@mysten-incubation/devstack 0.0.1 → 0.1.1

package/dist/plugins/action/errors.d.mts

@@ -3,19 +3,23 @@
  *  editing this file (and the plugin doc's catalog).
  *
  *  Phase semantics:
- *   - `discriminator` — `opts.discriminator` Effect evaluation failed.
- *                       User-code defect or yielded upstream raised.
- *   - `build`         — `opts.body`'s build phase (the user-supplied
- *                       Effect) failed before producing a transaction.
- *   - `sign`          — `signAndExecute` failed (gas, bytecode
- *                       verification, RPC).
- *   - `parse`         — the action's receipt projection (digest /
- *                       objectChanges) was malformed.
- *   - `verify`        — verify probe authoritatively raised (transient
- *                       is masked by the lenient probe — does NOT raise
- *                       this).
+ *   - `discriminator`   — `opts.discriminator` Effect evaluation failed.
+ *                         User-code defect or yielded upstream raised.
+ *   - `build`           — `opts.body`'s build phase (the user-supplied
+ *                         Effect) failed before producing a transaction.
+ *   - `sign`            — signing / submit transport failed (signer
+ *                         refused, RPC unreachable, finality timeout).
+ *                         This is `account.signAndExecute`'s error
+ *                         channel; it does NOT cover on-chain failures.
+ *   - `execute-failed`  — transaction was delivered + executed by the
+ *                         validator but the on-chain execution failed
+ *                         (the `$kind: 'FailedTransaction'` variant of
+ *                         `account.signAndExecute`'s return value).
+ *   - `verify`          — verify probe authoritatively raised (transient
+ *                         is masked by the lenient probe — does NOT raise
+ *                         this).
  */
-type ActionPhase = 'discriminator' | 'build' | 'sign' | 'parse' | 'verify';
+type ActionPhase = 'discriminator' | 'build' | 'sign' | 'execute-failed' | 'verify';
 /** Single tagged action error. */
 interface ActionError {
   readonly _tag: 'ActionError';

package/dist/plugins/action/errors.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"errors.mjs","names":[],"sources":["../../../src/plugins/action/errors.ts"],"sourcesContent":["// Action plugin — typed errors.\n//\n// Distilled doc 16-action.md \"Failure modes\": signing failure routes\n// through `PublishError({ phase: 'publish-tx' })`. The rewrite splits\n// the user-facing action error from `package`'s `PublishError` because\n// action-specific phases (build, sign, parse) carry different semantics\n// — `build` here is the user-supplied transaction-builder Effect,\n// `sign` is the `signAndExecute` invocation, `parse` covers downstream\n// receipt projection.\n//\n// Per architecture §Effect, errors are plain interfaces with a `_tag`\n// discriminator; `Effect.catchTag` / `catchTags` match on the literal.\n\n/** Phases for `ActionError`. Closed sum — adding a phase requires\n *  editing this file (and the plugin doc's catalog).\n *\n *  Phase semantics:\n *   - `discriminator` — `opts.discriminator` Effect evaluation failed.\n *                       User-code defect or yielded upstream raised.\n *   - `build`         — `opts.body`'s build phase (the user-supplied\n *                       Effect) failed before producing a transaction.\n *   - `sign`          — `signAndExecute` failed (gas, bytecode\n *                       verification, RPC).\n *   - `parse`         — the action's receipt projection (digest /\n *                       objectChanges) was malformed.\n *   - `verify`        — verify probe authoritatively raised (transient\n *                       is masked by the lenient probe — does NOT raise\n *                       this).\n */\nexport type ActionPhase = 'discriminator' | 'build' | 'sign' | 'parse' | 'verify';\n\n/** Single tagged action error. */\nexport interface ActionError {\n\treadonly _tag: 'ActionError';\n\treadonly phase: ActionPhase;\n\t/** Symbolic action name (the user-declared `action.name`). Flows\n\t *  into the cache key namespace and the TUI row title. */\n\treadonly actionName: string;\n\treadonly message: string;\n\treadonly cause?: unknown;\n}\n\nexport const actionError = (\n\tphase: ActionPhase,\n\tparts: Omit<ActionError, '_tag' | 'phase'>,\n): ActionError => ({ _tag: 'ActionError', phase, ...parts });\n\n/** Error tags this plugin contributes — surfaced to the cause walker\n *  via `PluginErrorContribution`. */\nexport const ACTION_ERROR_TAGS = ['ActionError'] as const;\n"],"mappings":";AA0CA,MAAa,eACZ,OACA,WACkB;CAAE,MAAM;CAAe;CAAO,GAAG;CAAO;;;AAI3D,MAAa,oBAAoB,CAAC,cAAc"}
+{"version":3,"file":"errors.mjs","names":[],"sources":["../../../src/plugins/action/errors.ts"],"sourcesContent":["// Action plugin — typed errors.\n//\n// Distilled doc 16-action.md \"Failure modes\": signing failure routes\n// through `PublishError({ phase: 'publish-tx' })`. The rewrite splits\n// the user-facing action error from `package`'s `PublishError` because\n// action-specific phases carry different semantics — `build` here is the\n// user-supplied transaction-builder Effect, `sign` is the build/sign/\n// submit transport (the `signAndExecute` invocation, including the\n// Account plugin's `no-digest` envelope violation surfaced via `cause`),\n// and `execute-failed` is the on-chain `FailedTransaction` outcome.\n//\n// Per architecture §Effect, errors are plain interfaces with a `_tag`\n// discriminator; `Effect.catchTag` / `catchTags` match on the literal.\n\n/** Phases for `ActionError`. Closed sum — adding a phase requires\n *  editing this file (and the plugin doc's catalog).\n *\n *  Phase semantics:\n *   - `discriminator`   — `opts.discriminator` Effect evaluation failed.\n *                         User-code defect or yielded upstream raised.\n *   - `build`           — `opts.body`'s build phase (the user-supplied\n *                         Effect) failed before producing a transaction.\n *   - `sign`            — signing / submit transport failed (signer\n *                         refused, RPC unreachable, finality timeout).\n *                         This is `account.signAndExecute`'s error\n *                         channel; it does NOT cover on-chain failures.\n *   - `execute-failed`  — transaction was delivered + executed by the\n *                         validator but the on-chain execution failed\n *                         (the `$kind: 'FailedTransaction'` variant of\n *                         `account.signAndExecute`'s return value).\n *   - `verify`          — verify probe authoritatively raised (transient\n *                         is masked by the lenient probe — does NOT raise\n *                         this).\n */\nexport type ActionPhase = 'discriminator' | 'build' | 'sign' | 'execute-failed' | 'verify';\n\n/** Single tagged action error. */\nexport interface ActionError {\n\treadonly _tag: 'ActionError';\n\treadonly phase: ActionPhase;\n\t/** Symbolic action name (the user-declared `action.name`). Flows\n\t *  into the cache key namespace and the TUI row title. */\n\treadonly actionName: string;\n\treadonly message: string;\n\treadonly cause?: unknown;\n}\n\nexport const actionError = (\n\tphase: ActionPhase,\n\tparts: Omit<ActionError, '_tag' | 'phase'>,\n): ActionError => ({ _tag: 'ActionError', phase, ...parts });\n\n/** Error tags this plugin contributes — surfaced to the cause walker\n *  via `PluginErrorContribution`. */\nexport const ACTION_ERROR_TAGS = ['ActionError'] as const;\n"],"mappings":";AA+CA,MAAa,eACZ,OACA,WACkB;CAAE,MAAM;CAAe;CAAO,GAAG;CAAO;;;AAI3D,MAAa,oBAAoB,CAAC,cAAc"}

package/dist/plugins/action/execute.mjs

@@ -1,8 +1,20 @@
+import { formatUnknownError } from "../../substrate/runtime/format-unknown-error.mjs";
+import { signAndDispatch } from "../../substrate/runtime/sui-execute/sign-and-dispatch.mjs";
+import { formatExecutedFailure } from "../../substrate/runtime/sui-execute/index.mjs";
 import { buildForkImpersonationTransactionBytes } from "../sui/fork-transaction.mjs";
+import "../sui/index.mjs";
 import { actionError } from "./errors.mjs";
+import { ActionSpans } from "./spans.mjs";
 import { Effect } from "effect";
 import { Transaction } from "@mysten/sui/transactions";
 //#region src/plugins/action/execute.ts
+/**
+* Re-bucket the account's flat `objectChanges` into action-flavored
+* `created` / `mutated` rows. The account plugin's projection emits
+* `{type, objectId, objectType?, outputState?, idOperation?}`; we
+* carry through the optional fields and discriminate on `type` /
+* `kind` so a downstream `findCreatedByType` consumer keeps working.
+*/
 const projectAccountObjectChanges = (changes) => changes.filter((change) => typeof change === "object" && change !== null && typeof change.objectId === "string").map((change) => {
 	const entry = {
 		kind: change.type === "created" || change.kind === "created" ? "created" : "mutated",
@@ -13,132 +25,82 @@ const projectAccountObjectChanges = (changes) => changes.filter((change) => type
 	if (typeof change.idOperation === "string") entry.idOperation = change.idOperation;
 	return entry;
 });
-const receiptFromAccountTx = (tx) => ({
+const receiptFromTxResult = (tx) => ({
 	digest: tx.digest,
 	objectChanges: projectAccountObjectChanges(tx.objectChanges),
 	balanceChanges: tx.balanceChanges
 });
-/** Drive the full build → sign → execute → wait → project pipeline.
+/**
+* Map an `AccountSignError` onto the action's `'sign'` phase. The
+* account's `signAndExecute` returns a discriminated `SignAndExecuteResult`
+* for the on-chain outcome (success vs FailedTransaction); only
+* transport / lifecycle failures surface here.
+*/
+const accountSignErrorToActionError = (actionName) => (cause) => actionError("sign", {
+	actionName,
+	message: `Action '${actionName}': account sign/execute failed for '${cause.accountName}' (address=${cause.address}): ${cause.message}`,
+	cause
+});
+/** Drive the full build → sign → execute → wait → project pipeline by
+*  delegating to the account's `withTransactionSigner` /
+*  `signAndExecute` surface, then re-projecting the returned
+*  `TxResult` into the action's `ActionReceipt` shape.
 *
 *  Allocates a fresh `Transaction`, sets the sender to the account's
 *  address, lets the caller populate it via the `build` callback,
-*  serialises via `Transaction.build({ client })`, signs via the
-*  account's transaction-signer scope, executes via the SDK's
-*  `executeTransaction` (with `include: { effects: true, objectTypes:
-*  true }` so the SDK surfaces `changedObjects` + types), waits for
-*  finality, and projects the envelope into an `ActionReceipt`.
+*  serialises via `Transaction.build({ client })` (or the fork-mode
+*  builder for impersonation accounts), then hands the bytes to the
+*  account's locked-signer scope. The account plugin owns sign,
+*  execute, finality wait, and envelope projection.
 *
 *  All failures surface as `ActionError`:
-*   - `build` callback throws  → `phase: 'sign'` (matches the existing
-*      catch-all phase for body-side failures).
+*   - `build` callback throws  → `phase: 'sign'`.
 *   - `Transaction.build` rejects → `phase: 'sign'`.
-*   - `signTransaction` rejects → `phase: 'sign'`.
-*   - `executeTransaction` rejects → `phase: 'sign'`.
-*   - SDK returns `FailedTransaction` → `phase: 'sign'`.
-*   - SDK returns no digest → `phase: 'parse'`.
-*   - `waitForTransaction` rejects → `phase: 'sign'`.
+*   - `account.signAndExecute` rejects with `AccountSignError` → mapped
+*     to `phase: 'sign'`. The Account plugin's `'no-digest'` phase
+*     (SDK envelope protocol violation) flows through here as well —
+*     the originating `AccountSignError` is preserved via `cause` so
+*     the cause walker renders the underlying `phase: 'no-digest'`.
 *
 *  The `actionName` parameter threads into every error's `actionName`
 *  field so cause-walker output stays attributable.
 */
-const signAndExecute = (params) => Effect.gen(function* () {
+const signAndExecute = (params) => {
 	const { actionName, sui, account, build } = params;
-	return yield* account.withTransactionSigner((lockedSigner) => Effect.gen(function* () {
-		const tx = new Transaction();
-		tx.setSender(account.address);
-		yield* Effect.try({
-			try: () => build(tx),
-			catch: (cause) => actionError("sign", {
-				actionName,
-				message: `Action '${actionName}': build callback threw before serialisation.`,
-				cause
-			})
-		});
-		const txBytes = account.source === "impersonate" ? yield* buildForkImpersonationTransactionBytes(tx, account.address, sui.sdk.core).pipe(Effect.mapError((cause) => actionError("sign", {
-			actionName,
-			message: `Action '${actionName}': fork impersonation Transaction.build failed — ${cause.message}.`,
-			cause
-		}))) : yield* Effect.tryPromise({
-			try: () => tx.build({ client: sui.sdk.client }),
-			catch: (cause) => actionError("sign", {
-				actionName,
-				message: `Action '${actionName}': Transaction.build failed — ${cause instanceof Error ? cause.message : String(cause)}.`,
-				cause
-			})
-		});
-		if (account.source === "impersonate") return receiptFromAccountTx(yield* lockedSigner.signAndExecute(txBytes).pipe(Effect.mapError((cause) => actionError("sign", {
-			actionName,
-			message: `Action '${actionName}': account.signAndExecute failed for '${account.name}' (address=${account.address}): ${cause instanceof Error ? cause.message : String(cause)}`,
-			cause
-		}))));
-		const signed = yield* lockedSigner.signTransaction(txBytes).pipe(Effect.mapError((cause) => actionError("sign", {
-			actionName,
-			message: `Action '${actionName}': account.signTransaction failed for '${account.name}' (address=${account.address}): ${cause instanceof Error ? cause.message : String(cause)}`,
-			cause
-		})));
-		const sdkClient = sui.sdk.client;
-		const env = yield* Effect.tryPromise({
-			try: () => sdkClient.executeTransaction({
-				transaction: txBytes,
-				signatures: [signed.signature],
-				include: {
-					effects: true,
-					objectTypes: true
-				}
-			}),
-			catch: (cause) => actionError("sign", {
+	return signAndDispatch({
+		signerSource: account,
+		buildTxBytes: () => Effect.gen(function* () {
+			const tx = new Transaction();
+			tx.setSender(account.address);
+			yield* Effect.try({
+				try: () => build(tx),
+				catch: (cause) => actionError("sign", {
+					actionName,
+					message: `Action '${actionName}': build callback threw before serialisation.`,
+					cause
+				})
+			});
+			return account.source === "impersonate" || sui.fork !== null ? yield* buildForkImpersonationTransactionBytes(tx, account.address, sui.sdk.core).pipe(Effect.mapError((cause) => actionError("sign", {
 				actionName,
-				message: `Action '${actionName}': executeTransaction failed — ` + (cause instanceof Error ? cause.message : String(cause)),
+				message: `Action '${actionName}': fork Transaction.build failed — ${cause.message}.`,
 				cause
-			})
-		});
-		if (env.$kind === "FailedTransaction") {
-			const failedDigest = env.FailedTransaction?.digest;
-			if (failedDigest !== void 0) yield* Effect.tryPromise({
-				try: () => sdkClient.waitForTransaction({ digest: failedDigest }),
+			}))) : yield* Effect.tryPromise({
+				try: () => tx.build({ client: sui.sdk.client }),
 				catch: (cause) => actionError("sign", {
 					actionName,
-					message: `Action '${actionName}': waitForTransaction(${failedDigest}) failed.`,
+					message: `Action '${actionName}': Transaction.build failed — ${formatUnknownError(cause)}.`,
 					cause
 				})
 			});
-			return yield* Effect.fail(actionError("sign", {
-				actionName,
-				message: `Action '${actionName}': FailedTransaction (digest=${env.FailedTransaction?.digest ?? "<unknown>"}): ${env.FailedTransaction?.status?.error ?? "<no error>"}`
-			}));
-		}
-		const txOk = env.Transaction;
-		if (txOk?.digest === void 0) return yield* Effect.fail(actionError("parse", {
+		}),
+		mapSignError: accountSignErrorToActionError(actionName),
+		onFailed: (failure) => Effect.fail(actionError("execute-failed", {
 			actionName,
-			message: `Action '${actionName}': executeTransaction returned no digest.`
-		}));
-		yield* Effect.tryPromise({
-			try: () => sdkClient.waitForTransaction({ digest: txOk.digest }),
-			catch: (cause) => actionError("sign", {
-				actionName,
-				message: `Action '${actionName}': waitForTransaction(${txOk.digest}) failed.`,
-				cause
-			})
-		});
-		const objectTypes = txOk.objectTypes ?? {};
-		const objectChanges = (txOk.effects?.changedObjects ?? []).filter((c) => typeof c.objectId === "string").map((c) => {
-			const objectType = objectTypes[c.objectId];
-			const entry = {
-				kind: c.idOperation === "Created" ? "created" : "mutated",
-				objectId: c.objectId
-			};
-			if (objectType !== void 0) entry.objectType = objectType;
-			if (c.outputState !== void 0) entry.outputState = c.outputState;
-			if (c.idOperation !== void 0) entry.idOperation = c.idOperation;
-			return entry;
-		});
-		return {
-			digest: txOk.digest,
-			objectChanges,
-			balanceChanges: []
-		};
-	}));
-}).pipe(Effect.withSpan("devstack.plugin.action.signAndExecute", { attributes: { "action.name": params.actionName } }));
+			message: `Action '${actionName}': transaction execution failed on-chain for account '${account.name}' (address=${account.address}) ` + formatExecutedFailure(failure)
+		})),
+		onSuccess: (txResult) => Effect.succeed(receiptFromTxResult(txResult))
+	}).pipe(Effect.withSpan("devstack.plugin.action.signAndExecute", { attributes: { [ActionSpans.name]: actionName } }));
+};
 //#endregion
 export { signAndExecute };
 

package/dist/plugins/action/execute.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"execute.mjs","names":[],"sources":["../../../src/plugins/action/execute.ts"],"sourcesContent":["// Action plugin — `signAndExecute` helper.\n//\n// This module encapsulates the \"build → sign → execute → wait → project\"\n// roundtrip that every action body needs to perform a Move call against\n// the booted Sui chain. Without it, every action body re-implements the\n// SDK boundary cast on `sdk.client.executeTransaction` + the SDK envelope\n// projection + the post-submit `waitForTransaction` gate.\n//\n// The same wiring lives in `plugins/package/publish-executor.ts` — both\n// sites cast the opaque `sdk.client` to call `executeTransaction({\n// include: { effects: true, objectTypes: true }})` so they recover\n// `changedObjects` + their fully-qualified types. Both run through the\n// Account plugin's transaction-signer scope so `Transaction.build`,\n// signing, execute, and finality wait serialize per address.\n//\n// What this helper extracts: the SDK-envelope projection + the\n// finality-wait. Per call sites:\n//\n//   - The user supplies a `build(tx)` callback that populates the\n//     `Transaction` synchronously (moveCalls, transferObjects, etc.).\n//   - The user supplies the signing `account` (an `AccountValue` from\n//     the action's resolved dependency values); we sign with the\n//     locked transaction signer and drive the SDK's\n//     `executeTransaction` directly.\n//   - The helper returns an `ActionReceipt` projection: `{ digest,\n//     objectChanges }`. The `objectChanges` array is shaped uniformly so\n//     downstream consumers can pick by `objectType` substring.\n//\n// All failures route through `ActionError` (phase: `sign` for transport\n// / RPC failures; `parse` for \"no digest\" / \"wrong envelope shape\"\n// situations). The action plugin's outer wrap collapses these into the\n// substrate's artifact publisher `produce-failed` channel.\n\nimport { Effect, type Scope } from 'effect';\n\nimport { Transaction } from '@mysten/sui/transactions';\n\nimport type { AccountValue, TxResult } from '../account/service.ts';\nimport type { SuiClient } from '../sui/index.ts';\nimport { buildForkImpersonationTransactionBytes } from '../sui/fork-transaction.ts';\n\nimport { actionError, type ActionError } from './errors.ts';\nimport type { ActionReceipt } from './service.ts';\n\n// ---------------------------------------------------------------------------\n// Receipt object-change projection\n// ---------------------------------------------------------------------------\n\n/** Flat object-change record surfaced on an `ActionReceipt`. Mirrors\n *  the package plugin's `PublishObjectChange` shape so consumers can\n *  reuse `findCreatedByType`-style helpers across the two surfaces.\n *\n *  - `kind`: 'created' when `idOperation === 'Created'`, else 'mutated'\n *    (we expose the same two buckets the package plugin uses; finer\n *    distinctions are recoverable from the raw `idOperation` /\n *    `outputState` fields preserved alongside).\n *  - `objectType`: optional fully-qualified type string\n *    (`<packageId>::<module>::<Name>`) — present when the SDK's\n *    `objectTypes` map carries the id. */\nexport interface ActionObjectChange {\n\treadonly kind: 'created' | 'mutated';\n\treadonly objectId: string;\n\treadonly objectType?: string;\n\treadonly outputState?: string;\n\treadonly idOperation?: string;\n}\n\n// ---------------------------------------------------------------------------\n// SDK shape — kept narrow, mirrors the cast in publish-executor.ts\n// ---------------------------------------------------------------------------\n\ninterface SdkExecuteClient {\n\treadonly executeTransaction: (args: {\n\t\treadonly transaction: Uint8Array;\n\t\treadonly signatures: ReadonlyArray<string>;\n\t\treadonly include?: {\n\t\t\treadonly effects?: boolean;\n\t\t\treadonly objectTypes?: boolean;\n\t\t};\n\t}) => Promise<unknown>;\n\treadonly waitForTransaction: (args: {\n\t\treadonly digest: string;\n\t\treadonly include?: { readonly effects?: boolean };\n\t\treadonly timeout?: number;\n\t}) => Promise<unknown>;\n}\n\ninterface RawExecuteEnvelope {\n\treadonly $kind?: 'Transaction' | 'FailedTransaction';\n\treadonly Transaction?: {\n\t\treadonly digest?: string;\n\t\treadonly effects?: {\n\t\t\treadonly changedObjects?: ReadonlyArray<{\n\t\t\t\treadonly objectId?: string;\n\t\t\t\treadonly outputState?: string;\n\t\t\t\treadonly idOperation?: string;\n\t\t\t}>;\n\t\t};\n\t\treadonly objectTypes?: Readonly<Record<string, string>>;\n\t};\n\treadonly FailedTransaction?: {\n\t\treadonly digest?: string;\n\t\treadonly status?: { readonly error?: string };\n\t};\n}\n\nconst projectAccountObjectChanges = (\n\tchanges: ReadonlyArray<unknown>,\n): ReadonlyArray<ActionObjectChange> =>\n\tchanges\n\t\t.filter(\n\t\t\t(\n\t\t\t\tchange,\n\t\t\t): change is {\n\t\t\t\treadonly type?: string;\n\t\t\t\treadonly kind?: string;\n\t\t\t\treadonly objectId: string;\n\t\t\t\treadonly objectType?: string;\n\t\t\t\treadonly outputState?: string;\n\t\t\t\treadonly idOperation?: string;\n\t\t\t} =>\n\t\t\t\ttypeof change === 'object' &&\n\t\t\t\tchange !== null &&\n\t\t\t\ttypeof (change as { readonly objectId?: unknown }).objectId === 'string',\n\t\t)\n\t\t.map((change) => {\n\t\t\tconst entry: {\n\t\t\t\t-readonly [K in keyof ActionObjectChange]: ActionObjectChange[K];\n\t\t\t} = {\n\t\t\t\tkind: change.type === 'created' || change.kind === 'created' ? 'created' : 'mutated',\n\t\t\t\tobjectId: change.objectId,\n\t\t\t};\n\t\t\tif (typeof change.objectType === 'string') entry.objectType = change.objectType;\n\t\t\tif (typeof change.outputState === 'string') entry.outputState = change.outputState;\n\t\t\tif (typeof change.idOperation === 'string') entry.idOperation = change.idOperation;\n\t\t\treturn entry;\n\t\t});\n\nconst receiptFromAccountTx = (tx: TxResult): ActionReceipt => ({\n\tdigest: tx.digest,\n\tobjectChanges: projectAccountObjectChanges(tx.objectChanges),\n\tbalanceChanges: tx.balanceChanges,\n});\n\n// ---------------------------------------------------------------------------\n// `signAndExecute` helper\n// ---------------------------------------------------------------------------\n\n/** Drive the full build → sign → execute → wait → project pipeline.\n *\n *  Allocates a fresh `Transaction`, sets the sender to the account's\n *  address, lets the caller populate it via the `build` callback,\n *  serialises via `Transaction.build({ client })`, signs via the\n *  account's transaction-signer scope, executes via the SDK's\n *  `executeTransaction` (with `include: { effects: true, objectTypes:\n *  true }` so the SDK surfaces `changedObjects` + types), waits for\n *  finality, and projects the envelope into an `ActionReceipt`.\n *\n *  All failures surface as `ActionError`:\n *   - `build` callback throws  → `phase: 'sign'` (matches the existing\n *      catch-all phase for body-side failures).\n *   - `Transaction.build` rejects → `phase: 'sign'`.\n *   - `signTransaction` rejects → `phase: 'sign'`.\n *   - `executeTransaction` rejects → `phase: 'sign'`.\n *   - SDK returns `FailedTransaction` → `phase: 'sign'`.\n *   - SDK returns no digest → `phase: 'parse'`.\n *   - `waitForTransaction` rejects → `phase: 'sign'`.\n *\n *  The `actionName` parameter threads into every error's `actionName`\n *  field so cause-walker output stays attributable.\n */\nexport const signAndExecute = (params: {\n\treadonly actionName: string;\n\treadonly sui: SuiClient;\n\treadonly account: AccountValue;\n\treadonly build: (tx: Transaction) => void;\n}): Effect.Effect<ActionReceipt, ActionError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tconst { actionName, sui, account, build } = params;\n\t\treturn yield* account.withTransactionSigner((lockedSigner) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\t// --- 1. Allocate + populate the Transaction ------------------\n\t\t\t\tconst tx = new Transaction();\n\t\t\t\ttx.setSender(account.address);\n\t\t\t\tyield* Effect.try({\n\t\t\t\t\ttry: () => build(tx),\n\t\t\t\t\tcatch: (cause): ActionError =>\n\t\t\t\t\t\tactionError('sign', {\n\t\t\t\t\t\t\tactionName,\n\t\t\t\t\t\t\tmessage: `Action '${actionName}': build callback threw before serialisation.`,\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t}),\n\t\t\t\t});\n\n\t\t\t\t// --- 2. Serialise via the mode-appropriate path --------------\n\t\t\t\tconst txBytes =\n\t\t\t\t\taccount.source === 'impersonate'\n\t\t\t\t\t\t? yield* buildForkImpersonationTransactionBytes(tx, account.address, sui.sdk.core).pipe(\n\t\t\t\t\t\t\t\tEffect.mapError(\n\t\t\t\t\t\t\t\t\t(cause): ActionError =>\n\t\t\t\t\t\t\t\t\t\tactionError('sign', {\n\t\t\t\t\t\t\t\t\t\t\tactionName,\n\t\t\t\t\t\t\t\t\t\t\tmessage: `Action '${actionName}': fork impersonation Transaction.build failed — ${cause.message}.`,\n\t\t\t\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t: yield* Effect.tryPromise({\n\t\t\t\t\t\t\t\ttry: () =>\n\t\t\t\t\t\t\t\t\ttx.build({\n\t\t\t\t\t\t\t\t\t\tclient: sui.sdk.client as Parameters<typeof tx.build>[0] extends\n\t\t\t\t\t\t\t\t\t\t\t| { client?: infer C }\n\t\t\t\t\t\t\t\t\t\t\t| undefined\n\t\t\t\t\t\t\t\t\t\t\t? C\n\t\t\t\t\t\t\t\t\t\t\t: never,\n\t\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t\tcatch: (cause): ActionError =>\n\t\t\t\t\t\t\t\t\tactionError('sign', {\n\t\t\t\t\t\t\t\t\t\tactionName,\n\t\t\t\t\t\t\t\t\t\tmessage: `Action '${actionName}': Transaction.build failed — ${\n\t\t\t\t\t\t\t\t\t\t\tcause instanceof Error ? cause.message : String(cause)\n\t\t\t\t\t\t\t\t\t\t}.`,\n\t\t\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t});\n\n\t\t\t\tif (account.source === 'impersonate') {\n\t\t\t\t\tconst executed = yield* lockedSigner.signAndExecute(txBytes).pipe(\n\t\t\t\t\t\tEffect.mapError(\n\t\t\t\t\t\t\t(cause): ActionError =>\n\t\t\t\t\t\t\t\tactionError('sign', {\n\t\t\t\t\t\t\t\t\tactionName,\n\t\t\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t\t\t`Action '${actionName}': account.signAndExecute failed for ` +\n\t\t\t\t\t\t\t\t\t\t`'${account.name}' (address=${account.address}): ${\n\t\t\t\t\t\t\t\t\t\t\tcause instanceof Error ? cause.message : String(cause)\n\t\t\t\t\t\t\t\t\t\t}`,\n\t\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\t\treturn receiptFromAccountTx(executed);\n\t\t\t\t}\n\n\t\t\t\t// --- 3. Sign with the account -------------------------------\n\t\t\t\tconst signed = yield* lockedSigner.signTransaction(txBytes).pipe(\n\t\t\t\t\tEffect.mapError(\n\t\t\t\t\t\t(cause): ActionError =>\n\t\t\t\t\t\t\tactionError('sign', {\n\t\t\t\t\t\t\t\tactionName,\n\t\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t\t`Action '${actionName}': account.signTransaction failed for ` +\n\t\t\t\t\t\t\t\t\t`'${account.name}' (address=${account.address}): ${\n\t\t\t\t\t\t\t\t\t\tcause instanceof Error ? cause.message : String(cause)\n\t\t\t\t\t\t\t\t\t}`,\n\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t);\n\n\t\t\t\t// --- 4. Execute via the SDK (with effects+objectTypes) ------\n\t\t\t\tconst sdkClient = sui.sdk.client as SdkExecuteClient;\n\t\t\t\tconst raw = yield* Effect.tryPromise({\n\t\t\t\t\ttry: () =>\n\t\t\t\t\t\tsdkClient.executeTransaction({\n\t\t\t\t\t\t\ttransaction: txBytes,\n\t\t\t\t\t\t\tsignatures: [signed.signature],\n\t\t\t\t\t\t\tinclude: { effects: true, objectTypes: true },\n\t\t\t\t\t\t}),\n\t\t\t\t\tcatch: (cause): ActionError =>\n\t\t\t\t\t\tactionError('sign', {\n\t\t\t\t\t\t\tactionName,\n\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t`Action '${actionName}': executeTransaction failed — ` +\n\t\t\t\t\t\t\t\t(cause instanceof Error ? cause.message : String(cause)),\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t}),\n\t\t\t\t});\n\n\t\t\t\t// --- 5. Project the envelope --------------------------------\n\t\t\t\tconst env = raw as RawExecuteEnvelope;\n\t\t\t\tif (env.$kind === 'FailedTransaction') {\n\t\t\t\t\tconst failedDigest = env.FailedTransaction?.digest;\n\t\t\t\t\tif (failedDigest !== undefined) {\n\t\t\t\t\t\tyield* Effect.tryPromise({\n\t\t\t\t\t\t\ttry: () => sdkClient.waitForTransaction({ digest: failedDigest }),\n\t\t\t\t\t\t\tcatch: (cause): ActionError =>\n\t\t\t\t\t\t\t\tactionError('sign', {\n\t\t\t\t\t\t\t\t\tactionName,\n\t\t\t\t\t\t\t\t\tmessage: `Action '${actionName}': waitForTransaction(${failedDigest}) failed.`,\n\t\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t});\n\t\t\t\t\t}\n\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\tactionError('sign', {\n\t\t\t\t\t\t\tactionName,\n\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t`Action '${actionName}': FailedTransaction ` +\n\t\t\t\t\t\t\t\t`(digest=${env.FailedTransaction?.digest ?? '<unknown>'}): ` +\n\t\t\t\t\t\t\t\t`${env.FailedTransaction?.status?.error ?? '<no error>'}`,\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tconst txOk = env.Transaction;\n\t\t\t\tif (txOk?.digest === undefined) {\n\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\tactionError('parse', {\n\t\t\t\t\t\t\tactionName,\n\t\t\t\t\t\t\tmessage: `Action '${actionName}': executeTransaction returned no digest.`,\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\t// --- 6. Wait for finality -----------------------------------\n\t\t\t\tyield* Effect.tryPromise({\n\t\t\t\t\ttry: () => sdkClient.waitForTransaction({ digest: txOk.digest! }),\n\t\t\t\t\tcatch: (cause): ActionError =>\n\t\t\t\t\t\tactionError('sign', {\n\t\t\t\t\t\t\tactionName,\n\t\t\t\t\t\t\tmessage: `Action '${actionName}': waitForTransaction(${txOk.digest}) failed.`,\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t}),\n\t\t\t\t});\n\n\t\t\t\t// --- 7. Project changedObjects into the receipt's objectChanges\n\t\t\t\tconst objectTypes = txOk.objectTypes ?? {};\n\t\t\t\tconst objectChanges: ReadonlyArray<ActionObjectChange> = (\n\t\t\t\t\ttxOk.effects?.changedObjects ?? []\n\t\t\t\t)\n\t\t\t\t\t.filter(\n\t\t\t\t\t\t(c): c is { objectId: string; outputState?: string; idOperation?: string } =>\n\t\t\t\t\t\t\ttypeof c.objectId === 'string',\n\t\t\t\t\t)\n\t\t\t\t\t.map((c) => {\n\t\t\t\t\t\tconst objectType = objectTypes[c.objectId];\n\t\t\t\t\t\tconst entry: {\n\t\t\t\t\t\t\t-readonly [K in keyof ActionObjectChange]: ActionObjectChange[K];\n\t\t\t\t\t\t} = {\n\t\t\t\t\t\t\tkind: c.idOperation === 'Created' ? 'created' : 'mutated',\n\t\t\t\t\t\t\tobjectId: c.objectId,\n\t\t\t\t\t\t};\n\t\t\t\t\t\tif (objectType !== undefined) entry.objectType = objectType;\n\t\t\t\t\t\tif (c.outputState !== undefined) entry.outputState = c.outputState;\n\t\t\t\t\t\tif (c.idOperation !== undefined) entry.idOperation = c.idOperation;\n\t\t\t\t\t\treturn entry;\n\t\t\t\t\t});\n\n\t\t\t\tconst receipt: ActionReceipt = {\n\t\t\t\t\tdigest: txOk.digest,\n\t\t\t\t\tobjectChanges,\n\t\t\t\t\tbalanceChanges: [],\n\t\t\t\t};\n\t\t\t\treturn receipt;\n\t\t\t}),\n\t\t);\n\t}).pipe(\n\t\tEffect.withSpan('devstack.plugin.action.signAndExecute', {\n\t\t\tattributes: { 'action.name': params.actionName },\n\t\t}),\n\t);\n"],"mappings":";;;;;AA0GA,MAAM,+BACL,YAEA,QACE,QAEC,WASA,OAAO,WAAW,YAClB,WAAW,QACX,OAAQ,OAA2C,aAAa,SACjE,CACA,KAAK,WAAW;CAChB,MAAM,QAEF;EACH,MAAM,OAAO,SAAS,aAAa,OAAO,SAAS,YAAY,YAAY;EAC3E,UAAU,OAAO;EACjB;AACD,KAAI,OAAO,OAAO,eAAe,SAAU,OAAM,aAAa,OAAO;AACrE,KAAI,OAAO,OAAO,gBAAgB,SAAU,OAAM,cAAc,OAAO;AACvE,KAAI,OAAO,OAAO,gBAAgB,SAAU,OAAM,cAAc,OAAO;AACvE,QAAO;EACN;AAEJ,MAAM,wBAAwB,QAAiC;CAC9D,QAAQ,GAAG;CACX,eAAe,4BAA4B,GAAG,cAAc;CAC5D,gBAAgB,GAAG;CACnB;;;;;;;;;;;;;;;;;;;;;;;;AA6BD,MAAa,kBAAkB,WAM9B,OAAO,IAAI,aAAa;CACvB,MAAM,EAAE,YAAY,KAAK,SAAS,UAAU;AAC5C,QAAO,OAAO,QAAQ,uBAAuB,iBAC5C,OAAO,IAAI,aAAa;EAEvB,MAAM,KAAK,IAAI,aAAa;AAC5B,KAAG,UAAU,QAAQ,QAAQ;AAC7B,SAAO,OAAO,IAAI;GACjB,WAAW,MAAM,GAAG;GACpB,QAAQ,UACP,YAAY,QAAQ;IACnB;IACA,SAAS,WAAW,WAAW;IAC/B;IACA,CAAC;GACH,CAAC;EAGF,MAAM,UACL,QAAQ,WAAW,gBAChB,OAAO,uCAAuC,IAAI,QAAQ,SAAS,IAAI,IAAI,KAAK,CAAC,KACjF,OAAO,UACL,UACA,YAAY,QAAQ;GACnB;GACA,SAAS,WAAW,WAAW,mDAAmD,MAAM,QAAQ;GAChG;GACA,CAAC,CACH,CACD,GACA,OAAO,OAAO,WAAW;GACzB,WACC,GAAG,MAAM,EACR,QAAQ,IAAI,IAAI,QAKhB,CAAC;GACH,QAAQ,UACP,YAAY,QAAQ;IACnB;IACA,SAAS,WAAW,WAAW,gCAC9B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CACtD;IACD;IACA,CAAC;GACH,CAAC;AAEL,MAAI,QAAQ,WAAW,cAetB,QAAO,qBAAqB,OAdJ,aAAa,eAAe,QAAQ,CAAC,KAC5D,OAAO,UACL,UACA,YAAY,QAAQ;GACnB;GACA,SACC,WAAW,WAAW,wCAClB,QAAQ,KAAK,aAAa,QAAQ,QAAQ,KAC7C,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAExD;GACA,CAAC,CACH,CACD,CACoC;EAItC,MAAM,SAAS,OAAO,aAAa,gBAAgB,QAAQ,CAAC,KAC3D,OAAO,UACL,UACA,YAAY,QAAQ;GACnB;GACA,SACC,WAAW,WAAW,yCAClB,QAAQ,KAAK,aAAa,QAAQ,QAAQ,KAC7C,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAExD;GACA,CAAC,CACH,CACD;EAGD,MAAM,YAAY,IAAI,IAAI;EAmB1B,MAAM,MAAM,OAlBO,OAAO,WAAW;GACpC,WACC,UAAU,mBAAmB;IAC5B,aAAa;IACb,YAAY,CAAC,OAAO,UAAU;IAC9B,SAAS;KAAE,SAAS;KAAM,aAAa;KAAM;IAC7C,CAAC;GACH,QAAQ,UACP,YAAY,QAAQ;IACnB;IACA,SACC,WAAW,WAAW,oCACrB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;IACxD;IACA,CAAC;GACH,CAAC;AAIF,MAAI,IAAI,UAAU,qBAAqB;GACtC,MAAM,eAAe,IAAI,mBAAmB;AAC5C,OAAI,iBAAiB,KAAA,EACpB,QAAO,OAAO,WAAW;IACxB,WAAW,UAAU,mBAAmB,EAAE,QAAQ,cAAc,CAAC;IACjE,QAAQ,UACP,YAAY,QAAQ;KACnB;KACA,SAAS,WAAW,WAAW,wBAAwB,aAAa;KACpE;KACA,CAAC;IACH,CAAC;AAEH,UAAO,OAAO,OAAO,KACpB,YAAY,QAAQ;IACnB;IACA,SACC,WAAW,WAAW,+BACX,IAAI,mBAAmB,UAAU,YAAY,KACrD,IAAI,mBAAmB,QAAQ,SAAS;IAC5C,CAAC,CACF;;EAEF,MAAM,OAAO,IAAI;AACjB,MAAI,MAAM,WAAW,KAAA,EACpB,QAAO,OAAO,OAAO,KACpB,YAAY,SAAS;GACpB;GACA,SAAS,WAAW,WAAW;GAC/B,CAAC,CACF;AAIF,SAAO,OAAO,WAAW;GACxB,WAAW,UAAU,mBAAmB,EAAE,QAAQ,KAAK,QAAS,CAAC;GACjE,QAAQ,UACP,YAAY,QAAQ;IACnB;IACA,SAAS,WAAW,WAAW,wBAAwB,KAAK,OAAO;IACnE;IACA,CAAC;GACH,CAAC;EAGF,MAAM,cAAc,KAAK,eAAe,EAAE;EAC1C,MAAM,iBACL,KAAK,SAAS,kBAAkB,EAAE,EAEjC,QACC,MACA,OAAO,EAAE,aAAa,SACvB,CACA,KAAK,MAAM;GACX,MAAM,aAAa,YAAY,EAAE;GACjC,MAAM,QAEF;IACH,MAAM,EAAE,gBAAgB,YAAY,YAAY;IAChD,UAAU,EAAE;IACZ;AACD,OAAI,eAAe,KAAA,EAAW,OAAM,aAAa;AACjD,OAAI,EAAE,gBAAgB,KAAA,EAAW,OAAM,cAAc,EAAE;AACvD,OAAI,EAAE,gBAAgB,KAAA,EAAW,OAAM,cAAc,EAAE;AACvD,UAAO;IACN;AAOH,SAAO;GAJN,QAAQ,KAAK;GACb;GACA,gBAAgB,EAAE;GAEL;GACb,CACF;EACA,CAAC,KACF,OAAO,SAAS,yCAAyC,EACxD,YAAY,EAAE,eAAe,OAAO,YAAY,EAChD,CAAC,CACF"}
+{"version":3,"file":"execute.mjs","names":[],"sources":["../../../src/plugins/action/execute.ts"],"sourcesContent":["// Action plugin — `signAndExecute` helper.\n//\n// Delegates the full build → sign → execute → wait → project pipeline\n// to the Account plugin's `withTransactionSigner` scope. The action\n// body never sees the SDK envelope; instead it receives the Account's\n// already-projected `TxResult`, which this module re-projects into the\n// action's `ActionReceipt` shape (bucketed `created`/`mutated` instead\n// of the account-flat `objectChanges`).\n//\n// Before the dedup, this module reimplemented the entire SDK roundtrip\n// (`executeTransaction`, `$kind`/`FailedTransaction`/no-digest envelope\n// projection, `waitForTransaction` finality wait). The same logic lived\n// in `account/service.ts:666-704` and `package/publish-executor.ts`, with\n// three near-identical SDK envelope projectors. Backlog item #29 lifts\n// the action path; the remaining package projector is tracked there too.\n//\n// Boundary discipline: this module imports the Account plugin's\n// `AccountValue` + `TxResult` (peer L4 contract) and a `SuiClient`\n// shim (peer L4 contract). It does not import `@mysten/sui/client` or\n// reach into the SDK envelope — those concerns live in\n// `account/service.ts`'s `projectTxResult`.\n\nimport { Effect, type Scope } from 'effect';\n\nimport { Transaction } from '@mysten/sui/transactions';\n\nimport type { AccountSignError, AccountValue, TxResult } from '../account/index.ts';\nimport { buildForkImpersonationTransactionBytes, type SuiClient } from '../sui/index.ts';\nimport { formatUnknownError } from '../../substrate/runtime/format-unknown-error.ts';\nimport { formatExecutedFailure } from '../../substrate/runtime/sui-execute/index.ts';\nimport { signAndDispatch } from '../../substrate/runtime/sui-execute/sign-and-dispatch.ts';\n\nimport { actionError, type ActionError } from './errors.ts';\nimport type { ActionReceipt } from './service.ts';\nimport { ActionSpans } from './spans.ts';\n\n// ---------------------------------------------------------------------------\n// Receipt object-change projection\n// ---------------------------------------------------------------------------\n\n/** Flat object-change record surfaced on an `ActionReceipt`. Mirrors\n *  the package plugin's `PublishObjectChange` shape so consumers can\n *  reuse `findCreatedByType`-style helpers across the two surfaces.\n *\n *  - `kind`: 'created' when `idOperation === 'Created'`, else 'mutated'\n *    (we expose the same two buckets the package plugin uses; finer\n *    distinctions are recoverable from the raw `idOperation` /\n *    `outputState` fields preserved alongside).\n *  - `objectType`: optional fully-qualified type string\n *    (`<packageId>::<module>::<Name>`) — present when the SDK's\n *    `objectTypes` map carries the id. */\nexport interface ActionObjectChange {\n\treadonly kind: 'created' | 'mutated';\n\treadonly objectId: string;\n\treadonly objectType?: string;\n\treadonly outputState?: string;\n\treadonly idOperation?: string;\n}\n\n// ---------------------------------------------------------------------------\n// Account TxResult → ActionReceipt projection\n// ---------------------------------------------------------------------------\n\n/**\n * Re-bucket the account's flat `objectChanges` into action-flavored\n * `created` / `mutated` rows. The account plugin's projection emits\n * `{type, objectId, objectType?, outputState?, idOperation?}`; we\n * carry through the optional fields and discriminate on `type` /\n * `kind` so a downstream `findCreatedByType` consumer keeps working.\n */\nconst projectAccountObjectChanges = (\n\tchanges: ReadonlyArray<unknown>,\n): ReadonlyArray<ActionObjectChange> =>\n\tchanges\n\t\t.filter(\n\t\t\t(\n\t\t\t\tchange,\n\t\t\t): change is {\n\t\t\t\treadonly type?: string;\n\t\t\t\treadonly kind?: string;\n\t\t\t\treadonly objectId: string;\n\t\t\t\treadonly objectType?: string;\n\t\t\t\treadonly outputState?: string;\n\t\t\t\treadonly idOperation?: string;\n\t\t\t} =>\n\t\t\t\ttypeof change === 'object' &&\n\t\t\t\tchange !== null &&\n\t\t\t\ttypeof (change as { readonly objectId?: unknown }).objectId === 'string',\n\t\t)\n\t\t.map((change) => {\n\t\t\tconst entry: {\n\t\t\t\t-readonly [K in keyof ActionObjectChange]: ActionObjectChange[K];\n\t\t\t} = {\n\t\t\t\tkind: change.type === 'created' || change.kind === 'created' ? 'created' : 'mutated',\n\t\t\t\tobjectId: change.objectId,\n\t\t\t};\n\t\t\tif (typeof change.objectType === 'string') entry.objectType = change.objectType;\n\t\t\tif (typeof change.outputState === 'string') entry.outputState = change.outputState;\n\t\t\tif (typeof change.idOperation === 'string') entry.idOperation = change.idOperation;\n\t\t\treturn entry;\n\t\t});\n\nconst receiptFromTxResult = (tx: TxResult): ActionReceipt => ({\n\tdigest: tx.digest,\n\tobjectChanges: projectAccountObjectChanges(tx.objectChanges),\n\tbalanceChanges: tx.balanceChanges,\n});\n\n// ---------------------------------------------------------------------------\n// AccountSignError → ActionError mapping\n// ---------------------------------------------------------------------------\n\n/**\n * Map an `AccountSignError` onto the action's `'sign'` phase. The\n * account's `signAndExecute` returns a discriminated `SignAndExecuteResult`\n * for the on-chain outcome (success vs FailedTransaction); only\n * transport / lifecycle failures surface here.\n */\nconst accountSignErrorToActionError =\n\t(actionName: string) =>\n\t(cause: AccountSignError): ActionError =>\n\t\tactionError('sign', {\n\t\t\tactionName,\n\t\t\tmessage:\n\t\t\t\t`Action '${actionName}': account sign/execute failed for ` +\n\t\t\t\t`'${cause.accountName}' (address=${cause.address}): ${cause.message}`,\n\t\t\tcause,\n\t\t});\n\n// ---------------------------------------------------------------------------\n// `signAndExecute` helper\n// ---------------------------------------------------------------------------\n\n/** Drive the full build → sign → execute → wait → project pipeline by\n *  delegating to the account's `withTransactionSigner` /\n *  `signAndExecute` surface, then re-projecting the returned\n *  `TxResult` into the action's `ActionReceipt` shape.\n *\n *  Allocates a fresh `Transaction`, sets the sender to the account's\n *  address, lets the caller populate it via the `build` callback,\n *  serialises via `Transaction.build({ client })` (or the fork-mode\n *  builder for impersonation accounts), then hands the bytes to the\n *  account's locked-signer scope. The account plugin owns sign,\n *  execute, finality wait, and envelope projection.\n *\n *  All failures surface as `ActionError`:\n *   - `build` callback throws  → `phase: 'sign'`.\n *   - `Transaction.build` rejects → `phase: 'sign'`.\n *   - `account.signAndExecute` rejects with `AccountSignError` → mapped\n *     to `phase: 'sign'`. The Account plugin's `'no-digest'` phase\n *     (SDK envelope protocol violation) flows through here as well —\n *     the originating `AccountSignError` is preserved via `cause` so\n *     the cause walker renders the underlying `phase: 'no-digest'`.\n *\n *  The `actionName` parameter threads into every error's `actionName`\n *  field so cause-walker output stays attributable.\n */\nexport const signAndExecute = (params: {\n\treadonly actionName: string;\n\treadonly sui: SuiClient;\n\treadonly account: AccountValue;\n\treadonly build: (tx: Transaction) => void;\n}): Effect.Effect<ActionReceipt, ActionError, Scope.Scope> => {\n\tconst { actionName, sui, account, build } = params;\n\tconst mapAccountErr = accountSignErrorToActionError(actionName);\n\t// Delegate the build → sign → execute → dispatch pipeline to the\n\t// shared `signAndDispatch` helper. The build closure handles both\n\t// the user callback (`build(tx)`) and mode-appropriate serialization\n\t// (fork impersonation vs SDK-resolver). On-chain failures surface\n\t// as `phase: 'execute-failed'` so cause-walker renders them distinctly\n\t// from transport-level signing failures (`phase: 'sign'`).\n\treturn signAndDispatch({\n\t\tsignerSource: account,\n\t\tbuildTxBytes: () =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\t// --- 1. Allocate + populate the Transaction ------------------\n\t\t\t\tconst tx = new Transaction();\n\t\t\t\ttx.setSender(account.address);\n\t\t\t\tyield* Effect.try({\n\t\t\t\t\ttry: () => build(tx),\n\t\t\t\t\tcatch: (cause): ActionError =>\n\t\t\t\t\t\tactionError('sign', {\n\t\t\t\t\t\t\tactionName,\n\t\t\t\t\t\t\tmessage: `Action '${actionName}': build callback threw before serialisation.`,\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t}),\n\t\t\t\t});\n\n\t\t\t\t// --- 2. Serialise via the mode-appropriate path --------------\n\t\t\t\t// Fork mode (impersonate OR real signer) must build offline with\n\t\t\t\t// explicit gas: the sui-fork binary has no simulate_transaction,\n\t\t\t\t// so the SDK's gas-estimating `tx.build({ client })` fails. The\n\t\t\t\t// real-vs-empty-signature split happens later in signAndExecute.\n\t\t\t\treturn account.source === 'impersonate' || sui.fork !== null\n\t\t\t\t\t? yield* buildForkImpersonationTransactionBytes(tx, account.address, sui.sdk.core).pipe(\n\t\t\t\t\t\t\tEffect.mapError(\n\t\t\t\t\t\t\t\t(cause): ActionError =>\n\t\t\t\t\t\t\t\t\tactionError('sign', {\n\t\t\t\t\t\t\t\t\t\tactionName,\n\t\t\t\t\t\t\t\t\t\tmessage: `Action '${actionName}': fork Transaction.build failed — ${cause.message}.`,\n\t\t\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t)\n\t\t\t\t\t: yield* Effect.tryPromise({\n\t\t\t\t\t\t\ttry: () => tx.build({ client: sui.sdk.client }),\n\t\t\t\t\t\t\tcatch: (cause): ActionError =>\n\t\t\t\t\t\t\t\tactionError('sign', {\n\t\t\t\t\t\t\t\t\tactionName,\n\t\t\t\t\t\t\t\t\tmessage: `Action '${actionName}': Transaction.build failed — ${\n\t\t\t\t\t\t\t\t\t\tformatUnknownError(cause)\n\t\t\t\t\t\t\t\t\t}.`,\n\t\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t});\n\t\t\t}),\n\t\tmapSignError: mapAccountErr,\n\t\tonFailed: (failure) =>\n\t\t\tEffect.fail(\n\t\t\t\tactionError('execute-failed', {\n\t\t\t\t\tactionName,\n\t\t\t\t\tmessage:\n\t\t\t\t\t\t`Action '${actionName}': transaction execution failed on-chain ` +\n\t\t\t\t\t\t`for account '${account.name}' (address=${account.address}) ` +\n\t\t\t\t\t\tformatExecutedFailure(failure),\n\t\t\t\t}),\n\t\t\t),\n\t\tonSuccess: (txResult) => Effect.succeed(receiptFromTxResult(txResult)),\n\t}).pipe(\n\t\tEffect.withSpan('devstack.plugin.action.signAndExecute', {\n\t\t\tattributes: { [ActionSpans.name]: actionName },\n\t\t}),\n\t);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;AAsEA,MAAM,+BACL,YAEA,QACE,QAEC,WASA,OAAO,WAAW,YAClB,WAAW,QACX,OAAQ,OAA2C,aAAa,SACjE,CACA,KAAK,WAAW;CAChB,MAAM,QAEF;EACH,MAAM,OAAO,SAAS,aAAa,OAAO,SAAS,YAAY,YAAY;EAC3E,UAAU,OAAO;EACjB;AACD,KAAI,OAAO,OAAO,eAAe,SAAU,OAAM,aAAa,OAAO;AACrE,KAAI,OAAO,OAAO,gBAAgB,SAAU,OAAM,cAAc,OAAO;AACvE,KAAI,OAAO,OAAO,gBAAgB,SAAU,OAAM,cAAc,OAAO;AACvE,QAAO;EACN;AAEJ,MAAM,uBAAuB,QAAiC;CAC7D,QAAQ,GAAG;CACX,eAAe,4BAA4B,GAAG,cAAc;CAC5D,gBAAgB,GAAG;CACnB;;;;;;;AAYD,MAAM,iCACJ,gBACA,UACA,YAAY,QAAQ;CACnB;CACA,SACC,WAAW,WAAW,sCAClB,MAAM,YAAY,aAAa,MAAM,QAAQ,KAAK,MAAM;CAC7D;CACA,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;AA8BJ,MAAa,kBAAkB,WAK+B;CAC7D,MAAM,EAAE,YAAY,KAAK,SAAS,UAAU;AAQ5C,QAAO,gBAAgB;EACtB,cAAc;EACd,oBACC,OAAO,IAAI,aAAa;GAEvB,MAAM,KAAK,IAAI,aAAa;AAC5B,MAAG,UAAU,QAAQ,QAAQ;AAC7B,UAAO,OAAO,IAAI;IACjB,WAAW,MAAM,GAAG;IACpB,QAAQ,UACP,YAAY,QAAQ;KACnB;KACA,SAAS,WAAW,WAAW;KAC/B;KACA,CAAC;IACH,CAAC;AAOF,UAAO,QAAQ,WAAW,iBAAiB,IAAI,SAAS,OACrD,OAAO,uCAAuC,IAAI,QAAQ,SAAS,IAAI,IAAI,KAAK,CAAC,KACjF,OAAO,UACL,UACA,YAAY,QAAQ;IACnB;IACA,SAAS,WAAW,WAAW,qCAAqC,MAAM,QAAQ;IAClF;IACA,CAAC,CACH,CACD,GACA,OAAO,OAAO,WAAW;IACzB,WAAW,GAAG,MAAM,EAAE,QAAQ,IAAI,IAAI,QAAQ,CAAC;IAC/C,QAAQ,UACP,YAAY,QAAQ;KACnB;KACA,SAAS,WAAW,WAAW,gCAC9B,mBAAmB,MAAM,CACzB;KACD;KACA,CAAC;IACH,CAAC;IACH;EACH,cApDqB,8BAA8B,WAoDxB;EAC3B,WAAW,YACV,OAAO,KACN,YAAY,kBAAkB;GAC7B;GACA,SACC,WAAW,WAAW,wDACN,QAAQ,KAAK,aAAa,QAAQ,QAAQ,MAC1D,sBAAsB,QAAQ;GAC/B,CAAC,CACF;EACF,YAAY,aAAa,OAAO,QAAQ,oBAAoB,SAAS,CAAC;EACtE,CAAC,CAAC,KACF,OAAO,SAAS,yCAAyC,EACxD,YAAY,GAAG,YAAY,OAAO,YAAY,EAC9C,CAAC,CACF"}

package/dist/plugins/action/index.d.mts

@@ -1,5 +1,4 @@
 import { AnyResourceRef, DependencyInput, DependencyList, Plugin, ResolvedDependencies, ResourceRef } from "../../substrate/plugin.mjs";
-import { SeedObjectsAccumulator } from "../sui/seed-objects.mjs";
 import { SuiClient } from "../sui/mode/shared.mjs";
 import { SuiOptions } from "../sui/mode/spec.mjs";
 import { ActionError, ActionPhase } from "./errors.mjs";
@@ -49,7 +48,6 @@ interface ActionOptions<DependsOn extends ActionDependencySpec> {
  */
 declare const action: <const Name extends string, const DependsOn extends ActionDependencySpec>(name: Name, opts: ActionOptions<DependsOn>) => Plugin<`action:${Name}`, ActionReceipt, readonly [ResourceRef<"sui", SuiClient & {
   readonly mode: SuiOptions["mode"];
-  readonly seedObjects: SeedObjectsAccumulator;
 }>, ...DependencyList<DependsOn>], readonly []>;
 //#endregion
 export { ActionOptions, ActionUpstreamRef, action };

package/dist/plugins/action/index.mjs

@@ -1,9 +1,12 @@
 import { definePlugin, dependencyList, resolveDependencyValues, resource } from "../../substrate/plugin.mjs";
-import { pluginErrorContributions } from "../../api/plugin-errors.mjs";
-import { suiResource } from "../sui/index.mjs";
+import "../../api/define-plugin.mjs";
 import { ArtifactPublisherService } from "../../substrate/runtime/artifact-publisher/index.mjs";
 import { chainProbeFor } from "../../substrate/runtime/strategy-registry/chain-probe-for.mjs";
+import "../../substrate/runtime/strategy-registry/index.mjs";
+import { pluginErrorContributions } from "../../api/plugin-errors.mjs";
+import { suiResource } from "../sui/index.mjs";
 import { ACTION_ERROR_TAGS, actionError } from "./errors.mjs";
+import "./spans.mjs";
 import { signAndExecute } from "./execute.mjs";
 import { bootActionService, resolveDiscriminator } from "./service.mjs";
 import { Effect } from "effect";
@@ -34,13 +37,15 @@ const action = (name, opts) => {
 		id: actionRef.id,
 		dependsOn: dependencies,
 		role: "task",
+		section: "action",
 		start: (deps) => Effect.gen(function* () {
 			const [sui, ...resolvedUpstream] = deps;
 			const resolvedByResourceId = new Map(upstreamRefs.map((ref, index) => [ref.id, resolvedUpstream[index]]));
-			const readDeclaredDependency = (id) => {
-				if (!resolvedByResourceId.has(id)) throw new Error(`Action '${name}': dependency '${id}' was not resolved.`);
-				return resolvedByResourceId.get(id);
-			};
+			for (const ref of upstreamRefs) if (!resolvedByResourceId.has(ref.id)) return yield* Effect.fail(actionError("build", {
+				actionName: name,
+				message: `Action '${name}': dependency '${ref.id}' was not resolved.`
+			}));
+			const readDeclaredDependency = (id) => resolvedByResourceId.get(id);
 			const publisher = yield* ArtifactPublisherService;
 			const probe = yield* chainProbeFor(sui.chain);
 			const bodyCtx = {
@@ -60,16 +65,15 @@ const action = (name, opts) => {
 					actionName: name,
 					dependencyResourceIds
 				},
-				dynamicMaterial: resolveDiscriminator(name, opts.discriminator, bodyCtx, bodyDeps),
+				dynamicMaterial: resolveDiscriminator(opts.discriminator, bodyCtx, bodyDeps),
 				body: opts.body(bodyCtx, bodyDeps)
-			}).pipe(Effect.catch((err) => {
-				if (err._tag === "ActionError") return Effect.fail(err);
-				const detail = err.detail ?? `Action '${name}': substrate failure.`;
-				return Effect.fail(actionError("sign", {
+			}).pipe(Effect.catchTags({
+				ActionError: (err) => Effect.fail(err),
+				ArtifactPublishError: (err) => Effect.fail(actionError("verify", {
 					actionName: name,
-					message: detail,
+					message: err.detail,
 					cause: err
-				}));
+				}))
 			}));
 		}),
 		capabilities: [],

package/dist/plugins/action/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["signAndExecuteImpl"],"sources":["../../../src/plugins/action/index.ts"],"sourcesContent":["// Action plugin — barrel + `action(name, opts)` factory.\n//\n// Architecture (16-action.md): an action is a ONE-SHOT on-chain effect\n// (mint, create-singleton-object, seed-config, etc.) that runs after\n// its declared upstream refs (typically a signer account + one or more\n// published packages) are ready. The result (digest + change arrays)\n// is yieldable through the action resource.\n//\n// User-facing factory shape (recommended high-level form):\n//\n//   const openLobby = action('connect-four.openLobby', {\n//     dependsOn: { signer: alice, pkg: connectFour },\n//     body: (ctx, { signer, pkg }) =>\n//       ctx.signAndExecute(signer, (tx) => {\n//         tx.moveCall({ target: `${pkg.packageId}::game::create_lobby` });\n//       }),\n//   });\n//\n// The `ctx.signAndExecute(account, build)` helper folds the full\n// build → sign → execute (with `include: {effects, objectTypes}`) →\n// wait-for-finality → envelope-projection pipeline into a single call\n// (see `execute.ts`). The returned `ActionReceipt` carries the real\n// transaction digest and an `objectChanges` array that surfaces the\n// SDK's `changedObjects` (with `kind: 'created' | 'mutated'` + the\n// fully-qualified `objectType` string when available).\n//\n// Resource id: `'action:<name>'` — one tag per user-declared action (the\n// symbolic name is part of the identity so two `action('foo', ...)`\n// calls in one stack collide cleanly at compose time).\n//\n// Caching: delegated to the substrate's `ArtifactPublisher`.\n// Namespace is `action`; the cache key folds chainId + content-hash\n// derived from (name, dependencyResourceIds, dynamic discriminator).\n\nimport { Effect, type Scope } from 'effect';\n\nimport {\n\tdefinePlugin,\n\tdependencyList,\n\tresource,\n\tresolveDependencyValues,\n\ttype AnyResourceRef,\n\ttype DependencyInput,\n\ttype ResolvedDependencies,\n} from '../../api/define-plugin.ts';\nimport { pluginErrorContributions } from '../../api/plugin-errors.ts';\nimport { ArtifactPublisherService } from '../../substrate/runtime/artifact-publisher/index.ts';\nimport { chainProbeFor } from '../../substrate/runtime/strategy-registry/index.ts';\nimport { suiResource } from '../sui/index.ts';\nimport type { SuiProbeKey } from '../sui/chain-probe.ts';\n\nimport type { ActionBuildContext } from './build-context.ts';\nimport { actionError, ACTION_ERROR_TAGS, type ActionError } from './errors.ts';\nimport type { DynamicDiscriminator } from './discriminator.ts';\nimport { signAndExecute as signAndExecuteImpl } from './execute.ts';\nimport {\n\tbootActionService,\n\tresolveDiscriminator,\n\ttype ActionAcquireInputs,\n\ttype ActionReceipt,\n} from './service.ts';\n\nconst actionErrorContributions = pluginErrorContributions(ACTION_ERROR_TAGS);\n\n// ---------------------------------------------------------------------------\n// Resource — one per declared action, keyed by symbolic name\n// ---------------------------------------------------------------------------\n\n/** Resource id constructor. The symbolic action name is part of the tag\n *  identity so two `action('foo', ...)` calls in one stack collide\n *  cleanly at compose time. */\nexport const actionResourceId = <Name extends string>(name: Name): `action:${Name}` =>\n\t`action:${name}`;\n\nexport type ActionResourceId<Name extends string> = `action:${Name}`;\n\n// ---------------------------------------------------------------------------\n// User-facing factory shape\n// ---------------------------------------------------------------------------\n\n/** A user-supplied upstream resource ref. The user passes plugin values\n *  such as `account('alice')` or `localPackage('demo', ...)`; object,\n *  tuple, and single-ref shapes are preserved for the action body. */\nexport type ActionUpstreamRef = AnyResourceRef;\n\n/** Options for `action(name, opts)`. */\ntype ActionDependencySpec = DependencyInput;\n\ntype ResolvedActionDependencies<Input extends ActionDependencySpec> = ResolvedDependencies<Input>;\n\nexport interface ActionOptions<DependsOn extends ActionDependencySpec> {\n\t/** Upstream refs the action depends on. The shape determines the\n\t *  second argument passed to `body`. */\n\treadonly dependsOn: DependsOn;\n\t/** Optional caller-supplied discriminator material. Two shapes:\n\t *  a literal `string`, or a callback `(ctx, deps) => Effect<string>`\n\t *  that receives action helpers plus resolved deps shaped like\n\t *  `dependsOn`, so the discriminator can derive its value from\n\t *  upstream resolved values. See\n\t *  `discriminator.ts`. */\n\treadonly discriminator?: DynamicDiscriminator<ResolvedActionDependencies<DependsOn>>;\n\t/** The user's body. Receives action helpers plus resolved deps\n\t *  shaped like `dependsOn`, then returns the on-chain effect.\n\t *\n\t *  Errors raised here surface as `ActionError({phase:'sign'})`\n\t *  unless the body raises an `ActionError` itself (in which case\n\t *  it propagates verbatim). */\n\treadonly body: (\n\t\tctx: ActionBuildContext,\n\t\tdeps: ResolvedActionDependencies<DependsOn>,\n\t) => Effect.Effect<ActionReceipt, ActionError, Scope.Scope>;\n}\n\n// ---------------------------------------------------------------------------\n// Factory\n// ---------------------------------------------------------------------------\n\n/** Construct the action plugin instance.\n *\n *  The result is a plugin/resource ref that:\n *\n *   - publishes an `ActionReceipt`-typed resource identified by\n *     `action:<name>`,\n *   - `dependsOn:` `[suiResource, ...userDependencies]` (Sui hard upstream for\n *     ChainProbe lookup + chainId folding),\n *   - `role: 'task'` — Action has no long-lived resources;\n *     the substrate's lifecycle wrap surfaces it as \"done\" after\n *     `start` resolves.\n */\nexport const action = <const Name extends string, const DependsOn extends ActionDependencySpec>(\n\tname: Name,\n\topts: ActionOptions<DependsOn>,\n) => {\n\tconst actionRef = resource<ActionResourceId<Name>, ActionReceipt>(actionResourceId(name));\n\n\t// Flatten the user-supplied upstream refs for ordering. The start\n\t// body below keeps the original `dependsOn` shape so it can\n\t// reconstruct the user's dependency argument.\n\tconst upstreamRefs = dependencyList(opts.dependsOn);\n\tconst dependencies = [suiResource, ...upstreamRefs] as const;\n\n\t// Static discriminator pieces — known at factory construction\n\t// time. The tag-ids preserve the literal `id` so two actions with\n\t// identical bodies but different upstream packages get different\n\t// cache keys.\n\tconst dependencyResourceIds = upstreamRefs.map(({ id }) => id) as ReadonlyArray<string>;\n\n\treturn definePlugin({\n\t\tid: actionRef.id,\n\t\tdependsOn: dependencies,\n\t\t// Action has no long-lived resources — the body runs once at\n\t\t// acquire and returns; supervisor's lifecycle wrap surfaces\n\t\t// \"done\" after that.\n\t\trole: 'task',\n\t\tstart: (deps) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst [sui, ...resolvedUpstream] = deps;\n\t\t\t\tconst resolvedByResourceId = new Map<string, unknown>(\n\t\t\t\t\tupstreamRefs.map((ref, index) => [ref.id, resolvedUpstream[index]]),\n\t\t\t\t);\n\t\t\t\tconst readDeclaredDependency = (id: string): unknown => {\n\t\t\t\t\tif (!resolvedByResourceId.has(id)) {\n\t\t\t\t\t\tthrow new Error(`Action '${name}': dependency '${id}' was not resolved.`);\n\t\t\t\t\t}\n\t\t\t\t\treturn resolvedByResourceId.get(id);\n\t\t\t\t};\n\n\t\t\t\t// Substrate-context primitives. artifact publisher + strategy registry\n\t\t\t\t// are both provided by the supervisor's pluginContext.\n\t\t\t\tconst publisher = yield* ArtifactPublisherService;\n\t\t\t\tconst probe = yield* chainProbeFor<SuiProbeKey>(sui.chain);\n\n\t\t\t\t// Compose the user's body Effect, closing over the\n\t\t\t\t// action helper context. Resolved upstream values are\n\t\t\t\t// passed separately in the same shape as `dependsOn`.\n\t\t\t\t//   - `ctx.sui` — the resolved SuiClient (always set;\n\t\t\t\t//     suiResource is the hard upstream).\n\t\t\t\t//   - `ctx.signAndExecute(account, build)` — high-level\n\t\t\t\t//     helper that drives the full build → sign → execute\n\t\t\t\t//     → wait → project pipeline against the supplied\n\t\t\t\t//     account, returning a parsed `ActionReceipt`. This\n\t\t\t\t//     is what most action bodies want — it folds the\n\t\t\t\t//     SDK-boundary cast + `include: {effects, objectTypes}`\n\t\t\t\t//     execute + finality wait + envelope projection.\n\t\t\t\tconst bodyCtx: ActionBuildContext = {\n\t\t\t\t\tsui,\n\t\t\t\t\tsignAndExecute: (account, build) =>\n\t\t\t\t\t\tsignAndExecuteImpl({\n\t\t\t\t\t\t\tactionName: name,\n\t\t\t\t\t\t\tsui,\n\t\t\t\t\t\t\taccount,\n\t\t\t\t\t\t\tbuild,\n\t\t\t\t\t\t}),\n\t\t\t\t};\n\n\t\t\t\tconst bodyDeps = resolveDependencyValues(opts.dependsOn, (member) =>\n\t\t\t\t\treadDeclaredDependency(member.id),\n\t\t\t\t) as ResolvedActionDependencies<DependsOn>;\n\t\t\t\tconst acquireInputs: ActionAcquireInputs = {\n\t\t\t\t\tactionName: name,\n\t\t\t\t\tchainId: sui.chain,\n\t\t\t\t\tstaticDiscriminator: {\n\t\t\t\t\t\tactionName: name,\n\t\t\t\t\t\tdependencyResourceIds,\n\t\t\t\t\t},\n\t\t\t\t\tdynamicMaterial: resolveDiscriminator(name, opts.discriminator, bodyCtx, bodyDeps),\n\t\t\t\t\tbody: opts.body(bodyCtx, bodyDeps),\n\t\t\t\t};\n\n\t\t\t\tconst receipt = yield* bootActionService(publisher, probe, acquireInputs).pipe(\n\t\t\t\t\tEffect.catch((err): Effect.Effect<ActionReceipt, ActionError> => {\n\t\t\t\t\t\t// Re-wrap the ArtifactPublishError into an\n\t\t\t\t\t\t// ActionError so downstream consumers always see\n\t\t\t\t\t\t// the typed `ActionError` shape. The detail\n\t\t\t\t\t\t// already includes the phase + message from the\n\t\t\t\t\t\t// produce-side mapper.\n\t\t\t\t\t\tif ((err as { _tag?: string })._tag === 'ActionError') {\n\t\t\t\t\t\t\treturn Effect.fail(err as ActionError);\n\t\t\t\t\t\t}\n\t\t\t\t\t\tconst detail =\n\t\t\t\t\t\t\t(err as { detail?: string }).detail ?? `Action '${name}': substrate failure.`;\n\t\t\t\t\t\treturn Effect.fail(\n\t\t\t\t\t\t\tactionError('sign', {\n\t\t\t\t\t\t\t\tactionName: name,\n\t\t\t\t\t\t\t\tmessage: detail,\n\t\t\t\t\t\t\t\tcause: err,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t);\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t\treturn receipt;\n\t\t\t}),\n\t\t// No capability decls today. Future surfaces (codegen of\n\t\t// action receipts, manifest extras) land here.\n\t\tcapabilities: [] as const,\n\t\t// Plugin-side error vocabulary. The supervisor's harvest loop\n\t\t// folds this into the substrate's FormatterRegistry; the\n\t\t// cascade formatter then renders `ActionError`-tagged failures\n\t\t// with the action's phase/message header.\n\t\terrorContributions: actionErrorContributions,\n\t});\n};\n\n// ---------------------------------------------------------------------------\n// Re-exports\n// ---------------------------------------------------------------------------\n\nexport type { ActionBuildContext } from './build-context.ts';\nexport type { ActionError, ActionPhase } from './errors.ts';\nexport { ACTION_ERROR_TAGS } from './errors.ts';\nexport type { ActionLifecyclePhase } from './lifecycle.ts';\nexport type { DynamicDiscriminator, StaticDiscriminator } from './discriminator.ts';\nexport type { ActionReceipt } from './service.ts';\nexport { ActionReceiptSchema } from './service.ts';\nexport type { ActionObjectChange } from './execute.ts';\nexport { signAndExecute } from './execute.ts';\n"],"mappings":";;;;;;;;;;AA8DA,MAAM,2BAA2B,yBAAyB,kBAAkB;;;;AAS5E,MAAa,oBAAyC,SACrD,UAAU;;;;;;;;;;;;;AAyDX,MAAa,UACZ,MACA,SACI;CACJ,MAAM,YAAY,SAAgD,iBAAiB,KAAK,CAAC;CAKzF,MAAM,eAAe,eAAe,KAAK,UAAU;CACnD,MAAM,eAAe,CAAC,aAAa,GAAG,aAAa;CAMnD,MAAM,wBAAwB,aAAa,KAAK,EAAE,SAAS,GAAG;AAE9D,QAAO,aAAa;EACnB,IAAI,UAAU;EACd,WAAW;EAIX,MAAM;EACN,QAAQ,SACP,OAAO,IAAI,aAAa;GACvB,MAAM,CAAC,KAAK,GAAG,oBAAoB;GACnC,MAAM,uBAAuB,IAAI,IAChC,aAAa,KAAK,KAAK,UAAU,CAAC,IAAI,IAAI,iBAAiB,OAAO,CAAC,CACnE;GACD,MAAM,0BAA0B,OAAwB;AACvD,QAAI,CAAC,qBAAqB,IAAI,GAAG,CAChC,OAAM,IAAI,MAAM,WAAW,KAAK,iBAAiB,GAAG,qBAAqB;AAE1E,WAAO,qBAAqB,IAAI,GAAG;;GAKpC,MAAM,YAAY,OAAO;GACzB,MAAM,QAAQ,OAAO,cAA2B,IAAI,MAAM;GAc1D,MAAM,UAA8B;IACnC;IACA,iBAAiB,SAAS,UACzBA,eAAmB;KAClB,YAAY;KACZ;KACA;KACA;KACA,CAAC;IACH;GAED,MAAM,WAAW,wBAAwB,KAAK,YAAY,WACzD,uBAAuB,OAAO,GAAG,CACjC;AAiCD,UAAO,OArBgB,kBAAkB,WAAW,OAAO;IAV1D,YAAY;IACZ,SAAS,IAAI;IACb,qBAAqB;KACpB,YAAY;KACZ;KACA;IACD,iBAAiB,qBAAqB,MAAM,KAAK,eAAe,SAAS,SAAS;IAClF,MAAM,KAAK,KAAK,SAAS,SAAS;IAGqC,CAAC,CAAC,KACzE,OAAO,OAAO,QAAmD;AAMhE,QAAK,IAA0B,SAAS,cACvC,QAAO,OAAO,KAAK,IAAmB;IAEvC,MAAM,SACJ,IAA4B,UAAU,WAAW,KAAK;AACxD,WAAO,OAAO,KACb,YAAY,QAAQ;KACnB,YAAY;KACZ,SAAS;KACT,OAAO;KACP,CAAC,CACF;KACA,CACF;IAEA;EAGH,cAAc,EAAE;EAKhB,oBAAoB;EACpB,CAAC"}
+{"version":3,"file":"index.mjs","names":["signAndExecuteImpl"],"sources":["../../../src/plugins/action/index.ts"],"sourcesContent":["// Action plugin — barrel + `action(name, opts)` factory.\n//\n// Architecture (16-action.md): an action is a ONE-SHOT on-chain effect\n// (mint, create-singleton-object, seed-config, etc.) that runs after\n// its declared upstream refs (typically a signer account + one or more\n// published packages) are ready. The result (digest + change arrays)\n// is yieldable through the action resource.\n//\n// User-facing factory shape (recommended high-level form):\n//\n//   const openLobby = action('connect-four.openLobby', {\n//     dependsOn: { signer: alice, pkg: connectFour },\n//     body: (ctx, { signer, pkg }) =>\n//       ctx.signAndExecute(signer, (tx) => {\n//         tx.moveCall({ target: `${pkg.packageId}::game::create_lobby` });\n//       }),\n//   });\n//\n// The `ctx.signAndExecute(account, build)` helper folds the full\n// build → sign → execute (with `include: {effects, objectTypes}`) →\n// wait-for-finality → envelope-projection pipeline into a single call\n// (see `execute.ts`). The returned `ActionReceipt` carries the real\n// transaction digest and an `objectChanges` array that surfaces the\n// SDK's `changedObjects` (with `kind: 'created' | 'mutated'` + the\n// fully-qualified `objectType` string when available).\n//\n// Resource id: `'action:<name>'` — one tag per user-declared action (the\n// symbolic name is part of the identity so two `action('foo', ...)`\n// calls in one stack collide cleanly at compose time).\n//\n// Caching: delegated to the substrate's `ArtifactPublisher`.\n// Namespace is `action`; the cache key folds chainId + content-hash\n// derived from (name, dependencyResourceIds, dynamic discriminator).\n\nimport { Effect, type Scope } from 'effect';\n\nimport {\n\tdefinePlugin,\n\tdependencyList,\n\tresource,\n\tresolveDependencyValues,\n\ttype AnyResourceRef,\n\ttype DependencyInput,\n\ttype ResolvedDependencies,\n} from '../../api/define-plugin.ts';\nimport { pluginErrorContributions } from '../../api/plugin-errors.ts';\nimport { ArtifactPublisherService } from '../../substrate/runtime/artifact-publisher/index.ts';\nimport { chainProbeFor } from '../../substrate/runtime/strategy-registry/index.ts';\nimport { suiResource, type SuiProbeKey } from '../sui/index.ts';\n\nimport type { ActionBuildContext } from './build-context.ts';\nimport { actionError, ACTION_ERROR_TAGS, type ActionError } from './errors.ts';\nimport type { DynamicDiscriminator } from './discriminator.ts';\nimport { signAndExecute as signAndExecuteImpl } from './execute.ts';\nimport {\n\tbootActionService,\n\tresolveDiscriminator,\n\ttype ActionAcquireInputs,\n\ttype ActionReceipt,\n} from './service.ts';\n\nconst actionErrorContributions = pluginErrorContributions(ACTION_ERROR_TAGS);\n\n// ---------------------------------------------------------------------------\n// Resource — one per declared action, keyed by symbolic name\n// ---------------------------------------------------------------------------\n\n/** Resource id constructor. The symbolic action name is part of the tag\n *  identity so two `action('foo', ...)` calls in one stack collide\n *  cleanly at compose time. */\nexport const actionResourceId = <Name extends string>(name: Name): `action:${Name}` =>\n\t`action:${name}`;\n\nexport type ActionResourceId<Name extends string> = `action:${Name}`;\n\n// ---------------------------------------------------------------------------\n// User-facing factory shape\n// ---------------------------------------------------------------------------\n\n/** A user-supplied upstream resource ref. The user passes plugin values\n *  such as `account('alice')` or `localPackage('demo', ...)`; object,\n *  tuple, and single-ref shapes are preserved for the action body. */\nexport type ActionUpstreamRef = AnyResourceRef;\n\n/** Options for `action(name, opts)`. */\ntype ActionDependencySpec = DependencyInput;\n\ntype ResolvedActionDependencies<Input extends ActionDependencySpec> = ResolvedDependencies<Input>;\n\nexport interface ActionOptions<DependsOn extends ActionDependencySpec> {\n\t/** Upstream refs the action depends on. The shape determines the\n\t *  second argument passed to `body`. */\n\treadonly dependsOn: DependsOn;\n\t/** Optional caller-supplied discriminator material. Two shapes:\n\t *  a literal `string`, or a callback `(ctx, deps) => Effect<string>`\n\t *  that receives action helpers plus resolved deps shaped like\n\t *  `dependsOn`, so the discriminator can derive its value from\n\t *  upstream resolved values. See\n\t *  `discriminator.ts`. */\n\treadonly discriminator?: DynamicDiscriminator<ResolvedActionDependencies<DependsOn>>;\n\t/** The user's body. Receives action helpers plus resolved deps\n\t *  shaped like `dependsOn`, then returns the on-chain effect.\n\t *\n\t *  Errors raised here surface as `ActionError({phase:'sign'})`\n\t *  unless the body raises an `ActionError` itself (in which case\n\t *  it propagates verbatim). */\n\treadonly body: (\n\t\tctx: ActionBuildContext,\n\t\tdeps: ResolvedActionDependencies<DependsOn>,\n\t) => Effect.Effect<ActionReceipt, ActionError, Scope.Scope>;\n}\n\n// ---------------------------------------------------------------------------\n// Factory\n// ---------------------------------------------------------------------------\n\n/** Construct the action plugin instance.\n *\n *  The result is a plugin/resource ref that:\n *\n *   - publishes an `ActionReceipt`-typed resource identified by\n *     `action:<name>`,\n *   - `dependsOn:` `[suiResource, ...userDependencies]` (Sui hard upstream for\n *     ChainProbe lookup + chainId folding),\n *   - `role: 'task'` — Action has no long-lived resources;\n *     the substrate's lifecycle wrap surfaces it as \"done\" after\n *     `start` resolves.\n */\nexport const action = <const Name extends string, const DependsOn extends ActionDependencySpec>(\n\tname: Name,\n\topts: ActionOptions<DependsOn>,\n) => {\n\tconst actionRef = resource<ActionResourceId<Name>, ActionReceipt>(actionResourceId(name));\n\n\t// Flatten the user-supplied upstream refs for ordering. The start\n\t// body below keeps the original `dependsOn` shape so it can\n\t// reconstruct the user's dependency argument.\n\tconst upstreamRefs = dependencyList(opts.dependsOn);\n\tconst dependencies = [suiResource, ...upstreamRefs] as const;\n\n\t// Static discriminator pieces — known at factory construction\n\t// time. The tag-ids preserve the literal `id` so two actions with\n\t// identical bodies but different upstream packages get different\n\t// cache keys.\n\tconst dependencyResourceIds = upstreamRefs.map(({ id }) => id) as ReadonlyArray<string>;\n\n\treturn definePlugin({\n\t\tid: actionRef.id,\n\t\tdependsOn: dependencies,\n\t\t// Action has no long-lived resources — the body runs once at\n\t\t// acquire and returns; supervisor's lifecycle wrap surfaces\n\t\t// \"done\" after that.\n\t\trole: 'task',\n\t\tsection: 'action',\n\t\tstart: (deps) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst [sui, ...resolvedUpstream] = deps;\n\t\t\t\tconst resolvedByResourceId = new Map<string, unknown>(\n\t\t\t\t\tupstreamRefs.map((ref, index) => [ref.id, resolvedUpstream[index]]),\n\t\t\t\t);\n\n\t\t\t\t// Substrate guarantees `deps` is the resolved positional\n\t\t\t\t// list matching `dependsOn`, so this map is densely\n\t\t\t\t// populated. If the invariant ever breaks (substrate\n\t\t\t\t// bug) we surface a typed ActionError(`build`) BEFORE\n\t\t\t\t// invoking the downstream sync resolver so the cause\n\t\t\t\t// walker attributes the failure to this action rather\n\t\t\t\t// than producing an unattributed defect.\n\t\t\t\tfor (const ref of upstreamRefs) {\n\t\t\t\t\tif (!resolvedByResourceId.has(ref.id)) {\n\t\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\t\tactionError('build', {\n\t\t\t\t\t\t\t\tactionName: name,\n\t\t\t\t\t\t\t\tmessage: `Action '${name}': dependency '${ref.id}' was not resolved.`,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tconst readDeclaredDependency = (id: string): unknown => resolvedByResourceId.get(id);\n\n\t\t\t\t// Substrate-context primitives. artifact publisher + strategy registry\n\t\t\t\t// are both provided by the supervisor's pluginContext.\n\t\t\t\tconst publisher = yield* ArtifactPublisherService;\n\t\t\t\tconst probe = yield* chainProbeFor<SuiProbeKey>(sui.chain);\n\n\t\t\t\t// Compose the user's body Effect, closing over the\n\t\t\t\t// action helper context. Resolved upstream values are\n\t\t\t\t// passed separately in the same shape as `dependsOn`.\n\t\t\t\t//   - `ctx.sui` — the resolved SuiClient (always set;\n\t\t\t\t//     suiResource is the hard upstream).\n\t\t\t\t//   - `ctx.signAndExecute(account, build)` — high-level\n\t\t\t\t//     helper that drives the full build → sign → execute\n\t\t\t\t//     → wait → project pipeline against the supplied\n\t\t\t\t//     account, returning a parsed `ActionReceipt`. This\n\t\t\t\t//     is what most action bodies want — it folds the\n\t\t\t\t//     SDK-boundary cast + `include: {effects, objectTypes}`\n\t\t\t\t//     execute + finality wait + envelope projection.\n\t\t\t\tconst bodyCtx: ActionBuildContext = {\n\t\t\t\t\tsui,\n\t\t\t\t\tsignAndExecute: (account, build) =>\n\t\t\t\t\t\tsignAndExecuteImpl({\n\t\t\t\t\t\t\tactionName: name,\n\t\t\t\t\t\t\tsui,\n\t\t\t\t\t\t\taccount,\n\t\t\t\t\t\t\tbuild,\n\t\t\t\t\t\t}),\n\t\t\t\t};\n\n\t\t\t\tconst bodyDeps = resolveDependencyValues(opts.dependsOn, (member) =>\n\t\t\t\t\treadDeclaredDependency(member.id),\n\t\t\t\t) as ResolvedActionDependencies<DependsOn>;\n\t\t\t\tconst acquireInputs: ActionAcquireInputs = {\n\t\t\t\t\tactionName: name,\n\t\t\t\t\tchainId: sui.chain,\n\t\t\t\t\tstaticDiscriminator: {\n\t\t\t\t\t\tactionName: name,\n\t\t\t\t\t\tdependencyResourceIds,\n\t\t\t\t\t},\n\t\t\t\t\tdynamicMaterial: resolveDiscriminator(opts.discriminator, bodyCtx, bodyDeps),\n\t\t\t\t\tbody: opts.body(bodyCtx, bodyDeps),\n\t\t\t\t};\n\n\t\t\t\tconst receipt = yield* bootActionService(publisher, probe, acquireInputs).pipe(\n\t\t\t\t\t// `catchTags` narrows on the `_tag` discriminant so each\n\t\t\t\t\t// branch's handler sees the typed shape directly.\n\t\t\t\t\t//\n\t\t\t\t\t// The produce-side body in `service.ts` recovers any\n\t\t\t\t\t// stashed ActionError before the substrate's\n\t\t\t\t\t// mapError wrap, so an ArtifactPublishError reaching\n\t\t\t\t\t// here is always a substrate-side failure (cache\n\t\t\t\t\t// decode failure, verify exhausted). Surface those as\n\t\t\t\t\t// `phase: 'verify'` — they happen during the cache\n\t\t\t\t\t// verify cycle, not at sign-time.\n\t\t\t\t\tEffect.catchTags({\n\t\t\t\t\t\tActionError: (err) => Effect.fail(err),\n\t\t\t\t\t\tArtifactPublishError: (err) =>\n\t\t\t\t\t\t\tEffect.fail(\n\t\t\t\t\t\t\t\tactionError('verify', {\n\t\t\t\t\t\t\t\t\tactionName: name,\n\t\t\t\t\t\t\t\t\tmessage: err.detail,\n\t\t\t\t\t\t\t\t\tcause: err,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t),\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t\treturn receipt;\n\t\t\t}),\n\t\t// No capability decls today. Future surfaces (codegen of\n\t\t// action receipts, manifest extras) land here.\n\t\tcapabilities: [] as const,\n\t\t// Plugin-side error vocabulary. The supervisor's harvest loop\n\t\t// folds this into the substrate's FormatterRegistry; the\n\t\t// cascade formatter then renders `ActionError`-tagged failures\n\t\t// with the action's phase/message header.\n\t\terrorContributions: actionErrorContributions,\n\t});\n};\n\n// ---------------------------------------------------------------------------\n// Re-exports\n// ---------------------------------------------------------------------------\n\nexport type { ActionBuildContext } from './build-context.ts';\nexport type { ActionError, ActionPhase } from './errors.ts';\nexport { ACTION_ERROR_TAGS } from './errors.ts';\nexport type { DynamicDiscriminator, StaticDiscriminator } from './discriminator.ts';\nexport type { ActionReceipt } from './service.ts';\nexport { ActionReceiptSchema } from './service.ts';\nexport type { ActionObjectChange } from './execute.ts';\nexport { signAndExecute } from './execute.ts';\n\nexport { ActionSpans } from './spans.ts';\n"],"mappings":";;;;;;;;;;;;;AA6DA,MAAM,2BAA2B,yBAAyB,kBAAkB;;;;AAS5E,MAAa,oBAAyC,SACrD,UAAU;;;;;;;;;;;;;AAyDX,MAAa,UACZ,MACA,SACI;CACJ,MAAM,YAAY,SAAgD,iBAAiB,KAAK,CAAC;CAKzF,MAAM,eAAe,eAAe,KAAK,UAAU;CACnD,MAAM,eAAe,CAAC,aAAa,GAAG,aAAa;CAMnD,MAAM,wBAAwB,aAAa,KAAK,EAAE,SAAS,GAAG;AAE9D,QAAO,aAAa;EACnB,IAAI,UAAU;EACd,WAAW;EAIX,MAAM;EACN,SAAS;EACT,QAAQ,SACP,OAAO,IAAI,aAAa;GACvB,MAAM,CAAC,KAAK,GAAG,oBAAoB;GACnC,MAAM,uBAAuB,IAAI,IAChC,aAAa,KAAK,KAAK,UAAU,CAAC,IAAI,IAAI,iBAAiB,OAAO,CAAC,CACnE;AASD,QAAK,MAAM,OAAO,aACjB,KAAI,CAAC,qBAAqB,IAAI,IAAI,GAAG,CACpC,QAAO,OAAO,OAAO,KACpB,YAAY,SAAS;IACpB,YAAY;IACZ,SAAS,WAAW,KAAK,iBAAiB,IAAI,GAAG;IACjD,CAAC,CACF;GAGH,MAAM,0BAA0B,OAAwB,qBAAqB,IAAI,GAAG;GAIpF,MAAM,YAAY,OAAO;GACzB,MAAM,QAAQ,OAAO,cAA2B,IAAI,MAAM;GAc1D,MAAM,UAA8B;IACnC;IACA,iBAAiB,SAAS,UACzBA,eAAmB;KAClB,YAAY;KACZ;KACA;KACA;KACA,CAAC;IACH;GAED,MAAM,WAAW,wBAAwB,KAAK,YAAY,WACzD,uBAAuB,OAAO,GAAG,CACjC;AAmCD,UAAO,OAvBgB,kBAAkB,WAAW,OAAO;IAV1D,YAAY;IACZ,SAAS,IAAI;IACb,qBAAqB;KACpB,YAAY;KACZ;KACA;IACD,iBAAiB,qBAAqB,KAAK,eAAe,SAAS,SAAS;IAC5E,MAAM,KAAK,KAAK,SAAS,SAAS;IAGqC,CAAC,CAAC,KAWzE,OAAO,UAAU;IAChB,cAAc,QAAQ,OAAO,KAAK,IAAI;IACtC,uBAAuB,QACtB,OAAO,KACN,YAAY,UAAU;KACrB,YAAY;KACZ,SAAS,IAAI;KACb,OAAO;KACP,CAAC,CACF;IACF,CAAC,CACF;IAEA;EAGH,cAAc,EAAE;EAKhB,oBAAoB;EACpB,CAAC"}

package/dist/plugins/action/service.mjs

@@ -1,7 +1,11 @@
 import { contentHash } from "../../substrate/brand.mjs";
+import { artifactPublishError } from "../../primitives/artifact-publisher.mjs";
+import { acquireOnChainArtifact } from "../internal/acquire-on-chain-artifact.mjs";
 import { actionError } from "./errors.mjs";
+import { ActionSpans } from "./spans.mjs";
+import { withPhasePreservingProduce } from "../../substrate/runtime/phase-preserving-produce.mjs";
 import { composeDiscriminatorMaterial } from "./discriminator.mjs";
-import { Effect, Schema } from "effect";
+import { Cause, Effect, Schema } from "effect";
 import { createHash } from "node:crypto";
 Schema.Struct({
 	digest: Schema.String,
@@ -17,14 +21,10 @@ const VerifyTxShape = Schema.Struct({ digest: Schema.String });
 *  action context and resolved dependency values. Two input shapes
 *  (per `DynamicDiscriminator`) collapse onto
 *  `Effect<string | undefined, ActionError>`. */
-const resolveDiscriminator = (actionName, dynamic, ctx, deps) => {
+const resolveDiscriminator = (dynamic, ctx, deps) => {
 	if (dynamic === void 0) return Effect.succeed(void 0);
 	if (typeof dynamic === "string") return Effect.succeed(dynamic);
-	return dynamic(ctx, deps).pipe(Effect.catch((cause) => Effect.fail(cause._tag === "ActionError" ? cause : actionError("discriminator", {
-		actionName,
-		message: `Action '${actionName}': discriminator Effect failed.`,
-		cause
-	}))));
+	return dynamic(ctx, deps);
 };
 /** Build the verify-probe Effect for a given cached digest. Lenient
 *  mode coerces transient + not-found to null; the substrate then
@@ -41,43 +41,46 @@ const buildVerifyProbe = (probe, cachedDigest) => probe.get({
 *  itself surfaces a produce-failure wrap. */
 const bootActionService = (publisher, probe, inputs) => Effect.gen(function* () {
 	yield* Effect.annotateCurrentSpan({
-		"action.name": inputs.actionName,
-		"action.chain": inputs.chainId
+		[ActionSpans.name]: inputs.actionName,
+		[ActionSpans.chain]: inputs.chainId
 	});
 	const resolvedDynamic = yield* inputs.dynamicMaterial;
 	const material = composeDiscriminatorMaterial(inputs.staticDiscriminator, resolvedDynamic);
 	const inputsHash = contentHash(createHash("sha256").update(material).digest("hex"));
-	const produced = yield* publisher.publish({
-		namespace: "action",
-		chain: inputs.chainId,
-		contentHash: inputsHash,
-		verifySchema: VerifyTxShape,
-		verify: (cached) => buildVerifyProbe(probe, cached.digest),
+	const { wrappedProduce, recoverTypedError } = yield* withPhasePreservingProduce({
 		produce: Effect.gen(function* () {
-			yield* Effect.annotateCurrentSpan({ "action.phase": "building" });
-			const receipt = yield* inputs.body.pipe(Effect.catch((cause) => Effect.fail(cause?._tag === "ActionError" ? cause : actionError("sign", {
-				actionName: inputs.actionName,
-				message: `Action '${inputs.actionName}': body Effect failed.`,
-				cause
-			}))));
+			yield* Effect.annotateCurrentSpan({ [ActionSpans.phase]: "building" });
+			const receipt = yield* inputs.body.pipe(Effect.catchCause((cause) => {
+				const failed = Cause.findError(cause);
+				if (failed._tag === "Success") return Effect.fail(failed.success);
+				if (Cause.hasInterruptsOnly(cause)) return Effect.failCause(cause);
+				const defect = Cause.findDefect(cause);
+				const defectValue = defect._tag === "Success" ? defect.success : Cause.squash(cause);
+				return Effect.fail(actionError("sign", {
+					actionName: inputs.actionName,
+					message: `Action '${inputs.actionName}': body Effect raised a defect.`,
+					cause: defectValue
+				}));
+			}));
 			yield* Effect.annotateCurrentSpan({
-				"action.phase": "parsing",
-				"action.digest": receipt.digest
+				[ActionSpans.phase]: "parsing",
+				[ActionSpans.digest]: receipt.digest
 			});
 			return receipt;
-		}).pipe(Effect.mapError((err) => ({
-			_tag: "ArtifactPublishError",
-			reason: "produce-failed",
-			detail: `action.${inputs.actionName} ${err.phase}: ${err.message}`
-		}))),
-		register: (_artifact) => Effect.void
+		}),
+		wrapProduceError: (err) => artifactPublishError("produce-failed", `action.${inputs.actionName} ${err.phase}: ${err.message}`)
 	});
-	if ("digest" in produced && typeof produced.digest === "string") return produced;
-	return yield* Effect.fail(actionError("parse", {
-		actionName: inputs.actionName,
-		message: `Action '${inputs.actionName}': cached payload missing digest.`
-	}));
-});
+	return yield* acquireOnChainArtifact(publisher, {
+		namespace: "action",
+		chain: inputs.chainId,
+		contentHash: inputsHash,
+		verify: (cached) => buildVerifyProbe(probe, cached.digest),
+		produce: wrappedProduce
+	}).pipe(recoverTypedError);
+}).pipe(Effect.withSpan("devstack.plugin.action.boot", { attributes: {
+	[ActionSpans.name]: inputs.actionName,
+	[ActionSpans.chain]: inputs.chainId
+} }));
 //#endregion
 export { bootActionService, resolveDiscriminator };