@mysten-incubation/devstack 0.1.0 → 0.2.0

package/dist/plugins/account/registry.d.mts

@@ -1,46 +1 @@
-//#region src/plugins/account/registry.d.ts
-/** The strategy value published under `account:<name>`. Carries the
- *  load-bearing identity columns only — signing closures stay on
- *  the Account tag's resolved value because their lifetime is
- *  scope-bounded.
- *
- *  Architecture-distilled (12-account.md "Tighten the resolved-
- *  account type"): the `source` discriminator is mandatory so
- *  consumers can branch on impersonation without a `publicKey`
- *  nullcheck (impersonation accounts have a zero-buffer publicKey
- *  — a type-level lie). */
-interface AccountRegistryEntry {
-  readonly name: string;
-  readonly address: string;
-  readonly scheme: 'ed25519' | 'secp256k1' | 'secp256r1';
-  readonly source: 'real' | 'impersonate';
-  readonly funding: AccountRegistryFunding;
-}
-interface AccountRegistryFunding {
-  readonly status: 'funded' | 'skipped' | 'unknown';
-  readonly balanceMist: string | null;
-  readonly requestedMist: string | null;
-  readonly entries?: ReadonlyArray<AccountRegistryFundingEntry>;
-}
-/** Per-entry funding status — the projection's per-row "did we actually
- *  hit the faucet?" signal.
- *
- *   - `'funded'`            — a wire call ran and balance settled.
- *   - `'already-satisfied'` — the pre-existing balance covered the
- *                             request, so no wire call ran.
- *   - `'skipped'`           — the entry was zero-amount, dropped at
- *                             the funding-pass boundary, or there was
- *                             no registered strategy (cross-cutting
- *                             non-SUI silent-noop).
- *
- *  Splitting `'funded'` from `'already-satisfied'` matches the
- *  applied-projection invariant in `service.ts:858-887`. */
-interface AccountRegistryFundingEntry {
-  readonly coin: string;
-  readonly fullCoinType: string;
-  readonly amount: string;
-  readonly status: 'funded' | 'already-satisfied' | 'skipped';
-}
-//#endregion
-export { AccountRegistryEntry, AccountRegistryFunding };
-//# sourceMappingURL=registry.d.mts.map
+export { };

package/dist/plugins/account/registry.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"registry.mjs","names":[],"sources":["../../../src/plugins/account/registry.ts"],"sourcesContent":["// Account plugin — per-stack registry contribution.\n//\n// Architecture (12-account.md \"Outputs / capabilities provided\"):\n// Account publishes `{name, address}` to a per-stack account\n// registry. Downstream consumers (Wallet, Codegen, the manifest\n// emitter, Coin's deepbook market maker) look accounts up by name.\n//\n// The architecture's `strategy-contributor` capability covers this\n// shape — Account contributes one entry per acquired account under\n// the capability key `account:<name>`. The strategy value is the\n// resolved-account view (sans signing closures, which stay scoped\n// to the acquire body's lifetime; consumers ask the Account tag\n// directly when they need to sign).\n//\n// Distilled-doc opportunity: today's `publishAccount(...)` writes\n// into an engine-singleton registry. The redesign moves it onto the\n// capability-decl surface so the substrate orchestrates dedup-by-\n// name and last-write-wins without an engine import.\n\nimport { projection } from '../../api/define-capabilities.ts';\nimport type { ProjectionDecl } from '../../contracts/projection.ts';\nimport type { StrategyContributorDecl } from '../../contracts/strategy-contributor.ts';\n\n/** Capability key for the per-name account registry. The literal\n *  form (`account:<name>`) lets downstream consumers (Coin, Wallet,\n *  the manifest emitter) `StrategyFor<Caps, \"account:alice\">` to\n *  recover the registered address at the type level. */\nexport type AccountRegistryKey<Name extends string> = `account:${Name}`;\n\nexport const accountRegistryKey = <Name extends string>(name: Name): AccountRegistryKey<Name> =>\n\t`account:${name}` as AccountRegistryKey<Name>;\n\n/** The strategy value published under `account:<name>`. Carries the\n *  load-bearing identity columns only — signing closures stay on\n *  the Account tag's resolved value because their lifetime is\n *  scope-bounded.\n *\n *  Architecture-distilled (12-account.md \"Tighten the resolved-\n *  account type\"): the `source` discriminator is mandatory so\n *  consumers can branch on impersonation without a `publicKey`\n *  nullcheck (impersonation accounts have a zero-buffer publicKey\n *  — a type-level lie). */\nexport interface AccountRegistryEntry {\n\treadonly name: string;\n\treadonly address: string;\n\treadonly scheme: 'ed25519' | 'secp256k1' | 'secp256r1';\n\treadonly source: 'real' | 'impersonate';\n\treadonly funding: AccountRegistryFunding;\n}\n\nexport interface AccountRegistryFunding {\n\treadonly status: 'funded' | 'skipped' | 'unknown';\n\treadonly balanceMist: string | null;\n\treadonly requestedMist: string | null;\n\treadonly entries?: ReadonlyArray<AccountRegistryFundingEntry>;\n}\n\n/** Per-entry funding status — the projection's per-row \"did we actually\n *  hit the faucet?\" signal.\n *\n *   - `'funded'`            — a wire call ran and balance settled.\n *   - `'already-satisfied'` — the pre-existing balance covered the\n *                             request, so no wire call ran.\n *   - `'skipped'`           — the entry was zero-amount, dropped at\n *                             the funding-pass boundary, or there was\n *                             no registered strategy (cross-cutting\n *                             non-SUI silent-noop).\n *\n *  Splitting `'funded'` from `'already-satisfied'` matches the\n *  applied-projection invariant in `service.ts:858-887`. */\nexport interface AccountRegistryFundingEntry {\n\treadonly coin: string;\n\treadonly fullCoinType: string;\n\treadonly amount: string;\n\treadonly status: 'funded' | 'already-satisfied' | 'skipped';\n}\n\n/** Construct the strategy-contributor decl Account emits for one\n *  acquired identity. Auto-mounted: the registry's role is\n *  infrastructure; the user never types it explicitly. */\nexport const makeAccountRegistryContribution = <Name extends string>(\n\tentry: AccountRegistryEntry & { readonly name: Name },\n): StrategyContributorDecl<AccountRegistryKey<Name>, AccountRegistryEntry> => ({\n\tkind: 'strategy-contributor',\n\tcapabilityKey: accountRegistryKey(entry.name),\n\tstrategy: entry,\n\tautoMounted: true,\n});\n\nexport const makeAccountProjectionContribution = <Name extends string>(\n\tentry: AccountRegistryEntry & { readonly name: Name },\n): ProjectionDecl => {\n\tconst updatedAt = Date.now();\n\tconst key = `account/${entry.name}` as `account/${string}`;\n\treturn projection({\n\t\tkind: 'account',\n\t\tkey,\n\t\tpayload: {\n\t\t\tkey,\n\t\t\trowKey: null,\n\t\t\tname: entry.name,\n\t\t\taddress: entry.address,\n\t\t\tscheme: entry.scheme,\n\t\t\tsource: entry.source,\n\t\t\tfunding: entry.funding,\n\t\t\twalletVisible: false,\n\t\t\tupdatedAt,\n\t\t},\n\t\tat: updatedAt,\n\t});\n};\n"],"mappings":";;AA6BA,MAAa,sBAA2C,SACvD,WAAW;;;;AAkDZ,MAAa,mCACZ,WAC8E;CAC9E,MAAM;CACN,eAAe,mBAAmB,MAAM,KAAK;CAC7C,UAAU;CACV,aAAa;CACb;AAED,MAAa,qCACZ,UACoB;CACpB,MAAM,YAAY,KAAK,KAAK;CAC5B,MAAM,MAAM,WAAW,MAAM;AAC7B,QAAO,WAAW;EACjB,MAAM;EACN;EACA,SAAS;GACR;GACA,QAAQ;GACR,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,QAAQ,MAAM;GACd,QAAQ,MAAM;GACd,SAAS,MAAM;GACf,eAAe;GACf;GACA;EACD,IAAI;EACJ,CAAC"}
+{"version":3,"file":"registry.mjs","names":[],"sources":["../../../src/plugins/account/registry.ts"],"sourcesContent":["// Account plugin — per-stack registry contribution.\n//\n// Architecture (12-account.md \"Outputs / capabilities provided\"):\n// Account publishes `{name, address}` to a per-stack account\n// registry. Downstream consumers (Wallet, Codegen, the manifest\n// emitter, Coin's deepbook market maker) look accounts up by name.\n//\n// The architecture's `strategy-contributor` capability covers this\n// shape — Account contributes one entry per acquired account under\n// the capability key `account:<name>`. The strategy value is the\n// resolved-account view (sans signing closures, which stay scoped\n// to the acquire body's lifetime; consumers ask the Account tag\n// directly when they need to sign).\n\nimport { projection } from '../../api/define-capabilities.ts';\nimport type { ProjectionDecl } from '../../contracts/projection.ts';\nimport type { StrategyContributorDecl } from '../../contracts/strategy-contributor.ts';\n\n/** Capability key for the per-name account registry. The literal\n *  form (`account:<name>`) lets downstream consumers (Coin, Wallet,\n *  the manifest emitter) `StrategyFor<Caps, \"account:alice\">` to\n *  recover the registered address at the type level. */\nexport type AccountRegistryKey<Name extends string> = `account:${Name}`;\n\nexport const accountRegistryKey = <Name extends string>(name: Name): AccountRegistryKey<Name> =>\n\t`account:${name}` as AccountRegistryKey<Name>;\n\n/** The strategy value published under `account:<name>`. Carries the\n *  load-bearing identity columns only — signing closures stay on\n *  the Account tag's resolved value because their lifetime is\n *  scope-bounded.\n *\n *  Architecture-distilled (12-account.md \"Tighten the resolved-\n *  account type\"): the `source` discriminator is mandatory so\n *  consumers can branch on impersonation without a `publicKey`\n *  nullcheck (impersonation accounts have a zero-buffer publicKey\n *  — a type-level lie). */\nexport interface AccountRegistryEntry {\n\treadonly name: string;\n\treadonly address: string;\n\treadonly scheme: 'ed25519' | 'secp256k1' | 'secp256r1';\n\treadonly source: 'real' | 'impersonate';\n\treadonly funding: AccountRegistryFunding;\n}\n\nexport interface AccountRegistryFunding {\n\treadonly status: 'funded' | 'skipped' | 'unknown';\n\treadonly balanceMist: string | null;\n\treadonly requestedMist: string | null;\n\treadonly entries?: ReadonlyArray<AccountRegistryFundingEntry>;\n}\n\n/** Per-entry funding status — the projection's per-row \"did we actually\n *  hit the faucet?\" signal.\n *\n *   - `'funded'`            — a wire call ran and balance settled.\n *   - `'already-satisfied'` — the pre-existing balance covered the\n *                             request, so no wire call ran.\n *   - `'skipped'`           — the entry was zero-amount, dropped at\n *                             the funding-pass boundary, or there was\n *                             no registered strategy (cross-cutting\n *                             non-SUI silent-noop).\n *\n *  Splitting `'funded'` from `'already-satisfied'` matches the\n *  applied-projection invariant in `service.ts:858-887`. */\nexport interface AccountRegistryFundingEntry {\n\treadonly coin: string;\n\treadonly fullCoinType: string;\n\treadonly amount: string;\n\treadonly status: 'funded' | 'already-satisfied' | 'skipped';\n}\n\n/** Construct the strategy-contributor decl Account emits for one\n *  acquired identity. Auto-mounted: the registry's role is\n *  infrastructure; the user never types it explicitly. */\nexport const makeAccountRegistryContribution = <Name extends string>(\n\tentry: AccountRegistryEntry & { readonly name: Name },\n): StrategyContributorDecl<AccountRegistryKey<Name>, AccountRegistryEntry> => ({\n\tkind: 'strategy-contributor',\n\tcapabilityKey: accountRegistryKey(entry.name),\n\tstrategy: entry,\n\tautoMounted: true,\n});\n\nexport const makeAccountProjectionContribution = <Name extends string>(\n\tentry: AccountRegistryEntry & { readonly name: Name },\n): ProjectionDecl => {\n\tconst updatedAt = Date.now();\n\tconst key = `account/${entry.name}` as `account/${string}`;\n\treturn projection({\n\t\tkind: 'account',\n\t\tkey,\n\t\tpayload: {\n\t\t\tkey,\n\t\t\trowKey: null,\n\t\t\tname: entry.name,\n\t\t\taddress: entry.address,\n\t\t\tscheme: entry.scheme,\n\t\t\tsource: entry.source,\n\t\t\tfunding: entry.funding,\n\t\t\twalletVisible: false,\n\t\t\tupdatedAt,\n\t\t},\n\t\tat: updatedAt,\n\t});\n};\n"],"mappings":";;AAwBA,MAAa,sBAA2C,SACvD,WAAW;;;;AAkDZ,MAAa,mCACZ,WAC8E;CAC9E,MAAM;CACN,eAAe,mBAAmB,MAAM,IAAI;CAC5C,UAAU;CACV,aAAa;AACd;AAEA,MAAa,qCACZ,UACoB;CACpB,MAAM,YAAY,KAAK,IAAI;CAC3B,MAAM,MAAM,WAAW,MAAM;CAC7B,OAAO,WAAW;EACjB,MAAM;EACN;EACA,SAAS;GACR;GACA,QAAQ;GACR,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,QAAQ,MAAM;GACd,QAAQ,MAAM;GACd,SAAS,MAAM;GACf,eAAe;GACf;EACD;EACA,IAAI;CACL,CAAC;AACF"}

package/dist/plugins/account/service.d.mts

@@ -1,45 +1,54 @@
+import { ExecutedFailure, TransactionSignerScope } from "../sui/exec/index.mjs";
 import { AccountSignError } from "./errors.mjs";
-import { ExecutedFailure, TransactionSignerScope } from "../../substrate/runtime/sui-execute/index.mjs";
 import { AccountFunding, AccountFundingResult } from "./funding.mjs";
 import { Effect } from "effect";
 
 //#region src/plugins/account/service.d.ts
+/** The bring-your-own signer shape the `signer` variant binds. Any
+ *  `@mysten/sui/cryptography` `Signer` satisfies it — including every
+ *  `Keypair` (`Ed25519Keypair`, `Secp256k1Keypair`, `Secp256r1Keypair`),
+ *  hardware wallets, and custom KMS adapters. The structural shape is
+ *  pinned here rather than importing the SDK's `Signer` so the substrate
+ *  import surface stays SDK-free; a real `Signer` is assignable to it. */
+interface AccountSignerInput {
+  readonly toSuiAddress: () => string;
+  readonly getKeyScheme: () => string;
+  readonly getPublicKey: () => {
+    readonly toRawBytes: () => Uint8Array;
+  };
+  readonly signTransaction: (tx: Uint8Array) => Promise<{
+    readonly bytes: string;
+    readonly signature: string;
+  }>;
+  readonly signPersonalMessage: (msg: Uint8Array) => Promise<{
+    readonly bytes: string;
+    readonly signature: string;
+  }>;
+}
 /** Account variant discriminated union. The user-facing factory
  *  takes one of these shapes (or omits `opts` entirely for the
- *  default ephemeral form). */
+ *  default ephemeral form).
+ *
+ *  Three variants:
+ *
+ *   - `ephemeral` — generate-or-recover an Ed25519 keypair under the
+ *     stack runtime root, funded by default. This is the bare-form
+ *     default (`account('alice')`).
+ *   - `signer` — the single bring-your-own door. Pass any
+ *     `@mysten/sui/cryptography` `Signer` (hardware wallet, KMS
+ *     adapter, dApp signer) or any `Keypair`. Loading a secret from an
+ *     env var or an inline `suiprivkey1...` literal is expressed by
+ *     building the `Keypair` yourself, e.g.
+ *     `{ kind: 'signer', signer: Ed25519Keypair.fromSecretKey(process.env.X) }`.
+ *   - `impersonate` — fork-mode only: execute AS a seeded address with
+ *     no secret material (sign-and-execute routes through the fork's
+ *     impersonation submit path). */
 type AccountOptions<Funding extends AccountFunding = AccountFunding> = {
   readonly kind: 'ephemeral';
   readonly funding?: Funding;
-} | {
-  readonly kind: 'keystore';
-  readonly path: string;
-  readonly aliasOrAddress: string;
-  readonly funding?: Funding;
-} | {
-  readonly kind: 'env';
-  readonly key: string;
-  readonly funding?: Funding;
-} | {
-  readonly kind: 'inline';
-  readonly privateKey: string | Uint8Array;
-  readonly funding?: Funding;
 } | {
   readonly kind: 'signer';
-  readonly signer: {
-    readonly toSuiAddress: () => string;
-    readonly getKeyScheme: () => string;
-    readonly getPublicKey: () => {
-      readonly toRawBytes: () => Uint8Array;
-    };
-    readonly signTransaction: (tx: Uint8Array) => Promise<{
-      readonly bytes: string;
-      readonly signature: string;
-    }>;
-    readonly signPersonalMessage: (msg: Uint8Array) => Promise<{
-      readonly bytes: string;
-      readonly signature: string;
-    }>;
-  };
+  readonly signer: AccountSignerInput;
   readonly addressOverride?: string;
   readonly funding?: Funding;
 } | {
@@ -60,8 +69,8 @@ interface AccountValue {
   readonly address: string;
   readonly scheme: 'ed25519' | 'secp256k1' | 'secp256r1';
   readonly publicKey: Uint8Array;
-  /** Source discriminator — `'real'` for ephemeral / keystore / env
-   *  / inline / signer; `'impersonate'` for the fork-only variant. */
+  /** Source discriminator — `'real'` for ephemeral / signer;
+   *  `'impersonate'` for the fork-only variant. */
   readonly source: 'real' | 'impersonate';
   /** Sign + execute (the canonical execution surface — per-address
    *  serialized, post-submit transaction-wait included, bounded
@@ -106,7 +115,7 @@ interface TxResult {
  *
  *  The on-chain `FailedTransaction` projection is the substrate
  *  `ExecutedFailure` shape — single source of truth lives in
- *  `substrate/runtime/sui-execute/index.ts`. An envelope without a
+ *  `plugins/sui/exec/index.ts`. An envelope without a
  *  digest fails at projection with `AccountSignError(phase: 'no-digest')`. */
 type SignAndExecuteResult = {
   readonly $kind: 'Transaction';
@@ -119,5 +128,5 @@ interface AccountTransactionSigner extends TransactionSignerScope<AccountSignErr
   readonly signAndExecute: AccountValue['signAndExecute'];
 }
 //#endregion
-export { AccountOptions, AccountValue, SignAndExecuteResult, TxResult };
+export { AccountOptions, AccountSignerInput, AccountValue, SignAndExecuteResult, TxResult };
 //# sourceMappingURL=service.d.mts.map

package/dist/plugins/account/service.mjs

@@ -1,18 +1,13 @@
 import { FUNDING_BALANCE_READ_TIMEOUT_MS } from "../../substrate/runtime/retry-policy.mjs";
 import { LeaseBrokerService } from "../../substrate/runtime/lease-broker/service.mjs";
 import "../../substrate/runtime/lease-broker/index.mjs";
-import { SuiSpans } from "../sui/spans.mjs";
-import { extractExecuteDigest } from "../../substrate/runtime/sui-execute/index.mjs";
+import { extractExecuteDigest } from "../sui/exec/index.mjs";
 import "../sui/index.mjs";
-import { AccountSpans } from "./spans.mjs";
 import { accountAcquireError, accountSignError } from "./errors.mjs";
 import { withAddressLease } from "./lease.mjs";
 import { DEFAULT_EPHEMERAL_FUND_MIST, SUI_FULL_COIN_TYPE, applyCrossCuttingFunding, fundEphemeralDefault } from "./funding.mjs";
 import "./keypair.mjs";
 import { resolveEphemeralVariant } from "./variants/ephemeral.mjs";
-import { resolveKeystoreVariant } from "./variants/keystore.mjs";
-import { resolveEnvVariant } from "./variants/env.mjs";
-import { resolveInlineVariant } from "./variants/inline.mjs";
 import { resolveSignerVariant } from "./variants/signer.mjs";
 import { resolveImpersonateVariant } from "./variants/impersonate.mjs";
 import { Effect } from "effect";
@@ -134,19 +129,6 @@ const resolveVariant = (opts, ctx) => {
 			name: opts.name,
 			secretFilePath: `${ctx.runtimeRoot}/account/${opts.name}.key`
 		});
-		case "keystore": return resolveKeystoreVariant({
-			name: opts.name,
-			path: opts.path,
-			aliasOrAddress: opts.aliasOrAddress
-		});
-		case "env": return resolveEnvVariant({
-			name: opts.name,
-			varName: opts.key
-		});
-		case "inline": return resolveInlineVariant({
-			name: opts.name,
-			privateKey: opts.privateKey
-		});
 		case "signer": return resolveSignerVariant({
 			name: opts.name,
 			signer: opts.signer,
@@ -281,15 +263,9 @@ const buildClosures = (args) => {
 		};
 		const withTransactionSigner = (body) => withAddressLease(broker, accountName, resolved.address, Effect.gen(function* () {
 			return yield* body(transactionSigner);
-		})).pipe(Effect.withSpan("devstack.plugin.account.transactionSigner", { attributes: {
-			[AccountSpans.name]: accountName,
-			[AccountSpans.address]: resolved.address
-		} }));
+		}));
 		return {
-			signAndExecute: (tx) => withTransactionSigner((locked) => locked.signAndExecute(tx)).pipe(Effect.withSpan("devstack.plugin.account.signAndExecute", { attributes: {
-				[AccountSpans.name]: accountName,
-				[AccountSpans.address]: resolved.address
-			} })),
+			signAndExecute: (tx) => withTransactionSigner((locked) => locked.signAndExecute(tx)),
 			withTransactionSigner,
 			signTransaction: refuse,
 			signPersonalMessage: refuse
@@ -335,22 +311,10 @@ const buildClosures = (args) => {
 	};
 	const withTransactionSigner = (body) => withAddressLease(broker, accountName, resolved.address, Effect.gen(function* () {
 		return yield* body(transactionSigner);
-	})).pipe(Effect.withSpan("devstack.plugin.account.transactionSigner", { attributes: {
-		[AccountSpans.name]: accountName,
-		[AccountSpans.address]: resolved.address
-	} }));
-	const signTransaction = (tx) => withTransactionSigner((locked) => locked.signTransaction(tx)).pipe(Effect.withSpan("devstack.plugin.account.signTransaction", { attributes: {
-		[AccountSpans.name]: accountName,
-		[AccountSpans.address]: resolved.address
-	} }));
-	const signPersonalMessage = (msg) => withAddressLease(broker, accountName, resolved.address, signPersonalWith(signer, msg, accountName, resolved.address)).pipe(Effect.withSpan("devstack.plugin.account.signPersonalMessage", { attributes: {
-		[AccountSpans.name]: accountName,
-		[AccountSpans.address]: resolved.address
-	} }));
-	const signAndExecute = (tx) => withTransactionSigner((locked) => locked.signAndExecute(tx)).pipe(Effect.withSpan("devstack.plugin.account.signAndExecute", { attributes: {
-		[AccountSpans.name]: accountName,
-		[AccountSpans.address]: resolved.address
-	} }));
+	}));
+	const signTransaction = (tx) => withTransactionSigner((locked) => locked.signTransaction(tx));
+	const signPersonalMessage = (msg) => withAddressLease(broker, accountName, resolved.address, signPersonalWith(signer, msg, accountName, resolved.address));
+	const signAndExecute = (tx) => withTransactionSigner((locked) => locked.signAndExecute(tx));
 	return {
 		signAndExecute,
 		withTransactionSigner,
@@ -362,16 +326,7 @@ const buildClosures = (args) => {
 *  the resolved-value projection. */
 const acquireAccount = (opts, ctx) => Effect.gen(function* () {
 	yield* validateAccountName(opts.name);
-	yield* Effect.annotateCurrentSpan({
-		[AccountSpans.name]: opts.name,
-		[AccountSpans.variant]: opts.kind,
-		[SuiSpans.mode]: ctx.sui.mode
-	});
 	const resolved = yield* resolveVariant(opts, ctx);
-	yield* Effect.annotateCurrentSpan({
-		[AccountSpans.address]: resolved.address,
-		[AccountSpans.scheme]: resolved.scheme
-	});
 	const broker = yield* LeaseBrokerService;
 	const balanceReader = makeFundingBalanceReader(ctx.sui.sdk, ctx.sui.mode === "fork");
 	const defaultFunding = opts.kind === "ephemeral" && opts.funding === void 0 ? {
@@ -387,7 +342,7 @@ const acquireAccount = (opts, ctx) => Effect.gen(function* () {
 			address: resolved.address,
 			amountMist: defaultFunding.amount,
 			suiMode: ctx.sui.mode,
-			chainId: ctx.sui.chain,
+			chainId: ctx.sui.chainId,
 			emitAutoPromotionEvent: ctx.emitAutoPromotionEvent,
 			broker,
 			balanceReader
@@ -425,7 +380,7 @@ const acquireAccount = (opts, ctx) => Effect.gen(function* () {
 		variant: opts.kind,
 		account: value,
 		funding: projected,
-		chainId: ctx.sui.chain,
+		chainId: ctx.sui.chainId,
 		broker,
 		balanceReader
 	});

package/dist/plugins/account/service.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"service.mjs","names":[],"sources":["../../../src/plugins/account/service.ts"],"sourcesContent":["// Account plugin — service body (main acquire Effect).\n//\n// What this file does:\n//\n//   1. Validate the account name (12-account.md \"Name shape\"\n//      invariant) — strict charset, length-bounded. Loud-fail at\n//      the factory boundary.\n//   2. Dispatch on the variant discriminator to the right resolver\n//      under `variants/`.\n//   3. Coordinate the funding pass (default + cross-cutting).\n//   4. Project the resolved keypair into the user-facing\n//      `AccountValue` shape (sign + execute closures).\n//\n// What it does NOT do:\n//\n//   - Talk to the chain or the faucet directly — the variant\n//     resolvers + the funding helpers own those wires.\n//   - Wire the capabilities — that's the barrel's job (`index.ts`).\n//\n// Distilled-doc invariant (\"Acquisition vs signing error split\"):\n// the acquire body emits ONLY `AccountAcquireError`; the resolved\n// value's sign/execute closures emit `AccountSignError`. The two\n// channels never mix.\n//\n// Per-address serialization (architecture invariant): concurrent\n// account-bound transactions for the same address MUST serialize\n// across build + sign + execute. `Transaction.build({ client })`\n// resolves gas/object versions, so taking the lease only while\n// signing still lets two callers build stale object references. The\n// substrate's `LeaseBrokerService` is the L0 primitive: each\n// transaction scope opens a fresh lease keyed by `account:<address>`.\n// The public sign helpers are implemented in terms of that scope so\n// they keep the historical per-address behavior.\n\nimport { Effect } from 'effect';\n\nimport type { Signer, SignatureWithBytes } from '@mysten/sui/cryptography';\n\nimport {\n\taccountAcquireError,\n\taccountSignError,\n\ttype AccountAcquireError,\n\ttype AccountSignError,\n} from './errors.ts';\nimport { type ResolvedKeypair } from './keypair.ts';\nimport {\n\tapplyCrossCuttingFunding,\n\tfundEphemeralDefault,\n\tDEFAULT_EPHEMERAL_FUND_MIST,\n\tSUI_FULL_COIN_TYPE,\n\ttype AccountFunding,\n\ttype AccountFundingResult,\n\ttype AppliedFunding,\n\ttype AppliedFundingEntry,\n\ttype FundingBalanceReader,\n\ttype ProjectedFunding,\n\ttype ProjectedFundingEntry,\n} from './funding.ts';\nimport { resolveEphemeralVariant } from './variants/ephemeral.ts';\nimport { resolveKeystoreVariant } from './variants/keystore.ts';\nimport { resolveEnvVariant } from './variants/env.ts';\nimport { resolveInlineVariant } from './variants/inline.ts';\nimport { resolveSignerVariant } from './variants/signer.ts';\nimport { resolveImpersonateVariant } from './variants/impersonate.ts';\nimport type { StrategyRegistryService } from '../../substrate/runtime/strategy-registry/service.ts';\nimport type { ChainId } from '../../substrate/brand.ts';\nimport {\n\textractExecuteDigest,\n\ttype ExecutedFailure,\n\ttype TransactionSignerScope,\n} from '../../substrate/runtime/sui-execute/index.ts';\nimport {\n\tLeaseBrokerService,\n\ttype LeaseBroker,\n} from '../../substrate/runtime/lease-broker/index.ts';\nimport { FUNDING_BALANCE_READ_TIMEOUT_MS } from '../../substrate/runtime/retry-policy.ts';\nimport { type ForkAdminSurface, type SuiSdkShim, SuiSpans } from '../sui/index.ts';\nimport { withAddressLease } from './lease.ts';\nimport { AccountSpans } from './spans.ts';\n\n// -----------------------------------------------------------------------------\n// User-facing options shape\n// -----------------------------------------------------------------------------\n\n/** Account variant discriminated union. The user-facing factory\n *  takes one of these shapes (or omits `opts` entirely for the\n *  default ephemeral form). */\nexport type AccountOptions<Funding extends AccountFunding = AccountFunding> =\n\t| {\n\t\t\treadonly kind: 'ephemeral';\n\t\t\treadonly funding?: Funding;\n\t  }\n\t| {\n\t\t\treadonly kind: 'keystore';\n\t\t\treadonly path: string;\n\t\t\treadonly aliasOrAddress: string;\n\t\t\treadonly funding?: Funding;\n\t  }\n\t| {\n\t\t\treadonly kind: 'env';\n\t\t\treadonly key: string;\n\t\t\treadonly funding?: Funding;\n\t  }\n\t| {\n\t\t\treadonly kind: 'inline';\n\t\t\treadonly privateKey: string | Uint8Array;\n\t\t\treadonly funding?: Funding;\n\t  }\n\t| {\n\t\t\treadonly kind: 'signer';\n\t\t\treadonly signer: {\n\t\t\t\treadonly toSuiAddress: () => string;\n\t\t\t\treadonly getKeyScheme: () => string;\n\t\t\t\treadonly getPublicKey: () => { readonly toRawBytes: () => Uint8Array };\n\t\t\t\treadonly signTransaction: (\n\t\t\t\t\ttx: Uint8Array,\n\t\t\t\t) => Promise<{ readonly bytes: string; readonly signature: string }>;\n\t\t\t\treadonly signPersonalMessage: (\n\t\t\t\t\tmsg: Uint8Array,\n\t\t\t\t) => Promise<{ readonly bytes: string; readonly signature: string }>;\n\t\t\t};\n\t\t\treadonly addressOverride?: string;\n\t\t\treadonly funding?: Funding;\n\t  }\n\t| {\n\t\t\treadonly kind: 'impersonate';\n\t\t\treadonly address: string;\n\t\t\treadonly funding?: Funding;\n\t  };\n\nexport type ResolvedAccountOptions<Funding extends AccountFunding = AccountFunding> =\n\tAccountOptions<Funding> & { readonly name: string };\n\n// -----------------------------------------------------------------------------\n// Resolved value (the Tag's resolved-shape)\n// -----------------------------------------------------------------------------\n\n/** Per-account resolved value — the typed handle the Account tag\n *  publishes.\n *\n *  Architecture-distilled finding (12-account.md \"Tighten the\n *  resolved-account type\"): the `source` discriminator is mandatory\n *  so consumers can branch on impersonation. Impersonation accounts\n *  carry a zero-buffer publicKey — the discriminator is the\n *  trustworthy signal. */\nexport interface AccountValue {\n\treadonly name: string;\n\treadonly address: string;\n\treadonly scheme: 'ed25519' | 'secp256k1' | 'secp256r1';\n\treadonly publicKey: Uint8Array;\n\t/** Source discriminator — `'real'` for ephemeral / keystore / env\n\t *  / inline / signer; `'impersonate'` for the fork-only variant. */\n\treadonly source: 'real' | 'impersonate';\n\t/** Sign + execute (the canonical execution surface — per-address\n\t *  serialized, post-submit transaction-wait included, bounded\n\t *  retry on the \"dependent package not found on-chain\" race).\n\t *\n\t *  For impersonation accounts, routes through Sui's fork\n\t *  admin `impersonate` surface; for real signers, routes\n\t *  through the SDK's executeTransaction surface. */\n\treadonly signAndExecute: (\n\t\ttx: Uint8Array,\n\t) => Effect.Effect<SignAndExecuteResult, AccountSignError>;\n\t/** Run a full account-bound transaction critical section.\n\t *  Callers that must serialize `Transaction.build({ client })`\n\t *  together with signing/execution use the signer passed to this\n\t *  callback; the callback runs while the per-address lease is held. */\n\treadonly withTransactionSigner: <A, E, R>(\n\t\tbody: (signer: AccountTransactionSigner) => Effect.Effect<A, E, R>,\n\t) => Effect.Effect<A, E, R>;\n\t/** Sign-only — real signers honor this; impersonation accounts\n\t *  throw synchronously (see `variants/impersonate.ts`). */\n\treadonly signTransaction: (\n\t\ttx: Uint8Array,\n\t) => Effect.Effect<{ readonly bytes: string; readonly signature: string }, AccountSignError>;\n\treadonly signPersonalMessage: (\n\t\tmsg: Uint8Array,\n\t) => Effect.Effect<{ readonly bytes: string; readonly signature: string }, AccountSignError>;\n\treadonly funding: AccountFundingResult;\n}\n\n/** Submit result projection — kept narrow so downstream consumers\n *  don't depend on the full @mysten/sui execute envelope. Populated\n *  only when the on-chain execution succeeded (the `'Transaction'`\n *  variant of `SignAndExecuteResult`). */\nexport interface TxResult {\n\treadonly digest: string;\n\treadonly effects: unknown;\n\treadonly objectChanges: ReadonlyArray<unknown>;\n\treadonly balanceChanges: ReadonlyArray<unknown>;\n}\n\n/** Outcome of `signAndExecute`. Mirrors the SDK's discriminated\n *  `SuiClientTypes.TransactionResult` shape — on-chain failures are\n *  a RETURN VALUE (callers dispatch on `$kind`), NOT an error. Only\n *  transport / lifecycle failures (sign refused, RPC unreachable,\n *  finality wait broke) surface through `AccountSignError`.\n *\n *  The on-chain `FailedTransaction` projection is the substrate\n *  `ExecutedFailure` shape — single source of truth lives in\n *  `substrate/runtime/sui-execute/index.ts`. An envelope without a\n *  digest fails at projection with `AccountSignError(phase: 'no-digest')`. */\nexport type SignAndExecuteResult =\n\t| { readonly $kind: 'Transaction'; readonly Transaction: TxResult }\n\t| { readonly $kind: 'FailedTransaction'; readonly FailedTransaction: ExecutedFailure };\n\nexport interface AccountTransactionSigner extends TransactionSignerScope<AccountSignError> {\n\treadonly signAndExecute: AccountValue['signAndExecute'];\n}\n\n// -----------------------------------------------------------------------------\n// Name validation\n// -----------------------------------------------------------------------------\n\n/** Architecture-distilled invariant: name flows into the resource id, an\n *  on-disk path, a manifest key, container labels, and generated\n *  TypeScript exports. Keep the public name identifier-safe instead\n *  of accepting path-safe spellings that codegen later rejects. */\nconst ACCOUNT_NAME_RE = /^[A-Za-z][A-Za-z0-9_]{0,63}$/;\nconst ACCOUNT_NAME_HINT =\n\t'letters, digits, and underscores; must start with a letter; max 64 chars; cannot be a TypeScript reserved word';\nconst TS_RESERVED_BINDING_NAMES = new Set([\n\t'as',\n\t'async',\n\t'await',\n\t'break',\n\t'case',\n\t'catch',\n\t'class',\n\t'const',\n\t'continue',\n\t'debugger',\n\t'default',\n\t'delete',\n\t'do',\n\t'else',\n\t'enum',\n\t'export',\n\t'extends',\n\t'false',\n\t'finally',\n\t'for',\n\t'from',\n\t'function',\n\t'if',\n\t'import',\n\t'in',\n\t'instanceof',\n\t'let',\n\t'new',\n\t'null',\n\t'of',\n\t'return',\n\t'super',\n\t'switch',\n\t'this',\n\t'throw',\n\t'true',\n\t'try',\n\t'typeof',\n\t'var',\n\t'void',\n\t'while',\n\t'with',\n\t'yield',\n]);\n\nconst accountNameInvalidReason = (name: string): string | null => {\n\tif (!ACCOUNT_NAME_RE.test(name)) {\n\t\treturn `must match ${ACCOUNT_NAME_RE.source}`;\n\t}\n\tif (TS_RESERVED_BINDING_NAMES.has(name)) {\n\t\treturn 'cannot be a TypeScript reserved word';\n\t}\n\treturn null;\n};\n\nexport const assertAccountName = (name: string): void => {\n\tconst reason = accountNameInvalidReason(name);\n\tif (reason !== null) {\n\t\tthrow new TypeError(`Account name '${name}' is invalid — ${reason}. ${ACCOUNT_NAME_HINT}`);\n\t}\n};\n\nexport const validateAccountName = (name: string): Effect.Effect<void, AccountAcquireError> => {\n\tconst reason = accountNameInvalidReason(name);\n\tif (reason !== null) {\n\t\treturn Effect.fail(\n\t\t\taccountAcquireError({\n\t\t\t\tphase: 'validate-name',\n\t\t\t\taccountName: name,\n\t\t\t\tvariant: 'ephemeral',\n\t\t\t\tmessage: `Account name '${name}' is invalid — ${reason}.`,\n\t\t\t\thint: ACCOUNT_NAME_HINT,\n\t\t\t}),\n\t\t);\n\t}\n\treturn Effect.void;\n};\n\n// -----------------------------------------------------------------------------\n// Variant dispatch\n// -----------------------------------------------------------------------------\n\n/** Sui mode + sdk shim — the slice of the resolved `SuiClient` the\n *  account service actually consumes. Kept narrow so the variants +\n *  funding helpers stay typed at the resolved-fields level (mode,\n *  chain, sdk) rather than at the wide `SuiClient` shape. */\nexport interface AccountSuiShim {\n\treadonly mode: 'local' | 'local-rpc' | 'live' | 'fork';\n\treadonly chain: ChainId;\n\t/** SDK shim — exposes `executeTransaction` + `waitForTransaction`\n\t *  for the signAndExecute pipeline. */\n\treadonly sdk: SuiSdkShim;\n\treadonly fork?: ForkAdminSurface | null;\n}\n\n/** Per-acquire context — supplied by the barrel from resolved plugin\n *  dependencies and per-stack identity.\n *\n *  `projectedFunding` carries the funding entries already resolved\n *  from each `opts.funding[i].coin` dependency and projected to\n *  `{fullCoinType, amount}` BEFORE handing off to `acquireAccount`.\n *  The acquire body never sees the raw member refs — keeps the\n *  cross-cutting funding dispatch substrate-name-blind. */\nexport interface AccountAcquireContext {\n\treadonly sui: AccountSuiShim;\n\treadonly runtimeRoot: string;\n\treadonly app: string;\n\treadonly stack: string;\n\treadonly emitAutoPromotionEvent: () => Effect.Effect<void>;\n\t/** Projected cross-cutting funding entries. Empty when `opts.funding`\n\t *  is absent. The barrel stamps each resolved coin dependency's\n\t *  `fullCoinType` here. */\n\treadonly projectedFunding?: ProjectedFunding;\n}\n\n/** Sum an owner's coin balances for `coinType` via `listCoins`. Used in\n *  fork mode, where `getBalance` / `listBalances` panic under the fork\n *  guard — `listCoins` is the only balance-bearing read fork mode allows. */\nconst sumBalanceViaListCoins = async (\n\tsdk: SuiSdkShim,\n\towner: string,\n\tcoinType: string | undefined,\n): Promise<bigint> => {\n\tlet total = 0n;\n\tlet cursor: string | null = null;\n\tdo {\n\t\tconst page = await sdk.core.listCoins({\n\t\t\towner,\n\t\t\tcoinType: coinType ?? '0x2::sui::SUI',\n\t\t\tcursor,\n\t\t\tlimit: 200,\n\t\t});\n\t\tfor (const coin of page.objects) {\n\t\t\ttotal += BigInt(coin.balance);\n\t\t}\n\t\tcursor = page.hasNextPage ? page.cursor : null;\n\t} while (cursor !== null);\n\treturn total;\n};\n\nconst makeFundingBalanceReader = (sdk: SuiSdkShim, forkMode: boolean): FundingBalanceReader => ({\n\treadBalance: ({ owner, coinType }) =>\n\t\tEffect.promise(async () => {\n\t\t\ttry {\n\t\t\t\t// Fork mode forbids getBalance/listBalances (they panic under the\n\t\t\t\t// fork guard); sum coins via the fork-safe listCoins instead.\n\t\t\t\treturn forkMode\n\t\t\t\t\t? await sumBalanceViaListCoins(sdk, owner, coinType)\n\t\t\t\t\t: balanceAmountFromSdkResponse(await sdk.core.getBalance({ owner, coinType }));\n\t\t\t} catch {\n\t\t\t\treturn null;\n\t\t\t}\n\t\t}).pipe(\n\t\t\tEffect.timeoutOrElse({\n\t\t\t\tduration: `${FUNDING_BALANCE_READ_TIMEOUT_MS} millis`,\n\t\t\t\torElse: () => Effect.succeed(null),\n\t\t\t}),\n\t\t),\n});\n\nconst balanceAmountFromSdkResponse = (response: unknown): bigint | null => {\n\tconst outer =\n\t\ttypeof response === 'object' && response !== null && 'balance' in response\n\t\t\t? (response as { readonly balance?: unknown }).balance\n\t\t\t: response;\n\tconst value =\n\t\ttypeof outer === 'object' && outer !== null && 'balance' in outer\n\t\t\t? (outer as { readonly balance?: unknown }).balance\n\t\t\t: outer;\n\tif (typeof value === 'bigint') return value;\n\tif (typeof value === 'number' && Number.isSafeInteger(value) && value >= 0) return BigInt(value);\n\tif (typeof value === 'string' && /^\\d+$/.test(value)) return BigInt(value);\n\treturn null;\n};\n\n/** Dispatch on the variant discriminator. */\nconst resolveVariant = (\n\topts: ResolvedAccountOptions,\n\tctx: AccountAcquireContext,\n): Effect.Effect<ResolvedKeypair, AccountAcquireError> => {\n\tswitch (opts.kind) {\n\t\tcase 'ephemeral':\n\t\t\treturn resolveEphemeralVariant({\n\t\t\t\tname: opts.name,\n\t\t\t\t// Architecture-distilled (12-account.md \"Cross-component\n\t\t\t\t// references\"): persisted key lives under the stack's\n\t\t\t\t// runtime tree. Path shape mirrors the on-disk convention.\n\t\t\t\tsecretFilePath: `${ctx.runtimeRoot}/account/${opts.name}.key`,\n\t\t\t});\n\t\tcase 'keystore':\n\t\t\treturn resolveKeystoreVariant({\n\t\t\t\tname: opts.name,\n\t\t\t\tpath: opts.path,\n\t\t\t\taliasOrAddress: opts.aliasOrAddress,\n\t\t\t});\n\t\tcase 'env':\n\t\t\treturn resolveEnvVariant({\n\t\t\t\tname: opts.name,\n\t\t\t\tvarName: opts.key,\n\t\t\t});\n\t\tcase 'inline':\n\t\t\treturn resolveInlineVariant({\n\t\t\t\tname: opts.name,\n\t\t\t\tprivateKey: opts.privateKey,\n\t\t\t});\n\t\tcase 'signer':\n\t\t\treturn resolveSignerVariant({\n\t\t\t\tname: opts.name,\n\t\t\t\tsigner: opts.signer,\n\t\t\t\t...(opts.addressOverride !== undefined ? { addressOverride: opts.addressOverride } : {}),\n\t\t\t});\n\t\tcase 'impersonate':\n\t\t\treturn resolveImpersonateVariant({\n\t\t\t\tname: opts.name,\n\t\t\t\taddress: opts.address,\n\t\t\t\tsuiMode: ctx.sui.mode,\n\t\t\t});\n\t}\n};\n\n// -----------------------------------------------------------------------------\n// Sign + execute closures\n// -----------------------------------------------------------------------------\n\n/** Promote a Promise-returning sign call into the typed-error\n *  channel. The `signer.signTransaction` / `signPersonalMessage`\n *  helpers on `@mysten/sui` `Signer` instances are async; the\n *  bring-your-own-signer variant uses the same shape. */\nconst signWith = (\n\tsigner: {\n\t\treadonly signTransaction: (\n\t\t\ttx: Uint8Array,\n\t\t) => Promise<{ readonly bytes: string; readonly signature: string }>;\n\t},\n\ttx: Uint8Array,\n\taccountName: string,\n\taddress: string,\n): Effect.Effect<{ readonly bytes: string; readonly signature: string }, AccountSignError> =>\n\tEffect.tryPromise({\n\t\ttry: () => signer.signTransaction(tx),\n\t\tcatch: (cause): AccountSignError =>\n\t\t\taccountSignError({\n\t\t\t\tphase: 'sign',\n\t\t\t\taccountName,\n\t\t\t\taddress,\n\t\t\t\tmessage: `Account '${accountName}': signer.signTransaction() rejected.`,\n\t\t\t\tcause,\n\t\t\t}),\n\t});\n\nconst signPersonalWith = (\n\tsigner: {\n\t\treadonly signPersonalMessage: (\n\t\t\tmsg: Uint8Array,\n\t\t) => Promise<{ readonly bytes: string; readonly signature: string }>;\n\t},\n\tmsg: Uint8Array,\n\taccountName: string,\n\taddress: string,\n): Effect.Effect<{ readonly bytes: string; readonly signature: string }, AccountSignError> =>\n\tEffect.tryPromise({\n\t\ttry: () => signer.signPersonalMessage(msg),\n\t\tcatch: (cause): AccountSignError =>\n\t\t\taccountSignError({\n\t\t\t\tphase: 'sign',\n\t\t\t\taccountName,\n\t\t\t\taddress,\n\t\t\t\tmessage: `Account '${accountName}': signer.signPersonalMessage() rejected.`,\n\t\t\t\tcause,\n\t\t\t}),\n\t});\n\n/** Project the raw `@mysten/sui` executeTransaction response into\n *  the narrowed `TxResult` shape consumers depend on. The SDK\n *  response carries a discriminated union; the result we surface\n *  always carries a digest plus the include-projected sub-fields. */\nconst projectTxResult = (\n\traw: unknown,\n\taccountName: string,\n\taddress: string,\n): Effect.Effect<SignAndExecuteResult, AccountSignError> =>\n\tEffect.gen(function* () {\n\t\t// The SDK's `SuiClientTypes.TransactionResult` is a discriminated\n\t\t// union — `{$kind: 'Transaction', Transaction: {...}}` or\n\t\t// `{$kind: 'FailedTransaction', FailedTransaction: {...}}` —\n\t\t// where each variant carries a non-optional `digest`. Mirror the\n\t\t// shape on-channel so callers dispatch on `$kind`; on-chain\n\t\t// failures are a RETURN VALUE, not an error.\n\t\tconst r = raw as {\n\t\t\t$kind?: 'Transaction' | 'FailedTransaction';\n\t\t\tTransaction?: {\n\t\t\t\tdigest?: string;\n\t\t\t\teffects?: unknown;\n\t\t\t\tobjectTypes?: Readonly<Record<string, string>>;\n\t\t\t\tbalanceChanges?: ReadonlyArray<unknown>;\n\t\t\t};\n\t\t\tFailedTransaction?: {\n\t\t\t\tdigest?: string;\n\t\t\t\tstatus?: { readonly error?: string | { readonly message?: string } };\n\t\t\t};\n\t\t};\n\t\tif (r.$kind === 'FailedTransaction') {\n\t\t\tconst failed = r.FailedTransaction ?? {};\n\t\t\tif (failed.digest === undefined) {\n\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\taccountSignError({\n\t\t\t\t\t\tphase: 'no-digest',\n\t\t\t\t\t\taccountName,\n\t\t\t\t\t\taddress,\n\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t`Account '${accountName}': executeTransaction returned a FailedTransaction ` +\n\t\t\t\t\t\t\t`without a digest — protocol violation, got ` +\n\t\t\t\t\t\t\t`${JSON.stringify(r).slice(0, 200)}`,\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst errorRaw = failed.status?.error;\n\t\t\tconst executionError =\n\t\t\t\ttypeof errorRaw === 'string'\n\t\t\t\t\t? errorRaw\n\t\t\t\t\t: typeof errorRaw === 'object' &&\n\t\t\t\t\t\t  errorRaw !== null &&\n\t\t\t\t\t\t  'message' in errorRaw &&\n\t\t\t\t\t\t  typeof errorRaw.message === 'string'\n\t\t\t\t\t\t? errorRaw.message\n\t\t\t\t\t\t: undefined;\n\t\t\treturn {\n\t\t\t\t$kind: 'FailedTransaction',\n\t\t\t\tFailedTransaction: {\n\t\t\t\t\tdigest: failed.digest,\n\t\t\t\t\t...(executionError !== undefined ? { executionError } : {}),\n\t\t\t\t},\n\t\t\t};\n\t\t}\n\t\tconst tx = r.Transaction;\n\t\tif (tx?.digest === undefined) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\taccountSignError({\n\t\t\t\t\tphase: 'no-digest',\n\t\t\t\t\taccountName,\n\t\t\t\t\taddress,\n\t\t\t\t\tmessage:\n\t\t\t\t\t\t`Account '${accountName}': executeTransaction returned a malformed envelope — ` +\n\t\t\t\t\t\t`expected $kind:'Transaction'|'FailedTransaction' with a digest, got ` +\n\t\t\t\t\t\t`${JSON.stringify(r).slice(0, 200)}`,\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\t\treturn {\n\t\t\t$kind: 'Transaction',\n\t\t\tTransaction: {\n\t\t\t\tdigest: tx.digest,\n\t\t\t\teffects: tx.effects ?? null,\n\t\t\t\tobjectChanges: projectObjectChanges(tx.effects, tx.objectTypes ?? {}),\n\t\t\t\tbalanceChanges: tx.balanceChanges ?? [],\n\t\t\t},\n\t\t};\n\t});\n\nconst projectObjectChanges = (\n\teffects: unknown,\n\tobjectTypes: Readonly<Record<string, string>>,\n): ReadonlyArray<unknown> => {\n\tconst changedObjects =\n\t\ttypeof effects === 'object' && effects !== null && 'changedObjects' in effects\n\t\t\t? (\n\t\t\t\t\teffects as {\n\t\t\t\t\t\treadonly changedObjects?: ReadonlyArray<{\n\t\t\t\t\t\t\treadonly objectId?: string;\n\t\t\t\t\t\t\treadonly outputState?: string;\n\t\t\t\t\t\t\treadonly idOperation?: string;\n\t\t\t\t\t\t}>;\n\t\t\t\t\t}\n\t\t\t\t).changedObjects\n\t\t\t: undefined;\n\tif (changedObjects === undefined) return [];\n\treturn changedObjects\n\t\t.filter(\n\t\t\t(\n\t\t\t\tchange,\n\t\t\t): change is {\n\t\t\t\treadonly objectId: string;\n\t\t\t\treadonly outputState?: string;\n\t\t\t\treadonly idOperation?: string;\n\t\t\t} => typeof change.objectId === 'string',\n\t\t)\n\t\t.map((change) => {\n\t\t\tconst objectType = objectTypes[change.objectId];\n\t\t\tconst entry: {\n\t\t\t\ttype: 'published' | 'created' | 'mutated';\n\t\t\t\tobjectId: string;\n\t\t\t\tobjectType?: string;\n\t\t\t\toutputState?: string;\n\t\t\t\tidOperation?: string;\n\t\t\t} = {\n\t\t\t\ttype:\n\t\t\t\t\tchange.outputState === 'PackageWrite'\n\t\t\t\t\t\t? 'published'\n\t\t\t\t\t\t: change.idOperation === 'Created'\n\t\t\t\t\t\t\t? 'created'\n\t\t\t\t\t\t\t: 'mutated',\n\t\t\t\tobjectId: change.objectId,\n\t\t\t};\n\t\t\tif (objectType !== undefined) entry.objectType = objectType;\n\t\t\tif (change.outputState !== undefined) entry.outputState = change.outputState;\n\t\t\tif (change.idOperation !== undefined) entry.idOperation = change.idOperation;\n\t\t\treturn entry;\n\t\t});\n};\n\ninterface BuildClosuresArgs {\n\treadonly accountName: string;\n\treadonly resolved: ResolvedKeypair;\n\treadonly sui: AccountSuiShim;\n\treadonly broker: LeaseBroker;\n\treadonly source: 'real' | 'impersonate';\n}\n\nconst buildClosures = (\n\targs: BuildClosuresArgs,\n): Pick<\n\tAccountValue,\n\t'signAndExecute' | 'withTransactionSigner' | 'signTransaction' | 'signPersonalMessage'\n> => {\n\tconst { accountName, resolved, sui, broker, source } = args;\n\n\t// Impersonation accounts MUST NOT sign — the synthetic signer's\n\t// signTransaction throws synchronously (architecture invariant).\n\t// signAndExecute routes through sui-fork's empty-signature\n\t// execution path while still holding the per-address lease.\n\tif (source === 'impersonate') {\n\t\tconst refuse = <A>(): Effect.Effect<A, AccountSignError> =>\n\t\t\tEffect.fail(\n\t\t\t\taccountSignError({\n\t\t\t\t\tphase: 'impersonation-bypass-attempt',\n\t\t\t\t\taccountName,\n\t\t\t\t\taddress: resolved.address,\n\t\t\t\t\tmessage: `Account '${accountName}' is an impersonation account — sign/execute must route through Sui's fork admin surface.`,\n\t\t\t\t}),\n\t\t\t);\n\t\tconst unlockedSignAndExecute: AccountTransactionSigner['signAndExecute'] = (tx) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst fork = sui.fork ?? null;\n\t\t\t\tif (fork === null) {\n\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\taccountSignError({\n\t\t\t\t\t\t\tphase: 'submit',\n\t\t\t\t\t\t\taccountName,\n\t\t\t\t\t\t\taddress: resolved.address,\n\t\t\t\t\t\t\tmessage: `Account '${accountName}': impersonation requires a fork-mode Sui client.`,\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tconst submitted = yield* fork.impersonate(resolved.address, tx).pipe(\n\t\t\t\t\tEffect.mapError(\n\t\t\t\t\t\t(cause): AccountSignError =>\n\t\t\t\t\t\t\taccountSignError({\n\t\t\t\t\t\t\t\tphase: 'submit',\n\t\t\t\t\t\t\t\taccountName,\n\t\t\t\t\t\t\t\taddress: resolved.address,\n\t\t\t\t\t\t\t\tmessage: `Account '${accountName}': fork impersonation submit failed.`,\n\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\tyield* Effect.tryPromise({\n\t\t\t\t\ttry: () =>\n\t\t\t\t\t\tsui.sdk.core.waitForTransaction({\n\t\t\t\t\t\t\tdigest: submitted.digest,\n\t\t\t\t\t\t}),\n\t\t\t\t\tcatch: (cause): AccountSignError =>\n\t\t\t\t\t\taccountSignError({\n\t\t\t\t\t\t\tphase: 'await-finality',\n\t\t\t\t\t\t\taccountName,\n\t\t\t\t\t\t\taddress: resolved.address,\n\t\t\t\t\t\t\tmessage: `Account '${accountName}': waitForTransaction(${submitted.digest}) failed.`,\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t}),\n\t\t\t\t});\n\t\t\t\treturn yield* projectTxResult(submitted.raw, accountName, resolved.address);\n\t\t\t});\n\t\tconst transactionSigner: AccountTransactionSigner = {\n\t\t\tsignTransaction: refuse<{ readonly bytes: string; readonly signature: string }>,\n\t\t\tsignAndExecute: unlockedSignAndExecute,\n\t\t};\n\t\tconst withTransactionSigner: AccountValue['withTransactionSigner'] = (body) =>\n\t\t\twithAddressLease(\n\t\t\t\tbroker,\n\t\t\t\taccountName,\n\t\t\t\tresolved.address,\n\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\treturn yield* body(transactionSigner);\n\t\t\t\t}),\n\t\t\t).pipe(\n\t\t\t\tEffect.withSpan('devstack.plugin.account.transactionSigner', {\n\t\t\t\t\tattributes: {\n\t\t\t\t\t\t[AccountSpans.name]: accountName,\n\t\t\t\t\t\t[AccountSpans.address]: resolved.address,\n\t\t\t\t\t},\n\t\t\t\t}),\n\t\t\t);\n\t\treturn {\n\t\t\tsignAndExecute: (tx) =>\n\t\t\t\twithTransactionSigner((locked) => locked.signAndExecute(tx)).pipe(\n\t\t\t\t\tEffect.withSpan('devstack.plugin.account.signAndExecute', {\n\t\t\t\t\t\tattributes: {\n\t\t\t\t\t\t\t[AccountSpans.name]: accountName,\n\t\t\t\t\t\t\t[AccountSpans.address]: resolved.address,\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t\twithTransactionSigner,\n\t\t\tsignTransaction: refuse<{ readonly bytes: string; readonly signature: string }>,\n\t\t\tsignPersonalMessage: refuse<{ readonly bytes: string; readonly signature: string }>,\n\t\t};\n\t}\n\n\t// Both real-keypair and bring-your-own-signer paths satisfy the\n\t// minimal `signTransaction` / `signPersonalMessage` shape (the\n\t// SDK's `Signer` and the BYO `signer` declaration agree on it).\n\tconst signer = resolved.signer as Pick<Signer, 'signTransaction' | 'signPersonalMessage'>;\n\n\tconst unlockedSignTransaction: AccountTransactionSigner['signTransaction'] = (tx) =>\n\t\tsignWith(signer, tx, accountName, resolved.address);\n\n\tconst unlockedSignAndExecute: AccountTransactionSigner['signAndExecute'] = (tx) =>\n\t\tEffect.gen(function* () {\n\t\t\tconst signed: SignatureWithBytes = yield* unlockedSignTransaction(tx);\n\t\t\tconst raw = yield* Effect.tryPromise({\n\t\t\t\ttry: () =>\n\t\t\t\t\tsui.sdk.core.executeTransaction({\n\t\t\t\t\t\ttransaction: tx,\n\t\t\t\t\t\tsignatures: [signed.signature],\n\t\t\t\t\t\tinclude: { effects: true, objectTypes: true },\n\t\t\t\t\t}),\n\t\t\t\tcatch: (cause): AccountSignError =>\n\t\t\t\t\taccountSignError({\n\t\t\t\t\t\tphase: 'submit',\n\t\t\t\t\t\taccountName,\n\t\t\t\t\t\taddress: resolved.address,\n\t\t\t\t\t\tmessage: `Account '${accountName}': executeTransaction transport failed.`,\n\t\t\t\t\t\tcause,\n\t\t\t\t\t}),\n\t\t\t});\n\t\t\tconst digest = extractExecuteDigest(raw);\n\t\t\tif (digest !== undefined) {\n\t\t\t\tyield* Effect.tryPromise({\n\t\t\t\t\ttry: () =>\n\t\t\t\t\t\tsui.sdk.core.waitForTransaction({\n\t\t\t\t\t\t\tdigest,\n\t\t\t\t\t\t}),\n\t\t\t\t\tcatch: (cause): AccountSignError =>\n\t\t\t\t\t\taccountSignError({\n\t\t\t\t\t\t\tphase: 'await-finality',\n\t\t\t\t\t\t\taccountName,\n\t\t\t\t\t\t\taddress: resolved.address,\n\t\t\t\t\t\t\tmessage: `Account '${accountName}': waitForTransaction(${digest}) failed.`,\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t}),\n\t\t\t\t});\n\t\t\t}\n\t\t\treturn yield* projectTxResult(raw, accountName, resolved.address);\n\t\t});\n\n\tconst transactionSigner: AccountTransactionSigner = {\n\t\tsignTransaction: unlockedSignTransaction,\n\t\tsignAndExecute: unlockedSignAndExecute,\n\t};\n\n\tconst withTransactionSigner: AccountValue['withTransactionSigner'] = (body) =>\n\t\twithAddressLease(\n\t\t\tbroker,\n\t\t\taccountName,\n\t\t\tresolved.address,\n\t\t\tEffect.gen(function* () {\n\t\t\t\treturn yield* body(transactionSigner);\n\t\t\t}),\n\t\t).pipe(\n\t\t\tEffect.withSpan('devstack.plugin.account.transactionSigner', {\n\t\t\t\tattributes: {\n\t\t\t\t\t[AccountSpans.name]: accountName,\n\t\t\t\t\t[AccountSpans.address]: resolved.address,\n\t\t\t\t},\n\t\t\t}),\n\t\t);\n\n\tconst signTransaction: AccountValue['signTransaction'] = (tx) =>\n\t\twithTransactionSigner((locked) => locked.signTransaction(tx)).pipe(\n\t\t\tEffect.withSpan('devstack.plugin.account.signTransaction', {\n\t\t\t\tattributes: {\n\t\t\t\t\t[AccountSpans.name]: accountName,\n\t\t\t\t\t[AccountSpans.address]: resolved.address,\n\t\t\t\t},\n\t\t\t}),\n\t\t);\n\n\tconst signPersonalMessage: AccountValue['signPersonalMessage'] = (msg) =>\n\t\twithAddressLease(\n\t\t\tbroker,\n\t\t\taccountName,\n\t\t\tresolved.address,\n\t\t\tsignPersonalWith(signer, msg, accountName, resolved.address),\n\t\t).pipe(\n\t\t\tEffect.withSpan('devstack.plugin.account.signPersonalMessage', {\n\t\t\t\tattributes: {\n\t\t\t\t\t[AccountSpans.name]: accountName,\n\t\t\t\t\t[AccountSpans.address]: resolved.address,\n\t\t\t\t},\n\t\t\t}),\n\t\t);\n\n\tconst signAndExecute: AccountValue['signAndExecute'] = (tx) =>\n\t\twithTransactionSigner((locked) => locked.signAndExecute(tx)).pipe(\n\t\t\tEffect.withSpan('devstack.plugin.account.signAndExecute', {\n\t\t\t\tattributes: {\n\t\t\t\t\t[AccountSpans.name]: accountName,\n\t\t\t\t\t[AccountSpans.address]: resolved.address,\n\t\t\t\t},\n\t\t\t}),\n\t\t);\n\n\treturn { signAndExecute, withTransactionSigner, signTransaction, signPersonalMessage };\n};\n\n// -----------------------------------------------------------------------------\n// Acquire orchestration\n// -----------------------------------------------------------------------------\n\n/** Acquire an account. Coordinates variant dispatch + funding +\n *  the resolved-value projection. */\nexport const acquireAccount = (\n\topts: ResolvedAccountOptions,\n\tctx: AccountAcquireContext,\n): Effect.Effect<AccountValue, AccountAcquireError, StrategyRegistryService | LeaseBrokerService> =>\n\tEffect.gen(function* () {\n\t\tyield* validateAccountName(opts.name);\n\n\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t[AccountSpans.name]: opts.name,\n\t\t\t[AccountSpans.variant]: opts.kind,\n\t\t\t[SuiSpans.mode]: ctx.sui.mode,\n\t\t});\n\n\t\t// --- variant dispatch ----------------------------------------\n\t\tconst resolved = yield* resolveVariant(opts, ctx);\n\n\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t[AccountSpans.address]: resolved.address,\n\t\t\t[AccountSpans.scheme]: resolved.scheme,\n\t\t});\n\n\t\t// --- lease broker handle (captured once; both funding and the\n\t\t//     resolved-value closures share this handle so concurrent\n\t\t//     callers serialize through the substrate broker's per-key\n\t\t//     FIFO queue) -------------------------------------------\n\t\tconst broker = yield* LeaseBrokerService;\n\t\tconst balanceReader = makeFundingBalanceReader(ctx.sui.sdk, ctx.sui.mode === 'fork');\n\n\t\tconst defaultFunding: ProjectedFundingEntry | null =\n\t\t\topts.kind === 'ephemeral' && opts.funding === undefined\n\t\t\t\t? {\n\t\t\t\t\t\tcoin: 'SUI',\n\t\t\t\t\t\tfullCoinType: SUI_FULL_COIN_TYPE,\n\t\t\t\t\t\tamount: DEFAULT_EPHEMERAL_FUND_MIST,\n\t\t\t\t\t}\n\t\t\t\t: null;\n\t\tconst requestedFunding =\n\t\t\tdefaultFunding === null\n\t\t\t\t? (ctx.projectedFunding ?? [])\n\t\t\t\t: [defaultFunding, ...(ctx.projectedFunding ?? [])];\n\t\tconst appliedDefaultFunding: AppliedFundingEntry[] = [];\n\n\t\t// --- default funding (bare ephemeral only) -------------------\n\t\tif (defaultFunding !== null) {\n\t\t\t// Outcome distinguishes a real faucet call (`'funded'`) from\n\t\t\t// the pre-existing-balance short-circuit (`'already-satisfied'`),\n\t\t\t// so the registry projection doesn't mislabel a no-faucet-call\n\t\t\t// entry as funded. `'skipped'` (zero amount) drops out entirely\n\t\t\t// per the same invariant as the cross-cutting pass.\n\t\t\tconst outcome = yield* fundEphemeralDefault({\n\t\t\t\taccountName: opts.name,\n\t\t\t\taddress: resolved.address,\n\t\t\t\tamountMist: defaultFunding.amount,\n\t\t\t\tsuiMode: ctx.sui.mode,\n\t\t\t\tchainId: ctx.sui.chain,\n\t\t\t\temitAutoPromotionEvent: ctx.emitAutoPromotionEvent,\n\t\t\t\tbroker,\n\t\t\t\tbalanceReader,\n\t\t\t});\n\t\t\tif (outcome !== 'skipped') {\n\t\t\t\tappliedDefaultFunding.push({ ...defaultFunding, outcome });\n\t\t\t}\n\t\t}\n\n\t\tconst source: AccountValue['source'] = opts.kind === 'impersonate' ? 'impersonate' : 'real';\n\t\tconst closures = buildClosures({\n\t\t\taccountName: opts.name,\n\t\t\tresolved,\n\t\t\tsui: ctx.sui,\n\t\t\tbroker,\n\t\t\tsource,\n\t\t});\n\n\t\t// --- project the resolved value ------------------------------\n\t\tconst value: AccountValue = {\n\t\t\tname: opts.name,\n\t\t\taddress: resolved.address,\n\t\t\tscheme: resolved.scheme,\n\t\t\tpublicKey: resolved.publicKey,\n\t\t\tsource,\n\t\t\tfunding: {\n\t\t\t\trequested: requestedFunding,\n\t\t\t\tapplied: appliedDefaultFunding,\n\t\t\t},\n\t\t\t...closures,\n\t\t};\n\n\t\t// --- cross-cutting funding (all variants) --------------------\n\t\t//\n\t\t// The barrel pre-projects each user-supplied `CoinMember` to\n\t\t// `{fullCoinType, amount}` from resolved dependencies so this\n\t\t// dispatch stays substrate-name-blind. The resolved account\n\t\t// handle is passed so strategy providers without admin\n\t\t// capabilities can sign account-owned funding swaps. Missing /\n\t\t// empty `projectedFunding` is a no-op (matches the \"Optional\n\t\t// Faucet is a noop\" invariant).\n\t\tconst projected = ctx.projectedFunding ?? [];\n\t\tlet appliedCrossCuttingFunding: AppliedFunding = [];\n\t\tif (projected.length > 0) {\n\t\t\tappliedCrossCuttingFunding = yield* applyCrossCuttingFunding({\n\t\t\t\taccountName: opts.name,\n\t\t\t\taddress: resolved.address,\n\t\t\t\tvariant: opts.kind,\n\t\t\t\taccount: value,\n\t\t\t\tfunding: projected,\n\t\t\t\tchainId: ctx.sui.chain,\n\t\t\t\tbroker,\n\t\t\t\tbalanceReader,\n\t\t\t});\n\t\t}\n\n\t\treturn {\n\t\t\t...value,\n\t\t\tfunding: {\n\t\t\t\trequested: requestedFunding,\n\t\t\t\tapplied: [...appliedDefaultFunding, ...appliedCrossCuttingFunding],\n\t\t\t},\n\t\t};\n\t});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA0NA,MAAM,kBAAkB;AACxB,MAAM,oBACL;AACD,MAAM,4BAA4B,IAAI,IAAI;CACzC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,CAAC;AAEF,MAAM,4BAA4B,SAAgC;AACjE,KAAI,CAAC,gBAAgB,KAAK,KAAK,CAC9B,QAAO,cAAc,gBAAgB;AAEtC,KAAI,0BAA0B,IAAI,KAAK,CACtC,QAAO;AAER,QAAO;;AAGR,MAAa,qBAAqB,SAAuB;CACxD,MAAM,SAAS,yBAAyB,KAAK;AAC7C,KAAI,WAAW,KACd,OAAM,IAAI,UAAU,iBAAiB,KAAK,iBAAiB,OAAO,IAAI,oBAAoB;;AAI5F,MAAa,uBAAuB,SAA2D;CAC9F,MAAM,SAAS,yBAAyB,KAAK;AAC7C,KAAI,WAAW,KACd,QAAO,OAAO,KACb,oBAAoB;EACnB,OAAO;EACP,aAAa;EACb,SAAS;EACT,SAAS,iBAAiB,KAAK,iBAAiB,OAAO;EACvD,MAAM;EACN,CAAC,CACF;AAEF,QAAO,OAAO;;;;;AA2Cf,MAAM,yBAAyB,OAC9B,KACA,OACA,aACqB;CACrB,IAAI,QAAQ;CACZ,IAAI,SAAwB;AAC5B,IAAG;EACF,MAAM,OAAO,MAAM,IAAI,KAAK,UAAU;GACrC;GACA,UAAU,YAAY;GACtB;GACA,OAAO;GACP,CAAC;AACF,OAAK,MAAM,QAAQ,KAAK,QACvB,UAAS,OAAO,KAAK,QAAQ;AAE9B,WAAS,KAAK,cAAc,KAAK,SAAS;UAClC,WAAW;AACpB,QAAO;;AAGR,MAAM,4BAA4B,KAAiB,cAA6C,EAC/F,cAAc,EAAE,OAAO,eACtB,OAAO,QAAQ,YAAY;AAC1B,KAAI;AAGH,SAAO,WACJ,MAAM,uBAAuB,KAAK,OAAO,SAAS,GAClD,6BAA6B,MAAM,IAAI,KAAK,WAAW;GAAE;GAAO;GAAU,CAAC,CAAC;SACxE;AACP,SAAO;;EAEP,CAAC,KACF,OAAO,cAAc;CACpB,UAAU,GAAG,gCAAgC;CAC7C,cAAc,OAAO,QAAQ,KAAK;CAClC,CAAC,CACF,EACF;AAED,MAAM,gCAAgC,aAAqC;CAC1E,MAAM,QACL,OAAO,aAAa,YAAY,aAAa,QAAQ,aAAa,WAC9D,SAA4C,UAC7C;CACJ,MAAM,QACL,OAAO,UAAU,YAAY,UAAU,QAAQ,aAAa,QACxD,MAAyC,UAC1C;AACJ,KAAI,OAAO,UAAU,SAAU,QAAO;AACtC,KAAI,OAAO,UAAU,YAAY,OAAO,cAAc,MAAM,IAAI,SAAS,EAAG,QAAO,OAAO,MAAM;AAChG,KAAI,OAAO,UAAU,YAAY,QAAQ,KAAK,MAAM,CAAE,QAAO,OAAO,MAAM;AAC1E,QAAO;;;AAIR,MAAM,kBACL,MACA,QACyD;AACzD,SAAQ,KAAK,MAAb;EACC,KAAK,YACJ,QAAO,wBAAwB;GAC9B,MAAM,KAAK;GAIX,gBAAgB,GAAG,IAAI,YAAY,WAAW,KAAK,KAAK;GACxD,CAAC;EACH,KAAK,WACJ,QAAO,uBAAuB;GAC7B,MAAM,KAAK;GACX,MAAM,KAAK;GACX,gBAAgB,KAAK;GACrB,CAAC;EACH,KAAK,MACJ,QAAO,kBAAkB;GACxB,MAAM,KAAK;GACX,SAAS,KAAK;GACd,CAAC;EACH,KAAK,SACJ,QAAO,qBAAqB;GAC3B,MAAM,KAAK;GACX,YAAY,KAAK;GACjB,CAAC;EACH,KAAK,SACJ,QAAO,qBAAqB;GAC3B,MAAM,KAAK;GACX,QAAQ,KAAK;GACb,GAAI,KAAK,oBAAoB,KAAA,IAAY,EAAE,iBAAiB,KAAK,iBAAiB,GAAG,EAAE;GACvF,CAAC;EACH,KAAK,cACJ,QAAO,0BAA0B;GAChC,MAAM,KAAK;GACX,SAAS,KAAK;GACd,SAAS,IAAI,IAAI;GACjB,CAAC;;;;;;;AAYL,MAAM,YACL,QAKA,IACA,aACA,YAEA,OAAO,WAAW;CACjB,WAAW,OAAO,gBAAgB,GAAG;CACrC,QAAQ,UACP,iBAAiB;EAChB,OAAO;EACP;EACA;EACA,SAAS,YAAY,YAAY;EACjC;EACA,CAAC;CACH,CAAC;AAEH,MAAM,oBACL,QAKA,KACA,aACA,YAEA,OAAO,WAAW;CACjB,WAAW,OAAO,oBAAoB,IAAI;CAC1C,QAAQ,UACP,iBAAiB;EAChB,OAAO;EACP;EACA;EACA,SAAS,YAAY,YAAY;EACjC;EACA,CAAC;CACH,CAAC;;;;;AAMH,MAAM,mBACL,KACA,aACA,YAEA,OAAO,IAAI,aAAa;CAOvB,MAAM,IAAI;AAaV,KAAI,EAAE,UAAU,qBAAqB;EACpC,MAAM,SAAS,EAAE,qBAAqB,EAAE;AACxC,MAAI,OAAO,WAAW,KAAA,EACrB,QAAO,OAAO,OAAO,KACpB,iBAAiB;GAChB,OAAO;GACP;GACA;GACA,SACC,YAAY,YAAY,gGAErB,KAAK,UAAU,EAAE,CAAC,MAAM,GAAG,IAAI;GACnC,CAAC,CACF;EAEF,MAAM,WAAW,OAAO,QAAQ;EAChC,MAAM,iBACL,OAAO,aAAa,WACjB,WACA,OAAO,aAAa,YACnB,aAAa,QACb,aAAa,YACb,OAAO,SAAS,YAAY,WAC5B,SAAS,UACT,KAAA;AACL,SAAO;GACN,OAAO;GACP,mBAAmB;IAClB,QAAQ,OAAO;IACf,GAAI,mBAAmB,KAAA,IAAY,EAAE,gBAAgB,GAAG,EAAE;IAC1D;GACD;;CAEF,MAAM,KAAK,EAAE;AACb,KAAI,IAAI,WAAW,KAAA,EAClB,QAAO,OAAO,OAAO,KACpB,iBAAiB;EAChB,OAAO;EACP;EACA;EACA,SACC,YAAY,YAAY,4HAErB,KAAK,UAAU,EAAE,CAAC,MAAM,GAAG,IAAI;EACnC,CAAC,CACF;AAEF,QAAO;EACN,OAAO;EACP,aAAa;GACZ,QAAQ,GAAG;GACX,SAAS,GAAG,WAAW;GACvB,eAAe,qBAAqB,GAAG,SAAS,GAAG,eAAe,EAAE,CAAC;GACrE,gBAAgB,GAAG,kBAAkB,EAAE;GACvC;EACD;EACA;AAEH,MAAM,wBACL,SACA,gBAC4B;CAC5B,MAAM,iBACL,OAAO,YAAY,YAAY,YAAY,QAAQ,oBAAoB,UAEpE,QAOC,iBACD,KAAA;AACJ,KAAI,mBAAmB,KAAA,EAAW,QAAO,EAAE;AAC3C,QAAO,eACL,QAEC,WAKI,OAAO,OAAO,aAAa,SAChC,CACA,KAAK,WAAW;EAChB,MAAM,aAAa,YAAY,OAAO;EACtC,MAAM,QAMF;GACH,MACC,OAAO,gBAAgB,iBACpB,cACA,OAAO,gBAAgB,YACtB,YACA;GACL,UAAU,OAAO;GACjB;AACD,MAAI,eAAe,KAAA,EAAW,OAAM,aAAa;AACjD,MAAI,OAAO,gBAAgB,KAAA,EAAW,OAAM,cAAc,OAAO;AACjE,MAAI,OAAO,gBAAgB,KAAA,EAAW,OAAM,cAAc,OAAO;AACjE,SAAO;GACN;;AAWJ,MAAM,iBACL,SAII;CACJ,MAAM,EAAE,aAAa,UAAU,KAAK,QAAQ,WAAW;AAMvD,KAAI,WAAW,eAAe;EAC7B,MAAM,eACL,OAAO,KACN,iBAAiB;GAChB,OAAO;GACP;GACA,SAAS,SAAS;GAClB,SAAS,YAAY,YAAY;GACjC,CAAC,CACF;EACF,MAAM,0BAAsE,OAC3E,OAAO,IAAI,aAAa;GACvB,MAAM,OAAO,IAAI,QAAQ;AACzB,OAAI,SAAS,KACZ,QAAO,OAAO,OAAO,KACpB,iBAAiB;IAChB,OAAO;IACP;IACA,SAAS,SAAS;IAClB,SAAS,YAAY,YAAY;IACjC,CAAC,CACF;GAEF,MAAM,YAAY,OAAO,KAAK,YAAY,SAAS,SAAS,GAAG,CAAC,KAC/D,OAAO,UACL,UACA,iBAAiB;IAChB,OAAO;IACP;IACA,SAAS,SAAS;IAClB,SAAS,YAAY,YAAY;IACjC;IACA,CAAC,CACH,CACD;AACD,UAAO,OAAO,WAAW;IACxB,WACC,IAAI,IAAI,KAAK,mBAAmB,EAC/B,QAAQ,UAAU,QAClB,CAAC;IACH,QAAQ,UACP,iBAAiB;KAChB,OAAO;KACP;KACA,SAAS,SAAS;KAClB,SAAS,YAAY,YAAY,wBAAwB,UAAU,OAAO;KAC1E;KACA,CAAC;IACH,CAAC;AACF,UAAO,OAAO,gBAAgB,UAAU,KAAK,aAAa,SAAS,QAAQ;IAC1E;EACH,MAAM,oBAA8C;GACnD,iBAAiB;GACjB,gBAAgB;GAChB;EACD,MAAM,yBAAgE,SACrE,iBACC,QACA,aACA,SAAS,SACT,OAAO,IAAI,aAAa;AACvB,UAAO,OAAO,KAAK,kBAAkB;IACpC,CACF,CAAC,KACD,OAAO,SAAS,6CAA6C,EAC5D,YAAY;IACV,aAAa,OAAO;IACpB,aAAa,UAAU,SAAS;GACjC,EACD,CAAC,CACF;AACF,SAAO;GACN,iBAAiB,OAChB,uBAAuB,WAAW,OAAO,eAAe,GAAG,CAAC,CAAC,KAC5D,OAAO,SAAS,0CAA0C,EACzD,YAAY;KACV,aAAa,OAAO;KACpB,aAAa,UAAU,SAAS;IACjC,EACD,CAAC,CACF;GACF;GACA,iBAAiB;GACjB,qBAAqB;GACrB;;CAMF,MAAM,SAAS,SAAS;CAExB,MAAM,2BAAwE,OAC7E,SAAS,QAAQ,IAAI,aAAa,SAAS,QAAQ;CAEpD,MAAM,0BAAsE,OAC3E,OAAO,IAAI,aAAa;EACvB,MAAM,SAA6B,OAAO,wBAAwB,GAAG;EACrE,MAAM,MAAM,OAAO,OAAO,WAAW;GACpC,WACC,IAAI,IAAI,KAAK,mBAAmB;IAC/B,aAAa;IACb,YAAY,CAAC,OAAO,UAAU;IAC9B,SAAS;KAAE,SAAS;KAAM,aAAa;KAAM;IAC7C,CAAC;GACH,QAAQ,UACP,iBAAiB;IAChB,OAAO;IACP;IACA,SAAS,SAAS;IAClB,SAAS,YAAY,YAAY;IACjC;IACA,CAAC;GACH,CAAC;EACF,MAAM,SAAS,qBAAqB,IAAI;AACxC,MAAI,WAAW,KAAA,EACd,QAAO,OAAO,WAAW;GACxB,WACC,IAAI,IAAI,KAAK,mBAAmB,EAC/B,QACA,CAAC;GACH,QAAQ,UACP,iBAAiB;IAChB,OAAO;IACP;IACA,SAAS,SAAS;IAClB,SAAS,YAAY,YAAY,wBAAwB,OAAO;IAChE;IACA,CAAC;GACH,CAAC;AAEH,SAAO,OAAO,gBAAgB,KAAK,aAAa,SAAS,QAAQ;GAChE;CAEH,MAAM,oBAA8C;EACnD,iBAAiB;EACjB,gBAAgB;EAChB;CAED,MAAM,yBAAgE,SACrE,iBACC,QACA,aACA,SAAS,SACT,OAAO,IAAI,aAAa;AACvB,SAAO,OAAO,KAAK,kBAAkB;GACpC,CACF,CAAC,KACD,OAAO,SAAS,6CAA6C,EAC5D,YAAY;GACV,aAAa,OAAO;GACpB,aAAa,UAAU,SAAS;EACjC,EACD,CAAC,CACF;CAEF,MAAM,mBAAoD,OACzD,uBAAuB,WAAW,OAAO,gBAAgB,GAAG,CAAC,CAAC,KAC7D,OAAO,SAAS,2CAA2C,EAC1D,YAAY;GACV,aAAa,OAAO;GACpB,aAAa,UAAU,SAAS;EACjC,EACD,CAAC,CACF;CAEF,MAAM,uBAA4D,QACjE,iBACC,QACA,aACA,SAAS,SACT,iBAAiB,QAAQ,KAAK,aAAa,SAAS,QAAQ,CAC5D,CAAC,KACD,OAAO,SAAS,+CAA+C,EAC9D,YAAY;GACV,aAAa,OAAO;GACpB,aAAa,UAAU,SAAS;EACjC,EACD,CAAC,CACF;CAEF,MAAM,kBAAkD,OACvD,uBAAuB,WAAW,OAAO,eAAe,GAAG,CAAC,CAAC,KAC5D,OAAO,SAAS,0CAA0C,EACzD,YAAY;GACV,aAAa,OAAO;GACpB,aAAa,UAAU,SAAS;EACjC,EACD,CAAC,CACF;AAEF,QAAO;EAAE;EAAgB;EAAuB;EAAiB;EAAqB;;;;AASvF,MAAa,kBACZ,MACA,QAEA,OAAO,IAAI,aAAa;AACvB,QAAO,oBAAoB,KAAK,KAAK;AAErC,QAAO,OAAO,oBAAoB;GAChC,aAAa,OAAO,KAAK;GACzB,aAAa,UAAU,KAAK;GAC5B,SAAS,OAAO,IAAI,IAAI;EACzB,CAAC;CAGF,MAAM,WAAW,OAAO,eAAe,MAAM,IAAI;AAEjD,QAAO,OAAO,oBAAoB;GAChC,aAAa,UAAU,SAAS;GAChC,aAAa,SAAS,SAAS;EAChC,CAAC;CAMF,MAAM,SAAS,OAAO;CACtB,MAAM,gBAAgB,yBAAyB,IAAI,IAAI,KAAK,IAAI,IAAI,SAAS,OAAO;CAEpF,MAAM,iBACL,KAAK,SAAS,eAAe,KAAK,YAAY,KAAA,IAC3C;EACA,MAAM;EACN,cAAc;EACd,QAAQ;EACR,GACA;CACJ,MAAM,mBACL,mBAAmB,OACf,IAAI,oBAAoB,EAAE,GAC3B,CAAC,gBAAgB,GAAI,IAAI,oBAAoB,EAAE,CAAE;CACrD,MAAM,wBAA+C,EAAE;AAGvD,KAAI,mBAAmB,MAAM;EAM5B,MAAM,UAAU,OAAO,qBAAqB;GAC3C,aAAa,KAAK;GAClB,SAAS,SAAS;GAClB,YAAY,eAAe;GAC3B,SAAS,IAAI,IAAI;GACjB,SAAS,IAAI,IAAI;GACjB,wBAAwB,IAAI;GAC5B;GACA;GACA,CAAC;AACF,MAAI,YAAY,UACf,uBAAsB,KAAK;GAAE,GAAG;GAAgB;GAAS,CAAC;;CAI5D,MAAM,SAAiC,KAAK,SAAS,gBAAgB,gBAAgB;CACrF,MAAM,WAAW,cAAc;EAC9B,aAAa,KAAK;EAClB;EACA,KAAK,IAAI;EACT;EACA;EACA,CAAC;CAGF,MAAM,QAAsB;EAC3B,MAAM,KAAK;EACX,SAAS,SAAS;EAClB,QAAQ,SAAS;EACjB,WAAW,SAAS;EACpB;EACA,SAAS;GACR,WAAW;GACX,SAAS;GACT;EACD,GAAG;EACH;CAWD,MAAM,YAAY,IAAI,oBAAoB,EAAE;CAC5C,IAAI,6BAA6C,EAAE;AACnD,KAAI,UAAU,SAAS,EACtB,8BAA6B,OAAO,yBAAyB;EAC5D,aAAa,KAAK;EAClB,SAAS,SAAS;EAClB,SAAS,KAAK;EACd,SAAS;EACT,SAAS;EACT,SAAS,IAAI,IAAI;EACjB;EACA;EACA,CAAC;AAGH,QAAO;EACN,GAAG;EACH,SAAS;GACR,WAAW;GACX,SAAS,CAAC,GAAG,uBAAuB,GAAG,2BAA2B;GAClE;EACD;EACA"}
+{"version":3,"file":"service.mjs","names":[],"sources":["../../../src/plugins/account/service.ts"],"sourcesContent":["// Account plugin — service body (main acquire Effect).\n//\n// What this file does:\n//\n//   1. Validate the account name (12-account.md \"Name shape\"\n//      invariant) — strict charset, length-bounded. Loud-fail at\n//      the factory boundary.\n//   2. Dispatch on the variant discriminator to the right resolver\n//      under `variants/`.\n//   3. Coordinate the funding pass (default + cross-cutting).\n//   4. Project the resolved keypair into the user-facing\n//      `AccountValue` shape (sign + execute closures).\n//\n// What it does NOT do:\n//\n//   - Talk to the chain or the faucet directly — the variant\n//     resolvers + the funding helpers own those wires.\n//   - Wire the capabilities — that's the barrel's job (`index.ts`).\n//\n// Distilled-doc invariant (\"Acquisition vs signing error split\"):\n// the acquire body emits ONLY `AccountAcquireError`; the resolved\n// value's sign/execute closures emit `AccountSignError`. The two\n// channels never mix.\n//\n// Per-address serialization (architecture invariant): concurrent\n// account-bound transactions for the same address MUST serialize\n// across build + sign + execute. `Transaction.build({ client })`\n// resolves gas/object versions, so taking the lease only while\n// signing still lets two callers build stale object references. The\n// substrate's `LeaseBrokerService` is the L0 primitive: each\n// transaction scope opens a fresh lease keyed by `account:<address>`.\n// The public sign helpers are implemented in terms of that scope so\n// they keep the per-address serialization behavior.\n\nimport { Effect } from 'effect';\n\nimport type { Signer, SignatureWithBytes } from '@mysten/sui/cryptography';\n\nimport {\n\taccountAcquireError,\n\taccountSignError,\n\ttype AccountAcquireError,\n\ttype AccountSignError,\n} from './errors.ts';\nimport { type ResolvedKeypair } from './keypair.ts';\nimport {\n\tapplyCrossCuttingFunding,\n\tfundEphemeralDefault,\n\tDEFAULT_EPHEMERAL_FUND_MIST,\n\tSUI_FULL_COIN_TYPE,\n\ttype AccountFunding,\n\ttype AccountFundingResult,\n\ttype AppliedFunding,\n\ttype AppliedFundingEntry,\n\ttype FundingBalanceReader,\n\ttype ProjectedFunding,\n\ttype ProjectedFundingEntry,\n} from './funding.ts';\nimport { resolveEphemeralVariant } from './variants/ephemeral.ts';\nimport { resolveSignerVariant } from './variants/signer.ts';\nimport { resolveImpersonateVariant } from './variants/impersonate.ts';\nimport type { StrategyRegistryService } from '../../substrate/runtime/strategy-registry/service.ts';\nimport {\n\textractExecuteDigest,\n\ttype ExecutedFailure,\n\ttype TransactionSignerScope,\n\ttype ForkAdminSurface,\n\ttype SuiSdkShim,\n} from '../sui/index.ts';\nimport {\n\tLeaseBrokerService,\n\ttype LeaseBroker,\n} from '../../substrate/runtime/lease-broker/index.ts';\nimport { FUNDING_BALANCE_READ_TIMEOUT_MS } from '../../substrate/runtime/retry-policy.ts';\nimport { withAddressLease } from './lease.ts';\n\n// -----------------------------------------------------------------------------\n// User-facing options shape\n// -----------------------------------------------------------------------------\n\n/** The bring-your-own signer shape the `signer` variant binds. Any\n *  `@mysten/sui/cryptography` `Signer` satisfies it — including every\n *  `Keypair` (`Ed25519Keypair`, `Secp256k1Keypair`, `Secp256r1Keypair`),\n *  hardware wallets, and custom KMS adapters. The structural shape is\n *  pinned here rather than importing the SDK's `Signer` so the substrate\n *  import surface stays SDK-free; a real `Signer` is assignable to it. */\nexport interface AccountSignerInput {\n\treadonly toSuiAddress: () => string;\n\treadonly getKeyScheme: () => string;\n\treadonly getPublicKey: () => { readonly toRawBytes: () => Uint8Array };\n\treadonly signTransaction: (\n\t\ttx: Uint8Array,\n\t) => Promise<{ readonly bytes: string; readonly signature: string }>;\n\treadonly signPersonalMessage: (\n\t\tmsg: Uint8Array,\n\t) => Promise<{ readonly bytes: string; readonly signature: string }>;\n}\n\n/** Account variant discriminated union. The user-facing factory\n *  takes one of these shapes (or omits `opts` entirely for the\n *  default ephemeral form).\n *\n *  Three variants:\n *\n *   - `ephemeral` — generate-or-recover an Ed25519 keypair under the\n *     stack runtime root, funded by default. This is the bare-form\n *     default (`account('alice')`).\n *   - `signer` — the single bring-your-own door. Pass any\n *     `@mysten/sui/cryptography` `Signer` (hardware wallet, KMS\n *     adapter, dApp signer) or any `Keypair`. Loading a secret from an\n *     env var or an inline `suiprivkey1...` literal is expressed by\n *     building the `Keypair` yourself, e.g.\n *     `{ kind: 'signer', signer: Ed25519Keypair.fromSecretKey(process.env.X) }`.\n *   - `impersonate` — fork-mode only: execute AS a seeded address with\n *     no secret material (sign-and-execute routes through the fork's\n *     impersonation submit path). */\nexport type AccountOptions<Funding extends AccountFunding = AccountFunding> =\n\t| {\n\t\t\treadonly kind: 'ephemeral';\n\t\t\treadonly funding?: Funding;\n\t  }\n\t| {\n\t\t\treadonly kind: 'signer';\n\t\t\treadonly signer: AccountSignerInput;\n\t\t\treadonly addressOverride?: string;\n\t\t\treadonly funding?: Funding;\n\t  }\n\t| {\n\t\t\treadonly kind: 'impersonate';\n\t\t\treadonly address: string;\n\t\t\treadonly funding?: Funding;\n\t  };\n\nexport type ResolvedAccountOptions<Funding extends AccountFunding = AccountFunding> =\n\tAccountOptions<Funding> & { readonly name: string };\n\n// -----------------------------------------------------------------------------\n// Resolved value (the Tag's resolved-shape)\n// -----------------------------------------------------------------------------\n\n/** Per-account resolved value — the typed handle the Account tag\n *  publishes.\n *\n *  Architecture-distilled finding (12-account.md \"Tighten the\n *  resolved-account type\"): the `source` discriminator is mandatory\n *  so consumers can branch on impersonation. Impersonation accounts\n *  carry a zero-buffer publicKey — the discriminator is the\n *  trustworthy signal. */\nexport interface AccountValue {\n\treadonly name: string;\n\treadonly address: string;\n\treadonly scheme: 'ed25519' | 'secp256k1' | 'secp256r1';\n\treadonly publicKey: Uint8Array;\n\t/** Source discriminator — `'real'` for ephemeral / signer;\n\t *  `'impersonate'` for the fork-only variant. */\n\treadonly source: 'real' | 'impersonate';\n\t/** Sign + execute (the canonical execution surface — per-address\n\t *  serialized, post-submit transaction-wait included, bounded\n\t *  retry on the \"dependent package not found on-chain\" race).\n\t *\n\t *  For impersonation accounts, routes through Sui's fork\n\t *  admin `impersonate` surface; for real signers, routes\n\t *  through the SDK's executeTransaction surface. */\n\treadonly signAndExecute: (\n\t\ttx: Uint8Array,\n\t) => Effect.Effect<SignAndExecuteResult, AccountSignError>;\n\t/** Run a full account-bound transaction critical section.\n\t *  Callers that must serialize `Transaction.build({ client })`\n\t *  together with signing/execution use the signer passed to this\n\t *  callback; the callback runs while the per-address lease is held. */\n\treadonly withTransactionSigner: <A, E, R>(\n\t\tbody: (signer: AccountTransactionSigner) => Effect.Effect<A, E, R>,\n\t) => Effect.Effect<A, E, R>;\n\t/** Sign-only — real signers honor this; impersonation accounts\n\t *  throw synchronously (see `variants/impersonate.ts`). */\n\treadonly signTransaction: (\n\t\ttx: Uint8Array,\n\t) => Effect.Effect<{ readonly bytes: string; readonly signature: string }, AccountSignError>;\n\treadonly signPersonalMessage: (\n\t\tmsg: Uint8Array,\n\t) => Effect.Effect<{ readonly bytes: string; readonly signature: string }, AccountSignError>;\n\treadonly funding: AccountFundingResult;\n}\n\n/** Submit result projection — kept narrow so downstream consumers\n *  don't depend on the full @mysten/sui execute envelope. Populated\n *  only when the on-chain execution succeeded (the `'Transaction'`\n *  variant of `SignAndExecuteResult`). */\nexport interface TxResult {\n\treadonly digest: string;\n\treadonly effects: unknown;\n\treadonly objectChanges: ReadonlyArray<unknown>;\n\treadonly balanceChanges: ReadonlyArray<unknown>;\n}\n\n/** Outcome of `signAndExecute`. Mirrors the SDK's discriminated\n *  `SuiClientTypes.TransactionResult` shape — on-chain failures are\n *  a RETURN VALUE (callers dispatch on `$kind`), NOT an error. Only\n *  transport / lifecycle failures (sign refused, RPC unreachable,\n *  finality wait broke) surface through `AccountSignError`.\n *\n *  The on-chain `FailedTransaction` projection is the substrate\n *  `ExecutedFailure` shape — single source of truth lives in\n *  `plugins/sui/exec/index.ts`. An envelope without a\n *  digest fails at projection with `AccountSignError(phase: 'no-digest')`. */\nexport type SignAndExecuteResult =\n\t| { readonly $kind: 'Transaction'; readonly Transaction: TxResult }\n\t| { readonly $kind: 'FailedTransaction'; readonly FailedTransaction: ExecutedFailure };\n\nexport interface AccountTransactionSigner extends TransactionSignerScope<AccountSignError> {\n\treadonly signAndExecute: AccountValue['signAndExecute'];\n}\n\n// -----------------------------------------------------------------------------\n// Name validation\n// -----------------------------------------------------------------------------\n\n/** Architecture-distilled invariant: name flows into the resource id, an\n *  on-disk path, a manifest key, container labels, and generated\n *  TypeScript exports. Keep the public name identifier-safe instead\n *  of accepting path-safe spellings that codegen later rejects. */\nconst ACCOUNT_NAME_RE = /^[A-Za-z][A-Za-z0-9_]{0,63}$/;\nconst ACCOUNT_NAME_HINT =\n\t'letters, digits, and underscores; must start with a letter; max 64 chars; cannot be a TypeScript reserved word';\nconst TS_RESERVED_BINDING_NAMES = new Set([\n\t'as',\n\t'async',\n\t'await',\n\t'break',\n\t'case',\n\t'catch',\n\t'class',\n\t'const',\n\t'continue',\n\t'debugger',\n\t'default',\n\t'delete',\n\t'do',\n\t'else',\n\t'enum',\n\t'export',\n\t'extends',\n\t'false',\n\t'finally',\n\t'for',\n\t'from',\n\t'function',\n\t'if',\n\t'import',\n\t'in',\n\t'instanceof',\n\t'let',\n\t'new',\n\t'null',\n\t'of',\n\t'return',\n\t'super',\n\t'switch',\n\t'this',\n\t'throw',\n\t'true',\n\t'try',\n\t'typeof',\n\t'var',\n\t'void',\n\t'while',\n\t'with',\n\t'yield',\n]);\n\nconst accountNameInvalidReason = (name: string): string | null => {\n\tif (!ACCOUNT_NAME_RE.test(name)) {\n\t\treturn `must match ${ACCOUNT_NAME_RE.source}`;\n\t}\n\tif (TS_RESERVED_BINDING_NAMES.has(name)) {\n\t\treturn 'cannot be a TypeScript reserved word';\n\t}\n\treturn null;\n};\n\nexport const assertAccountName = (name: string): void => {\n\tconst reason = accountNameInvalidReason(name);\n\tif (reason !== null) {\n\t\tthrow new TypeError(`Account name '${name}' is invalid — ${reason}. ${ACCOUNT_NAME_HINT}`);\n\t}\n};\n\nexport const validateAccountName = (name: string): Effect.Effect<void, AccountAcquireError> => {\n\tconst reason = accountNameInvalidReason(name);\n\tif (reason !== null) {\n\t\treturn Effect.fail(\n\t\t\taccountAcquireError({\n\t\t\t\tphase: 'validate-name',\n\t\t\t\taccountName: name,\n\t\t\t\tvariant: 'ephemeral',\n\t\t\t\tmessage: `Account name '${name}' is invalid — ${reason}.`,\n\t\t\t\thint: ACCOUNT_NAME_HINT,\n\t\t\t}),\n\t\t);\n\t}\n\treturn Effect.void;\n};\n\n// -----------------------------------------------------------------------------\n// Variant dispatch\n// -----------------------------------------------------------------------------\n\n/** Sui mode + sdk shim — the slice of the resolved `SuiClient` the\n *  account service actually consumes. Kept narrow so the variants +\n *  funding helpers stay typed at the resolved-fields level (mode,\n *  chainId, sdk) rather than at the wide `SuiClient` shape. */\nexport interface AccountSuiShim {\n\treadonly mode: 'local' | 'local-rpc' | 'live' | 'fork';\n\treadonly chainId: string;\n\t/** SDK shim — exposes `executeTransaction` + `waitForTransaction`\n\t *  for the signAndExecute pipeline. */\n\treadonly sdk: SuiSdkShim;\n\treadonly fork?: ForkAdminSurface | null;\n}\n\n/** Per-acquire context — supplied by the barrel from resolved plugin\n *  dependencies and per-stack identity.\n *\n *  `projectedFunding` carries the funding entries already resolved\n *  from each `opts.funding[i].coin` dependency and projected to\n *  `{fullCoinType, amount}` BEFORE handing off to `acquireAccount`.\n *  The acquire body never sees the raw member refs — keeps the\n *  cross-cutting funding dispatch substrate-name-blind. */\nexport interface AccountAcquireContext {\n\treadonly sui: AccountSuiShim;\n\treadonly runtimeRoot: string;\n\treadonly app: string;\n\treadonly stack: string;\n\treadonly emitAutoPromotionEvent: () => Effect.Effect<void>;\n\t/** Projected cross-cutting funding entries. Empty when `opts.funding`\n\t *  is absent. The barrel stamps each resolved coin dependency's\n\t *  `fullCoinType` here. */\n\treadonly projectedFunding?: ProjectedFunding;\n}\n\n/** Sum an owner's coin balances for `coinType` via `listCoins`. Used in\n *  fork mode, where `getBalance` / `listBalances` panic under the fork\n *  guard — `listCoins` is the only balance-bearing read fork mode allows. */\nconst sumBalanceViaListCoins = async (\n\tsdk: SuiSdkShim,\n\towner: string,\n\tcoinType: string | undefined,\n): Promise<bigint> => {\n\tlet total = 0n;\n\tlet cursor: string | null = null;\n\tdo {\n\t\tconst page = await sdk.core.listCoins({\n\t\t\towner,\n\t\t\tcoinType: coinType ?? '0x2::sui::SUI',\n\t\t\tcursor,\n\t\t\tlimit: 200,\n\t\t});\n\t\tfor (const coin of page.objects) {\n\t\t\ttotal += BigInt(coin.balance);\n\t\t}\n\t\tcursor = page.hasNextPage ? page.cursor : null;\n\t} while (cursor !== null);\n\treturn total;\n};\n\nconst makeFundingBalanceReader = (sdk: SuiSdkShim, forkMode: boolean): FundingBalanceReader => ({\n\treadBalance: ({ owner, coinType }) =>\n\t\tEffect.promise(async () => {\n\t\t\ttry {\n\t\t\t\t// Fork mode forbids getBalance/listBalances (they panic under the\n\t\t\t\t// fork guard); sum coins via the fork-safe listCoins instead.\n\t\t\t\treturn forkMode\n\t\t\t\t\t? await sumBalanceViaListCoins(sdk, owner, coinType)\n\t\t\t\t\t: balanceAmountFromSdkResponse(await sdk.core.getBalance({ owner, coinType }));\n\t\t\t} catch {\n\t\t\t\treturn null;\n\t\t\t}\n\t\t}).pipe(\n\t\t\tEffect.timeoutOrElse({\n\t\t\t\tduration: `${FUNDING_BALANCE_READ_TIMEOUT_MS} millis`,\n\t\t\t\torElse: () => Effect.succeed(null),\n\t\t\t}),\n\t\t),\n});\n\nconst balanceAmountFromSdkResponse = (response: unknown): bigint | null => {\n\tconst outer =\n\t\ttypeof response === 'object' && response !== null && 'balance' in response\n\t\t\t? (response as { readonly balance?: unknown }).balance\n\t\t\t: response;\n\tconst value =\n\t\ttypeof outer === 'object' && outer !== null && 'balance' in outer\n\t\t\t? (outer as { readonly balance?: unknown }).balance\n\t\t\t: outer;\n\tif (typeof value === 'bigint') return value;\n\tif (typeof value === 'number' && Number.isSafeInteger(value) && value >= 0) return BigInt(value);\n\tif (typeof value === 'string' && /^\\d+$/.test(value)) return BigInt(value);\n\treturn null;\n};\n\n/** Dispatch on the variant discriminator. */\nconst resolveVariant = (\n\topts: ResolvedAccountOptions,\n\tctx: AccountAcquireContext,\n): Effect.Effect<ResolvedKeypair, AccountAcquireError> => {\n\tswitch (opts.kind) {\n\t\tcase 'ephemeral':\n\t\t\treturn resolveEphemeralVariant({\n\t\t\t\tname: opts.name,\n\t\t\t\t// Architecture-distilled (12-account.md \"Cross-component\n\t\t\t\t// references\"): persisted key lives under the stack's\n\t\t\t\t// runtime tree. Path shape mirrors the on-disk convention.\n\t\t\t\tsecretFilePath: `${ctx.runtimeRoot}/account/${opts.name}.key`,\n\t\t\t});\n\t\tcase 'signer':\n\t\t\treturn resolveSignerVariant({\n\t\t\t\tname: opts.name,\n\t\t\t\tsigner: opts.signer,\n\t\t\t\t...(opts.addressOverride !== undefined ? { addressOverride: opts.addressOverride } : {}),\n\t\t\t});\n\t\tcase 'impersonate':\n\t\t\treturn resolveImpersonateVariant({\n\t\t\t\tname: opts.name,\n\t\t\t\taddress: opts.address,\n\t\t\t\tsuiMode: ctx.sui.mode,\n\t\t\t});\n\t}\n};\n\n// -----------------------------------------------------------------------------\n// Sign + execute closures\n// -----------------------------------------------------------------------------\n\n/** Promote a Promise-returning sign call into the typed-error\n *  channel. The `signer.signTransaction` / `signPersonalMessage`\n *  helpers on `@mysten/sui` `Signer` instances are async; the\n *  bring-your-own-signer variant uses the same shape. */\nconst signWith = (\n\tsigner: {\n\t\treadonly signTransaction: (\n\t\t\ttx: Uint8Array,\n\t\t) => Promise<{ readonly bytes: string; readonly signature: string }>;\n\t},\n\ttx: Uint8Array,\n\taccountName: string,\n\taddress: string,\n): Effect.Effect<{ readonly bytes: string; readonly signature: string }, AccountSignError> =>\n\tEffect.tryPromise({\n\t\ttry: () => signer.signTransaction(tx),\n\t\tcatch: (cause): AccountSignError =>\n\t\t\taccountSignError({\n\t\t\t\tphase: 'sign',\n\t\t\t\taccountName,\n\t\t\t\taddress,\n\t\t\t\tmessage: `Account '${accountName}': signer.signTransaction() rejected.`,\n\t\t\t\tcause,\n\t\t\t}),\n\t});\n\nconst signPersonalWith = (\n\tsigner: {\n\t\treadonly signPersonalMessage: (\n\t\t\tmsg: Uint8Array,\n\t\t) => Promise<{ readonly bytes: string; readonly signature: string }>;\n\t},\n\tmsg: Uint8Array,\n\taccountName: string,\n\taddress: string,\n): Effect.Effect<{ readonly bytes: string; readonly signature: string }, AccountSignError> =>\n\tEffect.tryPromise({\n\t\ttry: () => signer.signPersonalMessage(msg),\n\t\tcatch: (cause): AccountSignError =>\n\t\t\taccountSignError({\n\t\t\t\tphase: 'sign',\n\t\t\t\taccountName,\n\t\t\t\taddress,\n\t\t\t\tmessage: `Account '${accountName}': signer.signPersonalMessage() rejected.`,\n\t\t\t\tcause,\n\t\t\t}),\n\t});\n\n/** Project the raw `@mysten/sui` executeTransaction response into\n *  the narrowed `TxResult` shape consumers depend on. The SDK\n *  response carries a discriminated union; the result we surface\n *  always carries a digest plus the include-projected sub-fields. */\nconst projectTxResult = (\n\traw: unknown,\n\taccountName: string,\n\taddress: string,\n): Effect.Effect<SignAndExecuteResult, AccountSignError> =>\n\tEffect.gen(function* () {\n\t\t// The SDK's `SuiClientTypes.TransactionResult` is a discriminated\n\t\t// union — `{$kind: 'Transaction', Transaction: {...}}` or\n\t\t// `{$kind: 'FailedTransaction', FailedTransaction: {...}}` —\n\t\t// where each variant carries a non-optional `digest`. Mirror the\n\t\t// shape on-channel so callers dispatch on `$kind`; on-chain\n\t\t// failures are a RETURN VALUE, not an error.\n\t\tconst r = raw as {\n\t\t\t$kind?: 'Transaction' | 'FailedTransaction';\n\t\t\tTransaction?: {\n\t\t\t\tdigest?: string;\n\t\t\t\teffects?: unknown;\n\t\t\t\tobjectTypes?: Readonly<Record<string, string>>;\n\t\t\t\tbalanceChanges?: ReadonlyArray<unknown>;\n\t\t\t};\n\t\t\tFailedTransaction?: {\n\t\t\t\tdigest?: string;\n\t\t\t\tstatus?: { readonly error?: string | { readonly message?: string } };\n\t\t\t};\n\t\t};\n\t\tif (r.$kind === 'FailedTransaction') {\n\t\t\tconst failed = r.FailedTransaction ?? {};\n\t\t\tif (failed.digest === undefined) {\n\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\taccountSignError({\n\t\t\t\t\t\tphase: 'no-digest',\n\t\t\t\t\t\taccountName,\n\t\t\t\t\t\taddress,\n\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t`Account '${accountName}': executeTransaction returned a FailedTransaction ` +\n\t\t\t\t\t\t\t`without a digest — protocol violation, got ` +\n\t\t\t\t\t\t\t`${JSON.stringify(r).slice(0, 200)}`,\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst errorRaw = failed.status?.error;\n\t\t\tconst executionError =\n\t\t\t\ttypeof errorRaw === 'string'\n\t\t\t\t\t? errorRaw\n\t\t\t\t\t: typeof errorRaw === 'object' &&\n\t\t\t\t\t\t  errorRaw !== null &&\n\t\t\t\t\t\t  'message' in errorRaw &&\n\t\t\t\t\t\t  typeof errorRaw.message === 'string'\n\t\t\t\t\t\t? errorRaw.message\n\t\t\t\t\t\t: undefined;\n\t\t\treturn {\n\t\t\t\t$kind: 'FailedTransaction',\n\t\t\t\tFailedTransaction: {\n\t\t\t\t\tdigest: failed.digest,\n\t\t\t\t\t...(executionError !== undefined ? { executionError } : {}),\n\t\t\t\t},\n\t\t\t};\n\t\t}\n\t\tconst tx = r.Transaction;\n\t\tif (tx?.digest === undefined) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\taccountSignError({\n\t\t\t\t\tphase: 'no-digest',\n\t\t\t\t\taccountName,\n\t\t\t\t\taddress,\n\t\t\t\t\tmessage:\n\t\t\t\t\t\t`Account '${accountName}': executeTransaction returned a malformed envelope — ` +\n\t\t\t\t\t\t`expected $kind:'Transaction'|'FailedTransaction' with a digest, got ` +\n\t\t\t\t\t\t`${JSON.stringify(r).slice(0, 200)}`,\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\t\treturn {\n\t\t\t$kind: 'Transaction',\n\t\t\tTransaction: {\n\t\t\t\tdigest: tx.digest,\n\t\t\t\teffects: tx.effects ?? null,\n\t\t\t\tobjectChanges: projectObjectChanges(tx.effects, tx.objectTypes ?? {}),\n\t\t\t\tbalanceChanges: tx.balanceChanges ?? [],\n\t\t\t},\n\t\t};\n\t});\n\nconst projectObjectChanges = (\n\teffects: unknown,\n\tobjectTypes: Readonly<Record<string, string>>,\n): ReadonlyArray<unknown> => {\n\tconst changedObjects =\n\t\ttypeof effects === 'object' && effects !== null && 'changedObjects' in effects\n\t\t\t? (\n\t\t\t\t\teffects as {\n\t\t\t\t\t\treadonly changedObjects?: ReadonlyArray<{\n\t\t\t\t\t\t\treadonly objectId?: string;\n\t\t\t\t\t\t\treadonly outputState?: string;\n\t\t\t\t\t\t\treadonly idOperation?: string;\n\t\t\t\t\t\t}>;\n\t\t\t\t\t}\n\t\t\t\t).changedObjects\n\t\t\t: undefined;\n\tif (changedObjects === undefined) return [];\n\treturn changedObjects\n\t\t.filter(\n\t\t\t(\n\t\t\t\tchange,\n\t\t\t): change is {\n\t\t\t\treadonly objectId: string;\n\t\t\t\treadonly outputState?: string;\n\t\t\t\treadonly idOperation?: string;\n\t\t\t} => typeof change.objectId === 'string',\n\t\t)\n\t\t.map((change) => {\n\t\t\tconst objectType = objectTypes[change.objectId];\n\t\t\tconst entry: {\n\t\t\t\ttype: 'published' | 'created' | 'mutated';\n\t\t\t\tobjectId: string;\n\t\t\t\tobjectType?: string;\n\t\t\t\toutputState?: string;\n\t\t\t\tidOperation?: string;\n\t\t\t} = {\n\t\t\t\ttype:\n\t\t\t\t\tchange.outputState === 'PackageWrite'\n\t\t\t\t\t\t? 'published'\n\t\t\t\t\t\t: change.idOperation === 'Created'\n\t\t\t\t\t\t\t? 'created'\n\t\t\t\t\t\t\t: 'mutated',\n\t\t\t\tobjectId: change.objectId,\n\t\t\t};\n\t\t\tif (objectType !== undefined) entry.objectType = objectType;\n\t\t\tif (change.outputState !== undefined) entry.outputState = change.outputState;\n\t\t\tif (change.idOperation !== undefined) entry.idOperation = change.idOperation;\n\t\t\treturn entry;\n\t\t});\n};\n\ninterface BuildClosuresArgs {\n\treadonly accountName: string;\n\treadonly resolved: ResolvedKeypair;\n\treadonly sui: AccountSuiShim;\n\treadonly broker: LeaseBroker;\n\treadonly source: 'real' | 'impersonate';\n}\n\nconst buildClosures = (\n\targs: BuildClosuresArgs,\n): Pick<\n\tAccountValue,\n\t'signAndExecute' | 'withTransactionSigner' | 'signTransaction' | 'signPersonalMessage'\n> => {\n\tconst { accountName, resolved, sui, broker, source } = args;\n\n\t// Impersonation accounts MUST NOT sign — the synthetic signer's\n\t// signTransaction throws synchronously (architecture invariant).\n\t// signAndExecute routes through sui-fork's empty-signature\n\t// execution path while still holding the per-address lease.\n\tif (source === 'impersonate') {\n\t\tconst refuse = <A>(): Effect.Effect<A, AccountSignError> =>\n\t\t\tEffect.fail(\n\t\t\t\taccountSignError({\n\t\t\t\t\tphase: 'impersonation-bypass-attempt',\n\t\t\t\t\taccountName,\n\t\t\t\t\taddress: resolved.address,\n\t\t\t\t\tmessage: `Account '${accountName}' is an impersonation account — sign/execute must route through Sui's fork admin surface.`,\n\t\t\t\t}),\n\t\t\t);\n\t\tconst unlockedSignAndExecute: AccountTransactionSigner['signAndExecute'] = (tx) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst fork = sui.fork ?? null;\n\t\t\t\tif (fork === null) {\n\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\taccountSignError({\n\t\t\t\t\t\t\tphase: 'submit',\n\t\t\t\t\t\t\taccountName,\n\t\t\t\t\t\t\taddress: resolved.address,\n\t\t\t\t\t\t\tmessage: `Account '${accountName}': impersonation requires a fork-mode Sui client.`,\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tconst submitted = yield* fork.impersonate(resolved.address, tx).pipe(\n\t\t\t\t\tEffect.mapError(\n\t\t\t\t\t\t(cause): AccountSignError =>\n\t\t\t\t\t\t\taccountSignError({\n\t\t\t\t\t\t\t\tphase: 'submit',\n\t\t\t\t\t\t\t\taccountName,\n\t\t\t\t\t\t\t\taddress: resolved.address,\n\t\t\t\t\t\t\t\tmessage: `Account '${accountName}': fork impersonation submit failed.`,\n\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\tyield* Effect.tryPromise({\n\t\t\t\t\ttry: () =>\n\t\t\t\t\t\tsui.sdk.core.waitForTransaction({\n\t\t\t\t\t\t\tdigest: submitted.digest,\n\t\t\t\t\t\t}),\n\t\t\t\t\tcatch: (cause): AccountSignError =>\n\t\t\t\t\t\taccountSignError({\n\t\t\t\t\t\t\tphase: 'await-finality',\n\t\t\t\t\t\t\taccountName,\n\t\t\t\t\t\t\taddress: resolved.address,\n\t\t\t\t\t\t\tmessage: `Account '${accountName}': waitForTransaction(${submitted.digest}) failed.`,\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t}),\n\t\t\t\t});\n\t\t\t\treturn yield* projectTxResult(submitted.raw, accountName, resolved.address);\n\t\t\t});\n\t\tconst transactionSigner: AccountTransactionSigner = {\n\t\t\tsignTransaction: refuse<{ readonly bytes: string; readonly signature: string }>,\n\t\t\tsignAndExecute: unlockedSignAndExecute,\n\t\t};\n\t\tconst withTransactionSigner: AccountValue['withTransactionSigner'] = (body) =>\n\t\t\twithAddressLease(\n\t\t\t\tbroker,\n\t\t\t\taccountName,\n\t\t\t\tresolved.address,\n\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\treturn yield* body(transactionSigner);\n\t\t\t\t}),\n\t\t\t);\n\t\treturn {\n\t\t\tsignAndExecute: (tx) => withTransactionSigner((locked) => locked.signAndExecute(tx)),\n\t\t\twithTransactionSigner,\n\t\t\tsignTransaction: refuse<{ readonly bytes: string; readonly signature: string }>,\n\t\t\tsignPersonalMessage: refuse<{ readonly bytes: string; readonly signature: string }>,\n\t\t};\n\t}\n\n\t// Both real-keypair and bring-your-own-signer paths satisfy the\n\t// minimal `signTransaction` / `signPersonalMessage` shape (the\n\t// SDK's `Signer` and the BYO `signer` declaration agree on it).\n\tconst signer = resolved.signer as Pick<Signer, 'signTransaction' | 'signPersonalMessage'>;\n\n\tconst unlockedSignTransaction: AccountTransactionSigner['signTransaction'] = (tx) =>\n\t\tsignWith(signer, tx, accountName, resolved.address);\n\n\tconst unlockedSignAndExecute: AccountTransactionSigner['signAndExecute'] = (tx) =>\n\t\tEffect.gen(function* () {\n\t\t\tconst signed: SignatureWithBytes = yield* unlockedSignTransaction(tx);\n\t\t\tconst raw = yield* Effect.tryPromise({\n\t\t\t\ttry: () =>\n\t\t\t\t\tsui.sdk.core.executeTransaction({\n\t\t\t\t\t\ttransaction: tx,\n\t\t\t\t\t\tsignatures: [signed.signature],\n\t\t\t\t\t\tinclude: { effects: true, objectTypes: true },\n\t\t\t\t\t}),\n\t\t\t\tcatch: (cause): AccountSignError =>\n\t\t\t\t\taccountSignError({\n\t\t\t\t\t\tphase: 'submit',\n\t\t\t\t\t\taccountName,\n\t\t\t\t\t\taddress: resolved.address,\n\t\t\t\t\t\tmessage: `Account '${accountName}': executeTransaction transport failed.`,\n\t\t\t\t\t\tcause,\n\t\t\t\t\t}),\n\t\t\t});\n\t\t\tconst digest = extractExecuteDigest(raw);\n\t\t\tif (digest !== undefined) {\n\t\t\t\tyield* Effect.tryPromise({\n\t\t\t\t\ttry: () =>\n\t\t\t\t\t\tsui.sdk.core.waitForTransaction({\n\t\t\t\t\t\t\tdigest,\n\t\t\t\t\t\t}),\n\t\t\t\t\tcatch: (cause): AccountSignError =>\n\t\t\t\t\t\taccountSignError({\n\t\t\t\t\t\t\tphase: 'await-finality',\n\t\t\t\t\t\t\taccountName,\n\t\t\t\t\t\t\taddress: resolved.address,\n\t\t\t\t\t\t\tmessage: `Account '${accountName}': waitForTransaction(${digest}) failed.`,\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t}),\n\t\t\t\t});\n\t\t\t}\n\t\t\treturn yield* projectTxResult(raw, accountName, resolved.address);\n\t\t});\n\n\tconst transactionSigner: AccountTransactionSigner = {\n\t\tsignTransaction: unlockedSignTransaction,\n\t\tsignAndExecute: unlockedSignAndExecute,\n\t};\n\n\tconst withTransactionSigner: AccountValue['withTransactionSigner'] = (body) =>\n\t\twithAddressLease(\n\t\t\tbroker,\n\t\t\taccountName,\n\t\t\tresolved.address,\n\t\t\tEffect.gen(function* () {\n\t\t\t\treturn yield* body(transactionSigner);\n\t\t\t}),\n\t\t);\n\n\tconst signTransaction: AccountValue['signTransaction'] = (tx) =>\n\t\twithTransactionSigner((locked) => locked.signTransaction(tx));\n\n\tconst signPersonalMessage: AccountValue['signPersonalMessage'] = (msg) =>\n\t\twithAddressLease(\n\t\t\tbroker,\n\t\t\taccountName,\n\t\t\tresolved.address,\n\t\t\tsignPersonalWith(signer, msg, accountName, resolved.address),\n\t\t);\n\n\tconst signAndExecute: AccountValue['signAndExecute'] = (tx) =>\n\t\twithTransactionSigner((locked) => locked.signAndExecute(tx));\n\n\treturn { signAndExecute, withTransactionSigner, signTransaction, signPersonalMessage };\n};\n\n// -----------------------------------------------------------------------------\n// Acquire orchestration\n// -----------------------------------------------------------------------------\n\n/** Acquire an account. Coordinates variant dispatch + funding +\n *  the resolved-value projection. */\nexport const acquireAccount = (\n\topts: ResolvedAccountOptions,\n\tctx: AccountAcquireContext,\n): Effect.Effect<AccountValue, AccountAcquireError, StrategyRegistryService | LeaseBrokerService> =>\n\tEffect.gen(function* () {\n\t\tyield* validateAccountName(opts.name);\n\n\t\t// --- variant dispatch ----------------------------------------\n\t\tconst resolved = yield* resolveVariant(opts, ctx);\n\n\t\t// --- lease broker handle (captured once; both funding and the\n\t\t//     resolved-value closures share this handle so concurrent\n\t\t//     callers serialize through the substrate broker's per-key\n\t\t//     FIFO queue) -------------------------------------------\n\t\tconst broker = yield* LeaseBrokerService;\n\t\tconst balanceReader = makeFundingBalanceReader(ctx.sui.sdk, ctx.sui.mode === 'fork');\n\n\t\tconst defaultFunding: ProjectedFundingEntry | null =\n\t\t\topts.kind === 'ephemeral' && opts.funding === undefined\n\t\t\t\t? {\n\t\t\t\t\t\tcoin: 'SUI',\n\t\t\t\t\t\tfullCoinType: SUI_FULL_COIN_TYPE,\n\t\t\t\t\t\tamount: DEFAULT_EPHEMERAL_FUND_MIST,\n\t\t\t\t\t}\n\t\t\t\t: null;\n\t\tconst requestedFunding =\n\t\t\tdefaultFunding === null\n\t\t\t\t? (ctx.projectedFunding ?? [])\n\t\t\t\t: [defaultFunding, ...(ctx.projectedFunding ?? [])];\n\t\tconst appliedDefaultFunding: AppliedFundingEntry[] = [];\n\n\t\t// --- default funding (bare ephemeral only) -------------------\n\t\tif (defaultFunding !== null) {\n\t\t\t// Outcome distinguishes a real faucet call (`'funded'`) from\n\t\t\t// the pre-existing-balance short-circuit (`'already-satisfied'`),\n\t\t\t// so the registry projection doesn't mislabel a no-faucet-call\n\t\t\t// entry as funded. `'skipped'` (zero amount) drops out entirely\n\t\t\t// per the same invariant as the cross-cutting pass.\n\t\t\tconst outcome = yield* fundEphemeralDefault({\n\t\t\t\taccountName: opts.name,\n\t\t\t\taddress: resolved.address,\n\t\t\t\tamountMist: defaultFunding.amount,\n\t\t\t\tsuiMode: ctx.sui.mode,\n\t\t\t\tchainId: ctx.sui.chainId,\n\t\t\t\temitAutoPromotionEvent: ctx.emitAutoPromotionEvent,\n\t\t\t\tbroker,\n\t\t\t\tbalanceReader,\n\t\t\t});\n\t\t\tif (outcome !== 'skipped') {\n\t\t\t\tappliedDefaultFunding.push({ ...defaultFunding, outcome });\n\t\t\t}\n\t\t}\n\n\t\tconst source: AccountValue['source'] = opts.kind === 'impersonate' ? 'impersonate' : 'real';\n\t\tconst closures = buildClosures({\n\t\t\taccountName: opts.name,\n\t\t\tresolved,\n\t\t\tsui: ctx.sui,\n\t\t\tbroker,\n\t\t\tsource,\n\t\t});\n\n\t\t// --- project the resolved value ------------------------------\n\t\tconst value: AccountValue = {\n\t\t\tname: opts.name,\n\t\t\taddress: resolved.address,\n\t\t\tscheme: resolved.scheme,\n\t\t\tpublicKey: resolved.publicKey,\n\t\t\tsource,\n\t\t\tfunding: {\n\t\t\t\trequested: requestedFunding,\n\t\t\t\tapplied: appliedDefaultFunding,\n\t\t\t},\n\t\t\t...closures,\n\t\t};\n\n\t\t// --- cross-cutting funding (all variants) --------------------\n\t\t//\n\t\t// The barrel pre-projects each user-supplied `CoinMember` to\n\t\t// `{fullCoinType, amount}` from resolved dependencies so this\n\t\t// dispatch stays substrate-name-blind. The resolved account\n\t\t// handle is passed so strategy providers without admin\n\t\t// capabilities can sign account-owned funding swaps. Missing /\n\t\t// empty `projectedFunding` is a no-op (matches the \"Optional\n\t\t// Faucet is a noop\" invariant).\n\t\tconst projected = ctx.projectedFunding ?? [];\n\t\tlet appliedCrossCuttingFunding: AppliedFunding = [];\n\t\tif (projected.length > 0) {\n\t\t\tappliedCrossCuttingFunding = yield* applyCrossCuttingFunding({\n\t\t\t\taccountName: opts.name,\n\t\t\t\taddress: resolved.address,\n\t\t\t\tvariant: opts.kind,\n\t\t\t\taccount: value,\n\t\t\t\tfunding: projected,\n\t\t\t\tchainId: ctx.sui.chainId,\n\t\t\t\tbroker,\n\t\t\t\tbalanceReader,\n\t\t\t});\n\t\t}\n\n\t\treturn {\n\t\t\t...value,\n\t\t\tfunding: {\n\t\t\t\trequested: requestedFunding,\n\t\t\t\tapplied: [...appliedDefaultFunding, ...appliedCrossCuttingFunding],\n\t\t\t},\n\t\t};\n\t});\n"],"mappings":";;;;;;;;;;;;;;;;;;AA6NA,MAAM,kBAAkB;AACxB,MAAM,oBACL;AACD,MAAM,4BAA4B,IAAI,IAAI;CACzC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AAED,MAAM,4BAA4B,SAAgC;CACjE,IAAI,CAAC,gBAAgB,KAAK,IAAI,GAC7B,OAAO,cAAc,gBAAgB;CAEtC,IAAI,0BAA0B,IAAI,IAAI,GACrC,OAAO;CAER,OAAO;AACR;AAEA,MAAa,qBAAqB,SAAuB;CACxD,MAAM,SAAS,yBAAyB,IAAI;CAC5C,IAAI,WAAW,MACd,MAAM,IAAI,UAAU,iBAAiB,KAAK,iBAAiB,OAAO,IAAI,mBAAmB;AAE3F;AAEA,MAAa,uBAAuB,SAA2D;CAC9F,MAAM,SAAS,yBAAyB,IAAI;CAC5C,IAAI,WAAW,MACd,OAAO,OAAO,KACb,oBAAoB;EACnB,OAAO;EACP,aAAa;EACb,SAAS;EACT,SAAS,iBAAiB,KAAK,iBAAiB,OAAO;EACvD,MAAM;CACP,CAAC,CACF;CAED,OAAO,OAAO;AACf;;;;AA0CA,MAAM,yBAAyB,OAC9B,KACA,OACA,aACqB;CACrB,IAAI,QAAQ;CACZ,IAAI,SAAwB;CAC5B,GAAG;EACF,MAAM,OAAO,MAAM,IAAI,KAAK,UAAU;GACrC;GACA,UAAU,YAAY;GACtB;GACA,OAAO;EACR,CAAC;EACD,KAAK,MAAM,QAAQ,KAAK,SACvB,SAAS,OAAO,KAAK,OAAO;EAE7B,SAAS,KAAK,cAAc,KAAK,SAAS;CAC3C,SAAS,WAAW;CACpB,OAAO;AACR;AAEA,MAAM,4BAA4B,KAAiB,cAA6C,EAC/F,cAAc,EAAE,OAAO,eACtB,OAAO,QAAQ,YAAY;CAC1B,IAAI;EAGH,OAAO,WACJ,MAAM,uBAAuB,KAAK,OAAO,QAAQ,IACjD,6BAA6B,MAAM,IAAI,KAAK,WAAW;GAAE;GAAO;EAAS,CAAC,CAAC;CAC/E,QAAQ;EACP,OAAO;CACR;AACD,CAAC,CAAC,CAAC,KACF,OAAO,cAAc;CACpB,UAAU,GAAG,gCAAgC;CAC7C,cAAc,OAAO,QAAQ,IAAI;AAClC,CAAC,CACF,EACF;AAEA,MAAM,gCAAgC,aAAqC;CAC1E,MAAM,QACL,OAAO,aAAa,YAAY,aAAa,QAAQ,aAAa,WAC9D,SAA4C,UAC7C;CACJ,MAAM,QACL,OAAO,UAAU,YAAY,UAAU,QAAQ,aAAa,QACxD,MAAyC,UAC1C;CACJ,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,IAAI,OAAO,UAAU,YAAY,OAAO,cAAc,KAAK,KAAK,SAAS,GAAG,OAAO,OAAO,KAAK;CAC/F,IAAI,OAAO,UAAU,YAAY,QAAQ,KAAK,KAAK,GAAG,OAAO,OAAO,KAAK;CACzE,OAAO;AACR;;AAGA,MAAM,kBACL,MACA,QACyD;CACzD,QAAQ,KAAK,MAAb;EACC,KAAK,aACJ,OAAO,wBAAwB;GAC9B,MAAM,KAAK;GAIX,gBAAgB,GAAG,IAAI,YAAY,WAAW,KAAK,KAAK;EACzD,CAAC;EACF,KAAK,UACJ,OAAO,qBAAqB;GAC3B,MAAM,KAAK;GACX,QAAQ,KAAK;GACb,GAAI,KAAK,oBAAoB,KAAA,IAAY,EAAE,iBAAiB,KAAK,gBAAgB,IAAI,CAAC;EACvF,CAAC;EACF,KAAK,eACJ,OAAO,0BAA0B;GAChC,MAAM,KAAK;GACX,SAAS,KAAK;GACd,SAAS,IAAI,IAAI;EAClB,CAAC;CACH;AACD;;;;;AAUA,MAAM,YACL,QAKA,IACA,aACA,YAEA,OAAO,WAAW;CACjB,WAAW,OAAO,gBAAgB,EAAE;CACpC,QAAQ,UACP,iBAAiB;EAChB,OAAO;EACP;EACA;EACA,SAAS,YAAY,YAAY;EACjC;CACD,CAAC;AACH,CAAC;AAEF,MAAM,oBACL,QAKA,KACA,aACA,YAEA,OAAO,WAAW;CACjB,WAAW,OAAO,oBAAoB,GAAG;CACzC,QAAQ,UACP,iBAAiB;EAChB,OAAO;EACP;EACA;EACA,SAAS,YAAY,YAAY;EACjC;CACD,CAAC;AACH,CAAC;;;;;AAMF,MAAM,mBACL,KACA,aACA,YAEA,OAAO,IAAI,aAAa;CAOvB,MAAM,IAAI;CAaV,IAAI,EAAE,UAAU,qBAAqB;EACpC,MAAM,SAAS,EAAE,qBAAqB,CAAC;EACvC,IAAI,OAAO,WAAW,KAAA,GACrB,OAAO,OAAO,OAAO,KACpB,iBAAiB;GAChB,OAAO;GACP;GACA;GACA,SACC,YAAY,YAAY,gGAErB,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG;EACnC,CAAC,CACF;EAED,MAAM,WAAW,OAAO,QAAQ;EAChC,MAAM,iBACL,OAAO,aAAa,WACjB,WACA,OAAO,aAAa,YACnB,aAAa,QACb,aAAa,YACb,OAAO,SAAS,YAAY,WAC5B,SAAS,UACT,KAAA;EACL,OAAO;GACN,OAAO;GACP,mBAAmB;IAClB,QAAQ,OAAO;IACf,GAAI,mBAAmB,KAAA,IAAY,EAAE,eAAe,IAAI,CAAC;GAC1D;EACD;CACD;CACA,MAAM,KAAK,EAAE;CACb,IAAI,IAAI,WAAW,KAAA,GAClB,OAAO,OAAO,OAAO,KACpB,iBAAiB;EAChB,OAAO;EACP;EACA;EACA,SACC,YAAY,YAAY,4HAErB,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG;CACnC,CAAC,CACF;CAED,OAAO;EACN,OAAO;EACP,aAAa;GACZ,QAAQ,GAAG;GACX,SAAS,GAAG,WAAW;GACvB,eAAe,qBAAqB,GAAG,SAAS,GAAG,eAAe,CAAC,CAAC;GACpE,gBAAgB,GAAG,kBAAkB,CAAC;EACvC;CACD;AACD,CAAC;AAEF,MAAM,wBACL,SACA,gBAC4B;CAC5B,MAAM,iBACL,OAAO,YAAY,YAAY,YAAY,QAAQ,oBAAoB,UAEpE,QAOC,iBACD,KAAA;CACJ,IAAI,mBAAmB,KAAA,GAAW,OAAO,CAAC;CAC1C,OAAO,eACL,QAEC,WAKI,OAAO,OAAO,aAAa,QACjC,CAAC,CACA,KAAK,WAAW;EAChB,MAAM,aAAa,YAAY,OAAO;EACtC,MAAM,QAMF;GACH,MACC,OAAO,gBAAgB,iBACpB,cACA,OAAO,gBAAgB,YACtB,YACA;GACL,UAAU,OAAO;EAClB;EACA,IAAI,eAAe,KAAA,GAAW,MAAM,aAAa;EACjD,IAAI,OAAO,gBAAgB,KAAA,GAAW,MAAM,cAAc,OAAO;EACjE,IAAI,OAAO,gBAAgB,KAAA,GAAW,MAAM,cAAc,OAAO;EACjE,OAAO;CACR,CAAC;AACH;AAUA,MAAM,iBACL,SAII;CACJ,MAAM,EAAE,aAAa,UAAU,KAAK,QAAQ,WAAW;CAMvD,IAAI,WAAW,eAAe;EAC7B,MAAM,eACL,OAAO,KACN,iBAAiB;GAChB,OAAO;GACP;GACA,SAAS,SAAS;GAClB,SAAS,YAAY,YAAY;EAClC,CAAC,CACF;EACD,MAAM,0BAAsE,OAC3E,OAAO,IAAI,aAAa;GACvB,MAAM,OAAO,IAAI,QAAQ;GACzB,IAAI,SAAS,MACZ,OAAO,OAAO,OAAO,KACpB,iBAAiB;IAChB,OAAO;IACP;IACA,SAAS,SAAS;IAClB,SAAS,YAAY,YAAY;GAClC,CAAC,CACF;GAED,MAAM,YAAY,OAAO,KAAK,YAAY,SAAS,SAAS,EAAE,CAAC,CAAC,KAC/D,OAAO,UACL,UACA,iBAAiB;IAChB,OAAO;IACP;IACA,SAAS,SAAS;IAClB,SAAS,YAAY,YAAY;IACjC;GACD,CAAC,CACH,CACD;GACA,OAAO,OAAO,WAAW;IACxB,WACC,IAAI,IAAI,KAAK,mBAAmB,EAC/B,QAAQ,UAAU,OACnB,CAAC;IACF,QAAQ,UACP,iBAAiB;KAChB,OAAO;KACP;KACA,SAAS,SAAS;KAClB,SAAS,YAAY,YAAY,wBAAwB,UAAU,OAAO;KAC1E;IACD,CAAC;GACH,CAAC;GACD,OAAO,OAAO,gBAAgB,UAAU,KAAK,aAAa,SAAS,OAAO;EAC3E,CAAC;EACF,MAAM,oBAA8C;GACnD,iBAAiB;GACjB,gBAAgB;EACjB;EACA,MAAM,yBAAgE,SACrE,iBACC,QACA,aACA,SAAS,SACT,OAAO,IAAI,aAAa;GACvB,OAAO,OAAO,KAAK,iBAAiB;EACrC,CAAC,CACF;EACD,OAAO;GACN,iBAAiB,OAAO,uBAAuB,WAAW,OAAO,eAAe,EAAE,CAAC;GACnF;GACA,iBAAiB;GACjB,qBAAqB;EACtB;CACD;CAKA,MAAM,SAAS,SAAS;CAExB,MAAM,2BAAwE,OAC7E,SAAS,QAAQ,IAAI,aAAa,SAAS,OAAO;CAEnD,MAAM,0BAAsE,OAC3E,OAAO,IAAI,aAAa;EACvB,MAAM,SAA6B,OAAO,wBAAwB,EAAE;EACpE,MAAM,MAAM,OAAO,OAAO,WAAW;GACpC,WACC,IAAI,IAAI,KAAK,mBAAmB;IAC/B,aAAa;IACb,YAAY,CAAC,OAAO,SAAS;IAC7B,SAAS;KAAE,SAAS;KAAM,aAAa;IAAK;GAC7C,CAAC;GACF,QAAQ,UACP,iBAAiB;IAChB,OAAO;IACP;IACA,SAAS,SAAS;IAClB,SAAS,YAAY,YAAY;IACjC;GACD,CAAC;EACH,CAAC;EACD,MAAM,SAAS,qBAAqB,GAAG;EACvC,IAAI,WAAW,KAAA,GACd,OAAO,OAAO,WAAW;GACxB,WACC,IAAI,IAAI,KAAK,mBAAmB,EAC/B,OACD,CAAC;GACF,QAAQ,UACP,iBAAiB;IAChB,OAAO;IACP;IACA,SAAS,SAAS;IAClB,SAAS,YAAY,YAAY,wBAAwB,OAAO;IAChE;GACD,CAAC;EACH,CAAC;EAEF,OAAO,OAAO,gBAAgB,KAAK,aAAa,SAAS,OAAO;CACjE,CAAC;CAEF,MAAM,oBAA8C;EACnD,iBAAiB;EACjB,gBAAgB;CACjB;CAEA,MAAM,yBAAgE,SACrE,iBACC,QACA,aACA,SAAS,SACT,OAAO,IAAI,aAAa;EACvB,OAAO,OAAO,KAAK,iBAAiB;CACrC,CAAC,CACF;CAED,MAAM,mBAAoD,OACzD,uBAAuB,WAAW,OAAO,gBAAgB,EAAE,CAAC;CAE7D,MAAM,uBAA4D,QACjE,iBACC,QACA,aACA,SAAS,SACT,iBAAiB,QAAQ,KAAK,aAAa,SAAS,OAAO,CAC5D;CAED,MAAM,kBAAkD,OACvD,uBAAuB,WAAW,OAAO,eAAe,EAAE,CAAC;CAE5D,OAAO;EAAE;EAAgB;EAAuB;EAAiB;CAAoB;AACtF;;;AAQA,MAAa,kBACZ,MACA,QAEA,OAAO,IAAI,aAAa;CACvB,OAAO,oBAAoB,KAAK,IAAI;CAGpC,MAAM,WAAW,OAAO,eAAe,MAAM,GAAG;CAMhD,MAAM,SAAS,OAAO;CACtB,MAAM,gBAAgB,yBAAyB,IAAI,IAAI,KAAK,IAAI,IAAI,SAAS,MAAM;CAEnF,MAAM,iBACL,KAAK,SAAS,eAAe,KAAK,YAAY,KAAA,IAC3C;EACA,MAAM;EACN,cAAc;EACd,QAAQ;CACT,IACC;CACJ,MAAM,mBACL,mBAAmB,OACf,IAAI,oBAAoB,CAAC,IAC1B,CAAC,gBAAgB,GAAI,IAAI,oBAAoB,CAAC,CAAE;CACpD,MAAM,wBAA+C,CAAC;CAGtD,IAAI,mBAAmB,MAAM;EAM5B,MAAM,UAAU,OAAO,qBAAqB;GAC3C,aAAa,KAAK;GAClB,SAAS,SAAS;GAClB,YAAY,eAAe;GAC3B,SAAS,IAAI,IAAI;GACjB,SAAS,IAAI,IAAI;GACjB,wBAAwB,IAAI;GAC5B;GACA;EACD,CAAC;EACD,IAAI,YAAY,WACf,sBAAsB,KAAK;GAAE,GAAG;GAAgB;EAAQ,CAAC;CAE3D;CAEA,MAAM,SAAiC,KAAK,SAAS,gBAAgB,gBAAgB;CACrF,MAAM,WAAW,cAAc;EAC9B,aAAa,KAAK;EAClB;EACA,KAAK,IAAI;EACT;EACA;CACD,CAAC;CAGD,MAAM,QAAsB;EAC3B,MAAM,KAAK;EACX,SAAS,SAAS;EAClB,QAAQ,SAAS;EACjB,WAAW,SAAS;EACpB;EACA,SAAS;GACR,WAAW;GACX,SAAS;EACV;EACA,GAAG;CACJ;CAWA,MAAM,YAAY,IAAI,oBAAoB,CAAC;CAC3C,IAAI,6BAA6C,CAAC;CAClD,IAAI,UAAU,SAAS,GACtB,6BAA6B,OAAO,yBAAyB;EAC5D,aAAa,KAAK;EAClB,SAAS,SAAS;EAClB,SAAS,KAAK;EACd,SAAS;EACT,SAAS;EACT,SAAS,IAAI,IAAI;EACjB;EACA;CACD,CAAC;CAGF,OAAO;EACN,GAAG;EACH,SAAS;GACR,WAAW;GACX,SAAS,CAAC,GAAG,uBAAuB,GAAG,0BAA0B;EAClE;CACD;AACD,CAAC"}

package/dist/plugins/account/snapshot.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"snapshot.mjs","names":[],"sources":["../../../src/plugins/account/snapshot.ts"],"sourcesContent":["// Account plugin — Snapshotable contribution.\n//\n// Architecture §3 + 12-account.md \"Cross-component references\":\n// Account's persisted secret material lives under the runtime tree\n// at `runtime/account/<name>.key` (bech32 secret, 0o600 inside a\n// 0o700 parent). The runtime-rooted tar already captures this via\n// the substrate's auto-included subtree convention — Account just\n// declares the SECRET-MATERIAL flag so the substrate preserves the\n// permissions bits on round-trip.\n//\n// Distilled-doc invariant (\"Restrictive file permissions\"): the\n// 0o600 / 0o700 mode bits are load-bearing. The `secretMaterial:\n// true` flag drives the substrate's mode-bit preservation;\n// re-tightening on warm-start is the runtime's job (snapshot only\n// captures + restores).\n//\n// Variants that do NOT persist secret material (`keystore`, `env`,\n// `inline`, `signer`, `impersonate`) emit an EMPTY snapshot decl\n// with `missingTolerance: 'fine'` so cross-variant restores are\n// clean no-ops.\n\nimport { Effect } from 'effect';\n\nimport type { SnapshotableDecl } from '../../contracts/snapshotable.ts';\nimport type { AccountVariantKind } from './errors.ts';\n\n/** Build the Snapshotable contribution for a resolved variant.\n *\n *  Only the `ephemeral` variant declares a persisted subtree, scoped\n *  to a single account's key path. */\nexport const makeAccountSnapshotable = (parts: {\n\treadonly accountName: string;\n\treadonly variant: AccountVariantKind;\n\treadonly app: string;\n\treadonly stack: string;\n}): SnapshotableDecl => {\n\tif (parts.variant !== 'ephemeral') {\n\t\treturn {\n\t\t\tkind: 'snapshotable',\n\t\t\tsubtrees: [],\n\t\t\tmissingTolerance: 'fine',\n\t\t};\n\t}\n\n\treturn {\n\t\tkind: 'snapshotable',\n\t\t// Per-account secret file under the runtime tree. The\n\t\t// substrate's runtime-tar already covers `runtime/account/`\n\t\t// inclusively; this opt-in extra is symmetric with Sui's\n\t\t// `sui-fork/` subtree declaration.\n\t\tsubtrees: [`account/${parts.accountName}.key`],\n\t\tmissingTolerance: 'fine',\n\t\tsecretMaterial: true,\n\t\t// Pre-restore identity guard: assert the snapshot was taken\n\t\t// under the same `(app, stack, name)` triplet. The substrate's\n\t\t// identity walker reads this opaquely.\n\t\tpreRestore: Effect.succeed({\n\t\t\tkind: 'account-secret',\n\t\t\taccount: parts.accountName,\n\t\t\tapp: parts.app,\n\t\t\tstack: parts.stack,\n\t\t}),\n\t\tpostRestore: Effect.void,\n\t};\n};\n"],"mappings":";;;;;;AA8BA,MAAa,2BAA2B,UAKhB;AACvB,KAAI,MAAM,YAAY,YACrB,QAAO;EACN,MAAM;EACN,UAAU,EAAE;EACZ,kBAAkB;EAClB;AAGF,QAAO;EACN,MAAM;EAKN,UAAU,CAAC,WAAW,MAAM,YAAY,MAAM;EAC9C,kBAAkB;EAClB,gBAAgB;EAIhB,YAAY,OAAO,QAAQ;GAC1B,MAAM;GACN,SAAS,MAAM;GACf,KAAK,MAAM;GACX,OAAO,MAAM;GACb,CAAC;EACF,aAAa,OAAO;EACpB"}
+{"version":3,"file":"snapshot.mjs","names":[],"sources":["../../../src/plugins/account/snapshot.ts"],"sourcesContent":["// Account plugin — Snapshotable contribution.\n//\n// Architecture §3 + 12-account.md \"Cross-component references\":\n// Account's persisted secret material lives under the runtime tree\n// at `runtime/account/<name>.key` (bech32 secret, 0o600 inside a\n// 0o700 parent). The runtime-rooted tar already captures this via\n// the substrate's auto-included subtree convention — Account just\n// declares the SECRET-MATERIAL flag so the substrate preserves the\n// permissions bits on round-trip.\n//\n// Distilled-doc invariant (\"Restrictive file permissions\"): the\n// 0o600 / 0o700 mode bits are load-bearing. The `secretMaterial:\n// true` flag drives the substrate's mode-bit preservation;\n// re-tightening on warm-start is the runtime's job (snapshot only\n// captures + restores).\n//\n// Variants that do NOT persist secret material (`signer`,\n// `impersonate`) emit an EMPTY snapshot decl with\n// `missingTolerance: 'fine'` so cross-variant restores are clean\n// no-ops.\n\nimport { Effect } from 'effect';\n\nimport type { SnapshotableDecl } from '../../contracts/snapshotable.ts';\nimport type { AccountVariantKind } from './errors.ts';\n\n/** Build the Snapshotable contribution for a resolved variant.\n *\n *  Only the `ephemeral` variant declares a persisted subtree, scoped\n *  to a single account's key path. */\nexport const makeAccountSnapshotable = (parts: {\n\treadonly accountName: string;\n\treadonly variant: AccountVariantKind;\n\treadonly app: string;\n\treadonly stack: string;\n}): SnapshotableDecl => {\n\tif (parts.variant !== 'ephemeral') {\n\t\treturn {\n\t\t\tkind: 'snapshotable',\n\t\t\tsubtrees: [],\n\t\t\tmissingTolerance: 'fine',\n\t\t};\n\t}\n\n\treturn {\n\t\tkind: 'snapshotable',\n\t\t// Per-account secret file under the runtime tree. The\n\t\t// substrate's runtime-tar already covers `runtime/account/`\n\t\t// inclusively; this opt-in extra is symmetric with Sui's\n\t\t// `sui-fork/` subtree declaration.\n\t\tsubtrees: [`account/${parts.accountName}.key`],\n\t\tmissingTolerance: 'fine',\n\t\tsecretMaterial: true,\n\t\t// Pre-restore identity guard: assert the snapshot was taken\n\t\t// under the same `(app, stack, name)` triplet. The substrate's\n\t\t// identity walker reads this opaquely.\n\t\tpreRestore: Effect.succeed({\n\t\t\tkind: 'account-secret',\n\t\t\taccount: parts.accountName,\n\t\t\tapp: parts.app,\n\t\t\tstack: parts.stack,\n\t\t}),\n\t\tpostRestore: Effect.void,\n\t};\n};\n"],"mappings":";;;;;;AA8BA,MAAa,2BAA2B,UAKhB;CACvB,IAAI,MAAM,YAAY,aACrB,OAAO;EACN,MAAM;EACN,UAAU,CAAC;EACX,kBAAkB;CACnB;CAGD,OAAO;EACN,MAAM;EAKN,UAAU,CAAC,WAAW,MAAM,YAAY,KAAK;EAC7C,kBAAkB;EAClB,gBAAgB;EAIhB,YAAY,OAAO,QAAQ;GAC1B,MAAM;GACN,SAAS,MAAM;GACf,KAAK,MAAM;GACX,OAAO,MAAM;EACd,CAAC;EACD,aAAa,OAAO;CACrB;AACD"}

package/dist/plugins/account/variants/ephemeral.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"ephemeral.mjs","names":[],"sources":["../../../../src/plugins/account/variants/ephemeral.ts"],"sourcesContent":["// Account variant — ephemeral (generate-or-recover, fund-by-default).\n//\n// Distilled-doc invariants:\n//\n//   - \"Concurrent first-time keypair persistence\": EXCL-create write.\n//     Two parallel generators must not both win; the loser falls\n//     back to reading the winner's persisted key.\n//   - \"Restrictive file permissions\": 0o600 secret + 0o700 parent.\n//   - \"Bare form equals ephemeral-funded\": this resolver is what the\n//     bare `account('alice')` factory call lands on.\n//   - \"Auto-promotion to fork-impersonate funding\": handled in\n//     `funding.ts`; this file just hands off the address. The\n//     promotion event is emitted there (loud-by-default).\n//\n// Persistence note: these accounts are \"ephemeral\" relative to user-\n// managed key material, but they are stable inside a devstack runtime\n// root. Package cache keys and wallet accounts depend on that stability\n// across warm starts.\n\nimport { dirname } from 'node:path';\nimport * as nodeFs from 'node:fs/promises';\n\nimport { Effect } from 'effect';\n\nimport { decodeBech32Secret, generateEd25519Keypair, type ResolvedKeypair } from '../keypair.ts';\nimport { accountAcquireError, type AccountAcquireError } from '../errors.ts';\n\nexport interface EphemeralVariantArgs {\n\treadonly name: string;\n\t/** Filesystem path where the bech32 secret will be persisted by\n\t *  the resolver and covered by the account snapshot capability. */\n\treadonly secretFilePath: string;\n}\n\ntype WriteResult = 'wrote' | 'exists';\n\nconst isErrnoCode = (cause: unknown, code: string): boolean =>\n\ttypeof cause === 'object' &&\n\tcause !== null &&\n\t'code' in cause &&\n\t(cause as { readonly code?: unknown }).code === code;\n\nconst bestEffortChmod = (path: string, mode: number): Effect.Effect<void> =>\n\tEffect.promise(() => nodeFs.chmod(path, mode)).pipe(Effect.ignore);\n\nconst readPersistedKeypair = (\n\targs: EphemeralVariantArgs,\n\tmessage: string,\n): Effect.Effect<ResolvedKeypair, AccountAcquireError> =>\n\tEffect.gen(function* () {\n\t\tconst raw = yield* Effect.tryPromise({\n\t\t\ttry: () => nodeFs.readFile(args.secretFilePath, 'utf8'),\n\t\t\tcatch: (cause): AccountAcquireError =>\n\t\t\t\taccountAcquireError({\n\t\t\t\t\tphase: 'read-persisted-keypair',\n\t\t\t\t\taccountName: args.name,\n\t\t\t\t\tvariant: 'ephemeral',\n\t\t\t\t\tmessage,\n\t\t\t\t\tcause,\n\t\t\t\t}),\n\t\t});\n\t\tyield* bestEffortChmod(args.secretFilePath, 0o600);\n\t\treturn yield* decodeBech32Secret(raw.trim(), args.name, 'ephemeral');\n\t});\n\nconst readPersistedKeypairIfPresent = (\n\targs: EphemeralVariantArgs,\n): Effect.Effect<ResolvedKeypair | null, AccountAcquireError> =>\n\treadPersistedKeypair(\n\t\targs,\n\t\t`Account '${args.name}': failed to read persisted ephemeral keypair at ${args.secretFilePath}.`,\n\t).pipe(\n\t\tEffect.catch((cause: AccountAcquireError) =>\n\t\t\tisErrnoCode(cause.cause, 'ENOENT') ? Effect.succeed(null) : Effect.fail(cause),\n\t\t),\n\t);\n\nconst persistGeneratedSecret = (\n\targs: EphemeralVariantArgs,\n\tsecret: string,\n): Effect.Effect<WriteResult, AccountAcquireError> =>\n\tEffect.tryPromise({\n\t\ttry: async () => {\n\t\t\tawait nodeFs.mkdir(dirname(args.secretFilePath), { recursive: true, mode: 0o700 });\n\t\t\tawait nodeFs.chmod(dirname(args.secretFilePath), 0o700).catch(() => {});\n\t\t\ttry {\n\t\t\t\tawait nodeFs.writeFile(args.secretFilePath, secret, { flag: 'wx', mode: 0o600 });\n\t\t\t\treturn 'wrote';\n\t\t\t} catch (cause) {\n\t\t\t\tif (isErrnoCode(cause, 'EEXIST')) return 'exists';\n\t\t\t\tthrow cause;\n\t\t\t}\n\t\t},\n\t\tcatch: (cause): AccountAcquireError =>\n\t\t\taccountAcquireError({\n\t\t\t\tphase: 'persist-keypair',\n\t\t\t\taccountName: args.name,\n\t\t\t\tvariant: 'ephemeral',\n\t\t\t\tmessage: `Account '${args.name}': failed to persist ephemeral keypair at ${args.secretFilePath}.`,\n\t\t\t\tcause,\n\t\t\t}),\n\t});\n\n/** Resolve the ephemeral variant — read or generate an Ed25519 keypair.\n *\n *  First-time writes use O_EXCL so parallel acquires for the same\n *  account cannot both publish different addresses; the loser re-reads\n *  the winner's file and returns the persisted identity. */\nexport const resolveEphemeralVariant = (\n\targs: EphemeralVariantArgs,\n): Effect.Effect<ResolvedKeypair, AccountAcquireError> =>\n\tEffect.gen(function* () {\n\t\tconst persisted = yield* readPersistedKeypairIfPresent(args);\n\t\tif (persisted !== null) return persisted;\n\n\t\tconst generated = yield* generateEd25519Keypair(args.name);\n\t\tif (generated.bech32Secret === null) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\taccountAcquireError({\n\t\t\t\t\tphase: 'generate-keypair',\n\t\t\t\t\taccountName: args.name,\n\t\t\t\t\tvariant: 'ephemeral',\n\t\t\t\t\tmessage: `Account '${args.name}': generated keypair did not expose a bech32 secret.`,\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\n\t\tconst writeResult = yield* persistGeneratedSecret(args, generated.bech32Secret);\n\t\tif (writeResult === 'exists') {\n\t\t\treturn yield* readPersistedKeypair(\n\t\t\t\targs,\n\t\t\t\t`Account '${args.name}': lost ephemeral keypair write race at ${args.secretFilePath} and failed to read the winner.`,\n\t\t\t);\n\t\t}\n\n\t\tyield* bestEffortChmod(args.secretFilePath, 0o600);\n\t\treturn generated;\n\t});\n"],"mappings":";;;;;;AAoCA,MAAM,eAAe,OAAgB,SACpC,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,SACT,MAAsC,SAAS;AAEjD,MAAM,mBAAmB,MAAc,SACtC,OAAO,cAAc,OAAO,MAAM,MAAM,KAAK,CAAC,CAAC,KAAK,OAAO,OAAO;AAEnE,MAAM,wBACL,MACA,YAEA,OAAO,IAAI,aAAa;CACvB,MAAM,MAAM,OAAO,OAAO,WAAW;EACpC,WAAW,OAAO,SAAS,KAAK,gBAAgB,OAAO;EACvD,QAAQ,UACP,oBAAoB;GACnB,OAAO;GACP,aAAa,KAAK;GAClB,SAAS;GACT;GACA;GACA,CAAC;EACH,CAAC;AACF,QAAO,gBAAgB,KAAK,gBAAgB,IAAM;AAClD,QAAO,OAAO,mBAAmB,IAAI,MAAM,EAAE,KAAK,MAAM,YAAY;EACnE;AAEH,MAAM,iCACL,SAEA,qBACC,MACA,YAAY,KAAK,KAAK,mDAAmD,KAAK,eAAe,GAC7F,CAAC,KACD,OAAO,OAAO,UACb,YAAY,MAAM,OAAO,SAAS,GAAG,OAAO,QAAQ,KAAK,GAAG,OAAO,KAAK,MAAM,CAC9E,CACD;AAEF,MAAM,0BACL,MACA,WAEA,OAAO,WAAW;CACjB,KAAK,YAAY;AAChB,QAAM,OAAO,MAAM,QAAQ,KAAK,eAAe,EAAE;GAAE,WAAW;GAAM,MAAM;GAAO,CAAC;AAClF,QAAM,OAAO,MAAM,QAAQ,KAAK,eAAe,EAAE,IAAM,CAAC,YAAY,GAAG;AACvE,MAAI;AACH,SAAM,OAAO,UAAU,KAAK,gBAAgB,QAAQ;IAAE,MAAM;IAAM,MAAM;IAAO,CAAC;AAChF,UAAO;WACC,OAAO;AACf,OAAI,YAAY,OAAO,SAAS,CAAE,QAAO;AACzC,SAAM;;;CAGR,QAAQ,UACP,oBAAoB;EACnB,OAAO;EACP,aAAa,KAAK;EAClB,SAAS;EACT,SAAS,YAAY,KAAK,KAAK,4CAA4C,KAAK,eAAe;EAC/F;EACA,CAAC;CACH,CAAC;;;;;;AAOH,MAAa,2BACZ,SAEA,OAAO,IAAI,aAAa;CACvB,MAAM,YAAY,OAAO,8BAA8B,KAAK;AAC5D,KAAI,cAAc,KAAM,QAAO;CAE/B,MAAM,YAAY,OAAO,uBAAuB,KAAK,KAAK;AAC1D,KAAI,UAAU,iBAAiB,KAC9B,QAAO,OAAO,OAAO,KACpB,oBAAoB;EACnB,OAAO;EACP,aAAa,KAAK;EAClB,SAAS;EACT,SAAS,YAAY,KAAK,KAAK;EAC/B,CAAC,CACF;AAIF,MAAI,OADuB,uBAAuB,MAAM,UAAU,aAAa,MAC3D,SACnB,QAAO,OAAO,qBACb,MACA,YAAY,KAAK,KAAK,0CAA0C,KAAK,eAAe,iCACpF;AAGF,QAAO,gBAAgB,KAAK,gBAAgB,IAAM;AAClD,QAAO;EACN"}
+{"version":3,"file":"ephemeral.mjs","names":[],"sources":["../../../../src/plugins/account/variants/ephemeral.ts"],"sourcesContent":["// Account variant — ephemeral (generate-or-recover, fund-by-default).\n//\n// Distilled-doc invariants:\n//\n//   - \"Concurrent first-time keypair persistence\": EXCL-create write.\n//     Two parallel generators must not both win; the loser falls\n//     back to reading the winner's persisted key.\n//   - \"Restrictive file permissions\": 0o600 secret + 0o700 parent.\n//   - \"Bare form equals ephemeral-funded\": this resolver is what the\n//     bare `account('alice')` factory call lands on.\n//   - \"Auto-promotion to fork-impersonate funding\": handled in\n//     `funding.ts`; this file just hands off the address. The\n//     promotion event is emitted there (loud-by-default).\n//\n// Persistence note: these accounts are \"ephemeral\" relative to user-\n// managed key material, but they are stable inside a devstack runtime\n// root. Package cache keys and wallet accounts depend on that stability\n// across warm starts.\n\nimport { dirname } from 'node:path';\nimport * as nodeFs from 'node:fs/promises';\n\nimport { Effect } from 'effect';\n\nimport { decodeBech32Secret, generateEd25519Keypair, type ResolvedKeypair } from '../keypair.ts';\nimport { accountAcquireError, type AccountAcquireError } from '../errors.ts';\n\nexport interface EphemeralVariantArgs {\n\treadonly name: string;\n\t/** Filesystem path where the bech32 secret will be persisted by\n\t *  the resolver and covered by the account snapshot capability. */\n\treadonly secretFilePath: string;\n}\n\ntype WriteResult = 'wrote' | 'exists';\n\nconst isErrnoCode = (cause: unknown, code: string): boolean =>\n\ttypeof cause === 'object' &&\n\tcause !== null &&\n\t'code' in cause &&\n\t(cause as { readonly code?: unknown }).code === code;\n\nconst bestEffortChmod = (path: string, mode: number): Effect.Effect<void> =>\n\tEffect.promise(() => nodeFs.chmod(path, mode)).pipe(Effect.ignore);\n\nconst readPersistedKeypair = (\n\targs: EphemeralVariantArgs,\n\tmessage: string,\n): Effect.Effect<ResolvedKeypair, AccountAcquireError> =>\n\tEffect.gen(function* () {\n\t\tconst raw = yield* Effect.tryPromise({\n\t\t\ttry: () => nodeFs.readFile(args.secretFilePath, 'utf8'),\n\t\t\tcatch: (cause): AccountAcquireError =>\n\t\t\t\taccountAcquireError({\n\t\t\t\t\tphase: 'read-persisted-keypair',\n\t\t\t\t\taccountName: args.name,\n\t\t\t\t\tvariant: 'ephemeral',\n\t\t\t\t\tmessage,\n\t\t\t\t\tcause,\n\t\t\t\t}),\n\t\t});\n\t\tyield* bestEffortChmod(args.secretFilePath, 0o600);\n\t\treturn yield* decodeBech32Secret(raw.trim(), args.name, 'ephemeral');\n\t});\n\nconst readPersistedKeypairIfPresent = (\n\targs: EphemeralVariantArgs,\n): Effect.Effect<ResolvedKeypair | null, AccountAcquireError> =>\n\treadPersistedKeypair(\n\t\targs,\n\t\t`Account '${args.name}': failed to read persisted ephemeral keypair at ${args.secretFilePath}.`,\n\t).pipe(\n\t\tEffect.catch((cause: AccountAcquireError) =>\n\t\t\tisErrnoCode(cause.cause, 'ENOENT') ? Effect.succeed(null) : Effect.fail(cause),\n\t\t),\n\t);\n\nconst persistGeneratedSecret = (\n\targs: EphemeralVariantArgs,\n\tsecret: string,\n): Effect.Effect<WriteResult, AccountAcquireError> =>\n\tEffect.tryPromise({\n\t\ttry: async () => {\n\t\t\tawait nodeFs.mkdir(dirname(args.secretFilePath), { recursive: true, mode: 0o700 });\n\t\t\tawait nodeFs.chmod(dirname(args.secretFilePath), 0o700).catch(() => {});\n\t\t\ttry {\n\t\t\t\tawait nodeFs.writeFile(args.secretFilePath, secret, { flag: 'wx', mode: 0o600 });\n\t\t\t\treturn 'wrote';\n\t\t\t} catch (cause) {\n\t\t\t\tif (isErrnoCode(cause, 'EEXIST')) return 'exists';\n\t\t\t\tthrow cause;\n\t\t\t}\n\t\t},\n\t\tcatch: (cause): AccountAcquireError =>\n\t\t\taccountAcquireError({\n\t\t\t\tphase: 'persist-keypair',\n\t\t\t\taccountName: args.name,\n\t\t\t\tvariant: 'ephemeral',\n\t\t\t\tmessage: `Account '${args.name}': failed to persist ephemeral keypair at ${args.secretFilePath}.`,\n\t\t\t\tcause,\n\t\t\t}),\n\t});\n\n/** Resolve the ephemeral variant — read or generate an Ed25519 keypair.\n *\n *  First-time writes use O_EXCL so parallel acquires for the same\n *  account cannot both publish different addresses; the loser re-reads\n *  the winner's file and returns the persisted identity. */\nexport const resolveEphemeralVariant = (\n\targs: EphemeralVariantArgs,\n): Effect.Effect<ResolvedKeypair, AccountAcquireError> =>\n\tEffect.gen(function* () {\n\t\tconst persisted = yield* readPersistedKeypairIfPresent(args);\n\t\tif (persisted !== null) return persisted;\n\n\t\tconst generated = yield* generateEd25519Keypair(args.name);\n\t\tif (generated.bech32Secret === null) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\taccountAcquireError({\n\t\t\t\t\tphase: 'generate-keypair',\n\t\t\t\t\taccountName: args.name,\n\t\t\t\t\tvariant: 'ephemeral',\n\t\t\t\t\tmessage: `Account '${args.name}': generated keypair did not expose a bech32 secret.`,\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\n\t\tconst writeResult = yield* persistGeneratedSecret(args, generated.bech32Secret);\n\t\tif (writeResult === 'exists') {\n\t\t\treturn yield* readPersistedKeypair(\n\t\t\t\targs,\n\t\t\t\t`Account '${args.name}': lost ephemeral keypair write race at ${args.secretFilePath} and failed to read the winner.`,\n\t\t\t);\n\t\t}\n\n\t\tyield* bestEffortChmod(args.secretFilePath, 0o600);\n\t\treturn generated;\n\t});\n"],"mappings":";;;;;;AAoCA,MAAM,eAAe,OAAgB,SACpC,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,SACT,MAAsC,SAAS;AAEjD,MAAM,mBAAmB,MAAc,SACtC,OAAO,cAAc,OAAO,MAAM,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,MAAM;AAElE,MAAM,wBACL,MACA,YAEA,OAAO,IAAI,aAAa;CACvB,MAAM,MAAM,OAAO,OAAO,WAAW;EACpC,WAAW,OAAO,SAAS,KAAK,gBAAgB,MAAM;EACtD,QAAQ,UACP,oBAAoB;GACnB,OAAO;GACP,aAAa,KAAK;GAClB,SAAS;GACT;GACA;EACD,CAAC;CACH,CAAC;CACD,OAAO,gBAAgB,KAAK,gBAAgB,GAAK;CACjD,OAAO,OAAO,mBAAmB,IAAI,KAAK,GAAG,KAAK,MAAM,WAAW;AACpE,CAAC;AAEF,MAAM,iCACL,SAEA,qBACC,MACA,YAAY,KAAK,KAAK,mDAAmD,KAAK,eAAe,EAC9F,CAAC,CAAC,KACD,OAAO,OAAO,UACb,YAAY,MAAM,OAAO,QAAQ,IAAI,OAAO,QAAQ,IAAI,IAAI,OAAO,KAAK,KAAK,CAC9E,CACD;AAED,MAAM,0BACL,MACA,WAEA,OAAO,WAAW;CACjB,KAAK,YAAY;EAChB,MAAM,OAAO,MAAM,QAAQ,KAAK,cAAc,GAAG;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EACjF,MAAM,OAAO,MAAM,QAAQ,KAAK,cAAc,GAAG,GAAK,CAAC,CAAC,YAAY,CAAC,CAAC;EACtE,IAAI;GACH,MAAM,OAAO,UAAU,KAAK,gBAAgB,QAAQ;IAAE,MAAM;IAAM,MAAM;GAAM,CAAC;GAC/E,OAAO;EACR,SAAS,OAAO;GACf,IAAI,YAAY,OAAO,QAAQ,GAAG,OAAO;GACzC,MAAM;EACP;CACD;CACA,QAAQ,UACP,oBAAoB;EACnB,OAAO;EACP,aAAa,KAAK;EAClB,SAAS;EACT,SAAS,YAAY,KAAK,KAAK,4CAA4C,KAAK,eAAe;EAC/F;CACD,CAAC;AACH,CAAC;;;;;;AAOF,MAAa,2BACZ,SAEA,OAAO,IAAI,aAAa;CACvB,MAAM,YAAY,OAAO,8BAA8B,IAAI;CAC3D,IAAI,cAAc,MAAM,OAAO;CAE/B,MAAM,YAAY,OAAO,uBAAuB,KAAK,IAAI;CACzD,IAAI,UAAU,iBAAiB,MAC9B,OAAO,OAAO,OAAO,KACpB,oBAAoB;EACnB,OAAO;EACP,aAAa,KAAK;EAClB,SAAS;EACT,SAAS,YAAY,KAAK,KAAK;CAChC,CAAC,CACF;CAID,KAAI,OADuB,uBAAuB,MAAM,UAAU,YAAY,OAC1D,UACnB,OAAO,OAAO,qBACb,MACA,YAAY,KAAK,KAAK,0CAA0C,KAAK,eAAe,gCACrF;CAGD,OAAO,gBAAgB,KAAK,gBAAgB,GAAK;CACjD,OAAO;AACR,CAAC"}

package/dist/plugins/account/variants/impersonate.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"impersonate.mjs","names":[],"sources":["../../../../src/plugins/account/variants/impersonate.ts"],"sourcesContent":["// Account variant — impersonate (fork-mode only).\n//\n// Distilled-doc invariants:\n//\n//   - \"Impersonation only on fork\": the variant must refuse outside\n//     fork-runtime. The refusal lands at variant-resolution time\n//     (typed AccountAcquireError, phase: bind-impersonation-slot).\n//\n//   - \"Sign-and-execute is the only execution surface for\n//     impersonation\": synthetic impersonation signers must THROW\n//     SYNCHRONOUSLY on direct sign calls so accidental bypass is\n//     loud, not silent. We surface this through the\n//     `SyntheticImpersonationSigner` object's `signTransaction` /\n//     `signPersonalMessage` methods.\n//\n//   - \"publicKey caveat\": the resolved value's `publicKey` is a\n//     zero buffer. The resolved-account TYPE (in `service.ts`)\n//     encodes the source discriminator so consumers can't accidentally\n//     treat an impersonation publicKey as authoritative.\n//\n// Distilled-doc opportunity: \"Move the synthetic impersonation\n// signer next to the other fork-only helpers\". For now, it stays\n// here because the variant resolver is the only construction site —\n// if Wallet ever needs to materialize impersonation signers directly,\n// we lift this into `plugins/sui/fork-orchestration.ts`.\n\nimport { Effect } from 'effect';\n\nimport { accountAcquireError, accountSignError, type AccountAcquireError } from '../errors.ts';\nimport type { ResolvedKeypair } from '../keypair.ts';\n\nexport interface ImpersonateVariantArgs {\n\treadonly name: string;\n\t/** The address to execute AS. Must appear in the fork's seed\n\t *  manifest's owned-object index (typically by being listed\n\t *  in `Sui({fork:{seed:{addresses}}})`). */\n\treadonly address: string;\n\t/** Sui's resolved runtime mode — gates the refusal-outside-fork\n\t *  check. */\n\treadonly suiMode: 'local' | 'local-rpc' | 'live' | 'fork';\n}\n\n/** The synthetic impersonation signer object. THROWS SYNCHRONOUSLY\n *  on direct sign calls; routes `signAndExecute` through the fork's\n *  empty-signature submit path (wired in `service.ts`). */\nexport interface SyntheticImpersonationSigner {\n\treadonly _kind: 'impersonate';\n\treadonly toSuiAddress: () => string;\n\treadonly getKeyScheme: () => 'ed25519';\n\treadonly signTransaction: () => never;\n\treadonly signPersonalMessage: () => never;\n}\n\nconst makeSyntheticSigner = (\n\taccountName: string,\n\taddress: string,\n): SyntheticImpersonationSigner => ({\n\t_kind: 'impersonate',\n\ttoSuiAddress: () => address,\n\t// Stable lie: report ed25519 so manifest serialization doesn't\n\t// have to branch. Consumers that need the truth read `source`\n\t// off the resolved-account value (architecture-distilled\n\t// invariant).\n\tgetKeyScheme: () => 'ed25519',\n\tsignTransaction: () => {\n\t\tthrow accountSignError({\n\t\t\tphase: 'impersonation-bypass-attempt',\n\t\t\taccountName,\n\t\t\taddress,\n\t\t\tmessage: `Account '${accountName}' is an impersonation account — direct sign calls are forbidden. Route through signAndExecute (which goes via the fork's impersonation submit path).`,\n\t\t});\n\t},\n\tsignPersonalMessage: () => {\n\t\tthrow accountSignError({\n\t\t\tphase: 'impersonation-bypass-attempt',\n\t\t\taccountName,\n\t\t\taddress,\n\t\t\tmessage: `Account '${accountName}' is an impersonation account — signPersonalMessage is not supported.`,\n\t\t});\n\t},\n});\n\n/** Resolve the impersonate variant.\n *\n *  Distilled-doc invariant: refuse outside fork mode. The refusal\n *  is a typed acquisition error pointing at the runtime requirement. */\nexport const resolveImpersonateVariant = (\n\targs: ImpersonateVariantArgs,\n): Effect.Effect<ResolvedKeypair, AccountAcquireError> => {\n\tif (args.suiMode !== 'fork') {\n\t\treturn Effect.fail(\n\t\t\taccountAcquireError({\n\t\t\t\tphase: 'bind-impersonation-slot',\n\t\t\t\taccountName: args.name,\n\t\t\t\tvariant: 'impersonate',\n\t\t\t\tmessage: `Account '${args.name}' uses {kind:'impersonate'} but Sui runtime is '${args.suiMode}'. Impersonation only works on fork-mode networks.`,\n\t\t\t\thint: `Switch to suiFor(network).fork.{mainnet|testnet|devnet}(...) — or use a different account variant.`,\n\t\t\t}),\n\t\t);\n\t}\n\treturn Effect.succeed({\n\t\taddress: args.address,\n\t\tscheme: 'ed25519',\n\t\t// Zero-buffer publicKey — the type-level lie. The `source`\n\t\t// discriminator on the resolved AccountValue is the\n\t\t// trustworthy signal.\n\t\tpublicKey: new Uint8Array(32),\n\t\tsigner: makeSyntheticSigner(args.name, args.address),\n\t\tbech32Secret: null,\n\t} satisfies ResolvedKeypair);\n};\n"],"mappings":";;;AAqDA,MAAM,uBACL,aACA,aACmC;CACnC,OAAO;CACP,oBAAoB;CAKpB,oBAAoB;CACpB,uBAAuB;AACtB,QAAM,iBAAiB;GACtB,OAAO;GACP;GACA;GACA,SAAS,YAAY,YAAY;GACjC,CAAC;;CAEH,2BAA2B;AAC1B,QAAM,iBAAiB;GACtB,OAAO;GACP;GACA;GACA,SAAS,YAAY,YAAY;GACjC,CAAC;;CAEH;;;;;AAMD,MAAa,6BACZ,SACyD;AACzD,KAAI,KAAK,YAAY,OACpB,QAAO,OAAO,KACb,oBAAoB;EACnB,OAAO;EACP,aAAa,KAAK;EAClB,SAAS;EACT,SAAS,YAAY,KAAK,KAAK,kDAAkD,KAAK,QAAQ;EAC9F,MAAM;EACN,CAAC,CACF;AAEF,QAAO,OAAO,QAAQ;EACrB,SAAS,KAAK;EACd,QAAQ;EAIR,WAAW,IAAI,WAAW,GAAG;EAC7B,QAAQ,oBAAoB,KAAK,MAAM,KAAK,QAAQ;EACpD,cAAc;EACd,CAA2B"}
+{"version":3,"file":"impersonate.mjs","names":[],"sources":["../../../../src/plugins/account/variants/impersonate.ts"],"sourcesContent":["// Account variant — impersonate (fork-mode only).\n//\n// Distilled-doc invariants:\n//\n//   - \"Impersonation only on fork\": the variant must refuse outside\n//     fork-runtime. The refusal lands at variant-resolution time\n//     (typed AccountAcquireError, phase: bind-impersonation-slot).\n//\n//   - \"Sign-and-execute is the only execution surface for\n//     impersonation\": synthetic impersonation signers must THROW\n//     SYNCHRONOUSLY on direct sign calls so accidental bypass is\n//     loud, not silent. We surface this through the\n//     `SyntheticImpersonationSigner` object's `signTransaction` /\n//     `signPersonalMessage` methods.\n//\n//   - \"publicKey caveat\": the resolved value's `publicKey` is a\n//     zero buffer. The resolved-account TYPE (in `service.ts`)\n//     encodes the source discriminator so consumers can't accidentally\n//     treat an impersonation publicKey as authoritative.\n//\n// Distilled-doc opportunity: \"Move the synthetic impersonation\n// signer next to the other fork-only helpers\". For now, it stays\n// here because the variant resolver is the only construction site —\n// if Wallet ever needs to materialize impersonation signers directly,\n// we lift this into `plugins/sui/fork-orchestration.ts`.\n\nimport { Effect } from 'effect';\n\nimport { accountAcquireError, accountSignError, type AccountAcquireError } from '../errors.ts';\nimport type { ResolvedKeypair } from '../keypair.ts';\n\nexport interface ImpersonateVariantArgs {\n\treadonly name: string;\n\t/** The address to execute AS. Must appear in the fork's seed\n\t *  manifest's owned-object index (typically by being listed\n\t *  in `Sui({fork:{seed:{addresses}}})`). */\n\treadonly address: string;\n\t/** Sui's resolved runtime mode — gates the refusal-outside-fork\n\t *  check. */\n\treadonly suiMode: 'local' | 'local-rpc' | 'live' | 'fork';\n}\n\n/** The synthetic impersonation signer object. THROWS SYNCHRONOUSLY\n *  on direct sign calls; routes `signAndExecute` through the fork's\n *  empty-signature submit path (wired in `service.ts`). */\nexport interface SyntheticImpersonationSigner {\n\treadonly _kind: 'impersonate';\n\treadonly toSuiAddress: () => string;\n\treadonly getKeyScheme: () => 'ed25519';\n\treadonly signTransaction: () => never;\n\treadonly signPersonalMessage: () => never;\n}\n\nconst makeSyntheticSigner = (\n\taccountName: string,\n\taddress: string,\n): SyntheticImpersonationSigner => ({\n\t_kind: 'impersonate',\n\ttoSuiAddress: () => address,\n\t// Stable lie: report ed25519 so manifest serialization doesn't\n\t// have to branch. Consumers that need the truth read `source`\n\t// off the resolved-account value (architecture-distilled\n\t// invariant).\n\tgetKeyScheme: () => 'ed25519',\n\tsignTransaction: () => {\n\t\tthrow accountSignError({\n\t\t\tphase: 'impersonation-bypass-attempt',\n\t\t\taccountName,\n\t\t\taddress,\n\t\t\tmessage: `Account '${accountName}' is an impersonation account — direct sign calls are forbidden. Route through signAndExecute (which goes via the fork's impersonation submit path).`,\n\t\t});\n\t},\n\tsignPersonalMessage: () => {\n\t\tthrow accountSignError({\n\t\t\tphase: 'impersonation-bypass-attempt',\n\t\t\taccountName,\n\t\t\taddress,\n\t\t\tmessage: `Account '${accountName}' is an impersonation account — signPersonalMessage is not supported.`,\n\t\t});\n\t},\n});\n\n/** Resolve the impersonate variant.\n *\n *  Distilled-doc invariant: refuse outside fork mode. The refusal\n *  is a typed acquisition error pointing at the runtime requirement. */\nexport const resolveImpersonateVariant = (\n\targs: ImpersonateVariantArgs,\n): Effect.Effect<ResolvedKeypair, AccountAcquireError> => {\n\tif (args.suiMode !== 'fork') {\n\t\treturn Effect.fail(\n\t\t\taccountAcquireError({\n\t\t\t\tphase: 'bind-impersonation-slot',\n\t\t\t\taccountName: args.name,\n\t\t\t\tvariant: 'impersonate',\n\t\t\t\tmessage: `Account '${args.name}' uses {kind:'impersonate'} but Sui runtime is '${args.suiMode}'. Impersonation only works on fork-mode networks.`,\n\t\t\t\thint: `Switch to suiFor(network).fork.{mainnet|testnet|devnet}(...) — or use a different account variant.`,\n\t\t\t}),\n\t\t);\n\t}\n\treturn Effect.succeed({\n\t\taddress: args.address,\n\t\tscheme: 'ed25519',\n\t\t// Zero-buffer publicKey — the type-level lie. The `source`\n\t\t// discriminator on the resolved AccountValue is the\n\t\t// trustworthy signal.\n\t\tpublicKey: new Uint8Array(32),\n\t\tsigner: makeSyntheticSigner(args.name, args.address),\n\t\tbech32Secret: null,\n\t} satisfies ResolvedKeypair);\n};\n"],"mappings":";;;AAqDA,MAAM,uBACL,aACA,aACmC;CACnC,OAAO;CACP,oBAAoB;CAKpB,oBAAoB;CACpB,uBAAuB;EACtB,MAAM,iBAAiB;GACtB,OAAO;GACP;GACA;GACA,SAAS,YAAY,YAAY;EAClC,CAAC;CACF;CACA,2BAA2B;EAC1B,MAAM,iBAAiB;GACtB,OAAO;GACP;GACA;GACA,SAAS,YAAY,YAAY;EAClC,CAAC;CACF;AACD;;;;;AAMA,MAAa,6BACZ,SACyD;CACzD,IAAI,KAAK,YAAY,QACpB,OAAO,OAAO,KACb,oBAAoB;EACnB,OAAO;EACP,aAAa,KAAK;EAClB,SAAS;EACT,SAAS,YAAY,KAAK,KAAK,kDAAkD,KAAK,QAAQ;EAC9F,MAAM;CACP,CAAC,CACF;CAED,OAAO,OAAO,QAAQ;EACrB,SAAS,KAAK;EACd,QAAQ;EAIR,WAAW,IAAI,WAAW,EAAE;EAC5B,QAAQ,oBAAoB,KAAK,MAAM,KAAK,OAAO;EACnD,cAAc;CACf,CAA2B;AAC5B"}