture, type PackageMember, type PackageResolved, type PhaseNarration, type Plugin, type PluginRole, type PluginSpec, type Postgres, type PostgresConfigError, type PostgresConnectionBindings, type PostgresConnectionParts, type PostgresConnectionTimeout, type PostgresError, type PostgresPhase, type PostgresPluginError, type PostgresPluginOptions, type PostgresServiceOptions, probes_d_exports as Probes, process_lines_d_exports as ProcessLines, process_supervisor_d_exports as ProcessSupervisor, type ProjectionDecl, type ProjectionEvent, type PublishError, type PublisherAccountMember, type PythFeed, type PythHandle, type PythOptions, type PythPackageMember, type PythPriceFeedId, redaction_d_exports as Redaction, type RedactionRule, Redactor, type ResolvedCoin, type ResolvedDependencies, type ResolvedKeypair, type ResolvedKnownPackage, type ResolvedLocalPackage, type ResolvedSuiNetwork, type ResourceIdOf, type ResourceRef, type ResourceValueOf, retry_policy_d_exports as RetryPolicy, type RoutableDecl, type RoutableHttpDecl, type RoutableTcpDecl, type RoutableUpstream, type RoutableUpstreamKind, type RunHandle, type RunStackIdentityOptions, type RunStackOptions, runtime_decode_d_exports as RuntimeDecode, SUI_FULL_COIN_TYPE, SUI_PRICE_FEED_ID, type SealError as SealAcquireError, type SealAnyError, type SealBindings, type SealCommonOptions, type SealConfigError, type SealError, type SealForkKnownOptions, type SealKeyServer, type SealKeyServerEntry, type SealKnownResolved, type SealLiveOptions, type SealLocalKeygenOptions, type SealLocalKeygenResolved, type SealOptions, type SealResolved, type SeedManifestMismatchError, type SignatureScheme, type SnapshotableDecl, type Stack, type StackName, type StrategyContributorDecl, type StrategyFor, type SuiCliError, type SuiConfigError, type SuiError, type SuiForkOptions, type SuiFundingEntry, type SuiFundsReadyError, type SuiLiveOptions, type SuiLocalOptions, type SuiLocalRpcOptions, type SuiNetworkBindings, type SuiOptions, type SuiPluginError, type SyntheticImpersonationSigner, type TagBuffer, type TaggedImageRef, type TxResult, USDC_PRICE_FEED_ID, type WalCoinValue, type WalletAccountMember, type WalletBootError, type WalletBootPhase, type WalletError, type WalletOptions, type WalletRequestError, type WalletRequestPhase, type WalletValue, type WalrusBindings, type WalrusConfigError, type WalrusError, type WalrusKnownDeploymentOptions, type WalrusKnownNetwork, type WalrusLocalClusterOptions, type WalrusNodeBinding, type WalrusPhase, type WalrusPluginError, type WalrusResolved, type WalrusStorageNode, account, action, appName, capability, capabilitySink, chainId, codegenable, coin, contentHash, deepbookCore as deepbook, deepbookFor, defineCapability, defineDevstack, defineDevstackWith, defineFaucetStrategy, defineId, defineModeNamespace, definePlugin, endpointKey, hostService, isBareCoinType, knownPackage, localPackage, postgres, projection, pythPriceFeedId, resource, routable, runStack, seal, sealFor, snapshotable, stackName, strategyContributor, sui, suiFor, validateBareCoinType, walCoin, wallet, walrus, walrusFor };
+export { type AccountAcquireError, type AccountAcquirePhase, type AccountBindings, type AccountError, type AccountFunding, type AccountFundingCoinValue, type AccountFundingEntry, type AccountFundingRequest, type AccountFundingResult, type AccountFundingStrategy, type AccountMemberAlias, type AccountOptions, type AccountSignError, type AccountSignPhase, type AccountValue, type AccountVariantKind, type ActionBuildContext, type ActionError, type ActionOptions, type ActionPhase, type ActionReceipt, type ActionUpstreamRef, type AnyPlugin, type AnyResourceRef, type AppName, BUILTIN_COINS, type BootError, type Brand, type BuildCtx, type BuiltinCoinName, type CapabilityDecl, type CapabilityKind, type CapabilityPayloadFor, type ChainId, type ChainProbe, type ChainProbeError, type ChainProbeMode, type CodegenEmitContext, type CodegenEmitDone, type CodegenableDecl, type CoinAddressForm, type CoinBindings, type CoinError, type CoinMember, type CoinMemberAlias, type CoinPhase, type CoinValue, config_validation_d_exports as ConfigValidation, type ContainerHandle, type ContainerLabelTuple, type ContainerRuntime, type ContainerRuntimeError, ContainerRuntimeService, type ContentHash, type CrossCuttingFundingEntry, type CrossCuttingFundingProvider, DEEP_PRICE_FEED_ID, DEFAULT_DEVSTACK_NETWORK, DEFAULT_EPHEMERAL_FUND_MIST, DEFAULT_STACK_NAME, DEVSTACK_NETWORK_NAMES, type DashboardOptions, type DashboardValue, type DatabaseCreateFailed, type DeepbookBindings, type DeepbookCommonOptions, type DeepbookConfigError, type DeepbookError, type DeepbookKnownNetwork, type DeepbookKnownOptions, type DeepbookOptions, type DeepbookOverrideOptions, type DeepbookPackageMember, type DeepbookPhase, type DeepbookPluginError, type DeepbookPool, type DeepbookPoolBinding, type DeepbookPoolCoin, type DeepbookPoolSeedLiquidity, type DeepbookPoolSeedOrder, type DeepbookPoolSpec, type DeepbookResolved, type DependencyInput, type DependencyList, type DevstackCapabilityRegistry, type DevstackNetworkModeRegistry, type DevstackNetworkName, DevstackNetworkParseError, type DevstackOptions, type DevstackOptionsWith, type DevstackRoutableUpstreamRegistry, type DiscoveredCoin, type DispatchId, type EndpointKey, type EntrypointDecl, type ExactCapabilityPayload, type FactoriesByMode, type FactoriesFor, type FaucetBodyError, type FaucetConfigError, type FaucetError, type FaucetExhausted, type FaucetStrategy, type FaucetStrategyContribution, type FaucetUnreachable, type ForkUnsupportedError, HOST_SERVICE_PORT_TOKEN, type HostServiceError, type HostServiceOptions, type HostServiceReadyProbe, type HostServiceValue, http_probe_d_exports as HttpProbes, IdentityContext, type ImageRef, type KnownPackageOptions, type KnownPackageResolved, type LifecycleStatus, type LoadedImageBundle, type LocalPackageOptions, type LocalPackageResolved, type LogLevel, type LogLine, type LogPayload, Logger, type LoggerShape, managed_container_d_exports as ManagedContainers, type ManifestExtras, type ManifestExtrasContext, type ManifestExtrasInput, ManifestExtrasInvalid, ManifestExtrasLookupError, type ModeNamespace, type NetworkConfig, type NetworkMode, type PackageBindings, type PackageCapture, type PackageMember, type PackageResolved, type ParsedDevstackNetwork, type PhaseNarration, type Plugin, type PluginErrorContribution, type PluginRole, type PluginSpec, type Postgres, type PostgresConfigError, type PostgresConnectionBindings, type PostgresConnectionParts, type PostgresConnectionTimeout, type PostgresError, type PostgresPhase, type PostgresPluginError, type PostgresPluginOptions, type PostgresServiceOptions, probes_d_exports as Probes, process_lines_d_exports as ProcessLines, process_supervisor_d_exports as ProcessSupervisor, type ProjectionDecl, type ProjectionEvent, type PublishError, type PublisherAccountMember, redaction_d_exports as Redaction, type RedactionRule, type Renderer, type RendererError, type ResolveNetworkOptions, type ResolveStateDirOptions, type ResolvedCoin, type ResolvedDependencies, type ResolvedDevstackNetwork, type ResolvedKeypair, type ResolvedKnownPackage, type ResolvedLocalPackage, type ResolvedSuiNetwork, type ResourceIdOf, type ResourceRef, type ResourceValueOf, retry_policy_d_exports as RetryPolicy, type RoutableDecl, type RoutableHttpDecl, type RoutableTcpDecl, type RoutableUpstream, type RoutableUpstreamKind, type RunHandle, type RunStackIdentityOptions, type RunStackOptions, runtime_decode_d_exports as RuntimeDecode, SUI_FULL_COIN_TYPE, SUI_PRICE_FEED_ID, type SealError as SealAcquireError, type SealAnyError, type SealBindings, type SealCommonOptions, type SealConfigError, type SealError, type SealForkKnownOptions, type SealKeyServer, type SealKeyServerEntry, type SealKnownResolved, type SealLiveOptions, type SealLocalKeygenOptions, type SealLocalKeygenResolved, type SealOptions, type SealResolved, type SignatureScheme, type SnapshotableDecl, type Stack, type StackName, type StrategyContributorDecl, type StrategyFor, type SuiCliError, type SuiConfigError, type SuiError, type SuiForkOptions, type SuiFundingEntry, type SuiLiveOptions, type SuiLocalOptions, type SuiLocalRpcOptions, type SuiNetworkBindings, type SuiOptions, type SuiPluginError, type SyntheticImpersonationSigner, type TagBuffer, type TaggedImageRef, type TxResult, USDC_PRICE_FEED_ID, type WalCoinValue, type WalletAccountMember, type WalletBootError, type WalletBootPhase, type WalletError, type WalletOptions, type WalletRequestError, type WalletRequestPhase, type WalletValue, type WalrusBindings, type WalrusConfigError, type WalrusError, type WalrusKnownDeploymentOptions, type WalrusKnownNetwork, type WalrusLocalClusterOptions, type WalrusNodeBinding, type WalrusPhase, type WalrusPluginError, type WalrusResolved, type WalrusStorageNode, account, action, appName, capability, capabilitySink, chainId, codegenable, coin, contentHash, dashboard, deepbookCore as deepbook, deepbookFor, defineCapability, defineDevstack, defineDevstackWith, defineFaucetStrategy, defineId, defineModeNamespace, definePlugin, endpointKey, hostService, isBareCoinType, knownPackage, localPackage, parseDevstackNetwork, parseDevstackNetworkName, pluginErrorContributions, postgres, projection, pythPriceFeedId, resolveAppName, resolveNetwork, resolveNetworkSync, resolveStackName, resolveStateDir, resource, routable, runStack, seal, sealFor, snapshotable, stackName, strategyContributor, sui, suiFor, validateBareCoinType, walCoin, wallet, walrus, walrusFor };

package/dist/index.mjs

@@ -1,24 +1,30 @@
 import { defineId, definePlugin, resource } from "./substrate/plugin.mjs";
+import "./api/define-plugin.mjs";
+import { defineDevstack } from "./api/define-devstack.mjs";
+import { defineDevstackWith } from "./api/define-devstack-with.mjs";
+import { appName, chainId, contentHash, endpointKey, stackName } from "./substrate/brand.mjs";
 import { IdentityContext } from "./substrate/runtime/paths.mjs";
+import { redaction_exports } from "./substrate/runtime/observability/redaction.mjs";
 import { runtime_decode_exports } from "./substrate/runtime/runtime-decode.mjs";
-import { defineModeNamespace } from "./api/mode-narrowed-factory.mjs";
-import { appName, chainId, contentHash, endpointKey, stackName } from "./substrate/brand.mjs";
+import { Logger } from "./substrate/runtime/observability/logger.mjs";
 import { process_lines_exports } from "./substrate/runtime/observability/process-lines.mjs";
+import "./substrate/runtime/observability/index.mjs";
 import { probes_exports } from "./substrate/runtime/probes.mjs";
+import { retry_policy_exports } from "./substrate/runtime/retry-policy.mjs";
 import { ContainerRuntimeService } from "./runtime/docker/service.mjs";
-import { config_validation_exports } from "./substrate/runtime/config-validation.mjs";
+import { process_supervisor_exports } from "./substrate/runtime/process-supervisor.mjs";
 import { http_probe_exports } from "./substrate/runtime/http-probe.mjs";
 import { managed_container_exports } from "./substrate/runtime/managed-container.mjs";
-import { retry_policy_exports } from "./substrate/runtime/retry-policy.mjs";
-import { sui, suiFor } from "./plugins/sui/index.mjs";
-import { Redactor, redaction_exports } from "./substrate/runtime/observability/redaction.mjs";
-import { Logger } from "./substrate/runtime/observability/logger.mjs";
-import { wallet } from "./plugins/wallet/index.mjs";
-import { defineDevstack } from "./api/define-devstack.mjs";
-import { defineDevstackWith } from "./api/define-devstack-with.mjs";
-import { process_supervisor_exports } from "./substrate/runtime/process-supervisor.mjs";
+import { config_validation_exports } from "./substrate/runtime/config-validation.mjs";
+import { ManifestExtrasInvalid, ManifestExtrasLookupError } from "./substrate/manifest.mjs";
+import { DEFAULT_DEVSTACK_NETWORK, DEFAULT_STACK_NAME, DEVSTACK_NETWORK_NAMES, DevstackNetworkParseError, parseDevstackNetwork, parseDevstackNetworkName, resolveAppName, resolveNetwork, resolveNetworkSync, resolveStackName, resolveStateDir } from "./api/inference-network.mjs";
 import { runStack } from "./api/run-stack.mjs";
 import { capability, capabilitySink, codegenable, defineCapability, projection, routable, snapshotable, strategyContributor } from "./api/define-capabilities.mjs";
+import { pluginErrorContributions } from "./api/plugin-errors.mjs";
+import { defineModeNamespace } from "./api/mode-narrowed-factory.mjs";
+import "./substrate/runtime/container-runtime.mjs";
+import { defineFaucetStrategy } from "./plugins/faucet/index.mjs";
+import { sui, suiFor } from "./plugins/sui/index.mjs";
 import { DEFAULT_EPHEMERAL_FUND_MIST, SUI_FULL_COIN_TYPE } from "./plugins/account/funding.mjs";
 import { account } from "./plugins/account/index.mjs";
 import { knownPackage, localPackage } from "./plugins/package/index.mjs";
@@ -27,11 +33,12 @@ import { BUILTIN_COINS } from "./plugins/coin/address-resolution.mjs";
 import { coin } from "./plugins/coin/index.mjs";
 import { HOST_SERVICE_PORT_TOKEN } from "./plugins/host-service/service.mjs";
 import { hostService } from "./plugins/host-service/index.mjs";
+import { wallet } from "./plugins/wallet/index.mjs";
+import { dashboard } from "./plugins/dashboard/index.mjs";
 import { postgres } from "./plugins/postgres/index.mjs";
-import { defineFaucetStrategy } from "./plugins/faucet/index.mjs";
 import { action } from "./plugins/action/index.mjs";
 import { walCoin, walrus, walrusFor } from "./plugins/walrus/index.mjs";
 import { seal, sealFor } from "./plugins/seal/index.mjs";
 import { DEEP_PRICE_FEED_ID, SUI_PRICE_FEED_ID, USDC_PRICE_FEED_ID, pythPriceFeedId } from "./plugins/deepbook/types.mjs";
 import { deepbookCore, deepbookFor } from "./plugins/deepbook/index.mjs";
-export { BUILTIN_COINS, config_validation_exports as ConfigValidation, ContainerRuntimeService, DEEP_PRICE_FEED_ID, DEFAULT_EPHEMERAL_FUND_MIST, HOST_SERVICE_PORT_TOKEN, http_probe_exports as HttpProbes, IdentityContext, Logger, managed_container_exports as ManagedContainers, probes_exports as Probes, process_lines_exports as ProcessLines, process_supervisor_exports as ProcessSupervisor, redaction_exports as Redaction, Redactor, retry_policy_exports as RetryPolicy, runtime_decode_exports as RuntimeDecode, SUI_FULL_COIN_TYPE, SUI_PRICE_FEED_ID, USDC_PRICE_FEED_ID, account, action, appName, capability, capabilitySink, chainId, codegenable, coin, contentHash, deepbookCore as deepbook, deepbookFor, defineCapability, defineDevstack, defineDevstackWith, defineFaucetStrategy, defineId, defineModeNamespace, definePlugin, endpointKey, hostService, isBareCoinType, knownPackage, localPackage, postgres, projection, pythPriceFeedId, resource, routable, runStack, seal, sealFor, snapshotable, stackName, strategyContributor, sui, suiFor, validateBareCoinType, walCoin, wallet, walrus, walrusFor };
+export { BUILTIN_COINS, config_validation_exports as ConfigValidation, ContainerRuntimeService, DEEP_PRICE_FEED_ID, DEFAULT_DEVSTACK_NETWORK, DEFAULT_EPHEMERAL_FUND_MIST, DEFAULT_STACK_NAME, DEVSTACK_NETWORK_NAMES, DevstackNetworkParseError, HOST_SERVICE_PORT_TOKEN, http_probe_exports as HttpProbes, IdentityContext, Logger, managed_container_exports as ManagedContainers, ManifestExtrasInvalid, ManifestExtrasLookupError, probes_exports as Probes, process_lines_exports as ProcessLines, process_supervisor_exports as ProcessSupervisor, redaction_exports as Redaction, retry_policy_exports as RetryPolicy, runtime_decode_exports as RuntimeDecode, SUI_FULL_COIN_TYPE, SUI_PRICE_FEED_ID, USDC_PRICE_FEED_ID, account, action, appName, capability, capabilitySink, chainId, codegenable, coin, contentHash, dashboard, deepbookCore as deepbook, deepbookFor, defineCapability, defineDevstack, defineDevstackWith, defineFaucetStrategy, defineId, defineModeNamespace, definePlugin, endpointKey, hostService, isBareCoinType, knownPackage, localPackage, parseDevstackNetwork, parseDevstackNetworkName, pluginErrorContributions, postgres, projection, pythPriceFeedId, resolveAppName, resolveNetwork, resolveNetworkSync, resolveStackName, resolveStateDir, resource, routable, runStack, seal, sealFor, snapshotable, stackName, strategyContributor, sui, suiFor, validateBareCoinType, walCoin, wallet, walrus, walrusFor };

package/dist/{runtime → orchestrators}/built-in-plugin-layers.mjs

@@ -1,12 +1,15 @@
 import { CapabilitySinksService } from "../substrate/runtime/capability-sinks/service.mjs";
 import { layerCapabilitySinksDefault } from "../substrate/runtime/capability-sinks/layer.mjs";
+import "../substrate/runtime/capability-sinks/index.mjs";
+import { SnapshotOrchestratorService } from "./snapshot/service.mjs";
+import "./snapshot/index.mjs";
 import { discoverCoinsFromPublish } from "../plugins/coin/discovery.mjs";
-import { CoinRegistryService, coinRegistryLayer } from "../plugins/coin/registry.mjs";
+import { CoinRegistryService, layerCoinRegistry } from "../plugins/coin/registry.mjs";
 import { LOCAL_PACKAGE_PUBLISHED_KIND } from "../plugins/package/publish-output.mjs";
 import { PackageRegistryService, layerPackageRegistry } from "../plugins/package/registry.mjs";
-import { Context, Effect, Layer } from "effect";
-//#region src/runtime/built-in-plugin-layers.ts
-const layerBuiltInPluginServices = Layer.mergeAll(coinRegistryLayer, layerPackageRegistry);
+import { Context, Effect, FileSystem, Layer } from "effect";
+//#region src/orchestrators/built-in-plugin-layers.ts
+const layerBuiltInPluginServices = Layer.mergeAll(layerCoinRegistry, layerPackageRegistry);
 const publishResultSink = (coinRegistry) => ({
 	kind: LOCAL_PACKAGE_PUBLISHED_KIND,
 	accept: (decl) => Effect.gen(function* () {
@@ -41,7 +44,9 @@ const extendBuiltInPluginContext = (ctx) => Effect.gen(function* () {
 	const coinRegistry = yield* CoinRegistryService;
 	const packageRegistry = yield* PackageRegistryService;
 	const capabilitySinks = yield* CapabilitySinksService;
-	return ctx.pipe(Context.add(CoinRegistryService, coinRegistry), Context.add(PackageRegistryService, packageRegistry), Context.add(CapabilitySinksService, capabilitySinks));
+	const snapshotOrchestrator = yield* SnapshotOrchestratorService;
+	const fileSystem = yield* FileSystem.FileSystem;
+	return ctx.pipe(Context.add(CoinRegistryService, coinRegistry), Context.add(PackageRegistryService, packageRegistry), Context.add(CapabilitySinksService, capabilitySinks), Context.add(SnapshotOrchestratorService, snapshotOrchestrator), Context.add(FileSystem.FileSystem, fileSystem));
 });
 //#endregion
 export { extendBuiltInPluginContext, layerBuiltInPluginRuntime };

package/dist/orchestrators/built-in-plugin-layers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"built-in-plugin-layers.mjs","names":[],"sources":["../../src/orchestrators/built-in-plugin-layers.ts"],"sourcesContent":["// Built-in plugin runtime composition.\n//\n// Orchestrator-layer composition (L3): depends on L2 plugin internals\n// (coin/package registries, publish discovery), so it cannot live at L1 runtime.\n// Moved from src/runtime/ to src/orchestrators/ to honor the ARCHITECTURE.md\n// L1-never-imports-from-L2 boundary.\n\nimport { Context, Effect, FileSystem, Layer } from 'effect';\n\nimport { SnapshotOrchestratorService } from './snapshot/index.ts';\nimport { discoverCoinsFromPublish } from '../plugins/coin/discovery.ts';\nimport {\n\tCoinRegistryService,\n\tlayerCoinRegistry,\n\ttype CoinRecord,\n} from '../plugins/coin/registry.ts';\nimport {\n\tLOCAL_PACKAGE_PUBLISHED_KIND,\n\ttype LocalPackagePublishedDecl,\n} from '../plugins/package/publish-output.ts';\nimport { PackageRegistryService, layerPackageRegistry } from '../plugins/package/registry.ts';\nimport {\n\tCapabilitySinksService,\n\tlayerCapabilitySinksDefault,\n\ttype CapabilitySink,\n\ttype OrchestratorSinks,\n} from '../substrate/runtime/capability-sinks/index.ts';\n\nexport const layerBuiltInPluginServices: Layer.Layer<CoinRegistryService | PackageRegistryService> =\n\tLayer.mergeAll(layerCoinRegistry, layerPackageRegistry);\n\nconst publishResultSink = (\n\tcoinRegistry: typeof CoinRegistryService.Service,\n): CapabilitySink<typeof LOCAL_PACKAGE_PUBLISHED_KIND, LocalPackagePublishedDecl> => ({\n\tkind: LOCAL_PACKAGE_PUBLISHED_KIND,\n\taccept: (decl) =>\n\t\tEffect.gen(function* () {\n\t\t\tfor (const discovered of discoverCoinsFromPublish(decl.output)) {\n\t\t\t\tconst record: CoinRecord = {\n\t\t\t\t\tkey: (discovered.symbol ?? discovered.witness).toLowerCase(),\n\t\t\t\t\ttype: discovered.fullCoinType,\n\t\t\t\t\twitness: discovered.witness,\n\t\t\t\t\tmoduleName: discovered.moduleName,\n\t\t\t\t\tdecimals: discovered.decimals ?? 0,\n\t\t\t\t\t...(discovered.symbol === undefined ? {} : { symbol: discovered.symbol }),\n\t\t\t\t\t...(discovered.displayName === undefined ? {} : { displayName: discovered.displayName }),\n\t\t\t\t\t...(discovered.iconUrl === undefined ? {} : { iconUrl: discovered.iconUrl }),\n\t\t\t\t\t...(!discovered.publisherOwnsCap || discovered.treasuryCapId === undefined\n\t\t\t\t\t\t? {}\n\t\t\t\t\t\t: { treasuryCapId: discovered.treasuryCapId }),\n\t\t\t\t\t...(discovered.metadataId === undefined ? {} : { metadataId: discovered.metadataId }),\n\t\t\t\t\tpackageId: decl.packageId,\n\t\t\t\t\tpublishingPackageName: decl.packageName,\n\t\t\t\t};\n\t\t\t\tyield* coinRegistry.register(record);\n\t\t\t}\n\t\t}),\n});\n\nexport const layerBuiltInCapabilitySinks = (\n\torchestrator: OrchestratorSinks,\n): Layer.Layer<CapabilitySinksService, never, CoinRegistryService | PackageRegistryService> => {\n\tconst registerBuiltInPluginSinks = Layer.effectDiscard(\n\t\tEffect.gen(function* () {\n\t\t\tconst sinks = yield* CapabilitySinksService;\n\t\t\tconst coinRegistry = yield* CoinRegistryService;\n\t\t\tyield* sinks.registerSink(publishResultSink(coinRegistry));\n\t\t}),\n\t);\n\treturn registerBuiltInPluginSinks.pipe(\n\t\tLayer.provideMerge(layerCapabilitySinksDefault(orchestrator)),\n\t);\n};\n\nexport const layerBuiltInPluginRuntime = (\n\torchestrator: OrchestratorSinks,\n): Layer.Layer<CoinRegistryService | PackageRegistryService | CapabilitySinksService> =>\n\tlayerBuiltInCapabilitySinks(orchestrator).pipe(Layer.provideMerge(layerBuiltInPluginServices));\n\nexport const extendBuiltInPluginContext = (\n\tctx: Context.Context<never>,\n): Effect.Effect<\n\tContext.Context<never>,\n\tnever,\n\t| CoinRegistryService\n\t| PackageRegistryService\n\t| CapabilitySinksService\n\t| SnapshotOrchestratorService\n\t| FileSystem.FileSystem\n> =>\n\tEffect.gen(function* () {\n\t\tconst coinRegistry = yield* CoinRegistryService;\n\t\tconst packageRegistry = yield* PackageRegistryService;\n\t\tconst capabilitySinks = yield* CapabilitySinksService;\n\t\t// Thread the snapshot orchestrator + filesystem into the plugin\n\t\t// runtime context so the supervisor can populate the control-plane\n\t\t// `domain` surface (snapshot list/restore/delete, which never\n\t\t// round-trip through the void `publishCommand`). The\n\t\t// `ContainerRuntimeService` the domain also needs is already in the\n\t\t// base substrate plugin context.\n\t\tconst snapshotOrchestrator = yield* SnapshotOrchestratorService;\n\t\tconst fileSystem = yield* FileSystem.FileSystem;\n\t\treturn ctx.pipe(\n\t\t\tContext.add(CoinRegistryService, coinRegistry),\n\t\t\tContext.add(PackageRegistryService, packageRegistry),\n\t\t\tContext.add(CapabilitySinksService, capabilitySinks),\n\t\t\tContext.add(SnapshotOrchestratorService, snapshotOrchestrator),\n\t\t\tContext.add(FileSystem.FileSystem, fileSystem),\n\t\t) as Context.Context<never>;\n\t});\n"],"mappings":";;;;;;;;;;;AA4BA,MAAa,6BACZ,MAAM,SAAS,mBAAmB,qBAAqB;AAExD,MAAM,qBACL,kBACqF;CACrF,MAAM;CACN,SAAS,SACR,OAAO,IAAI,aAAa;AACvB,OAAK,MAAM,cAAc,yBAAyB,KAAK,OAAO,EAAE;GAC/D,MAAM,SAAqB;IAC1B,MAAM,WAAW,UAAU,WAAW,SAAS,aAAa;IAC5D,MAAM,WAAW;IACjB,SAAS,WAAW;IACpB,YAAY,WAAW;IACvB,UAAU,WAAW,YAAY;IACjC,GAAI,WAAW,WAAW,KAAA,IAAY,EAAE,GAAG,EAAE,QAAQ,WAAW,QAAQ;IACxE,GAAI,WAAW,gBAAgB,KAAA,IAAY,EAAE,GAAG,EAAE,aAAa,WAAW,aAAa;IACvF,GAAI,WAAW,YAAY,KAAA,IAAY,EAAE,GAAG,EAAE,SAAS,WAAW,SAAS;IAC3E,GAAI,CAAC,WAAW,oBAAoB,WAAW,kBAAkB,KAAA,IAC9D,EAAE,GACF,EAAE,eAAe,WAAW,eAAe;IAC9C,GAAI,WAAW,eAAe,KAAA,IAAY,EAAE,GAAG,EAAE,YAAY,WAAW,YAAY;IACpF,WAAW,KAAK;IAChB,uBAAuB,KAAK;IAC5B;AACD,UAAO,aAAa,SAAS,OAAO;;GAEpC;CACH;AAED,MAAa,+BACZ,iBAC8F;AAQ9F,QAPmC,MAAM,cACxC,OAAO,IAAI,aAAa;EACvB,MAAM,QAAQ,OAAO;EACrB,MAAM,eAAe,OAAO;AAC5B,SAAO,MAAM,aAAa,kBAAkB,aAAa,CAAC;GACzD,CAE8B,CAAC,KACjC,MAAM,aAAa,4BAA4B,aAAa,CAAC,CAC7D;;AAGF,MAAa,6BACZ,iBAEA,4BAA4B,aAAa,CAAC,KAAK,MAAM,aAAa,2BAA2B,CAAC;AAE/F,MAAa,8BACZ,QAUA,OAAO,IAAI,aAAa;CACvB,MAAM,eAAe,OAAO;CAC5B,MAAM,kBAAkB,OAAO;CAC/B,MAAM,kBAAkB,OAAO;CAO/B,MAAM,uBAAuB,OAAO;CACpC,MAAM,aAAa,OAAO,WAAW;AACrC,QAAO,IAAI,KACV,QAAQ,IAAI,qBAAqB,aAAa,EAC9C,QAAQ,IAAI,wBAAwB,gBAAgB,EACpD,QAAQ,IAAI,wBAAwB,gBAAgB,EACpD,QAAQ,IAAI,6BAA6B,qBAAqB,EAC9D,QAAQ,IAAI,WAAW,YAAY,WAAW,CAC9C;EACA"}

package/dist/orchestrators/codegen/bindings.d.mts

@@ -1,2 +1 @@
-import { Context, Effect, FileSystem, Layer } from "effect";
-import { ChildProcessSpawner } from "effect/unstable/process";
+import { Context, Effect, FileSystem, Layer } from "effect";