@mysten-incubation/devstack 0.0.1 → 0.1.1

package/dist/substrate/runtime/strategy-registry/service.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"service.mjs","names":[],"sources":["../../../../src/substrate/runtime/strategy-registry/service.ts"],"sourcesContent":["// Strategy registry implementation.\n//\n// Architecture § StrategyContributor — generic capability-keyed\n// pub/sub for plugin-contributed strategies (faucet strategies,\n// network resolvers, account selection, etc.).\n//\n// Per-capability-key LIST of contributing plugins (a registry can\n// hold multiple contributions for the same key). Resolution is\n// ordered by registration time; the selector chooses among them.\n//\n// Scope-local. The registry is created per-stack-scope so parallel\n// stacks isolate. When the stack scope closes, the registry's\n// entries die with it (the architecture's \"scope-local, never\n// module-level\" rule).\n\nimport { Context, Effect, Layer, Ref, Scope } from 'effect';\n\nimport type { StrategyRegistry } from '../../../contracts/strategy-contributor.ts';\nimport { StrategyNotFoundError } from '../errors.ts';\n\n/** One registered strategy under a capability key. */\ninterface Entry {\n\treadonly strategy: unknown;\n\treadonly autoMounted: boolean;\n\treadonly priority: number;\n\t/** Sequence number for stable ordering by registration time. */\n\treadonly seq: number;\n}\n\n/** Per-capability-key contributions. We keep the LIST (not the\n *  single winner) because:\n *   1. Renderers want to enumerate \"N contributors registered\".\n *   2. The selector is per-strategy and may inspect all of them.\n *   3. Auto-mounted vs user-supplied is a visibility distinction\n *      consumers need to surface separately. */\ntype State = ReadonlyMap<string, ReadonlyArray<Entry>>;\n\nexport class StrategyRegistryService extends Context.Service<\n\tStrategyRegistryService,\n\tStrategyRegistry\n>()('@devstack-rewrite/substrate/StrategyRegistry') {}\n\n/**\n * Layer. Constructed per-scope; the orchestrator hands the registry\n * to each plugin's acquire so contributions land on the right\n * stack's registry, not a global one.\n */\nexport const layerStrategyRegistry: Layer.Layer<StrategyRegistryService> = Layer.effect(\n\tStrategyRegistryService,\n\tEffect.gen(function* () {\n\t\tconst state = yield* Ref.make<State>(new Map());\n\t\tconst seqRef = yield* Ref.make(0);\n\n\t\tconst register: StrategyRegistry['register'] = <Key extends string, S>(\n\t\t\tkey: Key,\n\t\t\tstrategy: S,\n\t\t\toptions?: { readonly autoMounted?: boolean; readonly priority?: number },\n\t\t) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst seq = yield* Ref.updateAndGet(seqRef, (n) => n + 1);\n\t\t\t\tconst entry: Entry = {\n\t\t\t\t\tstrategy,\n\t\t\t\t\tautoMounted: options?.autoMounted ?? false,\n\t\t\t\t\tpriority: options?.priority ?? 0,\n\t\t\t\t\tseq,\n\t\t\t\t};\n\t\t\t\tyield* Ref.update(state, (current) => {\n\t\t\t\t\tconst existing = current.get(key) ?? [];\n\t\t\t\t\tconst next = new Map(current);\n\t\t\t\t\tnext.set(key, [...existing, entry]);\n\t\t\t\t\treturn next;\n\t\t\t\t});\n\t\t\t\t// Scope finalizer: drop this entry on scope close.\n\t\t\t\t// Sequence-number match makes parallel registrations\n\t\t\t\t// safe — we only drop the entry we added.\n\t\t\t\tyield* Effect.addFinalizer((_exit) =>\n\t\t\t\t\tRef.update(state, (current) => {\n\t\t\t\t\t\tconst existing = current.get(key);\n\t\t\t\t\t\tif (!existing) return current;\n\t\t\t\t\t\tconst filtered = existing.filter((e) => e.seq !== seq);\n\t\t\t\t\t\tconst next = new Map(current);\n\t\t\t\t\t\tif (filtered.length === 0) next.delete(key);\n\t\t\t\t\t\telse next.set(key, filtered);\n\t\t\t\t\t\treturn next;\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t\t\t'strategy.key': key,\n\t\t\t\t\t'strategy.autoMounted': entry.autoMounted,\n\t\t\t\t});\n\t\t\t}).pipe(Effect.withSpan('substrate.strategyRegistry.register')) as Effect.Effect<\n\t\t\t\tvoid,\n\t\t\t\tnever,\n\t\t\t\tScope.Scope\n\t\t\t>;\n\n\t\tconst get: StrategyRegistry['get'] = <Key extends string, S>(key: Key) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst current = yield* Ref.get(state);\n\t\t\t\tconst entries = current.get(key);\n\t\t\t\tif (!entries || entries.length === 0) {\n\t\t\t\t\treturn yield* new StrategyNotFoundError({\n\t\t\t\t\t\tcapabilityKey: key,\n\t\t\t\t\t\tregisteredKeys: [...current.keys()],\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t\t// Resolution policy:\n\t\t\t\t//   1. Higher priority wins.\n\t\t\t\t//   2. Tie on priority → later registration wins\n\t\t\t\t//      (last-write-wins for user overrides of\n\t\t\t\t//      built-ins — matches architecture § failure\n\t\t\t\t//      modes \"two strategies with the same key and\n\t\t\t\t//      same priority → last write wins\").\n\t\t\t\tlet best = entries[0]!;\n\t\t\t\tfor (let i = 1; i < entries.length; i++) {\n\t\t\t\t\tconst e = entries[i]!;\n\t\t\t\t\tif (e.priority > best.priority || (e.priority === best.priority && e.seq > best.seq)) {\n\t\t\t\t\t\tbest = e;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\treturn best.strategy as S;\n\t\t\t}).pipe(Effect.withSpan('substrate.strategyRegistry.get', { attributes: { key } }));\n\n\t\tconst list: StrategyRegistry['list'] = () =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst current = yield* Ref.get(state);\n\t\t\t\treturn [...current.keys()];\n\t\t\t});\n\n\t\treturn StrategyRegistryService.of({\n\t\t\tget: get as StrategyRegistry['get'],\n\t\t\tregister: register as StrategyRegistry['register'],\n\t\t\tlist,\n\t\t});\n\t}),\n);\n"],"mappings":";;;AAqCA,IAAa,0BAAb,cAA6C,QAAQ,SAGlD,CAAC,+CAA+C,CAAC;;;;;;AAOpD,MAAa,wBAA8D,MAAM,OAChF,yBACA,OAAO,IAAI,aAAa;CACvB,MAAM,QAAQ,OAAO,IAAI,qBAAY,IAAI,KAAK,CAAC;CAC/C,MAAM,SAAS,OAAO,IAAI,KAAK,EAAE;CAEjC,MAAM,YACL,KACA,UACA,YAEA,OAAO,IAAI,aAAa;EACvB,MAAM,MAAM,OAAO,IAAI,aAAa,SAAS,MAAM,IAAI,EAAE;EACzD,MAAM,QAAe;GACpB;GACA,aAAa,SAAS,eAAe;GACrC,UAAU,SAAS,YAAY;GAC/B;GACA;AACD,SAAO,IAAI,OAAO,QAAQ,YAAY;GACrC,MAAM,WAAW,QAAQ,IAAI,IAAI,IAAI,EAAE;GACvC,MAAM,OAAO,IAAI,IAAI,QAAQ;AAC7B,QAAK,IAAI,KAAK,CAAC,GAAG,UAAU,MAAM,CAAC;AACnC,UAAO;IACN;AAIF,SAAO,OAAO,cAAc,UAC3B,IAAI,OAAO,QAAQ,YAAY;GAC9B,MAAM,WAAW,QAAQ,IAAI,IAAI;AACjC,OAAI,CAAC,SAAU,QAAO;GACtB,MAAM,WAAW,SAAS,QAAQ,MAAM,EAAE,QAAQ,IAAI;GACtD,MAAM,OAAO,IAAI,IAAI,QAAQ;AAC7B,OAAI,SAAS,WAAW,EAAG,MAAK,OAAO,IAAI;OACtC,MAAK,IAAI,KAAK,SAAS;AAC5B,UAAO;IACN,CACF;AACD,SAAO,OAAO,oBAAoB;GACjC,gBAAgB;GAChB,wBAAwB,MAAM;GAC9B,CAAC;GACD,CAAC,KAAK,OAAO,SAAS,sCAAsC,CAAC;CAMhE,MAAM,OAAuD,QAC5D,OAAO,IAAI,aAAa;EACvB,MAAM,UAAU,OAAO,IAAI,IAAI,MAAM;EACrC,MAAM,UAAU,QAAQ,IAAI,IAAI;AAChC,MAAI,CAAC,WAAW,QAAQ,WAAW,EAClC,QAAO,OAAO,IAAI,sBAAsB;GACvC,eAAe;GACf,gBAAgB,CAAC,GAAG,QAAQ,MAAM,CAAC;GACnC,CAAC;EASH,IAAI,OAAO,QAAQ;AACnB,OAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK;GACxC,MAAM,IAAI,QAAQ;AAClB,OAAI,EAAE,WAAW,KAAK,YAAa,EAAE,aAAa,KAAK,YAAY,EAAE,MAAM,KAAK,IAC/E,QAAO;;AAGT,SAAO,KAAK;GACX,CAAC,KAAK,OAAO,SAAS,kCAAkC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;CAEpF,MAAM,aACL,OAAO,IAAI,aAAa;AAEvB,SAAO,CAAC,IAAG,OADY,IAAI,IAAI,MAAM,EAClB,MAAM,CAAC;GACzB;AAEH,QAAO,wBAAwB,GAAG;EAC5B;EACK;EACV;EACA,CAAC;EACD,CACF"}
+{"version":3,"file":"service.mjs","names":[],"sources":["../../../../src/substrate/runtime/strategy-registry/service.ts"],"sourcesContent":["// Strategy registry implementation.\n//\n// Architecture § StrategyContributor — generic capability-keyed\n// pub/sub for plugin-contributed strategies (faucet strategies,\n// network resolvers, account selection, etc.).\n//\n// Per-capability-key LIST of contributing plugins (a registry can\n// hold multiple contributions for the same key). Resolution is\n// ordered by registration time; the selector chooses among them.\n//\n// Scope-local. The registry is created per-stack-scope so parallel\n// stacks isolate. When the stack scope closes, the registry's\n// entries die with it (the architecture's \"scope-local, never\n// module-level\" rule).\n\nimport { Context, Effect, Layer, Scope } from 'effect';\n\nimport type { StrategyRegistry } from '../../../contracts/strategy-contributor.ts';\nimport { StrategyNotFoundError } from '../errors.ts';\nimport { SpanAttr } from '../observability/spans.ts';\nimport { makeScopedMultimap } from '../scoped-multimap/index.ts';\n\n/** One registered strategy under a capability key. The multimap stamps\n *  the registration `seq`; the payload carries the strategy + its\n *  visibility/priority. We keep the LIST (not the single winner)\n *  because:\n *   1. Renderers want to enumerate \"N contributors registered\".\n *   2. The selector is per-strategy and may inspect all of them.\n *   3. Auto-mounted vs user-supplied is a visibility distinction\n *      consumers need to surface separately. */\ninterface Entry {\n\treadonly strategy: unknown;\n\treadonly autoMounted: boolean;\n\treadonly priority: number;\n}\n\nexport class StrategyRegistryService extends Context.Service<\n\tStrategyRegistryService,\n\tStrategyRegistry\n>()('@devstack/substrate/StrategyRegistry') {}\n\n/**\n * Layer. Constructed per-scope; the orchestrator hands the registry\n * to each plugin's acquire so contributions land on the right\n * stack's registry, not a global one.\n */\nexport const layerStrategyRegistry: Layer.Layer<StrategyRegistryService> = Layer.effect(\n\tStrategyRegistryService,\n\tEffect.gen(function* () {\n\t\tconst store = yield* makeScopedMultimap<string, Entry>();\n\n\t\tconst register: StrategyRegistry['register'] = <Key extends string, S>(\n\t\t\tkey: Key,\n\t\t\tstrategy: S,\n\t\t\toptions?: { readonly autoMounted?: boolean; readonly priority?: number },\n\t\t) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst entry: Entry = {\n\t\t\t\t\tstrategy,\n\t\t\t\t\tautoMounted: options?.autoMounted ?? false,\n\t\t\t\t\tpriority: options?.priority ?? 0,\n\t\t\t\t};\n\t\t\t\t// The multimap stamps the seq and wires the drop-by-seq\n\t\t\t\t// finalizer — parallel registrations stay isolated.\n\t\t\t\tyield* store.register([{ key, value: entry }]);\n\t\t\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t\t\t[SpanAttr.strategyKey]: key,\n\t\t\t\t\t[SpanAttr.strategyAutoMounted]: entry.autoMounted,\n\t\t\t\t});\n\t\t\t}).pipe(Effect.withSpan('substrate.strategyRegistry.register')) as Effect.Effect<\n\t\t\t\tvoid,\n\t\t\t\tnever,\n\t\t\t\tScope.Scope\n\t\t\t>;\n\n\t\tconst get: StrategyRegistry['get'] = <Key extends string, S>(key: Key) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst entries = yield* store.entriesFor(key);\n\t\t\t\tif (entries.length === 0) {\n\t\t\t\t\tconst keys = yield* store.keys;\n\t\t\t\t\treturn yield* new StrategyNotFoundError({\n\t\t\t\t\t\tcapabilityKey: key,\n\t\t\t\t\t\tregisteredKeys: keys,\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t\t// Resolution policy:\n\t\t\t\t//   1. Higher priority wins.\n\t\t\t\t//   2. Tie on priority → later registration wins\n\t\t\t\t//      (last-write-wins for user overrides of\n\t\t\t\t//      built-ins — matches architecture § failure\n\t\t\t\t//      modes \"two strategies with the same key and\n\t\t\t\t//      same priority → last write wins\").\n\t\t\t\tlet best = entries[0]!;\n\t\t\t\tfor (let i = 1; i < entries.length; i++) {\n\t\t\t\t\tconst e = entries[i]!;\n\t\t\t\t\tif (\n\t\t\t\t\t\te.value.priority > best.value.priority ||\n\t\t\t\t\t\t(e.value.priority === best.value.priority && e.seq > best.seq)\n\t\t\t\t\t) {\n\t\t\t\t\t\tbest = e;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\treturn best.value.strategy as S;\n\t\t\t}).pipe(Effect.withSpan('substrate.strategyRegistry.get', { attributes: { key } }));\n\n\t\tconst list: StrategyRegistry['list'] = () => store.keys;\n\n\t\treturn StrategyRegistryService.of({\n\t\t\tget: get as StrategyRegistry['get'],\n\t\t\tregister: register as StrategyRegistry['register'],\n\t\t\tlist,\n\t\t});\n\t}),\n);\n"],"mappings":";;;;;;AAoCA,IAAa,0BAAb,cAA6C,QAAQ,SAGlD,CAAC,uCAAuC,CAAC;;;;;;AAO5C,MAAa,wBAA8D,MAAM,OAChF,yBACA,OAAO,IAAI,aAAa;CACvB,MAAM,QAAQ,OAAO,oBAAmC;CAExD,MAAM,YACL,KACA,UACA,YAEA,OAAO,IAAI,aAAa;EACvB,MAAM,QAAe;GACpB;GACA,aAAa,SAAS,eAAe;GACrC,UAAU,SAAS,YAAY;GAC/B;AAGD,SAAO,MAAM,SAAS,CAAC;GAAE;GAAK,OAAO;GAAO,CAAC,CAAC;AAC9C,SAAO,OAAO,oBAAoB;IAChC,SAAS,cAAc;IACvB,SAAS,sBAAsB,MAAM;GACtC,CAAC;GACD,CAAC,KAAK,OAAO,SAAS,sCAAsC,CAAC;CAMhE,MAAM,OAAuD,QAC5D,OAAO,IAAI,aAAa;EACvB,MAAM,UAAU,OAAO,MAAM,WAAW,IAAI;AAC5C,MAAI,QAAQ,WAAW,EAEtB,QAAO,OAAO,IAAI,sBAAsB;GACvC,eAAe;GACf,gBAAgB,OAHG,MAAM;GAIzB,CAAC;EASH,IAAI,OAAO,QAAQ;AACnB,OAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK;GACxC,MAAM,IAAI,QAAQ;AAClB,OACC,EAAE,MAAM,WAAW,KAAK,MAAM,YAC7B,EAAE,MAAM,aAAa,KAAK,MAAM,YAAY,EAAE,MAAM,KAAK,IAE1D,QAAO;;AAGT,SAAO,KAAK,MAAM;GACjB,CAAC,KAAK,OAAO,SAAS,kCAAkC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;CAEpF,MAAM,aAAuC,MAAM;AAEnD,QAAO,wBAAwB,GAAG;EAC5B;EACK;EACV;EACA,CAAC;EACD,CACF"}

package/dist/substrate/runtime/subnet-broker.mjs

@@ -0,0 +1,60 @@
+//#region src/substrate/runtime/subnet-broker.ts
+/**
+* Derive a deterministic `/24` IPv4 subnet prefix from an identity
+* string, suitable for `EnsureNetworkSpec.subnet` requests.
+*
+* Uses FNV-1a/32 to bucket the input into one of 16384 slots inside
+* a 64-wide band of `10.0.0.0/8`. `secondOctetOffset` selects the
+* band — pick a value disjoint from every other caller (current
+* users: walrus `64`, seal `128`).
+*
+* @param input - opaque identity string. Callers should pack their
+*   stack-identifying fields with a separator that cannot appear in
+*   any field (`\0` is the convention).
+* @param secondOctetOffset - lower-bound of the second IPv4 octet.
+*   The derived second octet falls in `[offset, offset + 63]`.
+* @returns prefix string `'10.b.c'`. Append `.0/24` for the subnet
+*   and `.1` for the gateway.
+*/
+const deriveSubnetPrefix = (input, secondOctetOffset) => {
+	let hash = 2166136261;
+	for (let i = 0; i < input.length; i += 1) {
+		hash ^= input.charCodeAt(i);
+		hash = Math.imul(hash, 16777619) >>> 0;
+	}
+	const bucket = hash % (64 * 256);
+	return `10.${secondOctetOffset + Math.floor(bucket / 256)}.${bucket % 256}`;
+};
+/**
+* Expand a `/24` prefix into the `{ subnet, gateway }` shape the
+* container-runtime `EnsureNetworkSpec` consumes.
+*
+* Convention: `<prefix>.0/24` for the subnet, `<prefix>.1` for the
+* gateway — the same pair walrus and seal both stamp on their
+* `ensureNetwork` requests. Folded here so the `/24` + `.1` literals
+* live in ONE place.
+*/
+const subnetSpec = (prefix) => ({
+	subnet: `${prefix}.0/24`,
+	gateway: `${prefix}.1`
+});
+/**
+* Stamp the `{subnet, gateway}` pair derived from `subnetPrefix` onto
+* any `EnsureNetworkSpec`-shaped value. Both walrus and seal need the
+* same fold:
+*
+*   {...spec, ...subnetSpec(prefix)}
+*
+* to widen a substrate-blind network spec into one that carries the
+* plugin's deterministic `/24` addressing — folded here so the literal
+* `Required<Pick<…, 'subnet' | 'gateway'>>` widening type lives in
+* ONE place.
+*/
+const withSubnetAddressing = (spec, subnetPrefix) => ({
+	...spec,
+	...subnetSpec(subnetPrefix)
+});
+//#endregion
+export { deriveSubnetPrefix, withSubnetAddressing };
+
+//# sourceMappingURL=subnet-broker.mjs.map

package/dist/substrate/runtime/subnet-broker.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"subnet-broker.mjs","names":[],"sources":["../../../src/substrate/runtime/subnet-broker.ts"],"sourcesContent":["// Subnet-prefix derivation + EnsureNetworkSpec stamping — ONE canonical\n// implementation.\n//\n// Architecture § \"What's collapsed\" — multiple plugins (walrus, seal)\n// need a deterministic Docker `/24` subnet keyed off their stack\n// identity so parallel local stacks don't all collide on Docker's\n// default IPAM pool. Each plugin previously inlined the same FNV-1a\n// hash → IPv4 third-octet derivation; the only thing that varied was\n// the second-octet base offset (walrus uses `64`, seal uses `128`)\n// so they live in disjoint 64-wide bands inside `10.0.0.0/8`.\n//\n// Algorithm (DO NOT CHANGE without re-coordinating with every caller —\n// changing it shifts every parallel stack's assigned subnet, which\n// silently invalidates running containers and on-disk snapshots that\n// reference IPs by literal):\n//\n//   1. FNV-1a/32 over the UTF-16 code-unit sequence of `input`,\n//      seeded `0x811c9dc5`, prime `0x01000193`, kept in unsigned\n//      32-bit space via `>>> 0`.\n//   2. Take the low `64 * 256 = 16384` buckets of the hash.\n//   3. Split the bucket into a second-octet add (`bucket / 256`,\n//      0..63) and a third-octet (`bucket % 256`, 0..255).\n//   4. Emit `'10.<secondOctetOffset + add>.<third>'`.\n//\n// The returned prefix is the `a.b.c` of an IPv4 `/24` — callers\n// append `.0/24` for the subnet and `.1` for the gateway.\n\nimport type { EnsureNetworkSpec } from '../../contracts/container-runtime.ts';\n\n/**\n * Derive a deterministic `/24` IPv4 subnet prefix from an identity\n * string, suitable for `EnsureNetworkSpec.subnet` requests.\n *\n * Uses FNV-1a/32 to bucket the input into one of 16384 slots inside\n * a 64-wide band of `10.0.0.0/8`. `secondOctetOffset` selects the\n * band — pick a value disjoint from every other caller (current\n * users: walrus `64`, seal `128`).\n *\n * @param input - opaque identity string. Callers should pack their\n *   stack-identifying fields with a separator that cannot appear in\n *   any field (`\\0` is the convention).\n * @param secondOctetOffset - lower-bound of the second IPv4 octet.\n *   The derived second octet falls in `[offset, offset + 63]`.\n * @returns prefix string `'10.b.c'`. Append `.0/24` for the subnet\n *   and `.1` for the gateway.\n */\nexport const deriveSubnetPrefix = (input: string, secondOctetOffset: number): string => {\n\tlet hash = 0x811c9dc5;\n\tfor (let i = 0; i < input.length; i += 1) {\n\t\thash ^= input.charCodeAt(i);\n\t\thash = Math.imul(hash, 0x01000193) >>> 0;\n\t}\n\tconst bucket = hash % (64 * 256);\n\tconst secondOctet = secondOctetOffset + Math.floor(bucket / 256);\n\tconst thirdOctet = bucket % 256;\n\treturn `10.${secondOctet}.${thirdOctet}`;\n};\n\n/**\n * Expand a `/24` prefix into the `{ subnet, gateway }` shape the\n * container-runtime `EnsureNetworkSpec` consumes.\n *\n * Convention: `<prefix>.0/24` for the subnet, `<prefix>.1` for the\n * gateway — the same pair walrus and seal both stamp on their\n * `ensureNetwork` requests. Folded here so the `/24` + `.1` literals\n * live in ONE place.\n */\nexport const subnetSpec = (\n\tprefix: string,\n): { readonly subnet: string; readonly gateway: string } => ({\n\tsubnet: `${prefix}.0/24`,\n\tgateway: `${prefix}.1`,\n});\n\n/**\n * Stamp the `{subnet, gateway}` pair derived from `subnetPrefix` onto\n * any `EnsureNetworkSpec`-shaped value. Both walrus and seal need the\n * same fold:\n *\n *   {...spec, ...subnetSpec(prefix)}\n *\n * to widen a substrate-blind network spec into one that carries the\n * plugin's deterministic `/24` addressing — folded here so the literal\n * `Required<Pick<…, 'subnet' | 'gateway'>>` widening type lives in\n * ONE place.\n */\nexport const withSubnetAddressing = <Spec extends EnsureNetworkSpec>(\n\tspec: Spec,\n\tsubnetPrefix: string,\n): Spec & Required<Pick<EnsureNetworkSpec, 'subnet' | 'gateway'>> => ({\n\t...spec,\n\t...subnetSpec(subnetPrefix),\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;AA8CA,MAAa,sBAAsB,OAAe,sBAAsC;CACvF,IAAI,OAAO;AACX,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,GAAG;AACzC,UAAQ,MAAM,WAAW,EAAE;AAC3B,SAAO,KAAK,KAAK,MAAM,SAAW,KAAK;;CAExC,MAAM,SAAS,QAAQ,KAAK;AAG5B,QAAO,MAFa,oBAAoB,KAAK,MAAM,SAAS,IAAI,CAEvC,GADN,SAAS;;;;;;;;;;;AAa7B,MAAa,cACZ,YAC4D;CAC5D,QAAQ,GAAG,OAAO;CAClB,SAAS,GAAG,OAAO;CACnB;;;;;;;;;;;;;AAcD,MAAa,wBACZ,MACA,kBACqE;CACrE,GAAG;CACH,GAAG,WAAW,aAAa;CAC3B"}

package/dist/substrate/runtime/sui-execute/index.d.mts

@@ -1,4 +1,6 @@
 import { Effect, Schema, Scope } from "effect";
+import { ClientWithCoreApi } from "@mysten/sui/client";
+
 //#region src/substrate/runtime/sui-execute/index.d.ts
 interface TransactionSignerScope<SignError = unknown> {
   readonly signTransaction: (tx: Uint8Array) => Effect.Effect<{
@@ -6,6 +8,24 @@ interface TransactionSignerScope<SignError = unknown> {
     readonly signature: string;
   }, SignError>;
 }
+/** On-chain failure projection. The transaction was delivered +
+ *  executed by the validator but the on-chain execution failed.
+ *  Carries the digest (for log correlation) plus the validator's
+ *  stringified error when one was attached. `executionError` is
+ *  omitted when the SDK returns no message (STYLE_GUIDE §5: no
+ *  sentinel placeholders at resolved-value surfaces). An envelope
+ *  without a digest fails at projection with
+ *  `SuiExecuteError(phase: 'no-digest')`.
+ *
+ *  This is the single source of truth for the on-chain-failure shape
+ *  across the devstack: `account.SignAndExecuteResult`'s
+ *  `FailedTransaction` variant carries it directly; every plugin that
+ *  renders one of these failures into a user-facing error message goes
+ *  through `formatExecutedFailure` (below). */
+interface ExecutedFailure {
+  readonly digest: string;
+  readonly executionError?: string;
+}
 //#endregion
-export { TransactionSignerScope };
+export { ExecutedFailure, TransactionSignerScope };
 //# sourceMappingURL=index.d.mts.map

package/dist/substrate/runtime/sui-execute/index.mjs

@@ -1,15 +1,21 @@
+import { formatUnknownError } from "../format-unknown-error.mjs";
+import "./sign-and-dispatch.mjs";
 import { Effect, Schema } from "effect";
 //#region src/substrate/runtime/sui-execute/index.ts
 /** Tagged failure during one step of the Sui-tx roundtrip. `phase`
 *  discriminates which step failed so callers can map to their
 *  plugin's phase taxonomy (publish-tx, sign, parse, …) without
-*  losing the original cause. */
+*  losing the original cause.
+*
+*  On-chain `FailedTransaction` is NOT a phase here — it surfaces as
+*  the `$kind: 'FailedTransaction'` variant of `SuiExecuteResult`
+*  (return channel). Only transport / protocol failures live in this
+*  taxonomy. See STYLE_GUIDE §2. */
 var SuiExecuteError = class extends Schema.TaggedErrorClass()("SuiExecuteError", {
 	phase: Schema.Literals([
 		"serialize",
 		"sign",
 		"execute",
-		"failed-transaction",
 		"no-digest",
 		"wait-for-finality"
 	]),
@@ -21,6 +27,28 @@ var SuiExecuteError = class extends Schema.TaggedErrorClass()("SuiExecuteError",
 	digest: Schema.optional(Schema.String),
 	cause: Schema.optional(Schema.Defect)
 }) {};
+/** Render the canonical "digest + executionError-or-noted-absent" tail
+*  used by every plugin's `FailedTransaction` surface. Pure projection;
+*  does not throw.
+*
+*  Used at the call site as e.g.
+*  `\`seal publish ... ${formatExecutedFailure(result.FailedTransaction)}\``.
+*  Centralising the wording means future tweaks propagate uniformly
+*  across the seal / coin / walrus / deepbook / action / package
+*  surfaces. */
+const formatExecutedFailure = (failure) => failure.executionError !== void 0 ? `at ${failure.digest}: ${failure.executionError}` : `at ${failure.digest} (no validator error attached)`;
+/** Pull the digest out of a raw `executeTransaction` envelope without
+*  committing to success vs on-chain failure. `FailedTransaction`
+*  carries its digest under a sibling key, so callers that only need
+*  the digest (impersonate / one-shot dispatch paths that don't run
+*  the full `executeSuiTx` projection) read it through this projector
+*  rather than re-deriving the `$kind`-branching shape inline.
+*  Returns `undefined` for a malformed envelope; callers decide
+*  whether a missing digest is a failure. */
+const extractExecuteDigest = (raw) => {
+	const env = raw;
+	return env.$kind === "FailedTransaction" ? env.FailedTransaction?.digest : env.Transaction?.digest;
+};
 /** Drive the serialize → sign → execute → wait → project pipeline.
 *
 *  The caller passes:
@@ -39,8 +67,12 @@ var SuiExecuteError = class extends Schema.TaggedErrorClass()("SuiExecuteError",
 *     others (mode-local publish ready probe path) wait separately
 *     via `getObject` polling and can pass `false`.
 *
-*  All failures surface as `SuiExecuteError` with a `phase`
-*  discriminator the caller maps to its plugin's phase taxonomy.
+*  Returns a `SuiExecuteResult` discriminated union — callers dispatch
+*  on `$kind` to distinguish on-chain success (`'Transaction'`) from
+*  on-chain rejection (`'FailedTransaction'`). Transport / protocol
+*  failures (serialize, sign, execute, no-digest, wait-for-finality)
+*  surface as `SuiExecuteError` with a `phase` discriminator the
+*  caller maps to its plugin's phase taxonomy.
 */
 const executeSuiTx = (params) => params.signer.withTransactionSigner((lockedSigner) => Effect.gen(function* () {
 	const { client, signer, build } = params;
@@ -51,7 +83,7 @@ const executeSuiTx = (params) => params.signer.withTransactionSigner((lockedSign
 			phase: "serialize",
 			signerName: signer.name,
 			signerAddress: signer.address,
-			message: `Transaction.build failed for signer '${signer.name}' (address=${signer.address}): ` + (cause instanceof Error ? cause.message : String(cause)),
+			message: `Transaction.build failed for signer '${signer.name}' (address=${signer.address}): ` + formatUnknownError(cause),
 			cause
 		})
 	});
@@ -63,7 +95,7 @@ const executeSuiTx = (params) => params.signer.withTransactionSigner((lockedSign
 		cause
 	})));
 	const raw = yield* Effect.tryPromise({
-		try: () => client.executeTransaction({
+		try: () => client.core.executeTransaction({
 			transaction: txBytes,
 			signatures: [signed.signature],
 			include: {
@@ -75,15 +107,21 @@ const executeSuiTx = (params) => params.signer.withTransactionSigner((lockedSign
 			phase: "execute",
 			signerName: signer.name,
 			signerAddress: signer.address,
-			message: `executeTransaction rejected for signer '${signer.name}': ` + (cause instanceof Error ? cause.message : String(cause)),
+			message: `executeTransaction rejected for signer '${signer.name}': ` + formatUnknownError(cause),
 			cause
 		})
 	});
 	const env = raw;
 	if (env.$kind === "FailedTransaction") {
 		const failedDigest = env.FailedTransaction?.digest;
-		if (awaitFinality && failedDigest !== void 0) yield* Effect.tryPromise({
-			try: () => client.waitForTransaction({ digest: failedDigest }),
+		if (failedDigest === void 0) return yield* Effect.fail(new SuiExecuteError({
+			phase: "no-digest",
+			signerName: signer.name,
+			signerAddress: signer.address,
+			message: `executeTransaction returned FailedTransaction with no digest. Raw=${JSON.stringify(raw).slice(0, 300)}`
+		}));
+		if (awaitFinality) yield* Effect.tryPromise({
+			try: () => client.core.waitForTransaction({ digest: failedDigest }),
 			catch: (cause) => new SuiExecuteError({
 				phase: "wait-for-finality",
 				signerName: signer.name,
@@ -93,13 +131,14 @@ const executeSuiTx = (params) => params.signer.withTransactionSigner((lockedSign
 				cause
 			})
 		});
-		return yield* Effect.fail(new SuiExecuteError({
-			phase: "failed-transaction",
-			signerName: signer.name,
-			signerAddress: signer.address,
-			digest: env.FailedTransaction?.digest,
-			message: `executeTransaction returned FailedTransaction (digest=${env.FailedTransaction?.digest ?? "<unknown>"}): ` + (env.FailedTransaction?.status?.error ?? "<no error>")
-		}));
+		const executionError = env.FailedTransaction?.status?.error;
+		return {
+			$kind: "FailedTransaction",
+			FailedTransaction: {
+				digest: failedDigest,
+				...executionError !== void 0 ? { executionError } : {}
+			}
+		};
 	}
 	const txOk = env.Transaction;
 	if (txOk?.digest === void 0) return yield* Effect.fail(new SuiExecuteError({
@@ -109,7 +148,7 @@ const executeSuiTx = (params) => params.signer.withTransactionSigner((lockedSign
 		message: `executeTransaction returned no digest. Raw=${JSON.stringify(raw).slice(0, 300)}`
 	}));
 	if (awaitFinality) yield* Effect.tryPromise({
-		try: () => client.waitForTransaction({ digest: txOk.digest }),
+		try: () => client.core.waitForTransaction({ digest: txOk.digest }),
 		catch: (cause) => new SuiExecuteError({
 			phase: "wait-for-finality",
 			signerName: signer.name,
@@ -131,14 +170,39 @@ const executeSuiTx = (params) => params.signer.withTransactionSigner((lockedSign
 		objectChanges.push(entry);
 	}
 	return {
-		digest: txOk.digest,
-		objectChanges
+		$kind: "Transaction",
+		Transaction: {
+			digest: txOk.digest,
+			objectChanges
+		}
 	};
 })).pipe(Effect.withSpan("substrate.sui-execute", { attributes: {
 	"sui-execute.signer": params.signer.name,
 	"sui-execute.address": params.signer.address
 } }));
+/** Decode a possibly URI-encoded SDK error message. The Sui SDK
+*  emits `decodeURIComponent`-able strings for some error paths
+*  (notably stale-object-version reports). Falls back to the raw
+*  message on decode failure. */
+const decodeMessage = (message) => {
+	try {
+		return decodeURIComponent(message);
+	} catch {
+		return message;
+	}
+};
+/** Typed predicate for the SDK's "stale object version" transient
+*  failure — the Move VM refuses a transaction that references an
+*  object reference older than the current chain version. Consumers
+*  retry with fresh refs; pair with `STALE_OBJECT_VERSION_RETRY_PROFILE`
+*  from `retry-policy.ts`. Detection sniffs the SDK message because the
+*  underlying gRPC error class doesn't expose a structured discriminator
+*  for this case. */
+const isSuiStaleObjectVersionError = (err) => {
+	const message = decodeMessage(err.message);
+	return message.includes("needs to be rebuilt because object") && message.includes("current version");
+};
 //#endregion
-export { executeSuiTx };
+export { executeSuiTx, extractExecuteDigest, formatExecutedFailure, isSuiStaleObjectVersionError };
 
 //# sourceMappingURL=index.mjs.map

package/dist/substrate/runtime/sui-execute/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/substrate/runtime/sui-execute/index.ts"],"sourcesContent":["// sui-execute — substrate helper for the Sui-SDK transaction\n// roundtrip.\n//\n// ARCHITECTURE NOTE — substrate-name-awareness escape hatch:\n//\n// This module is the ONE blessed substrate-side Sui-aware module.\n// The substrate is otherwise strictly name-blind (see ARCHITECTURE.md\n// §\"Substrate name-blindness\"), but the \"build → sign → execute →\n// wait → project\" roundtrip is duplicated verbatim across\n// `plugins/package/publish-executor.ts` and `plugins/action/execute.ts`\n// — ~80% identical line-for-line — and the same shape is needed for\n// `seal` (deploy + key-server registration), `coin.mint`, `action`,\n// and `deepbook` (publish + pool creation).\n//\n// Lifting the dispatch here gives every Sui-tx plugin one well-tested\n// surface and surfaces the SDK-envelope shape decisions (`include:\n// { effects, objectTypes }`, `$kind` projection, `FailedTransaction`\n// detection) ONCE.\n//\n// Boundary discipline:\n//\n//   - This module is L1-adjacent: it lives under `substrate/runtime/`\n//     but consumes opaque shapes (`unknown` SDK client; opaque\n//     signer closure). It does NOT import from `plugins/sui/*` or\n//     `@mysten/sui/*` — the caller passes in the resolved SDK ref\n//     and the signer; the substrate just orchestrates the roundtrip.\n//   - The return shape (`ExecutedReceipt`) is name-blind: a flat\n//     digest + a uniform `objectChanges` array. Callers map to their\n//     domain shape (PublishReceipt, ActionReceipt, MintReceipt, …).\n//   - Failures route through `SuiExecuteError` whose `phase`\n//     discriminates the failing step. Callers map to their plugin's\n//     phase taxonomy in the executor closure passed to\n//     `compileChainOperation` (see `artifact-publisher/chain-operation.ts`).\n\nimport { Effect, Schema, Scope } from 'effect';\n\n// ---------------------------------------------------------------------------\n// Errors — substrate-style Schema.TaggedErrorClass\n// ---------------------------------------------------------------------------\n\n/** Tagged failure during one step of the Sui-tx roundtrip. `phase`\n *  discriminates which step failed so callers can map to their\n *  plugin's phase taxonomy (publish-tx, sign, parse, …) without\n *  losing the original cause. */\nexport class SuiExecuteError extends Schema.TaggedErrorClass<SuiExecuteError>()('SuiExecuteError', {\n\tphase: Schema.Literals([\n\t\t'serialize',\n\t\t'sign',\n\t\t'execute',\n\t\t'failed-transaction',\n\t\t'no-digest',\n\t\t'wait-for-finality',\n\t]),\n\tsignerName: Schema.String,\n\tsignerAddress: Schema.String,\n\tmessage: Schema.String,\n\t/** Echoed digest when the SDK returned one but a later step\n\t *  failed — surfaces in cause-walker output. */\n\tdigest: Schema.optional(Schema.String),\n\tcause: Schema.optional(Schema.Defect),\n}) {}\n\n// ---------------------------------------------------------------------------\n// Inputs / outputs — opaque at the substrate boundary\n// ---------------------------------------------------------------------------\n\n/** The narrow slice of the SDK client this helper drives. Mirrors the\n *  shape cast verbatim in `plugins/package/publish-executor.ts` and\n *  `plugins/action/execute.ts`. */\nexport interface SuiExecuteClient {\n\treadonly executeTransaction: (args: {\n\t\treadonly transaction: Uint8Array;\n\t\treadonly signatures: ReadonlyArray<string>;\n\t\treadonly include?: {\n\t\t\treadonly effects?: boolean;\n\t\t\treadonly objectTypes?: boolean;\n\t\t};\n\t}) => Promise<unknown>;\n\treadonly waitForTransaction: (args: {\n\t\treadonly digest: string;\n\t\treadonly include?: { readonly effects?: boolean };\n\t\treadonly timeout?: number;\n\t}) => Promise<unknown>;\n}\n\n/** Serialised transaction-build callback. Returns the BCS bytes ready\n *  for signing. The caller owns the `Transaction` construction — the\n *  substrate does not import `@mysten/sui/transactions` — and resolves\n *  it via `Transaction.build({ client })`. */\nexport type SerializedTxBuilder = () => Promise<Uint8Array>;\n\nexport interface TransactionSignerScope<SignError = unknown> {\n\treadonly signTransaction: (\n\t\ttx: Uint8Array,\n\t) => Effect.Effect<{ readonly bytes: string; readonly signature: string }, SignError>;\n}\n\n/** Resolved signer — narrow slice of `AccountValue` (see\n *  `artifact-publisher/chain-operation.ts::ResolvedSigner`). */\nexport interface ResolvedSigner {\n\treadonly name: string;\n\treadonly address: string;\n\treadonly signTransaction: (\n\t\ttx: Uint8Array,\n\t) => Effect.Effect<{ readonly bytes: string; readonly signature: string }, unknown>;\n\treadonly withTransactionSigner: <A, E, R>(\n\t\tbody: (signer: TransactionSignerScope) => Effect.Effect<A, E, R>,\n\t) => Effect.Effect<A, E, R>;\n}\n\n/** Flat per-object change record. Mirrors the union of fields that\n *  `PublishObjectChange` (package) and `ActionObjectChange` (action)\n *  expose so callers can pick whichever subset they surface. */\nexport interface ExecutedObjectChange {\n\treadonly objectId: string;\n\treadonly objectType?: string;\n\treadonly outputState?: string;\n\treadonly idOperation?: string;\n}\n\n/** Result of one successful execute round. Callers map this to their\n *  domain shape (PublishReceipt, ActionReceipt, MintReceipt, …). */\nexport interface ExecutedReceipt {\n\treadonly digest: string;\n\treadonly objectChanges: ReadonlyArray<ExecutedObjectChange>;\n}\n\n// ---------------------------------------------------------------------------\n// SDK envelope projection (matches publish-executor + action.execute)\n// ---------------------------------------------------------------------------\n\ninterface RawExecuteEnvelope {\n\treadonly $kind?: 'Transaction' | 'FailedTransaction';\n\treadonly Transaction?: {\n\t\treadonly digest?: string;\n\t\treadonly effects?: {\n\t\t\treadonly changedObjects?: ReadonlyArray<{\n\t\t\t\treadonly objectId?: string;\n\t\t\t\treadonly outputState?: string;\n\t\t\t\treadonly idOperation?: string;\n\t\t\t}>;\n\t\t};\n\t\treadonly objectTypes?: Readonly<Record<string, string>>;\n\t};\n\treadonly FailedTransaction?: {\n\t\treadonly digest?: string;\n\t\treadonly status?: { readonly error?: string };\n\t};\n}\n\n// ---------------------------------------------------------------------------\n// The helper\n// ---------------------------------------------------------------------------\n\n/** Drive the serialize → sign → execute → wait → project pipeline.\n *\n *  The caller passes:\n *   - `client`: an opaque SDK client exposing `executeTransaction` +\n *     `waitForTransaction` (matches the cast in both existing\n *     duplicates).\n *   - `signer`: a `ResolvedSigner` slice with an account-owned\n *     transaction scope. The build/sign/execute/wait pipeline runs\n *     inside that scope so gas/object-version resolution cannot race\n *     another transaction from the same address.\n *   - `build`: a closure returning the serialised tx bytes (the\n *     caller constructed the `Transaction` and resolved gas via\n *     `tx.build({ client })`).\n *   - `awaitFinality`: opt-out for the `waitForTransaction` step.\n *     Defaults to `true`. Some callers (action ready-probe) need it;\n *     others (mode-local publish ready probe path) wait separately\n *     via `getObject` polling and can pass `false`.\n *\n *  All failures surface as `SuiExecuteError` with a `phase`\n *  discriminator the caller maps to its plugin's phase taxonomy.\n */\nexport const executeSuiTx = (params: {\n\treadonly client: SuiExecuteClient;\n\treadonly signer: ResolvedSigner;\n\treadonly build: SerializedTxBuilder;\n\treadonly awaitFinality?: boolean;\n}): Effect.Effect<ExecutedReceipt, SuiExecuteError, Scope.Scope> =>\n\tparams.signer\n\t\t.withTransactionSigner((lockedSigner) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst { client, signer, build } = params;\n\t\t\t\tconst awaitFinality = params.awaitFinality ?? true;\n\n\t\t\t\t// 1. Serialise the transaction. Failures inside the build\n\t\t\t\t//    closure (e.g. `Transaction.build({ client })` rejection)\n\t\t\t\t//    surface as `phase: 'serialize'` so callers can attribute\n\t\t\t\t//    them at the call site.\n\t\t\t\tconst txBytes = yield* Effect.tryPromise({\n\t\t\t\t\ttry: () => build(),\n\t\t\t\t\tcatch: (cause) =>\n\t\t\t\t\t\tnew SuiExecuteError({\n\t\t\t\t\t\t\tphase: 'serialize',\n\t\t\t\t\t\t\tsignerName: signer.name,\n\t\t\t\t\t\t\tsignerAddress: signer.address,\n\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t`Transaction.build failed for signer '${signer.name}' ` +\n\t\t\t\t\t\t\t\t`(address=${signer.address}): ` +\n\t\t\t\t\t\t\t\t(cause instanceof Error ? cause.message : String(cause)),\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t}),\n\t\t\t\t});\n\n\t\t\t\t// 2. Sign with the resolved signer. The signer's own typed\n\t\t\t\t//    error surfaces in `cause`; we collapse to `phase: 'sign'`\n\t\t\t\t//    so the cascade-formatter can walk the cause chain.\n\t\t\t\tconst signed = yield* lockedSigner.signTransaction(txBytes).pipe(\n\t\t\t\t\tEffect.mapError(\n\t\t\t\t\t\t(cause) =>\n\t\t\t\t\t\t\tnew SuiExecuteError({\n\t\t\t\t\t\t\t\tphase: 'sign',\n\t\t\t\t\t\t\t\tsignerName: signer.name,\n\t\t\t\t\t\t\t\tsignerAddress: signer.address,\n\t\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t\t`signer.signTransaction failed for '${signer.name}' ` +\n\t\t\t\t\t\t\t\t\t`(address=${signer.address}).`,\n\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t);\n\n\t\t\t\t// 3. Execute via the SDK. We always request `effects: true` and\n\t\t\t\t//    `objectTypes: true` because every existing caller needs\n\t\t\t\t//    `changedObjects` + types to project to its domain shape.\n\t\t\t\tconst raw = yield* Effect.tryPromise({\n\t\t\t\t\ttry: () =>\n\t\t\t\t\t\tclient.executeTransaction({\n\t\t\t\t\t\t\ttransaction: txBytes,\n\t\t\t\t\t\t\tsignatures: [signed.signature],\n\t\t\t\t\t\t\tinclude: { effects: true, objectTypes: true },\n\t\t\t\t\t\t}),\n\t\t\t\t\tcatch: (cause) =>\n\t\t\t\t\t\tnew SuiExecuteError({\n\t\t\t\t\t\t\tphase: 'execute',\n\t\t\t\t\t\t\tsignerName: signer.name,\n\t\t\t\t\t\t\tsignerAddress: signer.address,\n\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t`executeTransaction rejected for signer '${signer.name}': ` +\n\t\t\t\t\t\t\t\t(cause instanceof Error ? cause.message : String(cause)),\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t}),\n\t\t\t\t});\n\n\t\t\t\t// 4. Project the envelope. `$kind === 'FailedTransaction'`\n\t\t\t\t//    surfaces as a discrete phase so callers can distinguish\n\t\t\t\t//    transport failures from on-chain rejection.\n\t\t\t\tconst env = raw as RawExecuteEnvelope;\n\t\t\t\tif (env.$kind === 'FailedTransaction') {\n\t\t\t\t\tconst failedDigest = env.FailedTransaction?.digest;\n\t\t\t\t\tif (awaitFinality && failedDigest !== undefined) {\n\t\t\t\t\t\tyield* Effect.tryPromise({\n\t\t\t\t\t\t\ttry: () => client.waitForTransaction({ digest: failedDigest }),\n\t\t\t\t\t\t\tcatch: (cause) =>\n\t\t\t\t\t\t\t\tnew SuiExecuteError({\n\t\t\t\t\t\t\t\t\tphase: 'wait-for-finality',\n\t\t\t\t\t\t\t\t\tsignerName: signer.name,\n\t\t\t\t\t\t\t\t\tsignerAddress: signer.address,\n\t\t\t\t\t\t\t\t\tdigest: failedDigest,\n\t\t\t\t\t\t\t\t\tmessage: `waitForTransaction(${failedDigest}) failed.`,\n\t\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t});\n\t\t\t\t\t}\n\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\tnew SuiExecuteError({\n\t\t\t\t\t\t\tphase: 'failed-transaction',\n\t\t\t\t\t\t\tsignerName: signer.name,\n\t\t\t\t\t\t\tsignerAddress: signer.address,\n\t\t\t\t\t\t\tdigest: env.FailedTransaction?.digest,\n\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t`executeTransaction returned FailedTransaction ` +\n\t\t\t\t\t\t\t\t`(digest=${env.FailedTransaction?.digest ?? '<unknown>'}): ` +\n\t\t\t\t\t\t\t\t(env.FailedTransaction?.status?.error ?? '<no error>'),\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tconst txOk = env.Transaction;\n\t\t\t\tif (txOk?.digest === undefined) {\n\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\tnew SuiExecuteError({\n\t\t\t\t\t\t\tphase: 'no-digest',\n\t\t\t\t\t\t\tsignerName: signer.name,\n\t\t\t\t\t\t\tsignerAddress: signer.address,\n\t\t\t\t\t\t\tmessage: `executeTransaction returned no digest. Raw=${JSON.stringify(raw).slice(0, 300)}`,\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\t// 5. Wait for finality (opt-out — some callers wait separately).\n\t\t\t\tif (awaitFinality) {\n\t\t\t\t\tyield* Effect.tryPromise({\n\t\t\t\t\t\ttry: () => client.waitForTransaction({ digest: txOk.digest! }),\n\t\t\t\t\t\tcatch: (cause) =>\n\t\t\t\t\t\t\tnew SuiExecuteError({\n\t\t\t\t\t\t\t\tphase: 'wait-for-finality',\n\t\t\t\t\t\t\t\tsignerName: signer.name,\n\t\t\t\t\t\t\t\tsignerAddress: signer.address,\n\t\t\t\t\t\t\t\tdigest: txOk.digest,\n\t\t\t\t\t\t\t\tmessage: `waitForTransaction(${txOk.digest}) failed.`,\n\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t});\n\t\t\t\t}\n\n\t\t\t\t// 6. Project changedObjects flat. Callers pick which entries\n\t\t\t\t//    they care about (published / created / mutated / by-type\n\t\t\t\t//    substring).\n\t\t\t\tconst objectTypes = txOk.objectTypes ?? {};\n\t\t\t\tconst objectChanges: Array<ExecutedObjectChange> = [];\n\t\t\t\tfor (const ch of txOk.effects?.changedObjects ?? []) {\n\t\t\t\t\tif (typeof ch.objectId !== 'string') continue;\n\t\t\t\t\tconst objectType = objectTypes[ch.objectId];\n\t\t\t\t\tconst entry: { -readonly [K in keyof ExecutedObjectChange]: ExecutedObjectChange[K] } = {\n\t\t\t\t\t\tobjectId: ch.objectId,\n\t\t\t\t\t};\n\t\t\t\t\tif (objectType !== undefined) entry.objectType = objectType;\n\t\t\t\t\tif (ch.outputState !== undefined) entry.outputState = ch.outputState;\n\t\t\t\t\tif (ch.idOperation !== undefined) entry.idOperation = ch.idOperation;\n\t\t\t\t\tobjectChanges.push(entry);\n\t\t\t\t}\n\n\t\t\t\treturn { digest: txOk.digest, objectChanges };\n\t\t\t}),\n\t\t)\n\t\t.pipe(\n\t\t\tEffect.withSpan('substrate.sui-execute', {\n\t\t\t\tattributes: {\n\t\t\t\t\t'sui-execute.signer': params.signer.name,\n\t\t\t\t\t'sui-execute.address': params.signer.address,\n\t\t\t\t},\n\t\t\t}),\n\t\t);\n"],"mappings":";;;;;;AA4CA,IAAa,kBAAb,cAAqC,OAAO,kBAAmC,CAAC,mBAAmB;CAClG,OAAO,OAAO,SAAS;EACtB;EACA;EACA;EACA;EACA;EACA;EACA,CAAC;CACF,YAAY,OAAO;CACnB,eAAe,OAAO;CACtB,SAAS,OAAO;;;CAGhB,QAAQ,OAAO,SAAS,OAAO,OAAO;CACtC,OAAO,OAAO,SAAS,OAAO,OAAO;CACrC,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;AAmHH,MAAa,gBAAgB,WAM5B,OAAO,OACL,uBAAuB,iBACvB,OAAO,IAAI,aAAa;CACvB,MAAM,EAAE,QAAQ,QAAQ,UAAU;CAClC,MAAM,gBAAgB,OAAO,iBAAiB;CAM9C,MAAM,UAAU,OAAO,OAAO,WAAW;EACxC,WAAW,OAAO;EAClB,QAAQ,UACP,IAAI,gBAAgB;GACnB,OAAO;GACP,YAAY,OAAO;GACnB,eAAe,OAAO;GACtB,SACC,wCAAwC,OAAO,KAAK,aACxC,OAAO,QAAQ,QAC1B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GACxD;GACA,CAAC;EACH,CAAC;CAKF,MAAM,SAAS,OAAO,aAAa,gBAAgB,QAAQ,CAAC,KAC3D,OAAO,UACL,UACA,IAAI,gBAAgB;EACnB,OAAO;EACP,YAAY,OAAO;EACnB,eAAe,OAAO;EACtB,SACC,sCAAsC,OAAO,KAAK,aACtC,OAAO,QAAQ;EAC5B;EACA,CAAC,CACH,CACD;CAKD,MAAM,MAAM,OAAO,OAAO,WAAW;EACpC,WACC,OAAO,mBAAmB;GACzB,aAAa;GACb,YAAY,CAAC,OAAO,UAAU;GAC9B,SAAS;IAAE,SAAS;IAAM,aAAa;IAAM;GAC7C,CAAC;EACH,QAAQ,UACP,IAAI,gBAAgB;GACnB,OAAO;GACP,YAAY,OAAO;GACnB,eAAe,OAAO;GACtB,SACC,2CAA2C,OAAO,KAAK,QACtD,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GACxD;GACA,CAAC;EACH,CAAC;CAKF,MAAM,MAAM;AACZ,KAAI,IAAI,UAAU,qBAAqB;EACtC,MAAM,eAAe,IAAI,mBAAmB;AAC5C,MAAI,iBAAiB,iBAAiB,KAAA,EACrC,QAAO,OAAO,WAAW;GACxB,WAAW,OAAO,mBAAmB,EAAE,QAAQ,cAAc,CAAC;GAC9D,QAAQ,UACP,IAAI,gBAAgB;IACnB,OAAO;IACP,YAAY,OAAO;IACnB,eAAe,OAAO;IACtB,QAAQ;IACR,SAAS,sBAAsB,aAAa;IAC5C;IACA,CAAC;GACH,CAAC;AAEH,SAAO,OAAO,OAAO,KACpB,IAAI,gBAAgB;GACnB,OAAO;GACP,YAAY,OAAO;GACnB,eAAe,OAAO;GACtB,QAAQ,IAAI,mBAAmB;GAC/B,SACC,yDACW,IAAI,mBAAmB,UAAU,YAAY,QACvD,IAAI,mBAAmB,QAAQ,SAAS;GAC1C,CAAC,CACF;;CAEF,MAAM,OAAO,IAAI;AACjB,KAAI,MAAM,WAAW,KAAA,EACpB,QAAO,OAAO,OAAO,KACpB,IAAI,gBAAgB;EACnB,OAAO;EACP,YAAY,OAAO;EACnB,eAAe,OAAO;EACtB,SAAS,8CAA8C,KAAK,UAAU,IAAI,CAAC,MAAM,GAAG,IAAI;EACxF,CAAC,CACF;AAIF,KAAI,cACH,QAAO,OAAO,WAAW;EACxB,WAAW,OAAO,mBAAmB,EAAE,QAAQ,KAAK,QAAS,CAAC;EAC9D,QAAQ,UACP,IAAI,gBAAgB;GACnB,OAAO;GACP,YAAY,OAAO;GACnB,eAAe,OAAO;GACtB,QAAQ,KAAK;GACb,SAAS,sBAAsB,KAAK,OAAO;GAC3C;GACA,CAAC;EACH,CAAC;CAMH,MAAM,cAAc,KAAK,eAAe,EAAE;CAC1C,MAAM,gBAA6C,EAAE;AACrD,MAAK,MAAM,MAAM,KAAK,SAAS,kBAAkB,EAAE,EAAE;AACpD,MAAI,OAAO,GAAG,aAAa,SAAU;EACrC,MAAM,aAAa,YAAY,GAAG;EAClC,MAAM,QAAkF,EACvF,UAAU,GAAG,UACb;AACD,MAAI,eAAe,KAAA,EAAW,OAAM,aAAa;AACjD,MAAI,GAAG,gBAAgB,KAAA,EAAW,OAAM,cAAc,GAAG;AACzD,MAAI,GAAG,gBAAgB,KAAA,EAAW,OAAM,cAAc,GAAG;AACzD,gBAAc,KAAK,MAAM;;AAG1B,QAAO;EAAE,QAAQ,KAAK;EAAQ;EAAe;EAC5C,CACF,CACA,KACA,OAAO,SAAS,yBAAyB,EACxC,YAAY;CACX,sBAAsB,OAAO,OAAO;CACpC,uBAAuB,OAAO,OAAO;CACrC,EACD,CAAC,CACF"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/substrate/runtime/sui-execute/index.ts"],"sourcesContent":["// sui-execute — substrate helper for the Sui-SDK transaction\n// roundtrip.\n//\n// ARCHITECTURE NOTE — substrate-name-awareness escape hatch:\n//\n// This module is the ONE blessed substrate-side Sui-aware module.\n// The substrate is otherwise strictly name-blind (see ARCHITECTURE.md\n// §\"Substrate name-blindness\"), but the \"build → sign → execute →\n// wait → project\" roundtrip is duplicated verbatim across\n// `plugins/package/publish-executor.ts` and `plugins/action/execute.ts`\n// — ~80% identical line-for-line — and the same shape is needed for\n// `seal` (deploy + key-server registration), `coin.mint`, `action`,\n// and `deepbook` (publish + pool creation).\n//\n// Lifting the dispatch here gives every Sui-tx plugin one well-tested\n// surface and surfaces the SDK-envelope shape decisions (`include:\n// { effects, objectTypes }`, `$kind` projection, `FailedTransaction`\n// detection) ONCE.\n//\n// Boundary discipline:\n//\n//   - This module is L1-adjacent: it lives under `substrate/runtime/`\n//     but consumes opaque shapes (`unknown` SDK client; opaque\n//     signer closure). It does NOT import from `plugins/sui/*` or\n//     `@mysten/sui/*` — the caller passes in the resolved SDK ref\n//     and the signer; the substrate just orchestrates the roundtrip.\n//   - The return shape (`ExecutedReceipt`) is name-blind: a flat\n//     digest + a uniform `objectChanges` array. Callers map to their\n//     domain shape (PublishReceipt, ActionReceipt, MintReceipt, …).\n//   - Transport / protocol failures (serialize, sign, execute, no-digest,\n//     wait-for-finality) route through `SuiExecuteError` whose `phase`\n//     discriminates the failing step. Callers map to their plugin's\n//     phase taxonomy in their produce body's `mapError` closure.\n//   - On-chain `FailedTransaction` is a RETURN-CHANNEL variant of\n//     `SuiExecuteResult`, NOT an error — mirrors `account.signAndExecute`\n//     and STYLE_GUIDE §2's return-channel discriminated-union rule.\n//     Callers dispatch on `$kind` after the call.\n\nimport { Effect, Schema, Scope } from 'effect';\nimport type { ClientWithCoreApi } from '@mysten/sui/client';\n\nimport { formatUnknownError } from '../format-unknown-error.ts';\n\n// ---------------------------------------------------------------------------\n// Errors — substrate-style Schema.TaggedErrorClass\n// ---------------------------------------------------------------------------\n\n/** Tagged failure during one step of the Sui-tx roundtrip. `phase`\n *  discriminates which step failed so callers can map to their\n *  plugin's phase taxonomy (publish-tx, sign, parse, …) without\n *  losing the original cause.\n *\n *  On-chain `FailedTransaction` is NOT a phase here — it surfaces as\n *  the `$kind: 'FailedTransaction'` variant of `SuiExecuteResult`\n *  (return channel). Only transport / protocol failures live in this\n *  taxonomy. See STYLE_GUIDE §2. */\nexport class SuiExecuteError extends Schema.TaggedErrorClass<SuiExecuteError>()('SuiExecuteError', {\n\tphase: Schema.Literals(['serialize', 'sign', 'execute', 'no-digest', 'wait-for-finality']),\n\tsignerName: Schema.String,\n\tsignerAddress: Schema.String,\n\tmessage: Schema.String,\n\t/** Echoed digest when the SDK returned one but a later step\n\t *  failed — surfaces in cause-walker output. */\n\tdigest: Schema.optional(Schema.String),\n\tcause: Schema.optional(Schema.Defect),\n}) {}\n\n// ---------------------------------------------------------------------------\n// Inputs / outputs — opaque at the substrate boundary\n// ---------------------------------------------------------------------------\n\n/** The SDK client this helper drives. Accepts any `ClientWithCoreApi`\n *  (the published cross-transport surface from `@mysten/sui/client`).\n *  `executeSuiTx` calls `client.core.executeTransaction` /\n *  `client.core.waitForTransaction` per STYLE_GUIDE §16. */\nexport type SuiExecuteClient = ClientWithCoreApi;\n\n/** Serialised transaction-build callback. Returns the BCS bytes ready\n *  for signing. The caller owns the `Transaction` construction — the\n *  substrate does not import `@mysten/sui/transactions` — and resolves\n *  it via `Transaction.build({ client })`. */\nexport type SerializedTxBuilder = () => Promise<Uint8Array>;\n\nexport interface TransactionSignerScope<SignError = unknown> {\n\treadonly signTransaction: (\n\t\ttx: Uint8Array,\n\t) => Effect.Effect<{ readonly bytes: string; readonly signature: string }, SignError>;\n}\n\n/** Resolved signer — narrow slice of `AccountValue`. */\nexport interface ResolvedSigner {\n\treadonly name: string;\n\treadonly address: string;\n\treadonly signTransaction: (\n\t\ttx: Uint8Array,\n\t) => Effect.Effect<{ readonly bytes: string; readonly signature: string }, unknown>;\n\treadonly withTransactionSigner: <A, E, R>(\n\t\tbody: (signer: TransactionSignerScope) => Effect.Effect<A, E, R>,\n\t) => Effect.Effect<A, E, R>;\n}\n\n/** Flat per-object change record. Mirrors the union of fields that\n *  `PublishObjectChange` (package) and `ActionObjectChange` (action)\n *  expose so callers can pick whichever subset they surface. */\nexport interface ExecutedObjectChange {\n\treadonly objectId: string;\n\treadonly objectType?: string;\n\treadonly outputState?: string;\n\treadonly idOperation?: string;\n}\n\n/** Result of one successful execute round. Callers map this to their\n *  domain shape (PublishReceipt, ActionReceipt, MintReceipt, …). */\nexport interface ExecutedReceipt {\n\treadonly digest: string;\n\treadonly objectChanges: ReadonlyArray<ExecutedObjectChange>;\n}\n\n/** On-chain failure projection. The transaction was delivered +\n *  executed by the validator but the on-chain execution failed.\n *  Carries the digest (for log correlation) plus the validator's\n *  stringified error when one was attached. `executionError` is\n *  omitted when the SDK returns no message (STYLE_GUIDE §5: no\n *  sentinel placeholders at resolved-value surfaces). An envelope\n *  without a digest fails at projection with\n *  `SuiExecuteError(phase: 'no-digest')`.\n *\n *  This is the single source of truth for the on-chain-failure shape\n *  across the devstack: `account.SignAndExecuteResult`'s\n *  `FailedTransaction` variant carries it directly; every plugin that\n *  renders one of these failures into a user-facing error message goes\n *  through `formatExecutedFailure` (below). */\nexport interface ExecutedFailure {\n\treadonly digest: string;\n\treadonly executionError?: string;\n}\n\n/** Render the canonical \"digest + executionError-or-noted-absent\" tail\n *  used by every plugin's `FailedTransaction` surface. Pure projection;\n *  does not throw.\n *\n *  Used at the call site as e.g.\n *  `\\`seal publish ... ${formatExecutedFailure(result.FailedTransaction)}\\``.\n *  Centralising the wording means future tweaks propagate uniformly\n *  across the seal / coin / walrus / deepbook / action / package\n *  surfaces. */\nexport const formatExecutedFailure = (failure: ExecutedFailure): string =>\n\tfailure.executionError !== undefined\n\t\t? `at ${failure.digest}: ${failure.executionError}`\n\t\t: `at ${failure.digest} (no validator error attached)`;\n\n/** Outcome of `executeSuiTx`. Mirrors the SDK's discriminated\n *  `SuiClientTypes.TransactionResult` shape — on-chain failures are a\n *  RETURN VALUE (callers dispatch on `$kind`), NOT an error. Only\n *  transport / protocol failures (sign refused, RPC unreachable,\n *  finality wait broke, no digest) surface through `SuiExecuteError`.\n *  See STYLE_GUIDE §2 for the return-channel discipline this matches. */\nexport type SuiExecuteResult =\n\t| { readonly $kind: 'Transaction'; readonly Transaction: ExecutedReceipt }\n\t| { readonly $kind: 'FailedTransaction'; readonly FailedTransaction: ExecutedFailure };\n\n// ---------------------------------------------------------------------------\n// SDK envelope projection (matches publish-executor + action.execute)\n// ---------------------------------------------------------------------------\n\ninterface RawExecuteEnvelope {\n\treadonly $kind?: 'Transaction' | 'FailedTransaction';\n\treadonly Transaction?: {\n\t\treadonly digest?: string;\n\t\treadonly effects?: {\n\t\t\treadonly changedObjects?: ReadonlyArray<{\n\t\t\t\treadonly objectId?: string;\n\t\t\t\treadonly outputState?: string;\n\t\t\t\treadonly idOperation?: string;\n\t\t\t}>;\n\t\t};\n\t\treadonly objectTypes?: Readonly<Record<string, string>>;\n\t};\n\treadonly FailedTransaction?: {\n\t\treadonly digest?: string;\n\t\treadonly status?: { readonly error?: string };\n\t};\n}\n\n/** Pull the digest out of a raw `executeTransaction` envelope without\n *  committing to success vs on-chain failure. `FailedTransaction`\n *  carries its digest under a sibling key, so callers that only need\n *  the digest (impersonate / one-shot dispatch paths that don't run\n *  the full `executeSuiTx` projection) read it through this projector\n *  rather than re-deriving the `$kind`-branching shape inline.\n *  Returns `undefined` for a malformed envelope; callers decide\n *  whether a missing digest is a failure. */\nexport const extractExecuteDigest = (raw: unknown): string | undefined => {\n\tconst env = raw as RawExecuteEnvelope;\n\treturn env.$kind === 'FailedTransaction'\n\t\t? env.FailedTransaction?.digest\n\t\t: env.Transaction?.digest;\n};\n\n// ---------------------------------------------------------------------------\n// The helper\n// ---------------------------------------------------------------------------\n\n/** Drive the serialize → sign → execute → wait → project pipeline.\n *\n *  The caller passes:\n *   - `client`: an opaque SDK client exposing `executeTransaction` +\n *     `waitForTransaction` (matches the cast in both existing\n *     duplicates).\n *   - `signer`: a `ResolvedSigner` slice with an account-owned\n *     transaction scope. The build/sign/execute/wait pipeline runs\n *     inside that scope so gas/object-version resolution cannot race\n *     another transaction from the same address.\n *   - `build`: a closure returning the serialised tx bytes (the\n *     caller constructed the `Transaction` and resolved gas via\n *     `tx.build({ client })`).\n *   - `awaitFinality`: opt-out for the `waitForTransaction` step.\n *     Defaults to `true`. Some callers (action ready-probe) need it;\n *     others (mode-local publish ready probe path) wait separately\n *     via `getObject` polling and can pass `false`.\n *\n *  Returns a `SuiExecuteResult` discriminated union — callers dispatch\n *  on `$kind` to distinguish on-chain success (`'Transaction'`) from\n *  on-chain rejection (`'FailedTransaction'`). Transport / protocol\n *  failures (serialize, sign, execute, no-digest, wait-for-finality)\n *  surface as `SuiExecuteError` with a `phase` discriminator the\n *  caller maps to its plugin's phase taxonomy.\n */\nexport const executeSuiTx = (params: {\n\treadonly client: SuiExecuteClient;\n\treadonly signer: ResolvedSigner;\n\treadonly build: SerializedTxBuilder;\n\treadonly awaitFinality?: boolean;\n}): Effect.Effect<SuiExecuteResult, SuiExecuteError, Scope.Scope> =>\n\tparams.signer\n\t\t.withTransactionSigner((lockedSigner) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst { client, signer, build } = params;\n\t\t\t\tconst awaitFinality = params.awaitFinality ?? true;\n\n\t\t\t\t// 1. Serialise the transaction. Failures inside the build\n\t\t\t\t//    closure (e.g. `Transaction.build({ client })` rejection)\n\t\t\t\t//    surface as `phase: 'serialize'` so callers can attribute\n\t\t\t\t//    them at the call site.\n\t\t\t\tconst txBytes = yield* Effect.tryPromise({\n\t\t\t\t\ttry: () => build(),\n\t\t\t\t\tcatch: (cause) =>\n\t\t\t\t\t\tnew SuiExecuteError({\n\t\t\t\t\t\t\tphase: 'serialize',\n\t\t\t\t\t\t\tsignerName: signer.name,\n\t\t\t\t\t\t\tsignerAddress: signer.address,\n\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t`Transaction.build failed for signer '${signer.name}' ` +\n\t\t\t\t\t\t\t\t`(address=${signer.address}): ` +\n\t\t\t\t\t\t\t\tformatUnknownError(cause),\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t}),\n\t\t\t\t});\n\n\t\t\t\t// 2. Sign with the resolved signer. The signer's own typed\n\t\t\t\t//    error surfaces in `cause`; we collapse to `phase: 'sign'`\n\t\t\t\t//    so the cascade-formatter can walk the cause chain.\n\t\t\t\tconst signed = yield* lockedSigner.signTransaction(txBytes).pipe(\n\t\t\t\t\tEffect.mapError(\n\t\t\t\t\t\t(cause) =>\n\t\t\t\t\t\t\tnew SuiExecuteError({\n\t\t\t\t\t\t\t\tphase: 'sign',\n\t\t\t\t\t\t\t\tsignerName: signer.name,\n\t\t\t\t\t\t\t\tsignerAddress: signer.address,\n\t\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t\t`signer.signTransaction failed for '${signer.name}' ` +\n\t\t\t\t\t\t\t\t\t`(address=${signer.address}).`,\n\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t);\n\n\t\t\t\t// 3. Execute via the SDK. We always request `effects: true` and\n\t\t\t\t//    `objectTypes: true` because every existing caller needs\n\t\t\t\t//    `changedObjects` + types to project to its domain shape.\n\t\t\t\tconst raw = yield* Effect.tryPromise({\n\t\t\t\t\ttry: () =>\n\t\t\t\t\t\tclient.core.executeTransaction({\n\t\t\t\t\t\t\ttransaction: txBytes,\n\t\t\t\t\t\t\tsignatures: [signed.signature],\n\t\t\t\t\t\t\tinclude: { effects: true, objectTypes: true },\n\t\t\t\t\t\t}),\n\t\t\t\t\tcatch: (cause) =>\n\t\t\t\t\t\tnew SuiExecuteError({\n\t\t\t\t\t\t\tphase: 'execute',\n\t\t\t\t\t\t\tsignerName: signer.name,\n\t\t\t\t\t\t\tsignerAddress: signer.address,\n\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t`executeTransaction rejected for signer '${signer.name}': ` +\n\t\t\t\t\t\t\t\tformatUnknownError(cause),\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t}),\n\t\t\t\t});\n\n\t\t\t\t// 4. Project the envelope. `$kind === 'FailedTransaction'`\n\t\t\t\t//    surfaces as a return-channel variant — on-chain\n\t\t\t\t//    rejection is a normal outcome, NOT a transport failure\n\t\t\t\t//    (STYLE_GUIDE §2). Callers dispatch on `$kind` and map\n\t\t\t\t//    to their plugin's on-chain-failure shape.\n\t\t\t\tconst env = raw as RawExecuteEnvelope;\n\t\t\t\tif (env.$kind === 'FailedTransaction') {\n\t\t\t\t\tconst failedDigest = env.FailedTransaction?.digest;\n\t\t\t\t\tif (failedDigest === undefined) {\n\t\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\t\tnew SuiExecuteError({\n\t\t\t\t\t\t\t\tphase: 'no-digest',\n\t\t\t\t\t\t\t\tsignerName: signer.name,\n\t\t\t\t\t\t\t\tsignerAddress: signer.address,\n\t\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t\t`executeTransaction returned FailedTransaction with no digest. ` +\n\t\t\t\t\t\t\t\t\t`Raw=${JSON.stringify(raw).slice(0, 300)}`,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t\tif (awaitFinality) {\n\t\t\t\t\t\tyield* Effect.tryPromise({\n\t\t\t\t\t\t\ttry: () => client.core.waitForTransaction({ digest: failedDigest }),\n\t\t\t\t\t\t\tcatch: (cause) =>\n\t\t\t\t\t\t\t\tnew SuiExecuteError({\n\t\t\t\t\t\t\t\t\tphase: 'wait-for-finality',\n\t\t\t\t\t\t\t\t\tsignerName: signer.name,\n\t\t\t\t\t\t\t\t\tsignerAddress: signer.address,\n\t\t\t\t\t\t\t\t\tdigest: failedDigest,\n\t\t\t\t\t\t\t\t\tmessage: `waitForTransaction(${failedDigest}) failed.`,\n\t\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t});\n\t\t\t\t\t}\n\t\t\t\t\tconst executionError = env.FailedTransaction?.status?.error;\n\t\t\t\t\treturn {\n\t\t\t\t\t\t$kind: 'FailedTransaction',\n\t\t\t\t\t\tFailedTransaction: {\n\t\t\t\t\t\t\tdigest: failedDigest,\n\t\t\t\t\t\t\t...(executionError !== undefined ? { executionError } : {}),\n\t\t\t\t\t\t},\n\t\t\t\t\t} satisfies SuiExecuteResult;\n\t\t\t\t}\n\t\t\t\tconst txOk = env.Transaction;\n\t\t\t\tif (txOk?.digest === undefined) {\n\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\tnew SuiExecuteError({\n\t\t\t\t\t\t\tphase: 'no-digest',\n\t\t\t\t\t\t\tsignerName: signer.name,\n\t\t\t\t\t\t\tsignerAddress: signer.address,\n\t\t\t\t\t\t\tmessage: `executeTransaction returned no digest. Raw=${JSON.stringify(raw).slice(0, 300)}`,\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\t// 5. Wait for finality (opt-out — some callers wait separately).\n\t\t\t\tif (awaitFinality) {\n\t\t\t\t\tyield* Effect.tryPromise({\n\t\t\t\t\t\ttry: () => client.core.waitForTransaction({ digest: txOk.digest! }),\n\t\t\t\t\t\tcatch: (cause) =>\n\t\t\t\t\t\t\tnew SuiExecuteError({\n\t\t\t\t\t\t\t\tphase: 'wait-for-finality',\n\t\t\t\t\t\t\t\tsignerName: signer.name,\n\t\t\t\t\t\t\t\tsignerAddress: signer.address,\n\t\t\t\t\t\t\t\tdigest: txOk.digest,\n\t\t\t\t\t\t\t\tmessage: `waitForTransaction(${txOk.digest}) failed.`,\n\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t});\n\t\t\t\t}\n\n\t\t\t\t// 6. Project changedObjects flat. Callers pick which entries\n\t\t\t\t//    they care about (published / created / mutated / by-type\n\t\t\t\t//    substring).\n\t\t\t\tconst objectTypes = txOk.objectTypes ?? {};\n\t\t\t\tconst objectChanges: Array<ExecutedObjectChange> = [];\n\t\t\t\tfor (const ch of txOk.effects?.changedObjects ?? []) {\n\t\t\t\t\tif (typeof ch.objectId !== 'string') continue;\n\t\t\t\t\tconst objectType = objectTypes[ch.objectId];\n\t\t\t\t\tconst entry: { -readonly [K in keyof ExecutedObjectChange]: ExecutedObjectChange[K] } = {\n\t\t\t\t\t\tobjectId: ch.objectId,\n\t\t\t\t\t};\n\t\t\t\t\tif (objectType !== undefined) entry.objectType = objectType;\n\t\t\t\t\tif (ch.outputState !== undefined) entry.outputState = ch.outputState;\n\t\t\t\t\tif (ch.idOperation !== undefined) entry.idOperation = ch.idOperation;\n\t\t\t\t\tobjectChanges.push(entry);\n\t\t\t\t}\n\n\t\t\t\treturn {\n\t\t\t\t\t$kind: 'Transaction',\n\t\t\t\t\tTransaction: { digest: txOk.digest, objectChanges },\n\t\t\t\t} satisfies SuiExecuteResult;\n\t\t\t}),\n\t\t)\n\t\t.pipe(\n\t\t\tEffect.withSpan('substrate.sui-execute', {\n\t\t\t\tattributes: {\n\t\t\t\t\t'sui-execute.signer': params.signer.name,\n\t\t\t\t\t'sui-execute.address': params.signer.address,\n\t\t\t\t},\n\t\t\t}),\n\t\t);\n\n/** Decode a possibly URI-encoded SDK error message. The Sui SDK\n *  emits `decodeURIComponent`-able strings for some error paths\n *  (notably stale-object-version reports). Falls back to the raw\n *  message on decode failure. */\nconst decodeMessage = (message: string): string => {\n\ttry {\n\t\treturn decodeURIComponent(message);\n\t} catch {\n\t\treturn message;\n\t}\n};\n\n/** Typed predicate for the SDK's \"stale object version\" transient\n *  failure — the Move VM refuses a transaction that references an\n *  object reference older than the current chain version. Consumers\n *  retry with fresh refs; pair with `STALE_OBJECT_VERSION_RETRY_PROFILE`\n *  from `retry-policy.ts`. Detection sniffs the SDK message because the\n *  underlying gRPC error class doesn't expose a structured discriminator\n *  for this case. */\nexport const isSuiStaleObjectVersionError = (err: SuiExecuteError): boolean => {\n\tconst message = decodeMessage(err.message);\n\treturn (\n\t\tmessage.includes('needs to be rebuilt because object') && message.includes('current version')\n\t);\n};\n\n// ---------------------------------------------------------------------------\n// Sibling helpers\n// ---------------------------------------------------------------------------\n\nexport {\n\tsignAndDispatch,\n\ttype SignAndDispatchResult,\n\ttype SignAndDispatchSigner,\n\ttype TransactionSignerSource,\n} from './sign-and-dispatch.ts';\n"],"mappings":";;;;;;;;;;;;;AAwDA,IAAa,kBAAb,cAAqC,OAAO,kBAAmC,CAAC,mBAAmB;CAClG,OAAO,OAAO,SAAS;EAAC;EAAa;EAAQ;EAAW;EAAa;EAAoB,CAAC;CAC1F,YAAY,OAAO;CACnB,eAAe,OAAO;CACtB,SAAS,OAAO;;;CAGhB,QAAQ,OAAO,SAAS,OAAO,OAAO;CACtC,OAAO,OAAO,SAAS,OAAO,OAAO;CACrC,CAAC,CAAC;;;;;;;;;;AAiFH,MAAa,yBAAyB,YACrC,QAAQ,mBAAmB,KAAA,IACxB,MAAM,QAAQ,OAAO,IAAI,QAAQ,mBACjC,MAAM,QAAQ,OAAO;;;;;;;;;AA2CzB,MAAa,wBAAwB,QAAqC;CACzE,MAAM,MAAM;AACZ,QAAO,IAAI,UAAU,sBAClB,IAAI,mBAAmB,SACvB,IAAI,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCrB,MAAa,gBAAgB,WAM5B,OAAO,OACL,uBAAuB,iBACvB,OAAO,IAAI,aAAa;CACvB,MAAM,EAAE,QAAQ,QAAQ,UAAU;CAClC,MAAM,gBAAgB,OAAO,iBAAiB;CAM9C,MAAM,UAAU,OAAO,OAAO,WAAW;EACxC,WAAW,OAAO;EAClB,QAAQ,UACP,IAAI,gBAAgB;GACnB,OAAO;GACP,YAAY,OAAO;GACnB,eAAe,OAAO;GACtB,SACC,wCAAwC,OAAO,KAAK,aACxC,OAAO,QAAQ,OAC3B,mBAAmB,MAAM;GAC1B;GACA,CAAC;EACH,CAAC;CAKF,MAAM,SAAS,OAAO,aAAa,gBAAgB,QAAQ,CAAC,KAC3D,OAAO,UACL,UACA,IAAI,gBAAgB;EACnB,OAAO;EACP,YAAY,OAAO;EACnB,eAAe,OAAO;EACtB,SACC,sCAAsC,OAAO,KAAK,aACtC,OAAO,QAAQ;EAC5B;EACA,CAAC,CACH,CACD;CAKD,MAAM,MAAM,OAAO,OAAO,WAAW;EACpC,WACC,OAAO,KAAK,mBAAmB;GAC9B,aAAa;GACb,YAAY,CAAC,OAAO,UAAU;GAC9B,SAAS;IAAE,SAAS;IAAM,aAAa;IAAM;GAC7C,CAAC;EACH,QAAQ,UACP,IAAI,gBAAgB;GACnB,OAAO;GACP,YAAY,OAAO;GACnB,eAAe,OAAO;GACtB,SACC,2CAA2C,OAAO,KAAK,OACvD,mBAAmB,MAAM;GAC1B;GACA,CAAC;EACH,CAAC;CAOF,MAAM,MAAM;AACZ,KAAI,IAAI,UAAU,qBAAqB;EACtC,MAAM,eAAe,IAAI,mBAAmB;AAC5C,MAAI,iBAAiB,KAAA,EACpB,QAAO,OAAO,OAAO,KACpB,IAAI,gBAAgB;GACnB,OAAO;GACP,YAAY,OAAO;GACnB,eAAe,OAAO;GACtB,SACC,qEACO,KAAK,UAAU,IAAI,CAAC,MAAM,GAAG,IAAI;GACzC,CAAC,CACF;AAEF,MAAI,cACH,QAAO,OAAO,WAAW;GACxB,WAAW,OAAO,KAAK,mBAAmB,EAAE,QAAQ,cAAc,CAAC;GACnE,QAAQ,UACP,IAAI,gBAAgB;IACnB,OAAO;IACP,YAAY,OAAO;IACnB,eAAe,OAAO;IACtB,QAAQ;IACR,SAAS,sBAAsB,aAAa;IAC5C;IACA,CAAC;GACH,CAAC;EAEH,MAAM,iBAAiB,IAAI,mBAAmB,QAAQ;AACtD,SAAO;GACN,OAAO;GACP,mBAAmB;IAClB,QAAQ;IACR,GAAI,mBAAmB,KAAA,IAAY,EAAE,gBAAgB,GAAG,EAAE;IAC1D;GACD;;CAEF,MAAM,OAAO,IAAI;AACjB,KAAI,MAAM,WAAW,KAAA,EACpB,QAAO,OAAO,OAAO,KACpB,IAAI,gBAAgB;EACnB,OAAO;EACP,YAAY,OAAO;EACnB,eAAe,OAAO;EACtB,SAAS,8CAA8C,KAAK,UAAU,IAAI,CAAC,MAAM,GAAG,IAAI;EACxF,CAAC,CACF;AAIF,KAAI,cACH,QAAO,OAAO,WAAW;EACxB,WAAW,OAAO,KAAK,mBAAmB,EAAE,QAAQ,KAAK,QAAS,CAAC;EACnE,QAAQ,UACP,IAAI,gBAAgB;GACnB,OAAO;GACP,YAAY,OAAO;GACnB,eAAe,OAAO;GACtB,QAAQ,KAAK;GACb,SAAS,sBAAsB,KAAK,OAAO;GAC3C;GACA,CAAC;EACH,CAAC;CAMH,MAAM,cAAc,KAAK,eAAe,EAAE;CAC1C,MAAM,gBAA6C,EAAE;AACrD,MAAK,MAAM,MAAM,KAAK,SAAS,kBAAkB,EAAE,EAAE;AACpD,MAAI,OAAO,GAAG,aAAa,SAAU;EACrC,MAAM,aAAa,YAAY,GAAG;EAClC,MAAM,QAAkF,EACvF,UAAU,GAAG,UACb;AACD,MAAI,eAAe,KAAA,EAAW,OAAM,aAAa;AACjD,MAAI,GAAG,gBAAgB,KAAA,EAAW,OAAM,cAAc,GAAG;AACzD,MAAI,GAAG,gBAAgB,KAAA,EAAW,OAAM,cAAc,GAAG;AACzD,gBAAc,KAAK,MAAM;;AAG1B,QAAO;EACN,OAAO;EACP,aAAa;GAAE,QAAQ,KAAK;GAAQ;GAAe;EACnD;EACA,CACF,CACA,KACA,OAAO,SAAS,yBAAyB,EACxC,YAAY;CACX,sBAAsB,OAAO,OAAO;CACpC,uBAAuB,OAAO,OAAO;CACrC,EACD,CAAC,CACF;;;;;AAMH,MAAM,iBAAiB,YAA4B;AAClD,KAAI;AACH,SAAO,mBAAmB,QAAQ;SAC3B;AACP,SAAO;;;;;;;;;;AAWT,MAAa,gCAAgC,QAAkC;CAC9E,MAAM,UAAU,cAAc,IAAI,QAAQ;AAC1C,QACC,QAAQ,SAAS,qCAAqC,IAAI,QAAQ,SAAS,kBAAkB"}

package/dist/substrate/runtime/sui-execute/sign-and-dispatch.d.mts

@@ -0,0 +1 @@
+import { Effect } from "effect";

package/dist/substrate/runtime/sui-execute/sign-and-dispatch.mjs

@@ -0,0 +1,32 @@
+import { Effect } from "effect";
+//#region src/substrate/runtime/sui-execute/sign-and-dispatch.ts
+/** Run `withTransactionSigner( buildTxBytes → signAndExecute → mapSignError →
+*  dispatch on $kind )`. The caller owns:
+*
+*   - `buildTxBytes`: an Effect returning the serialised `Uint8Array`,
+*     run INSIDE the signer scope. Failures inside this effect
+*     propagate verbatim — the caller maps `Transaction.build` /
+*     impersonation-build errors to its plugin domain there.
+*   - `mapSignError`: projects the signer's typed sign error
+*     (`AccountSignError` for the Account bus) into the caller's
+*     domain error before dispatch. Without this projection
+*     `mapSignError` and the dispatch callbacks would need to share
+*     the same error channel, which forces every caller into a tagged
+*     domain error anyway.
+*   - `onFailed`: dispatch for the `FailedTransaction` variant.
+*     Typically `Effect.fail(domainError(formatExecutedFailure(...)))`.
+*   - `onSuccess`: dispatch for the `Transaction` variant — projects
+*     the SDK-shaped tx result to the caller's receipt shape.
+*
+*  Returns the union of the dispatch callbacks' types so callers do
+*  not have to wrap the call in a redundant `Effect.gen`. */
+const signAndDispatch = (args) => args.signerSource.withTransactionSigner((lockedSigner) => Effect.gen(function* () {
+	const txBytes = yield* args.buildTxBytes(lockedSigner);
+	const result = yield* lockedSigner.signAndExecute(txBytes).pipe(Effect.mapError(args.mapSignError));
+	if (result.$kind === "FailedTransaction") return yield* args.onFailed(result.FailedTransaction);
+	return yield* args.onSuccess(result.Transaction);
+}));
+//#endregion
+export { signAndDispatch };
+
+//# sourceMappingURL=sign-and-dispatch.mjs.map

package/dist/substrate/runtime/sui-execute/sign-and-dispatch.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-and-dispatch.mjs","names":[],"sources":["../../../../src/substrate/runtime/sui-execute/sign-and-dispatch.ts"],"sourcesContent":["// signAndDispatch — boilerplate compactor for the\n// `withTransactionSigner → buildTxBytes → signAndExecute → $kind\n// dispatch` pattern that recurs across every Sui-tx plugin\n// (`package.publish`, `action.execute`, `coin.mint`, `walrus.fundWal`,\n// `deepbook.fundDeep`, and any future user-authored signer plugin).\n//\n// Distinct from `executeSuiTx` (sibling in this directory):\n//   - `executeSuiTx` drives `core.executeTransaction` directly via the\n//     raw SDK client + an opaque resolved signer. It splits sign and\n//     execute and projects the SDK envelope itself.\n//   - `signAndDispatch` consumes the Account plugin's higher-level\n//     `signAndExecute` surface (which fuses sign + execute + finality\n//     wait + projection into one Effect) and just compacts the\n//     surrounding boilerplate.\n//\n// Both helpers coexist: plugins that publish through the Account bus\n// (the majority) use `signAndDispatch`; lower-level callers that drive\n// the SDK client directly use `executeSuiTx`.\n//\n// Boundary discipline (matches the sui-execute escape-hatch in this\n// directory): this module is L1-adjacent — it consumes opaque shapes\n// (an `AccountValue`-like contract surface and the `SignAndExecuteResult`\n// union) but does NOT import from `plugins/*` or `@mysten/sui/*`. The\n// caller owns the transaction build, the error mapping, and the\n// dispatch bodies.\n//\n// On-chain `FailedTransaction` is a RETURN-CHANNEL outcome (caller\n// dispatches on `$kind` via the `onFailed` callback), NOT an error —\n// matches STYLE_GUIDE §2 and the upstream `SignAndExecuteResult` shape.\n\nimport { Effect } from 'effect';\n\nimport type { ExecutedFailure, ExecutedReceipt } from './index.ts';\n\n// ---------------------------------------------------------------------------\n// Resolved-signer shape — narrow slice of `AccountValue`\n// ---------------------------------------------------------------------------\n\n/** The SDK-shaped result of `lockedSigner.signAndExecute`. Mirrors the\n *  Account plugin's `SignAndExecuteResult` union; redeclared here so\n *  the substrate helper does not import from `plugins/account/*`. The\n *  Account plugin's projection uses the substrate `ExecutedFailure`\n *  shape already (single source of truth in `sui-execute/index.ts`).\n *  Generic over the success transaction shape because the Account\n *  plugin's `TxResult` widens `ExecutedReceipt` with `effects` /\n *  `balanceChanges` fields that not every caller needs to surface. */\nexport type SignAndDispatchResult<TxOk extends { readonly digest: string } = ExecutedReceipt> =\n\t| { readonly $kind: 'Transaction'; readonly Transaction: TxOk }\n\t| { readonly $kind: 'FailedTransaction'; readonly FailedTransaction: ExecutedFailure };\n\n/** Locked-signer slice handed to the caller's tx-build closure. Narrow\n *  view of `AccountTransactionSigner` — the substrate-side contract\n *  doesn't reach into the Account plugin's surface. Generic over the\n *  signer's sign-side error (typically `AccountSignError`) and the\n *  success transaction shape. */\nexport interface SignAndDispatchSigner<SignError, TxOk extends { readonly digest: string }> {\n\treadonly signAndExecute: (\n\t\ttx: Uint8Array,\n\t) => Effect.Effect<SignAndDispatchResult<TxOk>, SignError>;\n}\n\n/** Outer signer-source surface required by `signAndDispatch` — anything\n *  that exposes a `withTransactionSigner` scope. The substrate helper\n *  only reaches `withTransactionSigner`, so plugins composing custom\n *  signing surfaces can satisfy the slice without dragging in any\n *  particular publisher's full contract. */\nexport interface TransactionSignerSource<SignError, TxOk extends { readonly digest: string }> {\n\treadonly withTransactionSigner: <A, E, R>(\n\t\tbody: (signer: SignAndDispatchSigner<SignError, TxOk>) => Effect.Effect<A, E, R>,\n\t) => Effect.Effect<A, E, R>;\n}\n\n// ---------------------------------------------------------------------------\n// The helper\n// ---------------------------------------------------------------------------\n\n/** Run `withTransactionSigner( buildTxBytes → signAndExecute → mapSignError →\n *  dispatch on $kind )`. The caller owns:\n *\n *   - `buildTxBytes`: an Effect returning the serialised `Uint8Array`,\n *     run INSIDE the signer scope. Failures inside this effect\n *     propagate verbatim — the caller maps `Transaction.build` /\n *     impersonation-build errors to its plugin domain there.\n *   - `mapSignError`: projects the signer's typed sign error\n *     (`AccountSignError` for the Account bus) into the caller's\n *     domain error before dispatch. Without this projection\n *     `mapSignError` and the dispatch callbacks would need to share\n *     the same error channel, which forces every caller into a tagged\n *     domain error anyway.\n *   - `onFailed`: dispatch for the `FailedTransaction` variant.\n *     Typically `Effect.fail(domainError(formatExecutedFailure(...)))`.\n *   - `onSuccess`: dispatch for the `Transaction` variant — projects\n *     the SDK-shaped tx result to the caller's receipt shape.\n *\n *  Returns the union of the dispatch callbacks' types so callers do\n *  not have to wrap the call in a redundant `Effect.gen`. */\nexport const signAndDispatch = <\n\tA,\n\tBuildError,\n\tBuildEnv,\n\tSignError,\n\tDomainError,\n\tOnFailedError,\n\tOnFailedEnv,\n\tOnSuccessError,\n\tOnSuccessEnv,\n\tTxOk extends { readonly digest: string } = ExecutedReceipt,\n>(args: {\n\treadonly signerSource: TransactionSignerSource<SignError, TxOk>;\n\treadonly buildTxBytes: (\n\t\tsigner: SignAndDispatchSigner<SignError, TxOk>,\n\t) => Effect.Effect<Uint8Array, BuildError, BuildEnv>;\n\treadonly mapSignError: (cause: SignError) => DomainError;\n\treadonly onFailed: (failure: ExecutedFailure) => Effect.Effect<A, OnFailedError, OnFailedEnv>;\n\treadonly onSuccess: (ok: TxOk) => Effect.Effect<A, OnSuccessError, OnSuccessEnv>;\n}): Effect.Effect<\n\tA,\n\tBuildError | DomainError | OnFailedError | OnSuccessError,\n\tBuildEnv | OnFailedEnv | OnSuccessEnv\n> =>\n\targs.signerSource.withTransactionSigner((lockedSigner) =>\n\t\tEffect.gen(function* () {\n\t\t\tconst txBytes = yield* args.buildTxBytes(lockedSigner);\n\t\t\tconst result = yield* lockedSigner\n\t\t\t\t.signAndExecute(txBytes)\n\t\t\t\t.pipe(Effect.mapError(args.mapSignError));\n\t\t\tif (result.$kind === 'FailedTransaction') {\n\t\t\t\treturn yield* args.onFailed(result.FailedTransaction);\n\t\t\t}\n\t\t\treturn yield* args.onSuccess(result.Transaction);\n\t\t}),\n\t);\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAgGA,MAAa,mBAWX,SAaD,KAAK,aAAa,uBAAuB,iBACxC,OAAO,IAAI,aAAa;CACvB,MAAM,UAAU,OAAO,KAAK,aAAa,aAAa;CACtD,MAAM,SAAS,OAAO,aACpB,eAAe,QAAQ,CACvB,KAAK,OAAO,SAAS,KAAK,aAAa,CAAC;AAC1C,KAAI,OAAO,UAAU,oBACpB,QAAO,OAAO,KAAK,SAAS,OAAO,kBAAkB;AAEtD,QAAO,OAAO,KAAK,UAAU,OAAO,YAAY;EAC/C,CACF"}

package/dist/substrate/runtime/sui-ledger/object-ref.mjs

@@ -0,0 +1,32 @@
+//#region src/substrate/runtime/sui-ledger/object-ref.ts
+/** Re-cast a `SuiSdkShim` as the gRPC ledger-service client. The
+*  `unknown` hop is required because `ClientWithCoreApi` doesn't
+*  structurally overlap with `{ledgerService: …}`. */
+const ledgerObjectClient = (sdk) => sdk.client;
+/** Up-to-date `{objectId, version, digest}` ObjectRef for `objectId`,
+*  fetched through the gRPC ledger service.
+*
+*  Throws if the response envelope is missing any of `objectId` /
+*  `version` / `digest` — e.g. when the object was deleted or never
+*  existed. The error message includes the requested object id so
+*  call-site context surfaces in plugin error traces. */
+const currentLedgerObjectRef = async (sdk, objectId) => {
+	const object = (await ledgerObjectClient(sdk).ledgerService.getObject({
+		objectId,
+		readMask: { paths: [
+			"object_id",
+			"version",
+			"digest"
+		] }
+	})).response?.object;
+	if (object === void 0 || object.objectId === void 0 || object.version === void 0 || object.digest === void 0) throw new Error(`currentLedgerObjectRef: object '${objectId}' was not found (response missing one of objectId/version/digest).`);
+	return {
+		objectId: object.objectId,
+		version: object.version.toString(),
+		digest: object.digest
+	};
+};
+//#endregion
+export { currentLedgerObjectRef };
+
+//# sourceMappingURL=object-ref.mjs.map

package/dist/substrate/runtime/sui-ledger/object-ref.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"object-ref.mjs","names":[],"sources":["../../../../src/substrate/runtime/sui-ledger/object-ref.ts"],"sourcesContent":["// substrate/runtime/sui-ledger — `ledgerService.getObject` workaround.\n//\n// `SuiSdkShim.core.getObject` returns the simplified `core`-surface\n// projection (no version/digest) per `@mysten/sui`'s `ClientWithCoreApi`\n// shape. The gRPC ledger service provides the BCS-encoded object\n// envelope WITH version + digest under a `readMask` projection — see\n// `@mysten/sui/docs/clients/grpc.md` § Ledger service.\n//\n// The cast `sdk.client as unknown as {ledgerService: {…}}` is the\n// sanctioned escape hatch — `ClientWithCoreApi` doesn't structurally\n// overlap with the gRPC `{ledgerService}` shape, so a direct cast fails.\n// Folded into one substrate-side helper so every plugin that needs an\n// up-to-date `{objectId, version, digest}` ObjectRef goes through the\n// same projection (and the same `unknown`-cast escape hatch) rather\n// than re-deriving it.\n//\n// NOTE: not exported from the public barrel — this is an internal\n// substrate primitive used by plugins, not a published API.\n//\n// Sibling of `substrate/runtime/sui-execute/` — same opacity discipline\n// (no `@mysten/sui/client` type import; the opaque `SuiSdkShim` carries\n// the client through).\n\nimport type { SuiSdkShim } from '../../../plugins/sui/index.ts';\n\n/** Shape of the gRPC ledger-service projection we need. Hand-written\n *  because the public `ClientWithCoreApi` surface doesn't include the\n *  ledger service. */\ninterface LedgerObjectClient {\n\treadonly ledgerService: {\n\t\treadonly getObject: (args: {\n\t\t\treadonly objectId: string;\n\t\t\treadonly readMask?: { readonly paths: ReadonlyArray<string> };\n\t\t}) => Promise<{\n\t\t\treadonly response?: {\n\t\t\t\treadonly object?: {\n\t\t\t\t\treadonly objectId?: string;\n\t\t\t\t\treadonly version?: string | number | bigint;\n\t\t\t\t\treadonly digest?: string;\n\t\t\t\t};\n\t\t\t};\n\t\t}>;\n\t};\n}\n\n/** Re-cast a `SuiSdkShim` as the gRPC ledger-service client. The\n *  `unknown` hop is required because `ClientWithCoreApi` doesn't\n *  structurally overlap with `{ledgerService: …}`. */\nconst ledgerObjectClient = (sdk: SuiSdkShim): LedgerObjectClient =>\n\tsdk.client as unknown as LedgerObjectClient;\n\n/** Up-to-date `{objectId, version, digest}` ObjectRef for `objectId`,\n *  fetched through the gRPC ledger service.\n *\n *  Throws if the response envelope is missing any of `objectId` /\n *  `version` / `digest` — e.g. when the object was deleted or never\n *  existed. The error message includes the requested object id so\n *  call-site context surfaces in plugin error traces. */\nexport const currentLedgerObjectRef = async (\n\tsdk: SuiSdkShim,\n\tobjectId: string,\n): Promise<{\n\treadonly objectId: string;\n\treadonly version: string;\n\treadonly digest: string;\n}> => {\n\tconst raw = await ledgerObjectClient(sdk).ledgerService.getObject({\n\t\tobjectId,\n\t\treadMask: { paths: ['object_id', 'version', 'digest'] },\n\t});\n\tconst object = raw.response?.object;\n\tif (\n\t\tobject === undefined ||\n\t\tobject.objectId === undefined ||\n\t\tobject.version === undefined ||\n\t\tobject.digest === undefined\n\t) {\n\t\tthrow new Error(\n\t\t\t`currentLedgerObjectRef: object '${objectId}' was not found (response missing one of objectId/version/digest).`,\n\t\t);\n\t}\n\treturn {\n\t\tobjectId: object.objectId,\n\t\tversion: object.version.toString(),\n\t\tdigest: object.digest,\n\t};\n};\n"],"mappings":";;;;AAgDA,MAAM,sBAAsB,QAC3B,IAAI;;;;;;;;AASL,MAAa,yBAAyB,OACrC,KACA,aAKK;CAKL,MAAM,UAAS,MAJG,mBAAmB,IAAI,CAAC,cAAc,UAAU;EACjE;EACA,UAAU,EAAE,OAAO;GAAC;GAAa;GAAW;GAAS,EAAE;EACvD,CAAC,EACiB,UAAU;AAC7B,KACC,WAAW,KAAA,KACX,OAAO,aAAa,KAAA,KACpB,OAAO,YAAY,KAAA,KACnB,OAAO,WAAW,KAAA,EAElB,OAAM,IAAI,MACT,mCAAmC,SAAS,oEAC5C;AAEF,QAAO;EACN,UAAU,OAAO;EACjB,SAAS,OAAO,QAAQ,UAAU;EAClC,QAAQ,OAAO;EACf"}