@mysten-incubation/devstack 0.0.1 → 0.1.0

package/dist/plugins/coin/service.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"service.mjs","names":[],"sources":["../../../src/plugins/coin/service.ts"],"sourcesContent":["// Coin plugin — main acquire body.\n//\n// One-shot value resolution: the three address forms unify behind a\n// single `acquireCoin` Effect. The barrel (`index.ts`) constructs ONE\n// `CoinAcquireInputs` per declared coin instance and routes here.\n//\n// What this file does:\n//\n//   1. Dispatch on the address-form discriminator to the right\n//      resolver under `address-resolution.ts`.\n//   2. Project the resolved value into the user-facing `ResolvedCoin`\n//      shape that the Tag publishes.\n//   3. Project a `mint(...)` closure (lazy mint — captures the\n//      resolved fullCoinType + the cap id; defers the substrate-\n//      primitive call to mint time so the cache key is keyed on\n//      mint-time inputs, not factory-time ones).\n//\n// What it does NOT do:\n//\n//   - Consume the LocalPackagePublishOutput — that's the discovery-fold path\n//     handled at compose-time in the barrel (the barrel calls into\n//     `discovery.ts` + `metadata.ts` to populate the registry as\n//     packages publish; this file just READS the registry).\n//   - Wire capabilities — the barrel's job.\n\nimport { Effect, type Scope } from 'effect';\n\nimport type { ChainId } from '../../substrate/brand.ts';\nimport type {\n\tArtifactPublishError,\n\tArtifactPublisher,\n} from '../../primitives/artifact-publisher.ts';\nimport {\n\tBUILTIN_COINS,\n\tresolveBuiltin,\n\tresolveByBareType,\n\tresolveByWitness,\n\ttype ResolvedCoin,\n} from './address-resolution.ts';\nimport { coinError, type CoinError } from './errors.ts';\nimport type { MetadataSdkShim } from './metadata.ts';\nimport {\n\tperformMint,\n\ttype MintInputs,\n\ttype MintResult,\n\ttype MintSdkShim,\n\ttype MintSigner,\n} from './mint.ts';\nimport type { CoinRegistry } from './registry.ts';\n\n/** Per-instance options threaded into the acquire body. One-of the\n *  three address forms. */\nexport type CoinAddressForm =\n\t| {\n\t\t\treadonly kind: 'witness';\n\t\t\treadonly publishingPackageName: string;\n\t\t\treadonly witness: string;\n\t\t\treadonly fundingSigner?: MintSigner;\n\t  }\n\t| { readonly kind: 'known'; readonly fullCoinType: string }\n\t| { readonly kind: 'builtin'; readonly name: keyof typeof BUILTIN_COINS };\n\n/** Per-acquire context supplied by the barrel from the BuildContext.\n *  Carries the resolved per-stack registry, the Sui-side SDK shim\n *  (verify probe + tx build), the chain id, and the\n *  `ArtifactPublisher` substrate primitive used by `performMint`. */\nexport interface CoinAcquireContext {\n\treadonly registry: CoinRegistry;\n\treadonly sdk: MetadataSdkShim & MintSdkShim;\n\treadonly chain: ChainId;\n\treadonly publisher: ArtifactPublisher;\n}\n\n/** The tag's resolved value — the three address forms unified PLUS a\n *  closure for the generic mint surface. */\nexport interface CoinValue extends ResolvedCoin {\n\t/** Generic mint. Requires the cap id (either resolved from the\n\t *  registry record's `treasuryCapId`, or supplied explicitly for\n\t *  bare-type coins). Each call yields a fresh artifact publisher round (cache\n\t *  hit means short-circuit per the substrate primitive). */\n\treadonly mint: (\n\t\tsigner: MintSigner,\n\t\topts: { readonly to: string; readonly amount: bigint; readonly treasuryCapId?: string },\n\t) => Effect.Effect<MintResult, CoinError | ArtifactPublishError, Scope.Scope>;\n\t/** Centralized funding strategy, present for local package coins\n\t *  whose publisher still owns the TreasuryCap. The coin barrel\n\t *  publishes it under `coinType:<fullCoinType>` so Account funding\n\t *  can mint arbitrary local coins without bespoke example actions. */\n\treadonly fundingStrategy?: {\n\t\treadonly request: (req: {\n\t\t\treadonly address: string;\n\t\t\treadonly amount: bigint;\n\t\t}) => Effect.Effect<void, CoinError | ArtifactPublishError>;\n\t};\n}\n\n/** Resolve a coin instance to the tag's resolved value. */\nexport const acquireCoin = (\n\tform: CoinAddressForm,\n\tctx: CoinAcquireContext,\n): Effect.Effect<CoinValue, CoinError> =>\n\tEffect.gen(function* () {\n\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t'coin.form': form.kind,\n\t\t});\n\n\t\tconst resolved: ResolvedCoin = yield* (() => {\n\t\t\tswitch (form.kind) {\n\t\t\t\tcase 'witness':\n\t\t\t\t\treturn resolveByWitness(ctx.registry, form.publishingPackageName, form.witness);\n\t\t\t\tcase 'known':\n\t\t\t\t\treturn resolveByBareType(ctx.sdk, form.fullCoinType);\n\t\t\t\tcase 'builtin':\n\t\t\t\t\treturn Effect.succeed(resolveBuiltin(form.name));\n\t\t\t}\n\t\t})();\n\n\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t'coin.fullCoinType': resolved.fullCoinType,\n\t\t\t'coin.decimals': resolved.decimals,\n\t\t\t'coin.source': resolved.source,\n\t\t});\n\n\t\tconst mint: CoinValue['mint'] = (signer, opts) => {\n\t\t\tconst capId = opts.treasuryCapId ?? resolved.treasuryCapId;\n\t\t\tif (capId === undefined) {\n\t\t\t\treturn Effect.fail(\n\t\t\t\t\tcoinError('cap-missing', {\n\t\t\t\t\t\tidentifier: resolved.fullCoinType,\n\t\t\t\t\t\tmessage: `coin('${resolved.fullCoinType}').mint(): no treasury cap available — pass opts.treasuryCapId or use a coin discovered with publisherOwnsCap=true.`,\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst inputs: MintInputs = {\n\t\t\t\tfullCoinType: resolved.fullCoinType,\n\t\t\t\ttreasuryCapId: capId,\n\t\t\t\trecipient: opts.to,\n\t\t\t\tamount: opts.amount,\n\t\t\t};\n\t\t\treturn performMint(ctx.publisher, ctx.chain, signer, ctx.sdk, inputs);\n\t\t};\n\t\tconst fundingSigner = form.kind === 'witness' ? form.fundingSigner : undefined;\n\t\tconst fundingTreasuryCapId = resolved.treasuryCapId;\n\t\tconst fundingStrategy =\n\t\t\tfundingSigner !== undefined && fundingTreasuryCapId !== undefined\n\t\t\t\t? {\n\t\t\t\t\t\trequest: (req: { readonly address: string; readonly amount: bigint }) =>\n\t\t\t\t\t\t\tEffect.scoped(\n\t\t\t\t\t\t\t\tmint(fundingSigner, {\n\t\t\t\t\t\t\t\t\tto: req.address,\n\t\t\t\t\t\t\t\t\tamount: req.amount,\n\t\t\t\t\t\t\t\t\ttreasuryCapId: fundingTreasuryCapId,\n\t\t\t\t\t\t\t\t}).pipe(Effect.asVoid),\n\t\t\t\t\t\t\t),\n\t\t\t\t\t}\n\t\t\t\t: undefined;\n\t\tconst value: CoinValue = {\n\t\t\t...resolved,\n\t\t\tmint,\n\t\t\t...(fundingStrategy === undefined ? {} : { fundingStrategy }),\n\t\t};\n\t\treturn value;\n\t});\n"],"mappings":";;;;;;AAiGA,MAAa,eACZ,MACA,QAEA,OAAO,IAAI,aAAa;AACvB,QAAO,OAAO,oBAAoB,EACjC,aAAa,KAAK,MAClB,CAAC;CAEF,MAAM,WAAyB,cAAc;AAC5C,UAAQ,KAAK,MAAb;GACC,KAAK,UACJ,QAAO,iBAAiB,IAAI,UAAU,KAAK,uBAAuB,KAAK,QAAQ;GAChF,KAAK,QACJ,QAAO,kBAAkB,IAAI,KAAK,KAAK,aAAa;GACrD,KAAK,UACJ,QAAO,OAAO,QAAQ,eAAe,KAAK,KAAK,CAAC;;KAE/C;AAEJ,QAAO,OAAO,oBAAoB;EACjC,qBAAqB,SAAS;EAC9B,iBAAiB,SAAS;EAC1B,eAAe,SAAS;EACxB,CAAC;CAEF,MAAM,QAA2B,QAAQ,SAAS;EACjD,MAAM,QAAQ,KAAK,iBAAiB,SAAS;AAC7C,MAAI,UAAU,KAAA,EACb,QAAO,OAAO,KACb,UAAU,eAAe;GACxB,YAAY,SAAS;GACrB,SAAS,SAAS,SAAS,aAAa;GACxC,CAAC,CACF;EAEF,MAAM,SAAqB;GAC1B,cAAc,SAAS;GACvB,eAAe;GACf,WAAW,KAAK;GAChB,QAAQ,KAAK;GACb;AACD,SAAO,YAAY,IAAI,WAAW,IAAI,OAAO,QAAQ,IAAI,KAAK,OAAO;;CAEtE,MAAM,gBAAgB,KAAK,SAAS,YAAY,KAAK,gBAAgB,KAAA;CACrE,MAAM,uBAAuB,SAAS;CACtC,MAAM,kBACL,kBAAkB,KAAA,KAAa,yBAAyB,KAAA,IACrD,EACA,UAAU,QACT,OAAO,OACN,KAAK,eAAe;EACnB,IAAI,IAAI;EACR,QAAQ,IAAI;EACZ,eAAe;EACf,CAAC,CAAC,KAAK,OAAO,OAAO,CACtB,EACF,GACA,KAAA;AAMJ,QAAO;EAJN,GAAG;EACH;EACA,GAAI,oBAAoB,KAAA,IAAY,EAAE,GAAG,EAAE,iBAAiB;EAEjD;EACX"}
+{"version":3,"file":"service.mjs","names":[],"sources":["../../../src/plugins/coin/service.ts"],"sourcesContent":["// Coin plugin — main acquire body.\n//\n// One-shot value resolution: the three address forms unify behind a\n// single `acquireCoin` Effect. The barrel (`index.ts`) constructs ONE\n// `CoinAcquireInputs` per declared coin instance and routes here.\n//\n// What this file does:\n//\n//   1. Dispatch on the address-form discriminator to the right\n//      resolver under `address-resolution.ts`.\n//   2. Project the resolved value into the user-facing `ResolvedCoin`\n//      shape that the Tag publishes.\n//   3. Project a `mint(...)` closure (lazy mint — captures the\n//      resolved fullCoinType + the cap id; defers the substrate-\n//      primitive call to mint time so the cache key is keyed on\n//      mint-time inputs, not factory-time ones).\n//\n// What it does NOT do:\n//\n//   - Consume the LocalPackagePublishOutput — that's the discovery-fold path\n//     handled at compose-time in the barrel (the barrel calls into\n//     `discovery.ts` + `metadata.ts` to populate the registry as\n//     packages publish; this file just READS the registry).\n//   - Wire capabilities — the barrel's job.\n\nimport { Effect, type Scope } from 'effect';\n\nimport type { ChainId } from '../../substrate/brand.ts';\nimport type {\n\tArtifactPublishError,\n\tArtifactPublisher,\n} from '../../primitives/artifact-publisher.ts';\nimport {\n\tBUILTIN_COINS,\n\tresolveBuiltin,\n\tresolveByBareType,\n\tresolveByWitness,\n\ttype ResolvedCoin,\n} from './address-resolution.ts';\nimport { coinError, type CoinError } from './errors.ts';\nimport type { MetadataSdkShim } from './metadata.ts';\nimport { CoinSpans } from './spans.ts';\nimport {\n\tperformMint,\n\ttype MintInputs,\n\ttype MintResult,\n\ttype MintSdkShim,\n\ttype MintSigner,\n} from './mint.ts';\nimport type { CoinRegistry } from './registry.ts';\n\n/** Per-instance options threaded into the acquire body. One-of the\n *  three address forms. */\nexport type CoinAddressForm =\n\t| {\n\t\t\treadonly kind: 'witness';\n\t\t\treadonly publishingPackageName: string;\n\t\t\treadonly witness: string;\n\t\t\treadonly fundingSigner?: MintSigner;\n\t  }\n\t| { readonly kind: 'known'; readonly fullCoinType: string }\n\t| { readonly kind: 'builtin'; readonly name: keyof typeof BUILTIN_COINS };\n\n/** Per-acquire context supplied by the barrel from the BuildContext.\n *  Carries the resolved per-stack registry, the Sui-side SDK shim\n *  (verify probe + tx build), the chain id, and the\n *  `ArtifactPublisher` substrate primitive used by `performMint`. */\nexport interface CoinAcquireContext {\n\treadonly registry: CoinRegistry;\n\treadonly sdk: MetadataSdkShim & MintSdkShim;\n\treadonly chain: ChainId;\n\treadonly publisher: ArtifactPublisher;\n}\n\n/** The tag's resolved value — the three address forms unified PLUS a\n *  closure for the generic mint surface. */\nexport interface CoinValue extends ResolvedCoin {\n\t/** Generic mint. Requires the cap id (either resolved from the\n\t *  registry record's `treasuryCapId`, or supplied explicitly for\n\t *  bare-type coins). Each call yields a fresh artifact publisher round (cache\n\t *  hit means short-circuit per the substrate primitive). */\n\treadonly mint: (\n\t\tsigner: MintSigner,\n\t\topts: { readonly to: string; readonly amount: bigint; readonly treasuryCapId?: string },\n\t) => Effect.Effect<MintResult, CoinError | ArtifactPublishError, Scope.Scope>;\n\t/** Self-contained mint that needs NO external signer — present\n\t *  exactly when `fundingStrategy` is (witness-form coins whose\n\t *  publisher still owns the TreasuryCap). Captures the publisher\n\t *  `MintSigner` + the resolved `treasuryCapId` internally and returns\n\t *  the full `MintResult` (digest + minted-coin id), unlike\n\t *  `fundingStrategy.request` which discards the result.\n\t *\n\t *  This is the seam the control-plane dashboard mint ACTION drives:\n\t *  the supervisor reads the resolved `CoinValue` and calls this with\n\t *  `{to, amount}` — no signer threading needed, because the\n\t *  treasury-cap-owning publisher signer is already in-process here\n\t *  (the same lease-owning path `fundingStrategy` uses). The Effect is\n\t *  self-scoping (wraps `Effect.scoped` over the artifact-publisher\n\t *  round), so callers run it directly without a surrounding Scope. */\n\treadonly mintFromCap?: (opts: {\n\t\treadonly to: string;\n\t\treadonly amount: bigint;\n\t}) => Effect.Effect<MintResult, CoinError | ArtifactPublishError>;\n\t/** Centralized funding strategy, present for local package coins\n\t *  whose publisher still owns the TreasuryCap. The coin barrel\n\t *  publishes it under `coinType:<fullCoinType>` so Account funding\n\t *  can mint arbitrary local coins without bespoke example actions.\n\t *\n\t *  The request shape is a NARROWED projection of\n\t *  `AccountFundingRequest` (`{address, amount}` only — the coin\n\t *  strategy doesn't need the resolved account handle since the\n\t *  TreasuryCap-owning publisher signs the mint via its own lease\n\t *  inside `mint → signAndDispatch`). Direct consumers (deepbook\n\t *  seed funding) call `.request({address, amount})` against this\n\t *  narrowed shape; the coin barrel projects the value to the wider\n\t *  `AccountFundingStrategy` cross-plugin contract at the\n\t *  `strategy-contributor` capability boundary (see\n\t *  `coin/index.ts → buildCapabilities`), wrapping the narrow\n\t *  request fn so the account bus's `{address, amount, account}`\n\t *  shape is satisfied honestly at the boundary.\n\t *\n\t *  The E channel preserves the tagged vocabulary\n\t *  (`CoinError | ArtifactPublishError`) rather than collapsing to\n\t *  `unknown`, so direct consumers can catchTag on the typed\n\t *  errors. The account-side dispatcher's registry lookup narrows\n\t *  the channel to `unknown` at the registry boundary and reads\n\t *  `_tag` defensively. */\n\treadonly fundingStrategy?: {\n\t\treadonly request: (req: {\n\t\t\treadonly address: string;\n\t\t\treadonly amount: bigint;\n\t\t}) => Effect.Effect<void, CoinError | ArtifactPublishError>;\n\t};\n}\n\n/** Resolve a coin instance to the tag's resolved value. */\nexport const acquireCoin = (\n\tform: CoinAddressForm,\n\tctx: CoinAcquireContext,\n): Effect.Effect<CoinValue, CoinError> =>\n\tEffect.gen(function* () {\n\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t[CoinSpans.form]: form.kind,\n\t\t});\n\n\t\tconst resolved: ResolvedCoin = yield* (() => {\n\t\t\tswitch (form.kind) {\n\t\t\t\tcase 'witness':\n\t\t\t\t\treturn resolveByWitness(ctx.registry, form.publishingPackageName, form.witness);\n\t\t\t\tcase 'known':\n\t\t\t\t\treturn resolveByBareType(ctx.sdk, form.fullCoinType);\n\t\t\t\tcase 'builtin':\n\t\t\t\t\treturn Effect.succeed(resolveBuiltin(form.name));\n\t\t\t}\n\t\t})();\n\n\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t[CoinSpans.fullCoinType]: resolved.fullCoinType,\n\t\t\t[CoinSpans.decimals]: resolved.decimals,\n\t\t\t[CoinSpans.source]: resolved.source,\n\t\t});\n\n\t\tconst mint: CoinValue['mint'] = (signer, opts) => {\n\t\t\tconst capId = opts.treasuryCapId ?? resolved.treasuryCapId;\n\t\t\tif (capId === undefined) {\n\t\t\t\treturn Effect.fail(\n\t\t\t\t\tcoinError('cap-missing', {\n\t\t\t\t\t\tidentifier: resolved.fullCoinType,\n\t\t\t\t\t\tmessage: `coin('${resolved.fullCoinType}').mint(): no treasury cap available — pass opts.treasuryCapId or use a coin discovered with publisherOwnsCap=true.`,\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst inputs: MintInputs = {\n\t\t\t\tfullCoinType: resolved.fullCoinType,\n\t\t\t\ttreasuryCapId: capId,\n\t\t\t\trecipient: opts.to,\n\t\t\t\tamount: opts.amount,\n\t\t\t};\n\t\t\treturn performMint(ctx.publisher, ctx.chain, signer, ctx.sdk, inputs);\n\t\t};\n\t\tconst fundingSigner = form.kind === 'witness' ? form.fundingSigner : undefined;\n\t\tconst fundingTreasuryCapId = resolved.treasuryCapId;\n\t\t// Self-contained mint closure — same capture as `fundingStrategy`\n\t\t// (publisher signer + resolved cap) but returns the full\n\t\t// `MintResult` and self-scopes. Drives the dashboard mint action.\n\t\tconst mintFromCap: CoinValue['mintFromCap'] =\n\t\t\tfundingSigner !== undefined && fundingTreasuryCapId !== undefined\n\t\t\t\t? (opts) =>\n\t\t\t\t\t\tEffect.scoped(\n\t\t\t\t\t\t\tmint(fundingSigner, {\n\t\t\t\t\t\t\t\tto: opts.to,\n\t\t\t\t\t\t\t\tamount: opts.amount,\n\t\t\t\t\t\t\t\ttreasuryCapId: fundingTreasuryCapId,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t)\n\t\t\t\t: undefined;\n\t\tconst fundingStrategy: CoinValue['fundingStrategy'] =\n\t\t\tfundingSigner !== undefined && fundingTreasuryCapId !== undefined\n\t\t\t\t? {\n\t\t\t\t\t\trequest: (req) =>\n\t\t\t\t\t\t\tEffect.scoped(\n\t\t\t\t\t\t\t\tmint(fundingSigner, {\n\t\t\t\t\t\t\t\t\tto: req.address,\n\t\t\t\t\t\t\t\t\tamount: req.amount,\n\t\t\t\t\t\t\t\t\ttreasuryCapId: fundingTreasuryCapId,\n\t\t\t\t\t\t\t\t}).pipe(Effect.asVoid),\n\t\t\t\t\t\t\t),\n\t\t\t\t\t}\n\t\t\t\t: undefined;\n\t\tconst value: CoinValue = {\n\t\t\t...resolved,\n\t\t\tmint,\n\t\t\t...(mintFromCap === undefined ? {} : { mintFromCap }),\n\t\t\t...(fundingStrategy === undefined ? {} : { fundingStrategy }),\n\t\t};\n\t\treturn value;\n\t});\n"],"mappings":";;;;;;;AAwIA,MAAa,eACZ,MACA,QAEA,OAAO,IAAI,aAAa;AACvB,QAAO,OAAO,oBAAoB,GAChC,UAAU,OAAO,KAAK,MACvB,CAAC;CAEF,MAAM,WAAyB,cAAc;AAC5C,UAAQ,KAAK,MAAb;GACC,KAAK,UACJ,QAAO,iBAAiB,IAAI,UAAU,KAAK,uBAAuB,KAAK,QAAQ;GAChF,KAAK,QACJ,QAAO,kBAAkB,IAAI,KAAK,KAAK,aAAa;GACrD,KAAK,UACJ,QAAO,OAAO,QAAQ,eAAe,KAAK,KAAK,CAAC;;KAE/C;AAEJ,QAAO,OAAO,oBAAoB;GAChC,UAAU,eAAe,SAAS;GAClC,UAAU,WAAW,SAAS;GAC9B,UAAU,SAAS,SAAS;EAC7B,CAAC;CAEF,MAAM,QAA2B,QAAQ,SAAS;EACjD,MAAM,QAAQ,KAAK,iBAAiB,SAAS;AAC7C,MAAI,UAAU,KAAA,EACb,QAAO,OAAO,KACb,UAAU,eAAe;GACxB,YAAY,SAAS;GACrB,SAAS,SAAS,SAAS,aAAa;GACxC,CAAC,CACF;EAEF,MAAM,SAAqB;GAC1B,cAAc,SAAS;GACvB,eAAe;GACf,WAAW,KAAK;GAChB,QAAQ,KAAK;GACb;AACD,SAAO,YAAY,IAAI,WAAW,IAAI,OAAO,QAAQ,IAAI,KAAK,OAAO;;CAEtE,MAAM,gBAAgB,KAAK,SAAS,YAAY,KAAK,gBAAgB,KAAA;CACrE,MAAM,uBAAuB,SAAS;CAItC,MAAM,cACL,kBAAkB,KAAA,KAAa,yBAAyB,KAAA,KACpD,SACD,OAAO,OACN,KAAK,eAAe;EACnB,IAAI,KAAK;EACT,QAAQ,KAAK;EACb,eAAe;EACf,CAAC,CACF,GACD,KAAA;CACJ,MAAM,kBACL,kBAAkB,KAAA,KAAa,yBAAyB,KAAA,IACrD,EACA,UAAU,QACT,OAAO,OACN,KAAK,eAAe;EACnB,IAAI,IAAI;EACR,QAAQ,IAAI;EACZ,eAAe;EACf,CAAC,CAAC,KAAK,OAAO,OAAO,CACtB,EACF,GACA,KAAA;AAOJ,QAAO;EALN,GAAG;EACH;EACA,GAAI,gBAAgB,KAAA,IAAY,EAAE,GAAG,EAAE,aAAa;EACpD,GAAI,oBAAoB,KAAA,IAAY,EAAE,GAAG,EAAE,iBAAiB;EAEjD;EACX"}

package/dist/plugins/coin/spans.mjs

@@ -0,0 +1,20 @@
+//#region src/plugins/coin/spans.ts
+const CoinSpans = {
+	type: "coin.type",
+	form: "coin.form",
+	fullCoinType: "coin.fullCoinType",
+	decimals: "coin.decimals",
+	source: "coin.source",
+	mint: {
+		recipient: "coin.mint.recipient",
+		fullCoinType: "coin.mint.fullCoinType",
+		amount: "coin.mint.amount",
+		digest: "coin.mint.digest",
+		mintedCoinId: "coin.mint.mintedCoinId"
+	},
+	metadata: { fullCoinType: "coin.metadata.fullCoinType" }
+};
+//#endregion
+export { CoinSpans };
+
+//# sourceMappingURL=spans.mjs.map

package/dist/plugins/coin/spans.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"spans.mjs","names":[],"sources":["../../../src/plugins/coin/spans.ts"],"sourcesContent":["// Coin plugin span-attribute vocabulary. Plugin-local — substrate's\n// `SpanAttr` carries only engine-dimensional + http/process generic\n// keys; plugin-domain keys live next to the plugin that owns them.\n//\n// Callsite pattern: `Effect.annotateCurrentSpan({ [CoinSpans.type]:\n// value })`. Free-form string literals are a STYLE_GUIDE §16 violation.\n\nexport const CoinSpans = {\n\ttype: 'coin.type',\n\tform: 'coin.form',\n\tfullCoinType: 'coin.fullCoinType',\n\tdecimals: 'coin.decimals',\n\tsource: 'coin.source',\n\tmint: {\n\t\trecipient: 'coin.mint.recipient',\n\t\tfullCoinType: 'coin.mint.fullCoinType',\n\t\tamount: 'coin.mint.amount',\n\t\tdigest: 'coin.mint.digest',\n\t\tmintedCoinId: 'coin.mint.mintedCoinId',\n\t},\n\tmetadata: {\n\t\tfullCoinType: 'coin.metadata.fullCoinType',\n\t},\n} as const;\n"],"mappings":";AAOA,MAAa,YAAY;CACxB,MAAM;CACN,MAAM;CACN,cAAc;CACd,UAAU;CACV,QAAQ;CACR,MAAM;EACL,WAAW;EACX,cAAc;EACd,QAAQ;EACR,QAAQ;EACR,cAAc;EACd;CACD,UAAU,EACT,cAAc,8BACd;CACD"}

package/dist/plugins/dashboard/domain.mjs

@@ -0,0 +1,402 @@
+import { FAUCET_CAPABILITY_KEY_PREFIX } from "../faucet/dispatcher.mjs";
+import "../faucet/index.mjs";
+import { Effect } from "effect";
+//#region src/plugins/dashboard/domain.ts
+/** A 0x-prefixed Sui address: `0x` + 1..64 hex digits. Mirrors the
+*  address validation the mint PTB's `tx.pure.address` ultimately
+*  enforces, surfaced up front so the dashboard gets a clean rejection
+*  rather than an opaque build failure. */
+const SUI_ADDRESS_RE = /^0x[0-9a-fA-F]{1,64}$/;
+/** The canonical builtin SUI coin type — selects the SUI faucet funding
+*  path. Mirrors `SUI_FULL_COIN_TYPE` in `plugins/account/funding.ts`
+*  (inlined here so the dashboard plugin does not cross-import the account
+*  funding module just for the string). */
+const SUI_FULL_COIN_TYPE = "0x2::sui::SUI";
+/** A positive integer base-unit amount string (no sign, no decimal
+*  point, no leading zeros beyond a bare `0` — which is itself rejected
+*  as non-positive). */
+const isPositiveIntegerString = (s) => {
+	if (!/^\d+$/.test(s)) return false;
+	try {
+		return BigInt(s) > 0n;
+	} catch {
+		return false;
+	}
+};
+/** Compose the chain faucet capability key (`faucet:request:<chainId>`)
+*  the SUI funding path resolves. Uses the faucet plugin's prefix constant
+*  (single source of truth) — same key the boot-time funding pass builds. */
+const faucetCapabilityKeyFor = (chain) => `${FAUCET_CAPABILITY_KEY_PREFIX}:${chain}`;
+/** Parse a base-unit amount string into a positive bigint, or `null` when
+*  absent / non-positive / non-integer. */
+const parseAmount = (s) => {
+	if (s == null) return null;
+	const trimmed = s.trim();
+	if (!isPositiveIntegerString(trimmed)) return null;
+	return BigInt(trimmed);
+};
+/** Derive a display symbol from a full coin type's module path
+*  (`0x…::wal::WAL` → `WAL`, `0x…::deep::DEEP` → `DEEP`). Falls back to the
+*  struct name, then the raw type. Keeps the dashboard name-blind on the
+*  resolved coin VALUE while still labeling the faucet pill. */
+const coinSymbolFromType = (coinType) => {
+	const parts = coinType.split("::");
+	const struct = parts[parts.length - 1];
+	return struct !== void 0 && struct.length > 0 ? struct : coinType;
+};
+/** Extract a human detail from a faucet/funding strategy failure. The
+*  strategy error channels are tagged structs carrying `message`/`reason`;
+*  read them structurally without importing each plugin's error type. */
+const causeDetail = (cause) => {
+	if (cause !== null && typeof cause === "object") {
+		const c = cause;
+		if (typeof c.message === "string" && c.message.length > 0) return c.message;
+		if (typeof c.reason === "string" && c.reason.length > 0) return c.reason;
+		if (typeof c._tag === "string" && c._tag.length > 0) return c._tag;
+	}
+	return String(cause);
+};
+const faucetCauseDetail = causeDetail;
+const fundingCauseDetail = causeDetail;
+const str = (v) => typeof v === "string" ? v : null;
+const strReq = (v) => typeof v === "string" ? v : "";
+const num = (v) => typeof v === "number" && Number.isFinite(v) ? v : null;
+const bool = (v) => v === true;
+/** Filter the generic resolved values down to those whose resource id
+*  matches a predicate, in graph order. Returns the `{ pluginKey, value }`
+*  the shaping functions consume. */
+const matching = (values, matches) => values.filter((v) => matches(v.id));
+/** SQL that emits a single line of JSON the dashboard can parse without a
+*  PG client. Keeps the round trip to one exec. */
+const PG_STATS_SQL = `SELECT json_build_object(
+  'db_bytes', pg_database_size(current_database()),
+  'connections', (SELECT count(*) FROM pg_stat_activity WHERE datname = current_database()),
+  'tables', COALESCE((
+    SELECT json_agg(t) FROM (
+      SELECT schemaname AS schema, relname AS name,
+             n_live_tup AS row_estimate,
+             pg_total_relation_size(relid) AS total_bytes
+      FROM pg_stat_user_tables
+      ORDER BY pg_total_relation_size(relid) DESC
+      LIMIT 200
+    ) t
+  ), '[]'::json)
+)`;
+const parsePgStats = (pluginKey, pg, stdout) => {
+	const base = {
+		pluginKey,
+		database: strReq((pg.databases ?? [])[0]) || "postgres",
+		plainUrl: `postgres://${str(pg.networkAlias) ?? "postgres"}:${num(pg.port) ?? 5432}`
+	};
+	try {
+		const trimmed = stdout.trim();
+		const parsed = JSON.parse(trimmed);
+		const tables = (parsed.tables ?? []).map((t) => ({
+			schema: t.schema ?? "public",
+			name: t.name ?? "",
+			rowEstimate: num(t.row_estimate) ?? 0,
+			totalBytes: num(t.total_bytes) ?? 0
+		}));
+		return {
+			...base,
+			databaseBytes: num(parsed.db_bytes) ?? 0,
+			connectionCount: num(parsed.connections) ?? 0,
+			tables,
+			available: true,
+			detail: null
+		};
+	} catch (cause) {
+		return {
+			...base,
+			databaseBytes: 0,
+			connectionCount: 0,
+			tables: [],
+			available: false,
+			detail: `failed to parse psql output: ${String(cause)}`
+		};
+	}
+};
+const unavailablePgStats = (pluginKey, pg, detail) => {
+	return {
+		pluginKey,
+		database: strReq((pg.databases ?? [])[0]) || "postgres",
+		plainUrl: `postgres://${str(pg.networkAlias) ?? "postgres"}:${num(pg.port) ?? 5432}`,
+		databaseBytes: 0,
+		connectionCount: 0,
+		tables: [],
+		available: false,
+		detail
+	};
+};
+const buildDashboardDomain = (deps) => {
+	const { control, identity, containerRuntime, strategyRegistry } = deps;
+	const mode = control.resolvedValues.pipe(Effect.map((values) => {
+		const sui = matching(values, (id) => id === "sui")[0];
+		if (sui === void 0) return null;
+		switch (sui.value.mode) {
+			case "fork": return "fork";
+			case "live": return "live";
+			case "local":
+			case "local-rpc": return "local";
+			default: return null;
+		}
+	}));
+	const deepbook = control.resolvedValues.pipe(Effect.map((values) => matching(values, (id) => id.startsWith("deepbook/")).map(({ pluginKey, value }) => {
+		const v = value;
+		const modeRaw = v.mode;
+		const dbMode = modeRaw === "override" ? "override" : modeRaw === "known" ? "known" : "local";
+		return {
+			pluginKey,
+			name: pluginKey.replace(/^deepbook:/, ""),
+			mode: dbMode,
+			chain: strReq(v.chain),
+			packageId: strReq(v.packageId),
+			registryId: strReq(v.registryId),
+			adminCapId: str(v.adminCapId),
+			deepTreasuryId: str(v.deepTreasuryId),
+			pools: (v.pools ?? []).map((p) => ({
+				name: strReq(p.name),
+				poolId: strReq(p.poolId),
+				baseCoinType: strReq(p.baseCoinType),
+				quoteCoinType: strReq(p.quoteCoinType)
+			})),
+			marketMakerRunning: bool(v.marketMakerRunning),
+			serverUrl: str(v.serverUrl),
+			indexerUrl: str(v.indexerUrl)
+		};
+	})));
+	const seal = control.resolvedValues.pipe(Effect.map((values) => matching(values, (id) => id.startsWith("seal:")).map(({ pluginKey, value }) => {
+		const v = value;
+		const sealMode = v.mode === "live" ? "live" : v.mode === "fork-known" ? "fork-known" : "local-keygen";
+		const keyServers = (v.serverConfigs ?? []).map((c) => ({
+			objectId: strReq(c.objectId),
+			weight: num(c.weight) ?? 1
+		}));
+		return {
+			pluginKey,
+			mode: sealMode,
+			objectId: strReq(v.objectId),
+			keyServerUrl: strReq(v.keyServerUrl),
+			keyServers,
+			threshold: keyServers.length
+		};
+	})));
+	const coinCaps = control.resolvedValues.pipe(Effect.map((values) => matching(values, (id) => id.startsWith("coin:")).map(({ pluginKey, value }) => {
+		const v = value;
+		const source = v.source === "registry" ? "registry" : v.source === "builtin" ? "builtin" : "on-chain";
+		return {
+			pluginKey,
+			symbol: str(v.symbol),
+			fullCoinType: strReq(v.fullCoinType),
+			decimals: num(v.decimals) ?? 0,
+			source,
+			treasuryCapId: str(v.treasuryCapId),
+			packageId: str(v.packageId)
+		};
+	})));
+	const mintCoin = (input) => Effect.gen(function* () {
+		const recipient = input.recipient.trim();
+		if (!SUI_ADDRESS_RE.test(recipient)) return {
+			ok: false,
+			detail: `invalid recipient '${input.recipient}': expected a 0x-prefixed Sui address`,
+			digest: null
+		};
+		if (!isPositiveIntegerString(input.amountBaseUnits)) return {
+			ok: false,
+			detail: `invalid amountBaseUnits '${input.amountBaseUnits}': expected a positive integer string`,
+			digest: null
+		};
+		const match = matching(yield* control.resolvedValues, (id) => id.startsWith("coin:")).map(({ value }) => value).find((v) => strReq(v.fullCoinType) === input.coinType);
+		if (match === void 0) return {
+			ok: false,
+			detail: `no resolved coin found for type '${input.coinType}'`,
+			digest: null
+		};
+		if (typeof match.mintFromCap !== "function") return {
+			ok: false,
+			detail: `coin '${input.coinType}' has no in-process treasury cap signer — mint is only available for local-package coins whose publisher still owns the TreasuryCap`,
+			digest: null
+		};
+		return yield* match.mintFromCap({
+			to: recipient,
+			amount: BigInt(input.amountBaseUnits)
+		}).pipe(Effect.map((r) => ({
+			ok: true,
+			detail: `minted ${input.amountBaseUnits} of ${input.coinType} to ${recipient}`,
+			digest: r.digest
+		})), Effect.catch((cause) => Effect.succeed({
+			ok: false,
+			detail: typeof cause?.message === "string" ? cause.message : `mint failed: ${String(cause)}`,
+			digest: null
+		})), Effect.catchCause((cause) => Effect.succeed({
+			ok: false,
+			detail: `mint crashed: ${String(cause)}`,
+			digest: null
+		})));
+	});
+	/** The chain id the SUI funding path keys on, read from the resolved sui
+	*  value (same `chain` field the sui codegen/snapshot decls stamp). */
+	const readChainId = control.resolvedValues.pipe(Effect.map((values) => {
+		const sui = matching(values, (id) => id === "sui")[0];
+		return sui === void 0 ? null : str(sui.value.chain);
+	}));
+	const fundableCoins = Effect.gen(function* () {
+		const out = [];
+		if (strategyRegistry === null) return out;
+		const chain = yield* readChainId;
+		const keys = yield* strategyRegistry.list();
+		if (chain !== null && keys.includes(faucetCapabilityKeyFor(chain))) out.push({
+			symbol: "SUI",
+			coinType: SUI_FULL_COIN_TYPE,
+			honorsAmount: false,
+			requiresAccountSigner: false
+		});
+		for (const key of keys) {
+			if (!key.startsWith("coinType:")) continue;
+			const coinType = key.slice(9);
+			if (coinType === SUI_FULL_COIN_TYPE) continue;
+			const strategy = yield* strategyRegistry.get(key).pipe(Effect.catchTag("StrategyNotFoundError", () => Effect.succeed(null)));
+			out.push({
+				symbol: coinSymbolFromType(coinType),
+				coinType,
+				honorsAmount: true,
+				requiresAccountSigner: strategy?.requiresRecipientAccount ?? false
+			});
+		}
+		return out;
+	});
+	const fundAccount = (input) => Effect.gen(function* () {
+		const recipient = input.recipient.trim();
+		if (!SUI_ADDRESS_RE.test(recipient)) return {
+			ok: false,
+			detail: `invalid recipient '${input.recipient}': expected a 0x-prefixed Sui address`,
+			digest: null
+		};
+		if (strategyRegistry === null) return {
+			ok: false,
+			detail: "funding unavailable: no strategy registry wired",
+			digest: null
+		};
+		const coinType = input.coinType?.trim() ?? "";
+		if (coinType === "" || coinType === SUI_FULL_COIN_TYPE) {
+			const chain = yield* readChainId;
+			if (chain === null) return {
+				ok: false,
+				detail: "cannot fund SUI: no resolved sui plugin / chain id in this stack",
+				digest: null
+			};
+			const key = faucetCapabilityKeyFor(chain);
+			const strategy = yield* strategyRegistry.get(key).pipe(Effect.catchTag("StrategyNotFoundError", () => Effect.succeed(null)));
+			if (strategy === null) return {
+				ok: false,
+				detail: `no SUI faucet strategy registered for chain '${chain}'`,
+				digest: null
+			};
+			const amount = parseAmount(input.amountBaseUnits) ?? 1000000000n;
+			return yield* strategy.request({
+				address: recipient,
+				amount
+			}).pipe(Effect.map(() => ({
+				ok: true,
+				detail: `requested SUI for ${recipient} (fixed-amount faucet grant)`,
+				digest: null
+			})), Effect.catch((cause) => Effect.succeed({
+				ok: false,
+				detail: `SUI faucet request failed: ${faucetCauseDetail(cause)}`,
+				digest: null
+			})), Effect.catchCause((cause) => Effect.succeed({
+				ok: false,
+				detail: `SUI faucet request crashed: ${String(cause)}`,
+				digest: null
+			})));
+		}
+		const amount = parseAmount(input.amountBaseUnits);
+		if (amount === null) return {
+			ok: false,
+			detail: `invalid amountBaseUnits '${input.amountBaseUnits ?? ""}': expected a positive integer string`,
+			digest: null
+		};
+		const key = `coinType:${coinType}`;
+		const strategy = yield* strategyRegistry.get(key).pipe(Effect.catchTag("StrategyNotFoundError", () => Effect.succeed(null)));
+		if (strategy === null) return {
+			ok: false,
+			detail: `no funding strategy registered for coin '${coinType}' — WAL needs the walrus plugin (with an exchange) and DEEP needs the deepbook plugin`,
+			digest: null
+		};
+		const account = matching(yield* control.resolvedValues, (id) => id.startsWith("account/")).map(({ value }) => value).find((v) => str(v.address) === recipient);
+		if (strategy.requiresRecipientAccount === true && account === void 0) return {
+			ok: false,
+			detail: `coin '${coinType}' is funded by an account-signed swap, but '${recipient}' is not a resolved account in this stack — fund a configured account (the swap spends its SUI)`,
+			digest: null
+		};
+		return yield* strategy.request({
+			address: recipient,
+			amount,
+			...account === void 0 ? {} : { account }
+		}).pipe(Effect.map(() => ({
+			ok: true,
+			detail: `funded ${amount} base units of ${coinType} to ${recipient}`,
+			digest: null
+		})), Effect.catch((cause) => Effect.succeed({
+			ok: false,
+			detail: `${coinSymbolFromType(coinType)} funding failed: ${fundingCauseDetail(cause)}`,
+			digest: null
+		})), Effect.catchCause((cause) => Effect.succeed({
+			ok: false,
+			detail: `${coinSymbolFromType(coinType)} funding crashed: ${String(cause)}`,
+			digest: null
+		})));
+	});
+	return {
+		mode,
+		deepbook,
+		seal,
+		coinCaps,
+		postgresStats: Effect.gen(function* () {
+			const instances = matching(yield* control.resolvedValues, (id) => id === "postgres");
+			if (instances.length === 0) return [];
+			const out = [];
+			for (const { pluginKey, value } of instances) {
+				const pg = value;
+				if (containerRuntime === null) {
+					out.push(unavailablePgStats(pluginKey, pg, "container runtime unavailable"));
+					continue;
+				}
+				const database = strReq((pg.databases ?? [])[0]) || "postgres";
+				const pgUser = str(pg.user) ?? "postgres";
+				const role = str(pg.name) ?? "postgres";
+				const stats = yield* Effect.gen(function* () {
+					const handles = yield* containerRuntime.inspectByLabels({
+						app: String(identity.app),
+						stack: String(identity.stack),
+						plugin: "postgres",
+						role
+					});
+					const running = handles.find((h) => h.status === "running") ?? handles[0];
+					if (running === void 0) return unavailablePgStats(pluginKey, pg, "no running postgres container found");
+					const result = yield* containerRuntime.exec(running, [
+						"psql",
+						"-U",
+						pgUser,
+						"-d",
+						database,
+						"-tAc",
+						PG_STATS_SQL
+					]);
+					if (result.exitCode !== 0) return unavailablePgStats(pluginKey, pg, `psql exited ${result.exitCode}: ${result.stderr.trim().slice(0, 200)}`);
+					return parsePgStats(pluginKey, pg, result.stdout);
+				}).pipe(Effect.catchCause((cause) => Effect.succeed(unavailablePgStats(pluginKey, pg, String(cause)))));
+				out.push(stats);
+			}
+			return out;
+		}),
+		mintCoin,
+		fundableCoins,
+		fundAccount
+	};
+};
+Effect.succeed(null), Effect.succeed([]), Effect.succeed([]), Effect.succeed([]), Effect.succeed([]), Effect.succeed([]);
+//#endregion
+export { buildDashboardDomain };
+
+//# sourceMappingURL=domain.mjs.map

package/dist/plugins/dashboard/domain.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain.mjs","names":[],"sources":["../../../src/plugins/dashboard/domain.ts"],"sourcesContent":["// Dashboard plugin-domain shaping.\n//\n// The substrate control-plane is GENERIC + name-blind: it hands out the\n// snapshot catalog, the observability rings, and a single uninterpreted\n// `resolvedValues` accessor (see `substrate/runtime/control-plane/`). This\n// module — which lives in the PLUGIN layer and is allowed to name plugins —\n// owns ALL plugin-name-aware shaping: it matches resolved plugin values by\n// resource id (`deepbook/`-prefix, `seal:`-prefix, `coin:`-prefix,\n// `id === 'sui'`, `id === 'postgres'`) and projects them into the\n// app-agnostic shapes the\n// GraphQL schema renders. It also owns the `mode` derivation, the coin\n// `mint` action, and the Postgres `psql`-exec wire-protocol stats.\n//\n// Design discipline (mirrors the old substrate seam, one layer up):\n//   - We import NO plugin types — we narrow the opaque `unknown` resolved\n//     value through shallow structural shapes that mirror the relevant\n//     fields. A field missing on the live value collapses to the\n//     null/empty default.\n//   - Every accessor degrades to empty/`null` rather than failing, so a\n//     single missing/uninitialised plugin can't take down a dashboard\n//     query (`E = never` on the public surface).\n//   - We match plugins by RESOURCE ID — a prefix for the multi-instance\n//     kinds (`deepbook/`, `seal:`, `coin:`) and an exact id for the\n//     singletons (`id === 'postgres'`, `id === 'sui'`) — rather than\n//     plugin-key substrings: the resource id is the stable identity the\n//     plugin factories mint.\n\nimport { Effect } from 'effect';\n\nimport type { ContainerRuntime } from '../../contracts/container-runtime.ts';\nimport type { Identity } from '../../substrate/identity.ts';\nimport type {\n\tControlPlaneDomain,\n\tControlPlaneResolvedValue,\n} from '../../substrate/runtime/control-plane/service.ts';\nimport type { StrategyRegistry } from '../../contracts/strategy-contributor.ts';\nimport type { FaucetStrategy } from '../../contracts/faucet-strategy.ts';\nimport type { AccountFundingStrategy } from '../../contracts/funding-strategy.ts';\nimport type { AccountValue } from '../account/index.ts';\n// The faucet capability-key prefix is owned by the faucet plugin (single\n// source of truth). The dashboard plugin layer is allowed to name plugins,\n// so importing the key constructor is the same cross-plugin reference the\n// account funding pass (`plugins/account/funding.ts`) uses — NOT a resolved\n// plugin-VALUE import (those stay structurally narrowed below). Imported via\n// the sibling's barrel to satisfy the plugin-boundary invariant.\nimport { FAUCET_CAPABILITY_KEY_PREFIX } from '../faucet/index.ts';\n\n// -----------------------------------------------------------------------------\n// App-agnostic domain shapes the GraphQL schema renders.\n// -----------------------------------------------------------------------------\n\n/** One DeepBook pool object id + coin types (prices are chain-direct). */\nexport interface DashboardDeepbookPool {\n\treadonly name: string;\n\treadonly poolId: string;\n\treadonly baseCoinType: string;\n\treadonly quoteCoinType: string;\n}\n\nexport interface DashboardDeepbookInfo {\n\treadonly pluginKey: string;\n\treadonly name: string;\n\treadonly mode: 'local' | 'override' | 'known';\n\treadonly chain: string;\n\treadonly packageId: string;\n\treadonly registryId: string;\n\treadonly adminCapId: string | null;\n\treadonly deepTreasuryId: string | null;\n\treadonly pools: ReadonlyArray<DashboardDeepbookPool>;\n\treadonly marketMakerRunning: boolean;\n\treadonly serverUrl: string | null;\n\treadonly indexerUrl: string | null;\n}\n\nexport interface DashboardSealKeyServer {\n\treadonly objectId: string;\n\treadonly weight: number;\n}\n\nexport interface DashboardSealInfo {\n\treadonly pluginKey: string;\n\treadonly mode: 'local-keygen' | 'live' | 'fork-known';\n\treadonly objectId: string;\n\treadonly keyServerUrl: string;\n\treadonly keyServers: ReadonlyArray<DashboardSealKeyServer>;\n\t/** Threshold = number of registered key-server configs. */\n\treadonly threshold: number;\n}\n\n/** A coin's treasury-cap id (drives the Mint action) + addressing facts. */\nexport interface DashboardCoinCap {\n\treadonly pluginKey: string;\n\treadonly symbol: string | null;\n\treadonly fullCoinType: string;\n\treadonly decimals: number;\n\treadonly source: 'registry' | 'on-chain' | 'builtin';\n\treadonly treasuryCapId: string | null;\n\treadonly packageId: string | null;\n}\n\n/** Input for the dashboard mint ACTION. `amountBaseUnits` is the raw\n *  integer amount in the coin's smallest unit (decimals already applied\n *  by the caller / form) — a string so large u64 values survive the wire\n *  without precision loss. */\nexport interface DashboardMintInput {\n\treadonly coinType: string;\n\treadonly recipient: string;\n\treadonly amountBaseUnits: string;\n}\n\n/** Outcome of a dashboard mint ACTION. Mirrors the snapshot\n *  restore/delete result shape plus the on-chain tx `digest` on success. */\nexport interface DashboardMintResult {\n\treadonly ok: boolean;\n\treadonly detail: string;\n\treadonly digest: string | null;\n}\n\n/** Input for the dashboard fund ACTION.\n *\n *  `coinType` selects the funding strategy: absent or the canonical SUI\n *  type routes through the chain's faucet strategy (`faucet:request:<chainId>`,\n *  fixed-amount); any other full coin type routes through the coin-specific\n *  `coinType:<fullCoinType>` strategy (WAL exchange swap / DEEP pool swap).\n *\n *  `amountBaseUnits` is the raw integer amount in the coin's smallest unit\n *  (a string so large u64 values survive the wire without precision loss).\n *  The SUI faucet is fixed-amount and IGNORES it; WAL/DEEP honor it. */\nexport interface DashboardFundInput {\n\treadonly recipient: string;\n\treadonly coinType?: string | null;\n\treadonly amountBaseUnits?: string | null;\n}\n\n/** Outcome of a dashboard fund ACTION. The in-process funding strategies\n *  return `void` (not a digest), so `digest` is always `null` here — kept\n *  for shape-parity with `DashboardMintResult`. `ok:true` means the\n *  strategy's `request(...)` completed (the faucet POST landed / the swap\n *  executed on-chain); `detail` carries the reason on failure. */\nexport interface DashboardFundResult {\n\treadonly ok: boolean;\n\treadonly detail: string;\n\treadonly digest: string | null;\n}\n\n/** One coin the dashboard faucet can actually fund, with whether the\n *  underlying strategy honors a caller-supplied amount.\n *\n *  SUI is always present (fixed-amount faucet, `honorsAmount: false`).\n *  WAL/DEEP appear only when their plugin registered a `coinType:<X>`\n *  funding strategy AND (for WAL) carries a swap that spends the\n *  recipient account's SUI — so `honorsAmount: true`. */\nexport interface DashboardFundableCoin {\n\treadonly symbol: string;\n\treadonly coinType: string;\n\treadonly honorsAmount: boolean;\n\t/** True when funding requires the recipient to BE a resolved account in\n\t *  the stack (the swap spends that account's own SUI via its in-process\n\t *  signer). SUI is `false` (any 0x address); WAL/DEEP are `true`. */\n\treadonly requiresAccountSigner: boolean;\n}\n\nexport interface DashboardPostgresTable {\n\treadonly schema: string;\n\treadonly name: string;\n\treadonly rowEstimate: number;\n\treadonly totalBytes: number;\n}\n\nexport interface DashboardPostgresStats {\n\treadonly pluginKey: string;\n\treadonly database: string;\n\t/** Plain (password-less) DSN — the credentialed form NEVER leaves the\n\t *  backend. */\n\treadonly plainUrl: string;\n\treadonly databaseBytes: number;\n\treadonly connectionCount: number;\n\treadonly tables: ReadonlyArray<DashboardPostgresTable>;\n\t/** `false` when stats could not be gathered (container down, exec\n\t *  failure). The dashboard renders a degraded state rather than\n\t *  failing the whole query. */\n\treadonly available: boolean;\n\treadonly detail: string | null;\n}\n\n/** The dashboard plugin-domain accessor surface. Each member is a\n *  self-contained Effect that never fails (`E = never`); they degrade to\n *  empty/`null` so a single missing plugin can't take down the dashboard\n *  query. */\nexport interface DashboardDomain {\n\t/** Fork-vs-local mode, derived from the resolved sui plugin's chain\n\t *  identity. Used for advance-clock gating. `null` when no sui plugin\n\t *  is present. */\n\treadonly mode: Effect.Effect<'fork' | 'local' | 'live' | null>;\n\t/** DeepBook deployments (registry/admin/pool ids + MM state). */\n\treadonly deepbook: Effect.Effect<ReadonlyArray<DashboardDeepbookInfo>>;\n\t/** Seal key-server deployments (objectId/threshold/mode). */\n\treadonly seal: Effect.Effect<ReadonlyArray<DashboardSealInfo>>;\n\t/** Coin treasury caps (drives Mint). */\n\treadonly coinCaps: Effect.Effect<ReadonlyArray<DashboardCoinCap>>;\n\t/** Postgres wire-protocol stats per postgres plugin instance. */\n\treadonly postgresStats: Effect.Effect<ReadonlyArray<DashboardPostgresStats>>;\n\t/** Mint ACTION — mints `amountBaseUnits` of `coinType` to `recipient`,\n\t *  signed in-process by the treasury-cap-owning publisher signer the\n\t *  resolved coin value's self-contained `mintFromCap` closure holds. */\n\treadonly mintCoin: (input: DashboardMintInput) => Effect.Effect<DashboardMintResult>;\n\t/** Coins the faucet can actually fund right now (SUI always; WAL/DEEP\n\t *  only when their plugin registered a funding strategy). Drives the\n\t *  faucet panel's coin pills + amount-field gating. */\n\treadonly fundableCoins: Effect.Effect<ReadonlyArray<DashboardFundableCoin>>;\n\t/** Fund ACTION — reuses devstack's in-process funding strategies. SUI\n\t *  (absent/canonical type) routes through the chain faucet strategy\n\t *  (fixed-amount); WAL/DEEP route through the coin-specific funding\n\t *  strategy (account-signed exchange/pool swap). Real result — `ok`\n\t *  reflects whether the strategy's `request(...)` completed. */\n\treadonly fundAccount: (input: DashboardFundInput) => Effect.Effect<DashboardFundResult>;\n}\n\n// -----------------------------------------------------------------------------\n// Structural projections of plugin-resolved values\n//\n// We narrow the opaque `unknown` resolved value through shallow structural\n// shapes that mirror the relevant fields. A field missing on the live value\n// collapses to the null/empty default.\n// -----------------------------------------------------------------------------\n\ninterface DeepbookShape {\n\treadonly mode?: unknown;\n\treadonly chain?: unknown;\n\treadonly packageId?: unknown;\n\treadonly registryId?: unknown;\n\treadonly adminCapId?: unknown;\n\treadonly deepTreasuryId?: unknown;\n\treadonly pools?: ReadonlyArray<{\n\t\treadonly name?: unknown;\n\t\treadonly poolId?: unknown;\n\t\treadonly baseCoinType?: unknown;\n\t\treadonly quoteCoinType?: unknown;\n\t}>;\n\treadonly marketMakerRunning?: unknown;\n\treadonly serverUrl?: unknown;\n\treadonly indexerUrl?: unknown;\n}\n\ninterface SealShape {\n\treadonly mode?: unknown;\n\treadonly objectId?: unknown;\n\treadonly keyServerUrl?: unknown;\n\treadonly serverConfigs?: ReadonlyArray<{\n\t\treadonly objectId?: unknown;\n\t\treadonly weight?: unknown;\n\t}>;\n}\n\ninterface CoinShape {\n\treadonly symbol?: unknown;\n\treadonly fullCoinType?: unknown;\n\treadonly decimals?: unknown;\n\treadonly source?: unknown;\n\treadonly treasuryCapId?: unknown;\n\treadonly packageId?: unknown;\n\t/** Self-contained mint closure on the resolved coin value (present\n\t *  for witness-form coins whose publisher still owns the cap). Read\n\t *  structurally — we import no coin types. Returns an Effect that\n\t *  resolves a `{ digest }`-bearing result or fails with a\n\t *  coin/artifact-publisher tagged error. */\n\treadonly mintFromCap?: (opts: {\n\t\treadonly to: string;\n\t\treadonly amount: bigint;\n\t}) => Effect.Effect<{ readonly digest: string }, { readonly message?: unknown }>;\n}\n\ninterface PostgresShape {\n\treadonly name?: unknown;\n\treadonly user?: unknown;\n\treadonly databases?: ReadonlyArray<unknown>;\n\treadonly plainEndpoint?: unknown;\n\treadonly networkAlias?: unknown;\n\treadonly port?: unknown;\n}\n\ninterface SuiShape {\n\treadonly mode?: unknown;\n\t/** Substrate-level chain id (`'sui:localnet'`, `'sui:testnet'`,\n\t *  `'sui:mainnet-fork@123'`). Composes the faucet capability key\n\t *  (`faucet:request:<chainId>`) the SUI funding path resolves. */\n\treadonly chain?: unknown;\n}\n\n/** Structural shape of the resolved account value (`account/<name>`). The\n *  WAL/DEEP funding strategies need this handle as `req.account` — the swap\n *  spends the recipient account's own SUI through its in-process signer.\n *  Narrowed to the fields the strategy dispatch reads; the full\n *  `AccountValue` is assignable to it, so we cast the matched value across\n *  the seam without importing the account VALUE shape structurally\n *  elsewhere. */\ninterface AccountShape {\n\treadonly address?: unknown;\n\treadonly name?: unknown;\n}\n\n/** A 0x-prefixed Sui address: `0x` + 1..64 hex digits. Mirrors the\n *  address validation the mint PTB's `tx.pure.address` ultimately\n *  enforces, surfaced up front so the dashboard gets a clean rejection\n *  rather than an opaque build failure. */\nconst SUI_ADDRESS_RE = /^0x[0-9a-fA-F]{1,64}$/;\n\n/** The canonical builtin SUI coin type — selects the SUI faucet funding\n *  path. Mirrors `SUI_FULL_COIN_TYPE` in `plugins/account/funding.ts`\n *  (inlined here so the dashboard plugin does not cross-import the account\n *  funding module just for the string). */\nconst SUI_FULL_COIN_TYPE = '0x2::sui::SUI' as const;\n\n/** A positive integer base-unit amount string (no sign, no decimal\n *  point, no leading zeros beyond a bare `0` — which is itself rejected\n *  as non-positive). */\nconst isPositiveIntegerString = (s: string): boolean => {\n\tif (!/^\\d+$/.test(s)) return false;\n\ttry {\n\t\treturn BigInt(s) > 0n;\n\t} catch {\n\t\treturn false;\n\t}\n};\n\n/** Compose the chain faucet capability key (`faucet:request:<chainId>`)\n *  the SUI funding path resolves. Uses the faucet plugin's prefix constant\n *  (single source of truth) — same key the boot-time funding pass builds. */\nconst faucetCapabilityKeyFor = (\n\tchain: string,\n): `${typeof FAUCET_CAPABILITY_KEY_PREFIX}:${string}` => `${FAUCET_CAPABILITY_KEY_PREFIX}:${chain}`;\n\n/** Parse a base-unit amount string into a positive bigint, or `null` when\n *  absent / non-positive / non-integer. */\nconst parseAmount = (s: string | null | undefined): bigint | null => {\n\tif (s == null) return null;\n\tconst trimmed = s.trim();\n\tif (!isPositiveIntegerString(trimmed)) return null;\n\treturn BigInt(trimmed);\n};\n\n/** Derive a display symbol from a full coin type's module path\n *  (`0x…::wal::WAL` → `WAL`, `0x…::deep::DEEP` → `DEEP`). Falls back to the\n *  struct name, then the raw type. Keeps the dashboard name-blind on the\n *  resolved coin VALUE while still labeling the faucet pill. */\nconst coinSymbolFromType = (coinType: string): string => {\n\tconst parts = coinType.split('::');\n\tconst struct = parts[parts.length - 1];\n\treturn struct !== undefined && struct.length > 0 ? struct : coinType;\n};\n\n/** Extract a human detail from a faucet/funding strategy failure. The\n *  strategy error channels are tagged structs carrying `message`/`reason`;\n *  read them structurally without importing each plugin's error type. */\nconst causeDetail = (cause: unknown): string => {\n\tif (cause !== null && typeof cause === 'object') {\n\t\tconst c = cause as {\n\t\t\treadonly message?: unknown;\n\t\t\treadonly reason?: unknown;\n\t\t\treadonly _tag?: unknown;\n\t\t};\n\t\tif (typeof c.message === 'string' && c.message.length > 0) return c.message;\n\t\tif (typeof c.reason === 'string' && c.reason.length > 0) return c.reason;\n\t\tif (typeof c._tag === 'string' && c._tag.length > 0) return c._tag;\n\t}\n\treturn String(cause);\n};\nconst faucetCauseDetail = causeDetail;\nconst fundingCauseDetail = causeDetail;\n\nconst str = (v: unknown): string | null => (typeof v === 'string' ? v : null);\nconst strReq = (v: unknown): string => (typeof v === 'string' ? v : '');\nconst num = (v: unknown): number | null => (typeof v === 'number' && Number.isFinite(v) ? v : null);\nconst bool = (v: unknown): boolean => v === true;\n\n/** Filter the generic resolved values down to those whose resource id\n *  matches a predicate, in graph order. Returns the `{ pluginKey, value }`\n *  the shaping functions consume. */\nconst matching = (\n\tvalues: ReadonlyArray<ControlPlaneResolvedValue>,\n\tmatches: (resourceId: string) => boolean,\n): ReadonlyArray<ControlPlaneResolvedValue> => values.filter((v) => matches(v.id));\n\n// -----------------------------------------------------------------------------\n// Postgres wire-protocol stats via `psql` exec inside the container\n// -----------------------------------------------------------------------------\n\n/** SQL that emits a single line of JSON the dashboard can parse without a\n *  PG client. Keeps the round trip to one exec. */\nconst PG_STATS_SQL = `SELECT json_build_object(\n  'db_bytes', pg_database_size(current_database()),\n  'connections', (SELECT count(*) FROM pg_stat_activity WHERE datname = current_database()),\n  'tables', COALESCE((\n    SELECT json_agg(t) FROM (\n      SELECT schemaname AS schema, relname AS name,\n             n_live_tup AS row_estimate,\n             pg_total_relation_size(relid) AS total_bytes\n      FROM pg_stat_user_tables\n      ORDER BY pg_total_relation_size(relid) DESC\n      LIMIT 200\n    ) t\n  ), '[]'::json)\n)`;\n\nconst parsePgStats = (\n\tpluginKey: string,\n\tpg: PostgresShape,\n\tstdout: string,\n): DashboardPostgresStats => {\n\tconst database = strReq((pg.databases ?? [])[0]) || 'postgres';\n\tconst host = str(pg.networkAlias) ?? 'postgres';\n\tconst port = num(pg.port) ?? 5432;\n\tconst plainUrl = `postgres://${host}:${port}`;\n\tconst base = {\n\t\tpluginKey,\n\t\tdatabase,\n\t\tplainUrl,\n\t} as const;\n\ttry {\n\t\tconst trimmed = stdout.trim();\n\t\tconst parsed = JSON.parse(trimmed) as {\n\t\t\tdb_bytes?: number;\n\t\t\tconnections?: number;\n\t\t\ttables?: ReadonlyArray<{\n\t\t\t\tschema?: string;\n\t\t\t\tname?: string;\n\t\t\t\trow_estimate?: number;\n\t\t\t\ttotal_bytes?: number;\n\t\t\t}>;\n\t\t};\n\t\tconst tables: DashboardPostgresTable[] = (parsed.tables ?? []).map((t) => ({\n\t\t\tschema: t.schema ?? 'public',\n\t\t\tname: t.name ?? '',\n\t\t\trowEstimate: num(t.row_estimate) ?? 0,\n\t\t\ttotalBytes: num(t.total_bytes) ?? 0,\n\t\t}));\n\t\treturn {\n\t\t\t...base,\n\t\t\tdatabaseBytes: num(parsed.db_bytes) ?? 0,\n\t\t\tconnectionCount: num(parsed.connections) ?? 0,\n\t\t\ttables,\n\t\t\tavailable: true,\n\t\t\tdetail: null,\n\t\t};\n\t} catch (cause) {\n\t\treturn {\n\t\t\t...base,\n\t\t\tdatabaseBytes: 0,\n\t\t\tconnectionCount: 0,\n\t\t\ttables: [],\n\t\t\tavailable: false,\n\t\t\tdetail: `failed to parse psql output: ${String(cause)}`,\n\t\t};\n\t}\n};\n\nconst unavailablePgStats = (\n\tpluginKey: string,\n\tpg: PostgresShape,\n\tdetail: string,\n): DashboardPostgresStats => {\n\tconst database = strReq((pg.databases ?? [])[0]) || 'postgres';\n\tconst host = str(pg.networkAlias) ?? 'postgres';\n\tconst port = num(pg.port) ?? 5432;\n\treturn {\n\t\tpluginKey,\n\t\tdatabase,\n\t\tplainUrl: `postgres://${host}:${port}`,\n\t\tdatabaseBytes: 0,\n\t\tconnectionCount: 0,\n\t\ttables: [],\n\t\tavailable: false,\n\t\tdetail,\n\t};\n};\n\n// -----------------------------------------------------------------------------\n// Builder\n// -----------------------------------------------------------------------------\n\nexport interface DashboardDomainDeps {\n\t/** The generic, name-blind control-plane domain (resolved values). */\n\treadonly control: ControlPlaneDomain;\n\t/** Stack identity, used for the postgres container label probe. */\n\treadonly identity: Identity;\n\t/** Container runtime for the Postgres `psql` exec-probe. `null` in bare\n\t *  test paths; `postgresStats` degrades to an unavailable entry then. */\n\treadonly containerRuntime: ContainerRuntime | null;\n\t/** The scope-local strategy registry — the SAME registry the boot-time\n\t *  account funding pass dispatches through (`plugins/account/funding.ts`).\n\t *  Drives `fundableCoins` + `fundAccount`: SUI via `faucet:request:<chainId>`,\n\t *  WAL/DEEP via `coinType:<fullCoinType>`. `null` in bare test paths; the\n\t *  fund accessors degrade to unavailable then. */\n\treadonly strategyRegistry: StrategyRegistry | null;\n}\n\nexport const buildDashboardDomain = (deps: DashboardDomainDeps): DashboardDomain => {\n\tconst { control, identity, containerRuntime, strategyRegistry } = deps;\n\n\tconst mode: DashboardDomain['mode'] = control.resolvedValues.pipe(\n\t\tEffect.map((values) => {\n\t\t\tconst sui = matching(values, (id) => id === 'sui')[0];\n\t\t\tif (sui === undefined) return null;\n\t\t\tconst m = (sui.value as SuiShape).mode;\n\t\t\tswitch (m) {\n\t\t\t\tcase 'fork':\n\t\t\t\t\treturn 'fork';\n\t\t\t\tcase 'live':\n\t\t\t\t\treturn 'live';\n\t\t\t\tcase 'local':\n\t\t\t\tcase 'local-rpc':\n\t\t\t\t\treturn 'local';\n\t\t\t\tdefault:\n\t\t\t\t\treturn null;\n\t\t\t}\n\t\t}),\n\t);\n\n\tconst deepbook: DashboardDomain['deepbook'] = control.resolvedValues.pipe(\n\t\tEffect.map((values) =>\n\t\t\tmatching(values, (id) => id.startsWith('deepbook/')).map(\n\t\t\t\t({ pluginKey, value }): DashboardDeepbookInfo => {\n\t\t\t\t\tconst v = value as DeepbookShape;\n\t\t\t\t\tconst modeRaw = v.mode;\n\t\t\t\t\tconst dbMode =\n\t\t\t\t\t\tmodeRaw === 'override' ? 'override' : modeRaw === 'known' ? 'known' : 'local';\n\t\t\t\t\treturn {\n\t\t\t\t\t\tpluginKey,\n\t\t\t\t\t\tname: pluginKey.replace(/^deepbook:/, ''),\n\t\t\t\t\t\tmode: dbMode,\n\t\t\t\t\t\tchain: strReq(v.chain),\n\t\t\t\t\t\tpackageId: strReq(v.packageId),\n\t\t\t\t\t\tregistryId: strReq(v.registryId),\n\t\t\t\t\t\tadminCapId: str(v.adminCapId),\n\t\t\t\t\t\tdeepTreasuryId: str(v.deepTreasuryId),\n\t\t\t\t\t\tpools: (v.pools ?? []).map((p) => ({\n\t\t\t\t\t\t\tname: strReq(p.name),\n\t\t\t\t\t\t\tpoolId: strReq(p.poolId),\n\t\t\t\t\t\t\tbaseCoinType: strReq(p.baseCoinType),\n\t\t\t\t\t\t\tquoteCoinType: strReq(p.quoteCoinType),\n\t\t\t\t\t\t})),\n\t\t\t\t\t\tmarketMakerRunning: bool(v.marketMakerRunning),\n\t\t\t\t\t\tserverUrl: str(v.serverUrl),\n\t\t\t\t\t\tindexerUrl: str(v.indexerUrl),\n\t\t\t\t\t};\n\t\t\t\t},\n\t\t\t),\n\t\t),\n\t);\n\n\tconst seal: DashboardDomain['seal'] = control.resolvedValues.pipe(\n\t\tEffect.map((values) =>\n\t\t\tmatching(values, (id) => id.startsWith('seal:')).map(\n\t\t\t\t({ pluginKey, value }): DashboardSealInfo => {\n\t\t\t\t\tconst v = value as SealShape;\n\t\t\t\t\tconst sealMode =\n\t\t\t\t\t\tv.mode === 'live' ? 'live' : v.mode === 'fork-known' ? 'fork-known' : 'local-keygen';\n\t\t\t\t\tconst keyServers = (v.serverConfigs ?? []).map((c) => ({\n\t\t\t\t\t\tobjectId: strReq(c.objectId),\n\t\t\t\t\t\tweight: num(c.weight) ?? 1,\n\t\t\t\t\t}));\n\t\t\t\t\treturn {\n\t\t\t\t\t\tpluginKey,\n\t\t\t\t\t\tmode: sealMode,\n\t\t\t\t\t\tobjectId: strReq(v.objectId),\n\t\t\t\t\t\tkeyServerUrl: strReq(v.keyServerUrl),\n\t\t\t\t\t\tkeyServers,\n\t\t\t\t\t\tthreshold: keyServers.length,\n\t\t\t\t\t};\n\t\t\t\t},\n\t\t\t),\n\t\t),\n\t);\n\n\tconst coinCaps: DashboardDomain['coinCaps'] = control.resolvedValues.pipe(\n\t\tEffect.map((values) =>\n\t\t\tmatching(values, (id) => id.startsWith('coin:')).map(\n\t\t\t\t({ pluginKey, value }): DashboardCoinCap => {\n\t\t\t\t\tconst v = value as CoinShape;\n\t\t\t\t\tconst source =\n\t\t\t\t\t\tv.source === 'registry' ? 'registry' : v.source === 'builtin' ? 'builtin' : 'on-chain';\n\t\t\t\t\treturn {\n\t\t\t\t\t\tpluginKey,\n\t\t\t\t\t\tsymbol: str(v.symbol),\n\t\t\t\t\t\tfullCoinType: strReq(v.fullCoinType),\n\t\t\t\t\t\tdecimals: num(v.decimals) ?? 0,\n\t\t\t\t\t\tsource,\n\t\t\t\t\t\ttreasuryCapId: str(v.treasuryCapId),\n\t\t\t\t\t\tpackageId: str(v.packageId),\n\t\t\t\t\t};\n\t\t\t\t},\n\t\t\t),\n\t\t),\n\t);\n\n\t// Mint ACTION — drives the dashboard Coins panel's Mint button.\n\t//\n\t// Signer source: the resolved coin VALUE carries a self-contained\n\t// `mintFromCap` closure (present only for witness-form coins whose\n\t// publisher still owns the TreasuryCap). That closure already captures\n\t// the treasury-cap-owning publisher `MintSigner` + the resolved cap id\n\t// in-process — the same lease-owning path `coin/service.ts`'s\n\t// `fundingStrategy` uses — so we mint WITHOUT threading a signer through\n\t// this seam (we read the resolved value, never plugin internals).\n\t//\n\t// Never fails (`E = never`): every reject path (bad address, non-\n\t// positive amount, no matching coin, cap-not-owned, on-chain failure)\n\t// degrades to `{ ok: false, detail, digest: null }` so the dashboard\n\t// query can't be taken down by a single bad mint.\n\tconst mintCoin: DashboardDomain['mintCoin'] = (input) =>\n\t\tEffect.gen(function* () {\n\t\t\tconst recipient = input.recipient.trim();\n\t\t\tif (!SUI_ADDRESS_RE.test(recipient)) {\n\t\t\t\treturn {\n\t\t\t\t\tok: false,\n\t\t\t\t\tdetail: `invalid recipient '${input.recipient}': expected a 0x-prefixed Sui address`,\n\t\t\t\t\tdigest: null,\n\t\t\t\t} satisfies DashboardMintResult;\n\t\t\t}\n\t\t\tif (!isPositiveIntegerString(input.amountBaseUnits)) {\n\t\t\t\treturn {\n\t\t\t\t\tok: false,\n\t\t\t\t\tdetail: `invalid amountBaseUnits '${input.amountBaseUnits}': expected a positive integer string`,\n\t\t\t\t\tdigest: null,\n\t\t\t\t} satisfies DashboardMintResult;\n\t\t\t}\n\n\t\t\t// Locate the resolved coin whose fullCoinType matches. Match on the\n\t\t\t// resolved value's `fullCoinType` (the stable on-chain type), not the\n\t\t\t// resource-id prefix, so callers pass the same `coinType` the\n\t\t\t// `coinCaps` query surfaced.\n\t\t\tconst values = yield* control.resolvedValues;\n\t\t\tconst match = matching(values, (id) => id.startsWith('coin:'))\n\t\t\t\t.map(({ value }) => value as CoinShape)\n\t\t\t\t.find((v) => strReq(v.fullCoinType) === input.coinType);\n\n\t\t\tif (match === undefined) {\n\t\t\t\treturn {\n\t\t\t\t\tok: false,\n\t\t\t\t\tdetail: `no resolved coin found for type '${input.coinType}'`,\n\t\t\t\t\tdigest: null,\n\t\t\t\t} satisfies DashboardMintResult;\n\t\t\t}\n\t\t\tif (typeof match.mintFromCap !== 'function') {\n\t\t\t\treturn {\n\t\t\t\t\tok: false,\n\t\t\t\t\tdetail:\n\t\t\t\t\t\t`coin '${input.coinType}' has no in-process treasury cap signer — ` +\n\t\t\t\t\t\t'mint is only available for local-package coins whose publisher still owns the TreasuryCap',\n\t\t\t\t\tdigest: null,\n\t\t\t\t} satisfies DashboardMintResult;\n\t\t\t}\n\n\t\t\treturn yield* match\n\t\t\t\t.mintFromCap({ to: recipient, amount: BigInt(input.amountBaseUnits) })\n\t\t\t\t.pipe(\n\t\t\t\t\tEffect.map(\n\t\t\t\t\t\t(r): DashboardMintResult => ({\n\t\t\t\t\t\t\tok: true,\n\t\t\t\t\t\t\tdetail: `minted ${input.amountBaseUnits} of ${input.coinType} to ${recipient}`,\n\t\t\t\t\t\t\tdigest: r.digest,\n\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t\t// Typed coin/artifact-publisher failures carry `.message`.\n\t\t\t\t\tEffect.catch((cause) =>\n\t\t\t\t\t\tEffect.succeed<DashboardMintResult>({\n\t\t\t\t\t\t\tok: false,\n\t\t\t\t\t\t\tdetail:\n\t\t\t\t\t\t\t\ttypeof cause?.message === 'string'\n\t\t\t\t\t\t\t\t\t? cause.message\n\t\t\t\t\t\t\t\t\t: `mint failed: ${String(cause)}`,\n\t\t\t\t\t\t\tdigest: null,\n\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t\t// Residual defects (interrupts, unexpected throws) — degrade\n\t\t\t\t\t// rather than crash the dashboard query.\n\t\t\t\t\tEffect.catchCause((cause) =>\n\t\t\t\t\t\tEffect.succeed<DashboardMintResult>({\n\t\t\t\t\t\t\tok: false,\n\t\t\t\t\t\t\tdetail: `mint crashed: ${String(cause)}`,\n\t\t\t\t\t\t\tdigest: null,\n\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t});\n\n\t// --- Fund ACTION + fundable-coin derivation ------------------------\n\t//\n\t// Reuses devstack's IN-PROCESS funding strategies — the same strategy\n\t// registry the boot-time account funding pass dispatches through\n\t// (`plugins/account/funding.ts`). We never re-implement signing or the\n\t// exchange/pool swaps:\n\t//\n\t//   - SUI (absent / canonical type) → `faucet:request:<chainId>`. The SUI\n\t//     faucet strategy takes `{ address, amount }` only (no account handle)\n\t//     and is FIXED-AMOUNT (the standard faucet ignores `amount`). Recipient\n\t//     may be ANY 0x address.\n\t//   - WAL/DEEP → `coinType:<fullCoinType>`. The strategy takes\n\t//     `{ address, amount, account }` and runs an account-signed swap, so\n\t//     the recipient MUST be a resolved account in the stack (we match the\n\t//     recipient address against the resolved `account/<name>` values and\n\t//     pass the live `AccountValue` as `req.account`).\n\t//\n\t// Never fails (`E = never`): every reject path degrades to\n\t// `{ ok:false, detail }` so a single bad fund can't take down the query.\n\n\t/** The chain id the SUI funding path keys on, read from the resolved sui\n\t *  value (same `chain` field the sui codegen/snapshot decls stamp). */\n\tconst readChainId = control.resolvedValues.pipe(\n\t\tEffect.map((values) => {\n\t\t\tconst sui = matching(values, (id) => id === 'sui')[0];\n\t\t\treturn sui === undefined ? null : str((sui.value as SuiShape).chain);\n\t\t}),\n\t);\n\n\tconst fundableCoins: DashboardDomain['fundableCoins'] = Effect.gen(function* () {\n\t\t// SUI is always fundable when a faucet strategy is registered for the\n\t\t// active chain; the fixed-amount faucet ignores the requested amount.\n\t\tconst out: DashboardFundableCoin[] = [];\n\t\tif (strategyRegistry === null) return out;\n\n\t\tconst chain = yield* readChainId;\n\t\tconst keys = yield* strategyRegistry.list();\n\t\tif (chain !== null && keys.includes(faucetCapabilityKeyFor(chain))) {\n\t\t\tout.push({\n\t\t\t\tsymbol: 'SUI',\n\t\t\t\tcoinType: SUI_FULL_COIN_TYPE,\n\t\t\t\thonorsAmount: false,\n\t\t\t\trequiresAccountSigner: false,\n\t\t\t});\n\t\t}\n\n\t\t// A coin is fundable iff a `coinType:<fullCoinType>` strategy is actually\n\t\t// registered (the walrus/deepbook/coin plugin contributed one). Derive the\n\t\t// display symbol from the coin type's module path (`::wal::WAL` → WAL,\n\t\t// `::deep::DEEP` → DEEP) so we stay name-blind on the coin VALUE while\n\t\t// still labeling the pill. `requiresAccountSigner` is read from the\n\t\t// strategy's own `requiresRecipientAccount` flag — NOT assumed true for\n\t\t// every coin: WAL/DEEP swaps spend the recipient's SUI (true), but a\n\t\t// managed-coin MINT strategy transfers to a passive recipient (false), so\n\t\t// it can fund any 0x address.\n\t\tfor (const key of keys) {\n\t\t\tif (!key.startsWith('coinType:')) continue;\n\t\t\tconst coinType = key.slice('coinType:'.length);\n\t\t\tif (coinType === SUI_FULL_COIN_TYPE) continue;\n\t\t\tconst strategy = yield* strategyRegistry\n\t\t\t\t.get<typeof key, AccountFundingStrategy<unknown, AccountValue>>(key)\n\t\t\t\t.pipe(Effect.catchTag('StrategyNotFoundError', () => Effect.succeed(null)));\n\t\t\tout.push({\n\t\t\t\tsymbol: coinSymbolFromType(coinType),\n\t\t\t\tcoinType,\n\t\t\t\thonorsAmount: true,\n\t\t\t\trequiresAccountSigner: strategy?.requiresRecipientAccount ?? false,\n\t\t\t});\n\t\t}\n\t\treturn out;\n\t});\n\n\tconst fundAccount: DashboardDomain['fundAccount'] = (input) =>\n\t\tEffect.gen(function* () {\n\t\t\tconst recipient = input.recipient.trim();\n\t\t\tif (!SUI_ADDRESS_RE.test(recipient)) {\n\t\t\t\treturn {\n\t\t\t\t\tok: false,\n\t\t\t\t\tdetail: `invalid recipient '${input.recipient}': expected a 0x-prefixed Sui address`,\n\t\t\t\t\tdigest: null,\n\t\t\t\t} satisfies DashboardFundResult;\n\t\t\t}\n\t\t\tif (strategyRegistry === null) {\n\t\t\t\treturn {\n\t\t\t\t\tok: false,\n\t\t\t\t\tdetail: 'funding unavailable: no strategy registry wired',\n\t\t\t\t\tdigest: null,\n\t\t\t\t} satisfies DashboardFundResult;\n\t\t\t}\n\n\t\t\tconst coinType = input.coinType?.trim() ?? '';\n\t\t\tconst isSui = coinType === '' || coinType === SUI_FULL_COIN_TYPE;\n\n\t\t\t// SUI path — chain faucet strategy. Fixed-amount: we pass a nominal\n\t\t\t// amount but the standard faucet ignores it. Recipient may be any\n\t\t\t// 0x address (no account handle required).\n\t\t\tif (isSui) {\n\t\t\t\tconst chain = yield* readChainId;\n\t\t\t\tif (chain === null) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tok: false,\n\t\t\t\t\t\tdetail: 'cannot fund SUI: no resolved sui plugin / chain id in this stack',\n\t\t\t\t\t\tdigest: null,\n\t\t\t\t\t} satisfies DashboardFundResult;\n\t\t\t\t}\n\t\t\t\tconst key = faucetCapabilityKeyFor(chain);\n\t\t\t\tconst strategy = yield* strategyRegistry\n\t\t\t\t\t.get<typeof key, FaucetStrategy>(key)\n\t\t\t\t\t.pipe(Effect.catchTag('StrategyNotFoundError', () => Effect.succeed(null)));\n\t\t\t\tif (strategy === null) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tok: false,\n\t\t\t\t\t\tdetail: `no SUI faucet strategy registered for chain '${chain}'`,\n\t\t\t\t\t\tdigest: null,\n\t\t\t\t\t} satisfies DashboardFundResult;\n\t\t\t\t}\n\t\t\t\t// `amount` is nominal — the standard faucet grant is fixed and\n\t\t\t\t// ignores it. Default to 1 SUI in MIST so a strategy that DID\n\t\t\t\t// honor it lands a sane value.\n\t\t\t\tconst amount = parseAmount(input.amountBaseUnits) ?? 1_000_000_000n;\n\t\t\t\treturn yield* strategy.request({ address: recipient, amount }).pipe(\n\t\t\t\t\tEffect.map(\n\t\t\t\t\t\t(): DashboardFundResult => ({\n\t\t\t\t\t\t\tok: true,\n\t\t\t\t\t\t\tdetail: `requested SUI for ${recipient} (fixed-amount faucet grant)`,\n\t\t\t\t\t\t\tdigest: null,\n\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t\tEffect.catch((cause) =>\n\t\t\t\t\t\tEffect.succeed<DashboardFundResult>({\n\t\t\t\t\t\t\tok: false,\n\t\t\t\t\t\t\tdetail: `SUI faucet request failed: ${faucetCauseDetail(cause)}`,\n\t\t\t\t\t\t\tdigest: null,\n\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t\tEffect.catchCause((cause) =>\n\t\t\t\t\t\tEffect.succeed<DashboardFundResult>({\n\t\t\t\t\t\t\tok: false,\n\t\t\t\t\t\t\tdetail: `SUI faucet request crashed: ${String(cause)}`,\n\t\t\t\t\t\t\tdigest: null,\n\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t}\n\n\t\t\t// WAL/DEEP path — coin-specific account-signed funding strategy.\n\t\t\tconst amount = parseAmount(input.amountBaseUnits);\n\t\t\tif (amount === null) {\n\t\t\t\treturn {\n\t\t\t\t\tok: false,\n\t\t\t\t\tdetail: `invalid amountBaseUnits '${input.amountBaseUnits ?? ''}': expected a positive integer string`,\n\t\t\t\t\tdigest: null,\n\t\t\t\t} satisfies DashboardFundResult;\n\t\t\t}\n\n\t\t\tconst key = `coinType:${coinType}` as const;\n\t\t\tconst strategy = yield* strategyRegistry\n\t\t\t\t.get<typeof key, AccountFundingStrategy<unknown, AccountValue>>(key)\n\t\t\t\t.pipe(Effect.catchTag('StrategyNotFoundError', () => Effect.succeed(null)));\n\t\t\tif (strategy === null) {\n\t\t\t\treturn {\n\t\t\t\t\tok: false,\n\t\t\t\t\tdetail:\n\t\t\t\t\t\t`no funding strategy registered for coin '${coinType}' — ` +\n\t\t\t\t\t\t'WAL needs the walrus plugin (with an exchange) and DEEP needs the deepbook plugin',\n\t\t\t\t\tdigest: null,\n\t\t\t\t} satisfies DashboardFundResult;\n\t\t\t}\n\n\t\t\t// Match the recipient to a resolved account, if one holds this address.\n\t\t\tconst values = yield* control.resolvedValues;\n\t\t\tconst account = matching(values, (id) => id.startsWith('account/'))\n\t\t\t\t.map(({ value }) => value as AccountShape)\n\t\t\t\t.find((v) => str(v.address) === recipient);\n\n\t\t\t// Account-spending strategies (WAL/DEEP) swap the recipient's OWN SUI,\n\t\t\t// so the recipient must BE a resolved account with a signer. Mint-style\n\t\t\t// strategies (managed coins) transfer to a passive recipient, so any 0x\n\t\t\t// address is fine — gate the rejection on the strategy's flag, not on\n\t\t\t// the coin being non-SUI.\n\t\t\tif (strategy.requiresRecipientAccount === true && account === undefined) {\n\t\t\t\treturn {\n\t\t\t\t\tok: false,\n\t\t\t\t\tdetail:\n\t\t\t\t\t\t`coin '${coinType}' is funded by an account-signed swap, but '${recipient}' ` +\n\t\t\t\t\t\t'is not a resolved account in this stack — fund a configured account (the swap spends its SUI)',\n\t\t\t\t\tdigest: null,\n\t\t\t\t} satisfies DashboardFundResult;\n\t\t\t}\n\n\t\t\treturn yield* strategy\n\t\t\t\t.request({\n\t\t\t\t\taddress: recipient,\n\t\t\t\t\tamount,\n\t\t\t\t\t...(account === undefined ? {} : { account: account as unknown as AccountValue }),\n\t\t\t\t})\n\t\t\t\t.pipe(\n\t\t\t\t\tEffect.map(\n\t\t\t\t\t\t(): DashboardFundResult => ({\n\t\t\t\t\t\t\tok: true,\n\t\t\t\t\t\t\tdetail: `funded ${amount} base units of ${coinType} to ${recipient}`,\n\t\t\t\t\t\t\tdigest: null,\n\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t\tEffect.catch((cause) =>\n\t\t\t\t\t\tEffect.succeed<DashboardFundResult>({\n\t\t\t\t\t\t\tok: false,\n\t\t\t\t\t\t\tdetail: `${coinSymbolFromType(coinType)} funding failed: ${fundingCauseDetail(cause)}`,\n\t\t\t\t\t\t\tdigest: null,\n\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t\tEffect.catchCause((cause) =>\n\t\t\t\t\t\tEffect.succeed<DashboardFundResult>({\n\t\t\t\t\t\t\tok: false,\n\t\t\t\t\t\t\tdetail: `${coinSymbolFromType(coinType)} funding crashed: ${String(cause)}`,\n\t\t\t\t\t\t\tdigest: null,\n\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t});\n\n\tconst postgresStats: DashboardDomain['postgresStats'] = Effect.gen(function* () {\n\t\tconst values = yield* control.resolvedValues;\n\t\tconst instances = matching(values, (id) => id === 'postgres');\n\t\tif (instances.length === 0) return [];\n\t\tconst out: DashboardPostgresStats[] = [];\n\t\tfor (const { pluginKey, value } of instances) {\n\t\t\tconst pg = value as PostgresShape;\n\t\t\tif (containerRuntime === null) {\n\t\t\t\tout.push(unavailablePgStats(pluginKey, pg, 'container runtime unavailable'));\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst database = strReq((pg.databases ?? [])[0]) || 'postgres';\n\t\t\tconst pgUser = str(pg.user) ?? 'postgres';\n\t\t\tconst role = str(pg.name) ?? 'postgres';\n\t\t\tconst probe = Effect.gen(function* () {\n\t\t\t\tconst handles = yield* containerRuntime.inspectByLabels({\n\t\t\t\t\tapp: String(identity.app),\n\t\t\t\t\tstack: String(identity.stack),\n\t\t\t\t\tplugin: 'postgres',\n\t\t\t\t\trole,\n\t\t\t\t});\n\t\t\t\tconst running = handles.find((h) => h.status === 'running') ?? handles[0];\n\t\t\t\tif (running === undefined) {\n\t\t\t\t\treturn unavailablePgStats(pluginKey, pg, 'no running postgres container found');\n\t\t\t\t}\n\t\t\t\tconst result = yield* containerRuntime.exec(running, [\n\t\t\t\t\t'psql',\n\t\t\t\t\t'-U',\n\t\t\t\t\tpgUser,\n\t\t\t\t\t'-d',\n\t\t\t\t\tdatabase,\n\t\t\t\t\t'-tAc',\n\t\t\t\t\tPG_STATS_SQL,\n\t\t\t\t]);\n\t\t\t\tif (result.exitCode !== 0) {\n\t\t\t\t\treturn unavailablePgStats(\n\t\t\t\t\t\tpluginKey,\n\t\t\t\t\t\tpg,\n\t\t\t\t\t\t`psql exited ${result.exitCode}: ${result.stderr.trim().slice(0, 200)}`,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\treturn parsePgStats(pluginKey, pg, result.stdout);\n\t\t\t});\n\t\t\tconst stats = yield* probe.pipe(\n\t\t\t\tEffect.catchCause((cause) =>\n\t\t\t\t\tEffect.succeed(unavailablePgStats(pluginKey, pg, String(cause))),\n\t\t\t\t),\n\t\t\t);\n\t\t\tout.push(stats);\n\t\t}\n\t\treturn out;\n\t});\n\n\treturn {\n\t\tmode,\n\t\tdeepbook,\n\t\tseal,\n\t\tcoinCaps,\n\t\tpostgresStats,\n\t\tmintCoin,\n\t\tfundableCoins,\n\t\tfundAccount,\n\t};\n};\n\n/** An all-empty dashboard domain. Used by tests that exercise the\n *  schema/server without a live registry. Every accessor resolves to\n *  empty/`null`. */\nexport const emptyDashboardDomain: DashboardDomain = {\n\tmode: Effect.succeed(null),\n\tdeepbook: Effect.succeed([]),\n\tseal: Effect.succeed([]),\n\tcoinCaps: Effect.succeed([]),\n\tpostgresStats: Effect.succeed([]),\n\tmintCoin: () => Effect.succeed({ ok: false, detail: 'unavailable', digest: null }),\n\tfundableCoins: Effect.succeed([]),\n\tfundAccount: () => Effect.succeed({ ok: false, detail: 'unavailable', digest: null }),\n};\n"],"mappings":";;;;;;;;AAiTA,MAAM,iBAAiB;;;;;AAMvB,MAAM,qBAAqB;;;;AAK3B,MAAM,2BAA2B,MAAuB;AACvD,KAAI,CAAC,QAAQ,KAAK,EAAE,CAAE,QAAO;AAC7B,KAAI;AACH,SAAO,OAAO,EAAE,GAAG;SACZ;AACP,SAAO;;;;;;AAOT,MAAM,0BACL,UACwD,GAAG,6BAA6B,GAAG;;;AAI5F,MAAM,eAAe,MAAgD;AACpE,KAAI,KAAK,KAAM,QAAO;CACtB,MAAM,UAAU,EAAE,MAAM;AACxB,KAAI,CAAC,wBAAwB,QAAQ,CAAE,QAAO;AAC9C,QAAO,OAAO,QAAQ;;;;;;AAOvB,MAAM,sBAAsB,aAA6B;CACxD,MAAM,QAAQ,SAAS,MAAM,KAAK;CAClC,MAAM,SAAS,MAAM,MAAM,SAAS;AACpC,QAAO,WAAW,KAAA,KAAa,OAAO,SAAS,IAAI,SAAS;;;;;AAM7D,MAAM,eAAe,UAA2B;AAC/C,KAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;EAChD,MAAM,IAAI;AAKV,MAAI,OAAO,EAAE,YAAY,YAAY,EAAE,QAAQ,SAAS,EAAG,QAAO,EAAE;AACpE,MAAI,OAAO,EAAE,WAAW,YAAY,EAAE,OAAO,SAAS,EAAG,QAAO,EAAE;AAClE,MAAI,OAAO,EAAE,SAAS,YAAY,EAAE,KAAK,SAAS,EAAG,QAAO,EAAE;;AAE/D,QAAO,OAAO,MAAM;;AAErB,MAAM,oBAAoB;AAC1B,MAAM,qBAAqB;AAE3B,MAAM,OAAO,MAA+B,OAAO,MAAM,WAAW,IAAI;AACxE,MAAM,UAAU,MAAwB,OAAO,MAAM,WAAW,IAAI;AACpE,MAAM,OAAO,MAA+B,OAAO,MAAM,YAAY,OAAO,SAAS,EAAE,GAAG,IAAI;AAC9F,MAAM,QAAQ,MAAwB,MAAM;;;;AAK5C,MAAM,YACL,QACA,YAC8C,OAAO,QAAQ,MAAM,QAAQ,EAAE,GAAG,CAAC;;;AAQlF,MAAM,eAAe;;;;;;;;;;;;;;AAerB,MAAM,gBACL,WACA,IACA,WAC4B;CAK5B,MAAM,OAAO;EACZ;EACA,UANgB,QAAQ,GAAG,aAAa,EAAE,EAAE,GAAG,IAAI;EAOnD,UAAA,cANY,IAAI,GAAG,aAAa,IAAI,WAED,GADvB,IAAI,GAAG,KAAK,IAAI;EAM5B;AACD,KAAI;EACH,MAAM,UAAU,OAAO,MAAM;EAC7B,MAAM,SAAS,KAAK,MAAM,QAAQ;EAUlC,MAAM,UAAoC,OAAO,UAAU,EAAE,EAAE,KAAK,OAAO;GAC1E,QAAQ,EAAE,UAAU;GACpB,MAAM,EAAE,QAAQ;GAChB,aAAa,IAAI,EAAE,aAAa,IAAI;GACpC,YAAY,IAAI,EAAE,YAAY,IAAI;GAClC,EAAE;AACH,SAAO;GACN,GAAG;GACH,eAAe,IAAI,OAAO,SAAS,IAAI;GACvC,iBAAiB,IAAI,OAAO,YAAY,IAAI;GAC5C;GACA,WAAW;GACX,QAAQ;GACR;UACO,OAAO;AACf,SAAO;GACN,GAAG;GACH,eAAe;GACf,iBAAiB;GACjB,QAAQ,EAAE;GACV,WAAW;GACX,QAAQ,gCAAgC,OAAO,MAAM;GACrD;;;AAIH,MAAM,sBACL,WACA,IACA,WAC4B;AAI5B,QAAO;EACN;EACA,UALgB,QAAQ,GAAG,aAAa,EAAE,EAAE,GAAG,IAAI;EAMnD,UAAU,cALE,IAAI,GAAG,aAAa,IAAI,WAKP,GAJjB,IAAI,GAAG,KAAK,IAAI;EAK5B,eAAe;EACf,iBAAiB;EACjB,QAAQ,EAAE;EACV,WAAW;EACX;EACA;;AAuBF,MAAa,wBAAwB,SAA+C;CACnF,MAAM,EAAE,SAAS,UAAU,kBAAkB,qBAAqB;CAElE,MAAM,OAAgC,QAAQ,eAAe,KAC5D,OAAO,KAAK,WAAW;EACtB,MAAM,MAAM,SAAS,SAAS,OAAO,OAAO,MAAM,CAAC;AACnD,MAAI,QAAQ,KAAA,EAAW,QAAO;AAE9B,UADW,IAAI,MAAmB,MAClC;GACC,KAAK,OACJ,QAAO;GACR,KAAK,OACJ,QAAO;GACR,KAAK;GACL,KAAK,YACJ,QAAO;GACR,QACC,QAAO;;GAER,CACF;CAED,MAAM,WAAwC,QAAQ,eAAe,KACpE,OAAO,KAAK,WACX,SAAS,SAAS,OAAO,GAAG,WAAW,YAAY,CAAC,CAAC,KACnD,EAAE,WAAW,YAAmC;EAChD,MAAM,IAAI;EACV,MAAM,UAAU,EAAE;EAClB,MAAM,SACL,YAAY,aAAa,aAAa,YAAY,UAAU,UAAU;AACvE,SAAO;GACN;GACA,MAAM,UAAU,QAAQ,cAAc,GAAG;GACzC,MAAM;GACN,OAAO,OAAO,EAAE,MAAM;GACtB,WAAW,OAAO,EAAE,UAAU;GAC9B,YAAY,OAAO,EAAE,WAAW;GAChC,YAAY,IAAI,EAAE,WAAW;GAC7B,gBAAgB,IAAI,EAAE,eAAe;GACrC,QAAQ,EAAE,SAAS,EAAE,EAAE,KAAK,OAAO;IAClC,MAAM,OAAO,EAAE,KAAK;IACpB,QAAQ,OAAO,EAAE,OAAO;IACxB,cAAc,OAAO,EAAE,aAAa;IACpC,eAAe,OAAO,EAAE,cAAc;IACtC,EAAE;GACH,oBAAoB,KAAK,EAAE,mBAAmB;GAC9C,WAAW,IAAI,EAAE,UAAU;GAC3B,YAAY,IAAI,EAAE,WAAW;GAC7B;GAEF,CACD,CACD;CAED,MAAM,OAAgC,QAAQ,eAAe,KAC5D,OAAO,KAAK,WACX,SAAS,SAAS,OAAO,GAAG,WAAW,QAAQ,CAAC,CAAC,KAC/C,EAAE,WAAW,YAA+B;EAC5C,MAAM,IAAI;EACV,MAAM,WACL,EAAE,SAAS,SAAS,SAAS,EAAE,SAAS,eAAe,eAAe;EACvE,MAAM,cAAc,EAAE,iBAAiB,EAAE,EAAE,KAAK,OAAO;GACtD,UAAU,OAAO,EAAE,SAAS;GAC5B,QAAQ,IAAI,EAAE,OAAO,IAAI;GACzB,EAAE;AACH,SAAO;GACN;GACA,MAAM;GACN,UAAU,OAAO,EAAE,SAAS;GAC5B,cAAc,OAAO,EAAE,aAAa;GACpC;GACA,WAAW,WAAW;GACtB;GAEF,CACD,CACD;CAED,MAAM,WAAwC,QAAQ,eAAe,KACpE,OAAO,KAAK,WACX,SAAS,SAAS,OAAO,GAAG,WAAW,QAAQ,CAAC,CAAC,KAC/C,EAAE,WAAW,YAA8B;EAC3C,MAAM,IAAI;EACV,MAAM,SACL,EAAE,WAAW,aAAa,aAAa,EAAE,WAAW,YAAY,YAAY;AAC7E,SAAO;GACN;GACA,QAAQ,IAAI,EAAE,OAAO;GACrB,cAAc,OAAO,EAAE,aAAa;GACpC,UAAU,IAAI,EAAE,SAAS,IAAI;GAC7B;GACA,eAAe,IAAI,EAAE,cAAc;GACnC,WAAW,IAAI,EAAE,UAAU;GAC3B;GAEF,CACD,CACD;CAgBD,MAAM,YAAyC,UAC9C,OAAO,IAAI,aAAa;EACvB,MAAM,YAAY,MAAM,UAAU,MAAM;AACxC,MAAI,CAAC,eAAe,KAAK,UAAU,CAClC,QAAO;GACN,IAAI;GACJ,QAAQ,sBAAsB,MAAM,UAAU;GAC9C,QAAQ;GACR;AAEF,MAAI,CAAC,wBAAwB,MAAM,gBAAgB,CAClD,QAAO;GACN,IAAI;GACJ,QAAQ,4BAA4B,MAAM,gBAAgB;GAC1D,QAAQ;GACR;EAQF,MAAM,QAAQ,SAAS,OADD,QAAQ,iBACE,OAAO,GAAG,WAAW,QAAQ,CAAC,CAC5D,KAAK,EAAE,YAAY,MAAmB,CACtC,MAAM,MAAM,OAAO,EAAE,aAAa,KAAK,MAAM,SAAS;AAExD,MAAI,UAAU,KAAA,EACb,QAAO;GACN,IAAI;GACJ,QAAQ,oCAAoC,MAAM,SAAS;GAC3D,QAAQ;GACR;AAEF,MAAI,OAAO,MAAM,gBAAgB,WAChC,QAAO;GACN,IAAI;GACJ,QACC,SAAS,MAAM,SAAS;GAEzB,QAAQ;GACR;AAGF,SAAO,OAAO,MACZ,YAAY;GAAE,IAAI;GAAW,QAAQ,OAAO,MAAM,gBAAgB;GAAE,CAAC,CACrE,KACA,OAAO,KACL,OAA4B;GAC5B,IAAI;GACJ,QAAQ,UAAU,MAAM,gBAAgB,MAAM,MAAM,SAAS,MAAM;GACnE,QAAQ,EAAE;GACV,EACD,EAED,OAAO,OAAO,UACb,OAAO,QAA6B;GACnC,IAAI;GACJ,QACC,OAAO,OAAO,YAAY,WACvB,MAAM,UACN,gBAAgB,OAAO,MAAM;GACjC,QAAQ;GACR,CAAC,CACF,EAGD,OAAO,YAAY,UAClB,OAAO,QAA6B;GACnC,IAAI;GACJ,QAAQ,iBAAiB,OAAO,MAAM;GACtC,QAAQ;GACR,CAAC,CACF,CACD;GACD;;;CAwBH,MAAM,cAAc,QAAQ,eAAe,KAC1C,OAAO,KAAK,WAAW;EACtB,MAAM,MAAM,SAAS,SAAS,OAAO,OAAO,MAAM,CAAC;AACnD,SAAO,QAAQ,KAAA,IAAY,OAAO,IAAK,IAAI,MAAmB,MAAM;GACnE,CACF;CAED,MAAM,gBAAkD,OAAO,IAAI,aAAa;EAG/E,MAAM,MAA+B,EAAE;AACvC,MAAI,qBAAqB,KAAM,QAAO;EAEtC,MAAM,QAAQ,OAAO;EACrB,MAAM,OAAO,OAAO,iBAAiB,MAAM;AAC3C,MAAI,UAAU,QAAQ,KAAK,SAAS,uBAAuB,MAAM,CAAC,CACjE,KAAI,KAAK;GACR,QAAQ;GACR,UAAU;GACV,cAAc;GACd,uBAAuB;GACvB,CAAC;AAYH,OAAK,MAAM,OAAO,MAAM;AACvB,OAAI,CAAC,IAAI,WAAW,YAAY,CAAE;GAClC,MAAM,WAAW,IAAI,MAAM,EAAmB;AAC9C,OAAI,aAAa,mBAAoB;GACrC,MAAM,WAAW,OAAO,iBACtB,IAA+D,IAAI,CACnE,KAAK,OAAO,SAAS,+BAA+B,OAAO,QAAQ,KAAK,CAAC,CAAC;AAC5E,OAAI,KAAK;IACR,QAAQ,mBAAmB,SAAS;IACpC;IACA,cAAc;IACd,uBAAuB,UAAU,4BAA4B;IAC7D,CAAC;;AAEH,SAAO;GACN;CAEF,MAAM,eAA+C,UACpD,OAAO,IAAI,aAAa;EACvB,MAAM,YAAY,MAAM,UAAU,MAAM;AACxC,MAAI,CAAC,eAAe,KAAK,UAAU,CAClC,QAAO;GACN,IAAI;GACJ,QAAQ,sBAAsB,MAAM,UAAU;GAC9C,QAAQ;GACR;AAEF,MAAI,qBAAqB,KACxB,QAAO;GACN,IAAI;GACJ,QAAQ;GACR,QAAQ;GACR;EAGF,MAAM,WAAW,MAAM,UAAU,MAAM,IAAI;AAM3C,MALc,aAAa,MAAM,aAAa,oBAKnC;GACV,MAAM,QAAQ,OAAO;AACrB,OAAI,UAAU,KACb,QAAO;IACN,IAAI;IACJ,QAAQ;IACR,QAAQ;IACR;GAEF,MAAM,MAAM,uBAAuB,MAAM;GACzC,MAAM,WAAW,OAAO,iBACtB,IAAgC,IAAI,CACpC,KAAK,OAAO,SAAS,+BAA+B,OAAO,QAAQ,KAAK,CAAC,CAAC;AAC5E,OAAI,aAAa,KAChB,QAAO;IACN,IAAI;IACJ,QAAQ,gDAAgD,MAAM;IAC9D,QAAQ;IACR;GAKF,MAAM,SAAS,YAAY,MAAM,gBAAgB,IAAI;AACrD,UAAO,OAAO,SAAS,QAAQ;IAAE,SAAS;IAAW;IAAQ,CAAC,CAAC,KAC9D,OAAO,WACsB;IAC3B,IAAI;IACJ,QAAQ,qBAAqB,UAAU;IACvC,QAAQ;IACR,EACD,EACD,OAAO,OAAO,UACb,OAAO,QAA6B;IACnC,IAAI;IACJ,QAAQ,8BAA8B,kBAAkB,MAAM;IAC9D,QAAQ;IACR,CAAC,CACF,EACD,OAAO,YAAY,UAClB,OAAO,QAA6B;IACnC,IAAI;IACJ,QAAQ,+BAA+B,OAAO,MAAM;IACpD,QAAQ;IACR,CAAC,CACF,CACD;;EAIF,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,MAAI,WAAW,KACd,QAAO;GACN,IAAI;GACJ,QAAQ,4BAA4B,MAAM,mBAAmB,GAAG;GAChE,QAAQ;GACR;EAGF,MAAM,MAAM,YAAY;EACxB,MAAM,WAAW,OAAO,iBACtB,IAA+D,IAAI,CACnE,KAAK,OAAO,SAAS,+BAA+B,OAAO,QAAQ,KAAK,CAAC,CAAC;AAC5E,MAAI,aAAa,KAChB,QAAO;GACN,IAAI;GACJ,QACC,4CAA4C,SAAS;GAEtD,QAAQ;GACR;EAKF,MAAM,UAAU,SAAS,OADH,QAAQ,iBACI,OAAO,GAAG,WAAW,WAAW,CAAC,CACjE,KAAK,EAAE,YAAY,MAAsB,CACzC,MAAM,MAAM,IAAI,EAAE,QAAQ,KAAK,UAAU;AAO3C,MAAI,SAAS,6BAA6B,QAAQ,YAAY,KAAA,EAC7D,QAAO;GACN,IAAI;GACJ,QACC,SAAS,SAAS,8CAA8C,UAAU;GAE3E,QAAQ;GACR;AAGF,SAAO,OAAO,SACZ,QAAQ;GACR,SAAS;GACT;GACA,GAAI,YAAY,KAAA,IAAY,EAAE,GAAG,EAAW,SAAoC;GAChF,CAAC,CACD,KACA,OAAO,WACsB;GAC3B,IAAI;GACJ,QAAQ,UAAU,OAAO,iBAAiB,SAAS,MAAM;GACzD,QAAQ;GACR,EACD,EACD,OAAO,OAAO,UACb,OAAO,QAA6B;GACnC,IAAI;GACJ,QAAQ,GAAG,mBAAmB,SAAS,CAAC,mBAAmB,mBAAmB,MAAM;GACpF,QAAQ;GACR,CAAC,CACF,EACD,OAAO,YAAY,UAClB,OAAO,QAA6B;GACnC,IAAI;GACJ,QAAQ,GAAG,mBAAmB,SAAS,CAAC,oBAAoB,OAAO,MAAM;GACzE,QAAQ;GACR,CAAC,CACF,CACD;GACD;AAuDH,QAAO;EACN;EACA;EACA;EACA;EACA,eA1DuD,OAAO,IAAI,aAAa;GAE/E,MAAM,YAAY,SAAS,OADL,QAAQ,iBACM,OAAO,OAAO,WAAW;AAC7D,OAAI,UAAU,WAAW,EAAG,QAAO,EAAE;GACrC,MAAM,MAAgC,EAAE;AACxC,QAAK,MAAM,EAAE,WAAW,WAAW,WAAW;IAC7C,MAAM,KAAK;AACX,QAAI,qBAAqB,MAAM;AAC9B,SAAI,KAAK,mBAAmB,WAAW,IAAI,gCAAgC,CAAC;AAC5E;;IAED,MAAM,WAAW,QAAQ,GAAG,aAAa,EAAE,EAAE,GAAG,IAAI;IACpD,MAAM,SAAS,IAAI,GAAG,KAAK,IAAI;IAC/B,MAAM,OAAO,IAAI,GAAG,KAAK,IAAI;IA8B7B,MAAM,QAAQ,OA7BA,OAAO,IAAI,aAAa;KACrC,MAAM,UAAU,OAAO,iBAAiB,gBAAgB;MACvD,KAAK,OAAO,SAAS,IAAI;MACzB,OAAO,OAAO,SAAS,MAAM;MAC7B,QAAQ;MACR;MACA,CAAC;KACF,MAAM,UAAU,QAAQ,MAAM,MAAM,EAAE,WAAW,UAAU,IAAI,QAAQ;AACvE,SAAI,YAAY,KAAA,EACf,QAAO,mBAAmB,WAAW,IAAI,sCAAsC;KAEhF,MAAM,SAAS,OAAO,iBAAiB,KAAK,SAAS;MACpD;MACA;MACA;MACA;MACA;MACA;MACA;MACA,CAAC;AACF,SAAI,OAAO,aAAa,EACvB,QAAO,mBACN,WACA,IACA,eAAe,OAAO,SAAS,IAAI,OAAO,OAAO,MAAM,CAAC,MAAM,GAAG,IAAI,GACrE;AAEF,YAAO,aAAa,WAAW,IAAI,OAAO,OAAO;MAExB,CAAC,KAC1B,OAAO,YAAY,UAClB,OAAO,QAAQ,mBAAmB,WAAW,IAAI,OAAO,MAAM,CAAC,CAAC,CAChE,CACD;AACD,QAAI,KAAK,MAAM;;AAEhB,UAAO;IAQM;EACb;EACA;EACA;EACA;;AAOK,OAAO,QAAQ,KAAK,EAChB,OAAO,QAAQ,EAAE,CAAC,EACtB,OAAO,QAAQ,EAAE,CAAC,EACd,OAAO,QAAQ,EAAE,CAAC,EACb,OAAO,QAAQ,EAAE,CAAC,EAElB,OAAO,QAAQ,EAAE,CAAC"}

package/dist/plugins/dashboard/index.d.mts

@@ -0,0 +1,29 @@
+import { AnyPlugin } from "../../substrate/plugin.mjs";
+//#region src/plugins/dashboard/index.d.ts
+interface DashboardOptions {
+  /** Preferred loopback port; the broker forward-scans if it's busy. */
+  readonly port?: number;
+  /** NIC the HTTP server binds. Defaults to `'0.0.0.0'` because the router
+   *  runs in Docker and must reach this host process through the host-gateway
+   *  address on native Linux (a `127.0.0.1`-only listener is unreachable from
+   *  the host-gateway IP). The public dashboard URL stays router-fronted and
+   *  stack-scoped. */
+  readonly bindAddress?: string;
+  /** Extra origins merged on top of the dashboard's own router-fronted origin
+   *  for this stack (and the direct loopback origins). Useful for headless
+   *  test runners and custom dev hosts. The dashboard does NOT auto-allowlist
+   *  a bare `*.localhost` form — that is not stack-scoped, so a sibling stack
+   *  could drive the destructive control-plane mutations cross-origin. */
+  readonly allowedOrigins?: ReadonlyArray<string>;
+}
+interface DashboardValue {
+  /** Loopback URL of the dashboard server. */
+  readonly url: string;
+  /** The allocated loopback port. */
+  readonly localPort: number;
+}
+/** Construct the devstack dashboard plugin. */
+declare function dashboard(opts?: DashboardOptions): AnyPlugin;
+//#endregion
+export { DashboardOptions, DashboardValue, dashboard };
+//# sourceMappingURL=index.d.mts.map