@mysten-incubation/devstack 0.0.1 → 0.1.1

package/dist/plugins/walrus/deploy.mjs

@@ -1,19 +1,31 @@
+import { atomicWriteFileSync } from "../../substrate/runtime/atomic-write.mjs";
+import { labelledExcerpt } from "../../substrate/runtime/observability/output-truncate.mjs";
+import "../../substrate/runtime/observability/index.mjs";
+import { probeManyLenient } from "../../substrate/runtime/probes.mjs";
+import { DEPLOY_BIND_SOURCE_RETRY_PROFILE, makeSpacedRetrySchedule } from "../../substrate/runtime/retry-policy.mjs";
+import { HOST_GATEWAY_EXTRA_HOSTS } from "../../substrate/runtime/host-gateway.mjs";
 import { walrusDeployMountPaths } from "./deploy-paths.mjs";
 import { walrusPluginError } from "./errors.mjs";
+import { WalrusSpans } from "./spans.mjs";
+import { formatUnknownError } from "../../substrate/runtime/format-unknown-error.mjs";
+import { artifactPublishError } from "../../primitives/artifact-publisher.mjs";
+import { hostBindMountOwner } from "../../substrate/runtime/host-bind-mount-owner.mjs";
 import { Duration, Effect, Schema } from "effect";
 import { join } from "node:path";
-import { access, mkdir, writeFile } from "node:fs/promises";
-//#region src/plugins/walrus/deploy.ts
-/** Verify-schema: the publisher decodes the cached id's on-chain
-*  object through this. Minimal — the substrate's `ChainProbe`
-*  decodes against this; any decode failure surfaces structured.
-*  Distilled-doc invariant 8: the probe MUST consume a stable
-*  identifier (the object id), NOT a derived hash. */
-const WalrusDeployVerifyShape = Schema.Struct({
+import { access, mkdir } from "node:fs/promises";
+Schema.Struct({
 	systemObjectId: Schema.String,
 	stakingObjectId: Schema.String
 });
 const SuiObjectExistsShape = Schema.Struct({ objectId: Schema.String });
+/** A freshly RESTORED validator can take a few seconds to start serving the
+*  committed deploy objects (sui/system/staking); retry the deploy-verify
+*  probes across this window so a readiness race doesn't read them as
+*  not-found and trigger a spurious redeploy — which would churn the walrus
+*  deploy ids and orphan every pre-snapshot blob. A warm restart finds them on
+*  the first probe; a genuinely-wiped chain still redeploys once retries lapse. */
+const WALRUS_DEPLOY_VERIFY_READINESS_RETRIES = 5;
+const WALRUS_DEPLOY_VERIFY_READINESS_DELAY = "3 seconds";
 const requiredDeployOutputFiles = (inputs) => [join(inputs.outputDirHostPath, "deploy"), ...Array.from({ length: inputs.committeeSize }, (_, nodeIndex) => [
 	join(inputs.outputDirHostPath, `dryrun-node-${nodeIndex}.yaml`),
 	join(inputs.outputDirHostPath, `dryrun-node-${nodeIndex}-sui.yaml`),
@@ -31,40 +43,18 @@ const deployOutputFilesComplete = (inputs) => Effect.tryPromise({
 *  observed wall-clock is 30-60s. 5-minute ceiling absorbs cold-cache
 *  + slow CI runners. */
 const DEPLOY_TIMEOUT_MS = 5 * 6e4;
-const DEPLOY_BIND_SOURCE_RETRY_ATTEMPTS = 10;
-const DEPLOY_BIND_SOURCE_RETRY_DELAY_MS = 500;
 const ensureDeployOutputDir = (inputs) => Effect.tryPromise({
 	try: async () => {
 		await mkdir(inputs.outputDirHostPath, { recursive: true });
-		await writeFile(join(inputs.outputDirHostPath, ".devstack-bind-source"), "devstack walrus bind source\n", "utf8");
+		atomicWriteFileSync(join(inputs.outputDirHostPath, ".devstack-bind-source"), "devstack walrus bind source\n", { mode: 420 });
 	},
 	catch: (cause) => walrusPluginError("deploy", `walrus deploy failed to prepare output directory ${inputs.outputDirHostPath}`, { cause })
 });
-const hostBindMountOwner = () => {
-	const process = globalThis.process;
-	if (typeof process?.getuid !== "function" || typeof process.getgid !== "function") return;
-	return `${process.getuid()}:${process.getgid()}`;
-};
-const excerpt = (label, value) => {
-	const trimmed = value.trim();
-	if (trimmed.length === 0) return "";
-	const body = trimmed.length > 2400 ? `${trimmed.slice(0, 1100)}...<truncated ${trimmed.length - 2200} chars>...${trimmed.slice(-1100)}` : trimmed;
-	return ` ${label}=${JSON.stringify(body)}`;
-};
 const deployExitDetail = (result, inputs) => {
 	const missingCommandHint = result.exitCode === 127 ? " exit 127 usually means the deploy image is missing walrus-deploy or an entrypoint command." : "";
-	return `walrus deploy exited with code ${result.exitCode}.` + missingCommandHint + ` outputDir=${inputs.outputDirHostPath} committee=${inputs.committeeSize} shards=${inputs.shards}` + excerpt("stdout", result.stdout) + excerpt("stderr", result.stderr);
+	return `walrus deploy exited with code ${result.exitCode}.` + missingCommandHint + ` outputDir=${inputs.outputDirHostPath} committee=${inputs.committeeSize} shards=${inputs.shards}` + labelledExcerpt("stdout", result.stdout) + labelledExcerpt("stderr", result.stderr);
 };
 const isBindSourceMissing = (result) => result.exitCode === 125 && /bind source path does not exist/i.test(result.stderr) && /invalid mount config/i.test(result.stderr);
-const stringifyCause = (cause) => {
-	if (cause instanceof Error) return cause.message;
-	if (typeof cause === "string") return cause;
-	try {
-		return JSON.stringify(cause);
-	} catch {
-		return String(cause);
-	}
-};
 /** Parse the walrus deploy output into a `CachedDeployState`.
 *
 *  Expected output format (best-effort match against the v3 reference's
@@ -84,6 +74,7 @@ const parseDeployOutput = (stdout) => {
 	const pick = (k) => {
 		const v = new RegExp(`(?:^|\\n)\\s*${k}\\s*[:=]\\s*(\\S+)`).exec(stdout)?.[1];
 		if (v === void 0 || v === "None") return void 0;
+		if (!/^0x[0-9a-fA-F]+$/u.test(v)) return void 0;
 		return v;
 	};
 	const walrusPackageId = pick("walrus_package_id") ?? pick("package_id");
@@ -109,10 +100,14 @@ const parseDeployOutput = (stdout) => {
 *    3. Surface non-zero exits + parse failures as
 *       `WalrusPluginError('deploy')` with stdout/stderr capture. */
 const runDeployOneShot = (runtime, inputs) => Effect.gen(function* () {
-	if (inputs.waitForFundsReady !== void 0) yield* inputs.waitForFundsReady.pipe(Effect.mapError((cause) => walrusPluginError("deploy", `walrus deploy funding gate failed before walrus-deploy: ${stringifyCause(cause)}`, { cause })));
+	if (inputs.waitForFundsReady !== void 0) yield* inputs.waitForFundsReady.pipe(Effect.mapError((cause) => walrusPluginError("deploy", `walrus deploy funding gate failed before walrus-deploy: ${formatUnknownError(cause)}`, { cause })));
 	yield* ensureDeployOutputDir(inputs);
 	const outputOwner = hostBindMountOwner();
-	const outputMount = walrusDeployMountPaths(inputs.outputDirHostPath, "/opt/walrus/runtime");
+	const outputMount = walrusDeployMountPaths({
+		stackRoot: inputs.stackRoot,
+		deployOutputDirHostPath: inputs.outputDirHostPath,
+		mountTarget: "/opt/walrus/runtime"
+	});
 	const argv = [
 		"deploy",
 		"--output-dir",
@@ -141,16 +136,22 @@ const runDeployOneShot = (runtime, inputs) => Effect.gen(function* () {
 		}],
 		...outputOwner === void 0 ? {} : { env: { DEVSTACK_HOST_UID_GID: outputOwner } },
 		network: inputs.suiNetworkName,
-		extraHosts: { "host.docker.internal": "host-gateway" },
+		extraHosts: HOST_GATEWAY_EXTRA_HOSTS,
 		timeoutMillis: DEPLOY_TIMEOUT_MS
 	}).pipe(Effect.catch((cause) => Effect.fail(walrusPluginError("deploy", `walrus deploy one-shot failed: ${cause.reason}: ${cause.detail}`, { cause }))));
-	let result;
-	for (let attempt = 0;; attempt += 1) {
-		result = yield* runAttempt();
-		if (!isBindSourceMissing(result) || attempt >= DEPLOY_BIND_SOURCE_RETRY_ATTEMPTS) break;
-		yield* ensureDeployOutputDir(inputs);
-		yield* Effect.sleep(Duration.millis(DEPLOY_BIND_SOURCE_RETRY_DELAY_MS));
-	}
+	const result = yield* Effect.gen(function* () {
+		const result = yield* runAttempt();
+		if (isBindSourceMissing(result)) yield* ensureDeployOutputDir(inputs);
+		return result;
+	}).pipe(Effect.repeat({
+		schedule: makeSpacedRetrySchedule(DEPLOY_BIND_SOURCE_RETRY_PROFILE.delayMs, DEPLOY_BIND_SOURCE_RETRY_PROFILE.attempts),
+		until: (r) => !isBindSourceMissing(r)
+	}));
+	if (isBindSourceMissing(result)) return yield* Effect.fail(walrusPluginError("deploy", `walrus deploy: bind-source visibility race did not resolve after ${DEPLOY_BIND_SOURCE_RETRY_PROFILE.attempts} retries (${DEPLOY_BIND_SOURCE_RETRY_PROFILE.delayMs}ms spacing). outputDir=${inputs.outputDirHostPath} — Docker Desktop's bind-source propagation lagged past the retry budget. ` + deployExitDetail(result, inputs), {
+		exitCode: result.exitCode,
+		stdout: result.stdout,
+		stderr: result.stderr
+	}));
 	if (result.exitCode !== 0) return yield* Effect.fail(walrusPluginError("deploy", deployExitDetail(result, inputs), {
 		exitCode: result.exitCode,
 		stdout: result.stdout,
@@ -163,8 +164,8 @@ const runDeployOneShot = (runtime, inputs) => Effect.gen(function* () {
 	}));
 	return parsed;
 }).pipe(Effect.withSpan("devstack.plugin.walrus.deploy.oneShot", { attributes: {
-	"walrus.committeeSize": inputs.committeeSize,
-	"walrus.shards": inputs.shards
+	[WalrusSpans.committeeSize]: inputs.committeeSize,
+	[WalrusSpans.shards]: inputs.shards
 } }), Effect.timeoutOrElse({
 	duration: Duration.millis(DEPLOY_TIMEOUT_MS + 5e3),
 	orElse: () => Effect.fail(walrusPluginError("deploy", `walrus deploy: outer timeout ${DEPLOY_TIMEOUT_MS}ms exceeded`))
@@ -176,47 +177,44 @@ const runDeployOneShot = (runtime, inputs) => Effect.gen(function* () {
 *  Produce: real wiring — `runDeployOneShot` runs
 *  `docker run --rm walrusImage deploy …` and parses the deploy stdout.
 *
-*  Verify-hit projection: the artifact publisher primitive returns the cached
-*  `Produced` payload after verify succeeds, so callers keep the full
-*  `CachedDeployState` shape across warm restarts. */
+*  The substrate's `ArtifactPublisher.publish` returns the full
+*  `CachedDeployState` on EVERY path (decoded cached payload on hit,
+*  fresh produce on miss) — no projection dance required. */
 const deployWalrusContracts = (publisher, probe, runtime, inputs) => Effect.gen(function* () {
-	const verified = yield* publisher.publish({
+	return { state: yield* publisher.publish({
 		namespace: "walrus-deploy",
 		chain: inputs.chainId,
 		contentHash: inputs.contentHash,
-		verifySchema: WalrusDeployVerifyShape,
 		verify: (cached) => Effect.gen(function* () {
 			if (!(yield* deployOutputFilesComplete(inputs))) return null;
-			const system = yield* probe.get({
+			const probeBoth = probeManyLenient([probe.get({
 				kind: "object",
 				objectId: cached.systemObject
-			}, SuiObjectExistsShape, "lenient");
-			if (system === null) return null;
-			const staking = yield* probe.get({
+			}, SuiObjectExistsShape, "lenient"), probe.get({
 				kind: "object",
 				objectId: cached.stakingObject
-			}, SuiObjectExistsShape, "lenient");
-			if (staking === null) return null;
+			}, SuiObjectExistsShape, "lenient")]);
+			let [system, staking] = yield* probeBoth;
+			for (let attempt = 0; (system == null || staking == null) && attempt < WALRUS_DEPLOY_VERIFY_READINESS_RETRIES; attempt++) {
+				yield* Effect.sleep(WALRUS_DEPLOY_VERIFY_READINESS_DELAY);
+				[system, staking] = yield* probeBoth;
+			}
+			if (system === void 0 || system === null) return null;
+			if (staking === void 0 || staking === null) return null;
 			return {
 				systemObjectId: system.objectId,
 				stakingObjectId: staking.objectId
 			};
-		}).pipe(Effect.catch(() => Effect.succeed(null))),
-		produce: runDeployOneShot(runtime, inputs).pipe(Effect.mapError((err) => ({
-			_tag: "ArtifactPublishError",
-			reason: "produce-failed",
-			detail: `walrus.deploy ${err.phase}: ${err.message}`
-		}))),
+		}).pipe(Effect.catchTag("ChainProbeError", (err) => {
+			if (err.reason === "decode-failed" || err.reason === "no-probe-registered") return Effect.succeed(null);
+			return Effect.logWarning(`walrus.deploy verify probe surfaced an authoritative error (reason=${err.reason}, chain=${err.chain}, detail=${err.detail}); re-deploying.`).pipe(Effect.as(null));
+		})),
+		produce: runDeployOneShot(runtime, inputs).pipe(Effect.mapError((err) => artifactPublishError("produce-failed", `walrus.deploy ${err.phase}: ${err.message}`))),
 		register: () => Effect.void
-	});
-	return { state: "walrusPackageId" in verified ? verified : {
-		walrusPackageId: "<cache-hit-not-rehydrated>",
-		systemObject: verified.systemObjectId,
-		stakingObject: verified.stakingObjectId
-	} };
+	}) };
 }).pipe(Effect.withSpan("devstack.plugin.walrus.deploy", { attributes: {
-	"walrus.name": inputs.walrusName,
-	"walrus.chain": inputs.chainId
+	[WalrusSpans.name]: inputs.walrusName,
+	[WalrusSpans.chain]: inputs.chainId
 } }));
 //#endregion
 export { deployWalrusContracts };

package/dist/plugins/walrus/deploy.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.mjs","names":[],"sources":["../../../src/plugins/walrus/deploy.ts"],"sourcesContent":["// Walrus deploy one-shot — Move publish via ArtifactPublisher.\n//\n// Distilled-doc reference (06-walrus.md §\"Lifecycle phase 2\"):\n// the `walrus-deploy` one-shot:\n//   - publishes the Walrus Move package on the local sui chain,\n//   - mints a WAL exchange,\n//   - emits per-node config files (`dryrun-node-<i>.yaml`,\n//     `dryrun-node-<i>.keystore`) under `runtime/walrus/<name>/deploy/`.\n//\n// We route this through the substrate's `ArtifactPublisher`\n// primitive (architecture §10 — \"callable from any plugin; no\n// plugin-side contract to implement\"). The publisher owns:\n//   - cache key derivation (folds `chainId`),\n//   - verify probe (lenient — re-derives on transient RPC failure),\n//   - produce-on-miss (runs `walrus-deploy`),\n//   - register-on-every-cycle (so downstream consumers always see\n//     the resolved state).\n//\n// Distilled-doc invariants honored here:\n//   - 5: cache key folds `chainId`.\n//   - 6: verify checks BOTH the on-disk `deploy` file AND on-chain\n//        object existence (system + staking). Either failure\n//        invalidates and re-deploys.\n//   - 7: `runtime/walrus/<name>/deploy/` rides the snapshot tar\n//        (declared via `Snapshotable.subtrees` in `snapshot.ts`).\n//   - 10: deploy summary must contain `package_id` + `system_object`\n//        + `staking_object`. We surface parse failure as\n//        `WalrusPluginError{phase: 'deploy'}` (the publisher's\n//        `produce-failed` reason).\n\nimport { Duration, Effect, Schema, type Scope } from 'effect';\nimport { access, mkdir, writeFile } from 'node:fs/promises';\nimport { join } from 'node:path';\n\nimport type { ContainerRuntime, ImageRef } from '../../contracts/container-runtime.ts';\nimport type {\n\tArtifactPublishError,\n\tArtifactPublisher,\n} from '../../primitives/artifact-publisher.ts';\nimport type { ChainProbe } from '../../contracts/chain-probe.ts';\nimport type { ChainId, ContentHash } from '../../substrate/brand.ts';\nimport type { SuiProbeKey } from '../sui/chain-probe.ts';\nimport { walrusDeployMountPaths } from './deploy-paths.ts';\nimport { walrusPluginError, type WalrusPluginError } from './errors.ts';\n\n/** Cache-stored payload — what verify re-confirms on every cycle.\n *  Mirrors the v3 `CachedDeployState` shape (06-walrus.md §\"State-\n *  store entries\"). */\nexport interface CachedDeployState {\n\treadonly walrusPackageId: string;\n\treadonly systemObject: string;\n\treadonly stakingObject: string;\n\treadonly upgradeManagerObject?: string;\n\treadonly treasuryObject?: string;\n\treadonly exchangeObject?: string;\n}\n\n/** Verify-schema: the publisher decodes the cached id's on-chain\n *  object through this. Minimal — the substrate's `ChainProbe`\n *  decodes against this; any decode failure surfaces structured.\n *  Distilled-doc invariant 8: the probe MUST consume a stable\n *  identifier (the object id), NOT a derived hash. */\nexport const WalrusDeployVerifyShape = Schema.Struct({\n\tsystemObjectId: Schema.String,\n\tstakingObjectId: Schema.String,\n});\nexport type WalrusDeployVerified = Schema.Schema.Type<typeof WalrusDeployVerifyShape>;\n\nconst SuiObjectExistsShape = Schema.Struct({\n\tobjectId: Schema.String,\n});\n\nconst requiredDeployOutputFiles = (inputs: DeployInputs): ReadonlyArray<string> => [\n\tjoin(inputs.outputDirHostPath, 'deploy'),\n\t...Array.from({ length: inputs.committeeSize }, (_, nodeIndex) => [\n\t\tjoin(inputs.outputDirHostPath, `dryrun-node-${nodeIndex}.yaml`),\n\t\tjoin(inputs.outputDirHostPath, `dryrun-node-${nodeIndex}-sui.yaml`),\n\t\tjoin(inputs.outputDirHostPath, `dryrun-node-${nodeIndex}.keystore`),\n\t]).flat(),\n];\n\nconst deployOutputFilesComplete = (\n\tinputs: DeployInputs,\n): Effect.Effect<boolean, WalrusPluginError> =>\n\tEffect.tryPromise({\n\t\ttry: async () => {\n\t\t\tawait Promise.all(requiredDeployOutputFiles(inputs).map((file) => access(file)));\n\t\t\treturn true;\n\t\t},\n\t\tcatch: (cause) =>\n\t\t\twalrusPluginError(\n\t\t\t\t'deploy',\n\t\t\t\t`walrus deploy cache is missing local output files under ${inputs.outputDirHostPath}`,\n\t\t\t\t{ cause },\n\t\t\t),\n\t}).pipe(Effect.catch(() => Effect.succeed(false)));\n\n/** Inputs to one deploy round. */\nexport interface DeployInputs {\n\treadonly walrusName: string;\n\treadonly chainId: ChainId;\n\treadonly contentHash: ContentHash;\n\t/** Pre-derived host output dir — substrate's `servicePath('walrus',\n\t *  name, 'deploy')` equivalent. Persists across teardown\n\t *  (distilled-doc §\"What survives teardown\"). */\n\treadonly outputDirHostPath: string;\n\treadonly suiRpcUrlInNetwork: string;\n\treadonly walrusFaucetUrlInNetwork: string;\n\treadonly committeeSize: number;\n\treadonly shards: number;\n\treadonly epochDuration: string;\n\treadonly publicHostsCsv: string;\n\treadonly listeningIpsCsv: string;\n\t/** Wrapper image — the cargo-built walrus image (bootstrap asset).\n\t *  The deploy one-shot is `docker run --rm <image> deploy …`. */\n\treadonly walrusImage: ImageRef;\n\t/** Docker network the deploy one-shot attaches to, so its in-network\n\t *  Sui RPC + faucet hostnames resolve. */\n\treadonly suiNetworkName: string;\n\t/** Centralized Sui funding readiness gate. Local Sui exposes this so\n\t *  callers don't race the faucet's socket-ready / funds-ready gap. */\n\treadonly waitForFundsReady?: Effect.Effect<void, unknown>;\n}\n\n/** Default deploy one-shot timeout. Walrus genesis publish runs the\n *  Move publish + WAL exchange creation + per-node config emission;\n *  observed wall-clock is 30-60s. 5-minute ceiling absorbs cold-cache\n *  + slow CI runners. */\nconst DEPLOY_TIMEOUT_MS = 5 * 60_000;\nconst DEPLOY_BIND_SOURCE_RETRY_ATTEMPTS = 10;\nconst DEPLOY_BIND_SOURCE_RETRY_DELAY_MS = 500;\n\nconst ensureDeployOutputDir = (inputs: DeployInputs): Effect.Effect<void, WalrusPluginError> =>\n\tEffect.tryPromise({\n\t\ttry: async () => {\n\t\t\tawait mkdir(inputs.outputDirHostPath, { recursive: true });\n\t\t\tawait writeFile(\n\t\t\t\tjoin(inputs.outputDirHostPath, '.devstack-bind-source'),\n\t\t\t\t'devstack walrus bind source\\n',\n\t\t\t\t'utf8',\n\t\t\t);\n\t\t},\n\t\tcatch: (cause) =>\n\t\t\twalrusPluginError(\n\t\t\t\t'deploy',\n\t\t\t\t`walrus deploy failed to prepare output directory ${inputs.outputDirHostPath}`,\n\t\t\t\t{ cause },\n\t\t\t),\n\t});\n\nconst hostBindMountOwner = (): string | undefined => {\n\tconst process = (\n\t\tglobalThis as {\n\t\t\tprocess?: { getuid?: () => number; getgid?: () => number };\n\t\t}\n\t).process;\n\tif (typeof process?.getuid !== 'function' || typeof process.getgid !== 'function') {\n\t\treturn undefined;\n\t}\n\treturn `${process.getuid()}:${process.getgid()}`;\n};\n\nconst excerpt = (label: string, value: string): string => {\n\tconst trimmed = value.trim();\n\tif (trimmed.length === 0) return '';\n\tconst max = 2_400;\n\tconst body =\n\t\ttrimmed.length > max\n\t\t\t? `${trimmed.slice(0, 1_100)}...<truncated ${trimmed.length - 2_200} chars>...${trimmed.slice(-1_100)}`\n\t\t\t: trimmed;\n\treturn ` ${label}=${JSON.stringify(body)}`;\n};\n\nconst deployExitDetail = (\n\tresult: { readonly exitCode: number; readonly stdout: string; readonly stderr: string },\n\tinputs: DeployInputs,\n): string => {\n\tconst missingCommandHint =\n\t\tresult.exitCode === 127\n\t\t\t? ' exit 127 usually means the deploy image is missing walrus-deploy or an entrypoint command.'\n\t\t\t: '';\n\treturn (\n\t\t`walrus deploy exited with code ${result.exitCode}.` +\n\t\tmissingCommandHint +\n\t\t` outputDir=${inputs.outputDirHostPath} committee=${inputs.committeeSize} shards=${inputs.shards}` +\n\t\texcerpt('stdout', result.stdout) +\n\t\texcerpt('stderr', result.stderr)\n\t);\n};\n\nconst isBindSourceMissing = (result: {\n\treadonly exitCode: number;\n\treadonly stderr: string;\n}): boolean =>\n\tresult.exitCode === 125 &&\n\t/bind source path does not exist/i.test(result.stderr) &&\n\t/invalid mount config/i.test(result.stderr);\n\nconst stringifyCause = (cause: unknown): string => {\n\tif (cause instanceof Error) return cause.message;\n\tif (typeof cause === 'string') return cause;\n\ttry {\n\t\treturn JSON.stringify(cause);\n\t} catch {\n\t\treturn String(cause);\n\t}\n};\n\n/** Parse the walrus deploy output into a `CachedDeployState`.\n *\n *  Expected output format (best-effort match against the v3 reference's\n *  deploy stdout — the walrus binary's exact format may drift between\n *  versions):\n *\n *    walrus_package_id: 0x<hex>\n *    system_object: 0x<hex>\n *    staking_object: 0x<hex>\n *    upgrade_manager_object: 0x<hex>      (optional)\n *    treasury_object: 0x<hex>             (optional)\n *    exchange_object: 0x<hex>             (optional)\n *\n *  Returns the parsed state OR a typed `WalrusPluginError('deploy')`\n *  surfaced with stdout/stderr capture for debugging. */\nexport const parseDeployOutput = (stdout: string): CachedDeployState | null => {\n\t// Match `key: value` (or `key = value`) lines; treat `None` as\n\t// \"absent\" per the upstream walrus-deploy output convention. The\n\t// pattern is permissive on the value (`\\S+`) — walrus-deploy\n\t// versions have varied on the exact hex format, and the substrate's\n\t// downstream `ChainProbe` re-validates the id shape anyway.\n\tconst pick = (k: string): string | undefined => {\n\t\tconst re = new RegExp(`(?:^|\\\\n)\\\\s*${k}\\\\s*[:=]\\\\s*(\\\\S+)`);\n\t\tconst m = re.exec(stdout);\n\t\tconst v = m?.[1];\n\t\tif (v === undefined || v === 'None') return undefined;\n\t\treturn v;\n\t};\n\tconst walrusPackageId = pick('walrus_package_id') ?? pick('package_id');\n\tconst systemObject = pick('system_object') ?? pick('system_object_id');\n\tconst stakingObject =\n\t\tpick('staking_object') ?? pick('staking_pool_id') ?? pick('staking_object_id');\n\tif (!walrusPackageId || !systemObject || !stakingObject) return null;\n\treturn {\n\t\twalrusPackageId,\n\t\tsystemObject,\n\t\tstakingObject,\n\t\tupgradeManagerObject: pick('upgrade_manager_object'),\n\t\ttreasuryObject: pick('treasury_object'),\n\t\texchangeObject: pick('exchange_object'),\n\t};\n};\n\n/** Run the walrus-deploy one-shot and parse the output.\n *\n *  Implementation:\n *    1. `runtime.runOneShot({ image, argv: ['deploy', ...] })` —\n *       fresh `docker run --rm` container. Mount the host output dir\n *       at `/opt/walrus/outputs` so the per-node config files persist.\n *    2. Parse stdout for the deploy summary.\n *    3. Surface non-zero exits + parse failures as\n *       `WalrusPluginError('deploy')` with stdout/stderr capture. */\nexport const runDeployOneShot = (\n\truntime: ContainerRuntime,\n\tinputs: DeployInputs,\n): Effect.Effect<CachedDeployState, WalrusPluginError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tif (inputs.waitForFundsReady !== undefined) {\n\t\t\tyield* inputs.waitForFundsReady.pipe(\n\t\t\t\tEffect.mapError((cause) =>\n\t\t\t\t\twalrusPluginError(\n\t\t\t\t\t\t'deploy',\n\t\t\t\t\t\t`walrus deploy funding gate failed before walrus-deploy: ${stringifyCause(cause)}`,\n\t\t\t\t\t\t{ cause },\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\tyield* ensureDeployOutputDir(inputs);\n\n\t\tconst outputOwner = hostBindMountOwner();\n\t\tconst outputMount = walrusDeployMountPaths(inputs.outputDirHostPath, '/opt/walrus/runtime');\n\t\tconst argv: ReadonlyArray<string> = [\n\t\t\t'deploy',\n\t\t\t'--output-dir',\n\t\t\toutputMount.outputDirInContainer,\n\t\t\t'--committee-size',\n\t\t\tString(inputs.committeeSize),\n\t\t\t'--shards',\n\t\t\tString(inputs.shards),\n\t\t\t'--epoch-duration',\n\t\t\tinputs.epochDuration,\n\t\t\t'--sui-rpc-url',\n\t\t\tinputs.suiRpcUrlInNetwork,\n\t\t\t'--faucet-url',\n\t\t\tinputs.walrusFaucetUrlInNetwork,\n\t\t\t'--public-hosts',\n\t\t\tinputs.publicHostsCsv,\n\t\t\t'--listening-ips',\n\t\t\tinputs.listeningIpsCsv,\n\t\t];\n\n\t\tconst runAttempt = () =>\n\t\t\truntime\n\t\t\t\t.runOneShot({\n\t\t\t\t\timage: inputs.walrusImage,\n\t\t\t\t\targv,\n\t\t\t\t\tmounts: [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tsource: outputMount.sourceHostPath,\n\t\t\t\t\t\t\ttarget: outputMount.mountTarget,\n\t\t\t\t\t\t},\n\t\t\t\t\t],\n\t\t\t\t\t...(outputOwner === undefined ? {} : { env: { DEVSTACK_HOST_UID_GID: outputOwner } }),\n\t\t\t\t\tnetwork: inputs.suiNetworkName,\n\t\t\t\t\t// Same `host-gateway` rationale as storage-nodes.ts —\n\t\t\t\t\t// deploy one-shot dials sui's host-bound RPC + faucet via\n\t\t\t\t\t// `host.docker.internal`. Native Linux Docker needs the\n\t\t\t\t\t// explicit mapping; Docker Desktop is a no-op.\n\t\t\t\t\textraHosts: { 'host.docker.internal': 'host-gateway' },\n\t\t\t\t\ttimeoutMillis: DEPLOY_TIMEOUT_MS,\n\t\t\t\t})\n\t\t\t\t.pipe(\n\t\t\t\t\tEffect.catch((cause) =>\n\t\t\t\t\t\tEffect.fail(\n\t\t\t\t\t\t\twalrusPluginError(\n\t\t\t\t\t\t\t\t'deploy',\n\t\t\t\t\t\t\t\t`walrus deploy one-shot failed: ${cause.reason}: ${cause.detail}`,\n\t\t\t\t\t\t\t\t{ cause },\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t);\n\n\t\tlet result: { readonly exitCode: number; readonly stdout: string; readonly stderr: string };\n\t\tfor (let attempt = 0; ; attempt += 1) {\n\t\t\tresult = yield* runAttempt();\n\t\t\tif (!isBindSourceMissing(result) || attempt >= DEPLOY_BIND_SOURCE_RETRY_ATTEMPTS) break;\n\t\t\tyield* ensureDeployOutputDir(inputs);\n\t\t\tyield* Effect.sleep(Duration.millis(DEPLOY_BIND_SOURCE_RETRY_DELAY_MS));\n\t\t}\n\n\t\tif (result.exitCode !== 0) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\twalrusPluginError('deploy', deployExitDetail(result, inputs), {\n\t\t\t\t\texitCode: result.exitCode,\n\t\t\t\t\tstdout: result.stdout,\n\t\t\t\t\tstderr: result.stderr,\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\n\t\tconst parsed = parseDeployOutput(result.stdout);\n\t\tif (!parsed) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\twalrusPluginError(\n\t\t\t\t\t'deploy',\n\t\t\t\t\t`walrus deploy: parser could not find walrus_package_id / system_object / staking_object ` +\n\t\t\t\t\t\t`in deploy output. Confirm the walrus binary's output format and adjust ` +\n\t\t\t\t\t\t`\\`parseDeployOutput\\` regexes in deploy.ts. ` +\n\t\t\t\t\t\t`SEAM: see deploy.ts header for the expected format.`,\n\t\t\t\t\t{ stdout: result.stdout, stderr: result.stderr },\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\treturn parsed;\n\t}).pipe(\n\t\tEffect.withSpan('devstack.plugin.walrus.deploy.oneShot', {\n\t\t\tattributes: { 'walrus.committeeSize': inputs.committeeSize, 'walrus.shards': inputs.shards },\n\t\t}),\n\t\tEffect.timeoutOrElse({\n\t\t\tduration: Duration.millis(DEPLOY_TIMEOUT_MS + 5_000),\n\t\t\torElse: () =>\n\t\t\t\tEffect.fail(\n\t\t\t\t\twalrusPluginError(\n\t\t\t\t\t\t'deploy',\n\t\t\t\t\t\t`walrus deploy: outer timeout ${DEPLOY_TIMEOUT_MS}ms exceeded`,\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t}),\n\t);\n\n/** Outputs of one deploy round — surfaced to the plugin's\n *  resolved value. */\nexport interface DeployOutputs {\n\treadonly state: CachedDeployState;\n}\n\n/** Compose the ArtifactSpec for a walrus deploy and dispatch\n *  through the substrate primitive. The publisher handles the full\n *  cache/verify/produce/register loop.\n *\n *  Produce: real wiring — `runDeployOneShot` runs\n *  `docker run --rm walrusImage deploy …` and parses the deploy stdout.\n *\n *  Verify-hit projection: the artifact publisher primitive returns the cached\n *  `Produced` payload after verify succeeds, so callers keep the full\n *  `CachedDeployState` shape across warm restarts. */\nexport const deployWalrusContracts = (\n\tpublisher: ArtifactPublisher,\n\tprobe: ChainProbe<SuiProbeKey>,\n\truntime: ContainerRuntime,\n\tinputs: DeployInputs,\n): Effect.Effect<DeployOutputs, WalrusPluginError | ArtifactPublishError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tconst verified = yield* publisher.publish<CachedDeployState, WalrusDeployVerified>({\n\t\t\tnamespace: 'walrus-deploy',\n\t\t\tchain: inputs.chainId,\n\t\t\tcontentHash: inputs.contentHash,\n\t\t\tverifySchema: WalrusDeployVerifyShape,\n\t\t\t// Verify: lenient probes of the cached system + staking\n\t\t\t// objects. The Sui chain probe decodes raw `getObject`\n\t\t\t// responses, so the probe schema matches that envelope and\n\t\t\t// this closure returns the compact verified shape.\n\t\t\tverify: (cached) =>\n\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\tif (!(yield* deployOutputFilesComplete(inputs))) return null;\n\n\t\t\t\t\tconst system = yield* probe.get(\n\t\t\t\t\t\t{ kind: 'object', objectId: cached.systemObject },\n\t\t\t\t\t\tSuiObjectExistsShape,\n\t\t\t\t\t\t'lenient',\n\t\t\t\t\t);\n\t\t\t\t\tif (system === null) return null;\n\n\t\t\t\t\tconst staking = yield* probe.get(\n\t\t\t\t\t\t{ kind: 'object', objectId: cached.stakingObject },\n\t\t\t\t\t\tSuiObjectExistsShape,\n\t\t\t\t\t\t'lenient',\n\t\t\t\t\t);\n\t\t\t\t\tif (staking === null) return null;\n\n\t\t\t\t\treturn {\n\t\t\t\t\t\tsystemObjectId: system.objectId,\n\t\t\t\t\t\tstakingObjectId: staking.objectId,\n\t\t\t\t\t} satisfies WalrusDeployVerified;\n\t\t\t\t}).pipe(Effect.catch(() => Effect.succeed(null as WalrusDeployVerified | null))),\n\t\t\t// Produce: real walrus-deploy one-shot.\n\t\t\tproduce: runDeployOneShot(runtime, inputs).pipe(\n\t\t\t\tEffect.mapError(\n\t\t\t\t\t(err): ArtifactPublishError => ({\n\t\t\t\t\t\t_tag: 'ArtifactPublishError',\n\t\t\t\t\t\treason: 'produce-failed',\n\t\t\t\t\t\tdetail: `walrus.deploy ${err.phase}: ${err.message}`,\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t\t),\n\t\t\t// Register: fires on EVERY cycle. The plugin's outer body\n\t\t\t// performs the walrus-state / endpoint / package registry\n\t\t\t// publishes after both deploy + storage-nodes are up; this\n\t\t\t// closure is the publisher-side null-op so the substrate\n\t\t\t// satisfies its Invariant-6 contract.\n\t\t\tregister: () => Effect.void,\n\t\t});\n\n\t\t// Project Produced ∪ Verified onto CachedDeployState. artifact publisher returns\n\t\t// the cached Produced payload on verify-hit, but keep a defensive\n\t\t// projection for custom publisher implementations in tests.\n\t\tconst state: CachedDeployState =\n\t\t\t'walrusPackageId' in verified\n\t\t\t\t? verified\n\t\t\t\t: {\n\t\t\t\t\t\t// Verify-hit path: synthesize from the cached id's.\n\t\t\t\t\t\t// The richer fields (packageId, exchange etc.) live\n\t\t\t\t\t\t// in the on-disk artifact publisher cache; downstream consumers\n\t\t\t\t\t\t// surface them through the in-process registry. The\n\t\t\t\t\t\t// artifact publisher primitive's next API revision will hand the\n\t\t\t\t\t\t// full Produced payload back here directly —\n\t\t\t\t\t\t// architecture revision tracked in the file header.\n\t\t\t\t\t\twalrusPackageId: '<cache-hit-not-rehydrated>',\n\t\t\t\t\t\tsystemObject: verified.systemObjectId,\n\t\t\t\t\t\tstakingObject: verified.stakingObjectId,\n\t\t\t\t\t};\n\n\t\treturn { state };\n\t}).pipe(\n\t\tEffect.withSpan('devstack.plugin.walrus.deploy', {\n\t\t\tattributes: { 'walrus.name': inputs.walrusName, 'walrus.chain': inputs.chainId },\n\t\t}),\n\t);\n"],"mappings":";;;;;;;;;;;AA8DA,MAAa,0BAA0B,OAAO,OAAO;CACpD,gBAAgB,OAAO;CACvB,iBAAiB,OAAO;CACxB,CAAC;AAGF,MAAM,uBAAuB,OAAO,OAAO,EAC1C,UAAU,OAAO,QACjB,CAAC;AAEF,MAAM,6BAA6B,WAAgD,CAClF,KAAK,OAAO,mBAAmB,SAAS,EACxC,GAAG,MAAM,KAAK,EAAE,QAAQ,OAAO,eAAe,GAAG,GAAG,cAAc;CACjE,KAAK,OAAO,mBAAmB,eAAe,UAAU,OAAO;CAC/D,KAAK,OAAO,mBAAmB,eAAe,UAAU,WAAW;CACnE,KAAK,OAAO,mBAAmB,eAAe,UAAU,WAAW;CACnE,CAAC,CAAC,MAAM,CACT;AAED,MAAM,6BACL,WAEA,OAAO,WAAW;CACjB,KAAK,YAAY;AAChB,QAAM,QAAQ,IAAI,0BAA0B,OAAO,CAAC,KAAK,SAAS,OAAO,KAAK,CAAC,CAAC;AAChF,SAAO;;CAER,QAAQ,UACP,kBACC,UACA,2DAA2D,OAAO,qBAClE,EAAE,OAAO,CACT;CACF,CAAC,CAAC,KAAK,OAAO,YAAY,OAAO,QAAQ,MAAM,CAAC,CAAC;;;;;AAiCnD,MAAM,oBAAoB,IAAI;AAC9B,MAAM,oCAAoC;AAC1C,MAAM,oCAAoC;AAE1C,MAAM,yBAAyB,WAC9B,OAAO,WAAW;CACjB,KAAK,YAAY;AAChB,QAAM,MAAM,OAAO,mBAAmB,EAAE,WAAW,MAAM,CAAC;AAC1D,QAAM,UACL,KAAK,OAAO,mBAAmB,wBAAwB,EACvD,iCACA,OACA;;CAEF,QAAQ,UACP,kBACC,UACA,oDAAoD,OAAO,qBAC3D,EAAE,OAAO,CACT;CACF,CAAC;AAEH,MAAM,2BAA+C;CACpD,MAAM,UACL,WAGC;AACF,KAAI,OAAO,SAAS,WAAW,cAAc,OAAO,QAAQ,WAAW,WACtE;AAED,QAAO,GAAG,QAAQ,QAAQ,CAAC,GAAG,QAAQ,QAAQ;;AAG/C,MAAM,WAAW,OAAe,UAA0B;CACzD,MAAM,UAAU,MAAM,MAAM;AAC5B,KAAI,QAAQ,WAAW,EAAG,QAAO;CAEjC,MAAM,OACL,QAAQ,SAAS,OACd,GAAG,QAAQ,MAAM,GAAG,KAAM,CAAC,gBAAgB,QAAQ,SAAS,KAAM,YAAY,QAAQ,MAAM,MAAO,KACnG;AACJ,QAAO,IAAI,MAAM,GAAG,KAAK,UAAU,KAAK;;AAGzC,MAAM,oBACL,QACA,WACY;CACZ,MAAM,qBACL,OAAO,aAAa,MACjB,gGACA;AACJ,QACC,kCAAkC,OAAO,SAAS,KAClD,qBACA,cAAc,OAAO,kBAAkB,aAAa,OAAO,cAAc,UAAU,OAAO,WAC1F,QAAQ,UAAU,OAAO,OAAO,GAChC,QAAQ,UAAU,OAAO,OAAO;;AAIlC,MAAM,uBAAuB,WAI5B,OAAO,aAAa,OACpB,mCAAmC,KAAK,OAAO,OAAO,IACtD,wBAAwB,KAAK,OAAO,OAAO;AAE5C,MAAM,kBAAkB,UAA2B;AAClD,KAAI,iBAAiB,MAAO,QAAO,MAAM;AACzC,KAAI,OAAO,UAAU,SAAU,QAAO;AACtC,KAAI;AACH,SAAO,KAAK,UAAU,MAAM;SACrB;AACP,SAAO,OAAO,MAAM;;;;;;;;;;;;;;;;;;AAmBtB,MAAa,qBAAqB,WAA6C;CAM9E,MAAM,QAAQ,MAAkC;EAG/C,MAAM,IADI,IADK,OAAO,gBAAgB,EAAE,oBAC5B,CAAC,KAAK,OACP,GAAG;AACd,MAAI,MAAM,KAAA,KAAa,MAAM,OAAQ,QAAO,KAAA;AAC5C,SAAO;;CAER,MAAM,kBAAkB,KAAK,oBAAoB,IAAI,KAAK,aAAa;CACvE,MAAM,eAAe,KAAK,gBAAgB,IAAI,KAAK,mBAAmB;CACtE,MAAM,gBACL,KAAK,iBAAiB,IAAI,KAAK,kBAAkB,IAAI,KAAK,oBAAoB;AAC/E,KAAI,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,cAAe,QAAO;AAChE,QAAO;EACN;EACA;EACA;EACA,sBAAsB,KAAK,yBAAyB;EACpD,gBAAgB,KAAK,kBAAkB;EACvC,gBAAgB,KAAK,kBAAkB;EACvC;;;;;;;;;;;AAYF,MAAa,oBACZ,SACA,WAEA,OAAO,IAAI,aAAa;AACvB,KAAI,OAAO,sBAAsB,KAAA,EAChC,QAAO,OAAO,kBAAkB,KAC/B,OAAO,UAAU,UAChB,kBACC,UACA,2DAA2D,eAAe,MAAM,IAChF,EAAE,OAAO,CACT,CACD,CACD;AAEF,QAAO,sBAAsB,OAAO;CAEpC,MAAM,cAAc,oBAAoB;CACxC,MAAM,cAAc,uBAAuB,OAAO,mBAAmB,sBAAsB;CAC3F,MAAM,OAA8B;EACnC;EACA;EACA,YAAY;EACZ;EACA,OAAO,OAAO,cAAc;EAC5B;EACA,OAAO,OAAO,OAAO;EACrB;EACA,OAAO;EACP;EACA,OAAO;EACP;EACA,OAAO;EACP;EACA,OAAO;EACP;EACA,OAAO;EACP;CAED,MAAM,mBACL,QACE,WAAW;EACX,OAAO,OAAO;EACd;EACA,QAAQ,CACP;GACC,QAAQ,YAAY;GACpB,QAAQ,YAAY;GACpB,CACD;EACD,GAAI,gBAAgB,KAAA,IAAY,EAAE,GAAG,EAAE,KAAK,EAAE,uBAAuB,aAAa,EAAE;EACpF,SAAS,OAAO;EAKhB,YAAY,EAAE,wBAAwB,gBAAgB;EACtD,eAAe;EACf,CAAC,CACD,KACA,OAAO,OAAO,UACb,OAAO,KACN,kBACC,UACA,kCAAkC,MAAM,OAAO,IAAI,MAAM,UACzD,EAAE,OAAO,CACT,CACD,CACD,CACD;CAEH,IAAI;AACJ,MAAK,IAAI,UAAU,IAAK,WAAW,GAAG;AACrC,WAAS,OAAO,YAAY;AAC5B,MAAI,CAAC,oBAAoB,OAAO,IAAI,WAAW,kCAAmC;AAClF,SAAO,sBAAsB,OAAO;AACpC,SAAO,OAAO,MAAM,SAAS,OAAO,kCAAkC,CAAC;;AAGxE,KAAI,OAAO,aAAa,EACvB,QAAO,OAAO,OAAO,KACpB,kBAAkB,UAAU,iBAAiB,QAAQ,OAAO,EAAE;EAC7D,UAAU,OAAO;EACjB,QAAQ,OAAO;EACf,QAAQ,OAAO;EACf,CAAC,CACF;CAGF,MAAM,SAAS,kBAAkB,OAAO,OAAO;AAC/C,KAAI,CAAC,OACJ,QAAO,OAAO,OAAO,KACpB,kBACC,UACA,gQAIA;EAAE,QAAQ,OAAO;EAAQ,QAAQ,OAAO;EAAQ,CAChD,CACD;AAEF,QAAO;EACN,CAAC,KACF,OAAO,SAAS,yCAAyC,EACxD,YAAY;CAAE,wBAAwB,OAAO;CAAe,iBAAiB,OAAO;CAAQ,EAC5F,CAAC,EACF,OAAO,cAAc;CACpB,UAAU,SAAS,OAAO,oBAAoB,IAAM;CACpD,cACC,OAAO,KACN,kBACC,UACA,gCAAgC,kBAAkB,aAClD,CACD;CACF,CAAC,CACF;;;;;;;;;;;AAkBF,MAAa,yBACZ,WACA,OACA,SACA,WAEA,OAAO,IAAI,aAAa;CACvB,MAAM,WAAW,OAAO,UAAU,QAAiD;EAClF,WAAW;EACX,OAAO,OAAO;EACd,aAAa,OAAO;EACpB,cAAc;EAKd,SAAS,WACR,OAAO,IAAI,aAAa;AACvB,OAAI,EAAE,OAAO,0BAA0B,OAAO,EAAG,QAAO;GAExD,MAAM,SAAS,OAAO,MAAM,IAC3B;IAAE,MAAM;IAAU,UAAU,OAAO;IAAc,EACjD,sBACA,UACA;AACD,OAAI,WAAW,KAAM,QAAO;GAE5B,MAAM,UAAU,OAAO,MAAM,IAC5B;IAAE,MAAM;IAAU,UAAU,OAAO;IAAe,EAClD,sBACA,UACA;AACD,OAAI,YAAY,KAAM,QAAO;AAE7B,UAAO;IACN,gBAAgB,OAAO;IACvB,iBAAiB,QAAQ;IACzB;IACA,CAAC,KAAK,OAAO,YAAY,OAAO,QAAQ,KAAoC,CAAC,CAAC;EAEjF,SAAS,iBAAiB,SAAS,OAAO,CAAC,KAC1C,OAAO,UACL,SAA+B;GAC/B,MAAM;GACN,QAAQ;GACR,QAAQ,iBAAiB,IAAI,MAAM,IAAI,IAAI;GAC3C,EACD,CACD;EAMD,gBAAgB,OAAO;EACvB,CAAC;AAqBF,QAAO,EAAE,OAfR,qBAAqB,WAClB,WACA;EAQA,iBAAiB;EACjB,cAAc,SAAS;EACvB,eAAe,SAAS;EACxB,EAEY;EACf,CAAC,KACF,OAAO,SAAS,iCAAiC,EAChD,YAAY;CAAE,eAAe,OAAO;CAAY,gBAAgB,OAAO;CAAS,EAChF,CAAC,CACF"}
+{"version":3,"file":"deploy.mjs","names":[],"sources":["../../../src/plugins/walrus/deploy.ts"],"sourcesContent":["// Walrus deploy one-shot — Move publish via ArtifactPublisher.\n//\n// Distilled-doc reference (06-walrus.md §\"Lifecycle phase 2\"):\n// the `walrus-deploy` one-shot:\n//   - publishes the Walrus Move package on the local sui chain,\n//   - mints a WAL exchange,\n//   - emits per-node config files (`dryrun-node-<i>.yaml`,\n//     `dryrun-node-<i>.keystore`) under `runtime/walrus/<name>/deploy/`.\n//\n// We route this through the substrate's `ArtifactPublisher`\n// primitive (architecture §10 — \"callable from any plugin; no\n// plugin-side contract to implement\"). The publisher owns:\n//   - cache key derivation (folds `chainId`),\n//   - verify probe (lenient — re-derives on transient RPC failure),\n//   - produce-on-miss (runs `walrus-deploy`),\n//   - register-on-every-cycle (so downstream consumers always see\n//     the resolved state).\n//\n// Distilled-doc invariants honored here:\n//   - 5: cache key folds `chainId`.\n//   - 6: verify checks BOTH the on-disk `deploy` file AND on-chain\n//        object existence (system + staking). Either failure\n//        invalidates and re-deploys.\n//   - 7: `runtime/walrus/<name>/deploy/` rides the snapshot tar\n//        (declared via `Snapshotable.subtrees` in `snapshot.ts`).\n//   - 10: deploy summary must contain `package_id` + `system_object`\n//        + `staking_object`. We surface parse failure as\n//        `WalrusPluginError{phase: 'deploy'}` (the publisher's\n//        `produce-failed` reason).\n\nimport { Duration, Effect, Schema, type Scope } from 'effect';\nimport { access, mkdir } from 'node:fs/promises';\nimport { join } from 'node:path';\n\nimport type { ContainerRuntime, ImageRef } from '../../contracts/container-runtime.ts';\nimport {\n\tartifactPublishError,\n\ttype ArtifactPublishError,\n\ttype ArtifactPublisher,\n} from '../../primitives/artifact-publisher.ts';\nimport type { ChainProbe } from '../../contracts/chain-probe.ts';\nimport type { ChainId, ContentHash } from '../../substrate/brand.ts';\nimport { atomicWriteFileSync } from '../../substrate/runtime/atomic-write.ts';\nimport { hostBindMountOwner } from '../../substrate/runtime/host-bind-mount-owner.ts';\nimport { HOST_GATEWAY_EXTRA_HOSTS } from '../../substrate/runtime/host-gateway.ts';\nimport { probeManyLenient } from '../../substrate/runtime/probes.ts';\nimport {\n\tDEPLOY_BIND_SOURCE_RETRY_PROFILE,\n\tmakeSpacedRetrySchedule,\n} from '../../substrate/runtime/retry-policy.ts';\nimport { formatUnknownError } from '../../substrate/runtime/format-unknown-error.ts';\nimport { labelledExcerpt } from '../../substrate/runtime/observability/index.ts';\nimport type { SuiProbeKey } from '../sui/index.ts';\nimport { walrusDeployMountPaths } from './deploy-paths.ts';\nimport { walrusPluginError, type WalrusPluginError } from './errors.ts';\nimport { WalrusSpans } from './spans.ts';\n\n/** Cache-stored payload — what verify re-confirms on every cycle.\n *  Mirrors the v3 `CachedDeployState` shape (06-walrus.md §\"State-\n *  store entries\"). */\nexport interface CachedDeployState {\n\treadonly walrusPackageId: string;\n\treadonly systemObject: string;\n\treadonly stakingObject: string;\n\treadonly upgradeManagerObject?: string;\n\treadonly treasuryObject?: string;\n\treadonly exchangeObject?: string;\n}\n\n/** Verify-schema: the publisher decodes the cached id's on-chain\n *  object through this. Minimal — the substrate's `ChainProbe`\n *  decodes against this; any decode failure surfaces structured.\n *  Distilled-doc invariant 8: the probe MUST consume a stable\n *  identifier (the object id), NOT a derived hash. */\nexport const WalrusDeployVerifyShape = Schema.Struct({\n\tsystemObjectId: Schema.String,\n\tstakingObjectId: Schema.String,\n});\nexport type WalrusDeployVerified = Schema.Schema.Type<typeof WalrusDeployVerifyShape>;\n\nconst SuiObjectExistsShape = Schema.Struct({\n\tobjectId: Schema.String,\n});\n\n/** A freshly RESTORED validator can take a few seconds to start serving the\n *  committed deploy objects (sui/system/staking); retry the deploy-verify\n *  probes across this window so a readiness race doesn't read them as\n *  not-found and trigger a spurious redeploy — which would churn the walrus\n *  deploy ids and orphan every pre-snapshot blob. A warm restart finds them on\n *  the first probe; a genuinely-wiped chain still redeploys once retries lapse. */\nconst WALRUS_DEPLOY_VERIFY_READINESS_RETRIES = 5;\nconst WALRUS_DEPLOY_VERIFY_READINESS_DELAY = '3 seconds';\n\nconst requiredDeployOutputFiles = (inputs: DeployInputs): ReadonlyArray<string> => [\n\tjoin(inputs.outputDirHostPath, 'deploy'),\n\t...Array.from({ length: inputs.committeeSize }, (_, nodeIndex) => [\n\t\tjoin(inputs.outputDirHostPath, `dryrun-node-${nodeIndex}.yaml`),\n\t\tjoin(inputs.outputDirHostPath, `dryrun-node-${nodeIndex}-sui.yaml`),\n\t\tjoin(inputs.outputDirHostPath, `dryrun-node-${nodeIndex}.keystore`),\n\t]).flat(),\n];\n\nconst deployOutputFilesComplete = (\n\tinputs: DeployInputs,\n): Effect.Effect<boolean, WalrusPluginError> =>\n\tEffect.tryPromise({\n\t\ttry: async () => {\n\t\t\tawait Promise.all(requiredDeployOutputFiles(inputs).map((file) => access(file)));\n\t\t\treturn true;\n\t\t},\n\t\tcatch: (cause) =>\n\t\t\twalrusPluginError(\n\t\t\t\t'deploy',\n\t\t\t\t`walrus deploy cache is missing local output files under ${inputs.outputDirHostPath}`,\n\t\t\t\t{ cause },\n\t\t\t),\n\t}).pipe(Effect.catch(() => Effect.succeed(false)));\n\n/** Inputs to one deploy round. */\nexport interface DeployInputs {\n\treadonly walrusName: string;\n\treadonly chainId: ChainId;\n\treadonly contentHash: ContentHash;\n\t/** Pre-derived host output dir — substrate's `servicePath('walrus',\n\t *  name, 'deploy')` equivalent. Persists across teardown\n\t *  (distilled-doc §\"What survives teardown\"). */\n\treadonly outputDirHostPath: string;\n\t/** On-disk per-stack root from `StackPathsService.stackRoot`. The\n\t *  bind-mount source is `stackRoot`; `outputDirHostPath` MUST be a\n\t *  descendant. Threaded explicitly to remove the previous\n\t *  `dirname(dirname(dirname(...)))` walk-up footgun in\n\t *  `walrusDeployMountPaths`. */\n\treadonly stackRoot: string;\n\treadonly suiRpcUrlInNetwork: string;\n\treadonly walrusFaucetUrlInNetwork: string;\n\treadonly committeeSize: number;\n\treadonly shards: number;\n\treadonly epochDuration: string;\n\treadonly publicHostsCsv: string;\n\treadonly listeningIpsCsv: string;\n\t/** Wrapper image — the cargo-built walrus image (bootstrap asset).\n\t *  The deploy one-shot is `docker run --rm <image> deploy …`. */\n\treadonly walrusImage: ImageRef;\n\t/** Docker network the deploy one-shot attaches to, so its in-network\n\t *  Sui RPC + faucet hostnames resolve. */\n\treadonly suiNetworkName: string;\n\t/** Centralized Sui funding readiness gate. Local Sui exposes this so\n\t *  callers don't race the faucet's socket-ready / funds-ready gap. */\n\treadonly waitForFundsReady?: Effect.Effect<void, unknown>;\n}\n\n/** Default deploy one-shot timeout. Walrus genesis publish runs the\n *  Move publish + WAL exchange creation + per-node config emission;\n *  observed wall-clock is 30-60s. 5-minute ceiling absorbs cold-cache\n *  + slow CI runners. */\nconst DEPLOY_TIMEOUT_MS = 5 * 60_000;\n\nconst ensureDeployOutputDir = (inputs: DeployInputs): Effect.Effect<void, WalrusPluginError> =>\n\tEffect.tryPromise({\n\t\ttry: async () => {\n\t\t\tawait mkdir(inputs.outputDirHostPath, { recursive: true });\n\t\t\t// Route the bind-source marker through the canonical atomic\n\t\t\t// primitive (STYLE_GUIDE §17) — tempfile + fsync + rename so a\n\t\t\t// crashed writer can't leave the bind-mount probe reading a\n\t\t\t// half-written marker. 0o644 so the in-container deploy user can\n\t\t\t// stat it. Sync variant: the marker is a tiny one-liner and it\n\t\t\t// keeps the durability boundary the raw `writeFile` lacked.\n\t\t\tatomicWriteFileSync(\n\t\t\t\tjoin(inputs.outputDirHostPath, '.devstack-bind-source'),\n\t\t\t\t'devstack walrus bind source\\n',\n\t\t\t\t{ mode: 0o644 },\n\t\t\t);\n\t\t},\n\t\tcatch: (cause) =>\n\t\t\twalrusPluginError(\n\t\t\t\t'deploy',\n\t\t\t\t`walrus deploy failed to prepare output directory ${inputs.outputDirHostPath}`,\n\t\t\t\t{ cause },\n\t\t\t),\n\t});\n\nconst deployExitDetail = (\n\tresult: { readonly exitCode: number; readonly stdout: string; readonly stderr: string },\n\tinputs: DeployInputs,\n): string => {\n\tconst missingCommandHint =\n\t\tresult.exitCode === 127\n\t\t\t? ' exit 127 usually means the deploy image is missing walrus-deploy or an entrypoint command.'\n\t\t\t: '';\n\treturn (\n\t\t`walrus deploy exited with code ${result.exitCode}.` +\n\t\tmissingCommandHint +\n\t\t` outputDir=${inputs.outputDirHostPath} committee=${inputs.committeeSize} shards=${inputs.shards}` +\n\t\tlabelledExcerpt('stdout', result.stdout) +\n\t\tlabelledExcerpt('stderr', result.stderr)\n\t);\n};\n\nconst isBindSourceMissing = (result: {\n\treadonly exitCode: number;\n\treadonly stderr: string;\n}): boolean =>\n\tresult.exitCode === 125 &&\n\t/bind source path does not exist/i.test(result.stderr) &&\n\t/invalid mount config/i.test(result.stderr);\n\n/** Parse the walrus deploy output into a `CachedDeployState`.\n *\n *  Expected output format (best-effort match against the v3 reference's\n *  deploy stdout — the walrus binary's exact format may drift between\n *  versions):\n *\n *    walrus_package_id: 0x<hex>\n *    system_object: 0x<hex>\n *    staking_object: 0x<hex>\n *    upgrade_manager_object: 0x<hex>      (optional)\n *    treasury_object: 0x<hex>             (optional)\n *    exchange_object: 0x<hex>             (optional)\n *\n *  Returns the parsed state OR a typed `WalrusPluginError('deploy')`\n *  surfaced with stdout/stderr capture for debugging. */\nexport const parseDeployOutput = (stdout: string): CachedDeployState | null => {\n\t// Match `key: value` (or `key = value`) lines; treat `None` as\n\t// \"absent\" per the upstream walrus-deploy output convention.\n\t//\n\t// Value pattern: `0x<hex>` strictly. The previous `\\S+` regex\n\t// happily matched values like `None,` (with a trailing comma) or\n\t// `[unset]` and passed them through as fake object ids; downstream\n\t// `ChainProbe.get(...)` would then issue a `getObject` against\n\t// garbage, surfacing a confusing \"object not found\" instead of a\n\t// parse failure. Enforcing the hex shape here makes the parse-\n\t// failure surface (`walrusPluginError('deploy', 'parser could not\n\t// find ...')`) catch the bad value at its real source.\n\tconst pick = (k: string): string | undefined => {\n\t\tconst re = new RegExp(`(?:^|\\\\n)\\\\s*${k}\\\\s*[:=]\\\\s*(\\\\S+)`);\n\t\tconst m = re.exec(stdout);\n\t\tconst v = m?.[1];\n\t\tif (v === undefined || v === 'None') return undefined;\n\t\tif (!/^0x[0-9a-fA-F]+$/u.test(v)) return undefined;\n\t\treturn v;\n\t};\n\tconst walrusPackageId = pick('walrus_package_id') ?? pick('package_id');\n\tconst systemObject = pick('system_object') ?? pick('system_object_id');\n\tconst stakingObject =\n\t\tpick('staking_object') ?? pick('staking_pool_id') ?? pick('staking_object_id');\n\tif (!walrusPackageId || !systemObject || !stakingObject) return null;\n\treturn {\n\t\twalrusPackageId,\n\t\tsystemObject,\n\t\tstakingObject,\n\t\tupgradeManagerObject: pick('upgrade_manager_object'),\n\t\ttreasuryObject: pick('treasury_object'),\n\t\texchangeObject: pick('exchange_object'),\n\t};\n};\n\n/** Run the walrus-deploy one-shot and parse the output.\n *\n *  Implementation:\n *    1. `runtime.runOneShot({ image, argv: ['deploy', ...] })` —\n *       fresh `docker run --rm` container. Mount the host output dir\n *       at `/opt/walrus/outputs` so the per-node config files persist.\n *    2. Parse stdout for the deploy summary.\n *    3. Surface non-zero exits + parse failures as\n *       `WalrusPluginError('deploy')` with stdout/stderr capture. */\nexport const runDeployOneShot = (\n\truntime: ContainerRuntime,\n\tinputs: DeployInputs,\n): Effect.Effect<CachedDeployState, WalrusPluginError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tif (inputs.waitForFundsReady !== undefined) {\n\t\t\tyield* inputs.waitForFundsReady.pipe(\n\t\t\t\tEffect.mapError((cause) =>\n\t\t\t\t\twalrusPluginError(\n\t\t\t\t\t\t'deploy',\n\t\t\t\t\t\t`walrus deploy funding gate failed before walrus-deploy: ${formatUnknownError(cause)}`,\n\t\t\t\t\t\t{ cause },\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\tyield* ensureDeployOutputDir(inputs);\n\n\t\tconst outputOwner = hostBindMountOwner();\n\t\tconst outputMount = walrusDeployMountPaths({\n\t\t\tstackRoot: inputs.stackRoot,\n\t\t\tdeployOutputDirHostPath: inputs.outputDirHostPath,\n\t\t\tmountTarget: '/opt/walrus/runtime',\n\t\t});\n\t\tconst argv: ReadonlyArray<string> = [\n\t\t\t'deploy',\n\t\t\t'--output-dir',\n\t\t\toutputMount.outputDirInContainer,\n\t\t\t'--committee-size',\n\t\t\tString(inputs.committeeSize),\n\t\t\t'--shards',\n\t\t\tString(inputs.shards),\n\t\t\t'--epoch-duration',\n\t\t\tinputs.epochDuration,\n\t\t\t'--sui-rpc-url',\n\t\t\tinputs.suiRpcUrlInNetwork,\n\t\t\t'--faucet-url',\n\t\t\tinputs.walrusFaucetUrlInNetwork,\n\t\t\t'--public-hosts',\n\t\t\tinputs.publicHostsCsv,\n\t\t\t'--listening-ips',\n\t\t\tinputs.listeningIpsCsv,\n\t\t];\n\n\t\tconst runAttempt = () =>\n\t\t\truntime\n\t\t\t\t.runOneShot({\n\t\t\t\t\timage: inputs.walrusImage,\n\t\t\t\t\targv,\n\t\t\t\t\tmounts: [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tsource: outputMount.sourceHostPath,\n\t\t\t\t\t\t\ttarget: outputMount.mountTarget,\n\t\t\t\t\t\t},\n\t\t\t\t\t],\n\t\t\t\t\t...(outputOwner === undefined ? {} : { env: { DEVSTACK_HOST_UID_GID: outputOwner } }),\n\t\t\t\t\tnetwork: inputs.suiNetworkName,\n\t\t\t\t\t// Same `host-gateway` rationale as storage-nodes.ts —\n\t\t\t\t\t// deploy one-shot dials sui's host-bound RPC + faucet via\n\t\t\t\t\t// `host.docker.internal`. See substrate/runtime/host-gateway.ts\n\t\t\t\t\t// for the platform rationale.\n\t\t\t\t\textraHosts: HOST_GATEWAY_EXTRA_HOSTS,\n\t\t\t\t\ttimeoutMillis: DEPLOY_TIMEOUT_MS,\n\t\t\t\t})\n\t\t\t\t.pipe(\n\t\t\t\t\tEffect.catch((cause) =>\n\t\t\t\t\t\tEffect.fail(\n\t\t\t\t\t\t\twalrusPluginError(\n\t\t\t\t\t\t\t\t'deploy',\n\t\t\t\t\t\t\t\t`walrus deploy one-shot failed: ${cause.reason}: ${cause.detail}`,\n\t\t\t\t\t\t\t\t{ cause },\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t);\n\n\t\tconst attempt = Effect.gen(function* () {\n\t\t\tconst result = yield* runAttempt();\n\t\t\tif (isBindSourceMissing(result)) {\n\t\t\t\tyield* ensureDeployOutputDir(inputs);\n\t\t\t}\n\t\t\treturn result;\n\t\t});\n\t\tconst result = yield* attempt.pipe(\n\t\t\tEffect.repeat({\n\t\t\t\tschedule: makeSpacedRetrySchedule(\n\t\t\t\t\tDEPLOY_BIND_SOURCE_RETRY_PROFILE.delayMs,\n\t\t\t\t\tDEPLOY_BIND_SOURCE_RETRY_PROFILE.attempts,\n\t\t\t\t),\n\t\t\t\tuntil: (r) => !isBindSourceMissing(r),\n\t\t\t}),\n\t\t);\n\n\t\t// `Effect.repeat` with a bounded `schedule` + `until` exits SUCCESS\n\t\t// in two cases: (a) `until(r)` returned true (bind source is now\n\t\t// visible — the happy path) OR (b) the schedule recurrence cap was\n\t\t// reached while `until(r)` still returned false (the bind source\n\t\t// remained missing through every retry). The follow-up\n\t\t// `result.exitCode !== 0` check below would already surface case\n\t\t// (b) as a deploy-failure exit, but the failure message would be\n\t\t// the bind-source stderr — not the more diagnostic \"we exhausted\n\t\t// the bind-source retry budget\" message. Surface that explicitly\n\t\t// here so operators see the retry budget in the failure shape.\n\t\tif (isBindSourceMissing(result)) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\twalrusPluginError(\n\t\t\t\t\t'deploy',\n\t\t\t\t\t`walrus deploy: bind-source visibility race did not resolve after ` +\n\t\t\t\t\t\t`${DEPLOY_BIND_SOURCE_RETRY_PROFILE.attempts} retries ` +\n\t\t\t\t\t\t`(${DEPLOY_BIND_SOURCE_RETRY_PROFILE.delayMs}ms spacing). ` +\n\t\t\t\t\t\t`outputDir=${inputs.outputDirHostPath} — Docker Desktop's bind-source ` +\n\t\t\t\t\t\t`propagation lagged past the retry budget. ` +\n\t\t\t\t\t\tdeployExitDetail(result, inputs),\n\t\t\t\t\t{\n\t\t\t\t\t\texitCode: result.exitCode,\n\t\t\t\t\t\tstdout: result.stdout,\n\t\t\t\t\t\tstderr: result.stderr,\n\t\t\t\t\t},\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\n\t\tif (result.exitCode !== 0) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\twalrusPluginError('deploy', deployExitDetail(result, inputs), {\n\t\t\t\t\texitCode: result.exitCode,\n\t\t\t\t\tstdout: result.stdout,\n\t\t\t\t\tstderr: result.stderr,\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\n\t\tconst parsed = parseDeployOutput(result.stdout);\n\t\tif (!parsed) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\twalrusPluginError(\n\t\t\t\t\t'deploy',\n\t\t\t\t\t`walrus deploy: parser could not find walrus_package_id / system_object / staking_object ` +\n\t\t\t\t\t\t`in deploy output. Confirm the walrus binary's output format and adjust ` +\n\t\t\t\t\t\t`\\`parseDeployOutput\\` regexes in deploy.ts. ` +\n\t\t\t\t\t\t`SEAM: see deploy.ts header for the expected format.`,\n\t\t\t\t\t{ stdout: result.stdout, stderr: result.stderr },\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\treturn parsed;\n\t}).pipe(\n\t\tEffect.withSpan('devstack.plugin.walrus.deploy.oneShot', {\n\t\t\tattributes: {\n\t\t\t\t[WalrusSpans.committeeSize]: inputs.committeeSize,\n\t\t\t\t[WalrusSpans.shards]: inputs.shards,\n\t\t\t},\n\t\t}),\n\t\tEffect.timeoutOrElse({\n\t\t\tduration: Duration.millis(DEPLOY_TIMEOUT_MS + 5_000),\n\t\t\torElse: () =>\n\t\t\t\tEffect.fail(\n\t\t\t\t\twalrusPluginError(\n\t\t\t\t\t\t'deploy',\n\t\t\t\t\t\t`walrus deploy: outer timeout ${DEPLOY_TIMEOUT_MS}ms exceeded`,\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t}),\n\t);\n\n/** Outputs of one deploy round — surfaced to the plugin's\n *  resolved value. */\nexport interface DeployOutputs {\n\treadonly state: CachedDeployState;\n}\n\n/** Compose the ArtifactSpec for a walrus deploy and dispatch\n *  through the substrate primitive. The publisher handles the full\n *  cache/verify/produce/register loop.\n *\n *  Produce: real wiring — `runDeployOneShot` runs\n *  `docker run --rm walrusImage deploy …` and parses the deploy stdout.\n *\n *  The substrate's `ArtifactPublisher.publish` returns the full\n *  `CachedDeployState` on EVERY path (decoded cached payload on hit,\n *  fresh produce on miss) — no projection dance required. */\nexport const deployWalrusContracts = (\n\tpublisher: ArtifactPublisher,\n\tprobe: ChainProbe<SuiProbeKey>,\n\truntime: ContainerRuntime,\n\tinputs: DeployInputs,\n): Effect.Effect<DeployOutputs, WalrusPluginError | ArtifactPublishError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tconst state = yield* publisher.publish<CachedDeployState, WalrusDeployVerified>({\n\t\t\tnamespace: 'walrus-deploy',\n\t\t\tchain: inputs.chainId,\n\t\t\tcontentHash: inputs.contentHash,\n\t\t\t// Verify: lenient probes of the cached system + staking\n\t\t\t// objects. The Sui chain probe decodes raw `getObject`\n\t\t\t// responses, so the probe schema matches that envelope and\n\t\t\t// this closure returns the compact verified shape.\n\t\t\tverify: (cached) =>\n\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\tif (!(yield* deployOutputFilesComplete(inputs))) return null;\n\n\t\t\t\t\t// Both cached on-chain objects are independent lenient\n\t\t\t\t\t// probes — fan them out via `probeManyLenient` so the\n\t\t\t\t\t// substrate owns the iteration shape. Any null means\n\t\t\t\t\t// \"re-deploy\"; both non-null gives us the composite\n\t\t\t\t\t// verified payload. Retry across the post-restore\n\t\t\t\t\t// validator-readiness window (see the retry constants above)\n\t\t\t\t\t// so a transient not-found doesn't force a spurious redeploy.\n\t\t\t\t\tconst probeBoth = probeManyLenient([\n\t\t\t\t\t\tprobe.get(\n\t\t\t\t\t\t\t{ kind: 'object', objectId: cached.systemObject },\n\t\t\t\t\t\t\tSuiObjectExistsShape,\n\t\t\t\t\t\t\t'lenient',\n\t\t\t\t\t\t),\n\t\t\t\t\t\tprobe.get(\n\t\t\t\t\t\t\t{ kind: 'object', objectId: cached.stakingObject },\n\t\t\t\t\t\t\tSuiObjectExistsShape,\n\t\t\t\t\t\t\t'lenient',\n\t\t\t\t\t\t),\n\t\t\t\t\t]);\n\t\t\t\t\tlet [system, staking] = yield* probeBoth;\n\t\t\t\t\tfor (\n\t\t\t\t\t\tlet attempt = 0;\n\t\t\t\t\t\t(system == null || staking == null) && attempt < WALRUS_DEPLOY_VERIFY_READINESS_RETRIES;\n\t\t\t\t\t\tattempt++\n\t\t\t\t\t) {\n\t\t\t\t\t\tyield* Effect.sleep(WALRUS_DEPLOY_VERIFY_READINESS_DELAY);\n\t\t\t\t\t\t[system, staking] = yield* probeBoth;\n\t\t\t\t\t}\n\t\t\t\t\tif (system === undefined || system === null) return null;\n\t\t\t\t\tif (staking === undefined || staking === null) return null;\n\n\t\t\t\t\treturn {\n\t\t\t\t\t\tsystemObjectId: system.objectId,\n\t\t\t\t\t\tstakingObjectId: staking.objectId,\n\t\t\t\t\t} satisfies WalrusDeployVerified;\n\t\t\t\t}).pipe(\n\t\t\t\t\t// `verify` must satisfy `Effect<… | null, never>` per\n\t\t\t\t\t// the publisher contract. Narrow the cache-miss\n\t\t\t\t\t// collapse to genuine cache-corruption signals\n\t\t\t\t\t// (`decode-failed`) and missing-registration\n\t\t\t\t\t// (`no-probe-registered`). The lenient probe already\n\t\t\t\t\t// maps `not-found`/`transient` to `null`, so the\n\t\t\t\t\t// remaining ChainProbeError values that reach here\n\t\t\t\t\t// are authoritative — `decode-failed` is stale shape\n\t\t\t\t\t// (re-produce) and `no-probe-registered` means the\n\t\t\t\t\t// plugin booted before the chain probe was\n\t\t\t\t\t// contributed (treat as miss). Anything else is a\n\t\t\t\t\t// real RPC failure we want visible in the logs\n\t\t\t\t\t// rather than silently collapsed to \"re-deploy\".\n\t\t\t\t\tEffect.catchTag('ChainProbeError', (err) => {\n\t\t\t\t\t\tif (err.reason === 'decode-failed' || err.reason === 'no-probe-registered') {\n\t\t\t\t\t\t\treturn Effect.succeed(null as WalrusDeployVerified | null);\n\t\t\t\t\t\t}\n\t\t\t\t\t\treturn Effect.logWarning(\n\t\t\t\t\t\t\t`walrus.deploy verify probe surfaced an authoritative error (` +\n\t\t\t\t\t\t\t\t`reason=${err.reason}, chain=${err.chain}, detail=${err.detail}); ` +\n\t\t\t\t\t\t\t\t`re-deploying.`,\n\t\t\t\t\t\t).pipe(Effect.as(null as WalrusDeployVerified | null));\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t\t// Produce: real walrus-deploy one-shot.\n\t\t\tproduce: runDeployOneShot(runtime, inputs).pipe(\n\t\t\t\tEffect.mapError(\n\t\t\t\t\t(err): ArtifactPublishError =>\n\t\t\t\t\t\tartifactPublishError('produce-failed', `walrus.deploy ${err.phase}: ${err.message}`),\n\t\t\t\t),\n\t\t\t),\n\t\t\t// Register: fires on EVERY cycle. The plugin's outer body\n\t\t\t// performs the walrus-state / endpoint / package registry\n\t\t\t// publishes after both deploy + storage-nodes are up; this\n\t\t\t// closure is the publisher-side null-op so the substrate\n\t\t\t// satisfies its Invariant-6 contract.\n\t\t\tregister: () => Effect.void,\n\t\t});\n\n\t\treturn { state };\n\t}).pipe(\n\t\tEffect.withSpan('devstack.plugin.walrus.deploy', {\n\t\t\tattributes: { [WalrusSpans.name]: inputs.walrusName, [WalrusSpans.chain]: inputs.chainId },\n\t\t}),\n\t);\n"],"mappings":";;;;;;;;;;;;;;;AA0EuC,OAAO,OAAO;CACpD,gBAAgB,OAAO;CACvB,iBAAiB,OAAO;CACxB,CAAC;AAGF,MAAM,uBAAuB,OAAO,OAAO,EAC1C,UAAU,OAAO,QACjB,CAAC;;;;;;;AAQF,MAAM,yCAAyC;AAC/C,MAAM,uCAAuC;AAE7C,MAAM,6BAA6B,WAAgD,CAClF,KAAK,OAAO,mBAAmB,SAAS,EACxC,GAAG,MAAM,KAAK,EAAE,QAAQ,OAAO,eAAe,GAAG,GAAG,cAAc;CACjE,KAAK,OAAO,mBAAmB,eAAe,UAAU,OAAO;CAC/D,KAAK,OAAO,mBAAmB,eAAe,UAAU,WAAW;CACnE,KAAK,OAAO,mBAAmB,eAAe,UAAU,WAAW;CACnE,CAAC,CAAC,MAAM,CACT;AAED,MAAM,6BACL,WAEA,OAAO,WAAW;CACjB,KAAK,YAAY;AAChB,QAAM,QAAQ,IAAI,0BAA0B,OAAO,CAAC,KAAK,SAAS,OAAO,KAAK,CAAC,CAAC;AAChF,SAAO;;CAER,QAAQ,UACP,kBACC,UACA,2DAA2D,OAAO,qBAClE,EAAE,OAAO,CACT;CACF,CAAC,CAAC,KAAK,OAAO,YAAY,OAAO,QAAQ,MAAM,CAAC,CAAC;;;;;AAuCnD,MAAM,oBAAoB,IAAI;AAE9B,MAAM,yBAAyB,WAC9B,OAAO,WAAW;CACjB,KAAK,YAAY;AAChB,QAAM,MAAM,OAAO,mBAAmB,EAAE,WAAW,MAAM,CAAC;AAO1D,sBACC,KAAK,OAAO,mBAAmB,wBAAwB,EACvD,iCACA,EAAE,MAAM,KAAO,CACf;;CAEF,QAAQ,UACP,kBACC,UACA,oDAAoD,OAAO,qBAC3D,EAAE,OAAO,CACT;CACF,CAAC;AAEH,MAAM,oBACL,QACA,WACY;CACZ,MAAM,qBACL,OAAO,aAAa,MACjB,gGACA;AACJ,QACC,kCAAkC,OAAO,SAAS,KAClD,qBACA,cAAc,OAAO,kBAAkB,aAAa,OAAO,cAAc,UAAU,OAAO,WAC1F,gBAAgB,UAAU,OAAO,OAAO,GACxC,gBAAgB,UAAU,OAAO,OAAO;;AAI1C,MAAM,uBAAuB,WAI5B,OAAO,aAAa,OACpB,mCAAmC,KAAK,OAAO,OAAO,IACtD,wBAAwB,KAAK,OAAO,OAAO;;;;;;;;;;;;;;;;AAiB5C,MAAa,qBAAqB,WAA6C;CAY9E,MAAM,QAAQ,MAAkC;EAG/C,MAAM,IADI,IADK,OAAO,gBAAgB,EAAE,oBAC5B,CAAC,KAAK,OACP,GAAG;AACd,MAAI,MAAM,KAAA,KAAa,MAAM,OAAQ,QAAO,KAAA;AAC5C,MAAI,CAAC,oBAAoB,KAAK,EAAE,CAAE,QAAO,KAAA;AACzC,SAAO;;CAER,MAAM,kBAAkB,KAAK,oBAAoB,IAAI,KAAK,aAAa;CACvE,MAAM,eAAe,KAAK,gBAAgB,IAAI,KAAK,mBAAmB;CACtE,MAAM,gBACL,KAAK,iBAAiB,IAAI,KAAK,kBAAkB,IAAI,KAAK,oBAAoB;AAC/E,KAAI,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,cAAe,QAAO;AAChE,QAAO;EACN;EACA;EACA;EACA,sBAAsB,KAAK,yBAAyB;EACpD,gBAAgB,KAAK,kBAAkB;EACvC,gBAAgB,KAAK,kBAAkB;EACvC;;;;;;;;;;;AAYF,MAAa,oBACZ,SACA,WAEA,OAAO,IAAI,aAAa;AACvB,KAAI,OAAO,sBAAsB,KAAA,EAChC,QAAO,OAAO,kBAAkB,KAC/B,OAAO,UAAU,UAChB,kBACC,UACA,2DAA2D,mBAAmB,MAAM,IACpF,EAAE,OAAO,CACT,CACD,CACD;AAEF,QAAO,sBAAsB,OAAO;CAEpC,MAAM,cAAc,oBAAoB;CACxC,MAAM,cAAc,uBAAuB;EAC1C,WAAW,OAAO;EAClB,yBAAyB,OAAO;EAChC,aAAa;EACb,CAAC;CACF,MAAM,OAA8B;EACnC;EACA;EACA,YAAY;EACZ;EACA,OAAO,OAAO,cAAc;EAC5B;EACA,OAAO,OAAO,OAAO;EACrB;EACA,OAAO;EACP;EACA,OAAO;EACP;EACA,OAAO;EACP;EACA,OAAO;EACP;EACA,OAAO;EACP;CAED,MAAM,mBACL,QACE,WAAW;EACX,OAAO,OAAO;EACd;EACA,QAAQ,CACP;GACC,QAAQ,YAAY;GACpB,QAAQ,YAAY;GACpB,CACD;EACD,GAAI,gBAAgB,KAAA,IAAY,EAAE,GAAG,EAAE,KAAK,EAAE,uBAAuB,aAAa,EAAE;EACpF,SAAS,OAAO;EAKhB,YAAY;EACZ,eAAe;EACf,CAAC,CACD,KACA,OAAO,OAAO,UACb,OAAO,KACN,kBACC,UACA,kCAAkC,MAAM,OAAO,IAAI,MAAM,UACzD,EAAE,OAAO,CACT,CACD,CACD,CACD;CASH,MAAM,SAAS,OAPC,OAAO,IAAI,aAAa;EACvC,MAAM,SAAS,OAAO,YAAY;AAClC,MAAI,oBAAoB,OAAO,CAC9B,QAAO,sBAAsB,OAAO;AAErC,SAAO;GAEqB,CAAC,KAC7B,OAAO,OAAO;EACb,UAAU,wBACT,iCAAiC,SACjC,iCAAiC,SACjC;EACD,QAAQ,MAAM,CAAC,oBAAoB,EAAE;EACrC,CAAC,CACF;AAYD,KAAI,oBAAoB,OAAO,CAC9B,QAAO,OAAO,OAAO,KACpB,kBACC,UACA,oEACI,iCAAiC,SAAS,YACzC,iCAAiC,QAAQ,yBAChC,OAAO,kBAAkB,8EAEtC,iBAAiB,QAAQ,OAAO,EACjC;EACC,UAAU,OAAO;EACjB,QAAQ,OAAO;EACf,QAAQ,OAAO;EACf,CACD,CACD;AAGF,KAAI,OAAO,aAAa,EACvB,QAAO,OAAO,OAAO,KACpB,kBAAkB,UAAU,iBAAiB,QAAQ,OAAO,EAAE;EAC7D,UAAU,OAAO;EACjB,QAAQ,OAAO;EACf,QAAQ,OAAO;EACf,CAAC,CACF;CAGF,MAAM,SAAS,kBAAkB,OAAO,OAAO;AAC/C,KAAI,CAAC,OACJ,QAAO,OAAO,OAAO,KACpB,kBACC,UACA,gQAIA;EAAE,QAAQ,OAAO;EAAQ,QAAQ,OAAO;EAAQ,CAChD,CACD;AAEF,QAAO;EACN,CAAC,KACF,OAAO,SAAS,yCAAyC,EACxD,YAAY;EACV,YAAY,gBAAgB,OAAO;EACnC,YAAY,SAAS,OAAO;CAC7B,EACD,CAAC,EACF,OAAO,cAAc;CACpB,UAAU,SAAS,OAAO,oBAAoB,IAAM;CACpD,cACC,OAAO,KACN,kBACC,UACA,gCAAgC,kBAAkB,aAClD,CACD;CACF,CAAC,CACF;;;;;;;;;;;AAkBF,MAAa,yBACZ,WACA,OACA,SACA,WAEA,OAAO,IAAI,aAAa;AAwFvB,QAAO,EAAE,OAAA,OAvFY,UAAU,QAAiD;EAC/E,WAAW;EACX,OAAO,OAAO;EACd,aAAa,OAAO;EAKpB,SAAS,WACR,OAAO,IAAI,aAAa;AACvB,OAAI,EAAE,OAAO,0BAA0B,OAAO,EAAG,QAAO;GASxD,MAAM,YAAY,iBAAiB,CAClC,MAAM,IACL;IAAE,MAAM;IAAU,UAAU,OAAO;IAAc,EACjD,sBACA,UACA,EACD,MAAM,IACL;IAAE,MAAM;IAAU,UAAU,OAAO;IAAe,EAClD,sBACA,UACA,CACD,CAAC;GACF,IAAI,CAAC,QAAQ,WAAW,OAAO;AAC/B,QACC,IAAI,UAAU,IACb,UAAU,QAAQ,WAAW,SAAS,UAAU,wCACjD,WACC;AACD,WAAO,OAAO,MAAM,qCAAqC;AACzD,KAAC,QAAQ,WAAW,OAAO;;AAE5B,OAAI,WAAW,KAAA,KAAa,WAAW,KAAM,QAAO;AACpD,OAAI,YAAY,KAAA,KAAa,YAAY,KAAM,QAAO;AAEtD,UAAO;IACN,gBAAgB,OAAO;IACvB,iBAAiB,QAAQ;IACzB;IACA,CAAC,KAcF,OAAO,SAAS,oBAAoB,QAAQ;AAC3C,OAAI,IAAI,WAAW,mBAAmB,IAAI,WAAW,sBACpD,QAAO,OAAO,QAAQ,KAAoC;AAE3D,UAAO,OAAO,WACb,sEACW,IAAI,OAAO,UAAU,IAAI,MAAM,WAAW,IAAI,OAAO,kBAEhE,CAAC,KAAK,OAAO,GAAG,KAAoC,CAAC;IACrD,CACF;EAEF,SAAS,iBAAiB,SAAS,OAAO,CAAC,KAC1C,OAAO,UACL,QACA,qBAAqB,kBAAkB,iBAAiB,IAAI,MAAM,IAAI,IAAI,UAAU,CACrF,CACD;EAMD,gBAAgB,OAAO;EACvB,CAAC,EAEc;EACf,CAAC,KACF,OAAO,SAAS,iCAAiC,EAChD,YAAY;EAAG,YAAY,OAAO,OAAO;EAAa,YAAY,QAAQ,OAAO;CAAS,EAC1F,CAAC,CACF"}

package/dist/plugins/walrus/errors.mjs

@@ -1,3 +1,4 @@
+import "../../substrate/runtime/mode-errors.mjs";
 import { defineConfigError } from "../../substrate/runtime/config-validation.mjs";
 //#region src/plugins/walrus/errors.ts
 const walrusPluginError = (phase, message, parts = {}) => ({

package/dist/plugins/walrus/errors.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"errors.mjs","names":[],"sources":["../../../src/plugins/walrus/errors.ts"],"sourcesContent":["// Walrus plugin — typed errors.\n//\n// Errors raised and consumed inside the Walrus plugin live here.\n// Cross-service errors that Walrus *consumes* but the substrate\n// raises (e.g. `ArtifactPublishError`) come from the substrate's\n// primitive — we don't redeclare those.\n//\n// `ForkIncompatibleError` is a cross-cutting mode-refusal shape\n// owned by `substrate/runtime/mode-errors.ts`; walrus contributes\n// the `walrusLocalCluster` variant via the factory below.\n//\n// Effect v4: plain interfaces with `_tag` discriminator (per\n// surrounding subsystem style). `Effect.catchTag` matches on `_tag`.\n\nimport { ForkIncompatibleError } from '../../substrate/runtime/mode-errors.ts';\nimport { defineConfigError, type ConfigIssue } from '../../substrate/runtime/config-validation.ts';\n\nexport { ForkIncompatibleError };\n\n/** Phases for `WalrusError`. Closed sum — keeps the cause-walker's\n *  display table small. Matches the closed `WalrusPhases` from the\n *  distilled doc §\"Cross-component references\" except `'network'`\n *  is dropped (the substrate's `ContainerRuntime` owns docker network\n *  creation now, so its errors surface as `ContainerRuntimeError`\n *  upstream — we narrate the *phase* as `'cluster-network'` but the\n *  fault tags through the substrate). */\nexport type WalrusPhase =\n\t| 'image-build'\n\t| 'cluster-network'\n\t| 'deploy'\n\t| 'exchange'\n\t| 'storage-node'\n\t| 'proxy'\n\t| 'fund-wal'\n\t| 'register-known';\n\n/** Generic Walrus plugin error. Raised by the plugin's acquire\n *  body, WAL funding strategy, and the per-mode builders. */\nexport interface WalrusPluginError {\n\treadonly _tag: 'WalrusPluginError';\n\treadonly phase: WalrusPhase;\n\treadonly message: string;\n\treadonly cause?: unknown;\n\t/** Optional sub-process capture envelope — populated for deploy\n\t *  one-shot + per-node container failures. */\n\treadonly stderr?: string;\n\treadonly stdout?: string;\n\treadonly exitCode?: number;\n}\n\nexport const walrusPluginError = (\n\tphase: WalrusPhase,\n\tmessage: string,\n\tparts: Omit<WalrusPluginError, '_tag' | 'phase' | 'message'> = {},\n): WalrusPluginError => ({ _tag: 'WalrusPluginError', phase, message, ...parts });\n\n/**\n * Synchronous factory-time refusal when the user explicitly composes\n * the local-cluster mode against a fork network.\n *\n * sui-fork doesn't expose JSON-RPC; the local cluster's storage\n * nodes need JSON-RPC against the chain. Letting the supervisor\n * partway through the image build before the nodes fail to dial\n * would be confusing — we refuse synchronously at factory time\n * with an actionable hint pointing at `walrusFor(network).known({...})`.\n *\n * Primary refusal is TYPE-LEVEL via the `walrusFor(network).<mode>`\n * mode-narrowed namespace — fork networks expose only `.known`, so\n * calling `.local` is a compile error. This runtime shape is\n * defense-in-depth for callers that sneak through dynamic dispatch.\n */\nexport const forkIncompatibleError = (network: string): ForkIncompatibleError =>\n\tnew ForkIncompatibleError({\n\t\tvariant: 'walrusLocalCluster',\n\t\tnetwork,\n\t\tmessage: `walrus local-cluster does not support fork networks.`,\n\t\thint:\n\t\t\t`walrus local-cluster requires JSON-RPC, which sui-fork does not expose. ` +\n\t\t\t`Use walrusFor(network).known({...}) instead.`,\n\t});\n\n/** Configuration error — synchronous factory-time guards\n *  (`nodeCount >= 1`, `shards >= nodeCount`, missing required\n *  fields on `.known(...)`). Surfaces as a thrown `Error` shaped\n *  like this in the factory, mirroring the distilled-doc behavior\n *  of synchronous configuration faults. */\nexport interface WalrusConfigError extends ConfigIssue {\n\treadonly _tag: 'WalrusConfigError';\n}\n\nconst makeWalrusConfigError = defineConfigError('WalrusConfigError');\n\nexport const walrusConfigError = (\n\tfield: string,\n\tmessage: string,\n\thint?: string,\n\tcause?: unknown,\n): WalrusConfigError => makeWalrusConfigError({ field, message, hint, cause });\n\n/** Union of every error a Walrus-plugin caller may encounter. */\nexport type WalrusError = WalrusPluginError | ForkIncompatibleError | WalrusConfigError;\n\n/** Error tags this plugin contributes — surfaced to the cause\n *  walker via `PluginErrorContribution`. */\nexport const WALRUS_ERROR_TAGS: ReadonlyArray<WalrusError['_tag']> = [\n\t'WalrusPluginError',\n\t'ForkIncompatibleError',\n\t'WalrusConfigError',\n] as const;\n"],"mappings":";;AAkDA,MAAa,qBACZ,OACA,SACA,QAA+D,EAAE,MACzC;CAAE,MAAM;CAAqB;CAAO;CAAS,GAAG;CAAO;AAoChF,MAAM,wBAAwB,kBAAkB,oBAAoB;AAEpE,MAAa,qBACZ,OACA,SACA,MACA,UACuB,sBAAsB;CAAE;CAAO;CAAS;CAAM;CAAO,CAAC;;;AAO9E,MAAa,oBAAwD;CACpE;CACA;CACA;CACA"}
+{"version":3,"file":"errors.mjs","names":[],"sources":["../../../src/plugins/walrus/errors.ts"],"sourcesContent":["// Walrus plugin — typed errors.\n//\n// Errors raised and consumed inside the Walrus plugin live here.\n// Cross-service errors that Walrus *consumes* but the substrate\n// raises (e.g. `ArtifactPublishError`) come from the substrate's\n// primitive — we don't redeclare those.\n//\n// `ForkIncompatibleError` is a cross-cutting mode-refusal shape\n// owned by `substrate/runtime/mode-errors.ts`; walrus contributes\n// the `walrusLocalCluster` variant via the factory below.\n//\n// Effect v4: plain interfaces with `_tag` discriminator (per\n// surrounding subsystem style). `Effect.catchTag` matches on `_tag`.\n\nimport { ForkIncompatibleError } from '../../substrate/runtime/mode-errors.ts';\nimport { defineConfigError, type ConfigIssue } from '../../substrate/runtime/config-validation.ts';\n\nexport { ForkIncompatibleError };\n\n/** Phases for `WalrusError`. Closed sum — keeps the cause-walker's\n *  display table small. Matches the closed `WalrusPhases` from the\n *  distilled doc §\"Cross-component references\" except `'network'`\n *  is dropped (the substrate's `ContainerRuntime` owns docker network\n *  creation now, so its errors surface as `ContainerRuntimeError`\n *  upstream — we narrate the *phase* as `'cluster-network'` but the\n *  fault tags through the substrate). */\nexport type WalrusPhase =\n\t| 'image-build'\n\t| 'cluster-network'\n\t| 'deploy'\n\t| 'exchange'\n\t| 'storage-node'\n\t| 'proxy'\n\t| 'fund-wal'\n\t| 'register-known';\n\n/** Generic Walrus plugin error. Raised by the plugin's acquire\n *  body, WAL funding strategy, and the per-mode builders. */\nexport interface WalrusPluginError {\n\treadonly _tag: 'WalrusPluginError';\n\treadonly phase: WalrusPhase;\n\treadonly message: string;\n\treadonly cause?: unknown;\n\t/** Optional sub-process capture envelope — populated for deploy\n\t *  one-shot + per-node container failures. */\n\treadonly stderr?: string;\n\treadonly stdout?: string;\n\treadonly exitCode?: number;\n}\n\nexport const walrusPluginError = (\n\tphase: WalrusPhase,\n\tmessage: string,\n\tparts: Omit<WalrusPluginError, '_tag' | 'phase' | 'message'> = {},\n): WalrusPluginError => ({ _tag: 'WalrusPluginError', phase, message, ...parts });\n\n/** Configuration error — synchronous factory-time guards\n *  (`nodeCount >= 1`, `shards >= nodeCount`, missing required\n *  fields on `.known(...)`). Surfaces as a thrown `Error` shaped\n *  like this in the factory, mirroring the distilled-doc behavior\n *  of synchronous configuration faults. */\nexport interface WalrusConfigError extends ConfigIssue {\n\treadonly _tag: 'WalrusConfigError';\n}\n\nconst makeWalrusConfigError = defineConfigError('WalrusConfigError');\n\nexport const walrusConfigError = (\n\tfield: string,\n\tmessage: string,\n\thint?: string,\n\tcause?: unknown,\n): WalrusConfigError => makeWalrusConfigError({ field, message, hint, cause });\n\n/** Union of every error a Walrus-plugin caller may encounter. */\nexport type WalrusError = WalrusPluginError | ForkIncompatibleError | WalrusConfigError;\n\n/** Error tags this plugin contributes — surfaced to the cause\n *  walker via `PluginErrorContribution`. */\nexport const WALRUS_ERROR_TAGS: ReadonlyArray<WalrusError['_tag']> = [\n\t'WalrusPluginError',\n\t'ForkIncompatibleError',\n\t'WalrusConfigError',\n] as const;\n"],"mappings":";;;AAkDA,MAAa,qBACZ,OACA,SACA,QAA+D,EAAE,MACzC;CAAE,MAAM;CAAqB;CAAO;CAAS,GAAG;CAAO;AAWhF,MAAM,wBAAwB,kBAAkB,oBAAoB;AAEpE,MAAa,qBACZ,OACA,SACA,MACA,UACuB,sBAAsB;CAAE;CAAO;CAAS;CAAM;CAAO,CAAC;;;AAO9E,MAAa,oBAAwD;CACpE;CACA;CACA;CACA"}

package/dist/plugins/walrus/faucet-strategy.mjs

@@ -48,13 +48,18 @@ const walFaucetStrategyKey = (fullCoinType) => `coinType:${fullCoinType}`;
 *  strategy is invoked; the guard here keeps direct calls no-op. */
 const makeWalFaucetStrategy = (opts) => ({
 	usesAccountSigner: true,
-	request: (req) => req.amount <= 0n ? Effect.void : swapAccountSuiForWal({
-		account: req.account,
-		sdk: opts.sdk,
-		exchange: opts.exchange,
-		recipientAddress: req.address,
-		paymentMist: req.amount
-	}).pipe(Effect.asVoid)
+	requiresRecipientAccount: true,
+	request: (req) => {
+		if (req.amount <= 0n) return Effect.void;
+		if (req.account === void 0) return Effect.fail(walrusPluginError("fund-wal", "walrus WAL funding spends the recipient account’s own SUI, so it requires a resolved account signer."));
+		return swapAccountSuiForWal({
+			account: req.account,
+			sdk: opts.sdk,
+			exchange: opts.exchange,
+			recipientAddress: req.address,
+			paymentMist: req.amount
+		}).pipe(Effect.asVoid);
+	}
 });
 //#endregion
 export { makeWalFaucetStrategy, resolveWalCoinType, walCoinType, walFaucetStrategyKey, walPackageIdFromCoinType };

package/dist/plugins/walrus/faucet-strategy.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"faucet-strategy.mjs","names":[],"sources":["../../../src/plugins/walrus/faucet-strategy.ts"],"sourcesContent":["// Walrus WAL faucet strategy.\n//\n// Distilled-doc reference (06-walrus.md §\"Lifecycle phase 7a\"):\n// when the local cluster has a non-empty `exchange`, walrus registers\n// a WAL exchange strategy on the global strategy registry so any\n// `account('alice', { funding: [{ coin: wal, amount }] })` request\n// gets satisfied via SUI → WAL swap on chain.\n//\n// Architecture (StrategyContributor §7): the faucet registry is\n// `capabilityKey: 'coinType:<fullCoinType>'` (distilled-doc\n// convention shared with the faucet plugin's domain:discriminator\n// pattern). The dispatch site doesn't import this strategy — it\n// looks it up by key.\n//\nimport { Effect, Schema } from 'effect';\n\nimport type { ChainProbe } from '../../contracts/chain-probe.ts';\nimport type { StrategyContributorDecl } from '../../contracts/strategy-contributor.ts';\nimport type { AccountFundingRequest, AccountFundingStrategy } from '../account/index.ts';\nimport { walrusPluginError, type WalrusPluginError } from './errors.ts';\nimport type { WalExchangeProbeKey } from './wal-swap.ts';\nimport { swapAccountSuiForWal, type WalExchangeHandle, type WalSwapSdk } from './wal-swap.ts';\n\n/** Full local WAL coin type derived from the deployed Walrus package. */\nexport const walCoinType = <PackageId extends string>(\n\tpackageId: PackageId,\n): `${PackageId}::wal::WAL` => `${packageId}::wal::WAL` as const;\n\n/** Resolve the package id that defines `wal::WAL`.\n *\n *  The Walrus deploy summary's `package_id` can be the latest upgraded\n *  Walrus package, while Sui coin types use the original package id\n *  that defines `wal::WAL`. The protected treasury object is the\n *  reliable on-chain anchor for that original id. */\nexport const parseWalCoinTypeFromTreasuryType = (\n\ttreasuryType: string,\n): `${string}::wal::WAL` | null => {\n\tconst protectedTreasury = /^(0x[0-9a-fA-F]+)::wal::ProtectedTreasury$/.exec(treasuryType);\n\tif (protectedTreasury?.[1] !== undefined) {\n\t\treturn walCoinType(protectedTreasury[1]);\n\t}\n\n\tconst treasuryCap = /^0x(?:0+)?2::coin::TreasuryCap<((0x[0-9a-fA-F]+)::wal::WAL)>$/.exec(\n\t\ttreasuryType,\n\t);\n\tif (treasuryCap?.[1] !== undefined) {\n\t\treturn treasuryCap[1] as `${string}::wal::WAL`;\n\t}\n\n\treturn null;\n};\n\nexport const walPackageIdFromCoinType = (fullCoinType: `${string}::wal::WAL`): string =>\n\tfullCoinType.split('::')[0]!;\n\nconst WalTreasuryObjectShape = Schema.Struct({\n\tobjectId: Schema.String,\n\ttype: Schema.String,\n});\n\nexport const resolveWalCoinType = (args: {\n\treadonly probe: ChainProbe<WalExchangeProbeKey>;\n\treadonly treasuryObjectId: string | undefined;\n\treadonly deployPackageId: string;\n\treadonly requireTreasuryObject: boolean;\n}): Effect.Effect<`${string}::wal::WAL`, WalrusPluginError> =>\n\tEffect.gen(function* () {\n\t\tif (args.treasuryObjectId === undefined) {\n\t\t\tif (!args.requireTreasuryObject) return walCoinType(args.deployPackageId);\n\t\t\treturn yield* Effect.fail(\n\t\t\t\twalrusPluginError(\n\t\t\t\t\t'exchange',\n\t\t\t\t\t'walrus.exchange: WAL exchange funding requires treasury_object in walrus deploy output so the original WAL coin type can be resolved.',\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\n\t\tconst found = yield* args.probe\n\t\t\t.get({ kind: 'object', objectId: args.treasuryObjectId }, WalTreasuryObjectShape, 'lenient')\n\t\t\t.pipe(\n\t\t\t\tEffect.mapError((cause) =>\n\t\t\t\t\twalrusPluginError(\n\t\t\t\t\t\t'exchange',\n\t\t\t\t\t\t`walrus.exchange: failed to resolve WAL treasury object ${args.treasuryObjectId}: ${cause.reason}: ${cause.detail}`,\n\t\t\t\t\t\t{ cause },\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t);\n\n\t\tif (found === null) {\n\t\t\tif (!args.requireTreasuryObject) return walCoinType(args.deployPackageId);\n\t\t\treturn yield* Effect.fail(\n\t\t\t\twalrusPluginError(\n\t\t\t\t\t'exchange',\n\t\t\t\t\t`walrus.exchange: WAL treasury object ${args.treasuryObjectId} was not found; cannot derive the WAL coin type for account funding.`,\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\n\t\tconst parsed = parseWalCoinTypeFromTreasuryType(found.type);\n\t\tif (parsed !== null) return parsed;\n\n\t\treturn yield* Effect.fail(\n\t\t\twalrusPluginError(\n\t\t\t\t'exchange',\n\t\t\t\t`walrus.exchange: unexpected WAL treasury object type \"${found.type}\" — expected \"<pkg>::wal::ProtectedTreasury\" or \"0x2::coin::TreasuryCap<<pkg>::wal::WAL>\".`,\n\t\t\t),\n\t\t);\n\t});\n\n/** Capability key for the WAL faucet strategy. */\nexport const walFaucetStrategyKey = <FullCoinType extends string>(\n\tfullCoinType: FullCoinType,\n): `coinType:${FullCoinType}` => `coinType:${fullCoinType}` as const;\n\n/** Per-request shape — the shared account funding request. */\nexport type WalFaucetRequest = AccountFundingRequest;\n\n/** Faucet strategy value — closed over the WAL exchange's object id.\n *  The requesting account signs the swap through the shared account\n *  funding pipeline. */\nexport type WalFaucetStrategy = AccountFundingStrategy<WalrusPluginError>;\n\n/** Inputs the local-cluster mode passes when constructing this. */\nexport interface WalFaucetStrategyOptions {\n\treadonly exchange: WalExchangeHandle;\n\treadonly sdk: WalSwapSdk;\n}\n\n/** Build the strategy value.\n *\n *  The request amount is the SUI MIST amount to spend on the local\n *  exchange for WAL. Account funding skips zero amounts before the\n *  strategy is invoked; the guard here keeps direct calls no-op. */\nexport const makeWalFaucetStrategy = (opts: WalFaucetStrategyOptions): WalFaucetStrategy => ({\n\tusesAccountSigner: true,\n\trequest: (req) =>\n\t\treq.amount <= 0n\n\t\t\t? Effect.void\n\t\t\t: swapAccountSuiForWal({\n\t\t\t\t\taccount: req.account,\n\t\t\t\t\tsdk: opts.sdk,\n\t\t\t\t\texchange: opts.exchange,\n\t\t\t\t\trecipientAddress: req.address,\n\t\t\t\t\tpaymentMist: req.amount,\n\t\t\t\t}).pipe(Effect.asVoid),\n});\n\n/** Build the StrategyContributor decl. The faucet plugin's\n *  dispatcher reads this key off the registry and dispatches WAL\n *  funding requests through it. */\nexport const makeWalFaucetContribution = (\n\tfullCoinType: string,\n\topts: WalFaucetStrategyOptions,\n): StrategyContributorDecl<ReturnType<typeof walFaucetStrategyKey>, WalFaucetStrategy> => ({\n\tkind: 'strategy-contributor',\n\tcapabilityKey: walFaucetStrategyKey(fullCoinType),\n\tstrategy: makeWalFaucetStrategy(opts),\n\tautoMounted: true,\n});\n"],"mappings":";;;;;AAwBA,MAAa,eACZ,cAC8B,GAAG,UAAU;;;;;;;AAQ5C,MAAa,oCACZ,iBACkC;CAClC,MAAM,oBAAoB,6CAA6C,KAAK,aAAa;AACzF,KAAI,oBAAoB,OAAO,KAAA,EAC9B,QAAO,YAAY,kBAAkB,GAAG;CAGzC,MAAM,cAAc,gEAAgE,KACnF,aACA;AACD,KAAI,cAAc,OAAO,KAAA,EACxB,QAAO,YAAY;AAGpB,QAAO;;AAGR,MAAa,4BAA4B,iBACxC,aAAa,MAAM,KAAK,CAAC;AAE1B,MAAM,yBAAyB,OAAO,OAAO;CAC5C,UAAU,OAAO;CACjB,MAAM,OAAO;CACb,CAAC;AAEF,MAAa,sBAAsB,SAMlC,OAAO,IAAI,aAAa;AACvB,KAAI,KAAK,qBAAqB,KAAA,GAAW;AACxC,MAAI,CAAC,KAAK,sBAAuB,QAAO,YAAY,KAAK,gBAAgB;AACzE,SAAO,OAAO,OAAO,KACpB,kBACC,YACA,wIACA,CACD;;CAGF,MAAM,QAAQ,OAAO,KAAK,MACxB,IAAI;EAAE,MAAM;EAAU,UAAU,KAAK;EAAkB,EAAE,wBAAwB,UAAU,CAC3F,KACA,OAAO,UAAU,UAChB,kBACC,YACA,0DAA0D,KAAK,iBAAiB,IAAI,MAAM,OAAO,IAAI,MAAM,UAC3G,EAAE,OAAO,CACT,CACD,CACD;AAEF,KAAI,UAAU,MAAM;AACnB,MAAI,CAAC,KAAK,sBAAuB,QAAO,YAAY,KAAK,gBAAgB;AACzE,SAAO,OAAO,OAAO,KACpB,kBACC,YACA,wCAAwC,KAAK,iBAAiB,sEAC9D,CACD;;CAGF,MAAM,SAAS,iCAAiC,MAAM,KAAK;AAC3D,KAAI,WAAW,KAAM,QAAO;AAE5B,QAAO,OAAO,OAAO,KACpB,kBACC,YACA,yDAAyD,MAAM,KAAK,4FACpE,CACD;EACA;;AAGH,MAAa,wBACZ,iBACgC,YAAY;;;;;;AAqB7C,MAAa,yBAAyB,UAAuD;CAC5F,mBAAmB;CACnB,UAAU,QACT,IAAI,UAAU,KACX,OAAO,OACP,qBAAqB;EACrB,SAAS,IAAI;EACb,KAAK,KAAK;EACV,UAAU,KAAK;EACf,kBAAkB,IAAI;EACtB,aAAa,IAAI;EACjB,CAAC,CAAC,KAAK,OAAO,OAAO;CACzB"}
+{"version":3,"file":"faucet-strategy.mjs","names":[],"sources":["../../../src/plugins/walrus/faucet-strategy.ts"],"sourcesContent":["// Walrus WAL faucet strategy.\n//\n// Distilled-doc reference (06-walrus.md §\"Lifecycle phase 7a\"):\n// when the local cluster has a non-empty `exchange`, walrus registers\n// a WAL exchange strategy on the global strategy registry so any\n// `account('alice', { funding: [{ coin: wal, amount }] })` request\n// gets satisfied via SUI → WAL swap on chain.\n//\n// Architecture (StrategyContributor §7): the faucet registry is\n// `capabilityKey: 'coinType:<fullCoinType>'` (distilled-doc\n// convention shared with the faucet plugin's domain:discriminator\n// pattern). The dispatch site doesn't import this strategy — it\n// looks it up by key.\n//\nimport { Effect, Schema } from 'effect';\n\nimport type { ChainProbe } from '../../contracts/chain-probe.ts';\nimport type { AccountFundingRequest, AccountFundingStrategy } from '../account/index.ts';\nimport { walrusPluginError, type WalrusPluginError } from './errors.ts';\nimport type { WalExchangeProbeKey } from './wal-swap.ts';\nimport { swapAccountSuiForWal, type WalExchangeHandle, type WalSwapSdk } from './wal-swap.ts';\n\n/** Full local WAL coin type derived from the deployed Walrus package. */\nexport const walCoinType = <PackageId extends string>(\n\tpackageId: PackageId,\n): `${PackageId}::wal::WAL` => `${packageId}::wal::WAL` as const;\n\n/** Resolve the package id that defines `wal::WAL`.\n *\n *  The Walrus deploy summary's `package_id` can be the latest upgraded\n *  Walrus package, while Sui coin types use the original package id\n *  that defines `wal::WAL`. The protected treasury object is the\n *  reliable on-chain anchor for that original id. */\nexport const parseWalCoinTypeFromTreasuryType = (\n\ttreasuryType: string,\n): `${string}::wal::WAL` | null => {\n\tconst protectedTreasury = /^(0x[0-9a-fA-F]+)::wal::ProtectedTreasury$/.exec(treasuryType);\n\tif (protectedTreasury?.[1] !== undefined) {\n\t\treturn walCoinType(protectedTreasury[1]);\n\t}\n\n\tconst treasuryCap = /^0x(?:0+)?2::coin::TreasuryCap<((0x[0-9a-fA-F]+)::wal::WAL)>$/.exec(\n\t\ttreasuryType,\n\t);\n\tif (treasuryCap?.[1] !== undefined) {\n\t\treturn treasuryCap[1] as `${string}::wal::WAL`;\n\t}\n\n\treturn null;\n};\n\nexport const walPackageIdFromCoinType = (fullCoinType: `${string}::wal::WAL`): string =>\n\tfullCoinType.split('::')[0]!;\n\nconst WalTreasuryObjectShape = Schema.Struct({\n\tobjectId: Schema.String,\n\ttype: Schema.String,\n});\n\nexport const resolveWalCoinType = (args: {\n\treadonly probe: ChainProbe<WalExchangeProbeKey>;\n\treadonly treasuryObjectId: string | undefined;\n\treadonly deployPackageId: string;\n\treadonly requireTreasuryObject: boolean;\n}): Effect.Effect<`${string}::wal::WAL`, WalrusPluginError> =>\n\tEffect.gen(function* () {\n\t\tif (args.treasuryObjectId === undefined) {\n\t\t\tif (!args.requireTreasuryObject) return walCoinType(args.deployPackageId);\n\t\t\treturn yield* Effect.fail(\n\t\t\t\twalrusPluginError(\n\t\t\t\t\t'exchange',\n\t\t\t\t\t'walrus.exchange: WAL exchange funding requires treasury_object in walrus deploy output so the original WAL coin type can be resolved.',\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\n\t\tconst found = yield* args.probe\n\t\t\t.get({ kind: 'object', objectId: args.treasuryObjectId }, WalTreasuryObjectShape, 'lenient')\n\t\t\t.pipe(\n\t\t\t\tEffect.mapError((cause) =>\n\t\t\t\t\twalrusPluginError(\n\t\t\t\t\t\t'exchange',\n\t\t\t\t\t\t`walrus.exchange: failed to resolve WAL treasury object ${args.treasuryObjectId}: ${cause.reason}: ${cause.detail}`,\n\t\t\t\t\t\t{ cause },\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t);\n\n\t\tif (found === null) {\n\t\t\tif (!args.requireTreasuryObject) return walCoinType(args.deployPackageId);\n\t\t\treturn yield* Effect.fail(\n\t\t\t\twalrusPluginError(\n\t\t\t\t\t'exchange',\n\t\t\t\t\t`walrus.exchange: WAL treasury object ${args.treasuryObjectId} was not found; cannot derive the WAL coin type for account funding.`,\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\n\t\tconst parsed = parseWalCoinTypeFromTreasuryType(found.type);\n\t\tif (parsed !== null) return parsed;\n\n\t\treturn yield* Effect.fail(\n\t\t\twalrusPluginError(\n\t\t\t\t'exchange',\n\t\t\t\t`walrus.exchange: unexpected WAL treasury object type \"${found.type}\" — expected \"<pkg>::wal::ProtectedTreasury\" or \"0x2::coin::TreasuryCap<<pkg>::wal::WAL>\".`,\n\t\t\t),\n\t\t);\n\t});\n\n/** Capability key for the WAL faucet strategy. */\nexport const walFaucetStrategyKey = <FullCoinType extends string>(\n\tfullCoinType: FullCoinType,\n): `coinType:${FullCoinType}` => `coinType:${fullCoinType}` as const;\n\n/** Per-request shape — the shared account funding request. */\nexport type WalFaucetRequest = AccountFundingRequest;\n\n/** Faucet strategy value — closed over the WAL exchange's object id.\n *  The requesting account signs the swap through the shared account\n *  funding pipeline. */\nexport type WalFaucetStrategy = AccountFundingStrategy<WalrusPluginError>;\n\n/** Inputs the local-cluster mode passes when constructing this. */\nexport interface WalFaucetStrategyOptions {\n\treadonly exchange: WalExchangeHandle;\n\treadonly sdk: WalSwapSdk;\n}\n\n/** Build the strategy value.\n *\n *  The request amount is the SUI MIST amount to spend on the local\n *  exchange for WAL. Account funding skips zero amounts before the\n *  strategy is invoked; the guard here keeps direct calls no-op. */\nexport const makeWalFaucetStrategy = (opts: WalFaucetStrategyOptions): WalFaucetStrategy => ({\n\tusesAccountSigner: true,\n\t// The swap buys WAL with the recipient account's own SUI, so the recipient\n\t// must be a resolved account with a signer — funding an arbitrary 0x address\n\t// is rejected by the dispatcher/dashboard on this flag.\n\trequiresRecipientAccount: true,\n\trequest: (req) => {\n\t\tif (req.amount <= 0n) return Effect.void;\n\t\tif (req.account === undefined) {\n\t\t\treturn Effect.fail(\n\t\t\t\twalrusPluginError(\n\t\t\t\t\t'fund-wal',\n\t\t\t\t\t'walrus WAL funding spends the recipient account’s own SUI, so it requires a resolved account signer.',\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\treturn swapAccountSuiForWal({\n\t\t\taccount: req.account,\n\t\t\tsdk: opts.sdk,\n\t\t\texchange: opts.exchange,\n\t\t\trecipientAddress: req.address,\n\t\t\tpaymentMist: req.amount,\n\t\t}).pipe(Effect.asVoid);\n\t},\n});\n"],"mappings":";;;;;AAuBA,MAAa,eACZ,cAC8B,GAAG,UAAU;;;;;;;AAQ5C,MAAa,oCACZ,iBACkC;CAClC,MAAM,oBAAoB,6CAA6C,KAAK,aAAa;AACzF,KAAI,oBAAoB,OAAO,KAAA,EAC9B,QAAO,YAAY,kBAAkB,GAAG;CAGzC,MAAM,cAAc,gEAAgE,KACnF,aACA;AACD,KAAI,cAAc,OAAO,KAAA,EACxB,QAAO,YAAY;AAGpB,QAAO;;AAGR,MAAa,4BAA4B,iBACxC,aAAa,MAAM,KAAK,CAAC;AAE1B,MAAM,yBAAyB,OAAO,OAAO;CAC5C,UAAU,OAAO;CACjB,MAAM,OAAO;CACb,CAAC;AAEF,MAAa,sBAAsB,SAMlC,OAAO,IAAI,aAAa;AACvB,KAAI,KAAK,qBAAqB,KAAA,GAAW;AACxC,MAAI,CAAC,KAAK,sBAAuB,QAAO,YAAY,KAAK,gBAAgB;AACzE,SAAO,OAAO,OAAO,KACpB,kBACC,YACA,wIACA,CACD;;CAGF,MAAM,QAAQ,OAAO,KAAK,MACxB,IAAI;EAAE,MAAM;EAAU,UAAU,KAAK;EAAkB,EAAE,wBAAwB,UAAU,CAC3F,KACA,OAAO,UAAU,UAChB,kBACC,YACA,0DAA0D,KAAK,iBAAiB,IAAI,MAAM,OAAO,IAAI,MAAM,UAC3G,EAAE,OAAO,CACT,CACD,CACD;AAEF,KAAI,UAAU,MAAM;AACnB,MAAI,CAAC,KAAK,sBAAuB,QAAO,YAAY,KAAK,gBAAgB;AACzE,SAAO,OAAO,OAAO,KACpB,kBACC,YACA,wCAAwC,KAAK,iBAAiB,sEAC9D,CACD;;CAGF,MAAM,SAAS,iCAAiC,MAAM,KAAK;AAC3D,KAAI,WAAW,KAAM,QAAO;AAE5B,QAAO,OAAO,OAAO,KACpB,kBACC,YACA,yDAAyD,MAAM,KAAK,4FACpE,CACD;EACA;;AAGH,MAAa,wBACZ,iBACgC,YAAY;;;;;;AAqB7C,MAAa,yBAAyB,UAAuD;CAC5F,mBAAmB;CAInB,0BAA0B;CAC1B,UAAU,QAAQ;AACjB,MAAI,IAAI,UAAU,GAAI,QAAO,OAAO;AACpC,MAAI,IAAI,YAAY,KAAA,EACnB,QAAO,OAAO,KACb,kBACC,YACA,uGACA,CACD;AAEF,SAAO,qBAAqB;GAC3B,SAAS,IAAI;GACb,KAAK,KAAK;GACV,UAAU,KAAK;GACf,kBAAkB,IAAI;GACtB,aAAa,IAAI;GACjB,CAAC,CAAC,KAAK,OAAO,OAAO;;CAEvB"}

package/dist/plugins/walrus/index.d.mts

@@ -1,16 +1,13 @@
 import { CodegenableDecl } from "../../contracts/codegenable.mjs";
-import { LivenessClassifierDecl } from "../../contracts/liveness-classifier.mjs";
 import { ProjectionDecl } from "../../contracts/projection.mjs";
 import { RoutableDecl } from "../../contracts/routable.mjs";
 import { SnapshotableDecl } from "../../contracts/snapshotable.mjs";
 import { StrategyContributorDecl } from "../../contracts/strategy-contributor.mjs";
 import { Plugin, ResourceRef } from "../../substrate/plugin.mjs";
 import { ModeNamespace } from "../../api/mode-narrowed-factory.mjs";
-import { SeedObjectsAccumulator } from "../sui/seed-objects.mjs";
 import { SuiClient } from "../sui/mode/shared.mjs";
 import { SuiOptions } from "../sui/mode/spec.mjs";
 import { AccountFundingCoinValue } from "../account/funding.mjs";
-import { ForkIncompatibleError } from "../../substrate/runtime/mode-errors.mjs";
 import { WalrusConfigError, WalrusError, WalrusPhase, WalrusPluginError } from "./errors.mjs";
 import { WalFaucetStrategy } from "./faucet-strategy.mjs";
 import { WalrusStorageNode } from "./storage-nodes.mjs";
@@ -62,9 +59,7 @@ declare const walCoin: (walrusMember: ResourceRef<"walrus", WalrusResolved>) =>
   readonly kind: "projection";
 } & Omit<ProjectionDecl, "kind">> | Readonly<{
   readonly kind: "strategy-contributor";
-} & Omit<StrategyContributorDecl<string, unknown>, "kind">> | Readonly<{
-  readonly kind: "liveness-classifier";
-} & Omit<LivenessClassifierDecl, "kind">>) | Readonly<{
+} & Omit<StrategyContributorDecl<string, unknown>, "kind">>) | Readonly<{
   readonly kind: string;
 } & object>)[]>;
 /** Local-cluster shorthand. Known deployments are selected through
@@ -73,7 +68,6 @@ declare const walrus: (opts?: {
   readonly local?: WalrusLocalClusterOptions;
 }) => Plugin<"walrus", WalrusResolved, readonly [ResourceRef<"sui", SuiClient & {
   readonly mode: SuiOptions["mode"];
-  readonly seedObjects: SeedObjectsAccumulator;
 }>], readonly [SnapshotableDecl, CodegenableDecl<"walrus-network">, StrategyContributorDecl<"walrus-state-registry", {
   readonly noteName: string;
 }>, ...(RoutableDecl | {
@@ -91,13 +85,11 @@ declare const walrus: (opts?: {
  *
  *  Critically, the fork branch exposes ONLY `.known` — calling
  *  `.local` on a fork-mode network is a **compile error** at the
- *  call site (distilled-doc invariant 12 — type-level refusal).
- *  Runtime defense-in-depth: see `mode/fork-refusal.ts`. */
+ *  call site (distilled-doc invariant 12 — type-level refusal). */
 declare const walrusFor: ModeNamespace<{
   local: {
     local: (opts?: WalrusLocalClusterOptions) => Plugin<"walrus", WalrusResolved, readonly [ResourceRef<"sui", SuiClient & {
       readonly mode: SuiOptions["mode"];
-      readonly seedObjects: SeedObjectsAccumulator;
     }>], readonly [SnapshotableDecl, CodegenableDecl<"walrus-network">, StrategyContributorDecl<"walrus-state-registry", {
       readonly noteName: string;
     }>, ...(RoutableDecl | {
@@ -124,7 +116,6 @@ declare const walrusFor: ModeNamespace<{
       walCoinType: null;
     }, readonly [ResourceRef<"sui", SuiClient & {
       readonly mode: SuiOptions["mode"];
-      readonly seedObjects: SeedObjectsAccumulator;
     }>], readonly [SnapshotableDecl, CodegenableDecl<"walrus-network">, StrategyContributorDecl<"walrus-state-registry", WalrusStateEntry>]>;
   };
   live: {
@@ -146,7 +137,6 @@ declare const walrusFor: ModeNamespace<{
       walCoinType: null;
     }, readonly [ResourceRef<"sui", SuiClient & {
       readonly mode: SuiOptions["mode"];
-      readonly seedObjects: SeedObjectsAccumulator;
     }>], readonly [SnapshotableDecl, CodegenableDecl<"walrus-network">, StrategyContributorDecl<"walrus-state-registry", WalrusStateEntry>]>;
   };
   fork: {
@@ -168,7 +158,6 @@ declare const walrusFor: ModeNamespace<{
       walCoinType: null;
     }, readonly [ResourceRef<"sui", SuiClient & {
       readonly mode: SuiOptions["mode"];
-      readonly seedObjects: SeedObjectsAccumulator;
     }>], readonly [SnapshotableDecl, CodegenableDecl<"walrus-network">, StrategyContributorDecl<"walrus-state-registry", WalrusStateEntry>]>;
   };
 }>;

package/dist/plugins/walrus/index.mjs

@@ -1,15 +1,19 @@
 import { definePlugin, resource } from "../../substrate/plugin.mjs";
-import { pluginErrorContributions } from "../../api/plugin-errors.mjs";
+import "../../api/define-plugin.mjs";
 import { IdentityContext, StackPathsService } from "../../substrate/runtime/paths.mjs";
-import { defineModeNamespace } from "../../api/mode-narrowed-factory.mjs";
 import { ContainerRuntimeService } from "../../runtime/docker/service.mjs";
-import { suiResource } from "../sui/index.mjs";
 import { ArtifactPublisherService } from "../../substrate/runtime/artifact-publisher/index.mjs";
 import { chainProbeFor } from "../../substrate/runtime/strategy-registry/chain-probe-for.mjs";
+import "../../substrate/runtime/strategy-registry/index.mjs";
 import { WALRUS_ERROR_TAGS, walrusPluginError } from "./errors.mjs";
+import "./spans.mjs";
 import { buildWalrusNetworkName } from "./storage-nodes.mjs";
 import { makeLocalRoutables } from "./routable.mjs";
+import { pluginErrorContributions } from "../../api/plugin-errors.mjs";
+import { defineModeNamespace } from "../../api/mode-narrowed-factory.mjs";
+import { suiResource } from "../sui/index.mjs";
 import { coinResourceId } from "../coin/index.mjs";
+import { deriveSubnetPrefix, withSubnetAddressing } from "../../substrate/runtime/subnet-broker.mjs";
 import { makeCodegenable } from "./codegen.mjs";
 import { walrusPluginKey } from "./plugin-key.mjs";
 import { walFaucetStrategyKey } from "./faucet-strategy.mjs";
@@ -26,25 +30,13 @@ const walrusErrorContributions = pluginErrorContributions(WALRUS_ERROR_TAGS);
 /** Walrus deploy records storage-node listening IPs under this /24.
 *  Docker network create requests the matching subnet explicitly, with
 *  the prefix derived from the Walrus network identity so parallel
-*  stacks don't all claim the same Docker IPAM range. */
-const deriveWalrusSubnetPrefix = (identity) => {
-	const key = `${identity.app}\0${identity.stack}\0${identity.walrusName}`;
-	let hash = 2166136261;
-	for (let i = 0; i < key.length; i += 1) {
-		hash ^= key.charCodeAt(i);
-		hash = Math.imul(hash, 16777619) >>> 0;
-	}
-	const bucket = hash % (64 * 256);
-	return `10.${64 + Math.floor(bucket / 256)}.${bucket % 256}`;
-};
-const walrusNetworkCreateSpec = (spec, subnetPrefix) => ({
-	...spec,
-	subnet: `${subnetPrefix}.0/24`,
-	gateway: `${subnetPrefix}.1`
-});
+*  stacks don't all claim the same Docker IPAM range. Walrus claims
+*  the `10.64.*` – `10.127.*` band; see substrate/runtime/subnet-broker.ts
+*  for the algorithm and band coordination with seal. */
+const deriveWalrusSubnetPrefix = (identity) => deriveSubnetPrefix(`${identity.app}\0${identity.stack}\0${identity.walrusName}`, 64);
 const withWalrusNetworkAddressing = (runtime, walrusNetworkName, subnetPrefix) => ({
 	...runtime,
-	ensureNetwork: (spec) => runtime.ensureNetwork(spec.name === walrusNetworkName ? walrusNetworkCreateSpec(spec, subnetPrefix) : spec)
+	ensureNetwork: (spec) => runtime.ensureNetwork(spec.name === walrusNetworkName ? withSubnetAddressing(spec, subnetPrefix) : spec)
 });
 const buildLocalPlugin = (opts) => {
 	const resolved = resolveLocalClusterOptions(opts);
@@ -53,6 +45,7 @@ const buildLocalPlugin = (opts) => {
 		id: walrusResource.id,
 		dependsOn: [suiResource],
 		role: "service",
+		section: "service",
 		pluginKey: walrusKey,
 		start: (deps) => Effect.gen(function* () {
 			const [sui] = deps;
@@ -92,7 +85,8 @@ const buildLocalPlugin = (opts) => {
 				subnetPrefix: walrusSubnetPrefix,
 				walrusNetworkName,
 				suiNetworkName: walrusNetworkName,
-				deployHostMountPath
+				deployHostMountPath,
+				stackRoot: stackPaths.stackRoot
 			}, mode);
 			if (boot.mode !== "local") return yield* Effect.die("walrus: mode mismatch in local plugin");
 			return {
@@ -130,6 +124,7 @@ const buildKnownPlugin = (opts) => {
 		id: walrusResource.id,
 		dependsOn: [suiResource],
 		role: "task",
+		section: "service",
 		start: () => Effect.succeed({
 			mode: "known",
 			chain: resolved.chain,
@@ -242,6 +237,7 @@ const walCoin = (walrusMember) => {
 		id: resource(coinResourceId("wal")).id,
 		dependsOn: walrusMember,
 		role: "task",
+		section: "action",
 		start: (resolved) => Effect.gen(function* () {
 			if (resolved.walCoinType === null) return yield* Effect.fail(walrusPluginError("exchange", "walCoin(...) requires a local Walrus deployment with a WAL package."));
 			return {
@@ -268,8 +264,7 @@ const walrus = (opts) => {
 *
 *  Critically, the fork branch exposes ONLY `.known` — calling
 *  `.local` on a fork-mode network is a **compile error** at the
-*  call site (distilled-doc invariant 12 — type-level refusal).
-*  Runtime defense-in-depth: see `mode/fork-refusal.ts`. */
+*  call site (distilled-doc invariant 12 — type-level refusal). */
 const walrusFor = defineModeNamespace({
 	local: {
 		local: (opts = {}) => buildLocalPlugin(opts),