@mysten-incubation/devstack 0.1.0 → 0.2.0

package/dist/plugins/dashboard/index.mjs

@@ -1,8 +1,8 @@
 import { definePlugin, resource } from "../../substrate/plugin.mjs";
 import "../../api/define-plugin.mjs";
-import { IdentityContext } from "../../substrate/runtime/paths.mjs";
 import { ControlPlaneService } from "../../substrate/runtime/control-plane/service.mjs";
-import { ContainerRuntimeService } from "../../runtime/docker/service.mjs";
+import { IdentityContext } from "../../substrate/runtime/paths.mjs";
+import { PluginContext } from "../../substrate/plugin-ctx.mjs";
 import { StrategyRegistryService } from "../../substrate/runtime/strategy-registry/service.mjs";
 import { PortBrokerService } from "../../substrate/runtime/port-broker/service.mjs";
 import "../../substrate/runtime/port-broker/index.mjs";
@@ -23,18 +23,16 @@ function dashboard(opts = {}) {
 		id: dashboardResource.id,
 		role: "service",
 		section: "service",
+		keepAliveOnRestore: true,
 		start: () => Effect.gen(function* () {
+			const ctx = yield* PluginContext;
 			const portBroker = yield* PortBrokerService;
 			const control = yield* ControlPlaneService;
 			const identity = yield* IdentityContext;
-			const containerRuntimeOpt = yield* Effect.serviceOption(ContainerRuntimeService);
-			const containerRuntime = containerRuntimeOpt._tag === "Some" ? containerRuntimeOpt.value : null;
 			const strategyRegistryOpt = yield* Effect.serviceOption(StrategyRegistryService);
 			const strategyRegistry = strategyRegistryOpt._tag === "Some" ? strategyRegistryOpt.value : null;
 			const pluginDomain = buildDashboardDomain({
 				control: control.domain,
-				identity,
-				containerRuntime,
 				strategyRegistry
 			});
 			const bindAddress = opts.bindAddress ?? DASHBOARD_DEFAULT_BIND;
@@ -60,7 +58,7 @@ function dashboard(opts = {}) {
 				directOrigins,
 				extraOrigins: opts.allowedOrigins ?? []
 			});
-			return {
+			const resolved = {
 				url: (yield* listenScopedHttpServer({
 					bindAddress,
 					port: allocated.port,
@@ -69,6 +67,7 @@ function dashboard(opts = {}) {
 						context: {
 							state: control.state,
 							publishCommand: control.publishCommand,
+							submitCommand: control.submitCommand,
 							domain: control.domain,
 							pluginDomain
 						}
@@ -77,12 +76,13 @@ function dashboard(opts = {}) {
 				})).url,
 				localPort: allocated.port
 			};
-		}),
-		capabilities: ({ value, runtime }) => [makeDashboardRoutable({
-			app: runtime.identity.app,
-			stack: runtime.identity.stack,
-			port: value.localPort
-		})]
+			ctx.endpoint(makeDashboardRoutable({
+				app: identity.app,
+				stack: identity.stack,
+				port: resolved.localPort
+			}));
+			return resolved;
+		})
 	});
 }
 //#endregion

package/dist/plugins/dashboard/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../src/plugins/dashboard/index.ts"],"sourcesContent":["// Dashboard plugin.\n//\n// Runs an in-process GraphQL server (Pothos schema + graphql-yoga) that\n// exposes the live projection, control commands, and the projection\n// subscription. Modeled on the `wallet` plugin: allocate a loopback port\n// from the port broker, start a scoped HTTP server, and contribute a\n// Routable so the router fronts it under `dashboard.<app>.<stack>.localhost`.\n//\n// Data access is pure control plane: the projection (`state`) and command\n// publisher (`publishCommand`) come from `ControlPlaneService`, handed to\n// the server as the GraphQL context.\n\nimport { Effect } from 'effect';\nimport { type AnyPlugin, definePlugin, resource } from '../../api/define-plugin.ts';\nimport { ContainerRuntimeService } from '../../runtime/docker/service.ts';\nimport type { ContainerRuntime } from '../../contracts/container-runtime.ts';\nimport type { StrategyRegistry } from '../../contracts/strategy-contributor.ts';\nimport { StrategyRegistryService } from '../../substrate/runtime/strategy-registry/index.ts';\nimport { ControlPlaneService } from '../../substrate/runtime/control-plane/service.ts';\nimport { IdentityContext } from '../../substrate/runtime/paths.ts';\nimport { PortBrokerService } from '../../substrate/runtime/port-broker/index.ts';\nimport { renderUrl, routedHostname } from '../../substrate/runtime/routed-url.ts';\nimport { listenScopedHttpServer } from '../../substrate/runtime/scoped-http-server.ts';\nimport { buildDashboardDomain } from './domain.ts';\nimport { resolveOriginPolicy } from './origin-policy.ts';\nimport {\n\tDASHBOARD_ENTRYPOINT_PORT,\n\tDASHBOARD_ROUTE_ROLE,\n\tmakeDashboardRoutable,\n} from './routable.ts';\nimport { makeDashboardListener } from './server.ts';\n\nexport interface DashboardOptions {\n\t/** Preferred loopback port; the broker forward-scans if it's busy. */\n\treadonly port?: number;\n\t/** NIC the HTTP server binds. Defaults to `'0.0.0.0'` because the router\n\t *  runs in Docker and must reach this host process through the host-gateway\n\t *  address on native Linux (a `127.0.0.1`-only listener is unreachable from\n\t *  the host-gateway IP). The public dashboard URL stays router-fronted and\n\t *  stack-scoped. */\n\treadonly bindAddress?: string;\n\t/** Extra origins merged on top of the dashboard's own router-fronted origin\n\t *  for this stack (and the direct loopback origins). Useful for headless\n\t *  test runners and custom dev hosts. The dashboard does NOT auto-allowlist\n\t *  a bare `*.localhost` form — that is not stack-scoped, so a sibling stack\n\t *  could drive the destructive control-plane mutations cross-origin. */\n\treadonly allowedOrigins?: ReadonlyArray<string>;\n\t// Note on log retention: the queryable cross-service log store the\n\t// dashboard reads is process-scoped and owned by the SUPERVISOR (not this\n\t// plugin), so its capacity is configured there. Tune it with the\n\t// `DEVSTACK_DASHBOARD_LOG_CAPACITY` (per-service record cap, default 2000)\n\t// and `DEVSTACK_DASHBOARD_LOG_MAX_SERVICES` (distinct-ring cap, default\n\t// 256) env vars, or programmatically via `SupervisorStartupOptions.logStore`.\n\t// See substrate/runtime/observability/log-store.ts.\n}\n\nexport interface DashboardValue {\n\t/** Loopback URL of the dashboard server. */\n\treadonly url: string;\n\t/** The allocated loopback port. */\n\treadonly localPort: number;\n}\n\nconst dashboardResource = resource<'dashboard', DashboardValue>('dashboard');\n// `0.0.0.0`: the router runs in Docker, so on native Linux it reaches this\n// host process through the Docker host-gateway address instead of host\n// loopback — a `127.0.0.1`-only listener is unreachable from that IP, which\n// produced a 502 from Traefik and the `RouteReadinessProbeFailed` WARN. The\n// published dashboard URL remains stack-scoped through the router. Mirrors\n// `WALLET_DEFAULT_BIND_ADDRESS`.\nconst DASHBOARD_DEFAULT_BIND = '0.0.0.0';\n\n/** Construct the devstack dashboard plugin. */\nexport function dashboard(opts: DashboardOptions = {}): AnyPlugin {\n\treturn definePlugin({\n\t\tid: dashboardResource.id,\n\t\trole: 'service',\n\t\tsection: 'service',\n\t\tstart: () =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst portBroker = yield* PortBrokerService;\n\t\t\t\tconst control = yield* ControlPlaneService;\n\t\t\t\tconst identity = yield* IdentityContext;\n\t\t\t\t// The ContainerRuntime drives the Postgres `psql` exec-probe.\n\t\t\t\t// It is in the base substrate plugin context in production\n\t\t\t\t// wiring; read it optionally so bare smoke-test paths that\n\t\t\t\t// don't layer it degrade `postgresStats` to unavailable\n\t\t\t\t// rather than failing acquisition.\n\t\t\t\tconst containerRuntimeOpt = yield* Effect.serviceOption(ContainerRuntimeService);\n\t\t\t\tconst containerRuntime: ContainerRuntime | null =\n\t\t\t\t\tcontainerRuntimeOpt._tag === 'Some' ? containerRuntimeOpt.value : null;\n\n\t\t\t\t// The scope-local strategy registry — the SAME registry the\n\t\t\t\t// boot-time account funding pass dispatches through. Drives the\n\t\t\t\t// Faucet panel's `fundableCoins` + `fundAccount` (SUI via the\n\t\t\t\t// faucet strategy, WAL/DEEP via the coin-specific funding\n\t\t\t\t// strategies). Read optionally so bare smoke-test paths that don't\n\t\t\t\t// layer it degrade the fund accessors to unavailable.\n\t\t\t\tconst strategyRegistryOpt = yield* Effect.serviceOption(StrategyRegistryService);\n\t\t\t\tconst strategyRegistry: StrategyRegistry | null =\n\t\t\t\t\tstrategyRegistryOpt._tag === 'Some' ? strategyRegistryOpt.value : null;\n\n\t\t\t\t// Plugin-name-aware shaping lives HERE (the plugin layer is\n\t\t\t\t// allowed to name plugins), built off the generic, name-blind\n\t\t\t\t// control-plane `resolvedValues` seam + the container runtime.\n\t\t\t\tconst pluginDomain = buildDashboardDomain({\n\t\t\t\t\tcontrol: control.domain,\n\t\t\t\t\tidentity,\n\t\t\t\t\tcontainerRuntime,\n\t\t\t\t\tstrategyRegistry,\n\t\t\t\t});\n\n\t\t\t\tconst bindAddress = opts.bindAddress ?? DASHBOARD_DEFAULT_BIND;\n\t\t\t\tconst allocated = yield* portBroker.allocate({\n\t\t\t\t\towner: 'dashboard',\n\t\t\t\t\twindowHint: { start: 39300, size: 1000 },\n\t\t\t\t\tprobeHost: bindAddress === '0.0.0.0' ? '0.0.0.0' : '127.0.0.1',\n\t\t\t\t\t...(opts.port === undefined ? {} : { preferredPort: opts.port }),\n\t\t\t\t});\n\n\t\t\t\t// Derive the dashboard's OWN router-fronted origin for this stack.\n\t\t\t\t// The bundled SPA is served same-origin from this hostname, so the\n\t\t\t\t// browser's `Origin` on `/graphql` is exactly this value — it MUST\n\t\t\t\t// be in the allowlist. Host = `<role:api>.<app>.<stack>.localhost`\n\t\t\t\t// (per `routedHostname`), port = the router entrypoint port (9810),\n\t\t\t\t// which is the port the browser actually uses, NOT the broker\n\t\t\t\t// loopback port. Router-derivation failure → `null` (allowlist still\n\t\t\t\t// includes the direct loopback + caller origins).\n\t\t\t\tconst routedDashboardOrigin = yield* routedHostname(identity, DASHBOARD_ROUTE_ROLE).pipe(\n\t\t\t\t\tEffect.map((hostname) =>\n\t\t\t\t\t\trenderUrl({ protocol: 'http', hostname, port: DASHBOARD_ENTRYPOINT_PORT }),\n\t\t\t\t\t),\n\t\t\t\t\tEffect.orElseSucceed(() => null),\n\t\t\t\t);\n\n\t\t\t\t// Direct loopback origins: when the dashboard is reached on the raw\n\t\t\t\t// broker port (host-loopback fallback / direct tooling) the SPA's\n\t\t\t\t// same-origin `Origin` is the loopback form. Both 127.0.0.1 and\n\t\t\t\t// localhost name the same listener; allow both for this stack's port.\n\t\t\t\tconst directOrigins = [\n\t\t\t\t\t`http://127.0.0.1:${allocated.port}`,\n\t\t\t\t\t`http://localhost:${allocated.port}`,\n\t\t\t\t];\n\n\t\t\t\tconst originPolicy = yield* resolveOriginPolicy({\n\t\t\t\t\tapp: identity.app,\n\t\t\t\t\tstack: identity.stack,\n\t\t\t\t\troutedDashboardOrigin,\n\t\t\t\t\tdirectOrigins,\n\t\t\t\t\textraOrigins: opts.allowedOrigins ?? [],\n\t\t\t\t});\n\n\t\t\t\tconst server = yield* listenScopedHttpServer({\n\t\t\t\t\tbindAddress,\n\t\t\t\t\tport: allocated.port,\n\t\t\t\t\tlistener: makeDashboardListener({\n\t\t\t\t\t\toriginPolicy,\n\t\t\t\t\t\tcontext: {\n\t\t\t\t\t\t\tstate: control.state,\n\t\t\t\t\t\t\tpublishCommand: control.publishCommand,\n\t\t\t\t\t\t\tdomain: control.domain,\n\t\t\t\t\t\t\tpluginDomain,\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t\tonListenError: (cause) =>\n\t\t\t\t\t\tnew Error(\n\t\t\t\t\t\t\t`dashboard HTTP server listen failed on ${bindAddress}:${allocated.port}: ${String(cause)}`,\n\t\t\t\t\t\t),\n\t\t\t\t});\n\n\t\t\t\treturn { url: server.url, localPort: allocated.port } satisfies DashboardValue;\n\t\t\t}),\n\t\tcapabilities: ({ value, runtime }) => [\n\t\t\tmakeDashboardRoutable({\n\t\t\t\tapp: runtime.identity.app,\n\t\t\t\tstack: runtime.identity.stack,\n\t\t\t\tport: value.localPort,\n\t\t\t}),\n\t\t],\n\t});\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA+DA,MAAM,oBAAoB,SAAsC,YAAY;AAO5E,MAAM,yBAAyB;;AAG/B,SAAgB,UAAU,OAAyB,EAAE,EAAa;AACjE,QAAO,aAAa;EACnB,IAAI,kBAAkB;EACtB,MAAM;EACN,SAAS;EACT,aACC,OAAO,IAAI,aAAa;GACvB,MAAM,aAAa,OAAO;GAC1B,MAAM,UAAU,OAAO;GACvB,MAAM,WAAW,OAAO;GAMxB,MAAM,sBAAsB,OAAO,OAAO,cAAc,wBAAwB;GAChF,MAAM,mBACL,oBAAoB,SAAS,SAAS,oBAAoB,QAAQ;GAQnE,MAAM,sBAAsB,OAAO,OAAO,cAAc,wBAAwB;GAChF,MAAM,mBACL,oBAAoB,SAAS,SAAS,oBAAoB,QAAQ;GAKnE,MAAM,eAAe,qBAAqB;IACzC,SAAS,QAAQ;IACjB;IACA;IACA;IACA,CAAC;GAEF,MAAM,cAAc,KAAK,eAAe;GACxC,MAAM,YAAY,OAAO,WAAW,SAAS;IAC5C,OAAO;IACP,YAAY;KAAE,OAAO;KAAO,MAAM;KAAM;IACxC,WAAW,gBAAgB,YAAY,YAAY;IACnD,GAAI,KAAK,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,eAAe,KAAK,MAAM;IAC/D,CAAC;GAUF,MAAM,wBAAwB,OAAO,eAAe,UAAA,MAA+B,CAAC,KACnF,OAAO,KAAK,aACX,UAAU;IAAE,UAAU;IAAQ;IAAU,MAAM;IAA2B,CAAC,CAC1E,EACD,OAAO,oBAAoB,KAAK,CAChC;GAMD,MAAM,gBAAgB,CACrB,oBAAoB,UAAU,QAC9B,oBAAoB,UAAU,OAC9B;GAED,MAAM,eAAe,OAAO,oBAAoB;IAC/C,KAAK,SAAS;IACd,OAAO,SAAS;IAChB;IACA;IACA,cAAc,KAAK,kBAAkB,EAAE;IACvC,CAAC;AAoBF,UAAO;IAAE,MAAK,OAlBQ,uBAAuB;KAC5C;KACA,MAAM,UAAU;KAChB,UAAU,sBAAsB;MAC/B;MACA,SAAS;OACR,OAAO,QAAQ;OACf,gBAAgB,QAAQ;OACxB,QAAQ,QAAQ;OAChB;OACA;MACD,CAAC;KACF,gBAAgB,0BACf,IAAI,MACH,0CAA0C,YAAY,GAAG,UAAU,KAAK,IAAI,OAAO,MAAM,GACzF;KACF,CAAC,EAEmB;IAAK,WAAW,UAAU;IAAM;IACpD;EACH,eAAe,EAAE,OAAO,cAAc,CACrC,sBAAsB;GACrB,KAAK,QAAQ,SAAS;GACtB,OAAO,QAAQ,SAAS;GACxB,MAAM,MAAM;GACZ,CAAC,CACF;EACD,CAAC"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../src/plugins/dashboard/index.ts"],"sourcesContent":["// Dashboard plugin.\n//\n// Runs an in-process GraphQL server (Pothos schema + graphql-yoga) that\n// exposes the live projection, control commands, and the projection\n// subscription. Modeled on the `wallet` plugin: allocate a loopback port\n// from the port broker, start a scoped HTTP server, and contribute a\n// Routable so the router fronts it under `dashboard.<app>.<stack>.localhost`.\n//\n// Data access is pure control plane: the projection (`state`) and command\n// publisher (`publishCommand`) come from `ControlPlaneService`, handed to\n// the server as the GraphQL context.\n\nimport { Effect } from 'effect';\nimport { type AnyPlugin, definePlugin, resource } from '../../api/define-plugin.ts';\nimport { PluginContext } from '../../substrate/plugin-ctx.ts';\nimport type { StrategyRegistry } from '../../contracts/strategy-contributor.ts';\nimport { StrategyRegistryService } from '../../substrate/runtime/strategy-registry/index.ts';\nimport { ControlPlaneService } from '../../substrate/runtime/control-plane/service.ts';\nimport { IdentityContext } from '../../substrate/runtime/paths.ts';\nimport { PortBrokerService } from '../../substrate/runtime/port-broker/index.ts';\nimport { renderUrl, routedHostname } from '../../substrate/runtime/routed-url.ts';\nimport { listenScopedHttpServer } from '../../substrate/runtime/scoped-http-server.ts';\nimport { buildDashboardDomain } from './domain.ts';\nimport { resolveOriginPolicy } from './origin-policy.ts';\nimport {\n\tDASHBOARD_ENTRYPOINT_PORT,\n\tDASHBOARD_ROUTE_ROLE,\n\tmakeDashboardRoutable,\n} from './routable.ts';\nimport { makeDashboardListener } from './server.ts';\n\nexport interface DashboardOptions {\n\t/** Preferred loopback port; the broker forward-scans if it's busy. */\n\treadonly port?: number;\n\t/** NIC the HTTP server binds. Defaults to `'0.0.0.0'` because the router\n\t *  runs in Docker and must reach this host process through the host-gateway\n\t *  address on native Linux (a `127.0.0.1`-only listener is unreachable from\n\t *  the host-gateway IP). The public dashboard URL stays router-fronted and\n\t *  stack-scoped. */\n\treadonly bindAddress?: string;\n\t/** Extra origins merged on top of the dashboard's own router-fronted origin\n\t *  for this stack (and the direct loopback origins). Useful for headless\n\t *  test runners and custom dev hosts. The dashboard does NOT auto-allowlist\n\t *  a bare `*.localhost` form — that is not stack-scoped, so a sibling stack\n\t *  could drive the destructive control-plane mutations cross-origin. */\n\treadonly allowedOrigins?: ReadonlyArray<string>;\n\t// Note on log retention: the queryable cross-service log store the\n\t// dashboard reads is process-scoped and owned by the SUPERVISOR (not this\n\t// plugin), so its capacity is configured there. Tune it with the\n\t// `DEVSTACK_DASHBOARD_LOG_CAPACITY` (per-service record cap, default 2000)\n\t// and `DEVSTACK_DASHBOARD_LOG_MAX_SERVICES` (distinct-ring cap, default\n\t// 256) env vars, or programmatically via `SupervisorStartupOptions.logStore`.\n\t// See substrate/runtime/observability/log-store.ts.\n}\n\nexport interface DashboardValue {\n\t/** Loopback URL of the dashboard server. */\n\treadonly url: string;\n\t/** The allocated loopback port. */\n\treadonly localPort: number;\n}\n\nconst dashboardResource = resource<'dashboard', DashboardValue>('dashboard');\n// `0.0.0.0`: the router runs in Docker, so on native Linux it reaches this\n// host process through the Docker host-gateway address instead of host\n// loopback — a `127.0.0.1`-only listener is unreachable from that IP, which\n// produced a 502 from Traefik and the `RouteReadinessProbeFailed` WARN. The\n// published dashboard URL remains stack-scoped through the router. Mirrors\n// `WALLET_DEFAULT_BIND_ADDRESS`.\nconst DASHBOARD_DEFAULT_BIND = '0.0.0.0';\n\n/** Construct the devstack dashboard plugin. */\nexport function dashboard(opts: DashboardOptions = {}): AnyPlugin {\n\treturn definePlugin({\n\t\tid: dashboardResource.id,\n\t\trole: 'service',\n\t\tsection: 'service',\n\t\t// Operator transport: a live snapshot-restore re-acquire must leave\n\t\t// this plugin running, or a dashboard-initiated restore would tear\n\t\t// down the very HTTP connection it's answering on (502). It holds no\n\t\t// restorable chain state, so staying live is safe.\n\t\tkeepAliveOnRestore: true,\n\t\tstart: () =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst ctx = yield* PluginContext;\n\t\t\t\tconst portBroker = yield* PortBrokerService;\n\t\t\t\tconst control = yield* ControlPlaneService;\n\t\t\t\tconst identity = yield* IdentityContext;\n\n\t\t\t\t// The scope-local strategy registry — the SAME registry the\n\t\t\t\t// boot-time account funding pass dispatches through. Drives the\n\t\t\t\t// Faucet panel's `fundableCoins` + `fundAccount` (SUI via the\n\t\t\t\t// faucet strategy, WAL/DEEP via the coin-specific funding\n\t\t\t\t// strategies). Read optionally so bare smoke-test paths that don't\n\t\t\t\t// layer it degrade the fund accessors to unavailable.\n\t\t\t\tconst strategyRegistryOpt = yield* Effect.serviceOption(StrategyRegistryService);\n\t\t\t\tconst strategyRegistry: StrategyRegistry | null =\n\t\t\t\t\tstrategyRegistryOpt._tag === 'Some' ? strategyRegistryOpt.value : null;\n\n\t\t\t\t// Plugin-name-aware shaping lives HERE (the plugin layer is\n\t\t\t\t// allowed to name plugins), built off the generic, name-blind\n\t\t\t\t// control-plane `resolvedValues` seam.\n\t\t\t\tconst pluginDomain = buildDashboardDomain({\n\t\t\t\t\tcontrol: control.domain,\n\t\t\t\t\tstrategyRegistry,\n\t\t\t\t});\n\n\t\t\t\tconst bindAddress = opts.bindAddress ?? DASHBOARD_DEFAULT_BIND;\n\t\t\t\tconst allocated = yield* portBroker.allocate({\n\t\t\t\t\towner: 'dashboard',\n\t\t\t\t\twindowHint: { start: 39300, size: 1000 },\n\t\t\t\t\tprobeHost: bindAddress === '0.0.0.0' ? '0.0.0.0' : '127.0.0.1',\n\t\t\t\t\t...(opts.port === undefined ? {} : { preferredPort: opts.port }),\n\t\t\t\t});\n\n\t\t\t\t// Derive the dashboard's OWN router-fronted origin for this stack.\n\t\t\t\t// The bundled SPA is served same-origin from this hostname, so the\n\t\t\t\t// browser's `Origin` on `/graphql` is exactly this value — it MUST\n\t\t\t\t// be in the allowlist. Host = `<role:api>.<app>.<stack>.localhost`\n\t\t\t\t// (per `routedHostname`), port = the router entrypoint port (9810),\n\t\t\t\t// which is the port the browser actually uses, NOT the broker\n\t\t\t\t// loopback port. Router-derivation failure → `null` (allowlist still\n\t\t\t\t// includes the direct loopback + caller origins).\n\t\t\t\tconst routedDashboardOrigin = yield* routedHostname(identity, DASHBOARD_ROUTE_ROLE).pipe(\n\t\t\t\t\tEffect.map((hostname) =>\n\t\t\t\t\t\trenderUrl({ protocol: 'http', hostname, port: DASHBOARD_ENTRYPOINT_PORT }),\n\t\t\t\t\t),\n\t\t\t\t\tEffect.orElseSucceed(() => null),\n\t\t\t\t);\n\n\t\t\t\t// Direct loopback origins: when the dashboard is reached on the raw\n\t\t\t\t// broker port (host-loopback fallback / direct tooling) the SPA's\n\t\t\t\t// same-origin `Origin` is the loopback form. Both 127.0.0.1 and\n\t\t\t\t// localhost name the same listener; allow both for this stack's port.\n\t\t\t\tconst directOrigins = [\n\t\t\t\t\t`http://127.0.0.1:${allocated.port}`,\n\t\t\t\t\t`http://localhost:${allocated.port}`,\n\t\t\t\t];\n\n\t\t\t\tconst originPolicy = yield* resolveOriginPolicy({\n\t\t\t\t\tapp: identity.app,\n\t\t\t\t\tstack: identity.stack,\n\t\t\t\t\troutedDashboardOrigin,\n\t\t\t\t\tdirectOrigins,\n\t\t\t\t\textraOrigins: opts.allowedOrigins ?? [],\n\t\t\t\t});\n\n\t\t\t\tconst server = yield* listenScopedHttpServer({\n\t\t\t\t\tbindAddress,\n\t\t\t\t\tport: allocated.port,\n\t\t\t\t\tlistener: makeDashboardListener({\n\t\t\t\t\t\toriginPolicy,\n\t\t\t\t\t\tcontext: {\n\t\t\t\t\t\t\tstate: control.state,\n\t\t\t\t\t\t\tpublishCommand: control.publishCommand,\n\t\t\t\t\t\t\tsubmitCommand: control.submitCommand,\n\t\t\t\t\t\t\tdomain: control.domain,\n\t\t\t\t\t\t\tpluginDomain,\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t\tonListenError: (cause) =>\n\t\t\t\t\t\tnew Error(\n\t\t\t\t\t\t\t`dashboard HTTP server listen failed on ${bindAddress}:${allocated.port}: ${String(cause)}`,\n\t\t\t\t\t\t),\n\t\t\t\t});\n\n\t\t\t\tconst resolved = { url: server.url, localPort: allocated.port } satisfies DashboardValue;\n\n\t\t\t\t// Emit the Routable via the ctx verb before returning.\n\t\t\t\t// `value.localPort` is this resolved `localPort`;\n\t\t\t\t// `runtime.identity.app`/`.stack` is the `identity` this\n\t\t\t\t// `start` already holds from `IdentityContext`.\n\t\t\t\tctx.endpoint(\n\t\t\t\t\tmakeDashboardRoutable({\n\t\t\t\t\t\tapp: identity.app,\n\t\t\t\t\t\tstack: identity.stack,\n\t\t\t\t\t\tport: resolved.localPort,\n\t\t\t\t\t}),\n\t\t\t\t);\n\n\t\t\t\treturn resolved;\n\t\t\t}),\n\t});\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA8DA,MAAM,oBAAoB,SAAsC,WAAW;AAO3E,MAAM,yBAAyB;;AAG/B,SAAgB,UAAU,OAAyB,CAAC,GAAc;CACjE,OAAO,aAAa;EACnB,IAAI,kBAAkB;EACtB,MAAM;EACN,SAAS;EAKT,oBAAoB;EACpB,aACC,OAAO,IAAI,aAAa;GACvB,MAAM,MAAM,OAAO;GACnB,MAAM,aAAa,OAAO;GAC1B,MAAM,UAAU,OAAO;GACvB,MAAM,WAAW,OAAO;GAQxB,MAAM,sBAAsB,OAAO,OAAO,cAAc,uBAAuB;GAC/E,MAAM,mBACL,oBAAoB,SAAS,SAAS,oBAAoB,QAAQ;GAKnE,MAAM,eAAe,qBAAqB;IACzC,SAAS,QAAQ;IACjB;GACD,CAAC;GAED,MAAM,cAAc,KAAK,eAAe;GACxC,MAAM,YAAY,OAAO,WAAW,SAAS;IAC5C,OAAO;IACP,YAAY;KAAE,OAAO;KAAO,MAAM;IAAK;IACvC,WAAW,gBAAgB,YAAY,YAAY;IACnD,GAAI,KAAK,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,eAAe,KAAK,KAAK;GAC/D,CAAC;GAUD,MAAM,wBAAwB,OAAO,eAAe,UAAA,KAA8B,CAAC,CAAC,KACnF,OAAO,KAAK,aACX,UAAU;IAAE,UAAU;IAAQ;IAAU,MAAM;GAA0B,CAAC,CAC1E,GACA,OAAO,oBAAoB,IAAI,CAChC;GAMA,MAAM,gBAAgB,CACrB,oBAAoB,UAAU,QAC9B,oBAAoB,UAAU,MAC/B;GAEA,MAAM,eAAe,OAAO,oBAAoB;IAC/C,KAAK,SAAS;IACd,OAAO,SAAS;IAChB;IACA;IACA,cAAc,KAAK,kBAAkB,CAAC;GACvC,CAAC;GAqBD,MAAM,WAAW;IAAE,MAAK,OAnBF,uBAAuB;KAC5C;KACA,MAAM,UAAU;KAChB,UAAU,sBAAsB;MAC/B;MACA,SAAS;OACR,OAAO,QAAQ;OACf,gBAAgB,QAAQ;OACxB,eAAe,QAAQ;OACvB,QAAQ,QAAQ;OAChB;MACD;KACD,CAAC;KACD,gBAAgB,0BACf,IAAI,MACH,0CAA0C,YAAY,GAAG,UAAU,KAAK,IAAI,OAAO,KAAK,GACzF;IACF,CAAC,EAAA,CAE8B;IAAK,WAAW,UAAU;GAAK;GAM9D,IAAI,SACH,sBAAsB;IACrB,KAAK,SAAS;IACd,OAAO,SAAS;IAChB,MAAM,SAAS;GAChB,CAAC,CACF;GAEA,OAAO;EACR,CAAC;CACH,CAAC;AACF"}

package/dist/plugins/dashboard/origin-policy.mjs

@@ -1,4 +1,4 @@
-import { SpanAttr } from "../../substrate/runtime/observability/spans.mjs";
+import { LogAttr } from "../../substrate/runtime/observability/log-attrs.mjs";
 import { Effect } from "effect";
 //#region src/plugins/dashboard/origin-policy.ts
 /**
@@ -21,8 +21,8 @@ const resolveOriginPolicy = (inputs) => Effect.gen(function* () {
 	for (const o of inputs.directOrigins) allowed.add(o);
 	for (const o of inputs.extraOrigins) allowed.add(o);
 	if (allowed.size === 0) yield* Effect.logWarning("dashboard origin allowlist is empty").pipe(Effect.annotateLogs({
-		[SpanAttr.app]: inputs.app,
-		[SpanAttr.stack]: inputs.stack
+		[LogAttr.app]: inputs.app,
+		[LogAttr.stack]: inputs.stack
 	}));
 	return { allowed };
 });

package/dist/plugins/dashboard/origin-policy.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"origin-policy.mjs","names":[],"sources":["../../../src/plugins/dashboard/origin-policy.ts"],"sourcesContent":["// Dashboard plugin — CORS / origin allowlist policy.\n//\n// This MIRRORS the wallet's `plugins/wallet/origin-policy.ts` pattern\n// (stack-scoped allowlist, `resolveOriginPolicy` / `checkOrigin`) rather\n// than importing it, to avoid coupling dashboard→wallet. The two policies\n// are intentionally small and self-contained; the wallet copy carries\n// bearer-specific history that does not apply here.\n//\n// The allowed set is built from real, substrate-wired sources:\n//\n//   - the dashboard's OWN router-fronted origin for THIS stack\n//     (`routedDashboardOrigin`) — the SPA is served same-origin from this\n//     hostname, so the browser's `Origin` on `/graphql` IS this value;\n//   - the direct loopback origin(s) the bundled SPA might be loaded from\n//     when reached on the raw broker port (`directOrigins`);\n//   - any explicit caller-supplied origins (`extraOrigins` →\n//     `DashboardOptions.allowedOrigins`).\n//\n// We deliberately do NOT auto-allow a bare `*.localhost` / `localhost:<port>`\n// form: `localhost` is not stack-scoped, so a sibling stack on the same\n// port could drive the destructive control-plane mutations cross-origin.\n\nimport { Effect } from 'effect';\n\nimport { SpanAttr } from '../../substrate/runtime/observability/spans.ts';\n\n/** Result of resolving the origin allowlist at boot. Captured into the\n *  server closure so per-request checks are pure string comparison. */\nexport interface OriginPolicy {\n\treadonly allowed: ReadonlySet<string>;\n}\n\n/** Per-stack inputs the policy resolver needs. Supplied by the plugin at\n *  start time (identity + routed-url derivation); this module does not\n *  reach into the broker or router itself. */\nexport interface OriginPolicyInputs {\n\treadonly app: string;\n\treadonly stack: string;\n\t/** The dashboard's router-fronted origin for this stack\n\t *  (`http://api.<app>.<stack>.localhost:<entrypoint-port>`). `null`\n\t *  only in tests that bypass the router derivation. */\n\treadonly routedDashboardOrigin: string | null;\n\t/** Direct loopback origins the SPA may be loaded from when reached on\n\t *  the raw broker port (host-loopback fallback / direct tooling). */\n\treadonly directOrigins: ReadonlyArray<string>;\n\t/** Explicit caller-supplied origins (`DashboardOptions.allowedOrigins`). */\n\treadonly extraOrigins: ReadonlyArray<string>;\n}\n\n/**\n * Resolve the per-stack origin allowlist.\n *\n *  - Always allowlisted: the dashboard's router-fronted origin for this\n *    stack (`routedDashboardOrigin`), when the router derivation produced\n *    one — this is the same-origin the bundled SPA loads from.\n *  - Always allowlisted: the direct loopback origins + any explicit\n *    caller-supplied `extraOrigins`.\n *\n * Empty-allowlist policy: allowed. The dashboard boots normally; with an\n * empty allowlist the per-request gate refuses every cross-origin request\n * (every Origin lands in `forbidden`). A `logWarning` surfaces the\n * configuration for operator visibility.\n */\nexport const resolveOriginPolicy = (inputs: OriginPolicyInputs): Effect.Effect<OriginPolicy> =>\n\tEffect.gen(function* () {\n\t\tconst allowed = new Set<string>();\n\n\t\tif (inputs.routedDashboardOrigin !== null) {\n\t\t\tallowed.add(inputs.routedDashboardOrigin);\n\t\t}\n\t\tfor (const o of inputs.directOrigins) {\n\t\t\tallowed.add(o);\n\t\t}\n\t\tfor (const o of inputs.extraOrigins) {\n\t\t\tallowed.add(o);\n\t\t}\n\n\t\tif (allowed.size === 0) {\n\t\t\tyield* Effect.logWarning('dashboard origin allowlist is empty').pipe(\n\t\t\t\tEffect.annotateLogs({\n\t\t\t\t\t[SpanAttr.app]: inputs.app,\n\t\t\t\t\t[SpanAttr.stack]: inputs.stack,\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\n\t\treturn { allowed } satisfies OriginPolicy;\n\t});\n\n/** Per-request origin gate. Returns `'missing'` for absent Origin,\n *  `'forbidden'` for an Origin not in the allowlist, `'ok'` for accepted.\n *\n *  `'missing'` is its OWN shape: a request with no Origin (server-side\n *  tooling, the route-readiness probe, curl) is NOT a cross-origin browser\n *  request, so CORS does not govern it — the caller emits a normal response\n *  with no `Access-Control-Allow-Origin` header. */\nexport type OriginCheckResult = 'missing' | 'forbidden' | 'ok';\n\nexport const checkOrigin = (\n\tpolicy: OriginPolicy,\n\theaderValue: string | null | undefined,\n): OriginCheckResult => {\n\tif (headerValue === undefined || headerValue === null || headerValue.length === 0) {\n\t\treturn 'missing';\n\t}\n\treturn policy.allowed.has(headerValue) ? 'ok' : 'forbidden';\n};\n"],"mappings":";;;;;;;;;;;;;;;;;AA+DA,MAAa,uBAAuB,WACnC,OAAO,IAAI,aAAa;CACvB,MAAM,0BAAU,IAAI,KAAa;AAEjC,KAAI,OAAO,0BAA0B,KACpC,SAAQ,IAAI,OAAO,sBAAsB;AAE1C,MAAK,MAAM,KAAK,OAAO,cACtB,SAAQ,IAAI,EAAE;AAEf,MAAK,MAAM,KAAK,OAAO,aACtB,SAAQ,IAAI,EAAE;AAGf,KAAI,QAAQ,SAAS,EACpB,QAAO,OAAO,WAAW,sCAAsC,CAAC,KAC/D,OAAO,aAAa;GAClB,SAAS,MAAM,OAAO;GACtB,SAAS,QAAQ,OAAO;EACzB,CAAC,CACF;AAGF,QAAO,EAAE,SAAS;EACjB;AAWH,MAAa,eACZ,QACA,gBACuB;AACvB,KAAI,gBAAgB,KAAA,KAAa,gBAAgB,QAAQ,YAAY,WAAW,EAC/E,QAAO;AAER,QAAO,OAAO,QAAQ,IAAI,YAAY,GAAG,OAAO"}
+{"version":3,"file":"origin-policy.mjs","names":[],"sources":["../../../src/plugins/dashboard/origin-policy.ts"],"sourcesContent":["// Dashboard plugin — CORS / origin allowlist policy.\n//\n// This MIRRORS the wallet's `plugins/wallet/origin-policy.ts` pattern\n// (stack-scoped allowlist, `resolveOriginPolicy` / `checkOrigin`) rather\n// than importing it, to avoid coupling dashboard→wallet. The two policies\n// are intentionally small and self-contained; the wallet copy carries\n// bearer-specific history that does not apply here.\n//\n// The allowed set is built from real, substrate-wired sources:\n//\n//   - the dashboard's OWN router-fronted origin for THIS stack\n//     (`routedDashboardOrigin`) — the SPA is served same-origin from this\n//     hostname, so the browser's `Origin` on `/graphql` IS this value;\n//   - the direct loopback origin(s) the bundled SPA might be loaded from\n//     when reached on the raw broker port (`directOrigins`);\n//   - any explicit caller-supplied origins (`extraOrigins` →\n//     `DashboardOptions.allowedOrigins`).\n//\n// We deliberately do NOT auto-allow a bare `*.localhost` / `localhost:<port>`\n// form: `localhost` is not stack-scoped, so a sibling stack on the same\n// port could drive the destructive control-plane mutations cross-origin.\n\nimport { Effect } from 'effect';\n\nimport { LogAttr } from '../../substrate/runtime/observability/log-attrs.ts';\n\n/** Result of resolving the origin allowlist at boot. Captured into the\n *  server closure so per-request checks are pure string comparison. */\nexport interface OriginPolicy {\n\treadonly allowed: ReadonlySet<string>;\n}\n\n/** Per-stack inputs the policy resolver needs. Supplied by the plugin at\n *  start time (identity + routed-url derivation); this module does not\n *  reach into the broker or router itself. */\nexport interface OriginPolicyInputs {\n\treadonly app: string;\n\treadonly stack: string;\n\t/** The dashboard's router-fronted origin for this stack\n\t *  (`http://api.<app>.<stack>.localhost:<entrypoint-port>`). `null`\n\t *  only in tests that bypass the router derivation. */\n\treadonly routedDashboardOrigin: string | null;\n\t/** Direct loopback origins the SPA may be loaded from when reached on\n\t *  the raw broker port (host-loopback fallback / direct tooling). */\n\treadonly directOrigins: ReadonlyArray<string>;\n\t/** Explicit caller-supplied origins (`DashboardOptions.allowedOrigins`). */\n\treadonly extraOrigins: ReadonlyArray<string>;\n}\n\n/**\n * Resolve the per-stack origin allowlist.\n *\n *  - Always allowlisted: the dashboard's router-fronted origin for this\n *    stack (`routedDashboardOrigin`), when the router derivation produced\n *    one — this is the same-origin the bundled SPA loads from.\n *  - Always allowlisted: the direct loopback origins + any explicit\n *    caller-supplied `extraOrigins`.\n *\n * Empty-allowlist policy: allowed. The dashboard boots normally; with an\n * empty allowlist the per-request gate refuses every cross-origin request\n * (every Origin lands in `forbidden`). A `logWarning` surfaces the\n * configuration for operator visibility.\n */\nexport const resolveOriginPolicy = (inputs: OriginPolicyInputs): Effect.Effect<OriginPolicy> =>\n\tEffect.gen(function* () {\n\t\tconst allowed = new Set<string>();\n\n\t\tif (inputs.routedDashboardOrigin !== null) {\n\t\t\tallowed.add(inputs.routedDashboardOrigin);\n\t\t}\n\t\tfor (const o of inputs.directOrigins) {\n\t\t\tallowed.add(o);\n\t\t}\n\t\tfor (const o of inputs.extraOrigins) {\n\t\t\tallowed.add(o);\n\t\t}\n\n\t\tif (allowed.size === 0) {\n\t\t\tyield* Effect.logWarning('dashboard origin allowlist is empty').pipe(\n\t\t\t\tEffect.annotateLogs({\n\t\t\t\t\t[LogAttr.app]: inputs.app,\n\t\t\t\t\t[LogAttr.stack]: inputs.stack,\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\n\t\treturn { allowed } satisfies OriginPolicy;\n\t});\n\n/** Per-request origin gate. Returns `'missing'` for absent Origin,\n *  `'forbidden'` for an Origin not in the allowlist, `'ok'` for accepted.\n *\n *  `'missing'` is its OWN shape: a request with no Origin (server-side\n *  tooling, the route-readiness probe, curl) is NOT a cross-origin browser\n *  request, so CORS does not govern it — the caller emits a normal response\n *  with no `Access-Control-Allow-Origin` header. */\nexport type OriginCheckResult = 'missing' | 'forbidden' | 'ok';\n\nexport const checkOrigin = (\n\tpolicy: OriginPolicy,\n\theaderValue: string | null | undefined,\n): OriginCheckResult => {\n\tif (headerValue === undefined || headerValue === null || headerValue.length === 0) {\n\t\treturn 'missing';\n\t}\n\treturn policy.allowed.has(headerValue) ? 'ok' : 'forbidden';\n};\n"],"mappings":";;;;;;;;;;;;;;;;;AA+DA,MAAa,uBAAuB,WACnC,OAAO,IAAI,aAAa;CACvB,MAAM,0BAAU,IAAI,IAAY;CAEhC,IAAI,OAAO,0BAA0B,MACpC,QAAQ,IAAI,OAAO,qBAAqB;CAEzC,KAAK,MAAM,KAAK,OAAO,eACtB,QAAQ,IAAI,CAAC;CAEd,KAAK,MAAM,KAAK,OAAO,cACtB,QAAQ,IAAI,CAAC;CAGd,IAAI,QAAQ,SAAS,GACpB,OAAO,OAAO,WAAW,qCAAqC,CAAC,CAAC,KAC/D,OAAO,aAAa;GAClB,QAAQ,MAAM,OAAO;GACrB,QAAQ,QAAQ,OAAO;CACzB,CAAC,CACF;CAGD,OAAO,EAAE,QAAQ;AAClB,CAAC;AAWF,MAAa,eACZ,QACA,gBACuB;CACvB,IAAI,gBAAgB,KAAA,KAAa,gBAAgB,QAAQ,YAAY,WAAW,GAC/E,OAAO;CAER,OAAO,OAAO,QAAQ,IAAI,WAAW,IAAI,OAAO;AACjD"}

package/dist/plugins/dashboard/routable.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"routable.mjs","names":[],"sources":["../../../src/plugins/dashboard/routable.ts"],"sourcesContent":["// Dashboard plugin — Routable contribution.\n//\n// The dashboard's HTTP/GraphQL server is a host process (not a docker\n// container) listening on a loopback port the substrate's port broker\n// hands us. The router (Traefik) fronts the loopback port under a\n// stack-scoped hostname like `dashboard.<app>.localhost:<router-port>`.\n//\n// Mirrors `plugins/wallet/routable.ts`. The entrypoint declared here must\n// be aggregated into `plugins/router-entrypoints.ts` so Traefik opens the\n// listener port.\n\nimport type { EntrypointDecl, RoutableDecl } from '../../contracts/routable.ts';\n\nexport const DASHBOARD_ENDPOINT_NAME = 'dashboard';\nexport const DASHBOARD_ROUTE_ROLE = 'api' as const;\nexport const DASHBOARD_ENTRYPOINT_PORT = 9810;\n\nexport const DASHBOARD_ENTRYPOINTS: ReadonlyArray<EntrypointDecl> = [\n\t{ name: DASHBOARD_ENDPOINT_NAME, port: DASHBOARD_ENTRYPOINT_PORT, protocol: 'http' },\n];\n\n/** Construct the Routable decl for the stack-scoped dashboard endpoint. */\nexport const makeDashboardRoutable = (parts: {\n\treadonly app: string;\n\treadonly stack: string;\n\treadonly port: number;\n}): RoutableDecl => ({\n\tkind: 'routable',\n\tendpointName: DASHBOARD_ENDPOINT_NAME,\n\tdispatchId: {\n\t\tserviceKey: `dashboard.${parts.app}.${parts.stack}`,\n\t\trole: DASHBOARD_ROUTE_ROLE,\n\t},\n\tupstream: { type: 'host-loopback', port: parts.port },\n\t// CORS is owned by the dashboard server itself (`server.ts` `corsOptionsFor`\n\t// + `origin-policy.ts`): a STACK-SCOPED origin allowlist (this dashboard's\n\t// own router-fronted origin + direct loopback origins + caller-supplied\n\t// `allowedOrigins`) that guards the destructive control-plane mutations and\n\t// closes the cross-stack `*.localhost` hole. We deliberately do NOT attach\n\t// the shared `devstack-cors` Traefik middleware here — that middleware is\n\t// permissive (`*` allow-origin, allow-credentials) and, when the dashboard\n\t// is reached via the router hostname, would overwrite the server's allowlist\n\t// headers and re-open the cross-origin hole. `false` keeps the in-process\n\t// policy authoritative on both the direct loopback port and the router-\n\t// fronted hostname.\n\t//\n\t// The upstream host process binds `0.0.0.0` (see `DASHBOARD_DEFAULT_BIND` in\n\t// `index.ts`) so the Docker-hosted router reaches it via the host-gateway IP\n\t// on native Linux — a `127.0.0.1`-only listener would 502 and trip the route\n\t// readiness probe.\n\tcors: false,\n\twireProtocol: 'http',\n});\n"],"mappings":";AAaA,MAAa,0BAA0B;AAEvC,MAAa,4BAA4B;AAEzC,MAAa,wBAAuD,CACnE;CAAE,MAAM;CAAyB,MAAM;CAA2B,UAAU;CAAQ,CACpF;;AAGD,MAAa,yBAAyB,WAIjB;CACpB,MAAM;CACN,cAAc;CACd,YAAY;EACX,YAAY,aAAa,MAAM,IAAI,GAAG,MAAM;EAC5C,MAAA;EACA;CACD,UAAU;EAAE,MAAM;EAAiB,MAAM,MAAM;EAAM;CAiBrD,MAAM;CACN,cAAc;CACd"}
+{"version":3,"file":"routable.mjs","names":[],"sources":["../../../src/plugins/dashboard/routable.ts"],"sourcesContent":["// Dashboard plugin — Routable contribution.\n//\n// The dashboard's HTTP/GraphQL server is a host process (not a docker\n// container) listening on a loopback port the substrate's port broker\n// hands us. The router (Traefik) fronts the loopback port under a\n// stack-scoped hostname like `dashboard.<app>.localhost:<router-port>`.\n//\n// Mirrors `plugins/wallet/routable.ts`. The entrypoint declared here must\n// be aggregated into `plugins/router-entrypoints.ts` so Traefik opens the\n// listener port.\n\nimport type { EntrypointDecl, RoutableDecl } from '../../contracts/routable.ts';\n\nexport const DASHBOARD_ENDPOINT_NAME = 'dashboard';\nexport const DASHBOARD_ROUTE_ROLE = 'api' as const;\nexport const DASHBOARD_ENTRYPOINT_PORT = 9810;\n\nexport const DASHBOARD_ENTRYPOINTS: ReadonlyArray<EntrypointDecl> = [\n\t{ name: DASHBOARD_ENDPOINT_NAME, port: DASHBOARD_ENTRYPOINT_PORT, protocol: 'http' },\n];\n\n/** Construct the Routable decl for the stack-scoped dashboard endpoint. */\nexport const makeDashboardRoutable = (parts: {\n\treadonly app: string;\n\treadonly stack: string;\n\treadonly port: number;\n}): RoutableDecl => ({\n\tkind: 'routable',\n\tendpointName: DASHBOARD_ENDPOINT_NAME,\n\tdispatchId: {\n\t\tserviceKey: `dashboard.${parts.app}.${parts.stack}`,\n\t\trole: DASHBOARD_ROUTE_ROLE,\n\t},\n\tupstream: { type: 'host-loopback', port: parts.port },\n\t// CORS is owned by the dashboard server itself (`server.ts` `corsOptionsFor`\n\t// + `origin-policy.ts`): a STACK-SCOPED origin allowlist (this dashboard's\n\t// own router-fronted origin + direct loopback origins + caller-supplied\n\t// `allowedOrigins`) that guards the destructive control-plane mutations and\n\t// closes the cross-stack `*.localhost` hole. We deliberately do NOT attach\n\t// the shared `devstack-cors` Traefik middleware here — that middleware is\n\t// permissive (`*` allow-origin, allow-credentials) and, when the dashboard\n\t// is reached via the router hostname, would overwrite the server's allowlist\n\t// headers and re-open the cross-origin hole. `false` keeps the in-process\n\t// policy authoritative on both the direct loopback port and the router-\n\t// fronted hostname.\n\t//\n\t// The upstream host process binds `0.0.0.0` (see `DASHBOARD_DEFAULT_BIND` in\n\t// `index.ts`) so the Docker-hosted router reaches it via the host-gateway IP\n\t// on native Linux — a `127.0.0.1`-only listener would 502 and trip the route\n\t// readiness probe.\n\tcors: false,\n\twireProtocol: 'http',\n});\n"],"mappings":";AAaA,MAAa,0BAA0B;AAEvC,MAAa,4BAA4B;AAEzC,MAAa,wBAAuD,CACnE;CAAE,MAAM;CAAyB,MAAM;CAA2B,UAAU;AAAO,CACpF;;AAGA,MAAa,yBAAyB,WAIjB;CACpB,MAAM;CACN,cAAc;CACd,YAAY;EACX,YAAY,aAAa,MAAM,IAAI,GAAG,MAAM;EAC5C,MAAA;CACD;CACA,UAAU;EAAE,MAAM;EAAiB,MAAM,MAAM;CAAK;CAiBpD,MAAM;CACN,cAAc;AACf"}

package/dist/plugins/dashboard/schema/builder.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"builder.mjs","names":[],"sources":["../../../../src/plugins/dashboard/schema/builder.ts"],"sourcesContent":["// Dashboard Pothos `SchemaBuilder` — the single module-level instance.\n//\n// One typed schema covers the control plane: the live projection (`state`),\n// relay node/connection access over the snapshot arrays, control mutations,\n// and the projection subscription. The builder is parameterized with the\n// relay, simple-objects, and with-input plugins (Pothos v4 defaults).\n//\n// Dependencies (the `state` ref + a `publishCommand`) are supplied per\n// request through the GraphQL context (`DashboardContext`), so the schema is\n// a single module-level value with no per-instance closure state. Resolvers\n// read deps from the 3rd resolver argument.\n\nimport SchemaBuilder from '@pothos/core';\nimport RelayPlugin from '@pothos/plugin-relay';\nimport SimpleObjectsPlugin from '@pothos/plugin-simple-objects';\nimport WithInputPlugin from '@pothos/plugin-with-input';\nimport type { Effect, SubscriptionRef } from 'effect';\nimport type { EngineCommand } from '../../../substrate/events.ts';\nimport type { SubscribableState } from '../../../substrate/projection.ts';\nimport type { ControlPlaneDomain } from '../../../substrate/runtime/control-plane/service.ts';\nimport type { DashboardDomain } from '../domain.ts';\n\n/** Per-request GraphQL context for the dashboard control plane. Resolvers\n *  read the live projection ref, the command publisher, and the\n *  plugin-domain accessor surfaces from here (3rd resolver arg), so the\n *  schema carries no closed-over state. */\nexport interface DashboardContext {\n\treadonly state: SubscriptionRef.SubscriptionRef<SubscribableState>;\n\treadonly publishCommand: (command: EngineCommand) => Effect.Effect<void>;\n\t/** Generic, name-blind control-plane accessors: snapshot catalog +\n\t *  restore/delete, the observability rings, and the resolved-values\n\t *  seam. (Plugin-name-aware shaping lives in `pluginDomain`.) */\n\treadonly domain: ControlPlaneDomain;\n\t/** Plugin-name-aware accessors the dashboard plugin shapes from the\n\t *  generic control-plane `resolvedValues`: fork-vs-local mode,\n\t *  deepbook/seal/coin capability ids, postgres wire-protocol stats,\n\t *  and the coin mint action. */\n\treadonly pluginDomain: DashboardDomain;\n}\n\ninterface SchemaTypes {\n\tContext: DashboardContext;\n\t// Output fields are non-nullable unless a resolver opts in with\n\t// `nullable: true` — the projection always resolves a concrete value.\n\tDefaultFieldNullability: false;\n}\n\n/** The single module-level builder. Object types, enums, and root types are\n *  defined against this instance across the sibling `schema/*` modules; the\n *  built schema is `dashboardSchema` (see `../schema.ts`). */\nexport const builder = new SchemaBuilder<SchemaTypes>({\n\tplugins: [SimpleObjectsPlugin, RelayPlugin, WithInputPlugin],\n\trelay: {},\n\tdefaultFieldNullability: false,\n});\n"],"mappings":";;;;;;;;AAkDA,MAAa,UAAU,IAAI,cAA2B;CACrD,SAAS;EAAC;EAAqB;EAAa;EAAgB;CAC5D,OAAO,EAAE;CACT,yBAAyB;CACzB,CAAC"}
+{"version":3,"file":"builder.mjs","names":[],"sources":["../../../../src/plugins/dashboard/schema/builder.ts"],"sourcesContent":["// Dashboard Pothos `SchemaBuilder` — the single module-level instance.\n//\n// One typed schema covers the control plane: the live projection (`state`),\n// relay node/connection access over the snapshot arrays, control mutations,\n// and the projection subscription. The builder is parameterized with the\n// relay, simple-objects, and with-input plugins (Pothos v4 defaults).\n//\n// Dependencies (the `state` ref + a `publishCommand`) are supplied per\n// request through the GraphQL context (`DashboardContext`), so the schema is\n// a single module-level value with no per-instance closure state. Resolvers\n// read deps from the 3rd resolver argument.\n\nimport SchemaBuilder from '@pothos/core';\nimport RelayPlugin from '@pothos/plugin-relay';\nimport SimpleObjectsPlugin from '@pothos/plugin-simple-objects';\nimport WithInputPlugin from '@pothos/plugin-with-input';\nimport type { Effect, SubscriptionRef } from 'effect';\nimport type { EngineCommand } from '../../../substrate/events.ts';\nimport type { SubscribableState } from '../../../substrate/projection.ts';\nimport type { ControlPlaneDomain } from '../../../substrate/runtime/control-plane/service.ts';\nimport type { DashboardDomain } from '../domain.ts';\n\n/** Per-request GraphQL context for the dashboard control plane. Resolvers\n *  read the live projection ref, the command publisher, and the\n *  plugin-domain accessor surfaces from here (3rd resolver arg), so the\n *  schema carries no closed-over state. */\nexport interface DashboardContext {\n\treadonly state: SubscriptionRef.SubscriptionRef<SubscribableState>;\n\treadonly publishCommand: (command: EngineCommand) => Effect.Effect<void>;\n\t/** Submit a command to the supervisor's command-loop and AWAIT its real\n\t *  exit (unlike the fire-and-forget `publishCommand`). The restore\n\t *  mutation routes through this so the destructive restore + re-acquire\n\t *  runs in-band with the single command-loop consumer and the mutation\n\t *  only resolves once services are actually back. */\n\treadonly submitCommand: (command: EngineCommand) => Effect.Effect<void, unknown>;\n\t/** Generic, name-blind control-plane accessors: snapshot catalog +\n\t *  restore/delete, the observability rings, and the resolved-values\n\t *  seam. (Plugin-name-aware shaping lives in `pluginDomain`.) */\n\treadonly domain: ControlPlaneDomain;\n\t/** Plugin-name-aware accessors the dashboard plugin shapes from the\n\t *  generic control-plane `resolvedValues`: fork-vs-local mode,\n\t *  deepbook/seal/coin capability ids, and the coin mint action. */\n\treadonly pluginDomain: DashboardDomain;\n}\n\ninterface SchemaTypes {\n\tContext: DashboardContext;\n\t// Output fields are non-nullable unless a resolver opts in with\n\t// `nullable: true` — the projection always resolves a concrete value.\n\tDefaultFieldNullability: false;\n}\n\n/** The single module-level builder. Object types, enums, and root types are\n *  defined against this instance across the sibling `schema/*` modules; the\n *  built schema is `dashboardSchema` (see `../schema.ts`). */\nexport const builder = new SchemaBuilder<SchemaTypes>({\n\tplugins: [SimpleObjectsPlugin, RelayPlugin, WithInputPlugin],\n\trelay: {},\n\tdefaultFieldNullability: false,\n});\n"],"mappings":";;;;;;;;AAuDA,MAAa,UAAU,IAAI,cAA2B;CACrD,SAAS;EAAC;EAAqB;EAAa;CAAe;CAC3D,OAAO,CAAC;CACR,yBAAyB;AAC1B,CAAC"}

package/dist/plugins/dashboard/schema/enums.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"enums.mjs","names":[],"sources":["../../../../src/plugins/dashboard/schema/enums.ts"],"sourcesContent":["// Pothos enums mirroring the closed unions in projection.ts / lifecycle.ts.\n//\n// Each `values` array is the EXACT string union from the source type — if\n// a substrate union gains a member, the corresponding `satisfies` below\n// stops compiling until this list is updated. That keeps the GraphQL\n// vocabulary in lockstep with the projection vocabulary.\n\nimport { builder } from './builder.ts';\nimport type {\n\tLifecycleStatus as LifecycleStatusUnion,\n\tPluginRole as PluginRoleUnion,\n} from '../../../substrate/lifecycle.ts';\nimport type {\n\tAccountProjection,\n\tEndpoint,\n\tLogTail,\n\tPackageProjection,\n\tRowSection as RowSectionUnion,\n\tStructuredError,\n} from '../../../substrate/projection.ts';\n\n// NOTE: CyclePhase ('shutting-down') and FundingEntryStatus ('already-satisfied')\n// are intentionally NOT GraphQL enums — their values contain hyphens, which are\n// illegal in GraphQL enum value names. Those fields are exposed as String (the\n// raw union string is the wire contract). See schema/types.ts.\ntype WireProtocol = Endpoint['wireProtocol'];\ntype LogLevel = LogTail['level'];\ntype ErrorSeverity = StructuredError['severity'];\ntype AccountScheme = NonNullable<AccountProjection['scheme']>;\ntype AccountSource = NonNullable<AccountProjection['source']>;\ntype FundingStatus = AccountProjection['funding']['status'];\ntype PackageKind = PackageProjection['kind'];\n\n/** Derived health classification for a single service row + the stack. */\nexport type Health = 'ready' | 'active' | 'blocked' | 'empty';\n\nexport const LifecycleStatus = builder.enumType('LifecycleStatus', {\n\tvalues: [\n\t\t'pending',\n\t\t'acquiring',\n\t\t'ready',\n\t\t'failed',\n\t\t'stopping',\n\t\t'stopped',\n\t\t'done',\n\t] satisfies LifecycleStatusUnion[],\n});\n\nexport const PluginRole = builder.enumType('PluginRole', {\n\tvalues: ['service', 'task'] satisfies PluginRoleUnion[],\n});\n\nexport const RowSection = builder.enumType('RowSection', {\n\tvalues: ['service', 'package', 'account', 'action', 'app', 'other'] satisfies RowSectionUnion[],\n});\n\nexport const WireProtocol = builder.enumType('WireProtocol', {\n\tvalues: ['http', 'h2c', 'tcp'] satisfies WireProtocol[],\n});\n\nexport const LogLevel = builder.enumType('LogLevel', {\n\tvalues: ['info', 'warn', 'error'] satisfies LogLevel[],\n});\n\nexport const ErrorSeverity = builder.enumType('ErrorSeverity', {\n\tvalues: ['warn', 'error', 'fatal'] satisfies ErrorSeverity[],\n});\n\nexport const AccountScheme = builder.enumType('AccountScheme', {\n\tvalues: ['ed25519', 'secp256k1', 'secp256r1'] satisfies AccountScheme[],\n});\n\nexport const AccountSource = builder.enumType('AccountSource', {\n\tvalues: ['real', 'impersonate'] satisfies AccountSource[],\n});\n\nexport const FundingStatus = builder.enumType('FundingStatus', {\n\tvalues: ['pending', 'funded', 'skipped', 'failed', 'unknown'] satisfies FundingStatus[],\n});\n\nexport const PackageKind = builder.enumType('PackageKind', {\n\tvalues: ['local', 'known'] satisfies PackageKind[],\n});\n\nexport const Health = builder.enumType('Health', {\n\tvalues: ['ready', 'active', 'blocked', 'empty'] satisfies Health[],\n});\n\n// --- Plugin-domain enums (control-plane `domain` surface) ------------------\n//\n// These mirror the closed unions on the control-plane domain shapes. They\n// carry no hyphenated members EXCEPT seal's `fork-known` / `local-keygen`,\n// which would be illegal GraphQL enum names — so SealMode is exposed as a\n// raw String field (see schema/types.ts), NOT an enum.\n\n/** Fork-vs-local stack mode (advance-clock gating). Derived from the sui\n *  plugin's resolved mode; `local-rpc` collapses to `local`. */\nexport const StackMode = builder.enumType('StackMode', {\n\tvalues: ['fork', 'local', 'live'] as const,\n});\n\n/** DeepBook deployment mode. */\nexport const DeepbookMode = builder.enumType('DeepbookMode', {\n\tvalues: ['local', 'override', 'known'] as const,\n});\n\n// NOTE: CoinSource ('on-chain') and SealMode ('local-keygen' / 'fork-known')\n// are intentionally NOT GraphQL enums — their values contain hyphens, which\n// are illegal in GraphQL enum value names. Those fields are exposed as String\n// (the raw union string is the wire contract). See schema/types.ts.\n"],"mappings":";;AAoCA,MAAa,kBAAkB,QAAQ,SAAS,mBAAmB,EAClE,QAAQ;CACP;CACA;CACA;CACA;CACA;CACA;CACA;CACA,EACD,CAAC;AAEF,MAAa,aAAa,QAAQ,SAAS,cAAc,EACxD,QAAQ,CAAC,WAAW,OAAO,EAC3B,CAAC;AAEF,MAAa,aAAa,QAAQ,SAAS,cAAc,EACxD,QAAQ;CAAC;CAAW;CAAW;CAAW;CAAU;CAAO;CAAQ,EACnE,CAAC;AAEF,MAAa,eAAe,QAAQ,SAAS,gBAAgB,EAC5D,QAAQ;CAAC;CAAQ;CAAO;CAAM,EAC9B,CAAC;AAEF,MAAa,WAAW,QAAQ,SAAS,YAAY,EACpD,QAAQ;CAAC;CAAQ;CAAQ;CAAQ,EACjC,CAAC;AAEF,MAAa,gBAAgB,QAAQ,SAAS,iBAAiB,EAC9D,QAAQ;CAAC;CAAQ;CAAS;CAAQ,EAClC,CAAC;AAEF,MAAa,gBAAgB,QAAQ,SAAS,iBAAiB,EAC9D,QAAQ;CAAC;CAAW;CAAa;CAAY,EAC7C,CAAC;AAEF,MAAa,gBAAgB,QAAQ,SAAS,iBAAiB,EAC9D,QAAQ,CAAC,QAAQ,cAAc,EAC/B,CAAC;AAEF,MAAa,gBAAgB,QAAQ,SAAS,iBAAiB,EAC9D,QAAQ;CAAC;CAAW;CAAU;CAAW;CAAU;CAAU,EAC7D,CAAC;AAEF,MAAa,cAAc,QAAQ,SAAS,eAAe,EAC1D,QAAQ,CAAC,SAAS,QAAQ,EAC1B,CAAC;AAEF,MAAa,SAAS,QAAQ,SAAS,UAAU,EAChD,QAAQ;CAAC;CAAS;CAAU;CAAW;CAAQ,EAC/C,CAAC;;;AAWF,MAAa,YAAY,QAAQ,SAAS,aAAa,EACtD,QAAQ;CAAC;CAAQ;CAAS;CAAO,EACjC,CAAC;;AAGF,MAAa,eAAe,QAAQ,SAAS,gBAAgB,EAC5D,QAAQ;CAAC;CAAS;CAAY;CAAQ,EACtC,CAAC"}
+{"version":3,"file":"enums.mjs","names":[],"sources":["../../../../src/plugins/dashboard/schema/enums.ts"],"sourcesContent":["// Pothos enums mirroring the closed unions in projection.ts / lifecycle.ts.\n//\n// Each `values` array is the EXACT string union from the source type — if\n// a substrate union gains a member, the corresponding `satisfies` below\n// stops compiling until this list is updated. That keeps the GraphQL\n// vocabulary in lockstep with the projection vocabulary.\n\nimport { builder } from './builder.ts';\nimport type {\n\tLifecycleStatus as LifecycleStatusUnion,\n\tPluginRole as PluginRoleUnion,\n} from '../../../substrate/lifecycle.ts';\nimport type {\n\tAccountProjection,\n\tEndpoint,\n\tLogTail,\n\tPackageProjection,\n\tRowSection as RowSectionUnion,\n\tStructuredError,\n} from '../../../substrate/projection.ts';\n\n// NOTE: CyclePhase ('shutting-down') and FundingEntryStatus ('already-satisfied')\n// are intentionally NOT GraphQL enums — their values contain hyphens, which are\n// illegal in GraphQL enum value names. Those fields are exposed as String (the\n// raw union string is the wire contract). See schema/types.ts.\ntype WireProtocol = Endpoint['wireProtocol'];\ntype LogLevel = LogTail['level'];\ntype ErrorSeverity = StructuredError['severity'];\ntype AccountScheme = NonNullable<AccountProjection['scheme']>;\ntype AccountSource = NonNullable<AccountProjection['source']>;\ntype FundingStatus = AccountProjection['funding']['status'];\ntype PackageKind = PackageProjection['kind'];\n\n/** Derived health classification for a single service row + the stack. */\nexport type Health = 'ready' | 'active' | 'blocked' | 'empty';\n\nexport const LifecycleStatus = builder.enumType('LifecycleStatus', {\n\tvalues: [\n\t\t'pending',\n\t\t'acquiring',\n\t\t'ready',\n\t\t'failed',\n\t\t'stopping',\n\t\t'stopped',\n\t\t'done',\n\t] satisfies LifecycleStatusUnion[],\n});\n\nexport const PluginRole = builder.enumType('PluginRole', {\n\tvalues: ['service', 'task'] satisfies PluginRoleUnion[],\n});\n\nexport const RowSection = builder.enumType('RowSection', {\n\tvalues: ['service', 'package', 'account', 'action', 'app', 'other'] satisfies RowSectionUnion[],\n});\n\nexport const WireProtocol = builder.enumType('WireProtocol', {\n\tvalues: ['http', 'h2c', 'tcp'] satisfies WireProtocol[],\n});\n\nexport const LogLevel = builder.enumType('LogLevel', {\n\tvalues: ['info', 'warn', 'error'] satisfies LogLevel[],\n});\n\nexport const ErrorSeverity = builder.enumType('ErrorSeverity', {\n\tvalues: ['warn', 'error', 'fatal'] satisfies ErrorSeverity[],\n});\n\nexport const AccountScheme = builder.enumType('AccountScheme', {\n\tvalues: ['ed25519', 'secp256k1', 'secp256r1'] satisfies AccountScheme[],\n});\n\nexport const AccountSource = builder.enumType('AccountSource', {\n\tvalues: ['real', 'impersonate'] satisfies AccountSource[],\n});\n\nexport const FundingStatus = builder.enumType('FundingStatus', {\n\tvalues: ['pending', 'funded', 'skipped', 'failed', 'unknown'] satisfies FundingStatus[],\n});\n\nexport const PackageKind = builder.enumType('PackageKind', {\n\tvalues: ['local', 'known'] satisfies PackageKind[],\n});\n\nexport const Health = builder.enumType('Health', {\n\tvalues: ['ready', 'active', 'blocked', 'empty'] satisfies Health[],\n});\n\n// --- Plugin-domain enums (control-plane `domain` surface) ------------------\n//\n// These mirror the closed unions on the control-plane domain shapes. They\n// carry no hyphenated members EXCEPT seal's `fork-known` / `local-keygen`,\n// which would be illegal GraphQL enum names — so SealMode is exposed as a\n// raw String field (see schema/types.ts), NOT an enum.\n\n/** Fork-vs-local stack mode (advance-clock gating). Derived from the sui\n *  plugin's resolved mode; `local-rpc` collapses to `local`. */\nexport const StackMode = builder.enumType('StackMode', {\n\tvalues: ['fork', 'local', 'live'] as const,\n});\n\n/** DeepBook deployment mode. */\nexport const DeepbookMode = builder.enumType('DeepbookMode', {\n\tvalues: ['local', 'override', 'known'] as const,\n});\n\n// NOTE: CoinSource ('on-chain') and SealMode ('local-keygen' / 'fork-known')\n// are intentionally NOT GraphQL enums — their values contain hyphens, which\n// are illegal in GraphQL enum value names. Those fields are exposed as String\n// (the raw union string is the wire contract). See schema/types.ts.\n"],"mappings":";;AAoCA,MAAa,kBAAkB,QAAQ,SAAS,mBAAmB,EAClE,QAAQ;CACP;CACA;CACA;CACA;CACA;CACA;CACA;AACD,EACD,CAAC;AAED,MAAa,aAAa,QAAQ,SAAS,cAAc,EACxD,QAAQ,CAAC,WAAW,MAAM,EAC3B,CAAC;AAED,MAAa,aAAa,QAAQ,SAAS,cAAc,EACxD,QAAQ;CAAC;CAAW;CAAW;CAAW;CAAU;CAAO;AAAO,EACnE,CAAC;AAED,MAAa,eAAe,QAAQ,SAAS,gBAAgB,EAC5D,QAAQ;CAAC;CAAQ;CAAO;AAAK,EAC9B,CAAC;AAED,MAAa,WAAW,QAAQ,SAAS,YAAY,EACpD,QAAQ;CAAC;CAAQ;CAAQ;AAAO,EACjC,CAAC;AAED,MAAa,gBAAgB,QAAQ,SAAS,iBAAiB,EAC9D,QAAQ;CAAC;CAAQ;CAAS;AAAO,EAClC,CAAC;AAED,MAAa,gBAAgB,QAAQ,SAAS,iBAAiB,EAC9D,QAAQ;CAAC;CAAW;CAAa;AAAW,EAC7C,CAAC;AAED,MAAa,gBAAgB,QAAQ,SAAS,iBAAiB,EAC9D,QAAQ,CAAC,QAAQ,aAAa,EAC/B,CAAC;AAED,MAAa,gBAAgB,QAAQ,SAAS,iBAAiB,EAC9D,QAAQ;CAAC;CAAW;CAAU;CAAW;CAAU;AAAS,EAC7D,CAAC;AAED,MAAa,cAAc,QAAQ,SAAS,eAAe,EAC1D,QAAQ,CAAC,SAAS,OAAO,EAC1B,CAAC;AAED,MAAa,SAAS,QAAQ,SAAS,UAAU,EAChD,QAAQ;CAAC;CAAS;CAAU;CAAW;AAAO,EAC/C,CAAC;;;AAWD,MAAa,YAAY,QAAQ,SAAS,aAAa,EACtD,QAAQ;CAAC;CAAQ;CAAS;AAAM,EACjC,CAAC;;AAGD,MAAa,eAAe,QAAQ,SAAS,gBAAgB,EAC5D,QAAQ;CAAC;CAAS;CAAY;AAAO,EACtC,CAAC"}

package/dist/plugins/dashboard/schema/root.mjs

@@ -1,6 +1,6 @@
 import { builder } from "./builder.mjs";
 import { StackMode } from "./enums.mjs";
-import { Account, CoinCap, DeepbookInfo, FundableCoin, LogFilterInput, LogRecordType, Package, PostgresStats, SealInfo, Service, SnapshotEntry, SpanFilterInput, SpanRecordType, StackState } from "./types.mjs";
+import { Account, CoinCap, DeepbookInfo, FundableCoin, LogFilterInput, LogRecordType, Package, SealInfo, Service, SnapshotEntry, StackState } from "./types.mjs";
 import { Effect, Fiber, Queue, Stream, SubscriptionRef } from "effect";
 import { resolveArrayConnection } from "@pothos/plugin-relay";
 //#region src/plugins/dashboard/schema/root.ts
@@ -48,11 +48,7 @@ const FundResult = builder.objectRef("FundResult").implement({
 	description: "The outcome of a faucet fund request (real result — ok reflects whether the in-process funding strategy completed).",
 	fields: (t) => ({
 		ok: t.exposeBoolean("ok"),
-		detail: t.exposeString("detail"),
-		digest: t.string({
-			nullable: true,
-			resolve: (r) => r.digest
-		})
+		detail: t.exposeString("detail")
 	})
 });
 builder.queryType({ fields: (t) => ({
@@ -128,12 +124,6 @@ builder.queryType({ fields: (t) => ({
 		type: [FundableCoin],
 		resolve: (_parent, _args, ctx) => Effect.runPromise(ctx.pluginDomain.fundableCoins)
 	}),
-	/** Postgres wire-protocol stats per instance (db size, connections,
-	*  per-table rows/size). The browser cannot speak the PG protocol. */
-	postgresStats: t.field({
-		type: [PostgresStats],
-		resolve: (_parent, _args, ctx) => Effect.runPromise(ctx.pluginDomain.postgresStats)
-	}),
 	/** Cross-service queryable log history. Filterable server-side by
 	*  service / level / substring / time window; returns most-recent
 	*  first, capped by `filter.limit` (default = ring capacity). */
@@ -149,21 +139,6 @@ builder.queryType({ fields: (t) => ({
 	logServices: t.field({
 		type: ["String"],
 		resolve: (_parent, _args, ctx) => Effect.runPromise(ctx.domain.logServices)
-	}),
-	/** Completed-span ring. Filterable server-side by service / status /
-	*  substring / time window; most-recent first. */
-	spans: t.field({
-		type: [SpanRecordType],
-		args: { filter: t.arg({
-			type: SpanFilterInput,
-			required: false
-		}) },
-		resolve: (_parent, args, ctx) => Effect.runPromise(ctx.domain.spans(toSpanFilter(args.filter)))
-	}),
-	/** Distinct services currently in the span ring (filter dropdown). */
-	spanServices: t.field({
-		type: ["String"],
-		resolve: (_parent, _args, ctx) => Effect.runPromise(ctx.domain.spanServices)
 	})
 }) });
 /** Closed log-level set used to narrow the String[] filter input back onto
@@ -196,19 +171,6 @@ const toLogFilter = (input) => {
 		...input.limit != null ? { limit: input.limit } : {}
 	};
 };
-/** Map the nullable GraphQL `SpanFilter` input onto the store's `SpanFilter`. */
-const toSpanFilter = (input) => {
-	if (input == null) return void 0;
-	const services = nonEmpty(input.services);
-	const statuses = nonEmpty(input.statuses)?.filter((s) => s === "ok" || s === "error");
-	return {
-		...services ? { services } : {},
-		...statuses && statuses.length > 0 ? { statuses } : {},
-		...input.search != null ? { search: input.search } : {},
-		...input.sinceMillis != null ? { sinceMillis: input.sinceMillis } : {},
-		...input.limit != null ? { limit: input.limit } : {}
-	};
-};
 builder.mutationType({ fields: (t) => ({
 	/** Restart the whole stack. */
 	restart: t.field({
@@ -271,13 +233,30 @@ builder.mutationType({ fields: (t) => ({
 		type: CommandResult,
 		resolve: (_parent, _args, ctx) => run(ctx, "shutdown.requested", { tag: "shutdown.requested" })
 	}),
-	/** Restore a snapshot by id. Routes through the control-plane
-	*  `domain` so the dashboard gets a real ok/detail outcome (the void
-	*  `publishCommand` could not carry the orchestrator's result). */
+	/** Restore a snapshot by id. Routes through the supervisor
+	*  command-loop via `submitCommand` (NOT the in-process
+	*  `domain.restoreSnapshot`): restore is destructive — it removes the
+	*  live managed containers and relies on a follow-on re-acquire to
+	*  rebuild them. Running it in-process against a live supervisor would
+	*  race the single command-queue consumer and leave services dead until
+	*  a manual Restart. The command-loop's `snapshot.restore` case applies
+	*  the restored tree, publishes `snapshot.restored`, THEN drains +
+	*  re-acquires every service (the manual-restart sequence) — and the
+	*  submitted-command completion deferred lets this mutation await the
+	*  real ok/detail outcome the void `publishCommand` could not carry. */
 	restoreSnapshot: t.fieldWithInput({
 		type: SnapshotActionResult,
 		input: { id: t.input.string({ required: true }) },
-		resolve: (_parent, args, ctx) => Effect.runPromise(ctx.domain.restoreSnapshot(args.input.id))
+		resolve: (_parent, args, ctx) => Effect.runPromise(ctx.submitCommand({
+			tag: "snapshot.restore",
+			snapshotId: args.input.id
+		}).pipe(Effect.as({
+			ok: true,
+			detail: null
+		}), Effect.catchCause((cause) => Effect.succeed({
+			ok: false,
+			detail: String(cause)
+		}))))
 	}),
 	/** Delete a snapshot by id (via the control-plane `domain`). */
 	deleteSnapshot: t.fieldWithInput({

package/dist/plugins/dashboard/schema/root.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"root.mjs","names":[],"sources":["../../../../src/plugins/dashboard/schema/root.ts"],"sourcesContent":["// Dashboard root types — Query / Mutation / Subscription.\n//\n// Queries expose the live projection (`state`), relay node/connection\n// access over the snapshot arrays, and a liveness `ping`. Mutations map to\n// `EngineCommand`s. The single subscription streams the projection over the\n// SubscriptionRef→async-generator bridge. Dependencies (the `state` ref +\n// `publishCommand`) come from the GraphQL context (`ctx`), not closure — the\n// dashboard is a pure control plane (no chain reads).\n\nimport { Effect, Fiber, Queue, Stream, SubscriptionRef } from 'effect';\nimport { resolveArrayConnection } from '@pothos/plugin-relay';\nimport { builder } from './builder.ts';\nimport {\n\tAccount,\n\tCoinCap,\n\tDeepbookInfo,\n\tFundableCoin,\n\tLogFilterInput,\n\tLogRecordType,\n\tPackage,\n\tPostgresStats,\n\tSealInfo,\n\tService,\n\tSnapshotEntry,\n\tSpanFilterInput,\n\tSpanRecordType,\n\tStackState,\n\ttype ServiceSource,\n} from './types.ts';\nimport { StackMode } from './enums.ts';\nimport type { DashboardContext } from './builder.ts';\nimport type { PluginKey } from '../../../substrate/brand.ts';\nimport type { EngineCommand } from '../../../substrate/events.ts';\nimport type { SubscribableState } from '../../../substrate/projection.ts';\nimport type {\n\tLogFilter,\n\tLogLevel,\n\tSpanFilter,\n} from '../../../substrate/runtime/observability/index.ts';\n\nconst readSnapshot = (\n\tstate: SubscriptionRef.SubscriptionRef<SubscribableState>,\n): Promise<SubscribableState> => Effect.runPromise(SubscriptionRef.get(state));\n\n// --- CommandResult ------------------------------------------------------\ninterface CommandResultShape {\n\treadonly ok: boolean;\n\treadonly command: string;\n\treadonly message?: string | null;\n}\n\nconst CommandResult = builder.objectRef<CommandResultShape>('CommandResult').implement({\n\tdescription: 'The outcome of dispatching an engine command.',\n\tfields: (t) => ({\n\t\tok: t.exposeBoolean('ok'),\n\t\tcommand: t.exposeString('command'),\n\t\tmessage: t.string({ nullable: true, resolve: (r) => r.message ?? null }),\n\t}),\n});\n\nconst run = async (\n\tctx: DashboardContext,\n\ttag: string,\n\tcommand: EngineCommand,\n): Promise<CommandResultShape> => {\n\tawait Effect.runPromise(ctx.publishCommand(command));\n\treturn { ok: true, command: tag };\n};\n\n// --- SnapshotActionResult -----------------------------------------------\n//\n// Restore/delete go through the control-plane `domain` (NOT the void\n// `publishCommand`), so the dashboard gets a real ok/detail outcome the\n// fire-and-forget command channel cannot carry.\ninterface SnapshotActionResultShape {\n\treadonly ok: boolean;\n\treadonly detail: string | null;\n}\n\nconst SnapshotActionResult = builder\n\t.objectRef<SnapshotActionResultShape>('SnapshotActionResult')\n\t.implement({\n\t\tdescription: 'The outcome of a snapshot restore/delete (real result, not fire-and-forget).',\n\t\tfields: (t) => ({\n\t\t\tok: t.exposeBoolean('ok'),\n\t\t\tdetail: t.string({ nullable: true, resolve: (r) => r.detail }),\n\t\t}),\n\t});\n\n// --- MintResult ---------------------------------------------------------\n//\n// The coin Mint action goes through the control-plane `domain` (NOT the\n// void `publishCommand`): the supervisor holds the treasury-cap-owning\n// signer in-process and returns a real ok/detail outcome plus the on-chain\n// tx `digest` on success.\ninterface MintResultShape {\n\treadonly ok: boolean;\n\treadonly detail: string;\n\treadonly digest: string | null;\n}\n\nconst MintResult = builder.objectRef<MintResultShape>('MintResult').implement({\n\tdescription: 'The outcome of a coin mint (real result, with the on-chain tx digest on success).',\n\tfields: (t) => ({\n\t\tok: t.exposeBoolean('ok'),\n\t\tdetail: t.exposeString('detail'),\n\t\tdigest: t.string({ nullable: true, resolve: (r) => r.digest }),\n\t}),\n});\n\n// --- FundResult ---------------------------------------------------------\n//\n// The Faucet `fund` action routes through the control-plane `pluginDomain`,\n// reusing devstack's IN-PROCESS funding strategies (the same registry the\n// boot-time account funding pass uses): SUI via the chain faucet strategy\n// (fixed-amount), WAL/DEEP via the coin-specific account-signed swap. The\n// strategies return `void` (no digest), so `digest` is always null here —\n// kept for shape-parity with `MintResult`. `ok` reflects whether the\n// strategy's `request(...)` actually completed.\ninterface FundResultShape {\n\treadonly ok: boolean;\n\treadonly detail: string;\n\treadonly digest: string | null;\n}\n\nconst FundResult = builder.objectRef<FundResultShape>('FundResult').implement({\n\tdescription:\n\t\t'The outcome of a faucet fund request (real result — ok reflects whether the ' +\n\t\t'in-process funding strategy completed).',\n\tfields: (t) => ({\n\t\tok: t.exposeBoolean('ok'),\n\t\tdetail: t.exposeString('detail'),\n\t\tdigest: t.string({ nullable: true, resolve: (r) => r.digest }),\n\t}),\n});\n\n// --- Query --------------------------------------------------------------\nbuilder.queryType({\n\tfields: (t) => ({\n\t\t/** Liveness probe. */\n\t\tping: t.string({ resolve: () => 'pong' }),\n\t\t/** Full live projection snapshot (status, services, endpoints, …). */\n\t\tstate: t.field({\n\t\t\ttype: StackState,\n\t\t\tresolve: (_parent, _args, ctx) => readSnapshot(ctx.state),\n\t\t}),\n\t\t/** Relay connection over the current snapshot's service rows. */\n\t\tservices: t.connection({\n\t\t\ttype: Service,\n\t\t\tresolve: async (_parent, args, ctx) => {\n\t\t\t\tconst snapshot = await readSnapshot(ctx.state);\n\t\t\t\tconst sources: ServiceSource[] = snapshot.rows.map((row) => ({ row, snapshot }));\n\t\t\t\treturn resolveArrayConnection({ args }, sources);\n\t\t\t},\n\t\t}),\n\t\t/** Relay connection over the current snapshot's accounts. */\n\t\taccounts: t.connection({\n\t\t\ttype: Account,\n\t\t\tresolve: async (_parent, args, ctx) => {\n\t\t\t\tconst snapshot = await readSnapshot(ctx.state);\n\t\t\t\treturn resolveArrayConnection({ args }, [...snapshot.accounts]);\n\t\t\t},\n\t\t}),\n\t\t/** Relay connection over the current snapshot's packages. */\n\t\tpackages: t.connection({\n\t\t\ttype: Package,\n\t\t\tresolve: async (_parent, args, ctx) => {\n\t\t\t\tconst snapshot = await readSnapshot(ctx.state);\n\t\t\t\treturn resolveArrayConnection({ args }, [...snapshot.packages]);\n\t\t\t},\n\t\t}),\n\n\t\t// --- Plugin-domain queries (data the browser cannot reach) --------\n\t\t/** Fork-vs-local stack mode (advance-clock gating). `null` when no\n\t\t *  sui plugin is present. */\n\t\tmode: t.field({\n\t\t\ttype: StackMode,\n\t\t\tnullable: true,\n\t\t\tresolve: (_parent, _args, ctx) => Effect.runPromise(ctx.pluginDomain.mode),\n\t\t}),\n\t\t/** Snapshot catalog: id/label/created/participants/containers. */\n\t\tsnapshots: t.field({\n\t\t\ttype: [SnapshotEntry],\n\t\t\tresolve: (_parent, _args, ctx) => Effect.runPromise(ctx.domain.snapshots),\n\t\t}),\n\t\t/** DeepBook deployments: registry/admin/pool ids + market-maker\n\t\t *  state. (Pool prices / order books are chain-direct.) */\n\t\tdeepbookInfo: t.field({\n\t\t\ttype: [DeepbookInfo],\n\t\t\tresolve: (_parent, _args, ctx) => Effect.runPromise(ctx.pluginDomain.deepbook),\n\t\t}),\n\t\t/** Seal key-server deployments: objectId/threshold/mode/keyServers. */\n\t\tsealInfo: t.field({\n\t\t\ttype: [SealInfo],\n\t\t\tresolve: (_parent, _args, ctx) => Effect.runPromise(ctx.pluginDomain.seal),\n\t\t}),\n\t\t/** Coin treasury caps (drives Mint) + addressing facts. (Supply /\n\t\t *  metadata are chain-direct.) */\n\t\tcoinCaps: t.field({\n\t\t\ttype: [CoinCap],\n\t\t\tresolve: (_parent, _args, ctx) => Effect.runPromise(ctx.pluginDomain.coinCaps),\n\t\t}),\n\t\t/** Coins the faucet can actually fund right now (drives the Faucet\n\t\t *  panel's coin pills + amount gating). SUI is always present when a\n\t\t *  faucet strategy is registered; WAL/DEEP appear only when their\n\t\t *  plugin contributed a funding strategy. */\n\t\tfundableCoins: t.field({\n\t\t\ttype: [FundableCoin],\n\t\t\tresolve: (_parent, _args, ctx) => Effect.runPromise(ctx.pluginDomain.fundableCoins),\n\t\t}),\n\t\t/** Postgres wire-protocol stats per instance (db size, connections,\n\t\t *  per-table rows/size). The browser cannot speak the PG protocol. */\n\t\tpostgresStats: t.field({\n\t\t\ttype: [PostgresStats],\n\t\t\tresolve: (_parent, _args, ctx) => Effect.runPromise(ctx.pluginDomain.postgresStats),\n\t\t}),\n\n\t\t// --- Observability (Console \"Logs\" + \"Traces\" tabs) ---------------\n\t\t/** Cross-service queryable log history. Filterable server-side by\n\t\t *  service / level / substring / time window; returns most-recent\n\t\t *  first, capped by `filter.limit` (default = ring capacity). */\n\t\tlogs: t.field({\n\t\t\ttype: [LogRecordType],\n\t\t\targs: { filter: t.arg({ type: LogFilterInput, required: false }) },\n\t\t\tresolve: (_parent, args, ctx) => Effect.runPromise(ctx.domain.logs(toLogFilter(args.filter))),\n\t\t}),\n\t\t/** Distinct services currently in the log ring (filter dropdown). */\n\t\tlogServices: t.field({\n\t\t\ttype: ['String'],\n\t\t\tresolve: (_parent, _args, ctx) => Effect.runPromise(ctx.domain.logServices),\n\t\t}),\n\t\t/** Completed-span ring. Filterable server-side by service / status /\n\t\t *  substring / time window; most-recent first. */\n\t\tspans: t.field({\n\t\t\ttype: [SpanRecordType],\n\t\t\targs: { filter: t.arg({ type: SpanFilterInput, required: false }) },\n\t\t\tresolve: (_parent, args, ctx) =>\n\t\t\t\tEffect.runPromise(ctx.domain.spans(toSpanFilter(args.filter))),\n\t\t}),\n\t\t/** Distinct services currently in the span ring (filter dropdown). */\n\t\tspanServices: t.field({\n\t\t\ttype: ['String'],\n\t\t\tresolve: (_parent, _args, ctx) => Effect.runPromise(ctx.domain.spanServices),\n\t\t}),\n\t}),\n});\n\n/** Closed log-level set used to narrow the String[] filter input back onto\n *  the store's `LogLevel` union. Unknown strings are dropped (the store would\n *  just never match them anyway). */\nconst LOG_LEVELS: ReadonlySet<LogLevel> = new Set<LogLevel>([\n\t'trace',\n\t'debug',\n\t'info',\n\t'warn',\n\t'error',\n\t'fatal',\n]);\n\nconst nonEmpty = (xs: readonly (string | null)[] | null | undefined): string[] | undefined => {\n\tif (xs == null) return undefined;\n\tconst out = xs.filter((x): x is string => x != null && x.length > 0);\n\treturn out.length > 0 ? out : undefined;\n};\n\n/** Map the nullable GraphQL `LogFilter` input onto the store's `LogFilter`,\n *  dropping nulls and unknown levels. */\nconst toLogFilter = (\n\tinput:\n\t\t| {\n\t\t\t\tservices?: readonly (string | null)[] | null;\n\t\t\t\tlevels?: readonly (string | null)[] | null;\n\t\t\t\tsearch?: string | null;\n\t\t\t\tsinceMillis?: number | null;\n\t\t\t\tlimit?: number | null;\n\t\t  }\n\t\t| null\n\t\t| undefined,\n): LogFilter | undefined => {\n\tif (input == null) return undefined;\n\tconst services = nonEmpty(input.services);\n\tconst levelStrings = nonEmpty(input.levels);\n\tconst levels = levelStrings?.filter((l): l is LogLevel => LOG_LEVELS.has(l as LogLevel));\n\treturn {\n\t\t...(services ? { services } : {}),\n\t\t...(levels && levels.length > 0 ? { levels } : {}),\n\t\t...(input.search != null ? { search: input.search } : {}),\n\t\t...(input.sinceMillis != null ? { sinceMillis: input.sinceMillis } : {}),\n\t\t...(input.limit != null ? { limit: input.limit } : {}),\n\t};\n};\n\n/** Map the nullable GraphQL `SpanFilter` input onto the store's `SpanFilter`. */\nconst toSpanFilter = (\n\tinput:\n\t\t| {\n\t\t\t\tservices?: readonly (string | null)[] | null;\n\t\t\t\tstatuses?: readonly (string | null)[] | null;\n\t\t\t\tsearch?: string | null;\n\t\t\t\tsinceMillis?: number | null;\n\t\t\t\tlimit?: number | null;\n\t\t  }\n\t\t| null\n\t\t| undefined,\n): SpanFilter | undefined => {\n\tif (input == null) return undefined;\n\tconst services = nonEmpty(input.services);\n\tconst statusStrings = nonEmpty(input.statuses);\n\tconst statuses = statusStrings?.filter((s): s is 'ok' | 'error' => s === 'ok' || s === 'error');\n\treturn {\n\t\t...(services ? { services } : {}),\n\t\t...(statuses && statuses.length > 0 ? { statuses } : {}),\n\t\t...(input.search != null ? { search: input.search } : {}),\n\t\t...(input.sinceMillis != null ? { sinceMillis: input.sinceMillis } : {}),\n\t\t...(input.limit != null ? { limit: input.limit } : {}),\n\t};\n};\n\n// --- Mutation -----------------------------------------------------------\nbuilder.mutationType({\n\tfields: (t) => ({\n\t\t/** Restart the whole stack. */\n\t\trestart: t.field({\n\t\t\ttype: CommandResult,\n\t\t\tresolve: (_parent, _args, ctx) => run(ctx, 'stack.restart', { tag: 'stack.restart' }),\n\t\t}),\n\t\t/** Selectively restart a single plugin subgraph. */\n\t\trestartPlugin: t.fieldWithInput({\n\t\t\ttype: CommandResult,\n\t\t\tinput: { pluginKey: t.input.string({ required: true }) },\n\t\t\tresolve: (_parent, args, ctx) =>\n\t\t\t\trun(ctx, 'selective-restart.requested', {\n\t\t\t\t\ttag: 'selective-restart.requested',\n\t\t\t\t\tpluginKey: args.input.pluginKey as PluginKey,\n\t\t\t\t}),\n\t\t}),\n\t\t/** Capture a snapshot, optionally naming it. */\n\t\tcaptureSnapshot: t.fieldWithInput({\n\t\t\ttype: CommandResult,\n\t\t\tinput: { name: t.input.string({ required: false }) },\n\t\t\tresolve: (_parent, args, ctx) =>\n\t\t\t\trun(ctx, 'snapshot.capture', {\n\t\t\t\t\ttag: 'snapshot.capture',\n\t\t\t\t\t...(args.input.name == null ? {} : { name: args.input.name }),\n\t\t\t\t}),\n\t\t}),\n\t\t/** Re-run codegen against the live manifest. */\n\t\tcodegen: t.field({\n\t\t\ttype: CommandResult,\n\t\t\tresolve: (_parent, _args, ctx) => run(ctx, 'codegen.requested', { tag: 'codegen.requested' }),\n\t\t}),\n\t\t/** Re-apply the manifest, optionally scoped to a single plugin. */\n\t\tapply: t.fieldWithInput({\n\t\t\ttype: CommandResult,\n\t\t\tinput: { pluginKey: t.input.string({ required: false }) },\n\t\t\tresolve: (_parent, args, ctx) =>\n\t\t\t\trun(ctx, 'apply.requested', {\n\t\t\t\t\ttag: 'apply.requested',\n\t\t\t\t\t...(args.input.pluginKey == null ? {} : { pluginKey: args.input.pluginKey as PluginKey }),\n\t\t\t\t}),\n\t\t}),\n\t\t/** Wipe the live stack footprint (preserves the snapshot catalog). */\n\t\twipe: t.field({\n\t\t\ttype: CommandResult,\n\t\t\tresolve: (_parent, _args, ctx) => run(ctx, 'wipe.requested', { tag: 'wipe.requested' }),\n\t\t}),\n\t\t/** Prune the snapshot catalog + sweep byproduct images. */\n\t\tprune: t.field({\n\t\t\ttype: CommandResult,\n\t\t\tresolve: (_parent, _args, ctx) => run(ctx, 'prune.requested', { tag: 'prune.requested' }),\n\t\t}),\n\t\t/** Advance the (fork/local) chain clock to an absolute epoch-ms. */\n\t\tadvanceClock: t.fieldWithInput({\n\t\t\ttype: CommandResult,\n\t\t\tinput: { toMillis: t.input.float({ required: true }) },\n\t\t\tresolve: (_parent, args, ctx) =>\n\t\t\t\trun(ctx, 'advance-clock.requested', {\n\t\t\t\t\ttag: 'advance-clock.requested',\n\t\t\t\t\ttoMillis: args.input.toMillis,\n\t\t\t\t}),\n\t\t}),\n\t\t/** Request a graceful stack shutdown. */\n\t\tshutdown: t.field({\n\t\t\ttype: CommandResult,\n\t\t\tresolve: (_parent, _args, ctx) =>\n\t\t\t\trun(ctx, 'shutdown.requested', { tag: 'shutdown.requested' }),\n\t\t}),\n\t\t/** Restore a snapshot by id. Routes through the control-plane\n\t\t *  `domain` so the dashboard gets a real ok/detail outcome (the void\n\t\t *  `publishCommand` could not carry the orchestrator's result). */\n\t\trestoreSnapshot: t.fieldWithInput({\n\t\t\ttype: SnapshotActionResult,\n\t\t\tinput: { id: t.input.string({ required: true }) },\n\t\t\tresolve: (_parent, args, ctx) => Effect.runPromise(ctx.domain.restoreSnapshot(args.input.id)),\n\t\t}),\n\t\t/** Delete a snapshot by id (via the control-plane `domain`). */\n\t\tdeleteSnapshot: t.fieldWithInput({\n\t\t\ttype: SnapshotActionResult,\n\t\t\tinput: { id: t.input.string({ required: true }) },\n\t\t\tresolve: (_parent, args, ctx) => Effect.runPromise(ctx.domain.deleteSnapshot(args.input.id)),\n\t\t}),\n\t\t/** Mint a custom coin. Routes through the control-plane `domain`:\n\t\t *  the supervisor holds the treasury-cap-owning publisher signer\n\t\t *  in-process and returns a real ok/detail/digest result (the void\n\t\t *  `publishCommand` could not carry the tx digest). `amountBaseUnits`\n\t\t *  is the raw integer amount in the coin's smallest unit (string so\n\t\t *  large u64 values survive the wire without precision loss). */\n\t\tmint: t.fieldWithInput({\n\t\t\ttype: MintResult,\n\t\t\tinput: {\n\t\t\t\tcoinType: t.input.string({ required: true }),\n\t\t\t\trecipient: t.input.string({ required: true }),\n\t\t\t\tamountBaseUnits: t.input.string({ required: true }),\n\t\t\t},\n\t\t\tresolve: (_parent, args, ctx) =>\n\t\t\t\tEffect.runPromise(\n\t\t\t\t\tctx.pluginDomain.mintCoin({\n\t\t\t\t\t\tcoinType: args.input.coinType,\n\t\t\t\t\t\trecipient: args.input.recipient,\n\t\t\t\t\t\tamountBaseUnits: args.input.amountBaseUnits,\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t}),\n\t\t/** Fund an account/address. Routes through the control-plane\n\t\t *  `pluginDomain`, reusing devstack's in-process funding strategies:\n\t\t *  SUI (absent / canonical `coinType`) via the chain faucet strategy\n\t\t *  (fixed-amount — `amountBaseUnits` is ignored); WAL/DEEP via the\n\t\t *  coin-specific account-signed swap (`amountBaseUnits` honored, and\n\t\t *  the recipient must be a resolved account). Real result — `ok`\n\t\t *  reflects whether the strategy completed. */\n\t\tfund: t.fieldWithInput({\n\t\t\ttype: FundResult,\n\t\t\tinput: {\n\t\t\t\trecipient: t.input.string({ required: true }),\n\t\t\t\tcoinType: t.input.string({ required: false }),\n\t\t\t\tamountBaseUnits: t.input.string({ required: false }),\n\t\t\t},\n\t\t\tresolve: (_parent, args, ctx) =>\n\t\t\t\tEffect.runPromise(\n\t\t\t\t\tctx.pluginDomain.fundAccount({\n\t\t\t\t\t\trecipient: args.input.recipient,\n\t\t\t\t\t\tcoinType: args.input.coinType,\n\t\t\t\t\t\tamountBaseUnits: args.input.amountBaseUnits,\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t}),\n\t}),\n});\n\n// --- Subscription -------------------------------------------------------\nbuilder.subscriptionType({\n\tfields: (t) => ({\n\t\t/** Stream the projection on every change (current value first). */\n\t\tstate: t.field({\n\t\t\ttype: StackState,\n\t\t\tsubscribe: (_parent, _args, ctx) => subscribeState(ctx.state),\n\t\t\tresolve: (payload) => payload,\n\t\t}),\n\t}),\n});\n\n/** Bridge an Effect `SubscriptionRef` to an async iterable for GraphQL\n *  subscriptions. `SubscriptionRef.changes` emits the current value first,\n *  then each subsequent update. The pump fiber is interrupted when the\n *  consumer (yoga) stops iterating. */\nasync function* subscribeState(\n\tref: SubscriptionRef.SubscriptionRef<SubscribableState>,\n): AsyncGenerator<SubscribableState> {\n\tconst queue = Effect.runSync(Queue.unbounded<SubscribableState>());\n\tconst pump = Effect.runFork(\n\t\tStream.runForEach(SubscriptionRef.changes(ref), (snapshot) => Queue.offer(queue, snapshot)),\n\t);\n\ttry {\n\t\twhile (true) {\n\t\t\tyield await Effect.runPromise(Queue.take(queue));\n\t\t}\n\t} finally {\n\t\tEffect.runFork(Fiber.interrupt(pump));\n\t}\n}\n"],"mappings":";;;;;;AAwCA,MAAM,gBACL,UACgC,OAAO,WAAW,gBAAgB,IAAI,MAAM,CAAC;AAS9E,MAAM,gBAAgB,QAAQ,UAA8B,gBAAgB,CAAC,UAAU;CACtF,aAAa;CACb,SAAS,OAAO;EACf,IAAI,EAAE,cAAc,KAAK;EACzB,SAAS,EAAE,aAAa,UAAU;EAClC,SAAS,EAAE,OAAO;GAAE,UAAU;GAAM,UAAU,MAAM,EAAE,WAAW;GAAM,CAAC;EACxE;CACD,CAAC;AAEF,MAAM,MAAM,OACX,KACA,KACA,YACiC;AACjC,OAAM,OAAO,WAAW,IAAI,eAAe,QAAQ,CAAC;AACpD,QAAO;EAAE,IAAI;EAAM,SAAS;EAAK;;AAalC,MAAM,uBAAuB,QAC3B,UAAqC,uBAAuB,CAC5D,UAAU;CACV,aAAa;CACb,SAAS,OAAO;EACf,IAAI,EAAE,cAAc,KAAK;EACzB,QAAQ,EAAE,OAAO;GAAE,UAAU;GAAM,UAAU,MAAM,EAAE;GAAQ,CAAC;EAC9D;CACD,CAAC;AAcH,MAAM,aAAa,QAAQ,UAA2B,aAAa,CAAC,UAAU;CAC7E,aAAa;CACb,SAAS,OAAO;EACf,IAAI,EAAE,cAAc,KAAK;EACzB,QAAQ,EAAE,aAAa,SAAS;EAChC,QAAQ,EAAE,OAAO;GAAE,UAAU;GAAM,UAAU,MAAM,EAAE;GAAQ,CAAC;EAC9D;CACD,CAAC;AAiBF,MAAM,aAAa,QAAQ,UAA2B,aAAa,CAAC,UAAU;CAC7E,aACC;CAED,SAAS,OAAO;EACf,IAAI,EAAE,cAAc,KAAK;EACzB,QAAQ,EAAE,aAAa,SAAS;EAChC,QAAQ,EAAE,OAAO;GAAE,UAAU;GAAM,UAAU,MAAM,EAAE;GAAQ,CAAC;EAC9D;CACD,CAAC;AAGF,QAAQ,UAAU,EACjB,SAAS,OAAO;;CAEf,MAAM,EAAE,OAAO,EAAE,eAAe,QAAQ,CAAC;;CAEzC,OAAO,EAAE,MAAM;EACd,MAAM;EACN,UAAU,SAAS,OAAO,QAAQ,aAAa,IAAI,MAAM;EACzD,CAAC;;CAEF,UAAU,EAAE,WAAW;EACtB,MAAM;EACN,SAAS,OAAO,SAAS,MAAM,QAAQ;GACtC,MAAM,WAAW,MAAM,aAAa,IAAI,MAAM;GAC9C,MAAM,UAA2B,SAAS,KAAK,KAAK,SAAS;IAAE;IAAK;IAAU,EAAE;AAChF,UAAO,uBAAuB,EAAE,MAAM,EAAE,QAAQ;;EAEjD,CAAC;;CAEF,UAAU,EAAE,WAAW;EACtB,MAAM;EACN,SAAS,OAAO,SAAS,MAAM,QAAQ;GACtC,MAAM,WAAW,MAAM,aAAa,IAAI,MAAM;AAC9C,UAAO,uBAAuB,EAAE,MAAM,EAAE,CAAC,GAAG,SAAS,SAAS,CAAC;;EAEhE,CAAC;;CAEF,UAAU,EAAE,WAAW;EACtB,MAAM;EACN,SAAS,OAAO,SAAS,MAAM,QAAQ;GACtC,MAAM,WAAW,MAAM,aAAa,IAAI,MAAM;AAC9C,UAAO,uBAAuB,EAAE,MAAM,EAAE,CAAC,GAAG,SAAS,SAAS,CAAC;;EAEhE,CAAC;;;CAKF,MAAM,EAAE,MAAM;EACb,MAAM;EACN,UAAU;EACV,UAAU,SAAS,OAAO,QAAQ,OAAO,WAAW,IAAI,aAAa,KAAK;EAC1E,CAAC;;CAEF,WAAW,EAAE,MAAM;EAClB,MAAM,CAAC,cAAc;EACrB,UAAU,SAAS,OAAO,QAAQ,OAAO,WAAW,IAAI,OAAO,UAAU;EACzE,CAAC;;;CAGF,cAAc,EAAE,MAAM;EACrB,MAAM,CAAC,aAAa;EACpB,UAAU,SAAS,OAAO,QAAQ,OAAO,WAAW,IAAI,aAAa,SAAS;EAC9E,CAAC;;CAEF,UAAU,EAAE,MAAM;EACjB,MAAM,CAAC,SAAS;EAChB,UAAU,SAAS,OAAO,QAAQ,OAAO,WAAW,IAAI,aAAa,KAAK;EAC1E,CAAC;;;CAGF,UAAU,EAAE,MAAM;EACjB,MAAM,CAAC,QAAQ;EACf,UAAU,SAAS,OAAO,QAAQ,OAAO,WAAW,IAAI,aAAa,SAAS;EAC9E,CAAC;;;;;CAKF,eAAe,EAAE,MAAM;EACtB,MAAM,CAAC,aAAa;EACpB,UAAU,SAAS,OAAO,QAAQ,OAAO,WAAW,IAAI,aAAa,cAAc;EACnF,CAAC;;;CAGF,eAAe,EAAE,MAAM;EACtB,MAAM,CAAC,cAAc;EACrB,UAAU,SAAS,OAAO,QAAQ,OAAO,WAAW,IAAI,aAAa,cAAc;EACnF,CAAC;;;;CAMF,MAAM,EAAE,MAAM;EACb,MAAM,CAAC,cAAc;EACrB,MAAM,EAAE,QAAQ,EAAE,IAAI;GAAE,MAAM;GAAgB,UAAU;GAAO,CAAC,EAAE;EAClE,UAAU,SAAS,MAAM,QAAQ,OAAO,WAAW,IAAI,OAAO,KAAK,YAAY,KAAK,OAAO,CAAC,CAAC;EAC7F,CAAC;;CAEF,aAAa,EAAE,MAAM;EACpB,MAAM,CAAC,SAAS;EAChB,UAAU,SAAS,OAAO,QAAQ,OAAO,WAAW,IAAI,OAAO,YAAY;EAC3E,CAAC;;;CAGF,OAAO,EAAE,MAAM;EACd,MAAM,CAAC,eAAe;EACtB,MAAM,EAAE,QAAQ,EAAE,IAAI;GAAE,MAAM;GAAiB,UAAU;GAAO,CAAC,EAAE;EACnE,UAAU,SAAS,MAAM,QACxB,OAAO,WAAW,IAAI,OAAO,MAAM,aAAa,KAAK,OAAO,CAAC,CAAC;EAC/D,CAAC;;CAEF,cAAc,EAAE,MAAM;EACrB,MAAM,CAAC,SAAS;EAChB,UAAU,SAAS,OAAO,QAAQ,OAAO,WAAW,IAAI,OAAO,aAAa;EAC5E,CAAC;CACF,GACD,CAAC;;;;AAKF,MAAM,aAAoC,IAAI,IAAc;CAC3D;CACA;CACA;CACA;CACA;CACA;CACA,CAAC;AAEF,MAAM,YAAY,OAA4E;AAC7F,KAAI,MAAM,KAAM,QAAO,KAAA;CACvB,MAAM,MAAM,GAAG,QAAQ,MAAmB,KAAK,QAAQ,EAAE,SAAS,EAAE;AACpE,QAAO,IAAI,SAAS,IAAI,MAAM,KAAA;;;;AAK/B,MAAM,eACL,UAU2B;AAC3B,KAAI,SAAS,KAAM,QAAO,KAAA;CAC1B,MAAM,WAAW,SAAS,MAAM,SAAS;CAEzC,MAAM,SADe,SAAS,MAAM,OACT,EAAE,QAAQ,MAAqB,WAAW,IAAI,EAAc,CAAC;AACxF,QAAO;EACN,GAAI,WAAW,EAAE,UAAU,GAAG,EAAE;EAChC,GAAI,UAAU,OAAO,SAAS,IAAI,EAAE,QAAQ,GAAG,EAAE;EACjD,GAAI,MAAM,UAAU,OAAO,EAAE,QAAQ,MAAM,QAAQ,GAAG,EAAE;EACxD,GAAI,MAAM,eAAe,OAAO,EAAE,aAAa,MAAM,aAAa,GAAG,EAAE;EACvE,GAAI,MAAM,SAAS,OAAO,EAAE,OAAO,MAAM,OAAO,GAAG,EAAE;EACrD;;;AAIF,MAAM,gBACL,UAU4B;AAC5B,KAAI,SAAS,KAAM,QAAO,KAAA;CAC1B,MAAM,WAAW,SAAS,MAAM,SAAS;CAEzC,MAAM,WADgB,SAAS,MAAM,SACP,EAAE,QAAQ,MAA2B,MAAM,QAAQ,MAAM,QAAQ;AAC/F,QAAO;EACN,GAAI,WAAW,EAAE,UAAU,GAAG,EAAE;EAChC,GAAI,YAAY,SAAS,SAAS,IAAI,EAAE,UAAU,GAAG,EAAE;EACvD,GAAI,MAAM,UAAU,OAAO,EAAE,QAAQ,MAAM,QAAQ,GAAG,EAAE;EACxD,GAAI,MAAM,eAAe,OAAO,EAAE,aAAa,MAAM,aAAa,GAAG,EAAE;EACvE,GAAI,MAAM,SAAS,OAAO,EAAE,OAAO,MAAM,OAAO,GAAG,EAAE;EACrD;;AAIF,QAAQ,aAAa,EACpB,SAAS,OAAO;;CAEf,SAAS,EAAE,MAAM;EAChB,MAAM;EACN,UAAU,SAAS,OAAO,QAAQ,IAAI,KAAK,iBAAiB,EAAE,KAAK,iBAAiB,CAAC;EACrF,CAAC;;CAEF,eAAe,EAAE,eAAe;EAC/B,MAAM;EACN,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,EAAE,UAAU,MAAM,CAAC,EAAE;EACxD,UAAU,SAAS,MAAM,QACxB,IAAI,KAAK,+BAA+B;GACvC,KAAK;GACL,WAAW,KAAK,MAAM;GACtB,CAAC;EACH,CAAC;;CAEF,iBAAiB,EAAE,eAAe;EACjC,MAAM;EACN,OAAO,EAAE,MAAM,EAAE,MAAM,OAAO,EAAE,UAAU,OAAO,CAAC,EAAE;EACpD,UAAU,SAAS,MAAM,QACxB,IAAI,KAAK,oBAAoB;GAC5B,KAAK;GACL,GAAI,KAAK,MAAM,QAAQ,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,MAAM;GAC5D,CAAC;EACH,CAAC;;CAEF,SAAS,EAAE,MAAM;EAChB,MAAM;EACN,UAAU,SAAS,OAAO,QAAQ,IAAI,KAAK,qBAAqB,EAAE,KAAK,qBAAqB,CAAC;EAC7F,CAAC;;CAEF,OAAO,EAAE,eAAe;EACvB,MAAM;EACN,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,EAAE,UAAU,OAAO,CAAC,EAAE;EACzD,UAAU,SAAS,MAAM,QACxB,IAAI,KAAK,mBAAmB;GAC3B,KAAK;GACL,GAAI,KAAK,MAAM,aAAa,OAAO,EAAE,GAAG,EAAE,WAAW,KAAK,MAAM,WAAwB;GACxF,CAAC;EACH,CAAC;;CAEF,MAAM,EAAE,MAAM;EACb,MAAM;EACN,UAAU,SAAS,OAAO,QAAQ,IAAI,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,CAAC;EACvF,CAAC;;CAEF,OAAO,EAAE,MAAM;EACd,MAAM;EACN,UAAU,SAAS,OAAO,QAAQ,IAAI,KAAK,mBAAmB,EAAE,KAAK,mBAAmB,CAAC;EACzF,CAAC;;CAEF,cAAc,EAAE,eAAe;EAC9B,MAAM;EACN,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,EAAE,UAAU,MAAM,CAAC,EAAE;EACtD,UAAU,SAAS,MAAM,QACxB,IAAI,KAAK,2BAA2B;GACnC,KAAK;GACL,UAAU,KAAK,MAAM;GACrB,CAAC;EACH,CAAC;;CAEF,UAAU,EAAE,MAAM;EACjB,MAAM;EACN,UAAU,SAAS,OAAO,QACzB,IAAI,KAAK,sBAAsB,EAAE,KAAK,sBAAsB,CAAC;EAC9D,CAAC;;;;CAIF,iBAAiB,EAAE,eAAe;EACjC,MAAM;EACN,OAAO,EAAE,IAAI,EAAE,MAAM,OAAO,EAAE,UAAU,MAAM,CAAC,EAAE;EACjD,UAAU,SAAS,MAAM,QAAQ,OAAO,WAAW,IAAI,OAAO,gBAAgB,KAAK,MAAM,GAAG,CAAC;EAC7F,CAAC;;CAEF,gBAAgB,EAAE,eAAe;EAChC,MAAM;EACN,OAAO,EAAE,IAAI,EAAE,MAAM,OAAO,EAAE,UAAU,MAAM,CAAC,EAAE;EACjD,UAAU,SAAS,MAAM,QAAQ,OAAO,WAAW,IAAI,OAAO,eAAe,KAAK,MAAM,GAAG,CAAC;EAC5F,CAAC;;;;;;;CAOF,MAAM,EAAE,eAAe;EACtB,MAAM;EACN,OAAO;GACN,UAAU,EAAE,MAAM,OAAO,EAAE,UAAU,MAAM,CAAC;GAC5C,WAAW,EAAE,MAAM,OAAO,EAAE,UAAU,MAAM,CAAC;GAC7C,iBAAiB,EAAE,MAAM,OAAO,EAAE,UAAU,MAAM,CAAC;GACnD;EACD,UAAU,SAAS,MAAM,QACxB,OAAO,WACN,IAAI,aAAa,SAAS;GACzB,UAAU,KAAK,MAAM;GACrB,WAAW,KAAK,MAAM;GACtB,iBAAiB,KAAK,MAAM;GAC5B,CAAC,CACF;EACF,CAAC;;;;;;;;CAQF,MAAM,EAAE,eAAe;EACtB,MAAM;EACN,OAAO;GACN,WAAW,EAAE,MAAM,OAAO,EAAE,UAAU,MAAM,CAAC;GAC7C,UAAU,EAAE,MAAM,OAAO,EAAE,UAAU,OAAO,CAAC;GAC7C,iBAAiB,EAAE,MAAM,OAAO,EAAE,UAAU,OAAO,CAAC;GACpD;EACD,UAAU,SAAS,MAAM,QACxB,OAAO,WACN,IAAI,aAAa,YAAY;GAC5B,WAAW,KAAK,MAAM;GACtB,UAAU,KAAK,MAAM;GACrB,iBAAiB,KAAK,MAAM;GAC5B,CAAC,CACF;EACF,CAAC;CACF,GACD,CAAC;AAGF,QAAQ,iBAAiB,EACxB,SAAS,OAAO;;AAEf,OAAO,EAAE,MAAM;CACd,MAAM;CACN,YAAY,SAAS,OAAO,QAAQ,eAAe,IAAI,MAAM;CAC7D,UAAU,YAAY;CACtB,CAAC,EACF,GACD,CAAC;;;;;AAMF,gBAAgB,eACf,KACoC;CACpC,MAAM,QAAQ,OAAO,QAAQ,MAAM,WAA8B,CAAC;CAClE,MAAM,OAAO,OAAO,QACnB,OAAO,WAAW,gBAAgB,QAAQ,IAAI,GAAG,aAAa,MAAM,MAAM,OAAO,SAAS,CAAC,CAC3F;AACD,KAAI;AACH,SAAO,KACN,OAAM,MAAM,OAAO,WAAW,MAAM,KAAK,MAAM,CAAC;WAExC;AACT,SAAO,QAAQ,MAAM,UAAU,KAAK,CAAC"}
+{"version":3,"file":"root.mjs","names":[],"sources":["../../../../src/plugins/dashboard/schema/root.ts"],"sourcesContent":["// Dashboard root types — Query / Mutation / Subscription.\n//\n// Queries expose the live projection (`state`), relay node/connection\n// access over the snapshot arrays, and a liveness `ping`. Mutations map to\n// `EngineCommand`s. The single subscription streams the projection over the\n// SubscriptionRef→async-generator bridge. Dependencies (the `state` ref +\n// `publishCommand`) come from the GraphQL context (`ctx`), not closure — the\n// dashboard is a pure control plane (no chain reads).\n\nimport { Effect, Fiber, Queue, Stream, SubscriptionRef } from 'effect';\nimport { resolveArrayConnection } from '@pothos/plugin-relay';\nimport { builder } from './builder.ts';\nimport {\n\tAccount,\n\tCoinCap,\n\tDeepbookInfo,\n\tFundableCoin,\n\tLogFilterInput,\n\tLogRecordType,\n\tPackage,\n\tSealInfo,\n\tService,\n\tSnapshotEntry,\n\tStackState,\n\ttype ServiceSource,\n} from './types.ts';\nimport { StackMode } from './enums.ts';\nimport type { DashboardContext } from './builder.ts';\nimport type { PluginKey } from '../../../substrate/brand.ts';\nimport type { EngineCommand } from '../../../substrate/events.ts';\nimport type { SubscribableState } from '../../../substrate/projection.ts';\nimport type { LogFilter, LogLevel } from '../../../substrate/runtime/observability/index.ts';\n\nconst readSnapshot = (\n\tstate: SubscriptionRef.SubscriptionRef<SubscribableState>,\n): Promise<SubscribableState> => Effect.runPromise(SubscriptionRef.get(state));\n\n// --- CommandResult ------------------------------------------------------\ninterface CommandResultShape {\n\treadonly ok: boolean;\n\treadonly command: string;\n\treadonly message?: string | null;\n}\n\nconst CommandResult = builder.objectRef<CommandResultShape>('CommandResult').implement({\n\tdescription: 'The outcome of dispatching an engine command.',\n\tfields: (t) => ({\n\t\tok: t.exposeBoolean('ok'),\n\t\tcommand: t.exposeString('command'),\n\t\tmessage: t.string({ nullable: true, resolve: (r) => r.message ?? null }),\n\t}),\n});\n\nconst run = async (\n\tctx: DashboardContext,\n\ttag: string,\n\tcommand: EngineCommand,\n): Promise<CommandResultShape> => {\n\tawait Effect.runPromise(ctx.publishCommand(command));\n\treturn { ok: true, command: tag };\n};\n\n// --- SnapshotActionResult -----------------------------------------------\n//\n// Restore/delete go through the control-plane `domain` (NOT the void\n// `publishCommand`), so the dashboard gets a real ok/detail outcome the\n// fire-and-forget command channel cannot carry.\ninterface SnapshotActionResultShape {\n\treadonly ok: boolean;\n\treadonly detail: string | null;\n}\n\nconst SnapshotActionResult = builder\n\t.objectRef<SnapshotActionResultShape>('SnapshotActionResult')\n\t.implement({\n\t\tdescription: 'The outcome of a snapshot restore/delete (real result, not fire-and-forget).',\n\t\tfields: (t) => ({\n\t\t\tok: t.exposeBoolean('ok'),\n\t\t\tdetail: t.string({ nullable: true, resolve: (r) => r.detail }),\n\t\t}),\n\t});\n\n// --- MintResult ---------------------------------------------------------\n//\n// The coin Mint action goes through the control-plane `domain` (NOT the\n// void `publishCommand`): the supervisor holds the treasury-cap-owning\n// signer in-process and returns a real ok/detail outcome plus the on-chain\n// tx `digest` on success.\ninterface MintResultShape {\n\treadonly ok: boolean;\n\treadonly detail: string;\n\treadonly digest: string | null;\n}\n\nconst MintResult = builder.objectRef<MintResultShape>('MintResult').implement({\n\tdescription: 'The outcome of a coin mint (real result, with the on-chain tx digest on success).',\n\tfields: (t) => ({\n\t\tok: t.exposeBoolean('ok'),\n\t\tdetail: t.exposeString('detail'),\n\t\tdigest: t.string({ nullable: true, resolve: (r) => r.digest }),\n\t}),\n});\n\n// --- FundResult ---------------------------------------------------------\n//\n// The Faucet `fund` action routes through the control-plane `pluginDomain`,\n// reusing devstack's IN-PROCESS funding strategies (the same registry the\n// boot-time account funding pass uses): SUI via the chain faucet strategy\n// (fixed-amount), WAL/DEEP via the coin-specific account-signed swap. The\n// strategies return `void` (no digest), so the result carries only\n// `ok`/`detail`. `ok` reflects whether the strategy's `request(...)`\n// actually completed.\ninterface FundResultShape {\n\treadonly ok: boolean;\n\treadonly detail: string;\n}\n\nconst FundResult = builder.objectRef<FundResultShape>('FundResult').implement({\n\tdescription:\n\t\t'The outcome of a faucet fund request (real result — ok reflects whether the ' +\n\t\t'in-process funding strategy completed).',\n\tfields: (t) => ({\n\t\tok: t.exposeBoolean('ok'),\n\t\tdetail: t.exposeString('detail'),\n\t}),\n});\n\n// --- Query --------------------------------------------------------------\nbuilder.queryType({\n\tfields: (t) => ({\n\t\t/** Liveness probe. */\n\t\tping: t.string({ resolve: () => 'pong' }),\n\t\t/** Full live projection snapshot (status, services, endpoints, …). */\n\t\tstate: t.field({\n\t\t\ttype: StackState,\n\t\t\tresolve: (_parent, _args, ctx) => readSnapshot(ctx.state),\n\t\t}),\n\t\t/** Relay connection over the current snapshot's service rows. */\n\t\tservices: t.connection({\n\t\t\ttype: Service,\n\t\t\tresolve: async (_parent, args, ctx) => {\n\t\t\t\tconst snapshot = await readSnapshot(ctx.state);\n\t\t\t\tconst sources: ServiceSource[] = snapshot.rows.map((row) => ({ row, snapshot }));\n\t\t\t\treturn resolveArrayConnection({ args }, sources);\n\t\t\t},\n\t\t}),\n\t\t/** Relay connection over the current snapshot's accounts. */\n\t\taccounts: t.connection({\n\t\t\ttype: Account,\n\t\t\tresolve: async (_parent, args, ctx) => {\n\t\t\t\tconst snapshot = await readSnapshot(ctx.state);\n\t\t\t\treturn resolveArrayConnection({ args }, [...snapshot.accounts]);\n\t\t\t},\n\t\t}),\n\t\t/** Relay connection over the current snapshot's packages. */\n\t\tpackages: t.connection({\n\t\t\ttype: Package,\n\t\t\tresolve: async (_parent, args, ctx) => {\n\t\t\t\tconst snapshot = await readSnapshot(ctx.state);\n\t\t\t\treturn resolveArrayConnection({ args }, [...snapshot.packages]);\n\t\t\t},\n\t\t}),\n\n\t\t// --- Plugin-domain queries (data the browser cannot reach) --------\n\t\t/** Fork-vs-local stack mode (advance-clock gating). `null` when no\n\t\t *  sui plugin is present. */\n\t\tmode: t.field({\n\t\t\ttype: StackMode,\n\t\t\tnullable: true,\n\t\t\tresolve: (_parent, _args, ctx) => Effect.runPromise(ctx.pluginDomain.mode),\n\t\t}),\n\t\t/** Snapshot catalog: id/label/created/participants/containers. */\n\t\tsnapshots: t.field({\n\t\t\ttype: [SnapshotEntry],\n\t\t\tresolve: (_parent, _args, ctx) => Effect.runPromise(ctx.domain.snapshots),\n\t\t}),\n\t\t/** DeepBook deployments: registry/admin/pool ids + market-maker\n\t\t *  state. (Pool prices / order books are chain-direct.) */\n\t\tdeepbookInfo: t.field({\n\t\t\ttype: [DeepbookInfo],\n\t\t\tresolve: (_parent, _args, ctx) => Effect.runPromise(ctx.pluginDomain.deepbook),\n\t\t}),\n\t\t/** Seal key-server deployments: objectId/threshold/mode/keyServers. */\n\t\tsealInfo: t.field({\n\t\t\ttype: [SealInfo],\n\t\t\tresolve: (_parent, _args, ctx) => Effect.runPromise(ctx.pluginDomain.seal),\n\t\t}),\n\t\t/** Coin treasury caps (drives Mint) + addressing facts. (Supply /\n\t\t *  metadata are chain-direct.) */\n\t\tcoinCaps: t.field({\n\t\t\ttype: [CoinCap],\n\t\t\tresolve: (_parent, _args, ctx) => Effect.runPromise(ctx.pluginDomain.coinCaps),\n\t\t}),\n\t\t/** Coins the faucet can actually fund right now (drives the Faucet\n\t\t *  panel's coin pills + amount gating). SUI is always present when a\n\t\t *  faucet strategy is registered; WAL/DEEP appear only when their\n\t\t *  plugin contributed a funding strategy. */\n\t\tfundableCoins: t.field({\n\t\t\ttype: [FundableCoin],\n\t\t\tresolve: (_parent, _args, ctx) => Effect.runPromise(ctx.pluginDomain.fundableCoins),\n\t\t}),\n\t\t// --- Observability (Console \"Logs\" tab) ---------------------------\n\t\t/** Cross-service queryable log history. Filterable server-side by\n\t\t *  service / level / substring / time window; returns most-recent\n\t\t *  first, capped by `filter.limit` (default = ring capacity). */\n\t\tlogs: t.field({\n\t\t\ttype: [LogRecordType],\n\t\t\targs: { filter: t.arg({ type: LogFilterInput, required: false }) },\n\t\t\tresolve: (_parent, args, ctx) => Effect.runPromise(ctx.domain.logs(toLogFilter(args.filter))),\n\t\t}),\n\t\t/** Distinct services currently in the log ring (filter dropdown). */\n\t\tlogServices: t.field({\n\t\t\ttype: ['String'],\n\t\t\tresolve: (_parent, _args, ctx) => Effect.runPromise(ctx.domain.logServices),\n\t\t}),\n\t}),\n});\n\n/** Closed log-level set used to narrow the String[] filter input back onto\n *  the store's `LogLevel` union. Unknown strings are dropped (the store would\n *  just never match them anyway). */\nconst LOG_LEVELS: ReadonlySet<LogLevel> = new Set<LogLevel>([\n\t'trace',\n\t'debug',\n\t'info',\n\t'warn',\n\t'error',\n\t'fatal',\n]);\n\nconst nonEmpty = (xs: readonly (string | null)[] | null | undefined): string[] | undefined => {\n\tif (xs == null) return undefined;\n\tconst out = xs.filter((x): x is string => x != null && x.length > 0);\n\treturn out.length > 0 ? out : undefined;\n};\n\n/** Map the nullable GraphQL `LogFilter` input onto the store's `LogFilter`,\n *  dropping nulls and unknown levels. */\nconst toLogFilter = (\n\tinput:\n\t\t| {\n\t\t\t\tservices?: readonly (string | null)[] | null;\n\t\t\t\tlevels?: readonly (string | null)[] | null;\n\t\t\t\tsearch?: string | null;\n\t\t\t\tsinceMillis?: number | null;\n\t\t\t\tlimit?: number | null;\n\t\t  }\n\t\t| null\n\t\t| undefined,\n): LogFilter | undefined => {\n\tif (input == null) return undefined;\n\tconst services = nonEmpty(input.services);\n\tconst levelStrings = nonEmpty(input.levels);\n\tconst levels = levelStrings?.filter((l): l is LogLevel => LOG_LEVELS.has(l as LogLevel));\n\treturn {\n\t\t...(services ? { services } : {}),\n\t\t...(levels && levels.length > 0 ? { levels } : {}),\n\t\t...(input.search != null ? { search: input.search } : {}),\n\t\t...(input.sinceMillis != null ? { sinceMillis: input.sinceMillis } : {}),\n\t\t...(input.limit != null ? { limit: input.limit } : {}),\n\t};\n};\n\n// --- Mutation -----------------------------------------------------------\nbuilder.mutationType({\n\tfields: (t) => ({\n\t\t/** Restart the whole stack. */\n\t\trestart: t.field({\n\t\t\ttype: CommandResult,\n\t\t\tresolve: (_parent, _args, ctx) => run(ctx, 'stack.restart', { tag: 'stack.restart' }),\n\t\t}),\n\t\t/** Selectively restart a single plugin subgraph. */\n\t\trestartPlugin: t.fieldWithInput({\n\t\t\ttype: CommandResult,\n\t\t\tinput: { pluginKey: t.input.string({ required: true }) },\n\t\t\tresolve: (_parent, args, ctx) =>\n\t\t\t\trun(ctx, 'selective-restart.requested', {\n\t\t\t\t\ttag: 'selective-restart.requested',\n\t\t\t\t\tpluginKey: args.input.pluginKey as PluginKey,\n\t\t\t\t}),\n\t\t}),\n\t\t/** Capture a snapshot, optionally naming it. */\n\t\tcaptureSnapshot: t.fieldWithInput({\n\t\t\ttype: CommandResult,\n\t\t\tinput: { name: t.input.string({ required: false }) },\n\t\t\tresolve: (_parent, args, ctx) =>\n\t\t\t\trun(ctx, 'snapshot.capture', {\n\t\t\t\t\ttag: 'snapshot.capture',\n\t\t\t\t\t...(args.input.name == null ? {} : { name: args.input.name }),\n\t\t\t\t}),\n\t\t}),\n\t\t/** Re-run codegen against the live manifest. */\n\t\tcodegen: t.field({\n\t\t\ttype: CommandResult,\n\t\t\tresolve: (_parent, _args, ctx) => run(ctx, 'codegen.requested', { tag: 'codegen.requested' }),\n\t\t}),\n\t\t/** Re-apply the manifest, optionally scoped to a single plugin. */\n\t\tapply: t.fieldWithInput({\n\t\t\ttype: CommandResult,\n\t\t\tinput: { pluginKey: t.input.string({ required: false }) },\n\t\t\tresolve: (_parent, args, ctx) =>\n\t\t\t\trun(ctx, 'apply.requested', {\n\t\t\t\t\ttag: 'apply.requested',\n\t\t\t\t\t...(args.input.pluginKey == null ? {} : { pluginKey: args.input.pluginKey as PluginKey }),\n\t\t\t\t}),\n\t\t}),\n\t\t/** Wipe the live stack footprint (preserves the snapshot catalog). */\n\t\twipe: t.field({\n\t\t\ttype: CommandResult,\n\t\t\tresolve: (_parent, _args, ctx) => run(ctx, 'wipe.requested', { tag: 'wipe.requested' }),\n\t\t}),\n\t\t/** Prune the snapshot catalog + sweep byproduct images. */\n\t\tprune: t.field({\n\t\t\ttype: CommandResult,\n\t\t\tresolve: (_parent, _args, ctx) => run(ctx, 'prune.requested', { tag: 'prune.requested' }),\n\t\t}),\n\t\t/** Advance the (fork/local) chain clock to an absolute epoch-ms. */\n\t\tadvanceClock: t.fieldWithInput({\n\t\t\ttype: CommandResult,\n\t\t\tinput: { toMillis: t.input.float({ required: true }) },\n\t\t\tresolve: (_parent, args, ctx) =>\n\t\t\t\trun(ctx, 'advance-clock.requested', {\n\t\t\t\t\ttag: 'advance-clock.requested',\n\t\t\t\t\ttoMillis: args.input.toMillis,\n\t\t\t\t}),\n\t\t}),\n\t\t/** Request a graceful stack shutdown. */\n\t\tshutdown: t.field({\n\t\t\ttype: CommandResult,\n\t\t\tresolve: (_parent, _args, ctx) =>\n\t\t\t\trun(ctx, 'shutdown.requested', { tag: 'shutdown.requested' }),\n\t\t}),\n\t\t/** Restore a snapshot by id. Routes through the supervisor\n\t\t *  command-loop via `submitCommand` (NOT the in-process\n\t\t *  `domain.restoreSnapshot`): restore is destructive — it removes the\n\t\t *  live managed containers and relies on a follow-on re-acquire to\n\t\t *  rebuild them. Running it in-process against a live supervisor would\n\t\t *  race the single command-queue consumer and leave services dead until\n\t\t *  a manual Restart. The command-loop's `snapshot.restore` case applies\n\t\t *  the restored tree, publishes `snapshot.restored`, THEN drains +\n\t\t *  re-acquires every service (the manual-restart sequence) — and the\n\t\t *  submitted-command completion deferred lets this mutation await the\n\t\t *  real ok/detail outcome the void `publishCommand` could not carry. */\n\t\trestoreSnapshot: t.fieldWithInput({\n\t\t\ttype: SnapshotActionResult,\n\t\t\tinput: { id: t.input.string({ required: true }) },\n\t\t\tresolve: (_parent, args, ctx) =>\n\t\t\t\tEffect.runPromise(\n\t\t\t\t\tctx.submitCommand({ tag: 'snapshot.restore', snapshotId: args.input.id }).pipe(\n\t\t\t\t\t\tEffect.as({ ok: true, detail: null as string | null }),\n\t\t\t\t\t\tEffect.catchCause((cause) =>\n\t\t\t\t\t\t\tEffect.succeed({ ok: false, detail: String(cause) as string | null }),\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t}),\n\t\t/** Delete a snapshot by id (via the control-plane `domain`). */\n\t\tdeleteSnapshot: t.fieldWithInput({\n\t\t\ttype: SnapshotActionResult,\n\t\t\tinput: { id: t.input.string({ required: true }) },\n\t\t\tresolve: (_parent, args, ctx) => Effect.runPromise(ctx.domain.deleteSnapshot(args.input.id)),\n\t\t}),\n\t\t/** Mint a custom coin. Routes through the control-plane `domain`:\n\t\t *  the supervisor holds the treasury-cap-owning publisher signer\n\t\t *  in-process and returns a real ok/detail/digest result (the void\n\t\t *  `publishCommand` could not carry the tx digest). `amountBaseUnits`\n\t\t *  is the raw integer amount in the coin's smallest unit (string so\n\t\t *  large u64 values survive the wire without precision loss). */\n\t\tmint: t.fieldWithInput({\n\t\t\ttype: MintResult,\n\t\t\tinput: {\n\t\t\t\tcoinType: t.input.string({ required: true }),\n\t\t\t\trecipient: t.input.string({ required: true }),\n\t\t\t\tamountBaseUnits: t.input.string({ required: true }),\n\t\t\t},\n\t\t\tresolve: (_parent, args, ctx) =>\n\t\t\t\tEffect.runPromise(\n\t\t\t\t\tctx.pluginDomain.mintCoin({\n\t\t\t\t\t\tcoinType: args.input.coinType,\n\t\t\t\t\t\trecipient: args.input.recipient,\n\t\t\t\t\t\tamountBaseUnits: args.input.amountBaseUnits,\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t}),\n\t\t/** Fund an account/address. Routes through the control-plane\n\t\t *  `pluginDomain`, reusing devstack's in-process funding strategies:\n\t\t *  SUI (absent / canonical `coinType`) via the chain faucet strategy\n\t\t *  (fixed-amount — `amountBaseUnits` is ignored); WAL/DEEP via the\n\t\t *  coin-specific account-signed swap (`amountBaseUnits` honored, and\n\t\t *  the recipient must be a resolved account). Real result — `ok`\n\t\t *  reflects whether the strategy completed. */\n\t\tfund: t.fieldWithInput({\n\t\t\ttype: FundResult,\n\t\t\tinput: {\n\t\t\t\trecipient: t.input.string({ required: true }),\n\t\t\t\tcoinType: t.input.string({ required: false }),\n\t\t\t\tamountBaseUnits: t.input.string({ required: false }),\n\t\t\t},\n\t\t\tresolve: (_parent, args, ctx) =>\n\t\t\t\tEffect.runPromise(\n\t\t\t\t\tctx.pluginDomain.fundAccount({\n\t\t\t\t\t\trecipient: args.input.recipient,\n\t\t\t\t\t\tcoinType: args.input.coinType,\n\t\t\t\t\t\tamountBaseUnits: args.input.amountBaseUnits,\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t}),\n\t}),\n});\n\n// --- Subscription -------------------------------------------------------\nbuilder.subscriptionType({\n\tfields: (t) => ({\n\t\t/** Stream the projection on every change (current value first). */\n\t\tstate: t.field({\n\t\t\ttype: StackState,\n\t\t\tsubscribe: (_parent, _args, ctx) => subscribeState(ctx.state),\n\t\t\tresolve: (payload) => payload,\n\t\t}),\n\t}),\n});\n\n/** Bridge an Effect `SubscriptionRef` to an async iterable for GraphQL\n *  subscriptions. `SubscriptionRef.changes` emits the current value first,\n *  then each subsequent update. The pump fiber is interrupted when the\n *  consumer (yoga) stops iterating. */\nasync function* subscribeState(\n\tref: SubscriptionRef.SubscriptionRef<SubscribableState>,\n): AsyncGenerator<SubscribableState> {\n\tconst queue = Effect.runSync(Queue.unbounded<SubscribableState>());\n\tconst pump = Effect.runFork(\n\t\tStream.runForEach(SubscriptionRef.changes(ref), (snapshot) => Queue.offer(queue, snapshot)),\n\t);\n\ttry {\n\t\twhile (true) {\n\t\t\tyield await Effect.runPromise(Queue.take(queue));\n\t\t}\n\t} finally {\n\t\tEffect.runFork(Fiber.interrupt(pump));\n\t}\n}\n"],"mappings":";;;;;;AAiCA,MAAM,gBACL,UACgC,OAAO,WAAW,gBAAgB,IAAI,KAAK,CAAC;AAS7E,MAAM,gBAAgB,QAAQ,UAA8B,eAAe,CAAC,CAAC,UAAU;CACtF,aAAa;CACb,SAAS,OAAO;EACf,IAAI,EAAE,cAAc,IAAI;EACxB,SAAS,EAAE,aAAa,SAAS;EACjC,SAAS,EAAE,OAAO;GAAE,UAAU;GAAM,UAAU,MAAM,EAAE,WAAW;EAAK,CAAC;CACxE;AACD,CAAC;AAED,MAAM,MAAM,OACX,KACA,KACA,YACiC;CACjC,MAAM,OAAO,WAAW,IAAI,eAAe,OAAO,CAAC;CACnD,OAAO;EAAE,IAAI;EAAM,SAAS;CAAI;AACjC;AAYA,MAAM,uBAAuB,QAC3B,UAAqC,sBAAsB,CAAC,CAC5D,UAAU;CACV,aAAa;CACb,SAAS,OAAO;EACf,IAAI,EAAE,cAAc,IAAI;EACxB,QAAQ,EAAE,OAAO;GAAE,UAAU;GAAM,UAAU,MAAM,EAAE;EAAO,CAAC;CAC9D;AACD,CAAC;AAcF,MAAM,aAAa,QAAQ,UAA2B,YAAY,CAAC,CAAC,UAAU;CAC7E,aAAa;CACb,SAAS,OAAO;EACf,IAAI,EAAE,cAAc,IAAI;EACxB,QAAQ,EAAE,aAAa,QAAQ;EAC/B,QAAQ,EAAE,OAAO;GAAE,UAAU;GAAM,UAAU,MAAM,EAAE;EAAO,CAAC;CAC9D;AACD,CAAC;AAgBD,MAAM,aAAa,QAAQ,UAA2B,YAAY,CAAC,CAAC,UAAU;CAC7E,aACC;CAED,SAAS,OAAO;EACf,IAAI,EAAE,cAAc,IAAI;EACxB,QAAQ,EAAE,aAAa,QAAQ;CAChC;AACD,CAAC;AAGD,QAAQ,UAAU,EACjB,SAAS,OAAO;;CAEf,MAAM,EAAE,OAAO,EAAE,eAAe,OAAO,CAAC;;CAExC,OAAO,EAAE,MAAM;EACd,MAAM;EACN,UAAU,SAAS,OAAO,QAAQ,aAAa,IAAI,KAAK;CACzD,CAAC;;CAED,UAAU,EAAE,WAAW;EACtB,MAAM;EACN,SAAS,OAAO,SAAS,MAAM,QAAQ;GACtC,MAAM,WAAW,MAAM,aAAa,IAAI,KAAK;GAC7C,MAAM,UAA2B,SAAS,KAAK,KAAK,SAAS;IAAE;IAAK;GAAS,EAAE;GAC/E,OAAO,uBAAuB,EAAE,KAAK,GAAG,OAAO;EAChD;CACD,CAAC;;CAED,UAAU,EAAE,WAAW;EACtB,MAAM;EACN,SAAS,OAAO,SAAS,MAAM,QAAQ;GACtC,MAAM,WAAW,MAAM,aAAa,IAAI,KAAK;GAC7C,OAAO,uBAAuB,EAAE,KAAK,GAAG,CAAC,GAAG,SAAS,QAAQ,CAAC;EAC/D;CACD,CAAC;;CAED,UAAU,EAAE,WAAW;EACtB,MAAM;EACN,SAAS,OAAO,SAAS,MAAM,QAAQ;GACtC,MAAM,WAAW,MAAM,aAAa,IAAI,KAAK;GAC7C,OAAO,uBAAuB,EAAE,KAAK,GAAG,CAAC,GAAG,SAAS,QAAQ,CAAC;EAC/D;CACD,CAAC;;;CAKD,MAAM,EAAE,MAAM;EACb,MAAM;EACN,UAAU;EACV,UAAU,SAAS,OAAO,QAAQ,OAAO,WAAW,IAAI,aAAa,IAAI;CAC1E,CAAC;;CAED,WAAW,EAAE,MAAM;EAClB,MAAM,CAAC,aAAa;EACpB,UAAU,SAAS,OAAO,QAAQ,OAAO,WAAW,IAAI,OAAO,SAAS;CACzE,CAAC;;;CAGD,cAAc,EAAE,MAAM;EACrB,MAAM,CAAC,YAAY;EACnB,UAAU,SAAS,OAAO,QAAQ,OAAO,WAAW,IAAI,aAAa,QAAQ;CAC9E,CAAC;;CAED,UAAU,EAAE,MAAM;EACjB,MAAM,CAAC,QAAQ;EACf,UAAU,SAAS,OAAO,QAAQ,OAAO,WAAW,IAAI,aAAa,IAAI;CAC1E,CAAC;;;CAGD,UAAU,EAAE,MAAM;EACjB,MAAM,CAAC,OAAO;EACd,UAAU,SAAS,OAAO,QAAQ,OAAO,WAAW,IAAI,aAAa,QAAQ;CAC9E,CAAC;;;;;CAKD,eAAe,EAAE,MAAM;EACtB,MAAM,CAAC,YAAY;EACnB,UAAU,SAAS,OAAO,QAAQ,OAAO,WAAW,IAAI,aAAa,aAAa;CACnF,CAAC;;;;CAKD,MAAM,EAAE,MAAM;EACb,MAAM,CAAC,aAAa;EACpB,MAAM,EAAE,QAAQ,EAAE,IAAI;GAAE,MAAM;GAAgB,UAAU;EAAM,CAAC,EAAE;EACjE,UAAU,SAAS,MAAM,QAAQ,OAAO,WAAW,IAAI,OAAO,KAAK,YAAY,KAAK,MAAM,CAAC,CAAC;CAC7F,CAAC;;CAED,aAAa,EAAE,MAAM;EACpB,MAAM,CAAC,QAAQ;EACf,UAAU,SAAS,OAAO,QAAQ,OAAO,WAAW,IAAI,OAAO,WAAW;CAC3E,CAAC;AACF,GACD,CAAC;;;;AAKD,MAAM,aAAoC,IAAI,IAAc;CAC3D;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AAED,MAAM,YAAY,OAA4E;CAC7F,IAAI,MAAM,MAAM,OAAO,KAAA;CACvB,MAAM,MAAM,GAAG,QAAQ,MAAmB,KAAK,QAAQ,EAAE,SAAS,CAAC;CACnE,OAAO,IAAI,SAAS,IAAI,MAAM,KAAA;AAC/B;;;AAIA,MAAM,eACL,UAU2B;CAC3B,IAAI,SAAS,MAAM,OAAO,KAAA;CAC1B,MAAM,WAAW,SAAS,MAAM,QAAQ;CAExC,MAAM,SADe,SAAS,MAAM,MACV,CAAC,EAAE,QAAQ,MAAqB,WAAW,IAAI,CAAa,CAAC;CACvF,OAAO;EACN,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;EAC/B,GAAI,UAAU,OAAO,SAAS,IAAI,EAAE,OAAO,IAAI,CAAC;EAChD,GAAI,MAAM,UAAU,OAAO,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;EACvD,GAAI,MAAM,eAAe,OAAO,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;EACtE,GAAI,MAAM,SAAS,OAAO,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;CACrD;AACD;AAGA,QAAQ,aAAa,EACpB,SAAS,OAAO;;CAEf,SAAS,EAAE,MAAM;EAChB,MAAM;EACN,UAAU,SAAS,OAAO,QAAQ,IAAI,KAAK,iBAAiB,EAAE,KAAK,gBAAgB,CAAC;CACrF,CAAC;;CAED,eAAe,EAAE,eAAe;EAC/B,MAAM;EACN,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,EAAE,UAAU,KAAK,CAAC,EAAE;EACvD,UAAU,SAAS,MAAM,QACxB,IAAI,KAAK,+BAA+B;GACvC,KAAK;GACL,WAAW,KAAK,MAAM;EACvB,CAAC;CACH,CAAC;;CAED,iBAAiB,EAAE,eAAe;EACjC,MAAM;EACN,OAAO,EAAE,MAAM,EAAE,MAAM,OAAO,EAAE,UAAU,MAAM,CAAC,EAAE;EACnD,UAAU,SAAS,MAAM,QACxB,IAAI,KAAK,oBAAoB;GAC5B,KAAK;GACL,GAAI,KAAK,MAAM,QAAQ,OAAO,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,KAAK;EAC5D,CAAC;CACH,CAAC;;CAED,SAAS,EAAE,MAAM;EAChB,MAAM;EACN,UAAU,SAAS,OAAO,QAAQ,IAAI,KAAK,qBAAqB,EAAE,KAAK,oBAAoB,CAAC;CAC7F,CAAC;;CAED,OAAO,EAAE,eAAe;EACvB,MAAM;EACN,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,EAAE,UAAU,MAAM,CAAC,EAAE;EACxD,UAAU,SAAS,MAAM,QACxB,IAAI,KAAK,mBAAmB;GAC3B,KAAK;GACL,GAAI,KAAK,MAAM,aAAa,OAAO,CAAC,IAAI,EAAE,WAAW,KAAK,MAAM,UAAuB;EACxF,CAAC;CACH,CAAC;;CAED,MAAM,EAAE,MAAM;EACb,MAAM;EACN,UAAU,SAAS,OAAO,QAAQ,IAAI,KAAK,kBAAkB,EAAE,KAAK,iBAAiB,CAAC;CACvF,CAAC;;CAED,OAAO,EAAE,MAAM;EACd,MAAM;EACN,UAAU,SAAS,OAAO,QAAQ,IAAI,KAAK,mBAAmB,EAAE,KAAK,kBAAkB,CAAC;CACzF,CAAC;;CAED,cAAc,EAAE,eAAe;EAC9B,MAAM;EACN,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,EAAE,UAAU,KAAK,CAAC,EAAE;EACrD,UAAU,SAAS,MAAM,QACxB,IAAI,KAAK,2BAA2B;GACnC,KAAK;GACL,UAAU,KAAK,MAAM;EACtB,CAAC;CACH,CAAC;;CAED,UAAU,EAAE,MAAM;EACjB,MAAM;EACN,UAAU,SAAS,OAAO,QACzB,IAAI,KAAK,sBAAsB,EAAE,KAAK,qBAAqB,CAAC;CAC9D,CAAC;;;;;;;;;;;;CAYD,iBAAiB,EAAE,eAAe;EACjC,MAAM;EACN,OAAO,EAAE,IAAI,EAAE,MAAM,OAAO,EAAE,UAAU,KAAK,CAAC,EAAE;EAChD,UAAU,SAAS,MAAM,QACxB,OAAO,WACN,IAAI,cAAc;GAAE,KAAK;GAAoB,YAAY,KAAK,MAAM;EAAG,CAAC,CAAC,CAAC,KACzE,OAAO,GAAG;GAAE,IAAI;GAAM,QAAQ;EAAsB,CAAC,GACrD,OAAO,YAAY,UAClB,OAAO,QAAQ;GAAE,IAAI;GAAO,QAAQ,OAAO,KAAK;EAAmB,CAAC,CACrE,CACD,CACD;CACF,CAAC;;CAED,gBAAgB,EAAE,eAAe;EAChC,MAAM;EACN,OAAO,EAAE,IAAI,EAAE,MAAM,OAAO,EAAE,UAAU,KAAK,CAAC,EAAE;EAChD,UAAU,SAAS,MAAM,QAAQ,OAAO,WAAW,IAAI,OAAO,eAAe,KAAK,MAAM,EAAE,CAAC;CAC5F,CAAC;;;;;;;CAOD,MAAM,EAAE,eAAe;EACtB,MAAM;EACN,OAAO;GACN,UAAU,EAAE,MAAM,OAAO,EAAE,UAAU,KAAK,CAAC;GAC3C,WAAW,EAAE,MAAM,OAAO,EAAE,UAAU,KAAK,CAAC;GAC5C,iBAAiB,EAAE,MAAM,OAAO,EAAE,UAAU,KAAK,CAAC;EACnD;EACA,UAAU,SAAS,MAAM,QACxB,OAAO,WACN,IAAI,aAAa,SAAS;GACzB,UAAU,KAAK,MAAM;GACrB,WAAW,KAAK,MAAM;GACtB,iBAAiB,KAAK,MAAM;EAC7B,CAAC,CACF;CACF,CAAC;;;;;;;;CAQD,MAAM,EAAE,eAAe;EACtB,MAAM;EACN,OAAO;GACN,WAAW,EAAE,MAAM,OAAO,EAAE,UAAU,KAAK,CAAC;GAC5C,UAAU,EAAE,MAAM,OAAO,EAAE,UAAU,MAAM,CAAC;GAC5C,iBAAiB,EAAE,MAAM,OAAO,EAAE,UAAU,MAAM,CAAC;EACpD;EACA,UAAU,SAAS,MAAM,QACxB,OAAO,WACN,IAAI,aAAa,YAAY;GAC5B,WAAW,KAAK,MAAM;GACtB,UAAU,KAAK,MAAM;GACrB,iBAAiB,KAAK,MAAM;EAC7B,CAAC,CACF;CACF,CAAC;AACF,GACD,CAAC;AAGD,QAAQ,iBAAiB,EACxB,SAAS,OAAO;;AAEf,OAAO,EAAE,MAAM;CACd,MAAM;CACN,YAAY,SAAS,OAAO,QAAQ,eAAe,IAAI,KAAK;CAC5D,UAAU,YAAY;AACvB,CAAC,EACF,GACD,CAAC;;;;;AAMD,gBAAgB,eACf,KACoC;CACpC,MAAM,QAAQ,OAAO,QAAQ,MAAM,UAA6B,CAAC;CACjE,MAAM,OAAO,OAAO,QACnB,OAAO,WAAW,gBAAgB,QAAQ,GAAG,IAAI,aAAa,MAAM,MAAM,OAAO,QAAQ,CAAC,CAC3F;CACA,IAAI;EACH,OAAO,MACN,MAAM,MAAM,OAAO,WAAW,MAAM,KAAK,KAAK,CAAC;CAEjD,UAAU;EACT,OAAO,QAAQ,MAAM,UAAU,IAAI,CAAC;CACrC;AACD"}