@mysten-incubation/devstack 0.0.1 → 0.1.0

package/dist/plugins/package/mode-local.mjs

@@ -1,8 +1,11 @@
 import { contentHash } from "../../substrate/brand.mjs";
 import { pickPublishedChange, pickUpgradeCapChange } from "./publish-output.mjs";
+import "./registry.mjs";
 import { publishError } from "./errors.mjs";
 import { hashMoveSources, scrubLocksHost } from "./build.mjs";
+import { PackageSpans } from "./spans.mjs";
 import { mvrSlugify } from "./dep-resolution.mjs";
+import { artifactPublishError } from "../../primitives/artifact-publisher.mjs";
 import { Duration, Effect, Schema } from "effect";
 //#region src/plugins/package/mode-local.ts
 /** Verify-schema: what we expect when probing `getObject(packageId)`.
@@ -67,26 +70,30 @@ const buildVerifyProbe = (probe, cachedPackageIdHint, opts) => Effect.gen(functi
 *   - calling `register` on EVERY cycle.
 */
 const acquireLocal = (publisher, probe, registry, inputs) => Effect.gen(function* () {
+	const existing = yield* registry.find(inputs.packageName);
+	if (existing !== null && existing.kind === "local" && existing.sourcePath !== inputs.sourcePath) return yield* Effect.fail(publishError("parse", {
+		sourcePath: inputs.sourcePath,
+		packageName: inputs.packageName,
+		message: `localPackage('${inputs.packageName}') is declared twice in the same stack with different sourcePaths (${existing.sourcePath} vs ${inputs.sourcePath}). The substrate is name-blind at runtime and the second declaration would silently overwrite the first registry entry. Pick distinct package names (the symbolic name is the registry key consumers look up).`
+	}));
 	const inputsHash = combineInputsHash(yield* hashMoveSources(inputs.sourcePath), inputs.publisherAddress);
 	const mvrPlaceholder = mvrSlugify(inputs.mvrOverride ?? inputs.packageName);
-	const priorEntry = yield* registry.find(inputs.packageName);
 	let producedOutput = null;
-	const resolved = yield* publisher.publish({
+	const entry = yield* publisher.publish({
 		namespace: "package",
 		chain: inputs.chainId,
 		contentHash: inputsHash,
-		verifySchema: PackageVerifyShape,
 		verify: (cached) => cached.output === void 0 ? Effect.succeed(null) : buildVerifyProbe(probe, cached.packageId),
 		produce: Effect.gen(function* () {
 			yield* Effect.annotateCurrentSpan({
-				"package.publish.package": inputs.packageName,
-				"package.publish.sourcePath": inputs.sourcePath,
-				"package.publish.chainId": inputs.chainId,
-				"package.publish.publisher": inputs.publisherAddress
+				[PackageSpans.publish.package]: inputs.packageName,
+				[PackageSpans.publish.sourcePath]: inputs.sourcePath,
+				[PackageSpans.publish.chainId]: inputs.chainId,
+				[PackageSpans.publish.publisher]: inputs.publisherAddress
 			});
-			yield* Effect.annotateCurrentSpan({ "package.publish.phase": "scrub" });
-			yield* scrubLocksHost(inputs.sourcePath, "~/.move", { packageLockFailures: inputs.executor.scrubsInsideContainer ? "best-effort" : "fatal" });
-			yield* Effect.annotateCurrentSpan({ "package.publish.phase": "build" });
+			yield* Effect.annotateCurrentSpan({ [PackageSpans.publish.phase]: "scrub" });
+			yield* scrubLocksHost(inputs.sourcePath, "~/.move");
+			yield* Effect.annotateCurrentSpan({ [PackageSpans.publish.phase]: "build" });
 			const buildOutput = yield* inputs.executor.build({
 				sourcePath: inputs.sourcePath,
 				packageName: inputs.packageName,
@@ -96,7 +103,7 @@ const acquireLocal = (publisher, probe, registry, inputs) => Effect.gen(function
 				sourcePath: inputs.sourcePath,
 				packageName: inputs.packageName
 			})));
-			yield* Effect.annotateCurrentSpan({ "package.publish.phase": "publish-tx" });
+			yield* Effect.annotateCurrentSpan({ [PackageSpans.publish.phase]: "publish-tx" });
 			const output = yield* inputs.executor.publishTx({
 				modules: buildOutput.modules,
 				dependencies: buildOutput.dependencies,
@@ -104,9 +111,9 @@ const acquireLocal = (publisher, probe, registry, inputs) => Effect.gen(function
 				packageName: inputs.packageName
 			});
 			producedOutput = output;
-			yield* Effect.annotateCurrentSpan({ "package.publish.phase": "waiting-for-index" });
-			yield* inputs.executor.waitForReady(output.packageId);
-			yield* Effect.annotateCurrentSpan({ "package.publish.phase": "parse" });
+			yield* Effect.annotateCurrentSpan({ [PackageSpans.publish.phase]: "waiting-for-index" });
+			yield* inputs.executor.postPublishReadyHint(output.packageId);
+			yield* Effect.annotateCurrentSpan({ [PackageSpans.publish.phase]: "parse" });
 			const published = pickPublishedChange(output.objectChanges);
 			if (!published?.objectId) return yield* Effect.fail(publishError("parse", {
 				sourcePath: inputs.sourcePath,
@@ -131,50 +138,49 @@ const acquireLocal = (publisher, probe, registry, inputs) => Effect.gen(function
 				captured,
 				output
 			};
-		}).pipe(Effect.mapError((err) => ({
-			_tag: "ArtifactPublishError",
-			reason: "produce-failed",
-			detail: `package.publish ${err.phase}: ${err.message}`
-		}))),
+		}).pipe(Effect.mapError((err) => artifactPublishError("produce-failed", `package.publish ${err.phase}: ${err.message}`))),
 		register: (artifact) => Effect.gen(function* () {
-			const entry = "packageId" in artifact ? {
-				...artifact,
-				captured: inputs.capture !== void 0 && artifact.output !== void 0 ? (() => {
-					try {
-						return inputs.capture(artifact.output);
-					} catch {
-						return artifact.captured;
-					}
-				})() : artifact.captured
-			} : {
-				packageId: artifact.objectId,
-				publisher: inputs.publisherAddress,
-				mvrPlaceholder: priorEntry && priorEntry.kind === "local" ? priorEntry.mvrPlaceholder : mvrPlaceholder,
-				captured: priorEntry && priorEntry.kind === "local" ? priorEntry.captured : {},
-				upgradeCapId: priorEntry && priorEntry.kind === "local" ? priorEntry.upgradeCapId : void 0
-			};
 			const r = {
 				kind: "local",
 				name: inputs.packageName,
-				packageId: entry.packageId,
-				upgradeCapId: entry.upgradeCapId,
+				packageId: artifact.packageId,
+				upgradeCapId: artifact.upgradeCapId,
 				sourcePath: inputs.sourcePath,
-				mvrPlaceholder: entry.mvrPlaceholder,
-				captured: entry.captured
+				mvrPlaceholder: artifact.mvrPlaceholder,
+				captured: artifact.captured
 			};
 			yield* registry.set(r.name, r);
 		})
 	});
+	if (producedOutput === null && inputs.capture !== void 0 && entry.output !== void 0) {
+		const recomputedCaptured = yield* Effect.try({
+			try: () => inputs.capture(entry.output),
+			catch: (cause) => publishError("parse", {
+				sourcePath: inputs.sourcePath,
+				packageName: inputs.packageName,
+				message: "capture callback threw",
+				cause
+			})
+		}).pipe(Effect.mapError((err) => artifactPublishError("produce-failed", `package.publish ${err.phase}: ${err.message}`)));
+		yield* registry.set(inputs.packageName, {
+			kind: "local",
+			name: inputs.packageName,
+			packageId: entry.packageId,
+			upgradeCapId: entry.upgradeCapId,
+			sourcePath: inputs.sourcePath,
+			mvrPlaceholder: entry.mvrPlaceholder,
+			captured: recomputedCaptured
+		});
+	}
 	const final = yield* registry.find(inputs.packageName);
 	if (!final || final.kind !== "local") return yield* Effect.fail(publishError("parse", {
 		sourcePath: inputs.sourcePath,
 		packageName: inputs.packageName,
 		message: "register did not surface entry — artifact publisher register invariant violation"
 	}));
-	const cachedOutput = "packageId" in resolved && "output" in resolved ? resolved.output ?? null : null;
 	return {
 		resolved: final,
-		output: producedOutput ?? cachedOutput
+		output: producedOutput ?? entry.output ?? null
 	};
 });
 //#endregion

package/dist/plugins/package/mode-local.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"mode-local.mjs","names":["brandContentHash"],"sources":["../../../src/plugins/package/mode-local.ts"],"sourcesContent":["// Local mode — build from source + publish.\n//\n// This is the canonical implementation of the\n// `ArtifactPublisher` substrate primitive (distilled doc\n// §Generic artifact-publisher-publish pattern). The five-phase shape:\n//\n//   1. Inputs       — `{ sourceHash, signerAddress }` →\n//                     `contentHash(inputs)`.\n//   2. Cache key    — `<namespace=package>/<chainId>/<contentHash>`.\n//                     Substrate folds in chainId for us; we hand\n//                     it the namespace + contentHash.\n//   3. Verify       — `chainProbe.get({ objectId: cachedId },\n//                     PackageObjectSchema, 'lenient')`. Lenient mode\n//                     coerces transient RPC failure → null\n//                     → re-derive (cheap over-derive vs spurious\n//                     eviction — distilled doc §Constraint \"lenient\n//                     verify is cheaper than aggressive eviction\").\n//   4. Produce      — scrub locks → build → publish-tx → wait-for-\n//                     index. Each phase narrates to TUI via span\n//                     annotation.\n//   5. Register     — write registry entry on EVERY cycle (hit AND\n//                     miss). Distilled doc Invariant 6.\n//\n// The publish output is exposed on the resolved value and emitted as a\n// package-owned extension contribution for sibling folds.\n\nimport { Duration, Effect, Schema, type Scope } from 'effect';\n\nimport { contentHash as brandContentHash, type ChainId } from '../../substrate/brand.ts';\nimport {\n\tpickPublishedChange,\n\tpickUpgradeCapChange,\n\ttype PackagePublishObjectChange,\n\ttype LocalPackagePublishOutput,\n} from './publish-output.ts';\nimport type {\n\tArtifactPublishError,\n\tArtifactPublisher,\n} from '../../primitives/artifact-publisher.ts';\nimport type { ChainProbe } from '../../contracts/chain-probe.ts';\nimport type { SuiProbeKey } from '../sui/chain-probe.ts';\nimport { hashMoveSources, scrubLocksHost, type BuildOutput } from './build.ts';\nimport { mvrSlugify } from './dep-resolution.ts';\nimport { type PackageRegistry, type ResolvedLocalPackage } from './registry.ts';\nimport { publishError, type PublishError } from './errors.ts';\n\n/** Cache-stored payload — the stable id verify re-confirms on\n *  every cycle. Distilled doc Invariant 8: the probe MUST consume\n *  a stable identifier (the packageId), NOT a derived hash. */\nexport interface CachedPackageEntry {\n\treadonly packageId: string;\n\treadonly upgradeCapId?: string;\n\treadonly publisher: string;\n\treadonly mvrPlaceholder: string;\n\treadonly captured: Readonly<Record<string, string>>;\n\treadonly output?: LocalPackagePublishOutput;\n}\n\n/** Verify-schema: what we expect when probing `getObject(packageId)`.\n *  Minimal — the substrate's `ChainProbe` decodes against this; any\n *  decode failure surfaces structured. */\nexport const PackageVerifyShape = Schema.Struct({\n\tobjectId: Schema.String,\n\t// A Move package's `type` is the literal `\"package\"` wrapper;\n\t// the SDK's exact shape varies — we keep it open as `Unknown`\n\t// and rely on objectId presence for the \"exists\" signal.\n\ttype: Schema.Unknown,\n});\n\n/**\n * Publish-tx executor — narrow shim that abstracts the concrete\n * `@mysten/sui` wiring (Transaction builder, signer, fullnode\n * ready-probe). The mode-local produce body composes its 5-phase\n * shape against this interface; the concrete implementation lives in\n * `publish-executor.ts` and is constructed once per acquire by the\n * barrel from the resolved `SuiClient` + publisher `AccountValue` +\n * `ContainerRuntime`.\n *\n * The shim parallels `coin/mint.ts::MintSigner` + `MintSdkShim`. We\n * keep them split (publish vs sign vs ready-probe) so the produce\n * body can attribute span annotations per phase + so failures map\n * back to a typed `PublishError` phase enum.\n */\nexport interface PublishExecutor {\n\treadonly scrubsInsideContainer: boolean;\n\n\t/** Build the Move source tree into `{ modules, dependencies }`.\n\t *  Dispatches between (a) per-app build container, (b) fresh\n\t *  `docker run --rm`, (c) host `sui` CLI. The produce body just\n\t *  calls and propagates `PublishError`. */\n\treadonly build: (inputs: {\n\t\treadonly sourcePath: string;\n\t\treadonly packageName: string;\n\t\treadonly chainId: ChainId;\n\t}) => Effect.Effect<BuildOutput, PublishError, Scope.Scope>;\n\n\t/** Construct + sign + execute a `Transaction.publish({modules,\n\t *  dependencies})` against the publisher account. Returns the\n\t *  output projection that downstream consumers (Coin, manifest,\n\t *  capture spec) need. Distilled doc §Move-specific concerns —\n\t *  the output is the source of `published` change + the\n\t *  `UpgradeCap` `created` change. */\n\treadonly publishTx: (inputs: {\n\t\treadonly modules: ReadonlyArray<Uint8Array>;\n\t\treadonly dependencies: ReadonlyArray<string>;\n\t\treadonly sourcePath: string;\n\t\treadonly packageName: string;\n\t}) => Effect.Effect<LocalPackagePublishOutput, PublishError, Scope.Scope>;\n\n\t/** Post-publish fullnode/indexer ready-probe. Distilled doc\n\t *  Invariant 5: publish-tx commit precedes index visibility.\n\t *  Polls `getObject(packageId)` until success or a 10s ceiling\n\t *  at ~200ms cadence. Failure raises `PublishError('parse')`\n\t *  per the distilled doc's phase catalog (\"stuck indexer\"). */\n\treadonly waitForReady: (packageId: string) => Effect.Effect<void, PublishError, Scope.Scope>;\n}\n\nexport interface LocalModeInputs {\n\treadonly packageName: string;\n\treadonly sourcePath: string;\n\treadonly chainId: ChainId;\n\treadonly publisherAddress: string;\n\treadonly mvrOverride?: string;\n\treadonly capture?: (output: LocalPackagePublishOutput) => Readonly<Record<string, string>>;\n\t/** Publish executor — constructed per-acquire by the barrel from\n\t *  the resolved SuiClient + publisher account + ContainerRuntime\n\t *  (see `publish-executor.ts`). */\n\treadonly executor: PublishExecutor;\n}\n\nexport interface LocalModeOutputs {\n\treadonly resolved: ResolvedLocalPackage;\n\treadonly output: LocalPackagePublishOutput | null;\n}\n\n/**\n * Build the content hash for the publish cache key. Distilled doc\n * §Move-specific: inputs are `(sourceHash, signerAddress)`. The\n * `hashMoveSources` helper already normalises Move.lock pinned\n * sections via the shared `stripPinnedSections`; we fold the\n * publisher address in here as a stable string so reusing the\n * same source under a different signer correctly misses (Invariant\n * 4: \"Signer MUST be an explicit upstream\").\n */\nconst LOCAL_PACKAGE_CACHE_SCHEMA_VERSION = 'v3';\nconst PACKAGE_CACHE_VERIFY_MAX_ATTEMPTS = 20;\nconst PACKAGE_CACHE_VERIFY_DELAY_MS = 250;\n\nconst combineInputsHash = (sourceHash: string, publisherAddress: string) =>\n\tbrandContentHash(\n\t\t`${LOCAL_PACKAGE_CACHE_SCHEMA_VERSION}::source=${sourceHash}::publisher=${publisherAddress}`,\n\t);\n\n/**\n * Verify probe — lenient `getObject(packageId)`. Returns the decoded\n * shape on success; null for BOTH not-found AND transient (distilled\n * doc Invariant 7 + the \"lenient verify cheaper than aggressive\n * eviction\" Constraint).\n *\n * The cached id is hinted in via parameter. The artifact publisher substrate is\n * expected to thread the cached payload through to this closure on\n * cache hit; today we get the id from the registry's previous-cycle\n * entry (in-process, per-supervisor lookup — see `acquireLocal`\n * below). When no hint exists (first cycle / cold boot), we\n * short-circuit to null so the substrate runs `produce`.\n *\n * Mirrors `coin/mint.ts::buildVerifyProbe` exactly so the two artifact publisher\n * consumers stay shape-aligned.\n */\nexport const buildVerifyProbe = (\n\tprobe: ChainProbe<SuiProbeKey>,\n\tcachedPackageIdHint: string | null,\n\topts?: { readonly maxAttempts?: number; readonly delayMs?: number },\n): Effect.Effect<typeof PackageVerifyShape.Type | null, never> =>\n\tEffect.gen(function* () {\n\t\tif (cachedPackageIdHint === null) return null;\n\t\tconst maxAttempts = opts?.maxAttempts ?? PACKAGE_CACHE_VERIFY_MAX_ATTEMPTS;\n\t\tconst delayMs = opts?.delayMs ?? PACKAGE_CACHE_VERIFY_DELAY_MS;\n\t\tfor (let attempt = 1; attempt <= maxAttempts; attempt++) {\n\t\t\t// Lenient mode in the underlying probe already coerces\n\t\t\t// not-found AND transient → null. We retry nulls briefly\n\t\t\t// because local Sui restart can report ready before package\n\t\t\t// objects are immediately queryable, and a false cache miss\n\t\t\t// turns a warm restart into an unnecessary publish.\n\t\t\tconst result: typeof PackageVerifyShape.Type | null = yield* probe\n\t\t\t\t.get({ kind: 'object', objectId: cachedPackageIdHint }, PackageVerifyShape, 'lenient')\n\t\t\t\t.pipe(\n\t\t\t\t\t// The probe's own error channel is `ChainProbeError`; under\n\t\t\t\t\t// lenient mode only `decode-failed` surfaces (not-found +\n\t\t\t\t\t// transient already coerce to null). A decode failure on\n\t\t\t\t\t// verify is treated as \"stale shape\" — null so the substrate\n\t\t\t\t\t// re-publishes rather than carry forward a mismatch.\n\t\t\t\t\tEffect.catch(() => Effect.succeed(null as typeof PackageVerifyShape.Type | null)),\n\t\t\t\t);\n\t\t\tif (result !== null) return result;\n\t\t\tif (attempt < maxAttempts && delayMs > 0) {\n\t\t\t\tyield* Effect.sleep(Duration.millis(delayMs));\n\t\t\t}\n\t\t}\n\t\treturn null;\n\t});\n\n/**\n * Compose the ArtifactSpec for a local publish.\n *\n * The substrate-side `ArtifactPublisher.publish` consumes\n * this spec and handles:\n *\n *   - cache lookup under `<namespace>/<chainId>/<contentHash>`;\n *   - verify (lenient) when there's a hit;\n *   - re-running `produce` on miss OR verify-fail;\n *   - calling `register` on EVERY cycle.\n */\nexport const acquireLocal = (\n\tpublisher: ArtifactPublisher,\n\tprobe: ChainProbe<SuiProbeKey>,\n\tregistry: PackageRegistry,\n\tinputs: LocalModeInputs,\n): Effect.Effect<LocalModeOutputs, PublishError | ArtifactPublishError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\t// Distilled doc §Move-specific: hash inputs are `(sourceHash,\n\t\t// signerAddress)`. The hashing helper strips Move.lock pinned\n\t\t// sections (Invariant 2) so warm restarts hit the cache.\n\t\tconst sourceHash = yield* hashMoveSources(inputs.sourcePath);\n\t\tconst inputsHash = combineInputsHash(sourceHash, inputs.publisherAddress);\n\n\t\tconst mvrPlaceholder = mvrSlugify(inputs.mvrOverride ?? inputs.packageName);\n\n\t\t// The in-process registry is consulted on the `register`\n\t\t// callback (verify-hit path) to recover `mvrPlaceholder` +\n\t\t// `captured` columns when the substrate hands back the bare\n\t\t// `{objectId, type}` verify shape; see the register body below.\n\t\tconst priorEntry = yield* registry.find(inputs.packageName);\n\n\t\t// We capture the produce-side output out-of-band so the\n\t\t// returned `LocalModeOutputs.output` can expose it; the artifact publisher\n\t\t// substrate's `Produced | Verified` discrimination collapses\n\t\t// the output away.\n\t\tlet producedOutput: LocalPackagePublishOutput | null = null;\n\n\t\tconst resolved = yield* publisher.publish<CachedPackageEntry, typeof PackageVerifyShape.Type>({\n\t\t\tnamespace: 'package',\n\t\t\tchain: inputs.chainId,\n\t\t\tcontentHash: inputsHash,\n\t\t\tverifySchema: PackageVerifyShape,\n\t\t\tverify: (cached) =>\n\t\t\t\tcached.output === undefined\n\t\t\t\t\t? Effect.succeed(null)\n\t\t\t\t\t: buildVerifyProbe(probe, cached.packageId),\n\t\t\t// Produce: scrub → build → publish-tx → wait-for-index → parse.\n\t\t\t// PublishError is the plugin-internal phase taxonomy; we map\n\t\t\t// it to `ArtifactPublishError` at the substrate boundary.\n\t\t\tproduce: Effect.gen(function* () {\n\t\t\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t\t\t'package.publish.package': inputs.packageName,\n\t\t\t\t\t'package.publish.sourcePath': inputs.sourcePath,\n\t\t\t\t\t'package.publish.chainId': inputs.chainId,\n\t\t\t\t\t'package.publish.publisher': inputs.publisherAddress,\n\t\t\t\t});\n\n\t\t\t\t// Produce 1/5 — scrub locks. Distilled doc §Move-specific\n\t\t\t\t// concerns + Invariant 14: strip pinned sections from BOTH\n\t\t\t\t// the package's own Move.lock AND every\n\t\t\t\t// `~/.move/git/**/Move.lock` (vendored dep caches) before\n\t\t\t\t// invoking the build. Uses the unified `stripPinnedSections`\n\t\t\t\t// (re-exported through `build.ts` → from\n\t\t\t\t// `../sui/move-lock-scrub.ts`) — NO duplicate.\n\t\t\t\tyield* Effect.annotateCurrentSpan({ 'package.publish.phase': 'scrub' });\n\t\t\t\tyield* scrubLocksHost(inputs.sourcePath, '~/.move', {\n\t\t\t\t\tpackageLockFailures: inputs.executor.scrubsInsideContainer ? 'best-effort' : 'fatal',\n\t\t\t\t});\n\n\t\t\t\t// Produce 2/5 — build. Executor dispatches between (a)\n\t\t\t\t// per-app build container, (b) `docker run --rm`, (c) host\n\t\t\t\t// `sui` CLI.\n\t\t\t\tyield* Effect.annotateCurrentSpan({ 'package.publish.phase': 'build' });\n\t\t\t\tconst buildOutput: BuildOutput = yield* inputs.executor\n\t\t\t\t\t.build({\n\t\t\t\t\t\tsourcePath: inputs.sourcePath,\n\t\t\t\t\t\tpackageName: inputs.packageName,\n\t\t\t\t\t\tchainId: inputs.chainId,\n\t\t\t\t\t})\n\t\t\t\t\t.pipe(\n\t\t\t\t\t\tEffect.catchTag(\n\t\t\t\t\t\t\t'PublishError',\n\t\t\t\t\t\t\t(err): Effect.Effect<BuildOutput, PublishError> =>\n\t\t\t\t\t\t\t\t// Re-stamp sourcePath/packageName if the underlying\n\t\t\t\t\t\t\t\t// caller omitted them (every throw site MUST surface\n\t\t\t\t\t\t\t\t// the context — see distilled doc §Opportunities).\n\t\t\t\t\t\t\t\tEffect.fail(\n\t\t\t\t\t\t\t\t\terr.sourcePath\n\t\t\t\t\t\t\t\t\t\t? err\n\t\t\t\t\t\t\t\t\t\t: {\n\t\t\t\t\t\t\t\t\t\t\t\t...err,\n\t\t\t\t\t\t\t\t\t\t\t\tsourcePath: inputs.sourcePath,\n\t\t\t\t\t\t\t\t\t\t\t\tpackageName: inputs.packageName,\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\n\t\t\t\t// Produce 3/5 — publish-tx. Construct `Transaction.publish`,\n\t\t\t\t// sign + execute via the publisher's account signer, decode\n\t\t\t\t// the output.\n\t\t\t\tyield* Effect.annotateCurrentSpan({ 'package.publish.phase': 'publish-tx' });\n\t\t\t\tconst output: LocalPackagePublishOutput = yield* inputs.executor.publishTx({\n\t\t\t\t\tmodules: buildOutput.modules,\n\t\t\t\t\tdependencies: buildOutput.dependencies,\n\t\t\t\t\tsourcePath: inputs.sourcePath,\n\t\t\t\t\tpackageName: inputs.packageName,\n\t\t\t\t});\n\t\t\t\tproducedOutput = output;\n\n\t\t\t\t// Produce 4/5 — wait-for-index. Distilled doc Invariant 5:\n\t\t\t\t// publish-tx commit precedes index visibility. Without this\n\t\t\t\t// gate, downstream tx builders fail with \"Dependent package\n\t\t\t\t// not found\". Failure surfaces as `PublishError('parse')`\n\t\t\t\t// per the distilled doc's phase catalog (\"stuck indexer\").\n\t\t\t\tyield* Effect.annotateCurrentSpan({ 'package.publish.phase': 'waiting-for-index' });\n\t\t\t\tyield* inputs.executor.waitForReady(output.packageId);\n\n\t\t\t\t// Produce 5/5 — parse. Distilled doc §Move-specific\n\t\t\t\t// concerns: pick the `'published'` change for packageId;\n\t\t\t\t// pick the `UpgradeCap`-typed `'created'` change for the\n\t\t\t\t// upgrade cap.\n\t\t\t\tyield* Effect.annotateCurrentSpan({ 'package.publish.phase': 'parse' });\n\t\t\t\tconst published = pickPublishedChange(output.objectChanges);\n\t\t\t\tif (!published?.objectId) {\n\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\tpublishError('parse', {\n\t\t\t\t\t\t\tsourcePath: inputs.sourcePath,\n\t\t\t\t\t\t\tpackageName: inputs.packageName,\n\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t'no \"published\" change in output — SDK shape drift (distilled doc §Edge cases)',\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tconst upgradeCap: PackagePublishObjectChange | undefined = pickUpgradeCapChange(\n\t\t\t\t\toutput.objectChanges,\n\t\t\t\t);\n\n\t\t\t\t// Capture spec — user-declared projection from output to\n\t\t\t\t// typed object id map. Distilled doc §Outputs + Invariant:\n\t\t\t\t// safe to swallow individual key failures (callback form\n\t\t\t\t// is user code), but a callback throw bubbles up as a\n\t\t\t\t// PublishError('parse') so the user catches the typo.\n\t\t\t\tconst captured: Readonly<Record<string, string>> = inputs.capture\n\t\t\t\t\t? yield* Effect.try({\n\t\t\t\t\t\t\ttry: () => inputs.capture!(output),\n\t\t\t\t\t\t\tcatch: (cause): PublishError =>\n\t\t\t\t\t\t\t\tpublishError('parse', {\n\t\t\t\t\t\t\t\t\tsourcePath: inputs.sourcePath,\n\t\t\t\t\t\t\t\t\tpackageName: inputs.packageName,\n\t\t\t\t\t\t\t\t\tmessage: 'capture callback threw',\n\t\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t})\n\t\t\t\t\t: {};\n\n\t\t\t\tconst entry: CachedPackageEntry = {\n\t\t\t\t\tpackageId: published.objectId,\n\t\t\t\t\tupgradeCapId: upgradeCap?.objectId,\n\t\t\t\t\tpublisher: inputs.publisherAddress,\n\t\t\t\t\tmvrPlaceholder,\n\t\t\t\t\tcaptured,\n\t\t\t\t\toutput,\n\t\t\t\t};\n\t\t\t\treturn entry;\n\t\t\t}).pipe(\n\t\t\t\tEffect.mapError(\n\t\t\t\t\t(err): ArtifactPublishError => ({\n\t\t\t\t\t\t_tag: 'ArtifactPublishError',\n\t\t\t\t\t\treason: 'produce-failed',\n\t\t\t\t\t\tdetail: `package.publish ${err.phase}: ${err.message}`,\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t\t),\n\t\t\t// Register: on EVERY cycle. Distilled doc Invariant 6.\n\t\t\t// The publisher hands us either `Produced` (CachedPackageEntry)\n\t\t\t// or `Verified` (`{ objectId, type }` from the verifySchema).\n\t\t\t// On verify-hit we project to a synthesized entry; on produce\n\t\t\t// we already have the full shape. The cache-hit path needs\n\t\t\t// to thread through the cached mvrPlaceholder + output. Recompute\n\t\t\t// `captured` from the current capture spec when cached output is\n\t\t\t// present so changing capture keys does not require a republish.\n\t\t\tregister: (artifact) =>\n\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\tconst entry: CachedPackageEntry =\n\t\t\t\t\t\t'packageId' in artifact\n\t\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\t\t...artifact,\n\t\t\t\t\t\t\t\t\tcaptured:\n\t\t\t\t\t\t\t\t\t\tinputs.capture !== undefined && artifact.output !== undefined\n\t\t\t\t\t\t\t\t\t\t\t? (() => {\n\t\t\t\t\t\t\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\treturn inputs.capture(artifact.output);\n\t\t\t\t\t\t\t\t\t\t\t\t\t} catch {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\treturn artifact.captured;\n\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t})()\n\t\t\t\t\t\t\t\t\t\t\t: artifact.captured,\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t: {\n\t\t\t\t\t\t\t\t\t// Verify-hit path: project from the bare\n\t\t\t\t\t\t\t\t\t// `{ objectId, type }` probe shape using the\n\t\t\t\t\t\t\t\t\t// previously-resolved registry entry to recover\n\t\t\t\t\t\t\t\t\t// `mvrPlaceholder` + `captured`. If no prior\n\t\t\t\t\t\t\t\t\t// entry exists (first cold-boot verify hit —\n\t\t\t\t\t\t\t\t\t// unusual; implies a different process wrote\n\t\t\t\t\t\t\t\t\t// the cache), we fall back to safe defaults.\n\t\t\t\t\t\t\t\t\tpackageId: artifact.objectId,\n\t\t\t\t\t\t\t\t\tpublisher: inputs.publisherAddress,\n\t\t\t\t\t\t\t\t\tmvrPlaceholder:\n\t\t\t\t\t\t\t\t\t\tpriorEntry && priorEntry.kind === 'local'\n\t\t\t\t\t\t\t\t\t\t\t? priorEntry.mvrPlaceholder\n\t\t\t\t\t\t\t\t\t\t\t: mvrPlaceholder,\n\t\t\t\t\t\t\t\t\tcaptured: priorEntry && priorEntry.kind === 'local' ? priorEntry.captured : {},\n\t\t\t\t\t\t\t\t\tupgradeCapId:\n\t\t\t\t\t\t\t\t\t\tpriorEntry && priorEntry.kind === 'local' ? priorEntry.upgradeCapId : undefined,\n\t\t\t\t\t\t\t\t};\n\t\t\t\t\tconst r: ResolvedLocalPackage = {\n\t\t\t\t\t\tkind: 'local',\n\t\t\t\t\t\tname: inputs.packageName,\n\t\t\t\t\t\tpackageId: entry.packageId,\n\t\t\t\t\t\tupgradeCapId: entry.upgradeCapId,\n\t\t\t\t\t\tsourcePath: inputs.sourcePath,\n\t\t\t\t\t\tmvrPlaceholder: entry.mvrPlaceholder,\n\t\t\t\t\t\tcaptured: entry.captured,\n\t\t\t\t\t};\n\t\t\t\t\tyield* registry.set(r.name, r);\n\t\t\t\t}),\n\t\t});\n\n\t\t// Project the cached/verified entry back to the resolved shape.\n\t\t// The publisher's `Produced | Verified` union — Produced is\n\t\t// CachedPackageEntry (full); Verified is `{ objectId, type }`\n\t\t// from the verify schema. Both collapse onto the registry's\n\t\t// projected `ResolvedLocalPackage` — and `register` already\n\t\t// performed that projection. Re-read the registry to recover\n\t\t// the unified shape regardless of which arm fired.\n\t\tconst final = yield* registry.find(inputs.packageName);\n\t\tif (!final || final.kind !== 'local') {\n\t\t\t// Defensive — register fires unconditionally; missing entry\n\t\t\t// here would mean substrate skipped register, violating\n\t\t\t// Invariant 6. Surface as a parse-phase failure since it's\n\t\t\t// indistinguishable from a missing 'published' change from\n\t\t\t// the consumer's perspective.\n\t\t\treturn yield* Effect.fail(\n\t\t\t\tpublishError('parse', {\n\t\t\t\t\tsourcePath: inputs.sourcePath,\n\t\t\t\t\tpackageName: inputs.packageName,\n\t\t\t\t\tmessage:\n\t\t\t\t\t\t'register did not surface entry — artifact publisher register invariant violation',\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\n\t\t// Silence the unused-binding lint for the artifact publisher `resolved` — the\n\t\t// substrate's `Produced | Verified` return is informational\n\t\t// here (we project through the registry instead).\n\t\tvoid resolved;\n\n\t\tconst cachedOutput =\n\t\t\t'packageId' in resolved && 'output' in resolved ? (resolved.output ?? null) : null;\n\n\t\treturn {\n\t\t\tresolved: final,\n\t\t\toutput: producedOutput ?? cachedOutput,\n\t\t};\n\t});\n"],"mappings":";;;;;;;;;;AA6DA,MAAa,qBAAqB,OAAO,OAAO;CAC/C,UAAU,OAAO;CAIjB,MAAM,OAAO;CACb,CAAC;;;;;;;;;;AA6EF,MAAM,qCAAqC;AAC3C,MAAM,oCAAoC;AAC1C,MAAM,gCAAgC;AAEtC,MAAM,qBAAqB,YAAoB,qBAC9CA,YACC,GAAG,mCAAmC,WAAW,WAAW,cAAc,mBAC1E;;;;;;;;;;;;;;;;;AAkBF,MAAa,oBACZ,OACA,qBACA,SAEA,OAAO,IAAI,aAAa;AACvB,KAAI,wBAAwB,KAAM,QAAO;CACzC,MAAM,cAAc,MAAM,eAAe;CACzC,MAAM,UAAU,MAAM,WAAW;AACjC,MAAK,IAAI,UAAU,GAAG,WAAW,aAAa,WAAW;EAMxD,MAAM,SAAgD,OAAO,MAC3D,IAAI;GAAE,MAAM;GAAU,UAAU;GAAqB,EAAE,oBAAoB,UAAU,CACrF,KAMA,OAAO,YAAY,OAAO,QAAQ,KAA8C,CAAC,CACjF;AACF,MAAI,WAAW,KAAM,QAAO;AAC5B,MAAI,UAAU,eAAe,UAAU,EACtC,QAAO,OAAO,MAAM,SAAS,OAAO,QAAQ,CAAC;;AAG/C,QAAO;EACN;;;;;;;;;;;;AAaH,MAAa,gBACZ,WACA,OACA,UACA,WAEA,OAAO,IAAI,aAAa;CAKvB,MAAM,aAAa,kBAAkB,OADX,gBAAgB,OAAO,WAAW,EACX,OAAO,iBAAiB;CAEzE,MAAM,iBAAiB,WAAW,OAAO,eAAe,OAAO,YAAY;CAM3E,MAAM,aAAa,OAAO,SAAS,KAAK,OAAO,YAAY;CAM3D,IAAI,iBAAmD;CAEvD,MAAM,WAAW,OAAO,UAAU,QAA4D;EAC7F,WAAW;EACX,OAAO,OAAO;EACd,aAAa;EACb,cAAc;EACd,SAAS,WACR,OAAO,WAAW,KAAA,IACf,OAAO,QAAQ,KAAK,GACpB,iBAAiB,OAAO,OAAO,UAAU;EAI7C,SAAS,OAAO,IAAI,aAAa;AAChC,UAAO,OAAO,oBAAoB;IACjC,2BAA2B,OAAO;IAClC,8BAA8B,OAAO;IACrC,2BAA2B,OAAO;IAClC,6BAA6B,OAAO;IACpC,CAAC;AASF,UAAO,OAAO,oBAAoB,EAAE,yBAAyB,SAAS,CAAC;AACvE,UAAO,eAAe,OAAO,YAAY,WAAW,EACnD,qBAAqB,OAAO,SAAS,wBAAwB,gBAAgB,SAC7E,CAAC;AAKF,UAAO,OAAO,oBAAoB,EAAE,yBAAyB,SAAS,CAAC;GACvE,MAAM,cAA2B,OAAO,OAAO,SAC7C,MAAM;IACN,YAAY,OAAO;IACnB,aAAa,OAAO;IACpB,SAAS,OAAO;IAChB,CAAC,CACD,KACA,OAAO,SACN,iBACC,QAIA,OAAO,KACN,IAAI,aACD,MACA;IACA,GAAG;IACH,YAAY,OAAO;IACnB,aAAa,OAAO;IACpB,CACH,CACF,CACD;AAKF,UAAO,OAAO,oBAAoB,EAAE,yBAAyB,cAAc,CAAC;GAC5E,MAAM,SAAoC,OAAO,OAAO,SAAS,UAAU;IAC1E,SAAS,YAAY;IACrB,cAAc,YAAY;IAC1B,YAAY,OAAO;IACnB,aAAa,OAAO;IACpB,CAAC;AACF,oBAAiB;AAOjB,UAAO,OAAO,oBAAoB,EAAE,yBAAyB,qBAAqB,CAAC;AACnF,UAAO,OAAO,SAAS,aAAa,OAAO,UAAU;AAMrD,UAAO,OAAO,oBAAoB,EAAE,yBAAyB,SAAS,CAAC;GACvE,MAAM,YAAY,oBAAoB,OAAO,cAAc;AAC3D,OAAI,CAAC,WAAW,SACf,QAAO,OAAO,OAAO,KACpB,aAAa,SAAS;IACrB,YAAY,OAAO;IACnB,aAAa,OAAO;IACpB,SACC;IACD,CAAC,CACF;GAEF,MAAM,aAAqD,qBAC1D,OAAO,cACP;GAOD,MAAM,WAA6C,OAAO,UACvD,OAAO,OAAO,IAAI;IAClB,WAAW,OAAO,QAAS,OAAO;IAClC,QAAQ,UACP,aAAa,SAAS;KACrB,YAAY,OAAO;KACnB,aAAa,OAAO;KACpB,SAAS;KACT;KACA,CAAC;IACH,CAAC,GACD,EAAE;AAUL,UAAO;IAPN,WAAW,UAAU;IACrB,cAAc,YAAY;IAC1B,WAAW,OAAO;IAClB;IACA;IACA;IAEW;IACX,CAAC,KACF,OAAO,UACL,SAA+B;GAC/B,MAAM;GACN,QAAQ;GACR,QAAQ,mBAAmB,IAAI,MAAM,IAAI,IAAI;GAC7C,EACD,CACD;EASD,WAAW,aACV,OAAO,IAAI,aAAa;GACvB,MAAM,QACL,eAAe,WACZ;IACA,GAAG;IACH,UACC,OAAO,YAAY,KAAA,KAAa,SAAS,WAAW,KAAA,WAC1C;AACP,SAAI;AACH,aAAO,OAAO,QAAQ,SAAS,OAAO;aAC/B;AACP,aAAO,SAAS;;QAEd,GACH,SAAS;IACb,GACA;IAQA,WAAW,SAAS;IACpB,WAAW,OAAO;IAClB,gBACC,cAAc,WAAW,SAAS,UAC/B,WAAW,iBACX;IACJ,UAAU,cAAc,WAAW,SAAS,UAAU,WAAW,WAAW,EAAE;IAC9E,cACC,cAAc,WAAW,SAAS,UAAU,WAAW,eAAe,KAAA;IACvE;GACJ,MAAM,IAA0B;IAC/B,MAAM;IACN,MAAM,OAAO;IACb,WAAW,MAAM;IACjB,cAAc,MAAM;IACpB,YAAY,OAAO;IACnB,gBAAgB,MAAM;IACtB,UAAU,MAAM;IAChB;AACD,UAAO,SAAS,IAAI,EAAE,MAAM,EAAE;IAC7B;EACH,CAAC;CASF,MAAM,QAAQ,OAAO,SAAS,KAAK,OAAO,YAAY;AACtD,KAAI,CAAC,SAAS,MAAM,SAAS,QAM5B,QAAO,OAAO,OAAO,KACpB,aAAa,SAAS;EACrB,YAAY,OAAO;EACnB,aAAa,OAAO;EACpB,SACC;EACD,CAAC,CACF;CAQF,MAAM,eACL,eAAe,YAAY,YAAY,WAAY,SAAS,UAAU,OAAQ;AAE/E,QAAO;EACN,UAAU;EACV,QAAQ,kBAAkB;EAC1B;EACA"}
+{"version":3,"file":"mode-local.mjs","names":["brandContentHash"],"sources":["../../../src/plugins/package/mode-local.ts"],"sourcesContent":["// Local mode — build from source + publish.\n//\n// This is the canonical implementation of the\n// `ArtifactPublisher` substrate primitive (distilled doc\n// §Generic artifact-publisher-publish pattern). The five-phase shape:\n//\n//   1. Inputs       — `{ sourceHash, signerAddress }` →\n//                     `contentHash(inputs)`.\n//   2. Cache key    — `<namespace=package>/<chainId>/<contentHash>`.\n//                     Substrate folds in chainId for us; we hand\n//                     it the namespace + contentHash.\n//   3. Verify       — `chainProbe.get({ objectId: cachedId },\n//                     PackageObjectSchema, 'lenient')`. Lenient mode\n//                     coerces transient RPC failure → null\n//                     → re-derive (cheap over-derive vs spurious\n//                     eviction — distilled doc §Constraint \"lenient\n//                     verify is cheaper than aggressive eviction\").\n//   4. Produce      — scrub locks → build → publish-tx → wait-for-\n//                     index. Each phase narrates to TUI via span\n//                     annotation.\n//   5. Register     — write registry entry on EVERY cycle (hit AND\n//                     miss). Distilled doc Invariant 6.\n//\n// The publish output is exposed on the resolved value and emitted as a\n// package-owned extension contribution for sibling folds.\n\nimport { Duration, Effect, Schema, type Scope } from 'effect';\n\nimport { contentHash as brandContentHash, type ChainId } from '../../substrate/brand.ts';\nimport {\n\tpickPublishedChange,\n\tpickUpgradeCapChange,\n\ttype PackagePublishObjectChange,\n\ttype LocalPackagePublishOutput,\n} from './publish-output.ts';\nimport {\n\tartifactPublishError,\n\ttype ArtifactPublishError,\n\ttype ArtifactPublisher,\n} from '../../primitives/artifact-publisher.ts';\nimport type { ChainProbe } from '../../contracts/chain-probe.ts';\nimport type { SuiProbeKey } from '../sui/index.ts';\nimport { hashMoveSources, scrubLocksHost, type BuildOutput } from './build.ts';\nimport { mvrSlugify } from './dep-resolution.ts';\nimport { type PackageRegistry, type ResolvedLocalPackage } from './registry.ts';\nimport { publishError, type PublishError } from './errors.ts';\nimport { PackageSpans } from './spans.ts';\n\n/** Cache-stored payload — the stable id verify re-confirms on\n *  every cycle. Distilled doc Invariant 8: the probe MUST consume\n *  a stable identifier (the packageId), NOT a derived hash. */\nexport interface CachedPackageEntry {\n\treadonly packageId: string;\n\treadonly upgradeCapId?: string;\n\treadonly publisher: string;\n\treadonly mvrPlaceholder: string;\n\treadonly captured: Readonly<Record<string, string>>;\n\treadonly output?: LocalPackagePublishOutput;\n}\n\n/** Verify-schema: what we expect when probing `getObject(packageId)`.\n *  Minimal — the substrate's `ChainProbe` decodes against this; any\n *  decode failure surfaces structured. */\nexport const PackageVerifyShape = Schema.Struct({\n\tobjectId: Schema.String,\n\t// A Move package's `type` is the literal `\"package\"` wrapper;\n\t// the SDK's exact shape varies — we keep it open as `Unknown`\n\t// and rely on objectId presence for the \"exists\" signal.\n\ttype: Schema.Unknown,\n});\n\n/**\n * Publish-tx executor — narrow shim that abstracts the concrete\n * `@mysten/sui` wiring (Transaction builder, signer, fullnode\n * ready-probe). The mode-local produce body composes its 5-phase\n * shape against this interface; the concrete implementation lives in\n * `publish-executor.ts` and is constructed once per acquire by the\n * barrel from the resolved `SuiClient` + publisher `AccountValue` +\n * `ContainerRuntime`.\n *\n * The shim parallels `coin/mint.ts::MintSigner` + `MintSdkShim`. We\n * keep them split (publish vs sign vs ready-probe) so the produce\n * body can attribute span annotations per phase + so failures map\n * back to a typed `PublishError` phase enum.\n */\nexport interface PublishExecutor {\n\treadonly scrubsInsideContainer: boolean;\n\n\t/** Build the Move source tree into `{ modules, dependencies }`.\n\t *  Dispatches between (a) per-app build container, (b) fresh\n\t *  `docker run --rm`, (c) host `sui` CLI. The produce body just\n\t *  calls and propagates `PublishError`. */\n\treadonly build: (inputs: {\n\t\treadonly sourcePath: string;\n\t\treadonly packageName: string;\n\t\treadonly chainId: ChainId;\n\t}) => Effect.Effect<BuildOutput, PublishError, Scope.Scope>;\n\n\t/** Construct + sign + execute a `Transaction.publish({modules,\n\t *  dependencies})` against the publisher account. Returns the\n\t *  output projection that downstream consumers (Coin, manifest,\n\t *  capture spec) need. Distilled doc §Move-specific concerns —\n\t *  the output is the source of `published` change + the\n\t *  `UpgradeCap` `created` change. */\n\treadonly publishTx: (inputs: {\n\t\treadonly modules: ReadonlyArray<Uint8Array>;\n\t\treadonly dependencies: ReadonlyArray<string>;\n\t\treadonly sourcePath: string;\n\t\treadonly packageName: string;\n\t}) => Effect.Effect<LocalPackagePublishOutput, PublishError, Scope.Scope>;\n\n\t/** Post-publish fullnode/indexer ready HINT. Distilled doc\n\t *  Invariant 5: publish-tx commit precedes index visibility. This\n\t *  is BEST-EFFORT — the concrete executor swallows transient\n\t *  `getObject` misses (cold index races) because the publisher\n\t *  account's `signAndExecute` already calls `waitForTransaction`\n\t *  before returning, AND the downstream `parse` phase only\n\t *  inspects the publish output. A typed `PublishError('parse')`\n\t *  surfaces only when the `getObject` infrastructure itself\n\t *  faults (network down / SDK throws non-recoverably), NOT when\n\t *  the object is merely not-yet-indexed.\n\t *\n\t *  The \"Hint\" suffix encodes the contract: callers MUST NOT treat\n\t *  a successful return as \"package definitely queryable now\". */\n\treadonly postPublishReadyHint: (\n\t\tpackageId: string,\n\t) => Effect.Effect<void, PublishError, Scope.Scope>;\n}\n\nexport interface LocalModeInputs {\n\treadonly packageName: string;\n\treadonly sourcePath: string;\n\treadonly chainId: ChainId;\n\treadonly publisherAddress: string;\n\treadonly mvrOverride?: string;\n\treadonly capture?: (output: LocalPackagePublishOutput) => Readonly<Record<string, string>>;\n\t/** Publish executor — constructed per-acquire by the barrel from\n\t *  the resolved SuiClient + publisher account + ContainerRuntime\n\t *  (see `publish-executor.ts`). */\n\treadonly executor: PublishExecutor;\n}\n\nexport interface LocalModeOutputs {\n\treadonly resolved: ResolvedLocalPackage;\n\treadonly output: LocalPackagePublishOutput | null;\n}\n\n/**\n * Build the content hash for the publish cache key. Distilled doc\n * §Move-specific: inputs are `(sourceHash, signerAddress)`. The\n * `hashMoveSources` helper already normalises Move.lock pinned\n * sections via the shared `stripPinnedSections`; we fold the\n * publisher address in here as a stable string so reusing the\n * same source under a different signer correctly misses (Invariant\n * 4: \"Signer MUST be an explicit upstream\").\n */\nconst LOCAL_PACKAGE_CACHE_SCHEMA_VERSION = 'v3';\nconst PACKAGE_CACHE_VERIFY_MAX_ATTEMPTS = 20;\nconst PACKAGE_CACHE_VERIFY_DELAY_MS = 250;\n\nconst combineInputsHash = (sourceHash: string, publisherAddress: string) =>\n\tbrandContentHash(\n\t\t`${LOCAL_PACKAGE_CACHE_SCHEMA_VERSION}::source=${sourceHash}::publisher=${publisherAddress}`,\n\t);\n\n/**\n * Verify probe — lenient `getObject(packageId)`. Returns the decoded\n * shape on success; null for BOTH not-found AND transient (distilled\n * doc Invariant 7 + the \"lenient verify cheaper than aggressive\n * eviction\" Constraint).\n *\n * The cached id is hinted in via parameter. The artifact publisher substrate is\n * expected to thread the cached payload through to this closure on\n * cache hit; today we get the id from the registry's previous-cycle\n * entry (in-process, per-supervisor lookup — see `acquireLocal`\n * below). When no hint exists (first cycle / cold boot), we\n * short-circuit to null so the substrate runs `produce`.\n *\n * Mirrors `coin/mint.ts::buildVerifyProbe` exactly so the two artifact publisher\n * consumers stay shape-aligned.\n */\nexport const buildVerifyProbe = (\n\tprobe: ChainProbe<SuiProbeKey>,\n\tcachedPackageIdHint: string | null,\n\topts?: { readonly maxAttempts?: number; readonly delayMs?: number },\n): Effect.Effect<typeof PackageVerifyShape.Type | null, never> =>\n\tEffect.gen(function* () {\n\t\tif (cachedPackageIdHint === null) return null;\n\t\tconst maxAttempts = opts?.maxAttempts ?? PACKAGE_CACHE_VERIFY_MAX_ATTEMPTS;\n\t\tconst delayMs = opts?.delayMs ?? PACKAGE_CACHE_VERIFY_DELAY_MS;\n\t\tfor (let attempt = 1; attempt <= maxAttempts; attempt++) {\n\t\t\t// Lenient mode in the underlying probe already coerces\n\t\t\t// not-found AND transient → null. We retry nulls briefly\n\t\t\t// because local Sui restart can report ready before package\n\t\t\t// objects are immediately queryable, and a false cache miss\n\t\t\t// turns a warm restart into an unnecessary publish.\n\t\t\tconst result: typeof PackageVerifyShape.Type | null = yield* probe\n\t\t\t\t.get({ kind: 'object', objectId: cachedPackageIdHint }, PackageVerifyShape, 'lenient')\n\t\t\t\t.pipe(\n\t\t\t\t\t// The probe's own error channel is `ChainProbeError`; under\n\t\t\t\t\t// lenient mode only `decode-failed` surfaces (not-found +\n\t\t\t\t\t// transient already coerce to null). A decode failure on\n\t\t\t\t\t// verify is treated as \"stale shape\" — null so the substrate\n\t\t\t\t\t// re-publishes rather than carry forward a mismatch.\n\t\t\t\t\tEffect.catch(() => Effect.succeed(null as typeof PackageVerifyShape.Type | null)),\n\t\t\t\t);\n\t\t\tif (result !== null) return result;\n\t\t\tif (attempt < maxAttempts && delayMs > 0) {\n\t\t\t\tyield* Effect.sleep(Duration.millis(delayMs));\n\t\t\t}\n\t\t}\n\t\treturn null;\n\t});\n\n/**\n * Compose the ArtifactSpec for a local publish.\n *\n * The substrate-side `ArtifactPublisher.publish` consumes\n * this spec and handles:\n *\n *   - cache lookup under `<namespace>/<chainId>/<contentHash>`;\n *   - verify (lenient) when there's a hit;\n *   - re-running `produce` on miss OR verify-fail;\n *   - calling `register` on EVERY cycle.\n */\nexport const acquireLocal = (\n\tpublisher: ArtifactPublisher,\n\tprobe: ChainProbe<SuiProbeKey>,\n\tregistry: PackageRegistry,\n\tinputs: LocalModeInputs,\n): Effect.Effect<LocalModeOutputs, PublishError | ArtifactPublishError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\t// Intra-stack name collision guard.\n\t\t//\n\t\t// The registry is keyed by symbolic `packageName`; two\n\t\t// `localPackage('foo', ...)` calls in the same stack would both\n\t\t// call `register({ name: 'foo', ... })` and the second `set`\n\t\t// would silently overwrite the first. Upstream's\n\t\t// `resolveGraph` (substrate/runtime/lifecycle/dep-graph.ts:127)\n\t\t// explicitly documents \"we don't enforce uniqueness at runtime;\n\t\t// the duplicate just resolves to the latest declaration\" —\n\t\t// compile-time `MissingProviders` only catches collisions on\n\t\t// the user-typed dependency path, NOT two members declared on\n\t\t// the same stack with the same id. We catch the collision here\n\t\t// so the user sees a typed parse-phase failure instead of a\n\t\t// confusing \"wrong packageId\" downstream.\n\t\t//\n\t\t// The check tolerates re-entry from the SAME `localPackage(...)`\n\t\t// call (warm restart / re-acquire on the same scope): a\n\t\t// pre-existing entry with the SAME `sourcePath` is the\n\t\t// previous cycle's register, not a collision.\n\t\tconst existing = yield* registry.find(inputs.packageName);\n\t\tif (\n\t\t\texisting !== null &&\n\t\t\texisting.kind === 'local' &&\n\t\t\texisting.sourcePath !== inputs.sourcePath\n\t\t) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\tpublishError('parse', {\n\t\t\t\t\tsourcePath: inputs.sourcePath,\n\t\t\t\t\tpackageName: inputs.packageName,\n\t\t\t\t\tmessage:\n\t\t\t\t\t\t`localPackage('${inputs.packageName}') is declared twice in the same stack ` +\n\t\t\t\t\t\t`with different sourcePaths (${existing.sourcePath} vs ${inputs.sourcePath}). ` +\n\t\t\t\t\t\t`The substrate is name-blind at runtime and the second declaration would ` +\n\t\t\t\t\t\t`silently overwrite the first registry entry. Pick distinct package names ` +\n\t\t\t\t\t\t`(the symbolic name is the registry key consumers look up).`,\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\t\t// Distilled doc §Move-specific: hash inputs are `(sourceHash,\n\t\t// signerAddress)`. The hashing helper strips Move.lock pinned\n\t\t// sections (Invariant 2) so warm restarts hit the cache.\n\t\tconst sourceHash = yield* hashMoveSources(inputs.sourcePath);\n\t\tconst inputsHash = combineInputsHash(sourceHash, inputs.publisherAddress);\n\n\t\tconst mvrPlaceholder = mvrSlugify(inputs.mvrOverride ?? inputs.packageName);\n\n\t\t// We capture the produce-side output out-of-band so the\n\t\t// returned `LocalModeOutputs.output` can expose it. The\n\t\t// substrate hands back the decoded `CachedPackageEntry` on\n\t\t// every path; `producedOutput` is the freshly-emitted output\n\t\t// from THIS cycle (cache miss only).\n\t\tlet producedOutput: LocalPackagePublishOutput | null = null;\n\n\t\tconst entry: CachedPackageEntry = yield* publisher.publish<\n\t\t\tCachedPackageEntry,\n\t\t\ttypeof PackageVerifyShape.Type\n\t\t>({\n\t\t\tnamespace: 'package',\n\t\t\tchain: inputs.chainId,\n\t\t\tcontentHash: inputsHash,\n\t\t\tverify: (cached) =>\n\t\t\t\tcached.output === undefined\n\t\t\t\t\t? Effect.succeed(null)\n\t\t\t\t\t: buildVerifyProbe(probe, cached.packageId),\n\t\t\t// Produce: scrub → build → publish-tx → wait-for-index → parse.\n\t\t\t// PublishError is the plugin-internal phase taxonomy; we map\n\t\t\t// it to `ArtifactPublishError` at the substrate boundary.\n\t\t\tproduce: Effect.gen(function* () {\n\t\t\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t\t\t[PackageSpans.publish.package]: inputs.packageName,\n\t\t\t\t\t[PackageSpans.publish.sourcePath]: inputs.sourcePath,\n\t\t\t\t\t[PackageSpans.publish.chainId]: inputs.chainId,\n\t\t\t\t\t[PackageSpans.publish.publisher]: inputs.publisherAddress,\n\t\t\t\t});\n\n\t\t\t\t// Produce 1/5 — scrub locks. Distilled doc §Move-specific\n\t\t\t\t// concerns + Invariant 14: strip pinned sections from every\n\t\t\t\t// `~/.move/git/**/Move.lock` (vendored dep caches) before\n\t\t\t\t// invoking the build. The package's own Move.lock is scrubbed\n\t\t\t\t// inside the container on a disposable copy, so the developer's\n\t\t\t\t// checked-in source is left untouched host-side. Uses the\n\t\t\t\t// unified `stripPinnedSections` (re-exported through `build.ts`\n\t\t\t\t// → from `../sui/move-lock-scrub.ts`) — NO duplicate.\n\t\t\t\tyield* Effect.annotateCurrentSpan({ [PackageSpans.publish.phase]: 'scrub' });\n\t\t\t\tyield* scrubLocksHost(inputs.sourcePath, '~/.move');\n\n\t\t\t\t// Produce 2/5 — build. Executor dispatches between (a)\n\t\t\t\t// per-app build container, (b) `docker run --rm`, (c) host\n\t\t\t\t// `sui` CLI.\n\t\t\t\tyield* Effect.annotateCurrentSpan({ [PackageSpans.publish.phase]: 'build' });\n\t\t\t\tconst buildOutput: BuildOutput = yield* inputs.executor\n\t\t\t\t\t.build({\n\t\t\t\t\t\tsourcePath: inputs.sourcePath,\n\t\t\t\t\t\tpackageName: inputs.packageName,\n\t\t\t\t\t\tchainId: inputs.chainId,\n\t\t\t\t\t})\n\t\t\t\t\t.pipe(\n\t\t\t\t\t\tEffect.catchTag(\n\t\t\t\t\t\t\t'PublishError',\n\t\t\t\t\t\t\t(err): Effect.Effect<BuildOutput, PublishError> =>\n\t\t\t\t\t\t\t\t// Re-stamp sourcePath/packageName if the underlying\n\t\t\t\t\t\t\t\t// caller omitted them (every throw site MUST surface\n\t\t\t\t\t\t\t\t// the context — see distilled doc §Opportunities).\n\t\t\t\t\t\t\t\tEffect.fail(\n\t\t\t\t\t\t\t\t\terr.sourcePath\n\t\t\t\t\t\t\t\t\t\t? err\n\t\t\t\t\t\t\t\t\t\t: {\n\t\t\t\t\t\t\t\t\t\t\t\t...err,\n\t\t\t\t\t\t\t\t\t\t\t\tsourcePath: inputs.sourcePath,\n\t\t\t\t\t\t\t\t\t\t\t\tpackageName: inputs.packageName,\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\n\t\t\t\t// Produce 3/5 — publish-tx. Construct `Transaction.publish`,\n\t\t\t\t// sign + execute via the publisher's account signer, decode\n\t\t\t\t// the output.\n\t\t\t\tyield* Effect.annotateCurrentSpan({ [PackageSpans.publish.phase]: 'publish-tx' });\n\t\t\t\tconst output: LocalPackagePublishOutput = yield* inputs.executor.publishTx({\n\t\t\t\t\tmodules: buildOutput.modules,\n\t\t\t\t\tdependencies: buildOutput.dependencies,\n\t\t\t\t\tsourcePath: inputs.sourcePath,\n\t\t\t\t\tpackageName: inputs.packageName,\n\t\t\t\t});\n\t\t\t\tproducedOutput = output;\n\n\t\t\t\t// Produce 4/5 — wait-for-index. Distilled doc Invariant 5:\n\t\t\t\t// publish-tx commit precedes index visibility. This is a\n\t\t\t\t// hint-only probe (see `postPublishReadyHint` doc on\n\t\t\t\t// `PublishExecutor`): the publisher account's\n\t\t\t\t// `signAndExecute` already awaits `waitForTransaction`, so\n\t\t\t\t// the typical race is closed before we reach here.\n\t\t\t\tyield* Effect.annotateCurrentSpan({ [PackageSpans.publish.phase]: 'waiting-for-index' });\n\t\t\t\t// Best-effort only: the executor's hint swallows transient\n\t\t\t\t// `getObject` misses and logs at debug, so its error channel\n\t\t\t\t// collapses to `never` (see `publish-executor.ts →\n\t\t\t\t// postPublishReadyHint`). No re-stamp is needed because no\n\t\t\t\t// failure surfaces here.\n\t\t\t\tyield* inputs.executor.postPublishReadyHint(output.packageId);\n\n\t\t\t\t// Produce 5/5 — parse. Distilled doc §Move-specific\n\t\t\t\t// concerns: pick the `'published'` change for packageId;\n\t\t\t\t// pick the `UpgradeCap`-typed `'created'` change for the\n\t\t\t\t// upgrade cap.\n\t\t\t\tyield* Effect.annotateCurrentSpan({ [PackageSpans.publish.phase]: 'parse' });\n\t\t\t\tconst published = pickPublishedChange(output.objectChanges);\n\t\t\t\tif (!published?.objectId) {\n\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\tpublishError('parse', {\n\t\t\t\t\t\t\tsourcePath: inputs.sourcePath,\n\t\t\t\t\t\t\tpackageName: inputs.packageName,\n\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t'no \"published\" change in output — SDK shape drift (distilled doc §Edge cases)',\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tconst upgradeCap: PackagePublishObjectChange | undefined = pickUpgradeCapChange(\n\t\t\t\t\toutput.objectChanges,\n\t\t\t\t);\n\n\t\t\t\t// Capture spec — user-declared projection from output to\n\t\t\t\t// typed object id map. Distilled doc §Outputs: the callback\n\t\t\t\t// is user code, so a throw is a USER BUG (typo / missing\n\t\t\t\t// field) — surface as `PublishError('parse')` so the user\n\t\t\t\t// catches the mistake instead of silently shipping a stale\n\t\t\t\t// captured map. The cache-HIT path performs the symmetric\n\t\t\t\t// recompute post-`publisher.publish` (see comment block\n\t\t\t\t// below the `publisher.publish` call) — both paths bubble\n\t\t\t\t// the same `PublishError('parse')` shape.\n\t\t\t\tconst captured: Readonly<Record<string, string>> = inputs.capture\n\t\t\t\t\t? yield* Effect.try({\n\t\t\t\t\t\t\ttry: () => inputs.capture!(output),\n\t\t\t\t\t\t\tcatch: (cause): PublishError =>\n\t\t\t\t\t\t\t\tpublishError('parse', {\n\t\t\t\t\t\t\t\t\tsourcePath: inputs.sourcePath,\n\t\t\t\t\t\t\t\t\tpackageName: inputs.packageName,\n\t\t\t\t\t\t\t\t\tmessage: 'capture callback threw',\n\t\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t})\n\t\t\t\t\t: {};\n\n\t\t\t\tconst entry: CachedPackageEntry = {\n\t\t\t\t\tpackageId: published.objectId,\n\t\t\t\t\tupgradeCapId: upgradeCap?.objectId,\n\t\t\t\t\tpublisher: inputs.publisherAddress,\n\t\t\t\t\tmvrPlaceholder,\n\t\t\t\t\tcaptured,\n\t\t\t\t\toutput,\n\t\t\t\t};\n\t\t\t\treturn entry;\n\t\t\t}).pipe(\n\t\t\t\tEffect.mapError(\n\t\t\t\t\t(err): ArtifactPublishError =>\n\t\t\t\t\t\tartifactPublishError('produce-failed', `package.publish ${err.phase}: ${err.message}`),\n\t\t\t\t),\n\t\t\t),\n\t\t\t// Register: on EVERY cycle. Distilled doc Invariant 6. The\n\t\t\t// substrate hands the decoded `CachedPackageEntry` payload\n\t\t\t// here on both verify-hit and freshly-produced paths.\n\t\t\t//\n\t\t\t// Register writes the entry verbatim using `artifact.captured`\n\t\t\t// (produce-time on miss; cached on hit). The user's `capture`\n\t\t\t// callback is NOT re-run here — `register`'s contract is\n\t\t\t// `Effect.Effect<void, never>` (primitives/artifact-publisher.ts)\n\t\t\t// and a user-bug throw needs a typed failure channel. The\n\t\t\t// post-publish recompute below (cache-hit branch) re-runs\n\t\t\t// `capture` so renamed/typo keys surface IDENTICALLY to the\n\t\t\t// cache-miss path (mode-local.ts:346-357) — i.e., as\n\t\t\t// `PublishError('parse')`.\n\t\t\tregister: (artifact) =>\n\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\tconst r: ResolvedLocalPackage = {\n\t\t\t\t\t\tkind: 'local',\n\t\t\t\t\t\tname: inputs.packageName,\n\t\t\t\t\t\tpackageId: artifact.packageId,\n\t\t\t\t\t\tupgradeCapId: artifact.upgradeCapId,\n\t\t\t\t\t\tsourcePath: inputs.sourcePath,\n\t\t\t\t\t\tmvrPlaceholder: artifact.mvrPlaceholder,\n\t\t\t\t\t\tcaptured: artifact.captured,\n\t\t\t\t\t};\n\t\t\t\t\tyield* registry.set(r.name, r);\n\t\t\t\t}),\n\t\t});\n\n\t\t// Post-publish capture recompute — cache-hit ONLY.\n\t\t//\n\t\t// Symmetric with the produce-time capture (L346-357): the user's\n\t\t// `capture` callback is user code; a throw is a user bug (typo /\n\t\t// renamed key against a stale cached output) and MUST surface as\n\t\t// `PublishError('parse')` so the user sees the mistake instead of\n\t\t// silently carrying forward `artifact.captured` (the historical\n\t\t// `try { ... } catch { return artifact.captured }` hid renamed\n\t\t// keys behind stale data — A5 of the remediation plan).\n\t\t//\n\t\t// Cache miss: `producedOutput` was set inside `produce`, the\n\t\t// produce-time capture already ran (Effect.try → PublishError),\n\t\t// and the substrate cached the produced entry. Re-running here\n\t\t// would be redundant and would double-throw on user bugs.\n\t\t//\n\t\t// Cache hit: `producedOutput` is null, `entry.output` came from\n\t\t// the cached payload, and `entry.captured` is whatever the user's\n\t\t// `capture` returned at the time of the original publish. We\n\t\t// re-run `capture(entry.output)` so warm restarts with renamed\n\t\t// capture keys (a) reflect the new shape in the registry without\n\t\t// requiring a republish, and (b) FAIL LOUDLY on user-callback\n\t\t// throws — the symmetric counterpart to the produce-time guard.\n\t\tconst cacheHit = producedOutput === null;\n\t\tif (cacheHit && inputs.capture !== undefined && entry.output !== undefined) {\n\t\t\tconst recomputedCaptured: Readonly<Record<string, string>> = yield* Effect.try({\n\t\t\t\ttry: () => inputs.capture!(entry.output!),\n\t\t\t\tcatch: (cause): PublishError =>\n\t\t\t\t\tpublishError('parse', {\n\t\t\t\t\t\tsourcePath: inputs.sourcePath,\n\t\t\t\t\t\tpackageName: inputs.packageName,\n\t\t\t\t\t\tmessage: 'capture callback threw',\n\t\t\t\t\t\tcause,\n\t\t\t\t\t}),\n\t\t\t}).pipe(\n\t\t\t\t// Match the produce-body `mapError` projection (L373-379)\n\t\t\t\t// so callers see ONE consistent failure shape on\n\t\t\t\t// `capture` throws — `ArtifactPublishError('produce-failed')`\n\t\t\t\t// with `detail: \"package.publish parse: capture callback\n\t\t\t\t// threw\"` — regardless of whether the bug surfaces on a\n\t\t\t\t// cache miss (inside `produce`) or a cache hit (here).\n\t\t\t\tEffect.mapError(\n\t\t\t\t\t(err): ArtifactPublishError =>\n\t\t\t\t\t\tartifactPublishError('produce-failed', `package.publish ${err.phase}: ${err.message}`),\n\t\t\t\t),\n\t\t\t);\n\t\t\tyield* registry.set(inputs.packageName, {\n\t\t\t\tkind: 'local',\n\t\t\t\tname: inputs.packageName,\n\t\t\t\tpackageId: entry.packageId,\n\t\t\t\tupgradeCapId: entry.upgradeCapId,\n\t\t\t\tsourcePath: inputs.sourcePath,\n\t\t\t\tmvrPlaceholder: entry.mvrPlaceholder,\n\t\t\t\tcaptured: recomputedCaptured,\n\t\t\t});\n\t\t}\n\n\t\t// Project the cached entry back to the resolved shape. The\n\t\t// publisher returned the decoded `CachedPackageEntry`; re-read\n\t\t// the registry to recover the canonical `ResolvedLocalPackage`\n\t\t// shape (`register` ran on every cycle and wrote it).\n\t\tconst final = yield* registry.find(inputs.packageName);\n\t\tif (!final || final.kind !== 'local') {\n\t\t\t// Defensive — register fires unconditionally; missing entry\n\t\t\t// here would mean substrate skipped register, violating\n\t\t\t// Invariant 6. Surface as a parse-phase failure since it's\n\t\t\t// indistinguishable from a missing 'published' change from\n\t\t\t// the consumer's perspective.\n\t\t\treturn yield* Effect.fail(\n\t\t\t\tpublishError('parse', {\n\t\t\t\t\tsourcePath: inputs.sourcePath,\n\t\t\t\t\tpackageName: inputs.packageName,\n\t\t\t\t\tmessage:\n\t\t\t\t\t\t'register did not surface entry — artifact publisher register invariant violation',\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\n\t\treturn {\n\t\t\tresolved: final,\n\t\t\toutput: producedOutput ?? entry.output ?? null,\n\t\t};\n\t});\n"],"mappings":";;;;;;;;;;;;;AA+DA,MAAa,qBAAqB,OAAO,OAAO;CAC/C,UAAU,OAAO;CAIjB,MAAM,OAAO;CACb,CAAC;;;;;;;;;;AAuFF,MAAM,qCAAqC;AAC3C,MAAM,oCAAoC;AAC1C,MAAM,gCAAgC;AAEtC,MAAM,qBAAqB,YAAoB,qBAC9CA,YACC,GAAG,mCAAmC,WAAW,WAAW,cAAc,mBAC1E;;;;;;;;;;;;;;;;;AAkBF,MAAa,oBACZ,OACA,qBACA,SAEA,OAAO,IAAI,aAAa;AACvB,KAAI,wBAAwB,KAAM,QAAO;CACzC,MAAM,cAAc,MAAM,eAAe;CACzC,MAAM,UAAU,MAAM,WAAW;AACjC,MAAK,IAAI,UAAU,GAAG,WAAW,aAAa,WAAW;EAMxD,MAAM,SAAgD,OAAO,MAC3D,IAAI;GAAE,MAAM;GAAU,UAAU;GAAqB,EAAE,oBAAoB,UAAU,CACrF,KAMA,OAAO,YAAY,OAAO,QAAQ,KAA8C,CAAC,CACjF;AACF,MAAI,WAAW,KAAM,QAAO;AAC5B,MAAI,UAAU,eAAe,UAAU,EACtC,QAAO,OAAO,MAAM,SAAS,OAAO,QAAQ,CAAC;;AAG/C,QAAO;EACN;;;;;;;;;;;;AAaH,MAAa,gBACZ,WACA,OACA,UACA,WAEA,OAAO,IAAI,aAAa;CAoBvB,MAAM,WAAW,OAAO,SAAS,KAAK,OAAO,YAAY;AACzD,KACC,aAAa,QACb,SAAS,SAAS,WAClB,SAAS,eAAe,OAAO,WAE/B,QAAO,OAAO,OAAO,KACpB,aAAa,SAAS;EACrB,YAAY,OAAO;EACnB,aAAa,OAAO;EACpB,SACC,iBAAiB,OAAO,YAAY,qEACL,SAAS,WAAW,MAAM,OAAO,WAAW;EAI5E,CAAC,CACF;CAMF,MAAM,aAAa,kBAAkB,OADX,gBAAgB,OAAO,WAAW,EACX,OAAO,iBAAiB;CAEzE,MAAM,iBAAiB,WAAW,OAAO,eAAe,OAAO,YAAY;CAO3E,IAAI,iBAAmD;CAEvD,MAAM,QAA4B,OAAO,UAAU,QAGjD;EACD,WAAW;EACX,OAAO,OAAO;EACd,aAAa;EACb,SAAS,WACR,OAAO,WAAW,KAAA,IACf,OAAO,QAAQ,KAAK,GACpB,iBAAiB,OAAO,OAAO,UAAU;EAI7C,SAAS,OAAO,IAAI,aAAa;AAChC,UAAO,OAAO,oBAAoB;KAChC,aAAa,QAAQ,UAAU,OAAO;KACtC,aAAa,QAAQ,aAAa,OAAO;KACzC,aAAa,QAAQ,UAAU,OAAO;KACtC,aAAa,QAAQ,YAAY,OAAO;IACzC,CAAC;AAUF,UAAO,OAAO,oBAAoB,GAAG,aAAa,QAAQ,QAAQ,SAAS,CAAC;AAC5E,UAAO,eAAe,OAAO,YAAY,UAAU;AAKnD,UAAO,OAAO,oBAAoB,GAAG,aAAa,QAAQ,QAAQ,SAAS,CAAC;GAC5E,MAAM,cAA2B,OAAO,OAAO,SAC7C,MAAM;IACN,YAAY,OAAO;IACnB,aAAa,OAAO;IACpB,SAAS,OAAO;IAChB,CAAC,CACD,KACA,OAAO,SACN,iBACC,QAIA,OAAO,KACN,IAAI,aACD,MACA;IACA,GAAG;IACH,YAAY,OAAO;IACnB,aAAa,OAAO;IACpB,CACH,CACF,CACD;AAKF,UAAO,OAAO,oBAAoB,GAAG,aAAa,QAAQ,QAAQ,cAAc,CAAC;GACjF,MAAM,SAAoC,OAAO,OAAO,SAAS,UAAU;IAC1E,SAAS,YAAY;IACrB,cAAc,YAAY;IAC1B,YAAY,OAAO;IACnB,aAAa,OAAO;IACpB,CAAC;AACF,oBAAiB;AAQjB,UAAO,OAAO,oBAAoB,GAAG,aAAa,QAAQ,QAAQ,qBAAqB,CAAC;AAMxF,UAAO,OAAO,SAAS,qBAAqB,OAAO,UAAU;AAM7D,UAAO,OAAO,oBAAoB,GAAG,aAAa,QAAQ,QAAQ,SAAS,CAAC;GAC5E,MAAM,YAAY,oBAAoB,OAAO,cAAc;AAC3D,OAAI,CAAC,WAAW,SACf,QAAO,OAAO,OAAO,KACpB,aAAa,SAAS;IACrB,YAAY,OAAO;IACnB,aAAa,OAAO;IACpB,SACC;IACD,CAAC,CACF;GAEF,MAAM,aAAqD,qBAC1D,OAAO,cACP;GAWD,MAAM,WAA6C,OAAO,UACvD,OAAO,OAAO,IAAI;IAClB,WAAW,OAAO,QAAS,OAAO;IAClC,QAAQ,UACP,aAAa,SAAS;KACrB,YAAY,OAAO;KACnB,aAAa,OAAO;KACpB,SAAS;KACT;KACA,CAAC;IACH,CAAC,GACD,EAAE;AAUL,UAAO;IAPN,WAAW,UAAU;IACrB,cAAc,YAAY;IAC1B,WAAW,OAAO;IAClB;IACA;IACA;IAEW;IACX,CAAC,KACF,OAAO,UACL,QACA,qBAAqB,kBAAkB,mBAAmB,IAAI,MAAM,IAAI,IAAI,UAAU,CACvF,CACD;EAcD,WAAW,aACV,OAAO,IAAI,aAAa;GACvB,MAAM,IAA0B;IAC/B,MAAM;IACN,MAAM,OAAO;IACb,WAAW,SAAS;IACpB,cAAc,SAAS;IACvB,YAAY,OAAO;IACnB,gBAAgB,SAAS;IACzB,UAAU,SAAS;IACnB;AACD,UAAO,SAAS,IAAI,EAAE,MAAM,EAAE;IAC7B;EACH,CAAC;AAyBF,KADiB,mBAAmB,QACpB,OAAO,YAAY,KAAA,KAAa,MAAM,WAAW,KAAA,GAAW;EAC3E,MAAM,qBAAuD,OAAO,OAAO,IAAI;GAC9E,WAAW,OAAO,QAAS,MAAM,OAAQ;GACzC,QAAQ,UACP,aAAa,SAAS;IACrB,YAAY,OAAO;IACnB,aAAa,OAAO;IACpB,SAAS;IACT;IACA,CAAC;GACH,CAAC,CAAC,KAOF,OAAO,UACL,QACA,qBAAqB,kBAAkB,mBAAmB,IAAI,MAAM,IAAI,IAAI,UAAU,CACvF,CACD;AACD,SAAO,SAAS,IAAI,OAAO,aAAa;GACvC,MAAM;GACN,MAAM,OAAO;GACb,WAAW,MAAM;GACjB,cAAc,MAAM;GACpB,YAAY,OAAO;GACnB,gBAAgB,MAAM;GACtB,UAAU;GACV,CAAC;;CAOH,MAAM,QAAQ,OAAO,SAAS,KAAK,OAAO,YAAY;AACtD,KAAI,CAAC,SAAS,MAAM,SAAS,QAM5B,QAAO,OAAO,OAAO,KACpB,aAAa,SAAS;EACrB,YAAY,OAAO;EACnB,aAAa,OAAO;EACpB,SACC;EACD,CAAC,CACF;AAGF,QAAO;EACN,UAAU;EACV,QAAQ,kBAAkB,MAAM,UAAU;EAC1C;EACA"}

package/dist/plugins/package/publish-executor.mjs

@@ -1,6 +1,11 @@
+import { formatUnknownError } from "../../substrate/runtime/format-unknown-error.mjs";
+import { signAndDispatch } from "../../substrate/runtime/sui-execute/sign-and-dispatch.mjs";
+import { formatExecutedFailure } from "../../substrate/runtime/sui-execute/index.mjs";
 import { buildForkImpersonationTransactionBytes } from "../sui/fork-transaction.mjs";
+import "../sui/index.mjs";
 import { publishError } from "./errors.mjs";
 import { runMoveBuild } from "./build.mjs";
+import { PackageSpans } from "./spans.mjs";
 import { Effect } from "effect";
 import { Transaction } from "@mysten/sui/transactions";
 //#region src/plugins/package/publish-executor.ts
@@ -20,47 +25,45 @@ const projectHydratedObjectFields = (raw) => {
 };
 const hydrateCreatedObject = (sdk, change) => {
 	if (!shouldHydrateCreatedObject(change) || change.objectId === void 0) return Effect.succeed(change);
+	const objectId = change.objectId;
 	return Effect.tryPromise({
 		try: () => sdk.core.getObject({
-			objectId: change.objectId,
+			objectId,
 			include: { json: true }
 		}),
-		catch: () => null
+		catch: (cause) => cause
 	}).pipe(Effect.map((raw) => ({
 		...change,
 		...raw === null ? {} : projectHydratedObjectFields(raw)
-	})), Effect.catch(() => Effect.succeed(change)));
+	})), Effect.catch((cause) => Effect.logDebug("package: hydrate-created-object cache miss").pipe(Effect.annotateLogs({
+		objectId,
+		cause: String(cause)
+	}), Effect.as(change))));
 };
 const hydrateCreatedObjects = (sdk, changes) => Effect.forEach(changes, (change) => hydrateCreatedObject(sdk, change), { concurrency: "unbounded" });
-const rawEnvelopeFromAccountTx = (tx) => {
-	const objectTypes = {};
-	const changedObjects = [];
+/** Project an account TxResult's flat `objectChanges` (`{type,
+*  objectId, objectType?, ...}`) into the publish-output
+*  `PackagePublishObjectChange[]` shape. The account plugin's
+*  projection already classifies entries by `type`
+*  (`published` for `outputState: 'PackageWrite'`, `created` for
+*  `idOperation: 'Created'`, `mutated` otherwise); we just narrow
+*  to the entries we care about (published + created) and drop the
+*  extras. */
+const publishChangesFromTxResult = (tx) => {
+	const out = [];
 	for (const change of tx.objectChanges) {
 		if (typeof change !== "object" || change === null) continue;
-		const objectId = change.objectId;
-		if (typeof objectId !== "string") continue;
-		const objectType = change.objectType;
-		if (typeof objectType === "string") objectTypes[objectId] = objectType;
-		const type = change.type;
-		const outputState = change.outputState;
-		const idOperation = change.idOperation;
-		const entry = { objectId };
-		if (typeof outputState === "string") entry.outputState = outputState;
-		else if (type === "published") entry.outputState = "PackageWrite";
-		else if (type === "created" || type === "mutated") entry.outputState = "ObjectWrite";
-		if (typeof idOperation === "string") entry.idOperation = idOperation;
-		else if (type === "created" || type === "published") entry.idOperation = "Created";
-		else if (type === "mutated") entry.idOperation = "None";
-		changedObjects.push(entry);
+		const projected = change;
+		if (typeof projected.objectId !== "string") continue;
+		if (projected.type !== "published" && projected.type !== "created") continue;
+		const objectType = typeof projected.objectType === "string" ? projected.objectType : void 0;
+		out.push({
+			type: projected.type,
+			objectId: projected.objectId,
+			...objectType !== void 0 ? { objectType } : {}
+		});
 	}
-	return {
-		$kind: "Transaction",
-		Transaction: {
-			digest: tx.digest,
-			effects: { changedObjects },
-			objectTypes
-		}
-	};
+	return out;
 };
 /**
 * Construct a `PublishExecutor` from the barrel's resolved inputs.
@@ -86,115 +89,53 @@ const makePublishExecutor = (inputs) => ({
 			dependencies: [...dependencies]
 		});
 		tx.transferObjects([upgradeCapArg], inputs.account.address);
-		const sdkClient = inputs.sdk.client;
-		const rawResult = yield* inputs.account.withTransactionSigner((lockedSigner) => Effect.gen(function* () {
-			const txBytes = inputs.account.source === "impersonate" ? yield* buildForkImpersonationTransactionBytes(tx, inputs.account.address, inputs.sdk.core).pipe(Effect.mapError((cause) => publishError("publish-tx", {
+		const { digest, objectChanges } = yield* signAndDispatch({
+			signerSource: inputs.account,
+			buildTxBytes: () => inputs.account.source === "impersonate" || inputs.forkMode === true ? buildForkImpersonationTransactionBytes(tx, inputs.account.address, inputs.sdk.core).pipe(Effect.mapError((cause) => publishError("publish-tx", {
 				sourcePath,
 				packageName,
 				message: `Fork impersonation Transaction.build failed for package '${packageName}': ` + cause.message,
 				cause
-			}))) : yield* Effect.tryPromise({
+			}))) : Effect.tryPromise({
 				try: () => tx.build({ client: inputs.sdk.client }),
 				catch: (cause) => publishError("publish-tx", {
 					sourcePath,
 					packageName,
-					message: `Transaction.build failed for package '${packageName}': ` + (cause instanceof Error ? cause.message : String(cause)),
+					message: `Transaction.build failed for package '${packageName}': ` + formatUnknownError(cause),
 					cause
 				})
-			});
-			if (inputs.account.source === "impersonate") return rawEnvelopeFromAccountTx(yield* lockedSigner.signAndExecute(txBytes).pipe(Effect.mapError((cause) => publishError("publish-tx", {
+			}),
+			mapSignError: (cause) => publishError("publish-tx", {
 				sourcePath,
 				packageName,
-				message: `account.signAndExecute failed for publisher '${inputs.account.name}' (address=${inputs.account.address}): ${cause instanceof Error ? cause.message : String(cause)}`,
+				message: `account.signAndExecute failed for publisher '${inputs.account.name}' (address=${inputs.account.address}): ${formatUnknownError(cause)}`,
 				cause
-			}))));
-			const signed = yield* lockedSigner.signTransaction(txBytes).pipe(Effect.mapError((cause) => publishError("publish-tx", {
+			}),
+			onFailed: (failure) => Effect.fail(publishError("publish-tx", {
 				sourcePath,
 				packageName,
-				message: `account.signTransaction failed for publisher '${inputs.account.name}' (address=${inputs.account.address}): ${cause instanceof Error ? cause.message : String(cause)}`,
-				cause
-			})));
-			const raw = yield* Effect.tryPromise({
-				try: () => sdkClient.executeTransaction({
-					transaction: txBytes,
-					signatures: [signed.signature],
-					include: {
-						effects: true,
-						objectTypes: true
-					}
-				}),
-				catch: (cause) => publishError("publish-tx", {
-					sourcePath,
-					packageName,
-					message: `executeTransaction failed for publisher '${inputs.account.name}': ` + (cause instanceof Error ? cause.message : String(cause)),
-					cause
-				})
-			});
-			const envelope = raw;
-			const digest = envelope.Transaction?.digest ?? envelope.FailedTransaction?.digest;
-			if (digest !== void 0) yield* Effect.tryPromise({
-				try: () => sdkClient.waitForTransaction({ digest }),
-				catch: (cause) => publishError("publish-tx", {
-					sourcePath,
-					packageName,
-					message: `waitForTransaction(${digest}) failed`,
-					cause
-				})
-			});
-			return raw;
-		}));
-		const env = rawResult;
-		if (env.$kind === "FailedTransaction") return yield* Effect.fail(publishError("publish-tx", {
-			sourcePath,
-			packageName,
-			message: `executeTransaction returned FailedTransaction (digest=${env.FailedTransaction?.digest ?? "<unknown>"}): ` + (env.FailedTransaction?.status?.error ?? "<no error>")
-		}));
-		const txOk = env.Transaction;
-		if (txOk?.digest === void 0) return yield* Effect.fail(publishError("publish-tx", {
-			sourcePath,
-			packageName,
-			message: `executeTransaction returned no digest. Raw=${JSON.stringify(rawResult).slice(0, 300)}`
-		}));
-		const objectChanges = [];
-		const objectTypes = txOk.objectTypes ?? {};
-		for (const ch of txOk.effects?.changedObjects ?? []) {
-			if (!ch.objectId) continue;
-			const objectType = objectTypes[ch.objectId];
-			if (ch.outputState === "PackageWrite") objectChanges.push({
-				type: "published",
-				objectId: ch.objectId,
-				...objectType !== void 0 ? { objectType } : {}
-			});
-			else if (ch.idOperation === "Created") objectChanges.push({
-				type: "created",
-				objectId: ch.objectId,
-				...objectType !== void 0 ? { objectType } : {}
-			});
-		}
+				message: `executeTransaction returned FailedTransaction ` + formatExecutedFailure(failure)
+			})),
+			onSuccess: (txResult) => Effect.succeed({
+				digest: txResult.digest,
+				objectChanges: publishChangesFromTxResult(txResult)
+			})
+		});
 		const published = objectChanges.find((c) => c.type === "published");
 		const upgradeCap = objectChanges.find((c) => c.type === "created" && (c.objectType?.endsWith("::package::UpgradeCap") ?? false));
 		const hydratedObjectChanges = yield* hydrateCreatedObjects(inputs.sdk, objectChanges);
 		return {
-			digest: txOk.digest,
+			digest,
 			packageId: published?.objectId ?? "",
 			publisher: inputs.account.address,
 			...upgradeCap?.objectId !== void 0 ? { upgradeCapId: upgradeCap.objectId } : {},
 			objectChanges: hydratedObjectChanges
 		};
-	}).pipe(Effect.withSpan("package.publish-tx", { attributes: { "package.publish.packageName": packageName } })),
-	waitForReady: (packageId) => Effect.tryPromise({
-		try: async () => {
-			try {
-				await inputs.sdk.core.getObject({ objectId: packageId });
-			} catch {}
-		},
-		catch: (cause) => publishError("parse", {
-			sourcePath: "<wait-for-ready>",
-			packageName: packageId,
-			message: `waitForReady(${packageId}) failed`,
-			cause
-		})
-	}).pipe(Effect.withSpan("package.wait-for-ready", { attributes: { "package.publish.packageId": packageId } }))
+	}).pipe(Effect.withSpan("devstack.plugin.package.publish-tx", { attributes: { [PackageSpans.publish.packageName]: packageName } })),
+	postPublishReadyHint: (packageId) => Effect.tryPromise(() => inputs.sdk.core.getObject({ objectId: packageId })).pipe(Effect.asVoid, Effect.catch((cause) => Effect.logDebug("package: post-publish ready-hint read failed").pipe(Effect.annotateLogs({
+		packageId,
+		cause: String(cause)
+	}))), Effect.withSpan("devstack.plugin.package.post-publish-ready-hint", { attributes: { [PackageSpans.publish.packageId]: packageId } }))
 });
 //#endregion
 export { makePublishExecutor };

package/dist/plugins/package/publish-executor.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"publish-executor.mjs","names":[],"sources":["../../../src/plugins/package/publish-executor.ts"],"sourcesContent":["// Concrete `PublishExecutor` — wires the Move build, publish-tx\n// builder, and post-publish ready-probe over (a) the resolved\n// `SuiClient` from the Sui dependency and (b) the publisher account's signer\n// from the account dependency.\n//\n// Architecture: the executor is a small adapter — `mode-local.ts`\n// owns the 5-phase produce body (scrub → build → publish-tx → wait-\n// for-index → parse); this file just satisfies the `PublishExecutor`\n// interface by:\n//\n//   1. Delegating `build` to `runMoveBuild` (the existing path-(a)/\n//      path-(b)/path-(c) dispatcher in `build.ts`).\n//   2. Constructing a `Transaction.publish({modules, dependencies})`\n//      for `publishTx`, serialising via `tx.build({ client })`,\n//      signing/executing inside the publisher account's transaction\n//      critical section, and projecting the response to a\n//      `LocalPackagePublishOutput`.\n//   3. Wrapping `sdk.core.waitForTransaction({ digest })` for\n//      `waitForReady` — the SDK already retries / waits for index\n//      visibility internally.\n//\n// Errors:\n//   - Each method maps its concrete failure → a typed `PublishError`\n//     whose `phase:` matches the produce-step taxonomy\n//     (`build` / `publish-tx` / `parse`).\n//   - Account sign failures roll into `publish-tx` with cause-chain\n//     preserved; the cascade formatter unwraps them.\n\nimport { Effect, type Scope } from 'effect';\n\nimport { Transaction } from '@mysten/sui/transactions';\n\nimport type { AccountValue, TxResult } from '../account/service.ts';\nimport type { ContainerRuntime, ImageRef } from '../../contracts/container-runtime.ts';\nimport type { ChainId } from '../../substrate/brand.ts';\nimport { buildForkImpersonationTransactionBytes } from '../sui/fork-transaction.ts';\nimport { runMoveBuild, type BuildOutput } from './build.ts';\nimport type { LocalPackagePublishOutput, PackagePublishObjectChange } from './publish-output.ts';\nimport { publishError, type PublishError } from './errors.ts';\nimport type { PublishExecutor } from './mode-local.ts';\nimport type { SuiSdkShim } from '../sui/chain-probe.ts';\n\nconst shouldHydrateCreatedObject = (change: PackagePublishObjectChange): boolean =>\n\tchange.type === 'created' &&\n\tchange.objectId !== undefined &&\n\tchange.objectType !== undefined &&\n\t(change.objectType.includes('::coin::TreasuryCap<') ||\n\t\tchange.objectType.includes('::coin::CoinMetadata<') ||\n\t\tchange.objectType.includes('::coin_registry::Currency<'));\n\nconst projectObjectPayload = (raw: unknown): unknown => {\n\tif (raw !== null && typeof raw === 'object' && 'object' in raw) {\n\t\treturn (raw as { readonly object?: unknown }).object;\n\t}\n\treturn raw;\n};\n\nconst projectHydratedObjectFields = (\n\traw: unknown,\n): Pick<PackagePublishObjectChange, 'owner' | 'json'> => {\n\tconst object = projectObjectPayload(raw);\n\tif (object === null || typeof object !== 'object') return {};\n\tconst payload = object as { readonly owner?: unknown; readonly json?: unknown };\n\treturn {\n\t\t...(payload.owner === undefined ? {} : { owner: payload.owner }),\n\t\t...(payload.json === undefined ? {} : { json: payload.json }),\n\t};\n};\n\nconst hydrateCreatedObject = (\n\tsdk: SuiSdkShim,\n\tchange: PackagePublishObjectChange,\n): Effect.Effect<PackagePublishObjectChange> => {\n\tif (!shouldHydrateCreatedObject(change) || change.objectId === undefined) {\n\t\treturn Effect.succeed(change);\n\t}\n\treturn Effect.tryPromise({\n\t\ttry: () =>\n\t\t\tsdk.core.getObject({\n\t\t\t\tobjectId: change.objectId!,\n\t\t\t\tinclude: { json: true },\n\t\t\t}),\n\t\tcatch: () => null,\n\t}).pipe(\n\t\tEffect.map((raw) => ({\n\t\t\t...change,\n\t\t\t...(raw === null ? {} : projectHydratedObjectFields(raw)),\n\t\t})),\n\t\tEffect.catch(() => Effect.succeed(change)),\n\t);\n};\n\nconst hydrateCreatedObjects = (\n\tsdk: SuiSdkShim,\n\tchanges: ReadonlyArray<PackagePublishObjectChange>,\n): Effect.Effect<ReadonlyArray<PackagePublishObjectChange>> =>\n\tEffect.forEach(changes, (change) => hydrateCreatedObject(sdk, change), {\n\t\tconcurrency: 'unbounded',\n\t});\n\nconst rawEnvelopeFromAccountTx = (tx: TxResult): unknown => {\n\tconst objectTypes: Record<string, string> = {};\n\tconst changedObjects: Array<{\n\t\treadonly objectId: string;\n\t\treadonly outputState?: string;\n\t\treadonly idOperation?: string;\n\t}> = [];\n\tfor (const change of tx.objectChanges) {\n\t\tif (typeof change !== 'object' || change === null) continue;\n\t\tconst objectId = (change as { readonly objectId?: unknown }).objectId;\n\t\tif (typeof objectId !== 'string') continue;\n\t\tconst objectType = (change as { readonly objectType?: unknown }).objectType;\n\t\tif (typeof objectType === 'string') objectTypes[objectId] = objectType;\n\t\tconst type = (change as { readonly type?: unknown }).type;\n\t\tconst outputState = (change as { readonly outputState?: unknown }).outputState;\n\t\tconst idOperation = (change as { readonly idOperation?: unknown }).idOperation;\n\t\tconst entry: {\n\t\t\tobjectId: string;\n\t\t\toutputState?: string;\n\t\t\tidOperation?: string;\n\t\t} = { objectId };\n\t\tif (typeof outputState === 'string') {\n\t\t\tentry.outputState = outputState;\n\t\t} else if (type === 'published') {\n\t\t\tentry.outputState = 'PackageWrite';\n\t\t} else if (type === 'created' || type === 'mutated') {\n\t\t\tentry.outputState = 'ObjectWrite';\n\t\t}\n\t\tif (typeof idOperation === 'string') {\n\t\t\tentry.idOperation = idOperation;\n\t\t} else if (type === 'created' || type === 'published') {\n\t\t\tentry.idOperation = 'Created';\n\t\t} else if (type === 'mutated') {\n\t\t\tentry.idOperation = 'None';\n\t\t}\n\t\tchangedObjects.push(entry);\n\t}\n\treturn {\n\t\t$kind: 'Transaction',\n\t\tTransaction: {\n\t\t\tdigest: tx.digest,\n\t\t\teffects: { changedObjects },\n\t\t\tobjectTypes,\n\t\t},\n\t};\n};\n\n// ---------------------------------------------------------------------------\n// Per-acquire inputs threaded by the barrel\n// ---------------------------------------------------------------------------\n\nexport interface PublishExecutorInputs {\n\t/** The resolved SDK shim from the Sui dependency. Carries `core.executeTransaction`,\n\t *  `core.waitForTransaction`, plus the opaque `client` ref used by\n\t *  `Transaction.build({ client })`. */\n\treadonly sdk: SuiSdkShim;\n\t/** Publisher account — provides `signAndExecute` (which internally\n\t *  signs, submits via `executeTransaction`, and awaits finality via\n\t *  `waitForTransaction`). The address surfaces as the publisher on\n\t *  the output. */\n\treadonly account: AccountValue;\n\t/** Container runtime + image consumed by `runMoveBuild`'s path-(b)\n\t *  (`docker run --rm`). Absent → path-(c) (host CLI). */\n\treadonly runtime?: ContainerRuntime | undefined;\n\treadonly buildImage?: ImageRef | undefined;\n}\n\n// ---------------------------------------------------------------------------\n// Executor factory\n// ---------------------------------------------------------------------------\n\n/**\n * Construct a `PublishExecutor` from the barrel's resolved inputs.\n *\n * The factory exists so the barrel can compose the executor once per\n * acquire and hand the result to `acquireLocal`. Internally the three\n * methods are closures over the inputs; no per-call construction.\n */\nexport const makePublishExecutor = (inputs: PublishExecutorInputs): PublishExecutor => ({\n\tscrubsInsideContainer: inputs.runtime !== undefined && inputs.buildImage !== undefined,\n\n\t// Build step — delegate to the Move-build dispatcher in `build.ts`.\n\tbuild: ({\n\t\tsourcePath,\n\t\tpackageName,\n\t\tchainId,\n\t}: {\n\t\treadonly sourcePath: string;\n\t\treadonly packageName: string;\n\t\treadonly chainId: ChainId;\n\t}): Effect.Effect<BuildOutput, PublishError, Scope.Scope> =>\n\t\trunMoveBuild({\n\t\t\tsourcePath,\n\t\t\tpackageName,\n\t\t\tchainId,\n\t\t\t...(inputs.runtime !== undefined ? { runtime: inputs.runtime } : {}),\n\t\t\t...(inputs.buildImage !== undefined ? { buildImage: inputs.buildImage } : {}),\n\t\t}),\n\n\t// Publish step — build + sign + execute the publish tx.\n\tpublishTx: ({\n\t\tmodules,\n\t\tdependencies,\n\t\tsourcePath,\n\t\tpackageName,\n\t}: {\n\t\treadonly modules: ReadonlyArray<Uint8Array>;\n\t\treadonly dependencies: ReadonlyArray<string>;\n\t\treadonly sourcePath: string;\n\t\treadonly packageName: string;\n\t}): Effect.Effect<LocalPackagePublishOutput, PublishError, Scope.Scope> =>\n\t\tEffect.gen(function* () {\n\t\t\t// Build the publish transaction. `tx.publish` accepts\n\t\t\t// `modules: number[][] | string[]` — coerce Uint8Array → number[].\n\t\t\t// `dependencies` is the array of dependency package ids from the\n\t\t\t// build output.\n\t\t\t//\n\t\t\t// `tx.publish` RETURNS the `UpgradeCap` (a value of `package::\n\t\t\t// UpgradeCap` — `key + store`, NO `drop`). The Move VM refuses\n\t\t\t// transactions that leave such values unused\n\t\t\t// (`UnusedValueWithoutDrop`); we MUST transfer the cap to a\n\t\t\t// concrete owner. Convention (matches v3 + dev-wallet's\n\t\t\t// MintNFT demo): transfer to the publisher account so the\n\t\t\t// stack-owner retains upgrade authority.\n\t\t\tconst tx = new Transaction();\n\t\t\ttx.setSender(inputs.account.address);\n\t\t\tconst upgradeCapArg = tx.publish({\n\t\t\t\tmodules: modules.map((m) => Array.from(m)),\n\t\t\t\tdependencies: [...dependencies],\n\t\t\t});\n\t\t\ttx.transferObjects([upgradeCapArg], inputs.account.address);\n\n\t\t\tconst sdkClient = inputs.sdk.client as {\n\t\t\t\treadonly executeTransaction: (args: {\n\t\t\t\t\treadonly transaction: Uint8Array;\n\t\t\t\t\treadonly signatures: ReadonlyArray<string>;\n\t\t\t\t\treadonly include?: {\n\t\t\t\t\t\treadonly effects?: boolean;\n\t\t\t\t\t\treadonly objectTypes?: boolean;\n\t\t\t\t\t};\n\t\t\t\t}) => Promise<unknown>;\n\t\t\t\treadonly waitForTransaction: (args: {\n\t\t\t\t\treadonly digest: string;\n\t\t\t\t\treadonly include?: { readonly effects?: boolean };\n\t\t\t\t\treadonly timeout?: number;\n\t\t\t\t}) => Promise<unknown>;\n\t\t\t};\n\n\t\t\tconst rawResult = yield* inputs.account.withTransactionSigner((lockedSigner) =>\n\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\t// Serialise while the account lease is held. Real signers use the SDK resolver;\n\t\t\t\t\t// fork impersonation must build offline with explicit gas fields because the\n\t\t\t\t\t// fork binary does not support the normal gas-selection simulation path.\n\t\t\t\t\tconst txBytes =\n\t\t\t\t\t\tinputs.account.source === 'impersonate'\n\t\t\t\t\t\t\t? yield* buildForkImpersonationTransactionBytes(\n\t\t\t\t\t\t\t\t\ttx,\n\t\t\t\t\t\t\t\t\tinputs.account.address,\n\t\t\t\t\t\t\t\t\tinputs.sdk.core,\n\t\t\t\t\t\t\t\t).pipe(\n\t\t\t\t\t\t\t\t\tEffect.mapError(\n\t\t\t\t\t\t\t\t\t\t(cause): PublishError =>\n\t\t\t\t\t\t\t\t\t\t\tpublishError('publish-tx', {\n\t\t\t\t\t\t\t\t\t\t\t\tsourcePath,\n\t\t\t\t\t\t\t\t\t\t\t\tpackageName,\n\t\t\t\t\t\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t\t\t\t\t\t`Fork impersonation Transaction.build failed for package '${packageName}': ` +\n\t\t\t\t\t\t\t\t\t\t\t\t\tcause.message,\n\t\t\t\t\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t: yield* Effect.tryPromise({\n\t\t\t\t\t\t\t\t\ttry: () =>\n\t\t\t\t\t\t\t\t\t\ttx.build({\n\t\t\t\t\t\t\t\t\t\t\tclient: inputs.sdk.client as Parameters<typeof tx.build>[0] extends\n\t\t\t\t\t\t\t\t\t\t\t\t| { client?: infer C }\n\t\t\t\t\t\t\t\t\t\t\t\t| undefined\n\t\t\t\t\t\t\t\t\t\t\t\t? C\n\t\t\t\t\t\t\t\t\t\t\t\t: never,\n\t\t\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t\t\tcatch: (cause): PublishError =>\n\t\t\t\t\t\t\t\t\t\tpublishError('publish-tx', {\n\t\t\t\t\t\t\t\t\t\t\tsourcePath,\n\t\t\t\t\t\t\t\t\t\t\tpackageName,\n\t\t\t\t\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t\t\t\t\t`Transaction.build failed for package '${packageName}': ` +\n\t\t\t\t\t\t\t\t\t\t\t\t(cause instanceof Error ? cause.message : String(cause)),\n\t\t\t\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t\t});\n\n\t\t\t\t\tif (inputs.account.source === 'impersonate') {\n\t\t\t\t\t\tconst result = yield* lockedSigner.signAndExecute(txBytes).pipe(\n\t\t\t\t\t\t\tEffect.mapError(\n\t\t\t\t\t\t\t\t(cause): PublishError =>\n\t\t\t\t\t\t\t\t\tpublishError('publish-tx', {\n\t\t\t\t\t\t\t\t\t\tsourcePath,\n\t\t\t\t\t\t\t\t\t\tpackageName,\n\t\t\t\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t\t\t\t`account.signAndExecute failed for publisher '${inputs.account.name}' ` +\n\t\t\t\t\t\t\t\t\t\t\t`(address=${inputs.account.address}): ${\n\t\t\t\t\t\t\t\t\t\t\t\tcause instanceof Error ? cause.message : String(cause)\n\t\t\t\t\t\t\t\t\t\t\t}`,\n\t\t\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t);\n\t\t\t\t\t\treturn rawEnvelopeFromAccountTx(result);\n\t\t\t\t\t}\n\n\t\t\t\t\tconst signed = yield* lockedSigner.signTransaction(txBytes).pipe(\n\t\t\t\t\t\tEffect.mapError(\n\t\t\t\t\t\t\t(cause): PublishError =>\n\t\t\t\t\t\t\t\tpublishError('publish-tx', {\n\t\t\t\t\t\t\t\t\tsourcePath,\n\t\t\t\t\t\t\t\t\tpackageName,\n\t\t\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t\t\t`account.signTransaction failed for publisher '${inputs.account.name}' ` +\n\t\t\t\t\t\t\t\t\t\t`(address=${inputs.account.address}): ${\n\t\t\t\t\t\t\t\t\t\t\tcause instanceof Error ? cause.message : String(cause)\n\t\t\t\t\t\t\t\t\t\t}`,\n\t\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\n\t\t\t\t\tconst raw = yield* Effect.tryPromise({\n\t\t\t\t\t\ttry: () =>\n\t\t\t\t\t\t\tsdkClient.executeTransaction({\n\t\t\t\t\t\t\t\ttransaction: txBytes,\n\t\t\t\t\t\t\t\tsignatures: [signed.signature],\n\t\t\t\t\t\t\t\t// Include flags drive readMask paths in the SDK's\n\t\t\t\t\t\t\t\t// `executeTransaction` (see grpc/core.mjs). Effects\n\t\t\t\t\t\t\t\t// gives us `changedObjects` (PackageWrite + Created\n\t\t\t\t\t\t\t\t// upgrade cap); objectTypes maps changed ids →\n\t\t\t\t\t\t\t\t// fully-qualified type strings so the UpgradeCap is\n\t\t\t\t\t\t\t\t// identifiable unambiguously.\n\t\t\t\t\t\t\t\tinclude: { effects: true, objectTypes: true },\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\tcatch: (cause): PublishError =>\n\t\t\t\t\t\t\tpublishError('publish-tx', {\n\t\t\t\t\t\t\t\tsourcePath,\n\t\t\t\t\t\t\t\tpackageName,\n\t\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t\t`executeTransaction failed for publisher '${inputs.account.name}': ` +\n\t\t\t\t\t\t\t\t\t(cause instanceof Error ? cause.message : String(cause)),\n\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t});\n\n\t\t\t\t\tconst envelope = raw as {\n\t\t\t\t\t\treadonly Transaction?: { readonly digest?: string };\n\t\t\t\t\t\treadonly FailedTransaction?: { readonly digest?: string };\n\t\t\t\t\t};\n\t\t\t\t\tconst digest = envelope.Transaction?.digest ?? envelope.FailedTransaction?.digest;\n\t\t\t\t\tif (digest !== undefined) {\n\t\t\t\t\t\tyield* Effect.tryPromise({\n\t\t\t\t\t\t\ttry: () =>\n\t\t\t\t\t\t\t\tsdkClient.waitForTransaction({\n\t\t\t\t\t\t\t\t\tdigest,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\tcatch: (cause): PublishError =>\n\t\t\t\t\t\t\t\tpublishError('publish-tx', {\n\t\t\t\t\t\t\t\t\tsourcePath,\n\t\t\t\t\t\t\t\t\tpackageName,\n\t\t\t\t\t\t\t\t\tmessage: `waitForTransaction(${digest}) failed`,\n\t\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t});\n\t\t\t\t\t}\n\t\t\t\t\treturn raw;\n\t\t\t\t}),\n\t\t\t);\n\n\t\t\t// Project the SDK's `TransactionResult` envelope to the\n\t\t\t// output shape. On `$kind: FailedTransaction` we raise a\n\t\t\t// publish-tx error; on the success branch we walk\n\t\t\t// `effects.changedObjects` for the published package id and\n\t\t\t// the upgrade cap.\n\t\t\t//\n\t\t\t// changedObjects entries are flat: `{objectId, inputState,\n\t\t\t// outputState, idOperation, ...}` — `outputState` is a\n\t\t\t// string literal (`'PackageWrite'` | `'ObjectWrite'` |\n\t\t\t// `'DoesNotExist'`), `idOperation` is a string literal\n\t\t\t// (`'Created'` | `'Deleted'` | `'None'`).\n\t\t\tconst env = rawResult as {\n\t\t\t\treadonly $kind?: 'Transaction' | 'FailedTransaction';\n\t\t\t\treadonly Transaction?: {\n\t\t\t\t\treadonly digest?: string;\n\t\t\t\t\treadonly status?: { readonly success?: boolean; readonly error?: string };\n\t\t\t\t\treadonly effects?: {\n\t\t\t\t\t\treadonly changedObjects?: ReadonlyArray<{\n\t\t\t\t\t\t\treadonly objectId?: string;\n\t\t\t\t\t\t\treadonly outputState?: string;\n\t\t\t\t\t\t\treadonly idOperation?: string;\n\t\t\t\t\t\t}>;\n\t\t\t\t\t};\n\t\t\t\t\treadonly objectTypes?: Readonly<Record<string, string>>;\n\t\t\t\t};\n\t\t\t\treadonly FailedTransaction?: {\n\t\t\t\t\treadonly digest?: string;\n\t\t\t\t\treadonly status?: { readonly error?: string };\n\t\t\t\t};\n\t\t\t};\n\t\t\tif (env.$kind === 'FailedTransaction') {\n\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\tpublishError('publish-tx', {\n\t\t\t\t\t\tsourcePath,\n\t\t\t\t\t\tpackageName,\n\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t`executeTransaction returned FailedTransaction (digest=${env.FailedTransaction?.digest ?? '<unknown>'}): ` +\n\t\t\t\t\t\t\t(env.FailedTransaction?.status?.error ?? '<no error>'),\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst txOk = env.Transaction;\n\t\t\tif (txOk?.digest === undefined) {\n\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\tpublishError('publish-tx', {\n\t\t\t\t\t\tsourcePath,\n\t\t\t\t\t\tpackageName,\n\t\t\t\t\t\tmessage: `executeTransaction returned no digest. Raw=${JSON.stringify(rawResult).slice(0, 300)}`,\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tconst objectChanges: Array<PackagePublishObjectChange> = [];\n\t\t\tconst objectTypes = txOk.objectTypes ?? {};\n\t\t\tfor (const ch of txOk.effects?.changedObjects ?? []) {\n\t\t\t\tif (!ch.objectId) continue;\n\t\t\t\tconst objectType = objectTypes[ch.objectId];\n\t\t\t\tif (ch.outputState === 'PackageWrite') {\n\t\t\t\t\tobjectChanges.push({\n\t\t\t\t\t\ttype: 'published',\n\t\t\t\t\t\tobjectId: ch.objectId,\n\t\t\t\t\t\t...(objectType !== undefined ? { objectType } : {}),\n\t\t\t\t\t});\n\t\t\t\t} else if (ch.idOperation === 'Created') {\n\t\t\t\t\tobjectChanges.push({\n\t\t\t\t\t\ttype: 'created',\n\t\t\t\t\t\tobjectId: ch.objectId,\n\t\t\t\t\t\t...(objectType !== undefined ? { objectType } : {}),\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tconst published = objectChanges.find((c) => c.type === 'published');\n\t\t\tconst upgradeCap = objectChanges.find(\n\t\t\t\t(c) => c.type === 'created' && (c.objectType?.endsWith('::package::UpgradeCap') ?? false),\n\t\t\t);\n\t\t\tconst hydratedObjectChanges = yield* hydrateCreatedObjects(inputs.sdk, objectChanges);\n\n\t\t\tconst output: LocalPackagePublishOutput = {\n\t\t\t\tdigest: txOk.digest,\n\t\t\t\tpackageId: published?.objectId ?? '',\n\t\t\t\tpublisher: inputs.account.address,\n\t\t\t\t...(upgradeCap?.objectId !== undefined ? { upgradeCapId: upgradeCap.objectId } : {}),\n\t\t\t\tobjectChanges: hydratedObjectChanges,\n\t\t\t};\n\n\t\t\treturn output;\n\t\t}).pipe(\n\t\t\tEffect.withSpan('package.publish-tx', {\n\t\t\t\tattributes: { 'package.publish.packageName': packageName },\n\t\t\t}),\n\t\t),\n\n\t// Wait-for-index step — post-publish ready-probe. The SDK's\n\t// `waitForTransaction` already polls fullnode index visibility\n\t// internally; we wrap it once with a typed PublishError on failure.\n\twaitForReady: (packageId: string): Effect.Effect<void, PublishError, Scope.Scope> =>\n\t\tEffect.tryPromise({\n\t\t\ttry: async () => {\n\t\t\t\t// The publish account's `signAndExecute` already calls\n\t\t\t\t// `waitForTransaction(digest)` before returning; the read\n\t\t\t\t// on `packageId` here is a second-layer probe to catch the\n\t\t\t\t// \"tx written but object not yet queryable\" race the\n\t\t\t\t// chain-probe verify step also guards against. Falls\n\t\t\t\t// through silently — if the follow-up `getObject` succeeds\n\t\t\t\t// the index is ready, else the next verify cycle picks it\n\t\t\t\t// up.\n\t\t\t\ttry {\n\t\t\t\t\tawait inputs.sdk.core.getObject({ objectId: packageId });\n\t\t\t\t} catch {\n\t\t\t\t\t// A stale object read here is non-fatal — the next\n\t\t\t\t\t// produce phase (parse) only inspects the output.\n\t\t\t\t}\n\t\t\t},\n\t\t\tcatch: (cause): PublishError =>\n\t\t\t\tpublishError('parse', {\n\t\t\t\t\tsourcePath: '<wait-for-ready>',\n\t\t\t\t\tpackageName: packageId,\n\t\t\t\t\tmessage: `waitForReady(${packageId}) failed`,\n\t\t\t\t\tcause,\n\t\t\t\t}),\n\t\t}).pipe(\n\t\t\tEffect.withSpan('package.wait-for-ready', {\n\t\t\t\tattributes: { 'package.publish.packageId': packageId },\n\t\t\t}),\n\t\t),\n});\n"],"mappings":";;;;;;AA0CA,MAAM,8BAA8B,WACnC,OAAO,SAAS,aAChB,OAAO,aAAa,KAAA,KACpB,OAAO,eAAe,KAAA,MACrB,OAAO,WAAW,SAAS,uBAAuB,IAClD,OAAO,WAAW,SAAS,wBAAwB,IACnD,OAAO,WAAW,SAAS,6BAA6B;AAE1D,MAAM,wBAAwB,QAA0B;AACvD,KAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,YAAY,IAC1D,QAAQ,IAAsC;AAE/C,QAAO;;AAGR,MAAM,+BACL,QACwD;CACxD,MAAM,SAAS,qBAAqB,IAAI;AACxC,KAAI,WAAW,QAAQ,OAAO,WAAW,SAAU,QAAO,EAAE;CAC5D,MAAM,UAAU;AAChB,QAAO;EACN,GAAI,QAAQ,UAAU,KAAA,IAAY,EAAE,GAAG,EAAE,OAAO,QAAQ,OAAO;EAC/D,GAAI,QAAQ,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,QAAQ,MAAM;EAC5D;;AAGF,MAAM,wBACL,KACA,WAC+C;AAC/C,KAAI,CAAC,2BAA2B,OAAO,IAAI,OAAO,aAAa,KAAA,EAC9D,QAAO,OAAO,QAAQ,OAAO;AAE9B,QAAO,OAAO,WAAW;EACxB,WACC,IAAI,KAAK,UAAU;GAClB,UAAU,OAAO;GACjB,SAAS,EAAE,MAAM,MAAM;GACvB,CAAC;EACH,aAAa;EACb,CAAC,CAAC,KACF,OAAO,KAAK,SAAS;EACpB,GAAG;EACH,GAAI,QAAQ,OAAO,EAAE,GAAG,4BAA4B,IAAI;EACxD,EAAE,EACH,OAAO,YAAY,OAAO,QAAQ,OAAO,CAAC,CAC1C;;AAGF,MAAM,yBACL,KACA,YAEA,OAAO,QAAQ,UAAU,WAAW,qBAAqB,KAAK,OAAO,EAAE,EACtE,aAAa,aACb,CAAC;AAEH,MAAM,4BAA4B,OAA0B;CAC3D,MAAM,cAAsC,EAAE;CAC9C,MAAM,iBAID,EAAE;AACP,MAAK,MAAM,UAAU,GAAG,eAAe;AACtC,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM;EACnD,MAAM,WAAY,OAA2C;AAC7D,MAAI,OAAO,aAAa,SAAU;EAClC,MAAM,aAAc,OAA6C;AACjE,MAAI,OAAO,eAAe,SAAU,aAAY,YAAY;EAC5D,MAAM,OAAQ,OAAuC;EACrD,MAAM,cAAe,OAA8C;EACnE,MAAM,cAAe,OAA8C;EACnE,MAAM,QAIF,EAAE,UAAU;AAChB,MAAI,OAAO,gBAAgB,SAC1B,OAAM,cAAc;WACV,SAAS,YACnB,OAAM,cAAc;WACV,SAAS,aAAa,SAAS,UACzC,OAAM,cAAc;AAErB,MAAI,OAAO,gBAAgB,SAC1B,OAAM,cAAc;WACV,SAAS,aAAa,SAAS,YACzC,OAAM,cAAc;WACV,SAAS,UACnB,OAAM,cAAc;AAErB,iBAAe,KAAK,MAAM;;AAE3B,QAAO;EACN,OAAO;EACP,aAAa;GACZ,QAAQ,GAAG;GACX,SAAS,EAAE,gBAAgB;GAC3B;GACA;EACD;;;;;;;;;AAkCF,MAAa,uBAAuB,YAAoD;CACvF,uBAAuB,OAAO,YAAY,KAAA,KAAa,OAAO,eAAe,KAAA;CAG7E,QAAQ,EACP,YACA,aACA,cAMA,aAAa;EACZ;EACA;EACA;EACA,GAAI,OAAO,YAAY,KAAA,IAAY,EAAE,SAAS,OAAO,SAAS,GAAG,EAAE;EACnE,GAAI,OAAO,eAAe,KAAA,IAAY,EAAE,YAAY,OAAO,YAAY,GAAG,EAAE;EAC5E,CAAC;CAGH,YAAY,EACX,SACA,cACA,YACA,kBAOA,OAAO,IAAI,aAAa;EAavB,MAAM,KAAK,IAAI,aAAa;AAC5B,KAAG,UAAU,OAAO,QAAQ,QAAQ;EACpC,MAAM,gBAAgB,GAAG,QAAQ;GAChC,SAAS,QAAQ,KAAK,MAAM,MAAM,KAAK,EAAE,CAAC;GAC1C,cAAc,CAAC,GAAG,aAAa;GAC/B,CAAC;AACF,KAAG,gBAAgB,CAAC,cAAc,EAAE,OAAO,QAAQ,QAAQ;EAE3D,MAAM,YAAY,OAAO,IAAI;EAgB7B,MAAM,YAAY,OAAO,OAAO,QAAQ,uBAAuB,iBAC9D,OAAO,IAAI,aAAa;GAIvB,MAAM,UACL,OAAO,QAAQ,WAAW,gBACvB,OAAO,uCACP,IACA,OAAO,QAAQ,SACf,OAAO,IAAI,KACX,CAAC,KACD,OAAO,UACL,UACA,aAAa,cAAc;IAC1B;IACA;IACA,SACC,4DAA4D,YAAY,OACxE,MAAM;IACP;IACA,CAAC,CACH,CACD,GACA,OAAO,OAAO,WAAW;IACzB,WACC,GAAG,MAAM,EACR,QAAQ,OAAO,IAAI,QAKnB,CAAC;IACH,QAAQ,UACP,aAAa,cAAc;KAC1B;KACA;KACA,SACC,yCAAyC,YAAY,QACpD,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;KACxD;KACA,CAAC;IACH,CAAC;AAEL,OAAI,OAAO,QAAQ,WAAW,cAgB7B,QAAO,yBAAyB,OAfV,aAAa,eAAe,QAAQ,CAAC,KAC1D,OAAO,UACL,UACA,aAAa,cAAc;IAC1B;IACA;IACA,SACC,gDAAgD,OAAO,QAAQ,KAAK,aACxD,OAAO,QAAQ,QAAQ,KAClC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;IAExD;IACA,CAAC,CACH,CACD,CACsC;GAGxC,MAAM,SAAS,OAAO,aAAa,gBAAgB,QAAQ,CAAC,KAC3D,OAAO,UACL,UACA,aAAa,cAAc;IAC1B;IACA;IACA,SACC,iDAAiD,OAAO,QAAQ,KAAK,aACzD,OAAO,QAAQ,QAAQ,KAClC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;IAExD;IACA,CAAC,CACH,CACD;GAED,MAAM,MAAM,OAAO,OAAO,WAAW;IACpC,WACC,UAAU,mBAAmB;KAC5B,aAAa;KACb,YAAY,CAAC,OAAO,UAAU;KAO9B,SAAS;MAAE,SAAS;MAAM,aAAa;MAAM;KAC7C,CAAC;IACH,QAAQ,UACP,aAAa,cAAc;KAC1B;KACA;KACA,SACC,4CAA4C,OAAO,QAAQ,KAAK,QAC/D,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;KACxD;KACA,CAAC;IACH,CAAC;GAEF,MAAM,WAAW;GAIjB,MAAM,SAAS,SAAS,aAAa,UAAU,SAAS,mBAAmB;AAC3E,OAAI,WAAW,KAAA,EACd,QAAO,OAAO,WAAW;IACxB,WACC,UAAU,mBAAmB,EAC5B,QACA,CAAC;IACH,QAAQ,UACP,aAAa,cAAc;KAC1B;KACA;KACA,SAAS,sBAAsB,OAAO;KACtC;KACA,CAAC;IACH,CAAC;AAEH,UAAO;IACN,CACF;EAaD,MAAM,MAAM;AAmBZ,MAAI,IAAI,UAAU,oBACjB,QAAO,OAAO,OAAO,KACpB,aAAa,cAAc;GAC1B;GACA;GACA,SACC,yDAAyD,IAAI,mBAAmB,UAAU,YAAY,QACrG,IAAI,mBAAmB,QAAQ,SAAS;GAC1C,CAAC,CACF;EAEF,MAAM,OAAO,IAAI;AACjB,MAAI,MAAM,WAAW,KAAA,EACpB,QAAO,OAAO,OAAO,KACpB,aAAa,cAAc;GAC1B;GACA;GACA,SAAS,8CAA8C,KAAK,UAAU,UAAU,CAAC,MAAM,GAAG,IAAI;GAC9F,CAAC,CACF;EAGF,MAAM,gBAAmD,EAAE;EAC3D,MAAM,cAAc,KAAK,eAAe,EAAE;AAC1C,OAAK,MAAM,MAAM,KAAK,SAAS,kBAAkB,EAAE,EAAE;AACpD,OAAI,CAAC,GAAG,SAAU;GAClB,MAAM,aAAa,YAAY,GAAG;AAClC,OAAI,GAAG,gBAAgB,eACtB,eAAc,KAAK;IAClB,MAAM;IACN,UAAU,GAAG;IACb,GAAI,eAAe,KAAA,IAAY,EAAE,YAAY,GAAG,EAAE;IAClD,CAAC;YACQ,GAAG,gBAAgB,UAC7B,eAAc,KAAK;IAClB,MAAM;IACN,UAAU,GAAG;IACb,GAAI,eAAe,KAAA,IAAY,EAAE,YAAY,GAAG,EAAE;IAClD,CAAC;;EAIJ,MAAM,YAAY,cAAc,MAAM,MAAM,EAAE,SAAS,YAAY;EACnE,MAAM,aAAa,cAAc,MAC/B,MAAM,EAAE,SAAS,cAAc,EAAE,YAAY,SAAS,wBAAwB,IAAI,OACnF;EACD,MAAM,wBAAwB,OAAO,sBAAsB,OAAO,KAAK,cAAc;AAUrF,SAAO;GAPN,QAAQ,KAAK;GACb,WAAW,WAAW,YAAY;GAClC,WAAW,OAAO,QAAQ;GAC1B,GAAI,YAAY,aAAa,KAAA,IAAY,EAAE,cAAc,WAAW,UAAU,GAAG,EAAE;GACnF,eAAe;GAGH;GACZ,CAAC,KACF,OAAO,SAAS,sBAAsB,EACrC,YAAY,EAAE,+BAA+B,aAAa,EAC1D,CAAC,CACF;CAKF,eAAe,cACd,OAAO,WAAW;EACjB,KAAK,YAAY;AAShB,OAAI;AACH,UAAM,OAAO,IAAI,KAAK,UAAU,EAAE,UAAU,WAAW,CAAC;WACjD;;EAKT,QAAQ,UACP,aAAa,SAAS;GACrB,YAAY;GACZ,aAAa;GACb,SAAS,gBAAgB,UAAU;GACnC;GACA,CAAC;EACH,CAAC,CAAC,KACF,OAAO,SAAS,0BAA0B,EACzC,YAAY,EAAE,6BAA6B,WAAW,EACtD,CAAC,CACF;CACF"}
+{"version":3,"file":"publish-executor.mjs","names":[],"sources":["../../../src/plugins/package/publish-executor.ts"],"sourcesContent":["// Concrete `PublishExecutor` — wires the Move build, publish-tx\n// builder, and post-publish ready-probe over (a) the resolved\n// `SuiClient` from the Sui dependency and (b) the publisher account's signer\n// from the account dependency.\n//\n// Architecture: the executor is a small adapter — `mode-local.ts`\n// owns the 5-phase produce body (scrub → build → publish-tx → wait-\n// for-index → parse); this file just satisfies the `PublishExecutor`\n// interface by:\n//\n//   1. Delegating `build` to `runMoveBuild` (the existing path-(a)/\n//      path-(b)/path-(c) dispatcher in `build.ts`).\n//   2. Constructing a `Transaction.publish({modules, dependencies})`\n//      for `publishTx`, serialising via `tx.build({ client })`,\n//      signing/executing inside the publisher account's transaction\n//      critical section, and projecting the response to a\n//      `LocalPackagePublishOutput`.\n//   3. Wrapping `sdk.core.waitForTransaction({ digest })` for\n//      `postPublishReadyHint` — the SDK already retries / waits for\n//      index visibility internally. The probe is hint-only: transient\n//      `getObject` misses (cold index race) are intentionally\n//      swallowed because the publisher account's `signAndExecute` has\n//      already awaited `waitForTransaction(digest)`.\n//\n// Errors:\n//   - Each method maps its concrete failure → a typed `PublishError`\n//     whose `phase:` matches the produce-step taxonomy\n//     (`build` / `publish-tx` / `parse`).\n//   - Account sign failures roll into `publish-tx` with cause-chain\n//     preserved; the cascade formatter unwraps them.\n\nimport { Effect, type Scope } from 'effect';\n\nimport { Transaction } from '@mysten/sui/transactions';\n\nimport type { AccountValue, TxResult } from '../account/index.ts';\nimport type { ContainerRuntime, ImageRef } from '../../contracts/container-runtime.ts';\nimport type { ChainId } from '../../substrate/brand.ts';\nimport { formatUnknownError } from '../../substrate/runtime/format-unknown-error.ts';\nimport { formatExecutedFailure } from '../../substrate/runtime/sui-execute/index.ts';\nimport { signAndDispatch } from '../../substrate/runtime/sui-execute/sign-and-dispatch.ts';\nimport { buildForkImpersonationTransactionBytes } from '../sui/index.ts';\nimport { runMoveBuild, type BuildOutput } from './build.ts';\nimport type { LocalPackagePublishOutput, PackagePublishObjectChange } from './publish-output.ts';\nimport { publishError, type PublishError } from './errors.ts';\nimport type { PublishExecutor } from './mode-local.ts';\nimport { PackageSpans } from './spans.ts';\nimport type { SuiSdkShim } from '../sui/index.ts';\n\nconst shouldHydrateCreatedObject = (change: PackagePublishObjectChange): boolean =>\n\tchange.type === 'created' &&\n\tchange.objectId !== undefined &&\n\tchange.objectType !== undefined &&\n\t(change.objectType.includes('::coin::TreasuryCap<') ||\n\t\tchange.objectType.includes('::coin::CoinMetadata<') ||\n\t\tchange.objectType.includes('::coin_registry::Currency<'));\n\nconst projectObjectPayload = (raw: unknown): unknown => {\n\tif (raw !== null && typeof raw === 'object' && 'object' in raw) {\n\t\treturn (raw as { readonly object?: unknown }).object;\n\t}\n\treturn raw;\n};\n\nconst projectHydratedObjectFields = (\n\traw: unknown,\n): Pick<PackagePublishObjectChange, 'owner' | 'json'> => {\n\tconst object = projectObjectPayload(raw);\n\tif (object === null || typeof object !== 'object') return {};\n\tconst payload = object as { readonly owner?: unknown; readonly json?: unknown };\n\treturn {\n\t\t...(payload.owner === undefined ? {} : { owner: payload.owner }),\n\t\t...(payload.json === undefined ? {} : { json: payload.json }),\n\t};\n};\n\nconst hydrateCreatedObject = (\n\tsdk: SuiSdkShim,\n\tchange: PackagePublishObjectChange,\n): Effect.Effect<PackagePublishObjectChange> => {\n\tif (!shouldHydrateCreatedObject(change) || change.objectId === undefined) {\n\t\treturn Effect.succeed(change);\n\t}\n\tconst objectId = change.objectId;\n\treturn Effect.tryPromise({\n\t\ttry: () =>\n\t\t\tsdk.core.getObject({\n\t\t\t\tobjectId,\n\t\t\t\tinclude: { json: true },\n\t\t\t}),\n\t\tcatch: (cause) => cause,\n\t}).pipe(\n\t\tEffect.map((raw) => ({\n\t\t\t...change,\n\t\t\t...(raw === null ? {} : projectHydratedObjectFields(raw)),\n\t\t})),\n\t\t// Hydration is best-effort — a cold-cache `getObject` miss must\n\t\t// not fail the publish. Log at debug so the miss is visible (the\n\t\t// `tryPromise` catch wraps the original cause; cause-detail\n\t\t// extraction is non-trivial here, so we log the objectId — the\n\t\t// fact that this happened is the actionable signal).\n\t\tEffect.catch((cause) =>\n\t\t\tEffect.logDebug('package: hydrate-created-object cache miss').pipe(\n\t\t\t\tEffect.annotateLogs({ objectId, cause: String(cause) }),\n\t\t\t\tEffect.as(change),\n\t\t\t),\n\t\t),\n\t);\n};\n\nconst hydrateCreatedObjects = (\n\tsdk: SuiSdkShim,\n\tchanges: ReadonlyArray<PackagePublishObjectChange>,\n): Effect.Effect<ReadonlyArray<PackagePublishObjectChange>> =>\n\tEffect.forEach(changes, (change) => hydrateCreatedObject(sdk, change), {\n\t\tconcurrency: 'unbounded',\n\t});\n\n/** Project an account TxResult's flat `objectChanges` (`{type,\n *  objectId, objectType?, ...}`) into the publish-output\n *  `PackagePublishObjectChange[]` shape. The account plugin's\n *  projection already classifies entries by `type`\n *  (`published` for `outputState: 'PackageWrite'`, `created` for\n *  `idOperation: 'Created'`, `mutated` otherwise); we just narrow\n *  to the entries we care about (published + created) and drop the\n *  extras. */\nconst publishChangesFromTxResult = (tx: TxResult): ReadonlyArray<PackagePublishObjectChange> => {\n\tconst out: Array<PackagePublishObjectChange> = [];\n\tfor (const change of tx.objectChanges) {\n\t\tif (typeof change !== 'object' || change === null) continue;\n\t\tconst projected = change as {\n\t\t\treadonly type?: string;\n\t\t\treadonly objectId?: unknown;\n\t\t\treadonly objectType?: unknown;\n\t\t};\n\t\tif (typeof projected.objectId !== 'string') continue;\n\t\tif (projected.type !== 'published' && projected.type !== 'created') continue;\n\t\tconst objectType = typeof projected.objectType === 'string' ? projected.objectType : undefined;\n\t\tout.push({\n\t\t\ttype: projected.type,\n\t\t\tobjectId: projected.objectId,\n\t\t\t...(objectType !== undefined ? { objectType } : {}),\n\t\t});\n\t}\n\treturn out;\n};\n\n// ---------------------------------------------------------------------------\n// Per-acquire inputs threaded by the barrel\n// ---------------------------------------------------------------------------\n\nexport interface PublishExecutorInputs {\n\t/** The resolved SDK shim from the Sui dependency. Carries `core.executeTransaction`,\n\t *  `core.waitForTransaction`, plus the opaque `client` ref used by\n\t *  `Transaction.build({ client })`. */\n\treadonly sdk: SuiSdkShim;\n\t/** Publisher account — provides `signAndExecute` (which internally\n\t *  signs, submits via `executeTransaction`, and awaits finality via\n\t *  `waitForTransaction`). The address surfaces as the publisher on\n\t *  the output. */\n\treadonly account: AccountValue;\n\t/** Container runtime + image consumed by `runMoveBuild`'s path-(b)\n\t *  (`docker run --rm`). Absent → path-(c) (host CLI). */\n\treadonly runtime?: ContainerRuntime | undefined;\n\treadonly buildImage?: ImageRef | undefined;\n\t/** Fork mode — real signers (not just impersonate) must build offline\n\t *  with explicit gas, because the sui-fork binary has no\n\t *  `simulate_transaction` for the SDK's gas-estimating `tx.build`. */\n\treadonly forkMode?: boolean;\n}\n\n// ---------------------------------------------------------------------------\n// Executor factory\n// ---------------------------------------------------------------------------\n\n/**\n * Construct a `PublishExecutor` from the barrel's resolved inputs.\n *\n * The factory exists so the barrel can compose the executor once per\n * acquire and hand the result to `acquireLocal`. Internally the three\n * methods are closures over the inputs; no per-call construction.\n */\nexport const makePublishExecutor = (inputs: PublishExecutorInputs): PublishExecutor => ({\n\tscrubsInsideContainer: inputs.runtime !== undefined && inputs.buildImage !== undefined,\n\n\t// Build step — delegate to the Move-build dispatcher in `build.ts`.\n\tbuild: ({\n\t\tsourcePath,\n\t\tpackageName,\n\t\tchainId,\n\t}: {\n\t\treadonly sourcePath: string;\n\t\treadonly packageName: string;\n\t\treadonly chainId: ChainId;\n\t}): Effect.Effect<BuildOutput, PublishError, Scope.Scope> =>\n\t\trunMoveBuild({\n\t\t\tsourcePath,\n\t\t\tpackageName,\n\t\t\tchainId,\n\t\t\t...(inputs.runtime !== undefined ? { runtime: inputs.runtime } : {}),\n\t\t\t...(inputs.buildImage !== undefined ? { buildImage: inputs.buildImage } : {}),\n\t\t}),\n\n\t// Publish step — build + sign + execute the publish tx.\n\tpublishTx: ({\n\t\tmodules,\n\t\tdependencies,\n\t\tsourcePath,\n\t\tpackageName,\n\t}: {\n\t\treadonly modules: ReadonlyArray<Uint8Array>;\n\t\treadonly dependencies: ReadonlyArray<string>;\n\t\treadonly sourcePath: string;\n\t\treadonly packageName: string;\n\t}): Effect.Effect<LocalPackagePublishOutput, PublishError, Scope.Scope> =>\n\t\tEffect.gen(function* () {\n\t\t\t// Build the publish transaction. `tx.publish` accepts\n\t\t\t// `modules: number[][] | string[]` — coerce Uint8Array → number[].\n\t\t\t// `dependencies` is the array of dependency package ids from the\n\t\t\t// build output.\n\t\t\t//\n\t\t\t// `tx.publish` RETURNS the `UpgradeCap` (a value of `package::\n\t\t\t// UpgradeCap` — `key + store`, NO `drop`). The Move VM refuses\n\t\t\t// transactions that leave such values unused\n\t\t\t// (`UnusedValueWithoutDrop`); we MUST transfer the cap to a\n\t\t\t// concrete owner. Convention (matches v3 + dev-wallet's\n\t\t\t// MintNFT demo): transfer to the publisher account so the\n\t\t\t// stack-owner retains upgrade authority.\n\t\t\tconst tx = new Transaction();\n\t\t\ttx.setSender(inputs.account.address);\n\t\t\tconst upgradeCapArg = tx.publish({\n\t\t\t\tmodules: modules.map((m) => Array.from(m)),\n\t\t\t\tdependencies: [...dependencies],\n\t\t\t});\n\t\t\ttx.transferObjects([upgradeCapArg], inputs.account.address);\n\n\t\t\t// Both real-signer and impersonate paths route through the\n\t\t\t// account's `signAndExecute` (which signs, executes, waits,\n\t\t\t// and projects to the SDK-shaped `SignAndExecuteResult`\n\t\t\t// discriminated union). The impersonate path internally\n\t\t\t// hands off to `fork.impersonate`; the real-signer path\n\t\t\t// goes through the SDK directly. `signAndDispatch` compacts\n\t\t\t// the build → sign → execute → $kind dispatch boilerplate.\n\t\t\tconst { digest, objectChanges } = yield* signAndDispatch({\n\t\t\t\tsignerSource: inputs.account,\n\t\t\t\tbuildTxBytes: () =>\n\t\t\t\t\t// Serialise while the account lease is held. Non-fork real\n\t\t\t\t\t// signers use the SDK resolver. Fork mode (impersonate OR real\n\t\t\t\t\t// signer) must build offline with explicit gas fields: the\n\t\t\t\t\t// sui-fork binary has no simulate_transaction, so the SDK's\n\t\t\t\t\t// gas-estimating build path fails. The real-vs-empty-signature\n\t\t\t\t\t// split happens later in the account's signAndExecute.\n\t\t\t\t\tinputs.account.source === 'impersonate' || inputs.forkMode === true\n\t\t\t\t\t\t? buildForkImpersonationTransactionBytes(\n\t\t\t\t\t\t\t\ttx,\n\t\t\t\t\t\t\t\tinputs.account.address,\n\t\t\t\t\t\t\t\tinputs.sdk.core,\n\t\t\t\t\t\t\t).pipe(\n\t\t\t\t\t\t\t\tEffect.mapError(\n\t\t\t\t\t\t\t\t\t(cause): PublishError =>\n\t\t\t\t\t\t\t\t\t\tpublishError('publish-tx', {\n\t\t\t\t\t\t\t\t\t\t\tsourcePath,\n\t\t\t\t\t\t\t\t\t\t\tpackageName,\n\t\t\t\t\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t\t\t\t\t`Fork impersonation Transaction.build failed for package '${packageName}': ` +\n\t\t\t\t\t\t\t\t\t\t\t\tcause.message,\n\t\t\t\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t: Effect.tryPromise({\n\t\t\t\t\t\t\t\ttry: () => tx.build({ client: inputs.sdk.client }),\n\t\t\t\t\t\t\t\tcatch: (cause): PublishError =>\n\t\t\t\t\t\t\t\t\tpublishError('publish-tx', {\n\t\t\t\t\t\t\t\t\t\tsourcePath,\n\t\t\t\t\t\t\t\t\t\tpackageName,\n\t\t\t\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t\t\t\t`Transaction.build failed for package '${packageName}': ` +\n\t\t\t\t\t\t\t\t\t\t\t(formatUnknownError(cause)),\n\t\t\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t}),\n\t\t\t\tmapSignError: (cause): PublishError =>\n\t\t\t\t\tpublishError('publish-tx', {\n\t\t\t\t\t\tsourcePath,\n\t\t\t\t\t\tpackageName,\n\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t`account.signAndExecute failed for publisher '${inputs.account.name}' ` +\n\t\t\t\t\t\t\t`(address=${inputs.account.address}): ${\n\t\t\t\t\t\t\t\tformatUnknownError(cause)\n\t\t\t\t\t\t\t}`,\n\t\t\t\t\t\tcause,\n\t\t\t\t\t}),\n\t\t\t\tonFailed: (failure) =>\n\t\t\t\t\tEffect.fail(\n\t\t\t\t\t\tpublishError('publish-tx', {\n\t\t\t\t\t\t\tsourcePath,\n\t\t\t\t\t\t\tpackageName,\n\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t`executeTransaction returned FailedTransaction ` + formatExecutedFailure(failure),\n\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\tonSuccess: (txResult: TxResult) =>\n\t\t\t\t\tEffect.succeed({\n\t\t\t\t\t\tdigest: txResult.digest,\n\t\t\t\t\t\tobjectChanges: publishChangesFromTxResult(txResult),\n\t\t\t\t\t}),\n\t\t\t});\n\n\t\t\tconst published = objectChanges.find((c) => c.type === 'published');\n\t\t\tconst upgradeCap = objectChanges.find(\n\t\t\t\t(c) => c.type === 'created' && (c.objectType?.endsWith('::package::UpgradeCap') ?? false),\n\t\t\t);\n\t\t\tconst hydratedObjectChanges = yield* hydrateCreatedObjects(inputs.sdk, objectChanges);\n\n\t\t\tconst output: LocalPackagePublishOutput = {\n\t\t\t\tdigest,\n\t\t\t\tpackageId: published?.objectId ?? '',\n\t\t\t\tpublisher: inputs.account.address,\n\t\t\t\t...(upgradeCap?.objectId !== undefined ? { upgradeCapId: upgradeCap.objectId } : {}),\n\t\t\t\tobjectChanges: hydratedObjectChanges,\n\t\t\t};\n\n\t\t\treturn output;\n\t\t}).pipe(\n\t\t\tEffect.withSpan('devstack.plugin.package.publish-tx', {\n\t\t\t\tattributes: { [PackageSpans.publish.packageName]: packageName },\n\t\t\t}),\n\t\t),\n\n\t// Post-publish ready HINT — a best-effort second-layer probe. The publish\n\t// account's `signAndExecute` already calls `waitForTransaction(digest)`\n\t// before returning, so the read on `packageId` here only catches the\n\t// \"tx written but object not yet queryable\" race. It MUST NOT fail the\n\t// publish: a transient / not-yet-indexed read is expected. The failure is\n\t// logged at debug (§18) so the miss stays visible rather than silently\n\t// swallowed, then the hint succeeds regardless.\n\tpostPublishReadyHint: (packageId: string): Effect.Effect<void, PublishError, Scope.Scope> =>\n\t\tEffect.tryPromise(() => inputs.sdk.core.getObject({ objectId: packageId })).pipe(\n\t\t\tEffect.asVoid,\n\t\t\tEffect.catch((cause) =>\n\t\t\t\tEffect.logDebug('package: post-publish ready-hint read failed').pipe(\n\t\t\t\t\tEffect.annotateLogs({ packageId, cause: String(cause) }),\n\t\t\t\t),\n\t\t\t),\n\t\t\tEffect.withSpan('devstack.plugin.package.post-publish-ready-hint', {\n\t\t\t\tattributes: { [PackageSpans.publish.packageId]: packageId },\n\t\t\t}),\n\t\t),\n});\n"],"mappings":";;;;;;;;;;;AAiDA,MAAM,8BAA8B,WACnC,OAAO,SAAS,aAChB,OAAO,aAAa,KAAA,KACpB,OAAO,eAAe,KAAA,MACrB,OAAO,WAAW,SAAS,uBAAuB,IAClD,OAAO,WAAW,SAAS,wBAAwB,IACnD,OAAO,WAAW,SAAS,6BAA6B;AAE1D,MAAM,wBAAwB,QAA0B;AACvD,KAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,YAAY,IAC1D,QAAQ,IAAsC;AAE/C,QAAO;;AAGR,MAAM,+BACL,QACwD;CACxD,MAAM,SAAS,qBAAqB,IAAI;AACxC,KAAI,WAAW,QAAQ,OAAO,WAAW,SAAU,QAAO,EAAE;CAC5D,MAAM,UAAU;AAChB,QAAO;EACN,GAAI,QAAQ,UAAU,KAAA,IAAY,EAAE,GAAG,EAAE,OAAO,QAAQ,OAAO;EAC/D,GAAI,QAAQ,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,QAAQ,MAAM;EAC5D;;AAGF,MAAM,wBACL,KACA,WAC+C;AAC/C,KAAI,CAAC,2BAA2B,OAAO,IAAI,OAAO,aAAa,KAAA,EAC9D,QAAO,OAAO,QAAQ,OAAO;CAE9B,MAAM,WAAW,OAAO;AACxB,QAAO,OAAO,WAAW;EACxB,WACC,IAAI,KAAK,UAAU;GAClB;GACA,SAAS,EAAE,MAAM,MAAM;GACvB,CAAC;EACH,QAAQ,UAAU;EAClB,CAAC,CAAC,KACF,OAAO,KAAK,SAAS;EACpB,GAAG;EACH,GAAI,QAAQ,OAAO,EAAE,GAAG,4BAA4B,IAAI;EACxD,EAAE,EAMH,OAAO,OAAO,UACb,OAAO,SAAS,6CAA6C,CAAC,KAC7D,OAAO,aAAa;EAAE;EAAU,OAAO,OAAO,MAAM;EAAE,CAAC,EACvD,OAAO,GAAG,OAAO,CACjB,CACD,CACD;;AAGF,MAAM,yBACL,KACA,YAEA,OAAO,QAAQ,UAAU,WAAW,qBAAqB,KAAK,OAAO,EAAE,EACtE,aAAa,aACb,CAAC;;;;;;;;;AAUH,MAAM,8BAA8B,OAA4D;CAC/F,MAAM,MAAyC,EAAE;AACjD,MAAK,MAAM,UAAU,GAAG,eAAe;AACtC,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM;EACnD,MAAM,YAAY;AAKlB,MAAI,OAAO,UAAU,aAAa,SAAU;AAC5C,MAAI,UAAU,SAAS,eAAe,UAAU,SAAS,UAAW;EACpE,MAAM,aAAa,OAAO,UAAU,eAAe,WAAW,UAAU,aAAa,KAAA;AACrF,MAAI,KAAK;GACR,MAAM,UAAU;GAChB,UAAU,UAAU;GACpB,GAAI,eAAe,KAAA,IAAY,EAAE,YAAY,GAAG,EAAE;GAClD,CAAC;;AAEH,QAAO;;;;;;;;;AAsCR,MAAa,uBAAuB,YAAoD;CACvF,uBAAuB,OAAO,YAAY,KAAA,KAAa,OAAO,eAAe,KAAA;CAG7E,QAAQ,EACP,YACA,aACA,cAMA,aAAa;EACZ;EACA;EACA;EACA,GAAI,OAAO,YAAY,KAAA,IAAY,EAAE,SAAS,OAAO,SAAS,GAAG,EAAE;EACnE,GAAI,OAAO,eAAe,KAAA,IAAY,EAAE,YAAY,OAAO,YAAY,GAAG,EAAE;EAC5E,CAAC;CAGH,YAAY,EACX,SACA,cACA,YACA,kBAOA,OAAO,IAAI,aAAa;EAavB,MAAM,KAAK,IAAI,aAAa;AAC5B,KAAG,UAAU,OAAO,QAAQ,QAAQ;EACpC,MAAM,gBAAgB,GAAG,QAAQ;GAChC,SAAS,QAAQ,KAAK,MAAM,MAAM,KAAK,EAAE,CAAC;GAC1C,cAAc,CAAC,GAAG,aAAa;GAC/B,CAAC;AACF,KAAG,gBAAgB,CAAC,cAAc,EAAE,OAAO,QAAQ,QAAQ;EAS3D,MAAM,EAAE,QAAQ,kBAAkB,OAAO,gBAAgB;GACxD,cAAc,OAAO;GACrB,oBAOC,OAAO,QAAQ,WAAW,iBAAiB,OAAO,aAAa,OAC5D,uCACA,IACA,OAAO,QAAQ,SACf,OAAO,IAAI,KACX,CAAC,KACD,OAAO,UACL,UACA,aAAa,cAAc;IAC1B;IACA;IACA,SACC,4DAA4D,YAAY,OACxE,MAAM;IACP;IACA,CAAC,CACH,CACD,GACA,OAAO,WAAW;IAClB,WAAW,GAAG,MAAM,EAAE,QAAQ,OAAO,IAAI,QAAQ,CAAC;IAClD,QAAQ,UACP,aAAa,cAAc;KAC1B;KACA;KACA,SACC,yCAAyC,YAAY,OACpD,mBAAmB,MAAM;KAC3B;KACA,CAAC;IACH,CAAC;GACL,eAAe,UACd,aAAa,cAAc;IAC1B;IACA;IACA,SACC,gDAAgD,OAAO,QAAQ,KAAK,aACxD,OAAO,QAAQ,QAAQ,KAClC,mBAAmB,MAAM;IAE3B;IACA,CAAC;GACH,WAAW,YACV,OAAO,KACN,aAAa,cAAc;IAC1B;IACA;IACA,SACC,mDAAmD,sBAAsB,QAAQ;IAClF,CAAC,CACF;GACF,YAAY,aACX,OAAO,QAAQ;IACd,QAAQ,SAAS;IACjB,eAAe,2BAA2B,SAAS;IACnD,CAAC;GACH,CAAC;EAEF,MAAM,YAAY,cAAc,MAAM,MAAM,EAAE,SAAS,YAAY;EACnE,MAAM,aAAa,cAAc,MAC/B,MAAM,EAAE,SAAS,cAAc,EAAE,YAAY,SAAS,wBAAwB,IAAI,OACnF;EACD,MAAM,wBAAwB,OAAO,sBAAsB,OAAO,KAAK,cAAc;AAUrF,SAAO;GAPN;GACA,WAAW,WAAW,YAAY;GAClC,WAAW,OAAO,QAAQ;GAC1B,GAAI,YAAY,aAAa,KAAA,IAAY,EAAE,cAAc,WAAW,UAAU,GAAG,EAAE;GACnF,eAAe;GAGH;GACZ,CAAC,KACF,OAAO,SAAS,sCAAsC,EACrD,YAAY,GAAG,aAAa,QAAQ,cAAc,aAAa,EAC/D,CAAC,CACF;CASF,uBAAuB,cACtB,OAAO,iBAAiB,OAAO,IAAI,KAAK,UAAU,EAAE,UAAU,WAAW,CAAC,CAAC,CAAC,KAC3E,OAAO,QACP,OAAO,OAAO,UACb,OAAO,SAAS,+CAA+C,CAAC,KAC/D,OAAO,aAAa;EAAE;EAAW,OAAO,OAAO,MAAM;EAAE,CAAC,CACxD,CACD,EACD,OAAO,SAAS,mDAAmD,EAClE,YAAY,GAAG,aAAa,QAAQ,YAAY,WAAW,EAC3D,CAAC,CACF;CACF"}