@mysten-incubation/devstack 0.1.0 → 0.2.0

package/dist/plugins/sui/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../src/plugins/sui/index.ts"],"sourcesContent":["// Sui plugin — barrel + factories.\n//\n// Architecture: Sui is the most-depended-on plugin in the stack.\n// Every consumer (Account/Coin/Wallet/Faucet/Package; Walrus/Seal/\n// Deepbook fork variants) reads its resolved `SuiClient` via the\n// `suiResource`. The factory at this file folds the four modes behind:\n//\n//   - `sui(opts?)`         — local shorthand. Defaults to an in-stack\n//                              local validator; pass a typed `opts`\n//                              record to select a different mode.\n//   - `suiFor(network)`    — mode-narrowed factory namespace (per\n//                              architecture Tension 11). Returns\n//                              `{ local: …, live: …, fork: … }`\n//                              narrowed to the network's mode.\n//\n// The plugin emits FOUR capability decls:\n//\n//   1. `chain-probe:<chainId>` strategy contributor — the\n//      schema-validated read surface (`makeSuiChainProbe`).\n//   2. Snapshotable — mode-aware container + bind-mount capture.\n//   3. Codegenable — `sui-network` bindings (chain id, rpc, etc.).\n//   4. Faucet strategy contributor — local-coin dispensing for the\n//      mode's chain id.\n//\n// Routable contributions are MODE-DEPENDENT (local + fork yes;\n// local-rpc + live no — the caller fronts their own RPC). They land\n// in the per-mode builder under `mode/*.ts`; this barrel composes\n// them into the plugin capability array.\n\nimport { Effect } from 'effect';\n\nimport { defineModeNamespace } from '../../api/mode-narrowed-factory.ts';\nimport { definePlugin, resource } from '../../api/define-plugin.ts';\nimport { pluginErrorContributions } from '../../api/plugin-errors.ts';\nimport type { ChainProbe } from '../../contracts/chain-probe.ts';\nimport type { CodegenableDecl } from '../../contracts/codegenable.ts';\nimport type { SnapshotableDecl } from '../../contracts/snapshotable.ts';\nimport type { StrategyContributorDecl } from '../../contracts/strategy-contributor.ts';\nimport type { AcquireContext } from '../../substrate/plugin.ts';\n\nimport { chainProbeCapabilityKey } from '../../contracts/chain-probe.ts';\nimport { ContainerRuntimeService } from '../../runtime/docker/service.ts';\nimport { IdentityContext, StackPathsService } from '../../substrate/runtime/paths.ts';\nimport { LeaseBrokerService, type LeaseBroker } from '../../substrate/runtime/lease-broker/index.ts';\nimport { PortBrokerService } from '../../substrate/runtime/port-broker/index.ts';\nimport { makeCodegenable } from './codegen.ts';\nimport type { SuiProbeKey } from './chain-probe.ts';\nimport { makeSnapshotable } from './snapshot.ts';\nimport { bootSuiService } from './service.ts';\nimport { SUI_ERROR_TAGS, type SuiPluginError } from './errors.ts';\nimport { makeSuiForkRoutables, makeSuiLocalRoutables } from './routable.ts';\nimport { faucetCapabilityKey, type FaucetStrategy } from '../faucet/index.ts';\nimport { suiLocalStrategy } from './local-faucet-strategy.ts';\nimport { suiForkFaucetStrategy } from './fork-faucet-strategy.ts';\nimport { selectSufficientForkCoin } from './fork-transaction.ts';\nimport { FORK_FAUCET_WHALE_MIN_COIN_MIST, resolveForkWhale } from './mode/fork.ts';\nimport type { SuiClient } from './mode/shared.ts';\nimport type {\n\tSuiForkOptions,\n\tSuiLiveOptions,\n\tSuiLocalRpcOptions,\n\tSuiLocalOptions,\n\tSuiOptions,\n} from './mode/spec.ts';\n\n// ---------------------------------------------------------------------------\n// Resource identity\n// ---------------------------------------------------------------------------\n\ntype SuiResolved = SuiClient & {\n\treadonly mode: SuiOptions['mode'];\n};\n\n/** Internal extension of `SuiResolved` carrying the pre-built funding\n *  faucet strategy. `start` owns the `LeaseBrokerService` instance for\n *  serialization; building the strategy at start-time (where the broker\n *  is reachable) lets the capabilities factory consume a flat value\n *  without threading the broker through a side channel. Local/live wrap\n *  the HTTP faucet; fork impersonates a whale; `null` on networks with\n *  no faucet (live-mainnet, external-rpc-without-faucet, faucet-disabled\n *  fork). */\ntype SuiResolvedRuntime = SuiResolved & {\n\treadonly fundingFaucetStrategy: FaucetStrategy | null;\n};\n\n/** The Sui plugin's resource identity. The id is `'sui'` (singular). */\nexport const suiResource = resource<'sui', SuiResolved>('sui');\nconst suiErrorContributions = pluginErrorContributions(SUI_ERROR_TAGS);\n\n// ---------------------------------------------------------------------------\n// Plugin construction (internal — used by sui() + suiFor())\n// ---------------------------------------------------------------------------\n\n/** Build the funds-ready faucet strategy for the resolved network, or\n *  `null` when the network has none. Local/live wrap the HTTP faucet;\n *  fork mode impersonates a whale (resolved + validated here). */\nconst resolveFundingFaucetStrategy = (\n\topts: SuiOptions,\n\tclient: SuiClient,\n\tbroker: LeaseBroker,\n): Effect.Effect<FaucetStrategy | null, SuiPluginError> => {\n\tif (opts.mode === 'fork') {\n\t\treturn resolveForkFaucetStrategy(opts, client, broker);\n\t}\n\tif (client.fundingFaucetUrl === null) {\n\t\treturn Effect.succeed(null);\n\t}\n\treturn Effect.succeed(\n\t\tsuiLocalStrategy({\n\t\t\tfaucetUrl: client.fundingFaucetUrl,\n\t\t\tserialization: {\n\t\t\t\tbroker,\n\t\t\t\tkey: `sui-faucet:${client.chain}`,\n\t\t\t\towner: `sui-faucet:${client.chain}`,\n\t\t\t},\n\t\t}),\n\t);\n};\n\n/** Fork-mode faucet: resolve the whale, validate it holds a large enough\n *  SUI coin, then build the impersonation strategy. A whale the user set\n *  explicitly that fails validation hard-fails the boot; a per-upstream\n *  default whale only warns and disables the faucet so the fork still\n *  comes up (account funding then surfaces the \"no faucet strategy\"\n *  error only if something actually needs SUI). */\nconst resolveForkFaucetStrategy = (\n\topts: SuiForkOptions,\n\tclient: SuiClient,\n\tbroker: LeaseBroker,\n): Effect.Effect<FaucetStrategy | null, SuiPluginError> =>\n\tEffect.gen(function* () {\n\t\tconst resolved = resolveForkWhale(opts);\n\t\tconst fork = client.fork;\n\t\tif (resolved === null || fork === null) {\n\t\t\treturn null;\n\t\t}\n\t\tconst strategy = suiForkFaucetStrategy({\n\t\t\twhale: resolved.whale,\n\t\t\tfork,\n\t\t\tsdk: client.sdk,\n\t\t\tperRequestCapMist: resolved.perRequestCapMist,\n\t\t\tserialization: {\n\t\t\t\tbroker,\n\t\t\t\tkey: `sui-fork-faucet:${client.chain}`,\n\t\t\t\towner: `sui-fork-faucet:${client.chain}`,\n\t\t\t},\n\t\t});\n\t\treturn yield* selectSufficientForkCoin(\n\t\t\tclient.sdk.core,\n\t\t\tresolved.whale,\n\t\t\tFORK_FAUCET_WHALE_MIN_COIN_MIST,\n\t\t).pipe(\n\t\t\tEffect.as(strategy),\n\t\t\tEffect.catchTag('SuiPluginError', (cause) =>\n\t\t\t\tresolved.explicit\n\t\t\t\t\t? Effect.fail(cause)\n\t\t\t\t\t: Effect.logWarning(\n\t\t\t\t\t\t\t`sui fork mode: default faucet whale ${resolved.whale} is unusable ` +\n\t\t\t\t\t\t\t\t`(${cause.message}); disabling the fork faucet. Set faucet.whale to override.`,\n\t\t\t\t\t\t).pipe(Effect.as(null)),\n\t\t\t),\n\t\t);\n\t});\n\nconst buildPlugin = (opts: SuiOptions) => {\n\treturn definePlugin({\n\t\tid: suiResource.id,\n\t\trole: 'service',\n\t\tsection: 'service',\n\t\tstart: () =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\t// The substrate threads `ContainerRuntime` + `IdentityContext`\n\t\t\t\t// via the plugin runtime context; the supervisor provides\n\t\t\t\t// these before this body runs.\n\t\t\t\tconst runtime = yield* ContainerRuntimeService;\n\t\t\t\tconst identity = yield* IdentityContext;\n\t\t\t\tconst paths = yield* StackPathsService;\n\t\t\t\tconst portBroker = yield* PortBrokerService;\n\t\t\t\tconst fundingFaucetLeaseBroker = yield* LeaseBrokerService;\n\t\t\t\tconst { client } = yield* bootSuiService(runtime, identity, portBroker, paths, opts);\n\n\t\t\t\tconst fundingFaucetStrategy = yield* resolveFundingFaucetStrategy(\n\t\t\t\t\topts,\n\t\t\t\t\tclient,\n\t\t\t\t\tfundingFaucetLeaseBroker,\n\t\t\t\t);\n\t\t\t\treturn {\n\t\t\t\t\t...client,\n\t\t\t\t\tmode: opts.mode,\n\t\t\t\t\tfundingFaucetStrategy,\n\t\t\t\t} satisfies SuiResolvedRuntime;\n\t\t\t}),\n\t\tcapabilities: ({ value, runtime }) => makePluginCapabilities(opts, value, runtime),\n\t\terrorContributions: suiErrorContributions,\n\t});\n};\n\n/** Construct the capability tuple POST-acquire. Receives the resolved\n *  `SuiClient` + acquire context so decls can stamp REAL chain ids /\n *  rpc URLs into their fields instead of factory-time placeholders.\n *\n *  StrategyContributor declarations here carry real post-acquire\n *  strategy values. The generic strategy sink registers them on the\n *  scope-local `StrategyRegistry`. */\nconst makePluginCapabilities = (\n\topts: SuiOptions,\n\tresolved: SuiResolved,\n\tacquireCtx: AcquireContext,\n) => {\n\tconst realChain = resolved.chain;\n\tconst resolvedRuntime = resolved as SuiResolvedRuntime;\n\tconst snap: SnapshotableDecl = makeSnapshotable(\n\t\topts.mode,\n\t\tacquireCtx.identity.app,\n\t\tacquireCtx.identity.stack,\n\t\trealChain,\n\t);\n\tconst codegen: CodegenableDecl<'sui-network'> = makeCodegenable({\n\t\tmode: opts.mode,\n\t\tchain: realChain,\n\t\trpc: resolved.rpcUrl,\n\t\tsource: 'default',\n\t\t...(resolved.faucetUrl !== null ? { faucet: resolved.faucetUrl } : {}),\n\t\t...(resolved.graphqlUrl !== null ? { graphql: resolved.graphqlUrl } : {}),\n\t});\n\n\tconst chainProbeContribution: StrategyContributorDecl<\n\t\t`chain-probe:${string}`,\n\t\tChainProbe<SuiProbeKey>\n\t> = {\n\t\tkind: 'strategy-contributor',\n\t\tcapabilityKey: chainProbeCapabilityKey(realChain),\n\t\tstrategy: resolved.chainProbe,\n\t\tautoMounted: true,\n\t};\n\n\tconst faucetContribution =\n\t\tresolvedRuntime.fundingFaucetStrategy === null\n\t\t\t? []\n\t\t\t: [\n\t\t\t\t\t{\n\t\t\t\t\t\tkind: 'strategy-contributor',\n\t\t\t\t\t\tcapabilityKey: faucetCapabilityKey(realChain),\n\t\t\t\t\t\tstrategy: resolvedRuntime.fundingFaucetStrategy,\n\t\t\t\t\t\tautoMounted: true,\n\t\t\t\t\t} satisfies StrategyContributorDecl<\n\t\t\t\t\t\t`faucet:request:${string}`,\n\t\t\t\t\t\tReturnType<typeof suiLocalStrategy>\n\t\t\t\t\t>,\n\t\t\t\t];\n\n\tconst localRoutables =\n\t\topts.mode === 'local'\n\t\t\t? makeSuiLocalRoutables({\n\t\t\t\t\tcontainerName: `devstack-${acquireCtx.identity.app}-${acquireCtx.identity.stack}-sui-validator`,\n\t\t\t\t\tincludeGraphql: true,\n\t\t\t\t})\n\t\t\t: [];\n\tconst forkRoutables =\n\t\topts.mode === 'fork'\n\t\t\t? makeSuiForkRoutables({\n\t\t\t\t\tcontainerName: `devstack-${acquireCtx.identity.app}-${acquireCtx.identity.stack}-sui-fork`,\n\t\t\t\t})\n\t\t\t: [];\n\n\treturn [\n\t\tsnap,\n\t\tcodegen,\n\t\tchainProbeContribution,\n\t\t...faucetContribution,\n\t\t...localRoutables,\n\t\t...forkRoutables,\n\t] as const;\n};\n\n// ---------------------------------------------------------------------------\n// User-facing factories\n// ---------------------------------------------------------------------------\n\n/** Local Sui shorthand. Network/env selection belongs to the CLI or\n *  `defineDevstackWith(...)`; plain `sui()` always means an in-stack\n *  local validator. */\nexport const sui = (opts: SuiOptions = { mode: 'local' }) => buildPlugin(opts);\n\n/** Mode-narrowed factory namespace.\n *\n *  Usage:\n *      const network = { mode: 'local', chain: 'sui:localnet' } as const;\n *      suiFor(network).local({...})    // OK\n *      suiFor(network).fork({...})     // type error: 'fork' not in 'local' branch\n *\n *  The namespace MIRRORS the four mode option records: `local`,\n *  `localRpc` (mapped onto the substrate `'local'` branch),\n *  `live`, `fork`. */\nexport const suiFor = defineModeNamespace({\n\tlocal: {\n\t\tlocal: (opts: Omit<SuiLocalOptions, 'mode'> = {}) => buildPlugin({ mode: 'local', ...opts }),\n\t\tlocalRpc: (opts: Omit<SuiLocalRpcOptions, 'mode'>) =>\n\t\t\tbuildPlugin({ mode: 'local-rpc', ...opts }),\n\t},\n\tlive: {\n\t\ttestnet: (opts: Omit<SuiLiveOptions, 'mode' | 'network'> = {}) =>\n\t\t\tbuildPlugin({ mode: 'live', network: 'testnet', ...opts }),\n\t\tmainnet: (opts: Omit<SuiLiveOptions, 'mode' | 'network'> = {}) =>\n\t\t\tbuildPlugin({ mode: 'live', network: 'mainnet', ...opts }),\n\t\tdevnet: (opts: Omit<SuiLiveOptions, 'mode' | 'network'> = {}) =>\n\t\t\tbuildPlugin({ mode: 'live', network: 'devnet', ...opts }),\n\t\tcustom: (opts: Omit<SuiLiveOptions, 'mode' | 'network'>) =>\n\t\t\tbuildPlugin({ mode: 'live', network: 'custom', ...opts }),\n\t},\n\tfork: {\n\t\tmainnet: (opts: Omit<SuiForkOptions, 'mode' | 'upstream'> = {}) =>\n\t\t\tbuildPlugin({ mode: 'fork', upstream: 'mainnet', ...opts }),\n\t\ttestnet: (opts: Omit<SuiForkOptions, 'mode' | 'upstream'> = {}) =>\n\t\t\tbuildPlugin({ mode: 'fork', upstream: 'testnet', ...opts }),\n\t\tdevnet: (opts: Omit<SuiForkOptions, 'mode' | 'upstream'> = {}) =>\n\t\t\tbuildPlugin({ mode: 'fork', upstream: 'devnet', ...opts }),\n\t},\n});\n\n// ---------------------------------------------------------------------------\n// Re-exports for advanced callers (Account/Coin/Wallet/etc.) and for\n// the sibling plugins (Walrus/Seal/Deepbook fork variants).\n// ---------------------------------------------------------------------------\n\nexport type { SuiClient, ForkAdminSurface, WaitForTransactionsReady } from './mode/shared.ts';\nexport type { ResolvedSuiNetwork } from './network-resolver.ts';\nexport type {\n\tSuiOptions,\n\tSuiLocalOptions,\n\tSuiLocalRpcOptions,\n\tSuiLiveOptions,\n\tSuiForkOptions,\n\tSuiPluginMode,\n} from './mode/spec.ts';\nexport type { SuiNetworkBindings } from './codegen.ts';\nexport type {\n\tSuiError,\n\tSuiPluginError,\n\tSuiCliError,\n\tSuiConfigError,\n\tForkUnsupportedError,\n} from './errors.ts';\nexport { SUI_ERROR_TAGS } from './errors.ts';\n\n// Cross-plugin seams (consumed by Walrus/Seal/Deepbook fork variants\n// and by Account/Coin/Wallet/Package).\nexport {\n\tchainProbeCapabilityKey,\n\ttype ChainProbe,\n\ttype ChainProbeError,\n\ttype ChainProbeMode,\n} from '../../contracts/chain-probe.ts';\nexport {\n\tFORK_UNSUPPORTED_SURFACES,\n\twrapWithForkGuard,\n\ttype ForkLockHolder,\n} from './fork-orchestration.ts';\nexport type { SuiProbeKey, SuiSdkShim } from './chain-probe.ts';\nexport { SuiSpans } from './spans.ts';\n\n/** The shape `Transaction.build({ client })` and every `sdk.core.*` call\n *  accepts. Re-exported from `@mysten/sui/client` so callers cast\n *  `sui.sdk.client as ClientWithCoreApi` without each having to know the\n *  SDK subpath. */\nexport type { ClientWithCoreApi } from '@mysten/sui/client';\n// Cross-plugin seams: fork impersonation + chain-build container.\n// Consumed by `action` (Move-call execution against fork) and\n// `package` (publish-to-fork + Move-build orchestration). Wave 2\n// switches consumer plugins from internal-module imports to these\n// barrel entries.\nexport {\n\tbuildForkImpersonationTransactionBytes,\n\tprepareForkImpersonationTransaction,\n\tverifyForkImpersonationSender,\n\tselectSufficientForkCoin,\n\tFORK_IMPERSONATION_GAS_BUDGET,\n\tFORK_IMPERSONATION_GAS_PRICE,\n\ttype ForkGasCoin,\n\ttype ForkImpersonationGasClient,\n} from './fork-transaction.ts';\nexport {\n\tsuiForkFaucetStrategy,\n\ttype SuiForkFaucetStrategyOptions,\n\ttype SuiForkFaucetSerialization,\n} from './fork-faucet-strategy.ts';\nexport {\n\tacquireChainBuildContainer,\n\tcontainerNameForApp,\n\tmoveBuildLockPathFor,\n\tMOVE_BUILD_LOCK_TIMEOUT_MS,\n\ttype ChainBuildContainer,\n\ttype ChainBuildContainerSpec,\n} from './chain-build-container.ts';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsFA,MAAa,cAAc,SAA6B,MAAM;AAC9D,MAAM,wBAAwB,yBAAyB,eAAe;;;;AAStE,MAAM,gCACL,MACA,QACA,WAC0D;AAC1D,KAAI,KAAK,SAAS,OACjB,QAAO,0BAA0B,MAAM,QAAQ,OAAO;AAEvD,KAAI,OAAO,qBAAqB,KAC/B,QAAO,OAAO,QAAQ,KAAK;AAE5B,QAAO,OAAO,QACb,iBAAiB;EAChB,WAAW,OAAO;EAClB,eAAe;GACd;GACA,KAAK,cAAc,OAAO;GAC1B,OAAO,cAAc,OAAO;GAC5B;EACD,CAAC,CACF;;;;;;;;AASF,MAAM,6BACL,MACA,QACA,WAEA,OAAO,IAAI,aAAa;CACvB,MAAM,WAAW,iBAAiB,KAAK;CACvC,MAAM,OAAO,OAAO;AACpB,KAAI,aAAa,QAAQ,SAAS,KACjC,QAAO;CAER,MAAM,WAAW,sBAAsB;EACtC,OAAO,SAAS;EAChB;EACA,KAAK,OAAO;EACZ,mBAAmB,SAAS;EAC5B,eAAe;GACd;GACA,KAAK,mBAAmB,OAAO;GAC/B,OAAO,mBAAmB,OAAO;GACjC;EACD,CAAC;AACF,QAAO,OAAO,yBACb,OAAO,IAAI,MACX,SAAS,OACT,gCACA,CAAC,KACD,OAAO,GAAG,SAAS,EACnB,OAAO,SAAS,mBAAmB,UAClC,SAAS,WACN,OAAO,KAAK,MAAM,GAClB,OAAO,WACP,uCAAuC,SAAS,MAAM,gBACjD,MAAM,QAAQ,6DACnB,CAAC,KAAK,OAAO,GAAG,KAAK,CAAC,CACzB,CACD;EACA;AAEH,MAAM,eAAe,SAAqB;AACzC,QAAO,aAAa;EACnB,IAAI,YAAY;EAChB,MAAM;EACN,SAAS;EACT,aACC,OAAO,IAAI,aAAa;GAIvB,MAAM,UAAU,OAAO;GACvB,MAAM,WAAW,OAAO;GACxB,MAAM,QAAQ,OAAO;GACrB,MAAM,aAAa,OAAO;GAC1B,MAAM,2BAA2B,OAAO;GACxC,MAAM,EAAE,WAAW,OAAO,eAAe,SAAS,UAAU,YAAY,OAAO,KAAK;GAEpF,MAAM,wBAAwB,OAAO,6BACpC,MACA,QACA,yBACA;AACD,UAAO;IACN,GAAG;IACH,MAAM,KAAK;IACX;IACA;IACA;EACH,eAAe,EAAE,OAAO,cAAc,uBAAuB,MAAM,OAAO,QAAQ;EAClF,oBAAoB;EACpB,CAAC;;;;;;;;;AAUH,MAAM,0BACL,MACA,UACA,eACI;CACJ,MAAM,YAAY,SAAS;CAC3B,MAAM,kBAAkB;CACxB,MAAM,OAAyB,iBAC9B,KAAK,MACL,WAAW,SAAS,KACpB,WAAW,SAAS,OACpB,UACA;CACD,MAAM,UAA0C,gBAAgB;EAC/D,MAAM,KAAK;EACX,OAAO;EACP,KAAK,SAAS;EACd,QAAQ;EACR,GAAI,SAAS,cAAc,OAAO,EAAE,QAAQ,SAAS,WAAW,GAAG,EAAE;EACrE,GAAI,SAAS,eAAe,OAAO,EAAE,SAAS,SAAS,YAAY,GAAG,EAAE;EACxE,CAAC;CAEF,MAAM,yBAGF;EACH,MAAM;EACN,eAAe,wBAAwB,UAAU;EACjD,UAAU,SAAS;EACnB,aAAa;EACb;CAED,MAAM,qBACL,gBAAgB,0BAA0B,OACvC,EAAE,GACF,CACA;EACC,MAAM;EACN,eAAe,oBAAoB,UAAU;EAC7C,UAAU,gBAAgB;EAC1B,aAAa;EACb,CAID;CAEJ,MAAM,iBACL,KAAK,SAAS,UACX,sBAAsB;EACtB,eAAe,YAAY,WAAW,SAAS,IAAI,GAAG,WAAW,SAAS,MAAM;EAChF,gBAAgB;EAChB,CAAC,GACD,EAAE;CACN,MAAM,gBACL,KAAK,SAAS,SACX,qBAAqB,EACrB,eAAe,YAAY,WAAW,SAAS,IAAI,GAAG,WAAW,SAAS,MAAM,YAChF,CAAC,GACD,EAAE;AAEN,QAAO;EACN;EACA;EACA;EACA,GAAG;EACH,GAAG;EACH,GAAG;EACH;;;;;AAUF,MAAa,OAAO,OAAmB,EAAE,MAAM,SAAS,KAAK,YAAY,KAAK;;;;;;;;;;;AAY9E,MAAa,SAAS,oBAAoB;CACzC,OAAO;EACN,QAAQ,OAAsC,EAAE,KAAK,YAAY;GAAE,MAAM;GAAS,GAAG;GAAM,CAAC;EAC5F,WAAW,SACV,YAAY;GAAE,MAAM;GAAa,GAAG;GAAM,CAAC;EAC5C;CACD,MAAM;EACL,UAAU,OAAiD,EAAE,KAC5D,YAAY;GAAE,MAAM;GAAQ,SAAS;GAAW,GAAG;GAAM,CAAC;EAC3D,UAAU,OAAiD,EAAE,KAC5D,YAAY;GAAE,MAAM;GAAQ,SAAS;GAAW,GAAG;GAAM,CAAC;EAC3D,SAAS,OAAiD,EAAE,KAC3D,YAAY;GAAE,MAAM;GAAQ,SAAS;GAAU,GAAG;GAAM,CAAC;EAC1D,SAAS,SACR,YAAY;GAAE,MAAM;GAAQ,SAAS;GAAU,GAAG;GAAM,CAAC;EAC1D;CACD,MAAM;EACL,UAAU,OAAkD,EAAE,KAC7D,YAAY;GAAE,MAAM;GAAQ,UAAU;GAAW,GAAG;GAAM,CAAC;EAC5D,UAAU,OAAkD,EAAE,KAC7D,YAAY;GAAE,MAAM;GAAQ,UAAU;GAAW,GAAG;GAAM,CAAC;EAC5D,SAAS,OAAkD,EAAE,KAC5D,YAAY;GAAE,MAAM;GAAQ,UAAU;GAAU,GAAG;GAAM,CAAC;EAC3D;CACD,CAAC"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../src/plugins/sui/index.ts"],"sourcesContent":["// Sui plugin — barrel + factories.\n//\n// Architecture: Sui is the most-depended-on plugin in the stack.\n// Every consumer (Account/Coin/Wallet/Faucet/Package; Walrus/Seal/\n// Deepbook fork variants) reads its resolved `SuiClient` via the\n// `suiResource`. The factory at this file folds the four modes behind:\n//\n//   - `sui(opts?)`         — local shorthand. Defaults to an in-stack\n//                              local validator; pass a typed `opts`\n//                              record to select a different mode.\n//   - `suiFor(network)`    — mode-narrowed factory namespace (per\n//                              architecture Tension 11). Returns\n//                              `{ local: …, live: …, fork: … }`\n//                              narrowed to the network's mode.\n//\n// During `start`, the plugin emits (via the typed `ctx.*` verbs):\n//\n//   1. `ctx.provides` — `chain-probe:<chainId>` strategy contributor,\n//      the schema-validated read surface (`makeSuiChainProbe`).\n//   2. `ctx.snapshotExtra` — mode-aware container + bind-mount capture.\n//   3. `ctx.codegen` — `sui-network` bindings (chain id, rpc, etc.).\n//   4. `ctx.provides` — faucet strategy contributor, local-coin\n//      dispensing for the mode's chain id.\n//\n// `ctx.endpoint` contributions are MODE-DEPENDENT (local + fork yes;\n// local-rpc + live no — the caller fronts their own RPC). They land\n// in the per-mode builder under `mode/*.ts`; this barrel emits them\n// alongside the rest during `start`.\n\nimport { Effect, type Scope } from 'effect';\n\nimport { defineModeNamespace } from '../../api/mode-narrowed-factory.ts';\nimport { definePlugin, resource, staticInputIdentity } from '../../api/define-plugin.ts';\nimport {\n\tbootPostgresSidecar,\n\tcredentialedUrl,\n\twithDatabase,\n} from '../internal/postgres-sidecar/index.ts';\nimport type { ChainProbe } from '../../contracts/chain-probe.ts';\nimport type { StrategyContributorDecl } from '../../contracts/strategy-contributor.ts';\nimport { emitContributions, PluginContext } from '../../substrate/plugin-ctx.ts';\n\nimport { chainProbeCapabilityKey } from '../../contracts/chain-probe.ts';\nimport { ContainerRuntimeService } from '../../runtime/docker/service.ts';\nimport type {\n\tContainerRuntime,\n\tContainerRuntimeError,\n\tImageRef,\n} from '../../contracts/container-runtime.ts';\nimport type { Identity } from '../../substrate/identity.ts';\nimport { IdentityContext, StackPathsService } from '../../substrate/runtime/paths.ts';\nimport { sanitizeAlias } from '../../substrate/runtime/managed-container.ts';\nimport {\n\tLeaseBrokerService,\n\ttype LeaseBroker,\n} from '../../substrate/runtime/lease-broker/index.ts';\nimport { PortBrokerService } from '../../substrate/runtime/port-broker/index.ts';\nimport { makeCodegenable, makeStaticCodegen } from './codegen.ts';\nimport type { SuiProbeKey } from './chain-probe.ts';\nimport { makeSnapshotable } from './snapshot.ts';\nimport { bootSuiService } from './service.ts';\nimport { suiPluginError, type SuiPluginError } from './errors.ts';\nimport { makeSuiForkRoutables, makeSuiLocalRoutables } from './routable.ts';\nimport { faucetCapabilityKey, type FaucetStrategy } from '../faucet/index.ts';\nimport { resolveNetworkOptions } from '../../orchestrators/network-options.ts';\nimport { suiLocalStrategy } from './local-faucet-strategy.ts';\nimport { suiForkFaucetStrategy } from './fork-faucet-strategy.ts';\nimport { selectSufficientForkCoin } from './fork-transaction.ts';\nimport { FORK_FAUCET_WHALE_MIN_COIN_MIST, resolveForkWhale } from './mode/fork.ts';\nimport { resolveImage, SUI_INDEXER_DB_ROLE, type LocalIndexer } from './mode/local.ts';\nimport type { SuiClient } from './mode/shared.ts';\nimport type {\n\tSuiForkOptions,\n\tSuiLiveOptions,\n\tSuiLocalRpcOptions,\n\tSuiLocalOptions,\n\tSuiOptions,\n} from './mode/spec.ts';\n\n// ---------------------------------------------------------------------------\n// Resource identity\n// ---------------------------------------------------------------------------\n\ntype SuiResolved = SuiClient & {\n\treadonly mode: SuiOptions['mode'];\n};\n\n/** Internal extension of `SuiResolved` carrying the pre-built funding\n *  faucet strategy. `start` owns the `LeaseBrokerService` instance for\n *  serialization; building the strategy at start-time (where the broker\n *  is reachable) lets the capabilities factory consume a flat value\n *  without threading the broker through a side channel. Local/live wrap\n *  the HTTP faucet; fork impersonates a whale; `null` on networks with\n *  no faucet (live-mainnet, external-rpc-without-faucet, faucet-disabled\n *  fork). */\ntype SuiResolvedRuntime = SuiResolved & {\n\treadonly fundingFaucetStrategy: FaucetStrategy | null;\n};\n\n/** The Sui plugin's resource identity. The id is `'sui'` (singular). */\nexport const suiResource = resource<'sui', SuiResolved>('sui');\n\n// ---------------------------------------------------------------------------\n// Plugin construction (internal — used by sui() + suiFor())\n// ---------------------------------------------------------------------------\n\n/** Build the funds-ready faucet strategy for the resolved network, or\n *  `null` when the network has none. Local/live wrap the HTTP faucet;\n *  fork mode impersonates a whale (resolved + validated here). */\nconst resolveFundingFaucetStrategy = (\n\topts: SuiOptions,\n\tclient: SuiClient,\n\tbroker: LeaseBroker,\n): Effect.Effect<FaucetStrategy | null, SuiPluginError> => {\n\tif (opts.mode === 'fork') {\n\t\treturn resolveForkFaucetStrategy(opts, client, broker);\n\t}\n\tif (client.fundingFaucetUrl === null) {\n\t\treturn Effect.succeed(null);\n\t}\n\treturn Effect.succeed(\n\t\tsuiLocalStrategy({\n\t\t\tfaucetUrl: client.fundingFaucetUrl,\n\t\t\tserialization: {\n\t\t\t\tbroker,\n\t\t\t\tkey: `sui-faucet:${client.chainId}`,\n\t\t\t\towner: `sui-faucet:${client.chainId}`,\n\t\t\t},\n\t\t}),\n\t);\n};\n\n/** Fork-mode faucet: resolve the whale, validate it holds a large enough\n *  SUI coin, then build the impersonation strategy. A whale the user set\n *  explicitly that fails validation hard-fails the boot; a per-upstream\n *  default whale only warns and disables the faucet so the fork still\n *  comes up (account funding then surfaces the \"no faucet strategy\"\n *  error only if something actually needs SUI). */\nconst resolveForkFaucetStrategy = (\n\topts: SuiForkOptions,\n\tclient: SuiClient,\n\tbroker: LeaseBroker,\n): Effect.Effect<FaucetStrategy | null, SuiPluginError> =>\n\tEffect.gen(function* () {\n\t\tconst resolved = resolveForkWhale(opts);\n\t\tconst fork = client.fork;\n\t\tif (resolved === null || fork === null) {\n\t\t\treturn null;\n\t\t}\n\t\tconst strategy = suiForkFaucetStrategy({\n\t\t\twhale: resolved.whale,\n\t\t\tfork,\n\t\t\tsdk: client.sdk,\n\t\t\tperRequestCapMist: resolved.perRequestCapMist,\n\t\t\tserialization: {\n\t\t\t\tbroker,\n\t\t\t\tkey: `sui-fork-faucet:${client.chainId}`,\n\t\t\t\towner: `sui-fork-faucet:${client.chainId}`,\n\t\t\t},\n\t\t});\n\t\treturn yield* selectSufficientForkCoin(\n\t\t\tclient.sdk.core,\n\t\t\tresolved.whale,\n\t\t\tFORK_FAUCET_WHALE_MIN_COIN_MIST,\n\t\t).pipe(\n\t\t\tEffect.as(strategy),\n\t\t\tEffect.catchTag('SuiPluginError', (cause) =>\n\t\t\t\tresolved.explicit\n\t\t\t\t\t? Effect.fail(cause)\n\t\t\t\t\t: Effect.logWarning(\n\t\t\t\t\t\t\t`sui fork mode: default faucet whale ${resolved.whale} is unusable ` +\n\t\t\t\t\t\t\t\t`(${cause.message}); disabling the fork faucet. Set faucet.whale to override.`,\n\t\t\t\t\t\t).pipe(Effect.as(null)),\n\t\t\t),\n\t\t);\n\t});\n\n/** Default name for sui's GraphQL-indexer database. */\nconst DEFAULT_INDEXER_DATABASE = 'sui_indexer';\n\n/** In-network DNS alias siblings dial the indexer-db sidecar by. */\nconst SUI_INDEXER_DB_ALIAS = 'sui-indexer-db';\n\nconst suiInputIdentity = (opts: SuiOptions): unknown => {\n\tconst { readyTimeout: _readyTimeout, ...authored } = opts;\n\tif (authored.mode !== 'local') return { plugin: 'sui', ...authored };\n\treturn {\n\t\tplugin: 'sui',\n\t\t...authored,\n\t\tindexer: authored.indexer !== false,\n\t\tindexerDb:\n\t\t\tauthored.indexerDb === undefined\n\t\t\t\t? undefined\n\t\t\t\t: {\n\t\t\t\t\t\t...authored.indexerDb,\n\t\t\t\t\t\tdatabase: authored.indexerDb.database ?? DEFAULT_INDEXER_DATABASE,\n\t\t\t\t\t},\n\t};\n};\n\n/** Compose the indexer-db sidecar's stable `configHash` from validator\n *  inputs known before local mode starts. A validator image change recreates\n *  the validator, so the sidecar's mount-less PGDATA must reset with it.\n *\n *  Validator data-layer resets that are not config values (absent validator\n *  or last exit `137`) are handled by `validatorNeedsIndexerReset`, which\n *  removes the sidecar before this hash is applied. */\nexport const composeIndexerConfigHash = (imageRef: string): string =>\n\t['indexer-db', `validator-img=${imageRef}`].join('|');\n\n/** Append a database segment to a BYO DSN only when it has no path (so a\n *  caller-supplied `.../mydb` is respected). Rebuilds via the URL object\n *  so the db slots into `pathname` BEFORE `?search` — a naive string\n *  append on a `host:5432?sslmode=require` DSN (path-less but with a\n *  query) would wrongly yield `...?sslmode=require/sui_indexer`. The\n *  catch fallback (non-URL-parseable DSN) splits the query off first. */\nconst appendDatabaseIfMissing = (url: string, database: string): string => {\n\ttry {\n\t\tconst parsed = new URL(url);\n\t\tconst hasPath = parsed.pathname !== '' && parsed.pathname !== '/';\n\t\tif (hasPath) return url;\n\t\tparsed.pathname = `/${database}`;\n\t\treturn parsed.toString();\n\t} catch {\n\t\tconst queryAt = url.indexOf('?');\n\t\tconst base = queryAt === -1 ? url : url.slice(0, queryAt);\n\t\tconst query = queryAt === -1 ? '' : url.slice(queryAt);\n\t\tconst afterScheme = base.replace(/^postgres(ql)?:\\/\\//, '');\n\t\tif (/\\/[^/]+$/.test(afterScheme)) return url;\n\t\treturn `${base.replace(/\\/$/, '')}/${encodeURIComponent(database)}${query}`;\n\t}\n};\n\n/** Whether the Sui-owned indexer DB must be deleted before boot.\n *\n *  The validator's chain identity lives in its writable layer. If the\n *  validator container is absent, the next boot creates a new layer and a\n *  new chain. If it last exited `137`, the runtime's `on-failure` policy\n *  also recreates it. Both cases make any existing indexer DB stale. */\nexport const validatorNeedsIndexerReset = (\n\truntime: ContainerRuntime,\n\tidentity: Identity,\n): Effect.Effect<boolean, ContainerRuntimeError> =>\n\truntime\n\t\t.inspectByLabels({\n\t\t\tapp: identity.app,\n\t\t\tstack: identity.stack,\n\t\t\tplugin: 'sui',\n\t\t\trole: 'validator',\n\t\t})\n\t\t.pipe(\n\t\t\tEffect.map((handles) => {\n\t\t\t\tconst validator = handles[0];\n\t\t\t\treturn validator === undefined || validator.lastExitCode === 137;\n\t\t\t}),\n\t\t);\n\n/** Provision the GraphQL-indexer DB wiring for local mode.\n *\n *  Default: sui OWNS a postgres sidecar (labelled under sui) — boot it on\n *  a per-stack network and compose the DSN from its in-network alias (NOT\n *  the per-stack container DNS host, which isn't parallel-stack-portable).\n *  The sidecar resets on the same validator inputs that can make its rows\n *  stale: absent/exited-`137` validator state removes the sidecar before\n *  boot, and validator image identity is folded into its `configHash`.\n *\n *  `validatorImage` is the SAME `ImageRef` the barrel hands `bootLocalMode`\n *  for the validator container, so the image the sidecar hashed and the image\n *  the validator runs cannot drift.\n *\n *  BYO: when `indexerDb` is set, no sidecar — pass the caller's DSN +\n *  network straight through (appending the default db iff the DSN has no\n *  path). The caller owns that DB's lifecycle. */\nexport const provisionLocalIndexer = (\n\truntime: ContainerRuntime,\n\tidentity: Identity,\n\topts: SuiLocalOptions,\n\tvalidatorImage: ImageRef,\n): Effect.Effect<LocalIndexer, SuiPluginError, Scope.Scope> => {\n\tconst database = opts.indexerDb?.database ?? DEFAULT_INDEXER_DATABASE;\n\tif (opts.indexerDb !== undefined) {\n\t\treturn Effect.succeed({\n\t\t\turl: appendDatabaseIfMissing(opts.indexerDb.url, database),\n\t\t\tnetwork: opts.indexerDb.network,\n\t\t});\n\t}\n\tconst network = sanitizeAlias(`devstack-${identity.app}-${identity.stack}-sui-indexer`);\n\treturn Effect.gen(function* () {\n\t\tconst resetExistingSidecar = yield* validatorNeedsIndexerReset(runtime, identity);\n\t\tif (resetExistingSidecar) {\n\t\t\tyield* runtime.removeManagedContainers({\n\t\t\t\tapp: identity.app,\n\t\t\t\tstack: identity.stack,\n\t\t\t\tplugin: 'sui',\n\t\t\t\trole: SUI_INDEXER_DB_ROLE,\n\t\t\t});\n\t\t}\n\t\tconst imageRef = validatorImage.tag ?? validatorImage.digest;\n\t\tconst { handle } = yield* bootPostgresSidecar(runtime, identity, {\n\t\t\tnetwork,\n\t\t\talias: SUI_INDEXER_DB_ALIAS,\n\t\t\trole: SUI_INDEXER_DB_ROLE,\n\t\t\tdatabase,\n\t\t\tconfigHash: composeIndexerConfigHash(imageRef),\n\t\t});\n\t\treturn {\n\t\t\turl: withDatabase(\n\t\t\t\tcredentialedUrl({\n\t\t\t\t\tuser: handle.user,\n\t\t\t\t\tpassword: handle.password,\n\t\t\t\t\thost: handle.networkAlias,\n\t\t\t\t\tport: handle.port,\n\t\t\t\t}),\n\t\t\t\tdatabase,\n\t\t\t),\n\t\t\tnetwork: handle.containerNetwork,\n\t\t} satisfies LocalIndexer;\n\t}).pipe(\n\t\t// Postgres / runtime-domain failures wrap into the sui error channel\n\t\t// — the sidecar is a sui implementation detail. Nothing in the gen\n\t\t// body produces a `SuiPluginError` directly, so we wrap every cause.\n\t\tEffect.mapError((cause) =>\n\t\t\tsuiPluginError(\n\t\t\t\t'container-start',\n\t\t\t\t`sui local mode: failed to provision the GraphQL indexer postgres sidecar (${cause._tag})`,\n\t\t\t\tcause,\n\t\t\t),\n\t\t),\n\t);\n};\n\n/** Shared boot + inline contribution emission, parameterised by the\n *  resolved external-indexer wiring (`undefined` = no GraphQL, the\n *  zero-config / non-local case) and, for local mode, the validator image\n *  the barrel pre-resolved (so the sidecar's `configHash` and the validator\n *  container share one `ImageRef`; `undefined` on the no-sidecar paths,\n *  where `bootLocalMode` resolves it inline). */\nconst bootAndEmit = (\n\topts: SuiOptions,\n\tindexer: LocalIndexer | undefined,\n\tprebuiltImage?: ImageRef,\n) =>\n\tEffect.gen(function* () {\n\t\tconst ctx = yield* PluginContext;\n\t\t// The substrate threads `ContainerRuntime` + `IdentityContext`\n\t\t// via the plugin runtime context; the supervisor provides\n\t\t// these before this body runs.\n\t\tconst runtime = yield* ContainerRuntimeService;\n\t\tconst identity = yield* IdentityContext;\n\t\tconst paths = yield* StackPathsService;\n\t\tconst portBroker = yield* PortBrokerService;\n\t\tconst fundingFaucetLeaseBroker = yield* LeaseBrokerService;\n\t\tconst { client } = yield* bootSuiService(\n\t\t\truntime,\n\t\t\tidentity,\n\t\t\tportBroker,\n\t\t\tpaths,\n\t\t\topts,\n\t\t\tindexer,\n\t\t\tprebuiltImage,\n\t\t);\n\n\t\tconst fundingFaucetStrategy = yield* resolveFundingFaucetStrategy(\n\t\t\topts,\n\t\t\tclient,\n\t\t\tfundingFaucetLeaseBroker,\n\t\t);\n\t\tconst value = {\n\t\t\t...client,\n\t\t\tmode: opts.mode,\n\t\t\tfundingFaucetStrategy,\n\t\t} satisfies SuiResolvedRuntime;\n\t\t// Emit the resolved contributions inline, top-to-bottom: the\n\t\t// decls stamp REAL chain ids / rpc URLs / container names\n\t\t// (the genesis-digest chain id, not the network name).\n\t\t// (`value` is the just-resolved runtime; `identity` from\n\t\t// `IdentityContext`, NOT re-fetched). The shared\n\t\t// `emitContributions` routes each by `kind`. Faucet (conditional\n\t\t// on a resolved strategy) and routables (mode-dependent) are the\n\t\t// only optional members; order is load-bearing.\n\t\tconst realChainId = value.chainId;\n\t\t// Per-network faucet gate (per-network options: ON for every network\n\t\t// EXCEPT live `mainnet`, where the funding faucet must NEVER run).\n\t\t// `identity.network` is the resolved network name. The gate honours\n\t\t// ONLY the POLICY DEFAULT, NOT any author per-network override: the\n\t\t// override RECORD (`networkOptions`) is an orchestrator-level concern\n\t\t// that the name-blind substrate does not forward into plugins, and\n\t\t// this plugin only receives `IdentityContext`. So a per-network\n\t\t// `{ <network>: { faucet: false } }` override is deliberately NOT\n\t\t// applied here (unlike `devWallet`/`autoApproveSigning`, which the\n\t\t// orchestrator resolves against the forwarded `networkOptions`); see\n\t\t// `orchestrators/network-options.ts`. The policy default already\n\t\t// carries the load-bearing mainnet hard-clamp, so a resolved strategy\n\t\t// on `mainnet` (none of the live modes build one today, but a future\n\t\t// faucet-bearing mainnet config could) is suppressed and the strategy\n\t\t// registry never exposes `faucet:request:<mainnet-chain-id>`; account\n\t\t// funding then surfaces the actionable \"no faucet strategy\" error\n\t\t// rather than silently faucet-funding against a production network.\n\t\tconst faucetEnabled = resolveNetworkOptions(identity.network).faucet;\n\t\tconst faucetContribution: ReadonlyArray<StrategyContributorDecl> =\n\t\t\t!faucetEnabled || value.fundingFaucetStrategy === null\n\t\t\t\t? []\n\t\t\t\t: [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tkind: 'strategy-contributor',\n\t\t\t\t\t\t\tcapabilityKey: faucetCapabilityKey(realChainId),\n\t\t\t\t\t\t\tstrategy: value.fundingFaucetStrategy,\n\t\t\t\t\t\t\tautoMounted: true,\n\t\t\t\t\t\t} satisfies StrategyContributorDecl<\n\t\t\t\t\t\t\t`faucet:request:${string}`,\n\t\t\t\t\t\t\tReturnType<typeof suiLocalStrategy>\n\t\t\t\t\t\t>,\n\t\t\t\t\t];\n\t\tconst localRoutables =\n\t\t\topts.mode === 'local'\n\t\t\t\t? makeSuiLocalRoutables({\n\t\t\t\t\t\tcontainerName: `devstack-${identity.app}-${identity.stack}-sui-validator`,\n\t\t\t\t\t\t// GraphQL routes only when the external indexer is wired.\n\t\t\t\t\t\tincludeGraphql: indexer !== undefined,\n\t\t\t\t\t})\n\t\t\t\t: [];\n\t\tconst forkRoutables =\n\t\t\topts.mode === 'fork'\n\t\t\t\t? makeSuiForkRoutables({\n\t\t\t\t\t\tcontainerName: `devstack-${identity.app}-${identity.stack}-sui-fork`,\n\t\t\t\t\t})\n\t\t\t\t: [];\n\t\temitContributions(ctx, [\n\t\t\t// `hasIndexer` (local only) folds the sui-owned indexer-db\n\t\t\t// sidecar into the captured containers; `indexer !== undefined`\n\t\t\t// is the same gate `bootAndEmit`'s caller resolved GraphQL on.\n\t\t\tmakeSnapshotable(opts.mode, identity.app, identity.stack, realChainId, indexer !== undefined),\n\t\t\tmakeCodegenable({\n\t\t\t\tmode: opts.mode,\n\t\t\t\tchainId: realChainId,\n\t\t\t\trpc: value.rpcUrl,\n\t\t\t\tsource: 'default',\n\t\t\t\t...(value.faucetUrl !== null ? { faucet: value.faucetUrl } : {}),\n\t\t\t\t...(value.graphqlUrl !== null ? { graphql: value.graphqlUrl } : {}),\n\t\t\t}),\n\t\t\t{\n\t\t\t\tkind: 'strategy-contributor',\n\t\t\t\tcapabilityKey: chainProbeCapabilityKey(realChainId),\n\t\t\t\tstrategy: value.chainProbe,\n\t\t\t\tautoMounted: true,\n\t\t\t} satisfies StrategyContributorDecl<`chain-probe:${string}`, ChainProbe<SuiProbeKey>>,\n\t\t\t...faucetContribution,\n\t\t\t...localRoutables,\n\t\t\t...forkRoutables,\n\t\t]);\n\t\treturn value;\n\t});\n\n/** The single sui plugin builder. No sibling `dependsOn`: in local mode\n *  with the indexer on (the default), `start` provisions the GraphQL\n *  indexer DB itself — a sui-owned postgres sidecar — inside the boot\n *  scope BEFORE the boot-time validator (so the validator can join its\n *  network), then boots + emits. Resolution order:\n *    - `indexerDb` present  → BYO DB (no sidecar)\n *    - `indexer === false`  → opt out (RPC + faucet only, GraphQL off)\n *    - else (local default) → sui-owned sidecar\n *  Non-local modes never touch the indexer (GraphQL off). */\nconst buildSuiPlugin = (opts: SuiOptions) =>\n\tdefinePlugin({\n\t\tid: suiResource.id,\n\t\trole: 'service',\n\t\tsection: 'service',\n\t\tinputIdentity: staticInputIdentity(suiInputIdentity(opts)),\n\t\t// Stack-free codegen: the `codegen` verb derives the committed\n\t\t// `config.ts`'s `network`/`networks` from this hook. Both are\n\t\t// environment/live data (dynamic local rpc port; a real deployment\n\t\t// names a different network), so the committed tree carries\n\t\t// `resolveNetwork()`/`resolveNetworks()` raw expressions that resolve\n\t\t// at app build/dev time via the injected `__DEVSTACK_IDS__` global —\n\t\t// never literal values. No id-resolver input needed.\n\t\tstaticCodegen: makeStaticCodegen(),\n\t\t// Zero-arg `start` (no `dependsOn`); the substrate supplies the\n\t\t// container runtime + identity via the plugin runtime context.\n\t\tstart: () =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\t// Resolution order: BYO `indexerDb` wins; then an explicit\n\t\t\t\t// `indexer: false` opt-out; then the sui-owned sidecar default.\n\t\t\t\t// Non-local modes never wire the indexer.\n\t\t\t\tif (opts.mode !== 'local' || (opts.indexerDb === undefined && opts.indexer === false)) {\n\t\t\t\t\treturn yield* bootAndEmit(opts, undefined);\n\t\t\t\t}\n\t\t\t\tconst runtime = yield* ContainerRuntimeService;\n\t\t\t\tconst identity = yield* IdentityContext;\n\t\t\t\t// Resolve the validator image ONCE, before the sidecar — single\n\t\t\t\t// source for both the sidecar's configHash (it folds the resolved\n\t\t\t\t// image ref so an image bump resets the indexer DB) and the\n\t\t\t\t// validator container `bootAndEmit` boots below. `resolveImage`\n\t\t\t\t// is deterministic (content-addressed build/pull) so this is the\n\t\t\t\t// SAME ref the validator runs; resolving it here, not twice,\n\t\t\t\t// avoids a redundant build AND any drift from `decideRunAction`.\n\t\t\t\tconst validatorImage = yield* resolveImage(runtime, identity, opts);\n\t\t\t\t// The sidecar boots first; if the validator boot below fails, the\n\t\t\t\t// sidecar's finalizer lingers on the plugin acquire scope until\n\t\t\t\t// teardown/retry. Benign and intentional — the stable name +\n\t\t\t\t// labels mean a retry ADOPTS the existing sidecar container\n\t\t\t\t// (no scope-threading machinery needed).\n\t\t\t\tconst indexer = yield* provisionLocalIndexer(runtime, identity, opts, validatorImage);\n\t\t\t\treturn yield* bootAndEmit(opts, indexer, validatorImage);\n\t\t\t}),\n\t});\n\nconst buildPlugin = <O extends SuiOptions>(opts: O) => buildSuiPlugin(opts);\n\n// ---------------------------------------------------------------------------\n// User-facing factories\n// ---------------------------------------------------------------------------\n\n/** Local Sui shorthand. Network/env selection belongs to the CLI or\n *  `defineDevstackWith(...)`; plain `sui()` always means an in-stack\n *  local validator (GraphQL/indexer/Postgres on by default via a\n *  sui-owned sidecar). */\nexport const sui = <const O extends SuiOptions = { mode: 'local' }>(\n\topts: O = { mode: 'local' } as O,\n) => buildPlugin(opts);\n\n/** Mode-narrowed factory namespace.\n *\n *  Usage:\n *      const network = { mode: 'local' } as const;\n *      suiFor(network).local({...})    // OK\n *      suiFor(network).fork({...})     // type error: 'fork' not in 'local' branch\n *\n *  The namespace MIRRORS the four mode option records: `local`,\n *  `localRpc` (mapped onto the substrate `'local'` branch),\n *  `live`, `fork`. */\nexport const suiFor = defineModeNamespace({\n\tlocal: {\n\t\tlocal: <const O extends Omit<SuiLocalOptions, 'mode'>>(opts: O = {} as O) =>\n\t\t\tbuildPlugin({ mode: 'local', ...opts }),\n\t\tlocalRpc: (opts: Omit<SuiLocalRpcOptions, 'mode'>) =>\n\t\t\tbuildPlugin({ mode: 'local-rpc', ...opts }),\n\t},\n\tlive: {\n\t\ttestnet: (opts: Omit<SuiLiveOptions, 'mode' | 'network'> = {}) =>\n\t\t\tbuildPlugin({ mode: 'live', network: 'testnet', ...opts }),\n\t\tmainnet: (opts: Omit<SuiLiveOptions, 'mode' | 'network'> = {}) =>\n\t\t\tbuildPlugin({ mode: 'live', network: 'mainnet', ...opts }),\n\t\tdevnet: (opts: Omit<SuiLiveOptions, 'mode' | 'network'> = {}) =>\n\t\t\tbuildPlugin({ mode: 'live', network: 'devnet', ...opts }),\n\t\tcustom: (opts: Omit<SuiLiveOptions, 'mode' | 'network'>) =>\n\t\t\tbuildPlugin({ mode: 'live', network: 'custom', ...opts }),\n\t},\n\tfork: {\n\t\tmainnet: (opts: Omit<SuiForkOptions, 'mode' | 'upstream'> = {}) =>\n\t\t\tbuildPlugin({ mode: 'fork', upstream: 'mainnet', ...opts }),\n\t\ttestnet: (opts: Omit<SuiForkOptions, 'mode' | 'upstream'> = {}) =>\n\t\t\tbuildPlugin({ mode: 'fork', upstream: 'testnet', ...opts }),\n\t\tdevnet: (opts: Omit<SuiForkOptions, 'mode' | 'upstream'> = {}) =>\n\t\t\tbuildPlugin({ mode: 'fork', upstream: 'devnet', ...opts }),\n\t},\n});\n\n// ---------------------------------------------------------------------------\n// Re-exports for advanced callers (Account/Coin/Wallet/etc.) and for\n// the sibling plugins (Walrus/Seal/Deepbook fork variants).\n// ---------------------------------------------------------------------------\n\nexport type { SuiClient, ForkAdminSurface, WaitForTransactionsReady } from './mode/shared.ts';\nexport type { ResolvedSuiNetwork } from './network-resolver.ts';\nexport type {\n\tNetworkConfig,\n\tNetworkMode,\n\tDevstackNetworkModeRegistry,\n\tDefaultNetwork,\n} from './network-config.ts';\nexport type {\n\tSuiOptions,\n\tSuiLocalOptions,\n\tSuiLocalRpcOptions,\n\tSuiLiveOptions,\n\tSuiForkOptions,\n\tSuiPluginMode,\n} from './mode/spec.ts';\nexport type { SuiNetworkConfigEntry } from './codegen.ts';\nexport type {\n\tSuiError,\n\tSuiPluginError,\n\tSuiCliError,\n\tSuiConfigError,\n\tForkUnsupportedError,\n} from './errors.ts';\n\n// Cross-plugin seams (consumed by Walrus/Seal/Deepbook fork variants\n// and by Account/Coin/Wallet/Package).\nexport {\n\tchainProbeCapabilityKey,\n\ttype ChainProbe,\n\ttype ChainProbeError,\n\ttype ChainProbeMode,\n} from '../../contracts/chain-probe.ts';\nexport {\n\tFORK_UNSUPPORTED_SURFACES,\n\twrapWithForkGuard,\n\ttype ForkLockHolder,\n} from './fork-orchestration.ts';\nexport type { SuiProbeKey, SuiSdkShim } from './chain-probe.ts';\nexport { SuiLogAttr } from './log-attrs.ts';\n\n/** The shape `Transaction.build({ client })` and every `sdk.core.*` call\n *  accepts. Re-exported from `@mysten/sui/client` so callers cast\n *  `sui.sdk.client as ClientWithCoreApi` without each having to know the\n *  SDK subpath. */\nexport type { ClientWithCoreApi } from '@mysten/sui/client';\n// Cross-plugin seams: fork impersonation + chain-build container.\n// Consumed by `action` (Move-call execution against fork) and\n// `package` (publish-to-fork + Move-build orchestration). Consumer\n// plugins import these barrel entries rather than internal modules.\nexport {\n\tbuildForkImpersonationTransactionBytes,\n\tprepareForkImpersonationTransaction,\n\tverifyForkImpersonationSender,\n\tselectSufficientForkCoin,\n\tFORK_IMPERSONATION_GAS_BUDGET,\n\tFORK_IMPERSONATION_GAS_PRICE,\n\ttype ForkGasCoin,\n\ttype ForkImpersonationGasClient,\n} from './fork-transaction.ts';\nexport {\n\tsuiForkFaucetStrategy,\n\ttype SuiForkFaucetStrategyOptions,\n\ttype SuiForkFaucetSerialization,\n} from './fork-faucet-strategy.ts';\nexport {\n\tacquireChainBuildContainer,\n\tcontainerNameForApp,\n\tmoveBuildLockPathFor,\n\tMOVE_BUILD_LOCK_TIMEOUT_MS,\n\ttype ChainBuildContainer,\n\ttype ChainBuildContainerSpec,\n} from './chain-build-container.ts';\n\n// Cross-plugin seams: hoisted exec / move / ledger helpers.\n// Consumed by Account/Action/Coin/Deepbook/Package/Seal/Walrus. These\n// barrel entries route those consumers through the sibling plugin's\n// barrel per the `plugin-boundary` invariant, rather than reaching into\n// the deep `sui/exec`, `sui/move`, and `sui/ledger` internal modules.\nexport {\n\textractExecuteDigest,\n\tformatExecutedFailure,\n\texecuteSuiTx,\n\tisSuiStaleObjectVersionError,\n\ttype ResolvedSigner,\n\ttype ExecutedFailure,\n\ttype ExecutedReceipt,\n\ttype TransactionSignerScope,\n} from './exec/index.ts';\nexport { signAndDispatch } from './exec/sign-and-dispatch.ts';\nexport {\n\thashMoveSources,\n\trunMoveBuild,\n\tscrubLocksHost,\n\twithMoveBuildLock,\n\ttype BuildOutput,\n\ttype MoveBuildContainer,\n\ttype MoveBuildError,\n} from './move/index.ts';\nexport { currentLedgerObjectRef } from './ledger/object-ref.ts';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoGA,MAAa,cAAc,SAA6B,KAAK;;;;AAS7D,MAAM,gCACL,MACA,QACA,WAC0D;CAC1D,IAAI,KAAK,SAAS,QACjB,OAAO,0BAA0B,MAAM,QAAQ,MAAM;CAEtD,IAAI,OAAO,qBAAqB,MAC/B,OAAO,OAAO,QAAQ,IAAI;CAE3B,OAAO,OAAO,QACb,iBAAiB;EAChB,WAAW,OAAO;EAClB,eAAe;GACd;GACA,KAAK,cAAc,OAAO;GAC1B,OAAO,cAAc,OAAO;EAC7B;CACD,CAAC,CACF;AACD;;;;;;;AAQA,MAAM,6BACL,MACA,QACA,WAEA,OAAO,IAAI,aAAa;CACvB,MAAM,WAAW,iBAAiB,IAAI;CACtC,MAAM,OAAO,OAAO;CACpB,IAAI,aAAa,QAAQ,SAAS,MACjC,OAAO;CAER,MAAM,WAAW,sBAAsB;EACtC,OAAO,SAAS;EAChB;EACA,KAAK,OAAO;EACZ,mBAAmB,SAAS;EAC5B,eAAe;GACd;GACA,KAAK,mBAAmB,OAAO;GAC/B,OAAO,mBAAmB,OAAO;EAClC;CACD,CAAC;CACD,OAAO,OAAO,yBACb,OAAO,IAAI,MACX,SAAS,OACT,+BACD,CAAC,CAAC,KACD,OAAO,GAAG,QAAQ,GAClB,OAAO,SAAS,mBAAmB,UAClC,SAAS,WACN,OAAO,KAAK,KAAK,IACjB,OAAO,WACP,uCAAuC,SAAS,MAAM,gBACjD,MAAM,QAAQ,4DACpB,CAAC,CAAC,KAAK,OAAO,GAAG,IAAI,CAAC,CACzB,CACD;AACD,CAAC;;AAGF,MAAM,2BAA2B;;AAGjC,MAAM,uBAAuB;AAE7B,MAAM,oBAAoB,SAA8B;CACvD,MAAM,EAAE,cAAc,eAAe,GAAG,aAAa;CACrD,IAAI,SAAS,SAAS,SAAS,OAAO;EAAE,QAAQ;EAAO,GAAG;CAAS;CACnE,OAAO;EACN,QAAQ;EACR,GAAG;EACH,SAAS,SAAS,YAAY;EAC9B,WACC,SAAS,cAAc,KAAA,IACpB,KAAA,IACA;GACA,GAAG,SAAS;GACZ,UAAU,SAAS,UAAU,YAAY;EAC1C;CACJ;AACD;;;;;;;;AASA,MAAa,4BAA4B,aACxC,CAAC,cAAc,iBAAiB,UAAU,CAAC,CAAC,KAAK,GAAG;;;;;;;AAQrD,MAAM,2BAA2B,KAAa,aAA6B;CAC1E,IAAI;EACH,MAAM,SAAS,IAAI,IAAI,GAAG;EAE1B,IADgB,OAAO,aAAa,MAAM,OAAO,aAAa,KACjD,OAAO;EACpB,OAAO,WAAW,IAAI;EACtB,OAAO,OAAO,SAAS;CACxB,QAAQ;EACP,MAAM,UAAU,IAAI,QAAQ,GAAG;EAC/B,MAAM,OAAO,YAAY,KAAK,MAAM,IAAI,MAAM,GAAG,OAAO;EACxD,MAAM,QAAQ,YAAY,KAAK,KAAK,IAAI,MAAM,OAAO;EACrD,MAAM,cAAc,KAAK,QAAQ,uBAAuB,EAAE;EAC1D,IAAI,WAAW,KAAK,WAAW,GAAG,OAAO;EACzC,OAAO,GAAG,KAAK,QAAQ,OAAO,EAAE,EAAE,GAAG,mBAAmB,QAAQ,IAAI;CACrE;AACD;;;;;;;AAQA,MAAa,8BACZ,SACA,aAEA,QACE,gBAAgB;CAChB,KAAK,SAAS;CACd,OAAO,SAAS;CAChB,QAAQ;CACR,MAAM;AACP,CAAC,CAAC,CACD,KACA,OAAO,KAAK,YAAY;CACvB,MAAM,YAAY,QAAQ;CAC1B,OAAO,cAAc,KAAA,KAAa,UAAU,iBAAiB;AAC9D,CAAC,CACF;;;;;;;;;;;;;;;;;AAkBF,MAAa,yBACZ,SACA,UACA,MACA,mBAC8D;CAC9D,MAAM,WAAW,KAAK,WAAW,YAAY;CAC7C,IAAI,KAAK,cAAc,KAAA,GACtB,OAAO,OAAO,QAAQ;EACrB,KAAK,wBAAwB,KAAK,UAAU,KAAK,QAAQ;EACzD,SAAS,KAAK,UAAU;CACzB,CAAC;CAEF,MAAM,UAAU,cAAc,YAAY,SAAS,IAAI,GAAG,SAAS,MAAM,aAAa;CACtF,OAAO,OAAO,IAAI,aAAa;EAE9B,IAAI,OADgC,2BAA2B,SAAS,QAAQ,GAE/E,OAAO,QAAQ,wBAAwB;GACtC,KAAK,SAAS;GACd,OAAO,SAAS;GAChB,QAAQ;GACR,MAAM;EACP,CAAC;EAGF,MAAM,EAAE,WAAW,OAAO,oBAAoB,SAAS,UAAU;GAChE;GACA,OAAO;GACP,MAAM;GACN;GACA,YAAY,yBANI,eAAe,OAAO,eAAe,MAMR;EAC9C,CAAC;EACD,OAAO;GACN,KAAK,aACJ,gBAAgB;IACf,MAAM,OAAO;IACb,UAAU,OAAO;IACjB,MAAM,OAAO;IACb,MAAM,OAAO;GACd,CAAC,GACD,QACD;GACA,SAAS,OAAO;EACjB;CACD,CAAC,CAAC,CAAC,KAIF,OAAO,UAAU,UAChB,eACC,mBACA,6EAA6E,MAAM,KAAK,IACxF,KACD,CACD,CACD;AACD;;;;;;;AAQA,MAAM,eACL,MACA,SACA,kBAEA,OAAO,IAAI,aAAa;CACvB,MAAM,MAAM,OAAO;CAInB,MAAM,UAAU,OAAO;CACvB,MAAM,WAAW,OAAO;CACxB,MAAM,QAAQ,OAAO;CACrB,MAAM,aAAa,OAAO;CAC1B,MAAM,2BAA2B,OAAO;CACxC,MAAM,EAAE,WAAW,OAAO,eACzB,SACA,UACA,YACA,OACA,MACA,SACA,aACD;CAEA,MAAM,wBAAwB,OAAO,6BACpC,MACA,QACA,wBACD;CACA,MAAM,QAAQ;EACb,GAAG;EACH,MAAM,KAAK;EACX;CACD;CASA,MAAM,cAAc,MAAM;CAmB1B,MAAM,qBACL,CAFqB,sBAAsB,SAAS,OAAO,CAAC,CAAC,UAE3C,MAAM,0BAA0B,OAC/C,CAAC,IACD,CACA;EACC,MAAM;EACN,eAAe,oBAAoB,WAAW;EAC9C,UAAU,MAAM;EAChB,aAAa;CACd,CAID;CACH,MAAM,iBACL,KAAK,SAAS,UACX,sBAAsB;EACtB,eAAe,YAAY,SAAS,IAAI,GAAG,SAAS,MAAM;EAE1D,gBAAgB,YAAY,KAAA;CAC7B,CAAC,IACA,CAAC;CACL,MAAM,gBACL,KAAK,SAAS,SACX,qBAAqB,EACrB,eAAe,YAAY,SAAS,IAAI,GAAG,SAAS,MAAM,WAC3D,CAAC,IACA,CAAC;CACL,kBAAkB,KAAK;EAItB,iBAAiB,KAAK,MAAM,SAAS,KAAK,SAAS,OAAO,aAAa,YAAY,KAAA,CAAS;EAC5F,gBAAgB;GACf,MAAM,KAAK;GACX,SAAS;GACT,KAAK,MAAM;GACX,QAAQ;GACR,GAAI,MAAM,cAAc,OAAO,EAAE,QAAQ,MAAM,UAAU,IAAI,CAAC;GAC9D,GAAI,MAAM,eAAe,OAAO,EAAE,SAAS,MAAM,WAAW,IAAI,CAAC;EAClE,CAAC;EACD;GACC,MAAM;GACN,eAAe,wBAAwB,WAAW;GAClD,UAAU,MAAM;GAChB,aAAa;EACd;EACA,GAAG;EACH,GAAG;EACH,GAAG;CACJ,CAAC;CACD,OAAO;AACR,CAAC;;;;;;;;;;AAWF,MAAM,kBAAkB,SACvB,aAAa;CACZ,IAAI,YAAY;CAChB,MAAM;CACN,SAAS;CACT,eAAe,oBAAoB,iBAAiB,IAAI,CAAC;CAQzD,eAAe,kBAAkB;CAGjC,aACC,OAAO,IAAI,aAAa;EAIvB,IAAI,KAAK,SAAS,WAAY,KAAK,cAAc,KAAA,KAAa,KAAK,YAAY,OAC9E,OAAO,OAAO,YAAY,MAAM,KAAA,CAAS;EAE1C,MAAM,UAAU,OAAO;EACvB,MAAM,WAAW,OAAO;EAQxB,MAAM,iBAAiB,OAAO,aAAa,SAAS,UAAU,IAAI;EAOlE,OAAO,OAAO,YAAY,MAAM,OADT,sBAAsB,SAAS,UAAU,MAAM,cAAc,GAC3C,cAAc;CACxD,CAAC;AACH,CAAC;AAEF,MAAM,eAAqC,SAAY,eAAe,IAAI;;;;;AAU1E,MAAa,OACZ,OAAU,EAAE,MAAM,QAAQ,MACtB,YAAY,IAAI;;;;;;;;;;;AAYrB,MAAa,SAAS,oBAAoB;CACzC,OAAO;EACN,QAAuD,OAAU,CAAC,MACjE,YAAY;GAAE,MAAM;GAAS,GAAG;EAAK,CAAC;EACvC,WAAW,SACV,YAAY;GAAE,MAAM;GAAa,GAAG;EAAK,CAAC;CAC5C;CACA,MAAM;EACL,UAAU,OAAiD,CAAC,MAC3D,YAAY;GAAE,MAAM;GAAQ,SAAS;GAAW,GAAG;EAAK,CAAC;EAC1D,UAAU,OAAiD,CAAC,MAC3D,YAAY;GAAE,MAAM;GAAQ,SAAS;GAAW,GAAG;EAAK,CAAC;EAC1D,SAAS,OAAiD,CAAC,MAC1D,YAAY;GAAE,MAAM;GAAQ,SAAS;GAAU,GAAG;EAAK,CAAC;EACzD,SAAS,SACR,YAAY;GAAE,MAAM;GAAQ,SAAS;GAAU,GAAG;EAAK,CAAC;CAC1D;CACA,MAAM;EACL,UAAU,OAAkD,CAAC,MAC5D,YAAY;GAAE,MAAM;GAAQ,UAAU;GAAW,GAAG;EAAK,CAAC;EAC3D,UAAU,OAAkD,CAAC,MAC5D,YAAY;GAAE,MAAM;GAAQ,UAAU;GAAW,GAAG;EAAK,CAAC;EAC3D,SAAS,OAAkD,CAAC,MAC3D,YAAY;GAAE,MAAM;GAAQ,UAAU;GAAU,GAAG;EAAK,CAAC;CAC3D;AACD,CAAC"}

package/dist/{substrate/runtime/sui-ledger → plugins/sui/ledger}/object-ref.mjs

@@ -1,4 +1,4 @@
-//#region src/substrate/runtime/sui-ledger/object-ref.ts
+//#region src/plugins/sui/ledger/object-ref.ts
 /** Re-cast a `SuiSdkShim` as the gRPC ledger-service client. The
 *  `unknown` hop is required because `ClientWithCoreApi` doesn't
 *  structurally overlap with `{ledgerService: …}`. */

package/dist/plugins/sui/ledger/object-ref.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"object-ref.mjs","names":[],"sources":["../../../../src/plugins/sui/ledger/object-ref.ts"],"sourcesContent":["// plugins/sui/ledger — `ledgerService.getObject` workaround.\n//\n// `SuiSdkShim.core.getObject` returns the simplified `core`-surface\n// projection (no version/digest) per `@mysten/sui`'s `ClientWithCoreApi`\n// shape. The gRPC ledger service provides the BCS-encoded object\n// envelope WITH version + digest under a `readMask` projection — see\n// `@mysten/sui/docs/clients/grpc.md` § Ledger service.\n//\n// The cast `sdk.client as unknown as {ledgerService: {…}}` is the\n// sanctioned escape hatch — `ClientWithCoreApi` doesn't structurally\n// overlap with the gRPC `{ledgerService}` shape, so a direct cast fails.\n// Folded into one helper so every plugin that needs an up-to-date\n// `{objectId, version, digest}` ObjectRef goes through the same\n// projection (and the same `unknown`-cast escape hatch) rather than\n// re-deriving it.\n//\n// NOTE: not exported from the public barrel — this is an internal\n// primitive used by plugins, not a published API.\n\nimport type { SuiSdkShim } from '../index.ts';\n\n/** Shape of the gRPC ledger-service projection we need. Hand-written\n *  because the public `ClientWithCoreApi` surface doesn't include the\n *  ledger service. */\ninterface LedgerObjectClient {\n\treadonly ledgerService: {\n\t\treadonly getObject: (args: {\n\t\t\treadonly objectId: string;\n\t\t\treadonly readMask?: { readonly paths: ReadonlyArray<string> };\n\t\t}) => Promise<{\n\t\t\treadonly response?: {\n\t\t\t\treadonly object?: {\n\t\t\t\t\treadonly objectId?: string;\n\t\t\t\t\treadonly version?: string | number | bigint;\n\t\t\t\t\treadonly digest?: string;\n\t\t\t\t};\n\t\t\t};\n\t\t}>;\n\t};\n}\n\n/** Re-cast a `SuiSdkShim` as the gRPC ledger-service client. The\n *  `unknown` hop is required because `ClientWithCoreApi` doesn't\n *  structurally overlap with `{ledgerService: …}`. */\nconst ledgerObjectClient = (sdk: SuiSdkShim): LedgerObjectClient =>\n\tsdk.client as unknown as LedgerObjectClient;\n\n/** Up-to-date `{objectId, version, digest}` ObjectRef for `objectId`,\n *  fetched through the gRPC ledger service.\n *\n *  Throws if the response envelope is missing any of `objectId` /\n *  `version` / `digest` — e.g. when the object was deleted or never\n *  existed. The error message includes the requested object id so\n *  call-site context surfaces in plugin error traces. */\nexport const currentLedgerObjectRef = async (\n\tsdk: SuiSdkShim,\n\tobjectId: string,\n): Promise<{\n\treadonly objectId: string;\n\treadonly version: string;\n\treadonly digest: string;\n}> => {\n\tconst raw = await ledgerObjectClient(sdk).ledgerService.getObject({\n\t\tobjectId,\n\t\treadMask: { paths: ['object_id', 'version', 'digest'] },\n\t});\n\tconst object = raw.response?.object;\n\tif (\n\t\tobject === undefined ||\n\t\tobject.objectId === undefined ||\n\t\tobject.version === undefined ||\n\t\tobject.digest === undefined\n\t) {\n\t\tthrow new Error(\n\t\t\t`currentLedgerObjectRef: object '${objectId}' was not found (response missing one of objectId/version/digest).`,\n\t\t);\n\t}\n\treturn {\n\t\tobjectId: object.objectId,\n\t\tversion: object.version.toString(),\n\t\tdigest: object.digest,\n\t};\n};\n"],"mappings":";;;;AA4CA,MAAM,sBAAsB,QAC3B,IAAI;;;;;;;;AASL,MAAa,yBAAyB,OACrC,KACA,aAKK;CAKL,MAAM,UAAS,MAJG,mBAAmB,GAAG,CAAC,CAAC,cAAc,UAAU;EACjE;EACA,UAAU,EAAE,OAAO;GAAC;GAAa;GAAW;EAAQ,EAAE;CACvD,CAAC,EAAA,CACkB,UAAU;CAC7B,IACC,WAAW,KAAA,KACX,OAAO,aAAa,KAAA,KACpB,OAAO,YAAY,KAAA,KACnB,OAAO,WAAW,KAAA,GAElB,MAAM,IAAI,MACT,mCAAmC,SAAS,mEAC7C;CAED,OAAO;EACN,UAAU,OAAO;EACjB,SAAS,OAAO,QAAQ,SAAS;EACjC,QAAQ,OAAO;CAChB;AACD"}

package/dist/plugins/sui/local-faucet-strategy.mjs

@@ -1,6 +1,5 @@
 import { leaseKey } from "../../substrate/runtime/lease-broker/service.mjs";
 import "../../substrate/runtime/lease-broker/index.mjs";
-import { SuiSpans } from "./spans.mjs";
 import { requestFundsWithRetry } from "../faucet/http.mjs";
 import "../faucet/index.mjs";
 import { Effect } from "effect";
@@ -10,10 +9,7 @@ const withSerialization = (serialization, effect) => {
 	return Effect.scoped(Effect.gen(function* () {
 		yield* serialization.broker.acquire(leaseKey(serialization.key), serialization.owner);
 		yield* effect;
-	})).pipe(Effect.withSpan("devstack.plugin.sui.localFaucet.serializedRequest", { attributes: {
-		[SuiSpans.localFaucetLeaseKey]: serialization.key,
-		[SuiSpans.localFaucetLeaseOwner]: serialization.owner
-	} }));
+	}));
 };
 /** Build a SUI local-faucet HTTP strategy. */
 const suiLocalStrategy = (opts) => ({ request: ({ address, amount }) => {

package/dist/plugins/sui/local-faucet-strategy.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"local-faucet-strategy.mjs","names":[],"sources":["../../../src/plugins/sui/local-faucet-strategy.ts"],"sourcesContent":["// SUI local-faucet HTTP strategy.\n//\n// Architecture: the Sui plugin OWNS the local-faucet endpoint\n// conceptually — it spins up the `sui-faucet` container in\n// `mode/local.ts`. The strategy CLOSES OVER the faucet URL at\n// construction so the dispatch site never sees Sui context, and is\n// registered into the `faucet:request:<chainId>` strategy registry\n// via a `StrategyContributor` decl from `sui/index.ts`.\n//\n// `FaucetStrategy` (the dispatch shape) is the faucet plugin's\n// contract surface and is imported from `../faucet/index.ts` — the\n// sui plugin only depends on faucet for the type, not for the\n// implementation. That keeps the dependency direction faucet ← sui,\n// matching the user-facing fact that `sui()` is the owner of the\n// faucet container.\n//\n// Amount semantics: the local faucet returns a fixed-amount grant\n// per request (the binary doesn't honor a variable amount today).\n// We carry `amount` through to error payloads so exhaustion errors\n// match the strategy-native unit (MIST), but the wire request\n// itself does not include it.\n\nimport { Effect } from 'effect';\n\nimport { leaseKey, type LeaseBroker } from '../../substrate/runtime/lease-broker/index.ts';\nimport { requestFundsWithRetry, type FaucetStrategy, type RetryOptions } from '../faucet/index.ts';\n\nimport { SuiSpans } from './spans.ts';\n\n/** Optional serialization for faucet backends that spend a shared funding coin. */\nexport interface SuiLocalFaucetSerialization {\n\t/** Stack-local broker; callers choose the resource key shape. */\n\treadonly broker: LeaseBroker;\n\t/** Opaque lease key, typically scoped by chain id. */\n\treadonly key: string;\n\t/** Diagnostic owner reported by the lease broker. */\n\treadonly owner: string;\n}\n\n/** Per-strategy options. */\nexport interface SuiLocalStrategyOptions {\n\t/** Faucet base URL — e.g. `http://localhost:9123`. The strategy\n\t *  appends `/v2/gas` internally. */\n\treadonly faucetUrl: string;\n\t/** Wall-clock budget; forwarded to `requestFundsWithRetry`. */\n\treadonly timeoutMs?: number;\n\t/** Max retry attempts; forwarded to `requestFundsWithRetry`. */\n\treadonly maxAttempts?: number;\n\t/** Serialize requests when the faucet backend shares one funding coin. */\n\treadonly serialization?: SuiLocalFaucetSerialization;\n}\n\nconst withSerialization = <E>(\n\tserialization: SuiLocalFaucetSerialization | undefined,\n\teffect: Effect.Effect<void, E>,\n): Effect.Effect<void, E> => {\n\tif (serialization === undefined) {\n\t\treturn effect;\n\t}\n\treturn Effect.scoped(\n\t\tEffect.gen(function* () {\n\t\t\tyield* serialization.broker.acquire(leaseKey(serialization.key), serialization.owner);\n\t\t\tyield* effect;\n\t\t}),\n\t).pipe(\n\t\tEffect.withSpan('devstack.plugin.sui.localFaucet.serializedRequest', {\n\t\t\tattributes: {\n\t\t\t\t[SuiSpans.localFaucetLeaseKey]: serialization.key,\n\t\t\t\t[SuiSpans.localFaucetLeaseOwner]: serialization.owner,\n\t\t\t},\n\t\t}),\n\t);\n};\n\n/** Build a SUI local-faucet HTTP strategy. */\nexport const suiLocalStrategy = (opts: SuiLocalStrategyOptions): FaucetStrategy => ({\n\trequest: ({ address, amount }) => {\n\t\tconst retryOpts: RetryOptions = {\n\t\t\tfaucetUrl: opts.faucetUrl,\n\t\t\taddress,\n\t\t\tamount,\n\t\t\t...(opts.timeoutMs !== undefined ? { timeoutMs: opts.timeoutMs } : {}),\n\t\t\t...(opts.maxAttempts !== undefined ? { maxAttempts: opts.maxAttempts } : {}),\n\t\t};\n\t\treturn withSerialization(opts.serialization, requestFundsWithRetry(retryOpts));\n\t},\n});\n"],"mappings":";;;;;;;AAoDA,MAAM,qBACL,eACA,WAC4B;AAC5B,KAAI,kBAAkB,KAAA,EACrB,QAAO;AAER,QAAO,OAAO,OACb,OAAO,IAAI,aAAa;AACvB,SAAO,cAAc,OAAO,QAAQ,SAAS,cAAc,IAAI,EAAE,cAAc,MAAM;AACrF,SAAO;GACN,CACF,CAAC,KACD,OAAO,SAAS,qDAAqD,EACpE,YAAY;GACV,SAAS,sBAAsB,cAAc;GAC7C,SAAS,wBAAwB,cAAc;EAChD,EACD,CAAC,CACF;;;AAIF,MAAa,oBAAoB,UAAmD,EACnF,UAAU,EAAE,SAAS,aAAa;CACjC,MAAM,YAA0B;EAC/B,WAAW,KAAK;EAChB;EACA;EACA,GAAI,KAAK,cAAc,KAAA,IAAY,EAAE,WAAW,KAAK,WAAW,GAAG,EAAE;EACrE,GAAI,KAAK,gBAAgB,KAAA,IAAY,EAAE,aAAa,KAAK,aAAa,GAAG,EAAE;EAC3E;AACD,QAAO,kBAAkB,KAAK,eAAe,sBAAsB,UAAU,CAAC;GAE/E"}
+{"version":3,"file":"local-faucet-strategy.mjs","names":[],"sources":["../../../src/plugins/sui/local-faucet-strategy.ts"],"sourcesContent":["// SUI local-faucet HTTP strategy.\n//\n// Architecture: the Sui plugin OWNS the local-faucet endpoint\n// conceptually — it spins up the `sui-faucet` container in\n// `mode/local.ts`. The strategy CLOSES OVER the faucet URL at\n// construction so the dispatch site never sees Sui context, and is\n// registered into the `faucet:request:<chainId>` strategy registry\n// via a `StrategyContributor` decl from `sui/index.ts`.\n//\n// `FaucetStrategy` (the dispatch shape) is the faucet plugin's\n// contract surface and is imported from `../faucet/index.ts` — the\n// sui plugin only depends on faucet for the type, not for the\n// implementation. That keeps the dependency direction faucet ← sui,\n// matching the user-facing fact that `sui()` is the owner of the\n// faucet container.\n//\n// Amount semantics: the local faucet returns a fixed-amount grant\n// per request (the binary doesn't honor a variable amount today).\n// We carry `amount` through to error payloads so exhaustion errors\n// match the strategy-native unit (MIST), but the wire request\n// itself does not include it.\n\nimport { Effect } from 'effect';\n\nimport { leaseKey, type LeaseBroker } from '../../substrate/runtime/lease-broker/index.ts';\nimport { requestFundsWithRetry, type FaucetStrategy, type RetryOptions } from '../faucet/index.ts';\n\n/** Optional serialization for faucet backends that spend a shared funding coin. */\nexport interface SuiLocalFaucetSerialization {\n\t/** Stack-local broker; callers choose the resource key shape. */\n\treadonly broker: LeaseBroker;\n\t/** Opaque lease key, typically scoped by chain id. */\n\treadonly key: string;\n\t/** Diagnostic owner reported by the lease broker. */\n\treadonly owner: string;\n}\n\n/** Per-strategy options. */\nexport interface SuiLocalStrategyOptions {\n\t/** Faucet base URL — e.g. `http://localhost:9123`. The strategy\n\t *  appends `/v2/gas` internally. */\n\treadonly faucetUrl: string;\n\t/** Wall-clock budget; forwarded to `requestFundsWithRetry`. */\n\treadonly timeoutMs?: number;\n\t/** Max retry attempts; forwarded to `requestFundsWithRetry`. */\n\treadonly maxAttempts?: number;\n\t/** Serialize requests when the faucet backend shares one funding coin. */\n\treadonly serialization?: SuiLocalFaucetSerialization;\n}\n\nconst withSerialization = <E>(\n\tserialization: SuiLocalFaucetSerialization | undefined,\n\teffect: Effect.Effect<void, E>,\n): Effect.Effect<void, E> => {\n\tif (serialization === undefined) {\n\t\treturn effect;\n\t}\n\treturn Effect.scoped(\n\t\tEffect.gen(function* () {\n\t\t\tyield* serialization.broker.acquire(leaseKey(serialization.key), serialization.owner);\n\t\t\tyield* effect;\n\t\t}),\n\t);\n};\n\n/** Build a SUI local-faucet HTTP strategy. */\nexport const suiLocalStrategy = (opts: SuiLocalStrategyOptions): FaucetStrategy => ({\n\trequest: ({ address, amount }) => {\n\t\tconst retryOpts: RetryOptions = {\n\t\t\tfaucetUrl: opts.faucetUrl,\n\t\t\taddress,\n\t\t\tamount,\n\t\t\t...(opts.timeoutMs !== undefined ? { timeoutMs: opts.timeoutMs } : {}),\n\t\t\t...(opts.maxAttempts !== undefined ? { maxAttempts: opts.maxAttempts } : {}),\n\t\t};\n\t\treturn withSerialization(opts.serialization, requestFundsWithRetry(retryOpts));\n\t},\n});\n"],"mappings":";;;;;;AAkDA,MAAM,qBACL,eACA,WAC4B;CAC5B,IAAI,kBAAkB,KAAA,GACrB,OAAO;CAER,OAAO,OAAO,OACb,OAAO,IAAI,aAAa;EACvB,OAAO,cAAc,OAAO,QAAQ,SAAS,cAAc,GAAG,GAAG,cAAc,KAAK;EACpF,OAAO;CACR,CAAC,CACF;AACD;;AAGA,MAAa,oBAAoB,UAAmD,EACnF,UAAU,EAAE,SAAS,aAAa;CACjC,MAAM,YAA0B;EAC/B,WAAW,KAAK;EAChB;EACA;EACA,GAAI,KAAK,cAAc,KAAA,IAAY,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;EACpE,GAAI,KAAK,gBAAgB,KAAA,IAAY,EAAE,aAAa,KAAK,YAAY,IAAI,CAAC;CAC3E;CACA,OAAO,kBAAkB,KAAK,eAAe,sBAAsB,SAAS,CAAC;AAC9E,EACD"}

package/dist/plugins/sui/log-attrs.mjs

@@ -0,0 +1,11 @@
+//#region src/plugins/sui/log-attrs.ts
+const SuiLogAttr = {
+	autoTickIntervalMs: "sui.autoTick.intervalMs",
+	chain: "sui.chain",
+	container: "sui.container",
+	mode: "sui.mode"
+};
+//#endregion
+export { SuiLogAttr };
+
+//# sourceMappingURL=log-attrs.mjs.map

package/dist/plugins/sui/log-attrs.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-attrs.mjs","names":[],"sources":["../../../src/plugins/sui/log-attrs.ts"],"sourcesContent":["// Sui plugin attribute-key vocabulary. Plugin-local — substrate's\n// `LogAttr` carries only engine-dimensional + http/process generic\n// keys; plugin-domain keys live next to the plugin that owns them.\n//\n// These keys back leveled log annotations (`Effect.annotateLogs({\n// [SuiLogAttr.container]: value })`) and the account plugin's\n// cross-cutting funding annotations. Free-form string literals are a\n// STYLE_GUIDE §16 violation.\n\nexport const SuiLogAttr = {\n\tautoTickIntervalMs: 'sui.autoTick.intervalMs',\n\tchain: 'sui.chain',\n\tcontainer: 'sui.container',\n\tmode: 'sui.mode',\n} as const;\n"],"mappings":";AASA,MAAa,aAAa;CACzB,oBAAoB;CACpB,OAAO;CACP,WAAW;CACX,MAAM;AACP"}

package/dist/plugins/sui/mode/external.mjs

@@ -1,7 +1,5 @@
-import { SpanAttr } from "../../../substrate/runtime/observability/spans.mjs";
 import { suiPluginError } from "../errors.mjs";
 import { formatUnknownError } from "../../../substrate/runtime/format-unknown-error.mjs";
-import { SuiSpans } from "../spans.mjs";
 import { assembleSuiClient, buildWaitForTransactionsReady, fetchChainId, makeResolvedNetwork, noopWaitForTransactionsReady } from "./shared-boot.mjs";
 import { Duration, Effect } from "effect";
 import { SuiGrpcClient } from "@mysten/sui/grpc";
@@ -20,14 +18,11 @@ const bootLocalRpcMode = (opts) => Effect.gen(function* () {
 		}),
 		catch: (cause) => suiPluginError("chain-id-fetch", `sui local-rpc mode: SuiGrpcClient construction failed for rpcUrl=${opts.rpcUrl}: ${formatUnknownError(cause)}`, cause)
 	});
-	const chain = opts.chain ?? (yield* fetchChainId(sdkClient, {
-		timeout: opts.readyTimeout ?? DEFAULT_EXTERNAL_CHAIN_ID_TIMEOUT,
-		span: "devstack.plugin.sui.localRpc.fetchChainId"
-	}));
+	const chainId = opts.chainId ?? (yield* fetchChainId(sdkClient, { timeout: opts.readyTimeout ?? DEFAULT_EXTERNAL_CHAIN_ID_TIMEOUT }));
 	const waitForTransactionsReady = opts.faucetUrl !== void 0 ? yield* buildWaitForTransactionsReady(opts.faucetUrl) : noopWaitForTransactionsReady;
 	const { client } = yield* assembleSuiClient({
 		sdkClient,
-		chain,
+		chainId,
 		rpcUrl: opts.rpcUrl,
 		...opts.faucetUrl !== void 0 ? { faucetUrl: opts.faucetUrl } : {},
 		...opts.graphqlUrl !== void 0 ? { graphqlUrl: opts.graphqlUrl } : {},
@@ -36,7 +31,7 @@ const bootLocalRpcMode = (opts) => Effect.gen(function* () {
 	return {
 		resolved: makeResolvedNetwork({
 			mode: "local-rpc",
-			chain,
+			chainId,
 			rpc: opts.rpcUrl,
 			source: "config",
 			...opts.faucetUrl !== void 0 ? { faucet: opts.faucetUrl } : {},
@@ -44,10 +39,7 @@ const bootLocalRpcMode = (opts) => Effect.gen(function* () {
 		}),
 		client
 	};
-}).pipe(Effect.withSpan("devstack.plugin.sui.localRpc.boot", { attributes: {
-	[SpanAttr.plugin]: "sui",
-	[SuiSpans.mode]: "local-rpc"
-} }));
+});
 //#endregion
 export { bootLocalRpcMode };
 

package/dist/plugins/sui/mode/external.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"external.mjs","names":[],"sources":["../../../../src/plugins/sui/mode/external.ts"],"sourcesContent":["// Sui plugin — local caller-owned RPC mode.\n//\n// Caller already has a Sui process running and supplies the RPC URL\n// (optionally faucet and GraphQL). Used in CI, custom-runtime\n// experiments, and \"wrap my own sui localnet\" scenarios.\n//\n// What's hard:\n//   - The entire container + sidecar + build-container pipeline\n//     must be skipped cleanly. No image build, no docker network,\n//     no SuiBuildImage wired in.\n//   - Downstream consumers must still get the same endpoint shape,\n//     the same chain id, and a working `waitForTransactionsReady`\n//     when a faucet URL is supplied.\n//   - The chain-id fetch IS the only readiness sentinel; must have\n//     a bounded timeout.\n//\n// Local-RPC mode contributes a `ChainProbe` and a `Codegenable` but\n// does NOT contribute a `Snapshotable`-managed container or a\n// `Routable` entrypoint (the caller's own router fronts the RPC).\n//\n// Boot sequence:\n//\n//   1. Construct an `@mysten/sui/grpc` `SuiGrpcClient` against the\n//      caller-supplied `rpcUrl`. `network: 'localnet'` is the\n//      semantically-correct discriminator — external IS a local-mode\n//      sub-shape, not a public-net target.\n//   2. Fetch the chain identifier with a bounded timeout — the only\n//      readiness sentinel for this mode.\n//   3. Build `waitForTransactionsReady`:\n//        - If `faucetUrl` is supplied, wire the real HTTP probe\n//          (same code path as local mode).\n//        - Otherwise, the gate is a trivially-succeeding no-op\n//          (callers that need funds must arrange them externally).\n//   4. Assemble the resolved `SuiClient` and return it alongside the\n//      `ResolvedSuiNetwork` projection (consumed by the codegen\n//      contribution at the barrel).\n\nimport { Duration, Effect, type Scope } from 'effect';\n\nimport { SuiGrpcClient } from '@mysten/sui/grpc';\n\nimport { SpanAttr } from '../../../substrate/runtime/observability/spans.ts';\nimport { suiPluginError, type SuiConfigError, type SuiPluginError } from '../errors.ts';\nimport { formatUnknownError } from '../../../substrate/runtime/format-unknown-error.ts';\nimport type { ResolvedSuiNetwork } from '../network-resolver.ts';\nimport { SuiSpans } from '../spans.ts';\nimport type { SuiClient } from './shared.ts';\nimport {\n\tassembleSuiClient,\n\tbuildWaitForTransactionsReady,\n\tfetchChainId,\n\tmakeResolvedNetwork,\n\tnoopWaitForTransactionsReady,\n} from './shared-boot.ts';\nimport type { SuiLocalRpcOptions } from './spec.ts';\n\n/** Default chain-id fetch timeout for caller-owned local RPCs. The wire\n *  latency is the dominant cost; 30s is the documented ceiling. */\nexport const DEFAULT_EXTERNAL_CHAIN_ID_TIMEOUT = Duration.seconds(30);\n\n/** Resolved local-RPC-mode boot artifacts. */\nexport interface LocalRpcModeBootResult {\n\treadonly resolved: ResolvedSuiNetwork;\n\treadonly client: SuiClient;\n}\n\n/** Build the local-RPC-mode boot Effect. No container, no sidecar,\n *  no build image. Just probe chain id + wire `waitForTransactionsReady`\n *  conditional on `faucetUrl`. */\nexport const bootLocalRpcMode = (\n\topts: SuiLocalRpcOptions,\n): Effect.Effect<LocalRpcModeBootResult, SuiPluginError | SuiConfigError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\t// ----- 1. Construct the grpc client ----------------------------------\n\t\t// `network: 'localnet'` is semantically correct: external is a\n\t\t// substrate-level `'local'` sub-mode (caller's own localnet); the\n\t\t// SDK uses `network` for MVR / wallet-standard hints which the\n\t\t// caller-provided RPC won't honor anyway.\n\t\tconst sdkClient = yield* Effect.try({\n\t\t\ttry: () =>\n\t\t\t\tnew SuiGrpcClient({\n\t\t\t\t\tbaseUrl: opts.rpcUrl,\n\t\t\t\t\tnetwork: 'localnet',\n\t\t\t\t}),\n\t\t\tcatch: (cause): SuiPluginError =>\n\t\t\t\tsuiPluginError(\n\t\t\t\t\t'chain-id-fetch',\n\t\t\t\t\t`sui local-rpc mode: SuiGrpcClient construction failed for rpcUrl=${opts.rpcUrl}: ${formatUnknownError(cause)}`,\n\t\t\t\t\tcause,\n\t\t\t\t),\n\t\t});\n\n\t\t// ----- 2. Resolve chain id -------------------------------------------\n\t\tconst chain =\n\t\t\topts.chain ??\n\t\t\t(yield* fetchChainId(sdkClient, {\n\t\t\t\ttimeout: opts.readyTimeout ?? DEFAULT_EXTERNAL_CHAIN_ID_TIMEOUT,\n\t\t\t\tspan: 'devstack.plugin.sui.localRpc.fetchChainId',\n\t\t\t}));\n\n\t\t// ----- 3. Build waitForTransactionsReady -----------------------------\n\t\t// Faucet-bearing: real HTTP probe. Faucet-less: no-op (caller\n\t\t// must arrange funding out-of-band).\n\t\tconst waitForTransactionsReady =\n\t\t\topts.faucetUrl !== undefined\n\t\t\t\t? yield* buildWaitForTransactionsReady(opts.faucetUrl)\n\t\t\t\t: noopWaitForTransactionsReady;\n\n\t\t// ----- 4. Assemble + return ------------------------------------------\n\t\tconst { client } = yield* assembleSuiClient({\n\t\t\tsdkClient,\n\t\t\tchain,\n\t\t\trpcUrl: opts.rpcUrl,\n\t\t\t...(opts.faucetUrl !== undefined ? { faucetUrl: opts.faucetUrl } : {}),\n\t\t\t...(opts.graphqlUrl !== undefined ? { graphqlUrl: opts.graphqlUrl } : {}),\n\t\t\twaitForTransactionsReady,\n\t\t});\n\t\tconst resolved = makeResolvedNetwork({\n\t\t\tmode: 'local-rpc',\n\t\t\tchain,\n\t\t\trpc: opts.rpcUrl,\n\t\t\tsource: 'config',\n\t\t\t...(opts.faucetUrl !== undefined ? { faucet: opts.faucetUrl } : {}),\n\t\t\t...(opts.graphqlUrl !== undefined ? { graphql: opts.graphqlUrl } : {}),\n\t\t});\n\n\t\treturn { resolved, client };\n\t}).pipe(\n\t\tEffect.withSpan('devstack.plugin.sui.localRpc.boot', {\n\t\t\tattributes: { [SpanAttr.plugin]: 'sui', [SuiSpans.mode]: 'local-rpc' },\n\t\t}),\n\t);\n"],"mappings":";;;;;;;;;;AA0DA,MAAa,oCAAoC,SAAS,QAAQ,GAAG;;;;AAWrE,MAAa,oBACZ,SAEA,OAAO,IAAI,aAAa;CAMvB,MAAM,YAAY,OAAO,OAAO,IAAI;EACnC,WACC,IAAI,cAAc;GACjB,SAAS,KAAK;GACd,SAAS;GACT,CAAC;EACH,QAAQ,UACP,eACC,kBACA,oEAAoE,KAAK,OAAO,IAAI,mBAAmB,MAAM,IAC7G,MACA;EACF,CAAC;CAGF,MAAM,QACL,KAAK,UACJ,OAAO,aAAa,WAAW;EAC/B,SAAS,KAAK,gBAAgB;EAC9B,MAAM;EACN,CAAC;CAKH,MAAM,2BACL,KAAK,cAAc,KAAA,IAChB,OAAO,8BAA8B,KAAK,UAAU,GACpD;CAGJ,MAAM,EAAE,WAAW,OAAO,kBAAkB;EAC3C;EACA;EACA,QAAQ,KAAK;EACb,GAAI,KAAK,cAAc,KAAA,IAAY,EAAE,WAAW,KAAK,WAAW,GAAG,EAAE;EACrE,GAAI,KAAK,eAAe,KAAA,IAAY,EAAE,YAAY,KAAK,YAAY,GAAG,EAAE;EACxE;EACA,CAAC;AAUF,QAAO;EAAE,UATQ,oBAAoB;GACpC,MAAM;GACN;GACA,KAAK,KAAK;GACV,QAAQ;GACR,GAAI,KAAK,cAAc,KAAA,IAAY,EAAE,QAAQ,KAAK,WAAW,GAAG,EAAE;GAClE,GAAI,KAAK,eAAe,KAAA,IAAY,EAAE,SAAS,KAAK,YAAY,GAAG,EAAE;GACrE,CAEgB;EAAE;EAAQ;EAC1B,CAAC,KACF,OAAO,SAAS,qCAAqC,EACpD,YAAY;EAAG,SAAS,SAAS;EAAQ,SAAS,OAAO;CAAa,EACtE,CAAC,CACF"}
+{"version":3,"file":"external.mjs","names":[],"sources":["../../../../src/plugins/sui/mode/external.ts"],"sourcesContent":["// Sui plugin — local caller-owned RPC mode.\n//\n// Caller already has a Sui process running and supplies the RPC URL\n// (optionally faucet and GraphQL). Used in CI, custom-runtime\n// experiments, and \"wrap my own sui localnet\" scenarios.\n//\n// What's hard:\n//   - The entire container + sidecar + build-container pipeline\n//     must be skipped cleanly. No image build, no docker network,\n//     no SuiBuildImage wired in.\n//   - Downstream consumers must still get the same endpoint shape,\n//     the same chain id, and a working `waitForTransactionsReady`\n//     when a faucet URL is supplied.\n//   - The chain-id fetch IS the only readiness sentinel; must have\n//     a bounded timeout.\n//\n// Local-RPC mode contributes a `ChainProbe` and a `Codegenable` but\n// does NOT contribute a `Snapshotable`-managed container or a\n// `Routable` entrypoint (the caller's own router fronts the RPC).\n//\n// Boot sequence:\n//\n//   1. Construct an `@mysten/sui/grpc` `SuiGrpcClient` against the\n//      caller-supplied `rpcUrl`. `network: 'localnet'` is the\n//      semantically-correct discriminator — external IS a local-mode\n//      sub-shape, not a public-net target.\n//   2. Fetch the chain identifier with a bounded timeout — the only\n//      readiness sentinel for this mode.\n//   3. Build `waitForTransactionsReady`:\n//        - If `faucetUrl` is supplied, wire the real HTTP probe\n//          (same code path as local mode).\n//        - Otherwise, the gate is a trivially-succeeding no-op\n//          (callers that need funds must arrange them externally).\n//   4. Assemble the resolved `SuiClient` and return it alongside the\n//      `ResolvedSuiNetwork` projection (consumed by the codegen\n//      contribution at the barrel).\n\nimport { Duration, Effect, type Scope } from 'effect';\n\nimport { SuiGrpcClient } from '@mysten/sui/grpc';\n\nimport { suiPluginError, type SuiConfigError, type SuiPluginError } from '../errors.ts';\nimport { formatUnknownError } from '../../../substrate/runtime/format-unknown-error.ts';\nimport type { ResolvedSuiNetwork } from '../network-resolver.ts';\nimport type { SuiClient } from './shared.ts';\nimport {\n\tassembleSuiClient,\n\tbuildWaitForTransactionsReady,\n\tfetchChainId,\n\tmakeResolvedNetwork,\n\tnoopWaitForTransactionsReady,\n} from './shared-boot.ts';\nimport type { SuiLocalRpcOptions } from './spec.ts';\n\n/** Default chain-id fetch timeout for caller-owned local RPCs. The wire\n *  latency is the dominant cost; 30s is the documented ceiling. */\nexport const DEFAULT_EXTERNAL_CHAIN_ID_TIMEOUT = Duration.seconds(30);\n\n/** Resolved local-RPC-mode boot artifacts. */\nexport interface LocalRpcModeBootResult {\n\treadonly resolved: ResolvedSuiNetwork;\n\treadonly client: SuiClient;\n}\n\n/** Build the local-RPC-mode boot Effect. No container, no sidecar,\n *  no build image. Just probe chain id + wire `waitForTransactionsReady`\n *  conditional on `faucetUrl`. */\nexport const bootLocalRpcMode = (\n\topts: SuiLocalRpcOptions,\n): Effect.Effect<LocalRpcModeBootResult, SuiPluginError | SuiConfigError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\t// ----- 1. Construct the grpc client ----------------------------------\n\t\t// `network: 'localnet'` is semantically correct: external is a\n\t\t// substrate-level `'local'` sub-mode (caller's own localnet); the\n\t\t// SDK uses `network` for MVR / wallet-standard hints which the\n\t\t// caller-provided RPC won't honor anyway.\n\t\tconst sdkClient = yield* Effect.try({\n\t\t\ttry: () =>\n\t\t\t\tnew SuiGrpcClient({\n\t\t\t\t\tbaseUrl: opts.rpcUrl,\n\t\t\t\t\tnetwork: 'localnet',\n\t\t\t\t}),\n\t\t\tcatch: (cause): SuiPluginError =>\n\t\t\t\tsuiPluginError(\n\t\t\t\t\t'chain-id-fetch',\n\t\t\t\t\t`sui local-rpc mode: SuiGrpcClient construction failed for rpcUrl=${opts.rpcUrl}: ${formatUnknownError(cause)}`,\n\t\t\t\t\tcause,\n\t\t\t\t),\n\t\t});\n\n\t\t// ----- 2. Resolve chain id -------------------------------------------\n\t\tconst chainId =\n\t\t\topts.chainId ??\n\t\t\t(yield* fetchChainId(sdkClient, {\n\t\t\t\ttimeout: opts.readyTimeout ?? DEFAULT_EXTERNAL_CHAIN_ID_TIMEOUT,\n\t\t\t}));\n\n\t\t// ----- 3. Build waitForTransactionsReady -----------------------------\n\t\t// Faucet-bearing: real HTTP probe. Faucet-less: no-op (caller\n\t\t// must arrange funding out-of-band).\n\t\tconst waitForTransactionsReady =\n\t\t\topts.faucetUrl !== undefined\n\t\t\t\t? yield* buildWaitForTransactionsReady(opts.faucetUrl)\n\t\t\t\t: noopWaitForTransactionsReady;\n\n\t\t// ----- 4. Assemble + return ------------------------------------------\n\t\tconst { client } = yield* assembleSuiClient({\n\t\t\tsdkClient,\n\t\t\tchainId,\n\t\t\trpcUrl: opts.rpcUrl,\n\t\t\t...(opts.faucetUrl !== undefined ? { faucetUrl: opts.faucetUrl } : {}),\n\t\t\t...(opts.graphqlUrl !== undefined ? { graphqlUrl: opts.graphqlUrl } : {}),\n\t\t\twaitForTransactionsReady,\n\t\t});\n\t\tconst resolved = makeResolvedNetwork({\n\t\t\tmode: 'local-rpc',\n\t\t\tchainId,\n\t\t\trpc: opts.rpcUrl,\n\t\t\tsource: 'config',\n\t\t\t...(opts.faucetUrl !== undefined ? { faucet: opts.faucetUrl } : {}),\n\t\t\t...(opts.graphqlUrl !== undefined ? { graphql: opts.graphqlUrl } : {}),\n\t\t});\n\n\t\treturn { resolved, client };\n\t});\n"],"mappings":";;;;;;;;AAwDA,MAAa,oCAAoC,SAAS,QAAQ,EAAE;;;;AAWpE,MAAa,oBACZ,SAEA,OAAO,IAAI,aAAa;CAMvB,MAAM,YAAY,OAAO,OAAO,IAAI;EACnC,WACC,IAAI,cAAc;GACjB,SAAS,KAAK;GACd,SAAS;EACV,CAAC;EACF,QAAQ,UACP,eACC,kBACA,oEAAoE,KAAK,OAAO,IAAI,mBAAmB,KAAK,KAC5G,KACD;CACF,CAAC;CAGD,MAAM,UACL,KAAK,YACJ,OAAO,aAAa,WAAW,EAC/B,SAAS,KAAK,gBAAgB,kCAC/B,CAAC;CAKF,MAAM,2BACL,KAAK,cAAc,KAAA,IAChB,OAAO,8BAA8B,KAAK,SAAS,IACnD;CAGJ,MAAM,EAAE,WAAW,OAAO,kBAAkB;EAC3C;EACA;EACA,QAAQ,KAAK;EACb,GAAI,KAAK,cAAc,KAAA,IAAY,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;EACpE,GAAI,KAAK,eAAe,KAAA,IAAY,EAAE,YAAY,KAAK,WAAW,IAAI,CAAC;EACvE;CACD,CAAC;CAUD,OAAO;EAAE,UATQ,oBAAoB;GACpC,MAAM;GACN;GACA,KAAK,KAAK;GACV,QAAQ;GACR,GAAI,KAAK,cAAc,KAAA,IAAY,EAAE,QAAQ,KAAK,UAAU,IAAI,CAAC;GACjE,GAAI,KAAK,eAAe,KAAA,IAAY,EAAE,SAAS,KAAK,WAAW,IAAI,CAAC;EACrE,CAEgB;EAAG;CAAO;AAC3B,CAAC"}

package/dist/plugins/sui/mode/fork.mjs

@@ -1,32 +1,35 @@
-import { SpanAttr } from "../../../substrate/runtime/observability/spans.mjs";
-import { ProbeTimeoutError, waitForProbe } from "../../../substrate/runtime/probes.mjs";
 import { setCurrentPluginPhase } from "../../../substrate/runtime/current-plugin.mjs";
-import { DEFAULT_SUI_CLI_VERSION } from "../../../substrate/runtime/sui-move-build/index.mjs";
+import { ProbeTimeoutError, waitForProbe } from "../../../substrate/runtime/probes.mjs";
+import { DEFAULT_SUI_CLI_VERSION } from "../move/index.mjs";
 import { renderUrl, routedHostname } from "../../../substrate/runtime/routed-url.mjs";
 import { SUI_RPC_ENTRYPOINT_PORT } from "../routable.mjs";
 import { ensureManagedContainer } from "../../../substrate/runtime/managed-container.mjs";
 import { suiPluginError } from "../errors.mjs";
 import { formatUnknownError } from "../../../substrate/runtime/format-unknown-error.mjs";
-import { SuiSpans } from "../spans.mjs";
+import { SuiLogAttr } from "../log-attrs.mjs";
 import { toDockerHostGatewayUrl } from "./shared.mjs";
 import { assembleSuiClient, fetchChainId, makeResolvedNetwork, noopWaitForTransactionsReady } from "./shared-boot.mjs";
-import { extractExecuteDigest } from "../../../substrate/runtime/sui-execute/index.mjs";
+import { extractExecuteDigest } from "../exec/index.mjs";
 import { resolveAutoTickIntervalMs, runAutoTickClock } from "../auto-tick.mjs";
 import { acquireForkDataDirHolder, wrapWithForkGuard } from "../fork-orchestration.mjs";
 import { FORK_IMPERSONATION_GAS_BUDGET, verifyForkImpersonationSender } from "../fork-transaction.mjs";
 import { Duration, Effect } from "effect";
-import { createHash } from "node:crypto";
 import { join, resolve } from "node:path";
+import { createHash } from "node:crypto";
 import { mkdir } from "node:fs/promises";
-import { SuiGrpcClient } from "@mysten/sui/grpc";
 import { fileURLToPath } from "node:url";
+import { SuiGrpcClient } from "@mysten/sui/grpc";
 import { normalizeSuiAddress, normalizeSuiObjectId } from "@mysten/sui/utils";
 //#region src/plugins/sui/mode/fork.ts
 /** Default ready-probe timeout for fork-mode cold start. */
 const DEFAULT_FORK_READY_TIMEOUT = Duration.seconds(180);
 /** Default Sui repository revision used by the bundled `sui-fork` image build. */
 const DEFAULT_SUI_FORK_REV = "62ee6ada958cd61b3c8a4466dd33c9aba3cdff8a";
-/** Env var that overrides {@link DEFAULT_FORK_IMAGE_REF} for a single run. */
+/** Env var that supplies a prebuilt `sui-fork` image to pull for a single
+*  run (e.g. `ghcr.io/mysten/sui-fork:<rev>`). When set and the runtime can
+*  pull, `resolveForkImage` tries it first and falls back to a source build,
+*  sparing users the ~10-minute cold compile. No prebuilt default ships
+*  today, so absent this env var the fork always builds from source. */
 const FORK_IMAGE_ENV_VAR = "DEVSTACK_SUI_FORK_IMAGE";
 const prebuiltForkImageRef = () => {
 	const fromEnv = process.env[FORK_IMAGE_ENV_VAR]?.trim();
@@ -76,7 +79,7 @@ const withForkFaucetSeed = (opts) => {
 	return {
 		...opts,
 		seed: {
-			...opts.seed ?? {},
+			...opts.seed,
 			addresses: [...opts.seed?.addresses ?? [], resolved.whale]
 		}
 	};
@@ -110,12 +113,12 @@ const bootForkMode = (runtime, identity, portBroker, paths, opts) => Effect.gen(
 		baseUrl: directRpcUrl,
 		network: opts.upstream
 	});
-	const status = yield* waitForForkReady(sdkClient, opts.readyTimeout ?? DEFAULT_FORK_READY_TIMEOUT).pipe(Effect.annotateLogs({ [SuiSpans.container]: handle.name }));
-	const chain = yield* fetchChainId(sdkClient, { span: "devstack.plugin.sui.fork.fetchChainId" });
+	const status = yield* waitForForkReady(sdkClient, opts.readyTimeout ?? DEFAULT_FORK_READY_TIMEOUT).pipe(Effect.annotateLogs({ [SuiLogAttr.container]: handle.name }));
+	const chainId = yield* fetchChainId(sdkClient);
 	const fork = makeForkAdminSurface(sdkClient);
 	const assembled = yield* assembleSuiClient({
 		sdkClient,
-		chain,
+		chainId,
 		rpcUrl,
 		waitForTransactionsReady: noopWaitForTransactionsReady,
 		buildImage: image,
@@ -134,7 +137,7 @@ const bootForkMode = (runtime, identity, portBroker, paths, opts) => Effect.gen(
 	return {
 		resolved: makeResolvedNetwork({
 			mode: "fork",
-			chain,
+			chainId,
 			rpc: rpcUrl,
 			source: "default",
 			checkpoint: status.forkedAtCheckpoint,
@@ -143,7 +146,7 @@ const bootForkMode = (runtime, identity, portBroker, paths, opts) => Effect.gen(
 		client,
 		autoTickIntervalMs
 	};
-}).pipe(Effect.withSpan("devstack.plugin.sui.fork.boot", { attributes: { [SpanAttr.plugin]: "sui" } }));
+});
 const suiForkImageBuildContext = (rev = DEFAULT_SUI_FORK_REV) => ({
 	contextPath: fileURLToPath(new URL("../../../../images/", import.meta.url)),
 	dockerfile: "sui-fork/Dockerfile",
@@ -195,7 +198,7 @@ const resolveForkImage = (runtime, identity, opts) => Effect.gen(function* () {
 		...suiForkImageBuildContext(rev),
 		owner
 	});
-}).pipe(Effect.withSpan("devstack.plugin.sui.fork.resolveImage"));
+});
 const ensureForkContainer = (params) => Effect.gen(function* () {
 	const reusable = params.opts.ports === void 0 ? yield* findReusableForkPort(params.runtime, params.labels, params.containerName) : void 0;
 	const ports = reusable === void 0 ? [yield* allocateForkRpcPort(params.portBroker, params.opts.ports)] : [reusable];
@@ -300,7 +303,7 @@ const waitForForkReady = (sdkClient, readyTimeout) => Effect.gen(function* () {
 		probe: () => readForkStatus(sdkClient).pipe(Effect.as(true))
 	}).pipe(Effect.mapError((cause) => cause instanceof ProbeTimeoutError ? suiPluginError("fork-status-probe", `sui fork mode: ForkingService.GetStatus did not become ready within ${readyTimeoutMs}ms. Inspect the sui-fork container logs (\`docker logs\`); if the image is still building or the upstream checkpoint is large, raise the \`readyTimeout\` option.`, cause.lastError ?? cause.lastNotReady ?? cause) : suiPluginError("fork-status-probe", `sui fork mode: ForkingService.GetStatus probe failed: ${formatUnknownError(cause)}`, cause)));
 	return yield* readForkStatus(sdkClient);
-}).pipe(Effect.withSpan("devstack.plugin.sui.fork.waitForReady"));
+});
 const makeForkAdminSurface = (sdkClient) => ({
 	status: readForkStatus(sdkClient).pipe(Effect.map(({ checkpoint, clock }) => ({
 		checkpoint,

package/dist/plugins/sui/mode/fork.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"fork.mjs","names":["sharedFetchChainId"],"sources":["../../../../src/plugins/sui/mode/fork.ts"],"sourcesContent":["// Sui plugin — fork mode.\n\nimport { createHash } from 'node:crypto';\nimport { mkdir } from 'node:fs/promises';\nimport { join, resolve } from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nimport { Duration, Effect, type Scope } from 'effect';\n\nimport { SuiGrpcClient } from '@mysten/sui/grpc';\nimport { normalizeSuiAddress, normalizeSuiObjectId } from '@mysten/sui/utils';\n\nimport type {\n\tContainerHandle,\n\tContainerPortPublish,\n\tContainerRuntime,\n\tContainerRuntimeError,\n\tImageRef,\n\tPortBindingReconciliation,\n} from '../../../contracts/container-runtime.ts';\nimport type { ContainerLabelTuple } from '../../../contracts/snapshotable.ts';\nimport type { Identity } from '../../../substrate/identity.ts';\nimport { ensureManagedContainer } from '../../../substrate/runtime/managed-container.ts';\nimport { SpanAttr } from '../../../substrate/runtime/observability/spans.ts';\nimport type { StackPaths } from '../../../substrate/runtime/paths.ts';\nimport type { AllocatedPort, PortBroker } from '../../../substrate/runtime/port-broker/index.ts';\nimport { ProbeTimeoutError, waitForProbe } from '../../../substrate/runtime/probes.ts';\nimport { formatUnknownError } from '../../../substrate/runtime/format-unknown-error.ts';\nimport { setCurrentPluginPhase } from '../../../substrate/runtime/current-plugin.ts';\nimport { renderUrl, routedHostname } from '../../../substrate/runtime/routed-url.ts';\nimport { extractExecuteDigest } from '../../../substrate/runtime/sui-execute/index.ts';\nimport { resolveAutoTickIntervalMs, runAutoTickClock } from '../auto-tick.ts';\nimport { suiPluginError, type SuiConfigError, type SuiPluginError } from '../errors.ts';\nimport type { ResolvedSuiNetwork } from '../network-resolver.ts';\nimport { SUI_RPC_ENDPOINT_NAME, SUI_RPC_ENTRYPOINT_PORT } from '../routable.ts';\nimport { SuiSpans } from '../spans.ts';\nimport { acquireForkDataDirHolder, wrapWithForkGuard } from '../fork-orchestration.ts';\nimport {\n\tFORK_IMPERSONATION_GAS_BUDGET,\n\tverifyForkImpersonationSender,\n} from '../fork-transaction.ts';\nimport { DEFAULT_SUI_CLI_VERSION } from '../../../substrate/runtime/sui-move-build/index.ts';\nimport type { ForkAdminSurface, SuiClient } from './shared.ts';\nimport { toDockerHostGatewayUrl } from './shared.ts';\nimport {\n\tassembleSuiClient,\n\tfetchChainId as sharedFetchChainId,\n\tmakeResolvedNetwork,\n\tnoopWaitForTransactionsReady,\n} from './shared-boot.ts';\nimport type { SuiForkOptions } from './spec.ts';\n\n/** Default ready-probe timeout for fork-mode cold start. */\nexport const DEFAULT_FORK_READY_TIMEOUT = Duration.seconds(180);\n\n/** Default Sui repository revision used by the bundled `sui-fork` image build. */\nexport const DEFAULT_SUI_FORK_REV = '62ee6ada958cd61b3c8a4466dd33c9aba3cdff8a';\n\n/** Published prebuilt `sui-fork` image to pull instead of compiling from\n *  source. `undefined` until CI publishes one (e.g. `ghcr.io/mysten/sui-fork:<rev>`);\n *  overridable per-run via `DEVSTACK_SUI_FORK_IMAGE`. When set and the\n *  runtime can pull, `resolveForkImage` tries it first and falls back to a\n *  source build, sparing users the ~10-minute cold compile. */\nexport const DEFAULT_FORK_IMAGE_REF: string | undefined = undefined;\n\n/** Env var that overrides {@link DEFAULT_FORK_IMAGE_REF} for a single run. */\nexport const FORK_IMAGE_ENV_VAR = 'DEVSTACK_SUI_FORK_IMAGE';\n\nconst prebuiltForkImageRef = (): string | undefined => {\n\tconst fromEnv = process.env[FORK_IMAGE_ENV_VAR]?.trim();\n\treturn fromEnv !== undefined && fromEnv.length > 0 ? fromEnv : DEFAULT_FORK_IMAGE_REF;\n};\n\n/** Map upstream literal to the canonical \"live\" chain id known by wallet-standard / MVR. */\nexport const FORK_UPSTREAM_TO_KNOWN_NETWORK = {\n\tmainnet: 'sui:mainnet',\n\ttestnet: 'sui:testnet',\n\tdevnet: 'sui:devnet',\n} as const;\n\nexport const DEFAULT_FORK_HOST_RPC_PORT = 51002;\nexport const FORK_VALIDATOR_STOP_GRACE_SECONDS = 30;\n\n/** Default impersonation \"whale\" per upstream — a large-reserve address\n *  known to hold a big single SUI coin in the upstream's state, used as\n *  the fork faucet funding source when `faucet.whale` is omitted. `null`\n *  means no default is known (the faucet then requires an explicit\n *  `faucet.whale`). Validated at boot via `selectSufficientForkCoin`. */\nexport const FORK_DEFAULT_WHALE: Record<'mainnet' | 'testnet' | 'devnet', string | null> = {\n\t// Long-lived validator addresses each holding a large single SUI coin\n\t// (validated 2026-05-28). `selectSufficientForkCoin` re-queries the address\n\t// at the fork checkpoint at runtime, so a rotated coin self-heals; a\n\t// drained/retired address degrades gracefully — boot validation warns and\n\t// disables the default faucet. Override any of these with `faucet.whale`.\n\tmainnet: '0xbc7e7537564bd939b62e5b24477ac00ba8cef33ccec72d63090a080a1253b725', // ~273k SUI\n\ttestnet: '0xc397477d8b445e6295bc34e593b9a95d5d233cec1a8fe3740d0ab86012a460f6', // ~127k SUI\n\t// devnet resets periodically; this genesis validator may go stale after a\n\t// reset, at which point the default faucet disables itself until a\n\t// `faucet.whale` is supplied.\n\tdevnet: '0x4296747d0bd91c41b668702bdca0bf769a0e32db66982d986101e7975db55cbe', // ~30M SUI\n};\n\n/** The common per-account fund the fork faucet must be able to cover. Mirrors\n *  the account plugin's `DEFAULT_EPHEMERAL_FUND_MIST` (1 SUI) — kept local\n *  because account → sui already, so importing it here would cycle; a test\n *  pins the two together. */\nexport const FORK_FAUCET_DEFAULT_FUND_MIST = 1_000_000_000n;\n\n/** Floor a single whale SUI coin must clear at boot to enable the fork faucet:\n *  a default ephemeral fund (1 SUI) plus the impersonation gas budget. Set to\n *  match the per-request requirement for the default fund so a whale that\n *  passes boot can actually satisfy the first auto-fund. */\nexport const FORK_FAUCET_WHALE_MIN_COIN_MIST =\n\tFORK_FAUCET_DEFAULT_FUND_MIST + FORK_IMPERSONATION_GAS_BUDGET;\n\n/** Default per-request funding cap (MIST) — 1000 SUI. */\nexport const DEFAULT_FORK_FAUCET_PER_REQUEST_CAP_MIST = 1_000_000_000_000n;\n\n/** Resolved fork faucet funding source. */\nexport interface ResolvedForkWhale {\n\treadonly whale: string;\n\treadonly perRequestCapMist: bigint;\n\t/** `true` when the user set `faucet.whale` explicitly — a validation\n\t *  failure then hard-fails boot; a default whale only warns + disables\n\t *  the faucet so the fork still boots. */\n\treadonly explicit: boolean;\n}\n\n/** Resolve the fork faucet whale from options + per-upstream defaults,\n *  or `null` when the faucet is disabled / no whale is known. */\nexport const resolveForkWhale = (opts: SuiForkOptions): ResolvedForkWhale | null => {\n\tif (opts.faucet?.enabled === false) {\n\t\treturn null;\n\t}\n\tconst perRequestCapMist =\n\t\topts.faucet?.perRequestCapMist ?? DEFAULT_FORK_FAUCET_PER_REQUEST_CAP_MIST;\n\tconst explicit = opts.faucet?.whale?.trim();\n\tif (explicit !== undefined && explicit.length > 0) {\n\t\treturn { whale: normalizeSuiAddress(explicit), perRequestCapMist, explicit: true };\n\t}\n\tconst fallback = FORK_DEFAULT_WHALE[opts.upstream];\n\treturn fallback === null\n\t\t? null\n\t\t: { whale: normalizeSuiAddress(fallback), perRequestCapMist, explicit: false };\n};\n\n/** Inject the resolved faucet whale into the fork seed so its coins exist\n *  in fork state. MUST run before the data-dir key / container config\n *  hash are computed (both fold the seed) so enabling the faucet doesn't\n *  silently reuse a whale-less fork data dir. */\nexport const withForkFaucetSeed = (opts: SuiForkOptions): SuiForkOptions => {\n\tconst resolved = resolveForkWhale(opts);\n\tif (resolved === null) {\n\t\treturn opts;\n\t}\n\treturn {\n\t\t...opts,\n\t\tseed: {\n\t\t\t...(opts.seed ?? {}),\n\t\t\taddresses: [...(opts.seed?.addresses ?? []), resolved.whale],\n\t\t},\n\t};\n};\n\nconst DOCKER_PUBLISH_HOST = '0.0.0.0' as const;\nconst CONTAINER_RPC_PORT = SUI_RPC_ENTRYPOINT_PORT;\nconst FORK_CONTAINER_DATA_DIR = '/var/lib/sui-fork';\nconst PROBE_ATTEMPT_TIMEOUT_MS = 3_000;\n\n/** Resolved fork-mode boot artifacts. */\nexport interface ForkModeBootResult {\n\treadonly resolved: ResolvedSuiNetwork;\n\treadonly client: SuiClient;\n\treadonly autoTickIntervalMs: number | undefined;\n}\n\nexport const bootForkMode = (\n\truntime: ContainerRuntime,\n\tidentity: Identity,\n\tportBroker: PortBroker,\n\tpaths: StackPaths,\n\topts: SuiForkOptions,\n): Effect.Effect<ForkModeBootResult, SuiPluginError | SuiConfigError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tconst autoTickIntervalMs = yield* resolveAutoTickIntervalMs(opts.autoTick);\n\t\t// Fold the faucet whale into the seed BEFORE the data-dir key /\n\t\t// container config hash are derived, so enabling the faucet keys a\n\t\t// distinct fork state rather than reusing a whale-less data dir.\n\t\tconst seededOpts = withForkFaucetSeed(opts);\n\t\tconst image = yield* resolveForkImage(runtime, identity, opts);\n\t\tconst dataDir = yield* ensureForkDataDir(paths, seededOpts);\n\n\t\tconst labels: ContainerLabelTuple = {\n\t\t\tapp: identity.app,\n\t\t\tstack: identity.stack,\n\t\t\tplugin: 'sui',\n\t\t\trole: 'fork-validator',\n\t\t};\n\t\tconst containerName = `devstack-${identity.app}-${identity.stack}-sui-fork`;\n\t\tconst { handle, ports } = yield* ensureForkContainer({\n\t\t\truntime,\n\t\t\tportBroker,\n\t\t\timage,\n\t\t\tlabels,\n\t\t\tcontainerName,\n\t\t\tdataDir,\n\t\t\topts: seededOpts,\n\t\t});\n\n\t\tconst published = pickPublishedPort(ports, handle.ports);\n\t\tconst directRpcUrl = `http://127.0.0.1:${published.hostPort}`;\n\t\tconst rpcUrl = yield* routedSuiRpcUrl(identity);\n\t\tconst sdkClient = new SuiGrpcClient({ baseUrl: directRpcUrl, network: opts.upstream });\n\t\tconst readyTimeout = opts.readyTimeout ?? DEFAULT_FORK_READY_TIMEOUT;\n\n\t\tconst status = yield* waitForForkReady(sdkClient, readyTimeout).pipe(\n\t\t\tEffect.annotateLogs({ [SuiSpans.container]: handle.name }),\n\t\t);\n\t\tconst chain = yield* sharedFetchChainId(sdkClient, {\n\t\t\tspan: 'devstack.plugin.sui.fork.fetchChainId',\n\t\t});\n\n\t\tconst fork = makeForkAdminSurface(sdkClient);\n\t\tconst assembled = yield* assembleSuiClient({\n\t\t\tsdkClient,\n\t\t\tchain,\n\t\t\trpcUrl,\n\t\t\twaitForTransactionsReady: noopWaitForTransactionsReady,\n\t\t\tbuildImage: image,\n\t\t\thostGateway: {\n\t\t\t\trpcUrl: toDockerHostGatewayUrl(directRpcUrl),\n\t\t\t\tfaucetUrl: null,\n\t\t\t\tgraphqlUrl: null,\n\t\t\t},\n\t\t});\n\t\tconst client: SuiClient = {\n\t\t\t...assembled.client,\n\t\t\tsdk: wrapWithForkGuard(assembled.sdkShim),\n\t\t\tfork,\n\t\t};\n\n\t\tif (autoTickIntervalMs !== undefined) {\n\t\t\tyield* runAutoTickClock(fork, autoTickIntervalMs);\n\t\t}\n\n\t\treturn {\n\t\t\tresolved: makeResolvedNetwork({\n\t\t\t\tmode: 'fork',\n\t\t\t\tchain,\n\t\t\t\trpc: rpcUrl,\n\t\t\t\tsource: 'default',\n\t\t\t\tcheckpoint: status.forkedAtCheckpoint,\n\t\t\t\tforkUpstream: opts.upstream,\n\t\t\t}),\n\t\t\tclient,\n\t\t\tautoTickIntervalMs,\n\t\t};\n\t}).pipe(\n\t\tEffect.withSpan('devstack.plugin.sui.fork.boot', { attributes: { [SpanAttr.plugin]: 'sui' } }),\n\t);\n\nexport const suiForkImageBuildContext = (rev = DEFAULT_SUI_FORK_REV) => ({\n\t// `fileURLToPath` normalises the URL → host-path conversion across\n\t// platforms (Windows `file:///C:/...` → `C:\\...`). Reading\n\t// `.pathname` directly leaves the leading `/` on Windows drive paths.\n\tcontextPath: fileURLToPath(new URL('../../../../images/', import.meta.url)),\n\tdockerfile: 'sui-fork/Dockerfile',\n\tbuildArgs: { SUI_FORK_REV: rev, SUI_CLI_VERSION: DEFAULT_SUI_CLI_VERSION },\n});\n\n/** Pull a prebuilt fork image, narrating progress on the supervisor row.\n *  Fails with a `SuiPluginError` if the runtime can't pull or the pull errors. */\nconst pullForkImage = (\n\truntime: ContainerRuntime,\n\tpullRef: string,\n): Effect.Effect<ImageRef, SuiPluginError> =>\n\tEffect.gen(function* () {\n\t\tif (runtime.pullImage === undefined) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\tsuiPluginError(\n\t\t\t\t\t'image-build',\n\t\t\t\t\t`sui fork mode cannot pull image '${pullRef}' because the configured container runtime does not expose image pulls.`,\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\tyield* setCurrentPluginPhase(`pulling sui-fork image ${pullRef}…`);\n\t\treturn yield* runtime.pullImage(pullRef).pipe(\n\t\t\tEffect.mapError((cause) =>\n\t\t\t\tsuiPluginError(\n\t\t\t\t\t'image-build',\n\t\t\t\t\t`sui fork mode failed to pull image '${pullRef}': ${cause.reason}: ${cause.detail}`,\n\t\t\t\t\tcause,\n\t\t\t\t),\n\t\t\t),\n\t\t\tEffect.ensuring(setCurrentPluginPhase(null)),\n\t\t);\n\t});\n\n/** Build the bundled `sui-fork` image from source, narrating the cold\n *  compile so the row doesn't look hung for ~10 minutes on first run. */\nconst buildForkImage = (\n\truntime: ContainerRuntime,\n\tbuildCtx: Parameters<ContainerRuntime['ensureImage']>[0],\n): Effect.Effect<ImageRef, SuiPluginError> =>\n\tEffect.gen(function* () {\n\t\tyield* setCurrentPluginPhase(\n\t\t\t'building sui-fork image — first run compiles sui-fork from source (~10+ min); cached after',\n\t\t);\n\t\treturn yield* runtime.ensureImage(buildCtx).pipe(\n\t\t\tEffect.mapError((cause) =>\n\t\t\t\tsuiPluginError(\n\t\t\t\t\t'image-build',\n\t\t\t\t\t`sui fork image build failed: ${cause.reason}: ${cause.detail}`,\n\t\t\t\t\tcause,\n\t\t\t\t),\n\t\t\t),\n\t\t\tEffect.ensuring(setCurrentPluginPhase(null)),\n\t\t);\n\t});\n\nexport const resolveForkImage = (\n\truntime: ContainerRuntime,\n\tidentity: Identity,\n\topts: SuiForkOptions,\n): Effect.Effect<ImageRef, SuiPluginError> =>\n\tEffect.gen(function* () {\n\t\t// Explicit image override always wins.\n\t\tif (opts.image && 'pull' in opts.image) {\n\t\t\treturn yield* pullForkImage(runtime, opts.image.pull);\n\t\t}\n\t\tconst rev = opts.version ?? DEFAULT_SUI_FORK_REV;\n\t\tconst owner = {\n\t\t\tapp: identity.app,\n\t\t\tstack: identity.stack,\n\t\t\tplugin: 'sui',\n\t\t\trole: 'validator',\n\t\t} as const;\n\t\tif (opts.image && 'build' in opts.image) {\n\t\t\treturn yield* buildForkImage(runtime, {\n\t\t\t\tcontextPath: opts.image.build.context,\n\t\t\t\tdockerfile: opts.image.build.dockerfile ?? 'Dockerfile',\n\t\t\t\tbuildArgs: { SUI_FORK_REV: rev, SUI_CLI_VERSION: DEFAULT_SUI_CLI_VERSION },\n\t\t\t\towner,\n\t\t\t});\n\t\t}\n\t\t// No explicit image: prefer a prebuilt ref (env / published default) to\n\t\t// skip the cold source compile, falling back to building on any miss.\n\t\tconst prebuilt = prebuiltForkImageRef();\n\t\tif (prebuilt !== undefined && runtime.pullImage !== undefined) {\n\t\t\treturn yield* pullForkImage(runtime, prebuilt).pipe(\n\t\t\t\tEffect.catchTag('SuiPluginError', (cause) =>\n\t\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\t\tyield* Effect.logWarning(\n\t\t\t\t\t\t\t`sui fork mode: prebuilt image '${prebuilt}' unavailable (${cause.message}); building from source.`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\treturn yield* buildForkImage(runtime, { ...suiForkImageBuildContext(rev), owner });\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\treturn yield* buildForkImage(runtime, { ...suiForkImageBuildContext(rev), owner });\n\t}).pipe(Effect.withSpan('devstack.plugin.sui.fork.resolveImage'));\n\ninterface ForkContainerResult {\n\treadonly handle: ContainerHandle;\n\treadonly ports: ReadonlyArray<ContainerPortPublish>;\n}\n\nconst ensureForkContainer = (params: {\n\treadonly runtime: ContainerRuntime;\n\treadonly portBroker: PortBroker;\n\treadonly image: ImageRef;\n\treadonly labels: ContainerLabelTuple;\n\treadonly containerName: string;\n\treadonly dataDir: string;\n\treadonly opts: SuiForkOptions;\n}): Effect.Effect<ForkContainerResult, SuiPluginError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tconst reusable =\n\t\t\tparams.opts.ports === undefined\n\t\t\t\t? yield* findReusableForkPort(params.runtime, params.labels, params.containerName)\n\t\t\t\t: undefined;\n\t\tconst ports =\n\t\t\treusable === undefined\n\t\t\t\t? [yield* allocateForkRpcPort(params.portBroker, params.opts.ports)]\n\t\t\t\t: [reusable];\n\t\tconst reconciliation: PortBindingReconciliation =\n\t\t\treusable === undefined && params.opts.ports !== undefined ? 'exact' : 'adopt-existing';\n\t\tconst command = forkStartCommand(params.opts);\n\t\tconst handle = yield* ensureManagedContainer({\n\t\t\truntime: params.runtime,\n\t\t\tlabels: params.labels,\n\t\t\tspec: {\n\t\t\t\tname: params.containerName,\n\t\t\t\timage: params.image,\n\t\t\t\trecreate: 'on-config-change',\n\t\t\t\tconfigHash: forkContainerConfigHash(params.opts, params.dataDir, command),\n\t\t\t\tstopGraceSeconds: FORK_VALIDATOR_STOP_GRACE_SECONDS,\n\t\t\t\tports,\n\t\t\t\tportBindingReconciliation: reconciliation,\n\t\t\t\tmounts: [{ source: params.dataDir, target: FORK_CONTAINER_DATA_DIR }],\n\t\t\t\tcommand,\n\t\t\t},\n\t\t\tmapError: (cause) => cause,\n\t\t}).pipe(\n\t\t\tEffect.mapError((cause: ContainerRuntimeError) =>\n\t\t\t\tsuiPluginError(\n\t\t\t\t\t'container-start',\n\t\t\t\t\t`sui-fork container failed: ${cause.reason}: ${cause.detail}`,\n\t\t\t\t\tcause,\n\t\t\t\t),\n\t\t\t),\n\t\t);\n\t\treturn { handle, ports };\n\t});\n\nexport const forkStartCommand = (opts: SuiForkOptions): ReadonlyArray<string> => {\n\tconst seed = normalizeForkSeed(opts);\n\tconst command = [\n\t\t'start',\n\t\t'--network',\n\t\topts.upstream,\n\t\t'--data-dir',\n\t\tFORK_CONTAINER_DATA_DIR,\n\t\t'--rpc-addr',\n\t\t`0.0.0.0:${CONTAINER_RPC_PORT}`,\n\t];\n\tif (opts.checkpoint !== undefined) {\n\t\tcommand.push('--checkpoint', String(opts.checkpoint));\n\t}\n\tfor (const address of seed.addresses) {\n\t\tcommand.push('--address', address);\n\t}\n\tfor (const objectId of seed.objects) {\n\t\tcommand.push('--object', objectId);\n\t}\n\treturn command;\n};\n\nconst normalizeForkSeed = (opts: SuiForkOptions) => ({\n\taddresses: [\n\t\t...new Set((opts.seed?.addresses ?? []).map((address) => normalizeSuiAddress(address))),\n\t].sort(),\n\tobjects: [\n\t\t...new Set((opts.seed?.objects ?? []).map((objectId) => normalizeSuiObjectId(objectId))),\n\t].sort(),\n});\n\nconst forkContainerConfigHash = (\n\topts: SuiForkOptions,\n\tdataDir: string,\n\tcommand: ReadonlyArray<string>,\n): string =>\n\tcreateHash('sha256')\n\t\t.update(\n\t\t\tJSON.stringify({\n\t\t\t\tdataDir,\n\t\t\t\tcommand,\n\t\t\t\tversion: opts.version ?? DEFAULT_SUI_FORK_REV,\n\t\t\t\tports: opts.ports ?? null,\n\t\t\t}),\n\t\t)\n\t\t.digest('hex');\n\nconst allocateForkRpcPort = (\n\tportBroker: PortBroker,\n\toverride: Readonly<Record<number, number>> | undefined,\n): Effect.Effect<ContainerPortPublish, SuiPluginError, Scope.Scope> => {\n\tconst overridePort = override?.[CONTAINER_RPC_PORT];\n\tif (overridePort !== undefined) {\n\t\treturn Effect.succeed(portPublish(CONTAINER_RPC_PORT, overridePort));\n\t}\n\treturn portBroker\n\t\t.allocate({\n\t\t\towner: 'sui:fork-rpc',\n\t\t\tpreferredPort: DEFAULT_FORK_HOST_RPC_PORT,\n\t\t\tprobeHost: DOCKER_PUBLISH_HOST,\n\t\t})\n\t\t.pipe(\n\t\t\tEffect.catchTag('PortBrokerError', (cause) =>\n\t\t\t\tcause.reason === 'preferred-busy'\n\t\t\t\t\t? portBroker.allocate({ owner: 'sui:fork-rpc', probeHost: DOCKER_PUBLISH_HOST })\n\t\t\t\t\t: Effect.fail(cause),\n\t\t\t),\n\t\t\tEffect.map((allocated: AllocatedPort) => portPublish(CONTAINER_RPC_PORT, allocated.port)),\n\t\t\tEffect.mapError((cause) =>\n\t\t\t\tsuiPluginError(\n\t\t\t\t\t'port-allocate',\n\t\t\t\t\t`sui fork mode: failed to allocate RPC host port: ${cause.detail}`,\n\t\t\t\t\tcause,\n\t\t\t\t),\n\t\t\t),\n\t\t);\n};\n\nconst findReusableForkPort = (\n\truntime: ContainerRuntime,\n\tlabels: ContainerLabelTuple,\n\tcontainerName: string,\n): Effect.Effect<ContainerPortPublish | undefined, SuiPluginError> =>\n\truntime.inspectByLabels(labels).pipe(\n\t\tEffect.map((handles) =>\n\t\t\thandles\n\t\t\t\t.find((handle) => handle.name === containerName)\n\t\t\t\t?.ports?.find((port) => port.containerPort === CONTAINER_RPC_PORT),\n\t\t),\n\t\tEffect.mapError((cause) =>\n\t\t\tsuiPluginError(\n\t\t\t\t'container-start',\n\t\t\t\t`sui fork mode: failed to inspect existing fork container: ${cause.reason}: ${cause.detail}`,\n\t\t\t\tcause,\n\t\t\t),\n\t\t),\n\t);\n\nconst pickPublishedPort = (\n\trequested: ReadonlyArray<ContainerPortPublish>,\n\tactual: ReadonlyArray<ContainerPortPublish> | undefined,\n): ContainerPortPublish =>\n\tactual?.find((port) => port.containerPort === CONTAINER_RPC_PORT) ??\n\trequested.find((port) => port.containerPort === CONTAINER_RPC_PORT) ??\n\tportPublish(CONTAINER_RPC_PORT, DEFAULT_FORK_HOST_RPC_PORT);\n\nconst portPublish = (containerPort: number, hostPort: number): ContainerPortPublish => ({\n\tcontainerPort,\n\thostPort,\n\thostIp: DOCKER_PUBLISH_HOST,\n});\n\nexport const forkDataDirKey = (opts: SuiForkOptions): string =>\n\tcreateHash('sha256')\n\t\t.update(\n\t\t\tJSON.stringify({\n\t\t\t\tupstream: opts.upstream,\n\t\t\t\tcheckpoint: opts.checkpoint ?? null,\n\t\t\t\tversion: opts.version ?? DEFAULT_SUI_FORK_REV,\n\t\t\t\tseed: normalizeForkSeed(opts),\n\t\t\t}),\n\t\t)\n\t\t.digest('hex')\n\t\t.slice(0, 16);\n\n/** Bring the data dir into being and claim it against concurrent\n *  stacks via the holder protocol. The holder claim is scope-bound —\n *  it heartbeats for the stack's lifetime and releases on teardown. */\nconst ensureForkDataDir = (\n\tpaths: StackPaths,\n\topts: SuiForkOptions,\n): Effect.Effect<string, SuiPluginError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tconst dataDir = resolve(join(paths.stackRoot, 'sui-fork', forkDataDirKey(opts)));\n\t\tyield* Effect.tryPromise({\n\t\t\ttry: () => mkdir(dataDir, { recursive: true, mode: 0o700 }),\n\t\t\tcatch: (cause) =>\n\t\t\t\tsuiPluginError(\n\t\t\t\t\t'fork-data-dir',\n\t\t\t\t\t`sui fork mode: failed to create data directory ${dataDir}: ${formatUnknownError(cause)}`,\n\t\t\t\t\tcause,\n\t\t\t\t),\n\t\t});\n\t\tyield* acquireForkDataDirHolder(paths.stackLockFile, dataDir);\n\t\treturn dataDir;\n\t});\n\ninterface ForkStatus {\n\treadonly checkpoint: string;\n\treadonly clock: number;\n\treadonly forkedAtCheckpoint: string;\n}\n\nconst waitForForkReady = (\n\tsdkClient: SuiGrpcClient,\n\treadyTimeout: Duration.Duration,\n): Effect.Effect<ForkStatus, SuiPluginError> =>\n\tEffect.gen(function* () {\n\t\tconst readyTimeoutMs = Duration.toMillis(readyTimeout);\n\t\tyield* waitForProbe({\n\t\t\tlabel: 'sui.fork.rpc',\n\t\t\ttimeoutMs: readyTimeoutMs,\n\t\t\tintervalMs: 1_000,\n\t\t\tattemptTimeoutMs: PROBE_ATTEMPT_TIMEOUT_MS,\n\t\t\tprobe: () => readForkStatus(sdkClient).pipe(Effect.as(true)),\n\t\t}).pipe(\n\t\t\tEffect.mapError((cause) =>\n\t\t\t\tcause instanceof ProbeTimeoutError\n\t\t\t\t\t? suiPluginError(\n\t\t\t\t\t\t\t'fork-status-probe',\n\t\t\t\t\t\t\t`sui fork mode: ForkingService.GetStatus did not become ready within ${readyTimeoutMs}ms. ` +\n\t\t\t\t\t\t\t\t`Inspect the sui-fork container logs (\\`docker logs\\`); if the image is still ` +\n\t\t\t\t\t\t\t\t`building or the upstream checkpoint is large, raise the \\`readyTimeout\\` option.`,\n\t\t\t\t\t\t\tcause.lastError ?? cause.lastNotReady ?? cause,\n\t\t\t\t\t\t)\n\t\t\t\t\t: suiPluginError(\n\t\t\t\t\t\t\t'fork-status-probe',\n\t\t\t\t\t\t\t`sui fork mode: ForkingService.GetStatus probe failed: ${formatUnknownError(cause)}`,\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t),\n\t\t\t),\n\t\t);\n\t\treturn yield* readForkStatus(sdkClient);\n\t}).pipe(Effect.withSpan('devstack.plugin.sui.fork.waitForReady'));\n\nconst makeForkAdminSurface = (sdkClient: SuiGrpcClient): ForkAdminSurface => ({\n\tstatus: readForkStatus(sdkClient).pipe(\n\t\tEffect.map(({ checkpoint, clock }) => ({ checkpoint, clock })),\n\t),\n\tadvanceClock: (intervalMs) =>\n\t\tEffect.tryPromise({\n\t\t\ttry: () => sdkClient.forkingService.advanceClock({ durationMs: BigInt(intervalMs) }).response,\n\t\t\tcatch: (cause) =>\n\t\t\t\tsuiPluginError(\n\t\t\t\t\t'fork-advance-clock',\n\t\t\t\t\t`sui fork mode: advanceClock(${intervalMs}) failed: ${formatUnknownError(cause)}`,\n\t\t\t\t\tcause,\n\t\t\t\t),\n\t\t}).pipe(Effect.asVoid),\n\tadvanceCheckpoint: Effect.tryPromise({\n\t\ttry: () => sdkClient.forkingService.advanceCheckpoint({}).response,\n\t\tcatch: (cause) =>\n\t\t\tsuiPluginError(\n\t\t\t\t'fork-advance-checkpoint',\n\t\t\t\t`sui fork mode: advanceCheckpoint failed: ${formatUnknownError(cause)}`,\n\t\t\t\tcause,\n\t\t\t),\n\t}).pipe(Effect.asVoid),\n\timpersonate: (sender, tx) =>\n\t\tEffect.gen(function* () {\n\t\t\tif (!(tx instanceof Uint8Array)) {\n\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t'fork-impersonate',\n\t\t\t\t\t\t`sui fork mode: impersonate(${sender}) expected serialized transaction bytes.`,\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t}\n\t\t\tyield* verifyForkImpersonationSender(sender, tx);\n\t\t\tconst raw = yield* Effect.tryPromise({\n\t\t\t\ttry: () =>\n\t\t\t\t\tsdkClient.core.executeTransaction({\n\t\t\t\t\t\ttransaction: tx,\n\t\t\t\t\t\tsignatures: [],\n\t\t\t\t\t\tinclude: { effects: true, objectTypes: true },\n\t\t\t\t\t}),\n\t\t\t\tcatch: (cause) =>\n\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t'fork-impersonate',\n\t\t\t\t\t\t`sui fork mode: impersonate(${sender}) failed: ${formatUnknownError(cause)}`,\n\t\t\t\t\t\tcause,\n\t\t\t\t\t),\n\t\t\t});\n\t\t\tconst digest = extractExecuteDigest(raw);\n\t\t\tif (digest === undefined) {\n\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t'fork-impersonate',\n\t\t\t\t\t\t`sui fork mode: impersonate(${sender}) returned no transaction digest.`,\n\t\t\t\t\t\traw,\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn { digest, success: !isFailedTransaction(raw), raw };\n\t\t}),\n});\n\nconst readForkStatus = (sdkClient: SuiGrpcClient): Effect.Effect<ForkStatus, SuiPluginError> =>\n\tEffect.tryPromise({\n\t\ttry: async () => {\n\t\t\tconst response = await sdkClient.forkingService.getStatus({}).response;\n\t\t\treturn {\n\t\t\t\tcheckpoint: response.checkpointSequenceNumber.toString(),\n\t\t\t\tclock: Number(response.timestampMs),\n\t\t\t\tforkedAtCheckpoint: response.forkedAtCheckpoint.toString(),\n\t\t\t};\n\t\t},\n\t\tcatch: (cause) =>\n\t\t\tsuiPluginError(\n\t\t\t\t'fork-status-probe',\n\t\t\t\t`sui fork mode: GetStatus failed: ${formatUnknownError(cause)}`,\n\t\t\t\tcause,\n\t\t\t),\n\t});\n\nconst routedSuiRpcUrl = (identity: Identity): Effect.Effect<string, SuiPluginError> =>\n\troutedHostname(identity, SUI_RPC_ENDPOINT_NAME).pipe(\n\t\tEffect.map((hostname) =>\n\t\t\trenderUrl({ protocol: 'http', hostname, port: SUI_RPC_ENTRYPOINT_PORT }),\n\t\t),\n\t\tEffect.mapError((cause) =>\n\t\t\tsuiPluginError(\n\t\t\t\t'container-start',\n\t\t\t\t`sui fork mode: failed to construct router RPC URL: ${cause.detail}`,\n\t\t\t\tcause,\n\t\t\t),\n\t\t),\n\t);\n\nconst isFailedTransaction = (raw: unknown): boolean =>\n\t(raw as { readonly $kind?: string }).$kind === 'FailedTransaction';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAqDA,MAAa,6BAA6B,SAAS,QAAQ,IAAI;;AAG/D,MAAa,uBAAuB;;AAUpC,MAAa,qBAAqB;AAElC,MAAM,6BAAiD;CACtD,MAAM,UAAU,QAAQ,IAAI,qBAAqB,MAAM;AACvD,QAAO,YAAY,KAAA,KAAa,QAAQ,SAAS,IAAI,UAAA,KAAA;;AAUtD,MAAa,6BAA6B;;;;;;AAQ1C,MAAa,qBAA8E;CAM1F,SAAS;CACT,SAAS;CAIT,QAAQ;CACR;;;;;AAYD,MAAa,kCACZ,cAAgC;;;AAiBjC,MAAa,oBAAoB,SAAmD;AACnF,KAAI,KAAK,QAAQ,YAAY,MAC5B,QAAO;CAER,MAAM,oBACL,KAAK,QAAQ,qBAAA;CACd,MAAM,WAAW,KAAK,QAAQ,OAAO,MAAM;AAC3C,KAAI,aAAa,KAAA,KAAa,SAAS,SAAS,EAC/C,QAAO;EAAE,OAAO,oBAAoB,SAAS;EAAE;EAAmB,UAAU;EAAM;CAEnF,MAAM,WAAW,mBAAmB,KAAK;AACzC,QAAO,aAAa,OACjB,OACA;EAAE,OAAO,oBAAoB,SAAS;EAAE;EAAmB,UAAU;EAAO;;;;;;AAOhF,MAAa,sBAAsB,SAAyC;CAC3E,MAAM,WAAW,iBAAiB,KAAK;AACvC,KAAI,aAAa,KAChB,QAAO;AAER,QAAO;EACN,GAAG;EACH,MAAM;GACL,GAAI,KAAK,QAAQ,EAAE;GACnB,WAAW,CAAC,GAAI,KAAK,MAAM,aAAa,EAAE,EAAG,SAAS,MAAM;GAC5D;EACD;;AAGF,MAAM,sBAAsB;AAC5B,MAAM,qBAAqB;AAC3B,MAAM,0BAA0B;AAChC,MAAM,2BAA2B;AASjC,MAAa,gBACZ,SACA,UACA,YACA,OACA,SAEA,OAAO,IAAI,aAAa;CACvB,MAAM,qBAAqB,OAAO,0BAA0B,KAAK,SAAS;CAI1E,MAAM,aAAa,mBAAmB,KAAK;CAC3C,MAAM,QAAQ,OAAO,iBAAiB,SAAS,UAAU,KAAK;CAC9D,MAAM,UAAU,OAAO,kBAAkB,OAAO,WAAW;CAS3D,MAAM,EAAE,QAAQ,UAAU,OAAO,oBAAoB;EACpD;EACA;EACA;EACA,QAAA;GAVA,KAAK,SAAS;GACd,OAAO,SAAS;GAChB,QAAQ;GACR,MAAM;GAOA;EACN,eAAA,YANiC,SAAS,IAAI,GAAG,SAAS,MAAM;EAOhE;EACA,MAAM;EACN,CAAC;CAGF,MAAM,eAAe,oBADH,kBAAkB,OAAO,OAAO,MACA,CAAC;CACnD,MAAM,SAAS,OAAO,gBAAgB,SAAS;CAC/C,MAAM,YAAY,IAAI,cAAc;EAAE,SAAS;EAAc,SAAS,KAAK;EAAU,CAAC;CAGtF,MAAM,SAAS,OAAO,iBAAiB,WAFlB,KAAK,gBAAgB,2BAEqB,CAAC,KAC/D,OAAO,aAAa,GAAG,SAAS,YAAY,OAAO,MAAM,CAAC,CAC1D;CACD,MAAM,QAAQ,OAAOA,aAAmB,WAAW,EAClD,MAAM,yCACN,CAAC;CAEF,MAAM,OAAO,qBAAqB,UAAU;CAC5C,MAAM,YAAY,OAAO,kBAAkB;EAC1C;EACA;EACA;EACA,0BAA0B;EAC1B,YAAY;EACZ,aAAa;GACZ,QAAQ,uBAAuB,aAAa;GAC5C,WAAW;GACX,YAAY;GACZ;EACD,CAAC;CACF,MAAM,SAAoB;EACzB,GAAG,UAAU;EACb,KAAK,kBAAkB,UAAU,QAAQ;EACzC;EACA;AAED,KAAI,uBAAuB,KAAA,EAC1B,QAAO,iBAAiB,MAAM,mBAAmB;AAGlD,QAAO;EACN,UAAU,oBAAoB;GAC7B,MAAM;GACN;GACA,KAAK;GACL,QAAQ;GACR,YAAY,OAAO;GACnB,cAAc,KAAK;GACnB,CAAC;EACF;EACA;EACA;EACA,CAAC,KACF,OAAO,SAAS,iCAAiC,EAAE,YAAY,GAAG,SAAS,SAAS,OAAO,EAAE,CAAC,CAC9F;AAEF,MAAa,4BAA4B,MAAM,0BAA0B;CAIxE,aAAa,cAAc,IAAI,IAAI,uBAAuB,OAAO,KAAK,IAAI,CAAC;CAC3E,YAAY;CACZ,WAAW;EAAE,cAAc;EAAK,iBAAiB;EAAyB;CAC1E;;;AAID,MAAM,iBACL,SACA,YAEA,OAAO,IAAI,aAAa;AACvB,KAAI,QAAQ,cAAc,KAAA,EACzB,QAAO,OAAO,OAAO,KACpB,eACC,eACA,oCAAoC,QAAQ,yEAC5C,CACD;AAEF,QAAO,sBAAsB,0BAA0B,QAAQ,GAAG;AAClE,QAAO,OAAO,QAAQ,UAAU,QAAQ,CAAC,KACxC,OAAO,UAAU,UAChB,eACC,eACA,uCAAuC,QAAQ,KAAK,MAAM,OAAO,IAAI,MAAM,UAC3E,MACA,CACD,EACD,OAAO,SAAS,sBAAsB,KAAK,CAAC,CAC5C;EACA;;;AAIH,MAAM,kBACL,SACA,aAEA,OAAO,IAAI,aAAa;AACvB,QAAO,sBACN,6FACA;AACD,QAAO,OAAO,QAAQ,YAAY,SAAS,CAAC,KAC3C,OAAO,UAAU,UAChB,eACC,eACA,gCAAgC,MAAM,OAAO,IAAI,MAAM,UACvD,MACA,CACD,EACD,OAAO,SAAS,sBAAsB,KAAK,CAAC,CAC5C;EACA;AAEH,MAAa,oBACZ,SACA,UACA,SAEA,OAAO,IAAI,aAAa;AAEvB,KAAI,KAAK,SAAS,UAAU,KAAK,MAChC,QAAO,OAAO,cAAc,SAAS,KAAK,MAAM,KAAK;CAEtD,MAAM,MAAM,KAAK,WAAA;CACjB,MAAM,QAAQ;EACb,KAAK,SAAS;EACd,OAAO,SAAS;EAChB,QAAQ;EACR,MAAM;EACN;AACD,KAAI,KAAK,SAAS,WAAW,KAAK,MACjC,QAAO,OAAO,eAAe,SAAS;EACrC,aAAa,KAAK,MAAM,MAAM;EAC9B,YAAY,KAAK,MAAM,MAAM,cAAc;EAC3C,WAAW;GAAE,cAAc;GAAK,iBAAiB;GAAyB;EAC1E;EACA,CAAC;CAIH,MAAM,WAAW,sBAAsB;AACvC,KAAI,aAAa,KAAA,KAAa,QAAQ,cAAc,KAAA,EACnD,QAAO,OAAO,cAAc,SAAS,SAAS,CAAC,KAC9C,OAAO,SAAS,mBAAmB,UAClC,OAAO,IAAI,aAAa;AACvB,SAAO,OAAO,WACb,kCAAkC,SAAS,iBAAiB,MAAM,QAAQ,0BAC1E;AACD,SAAO,OAAO,eAAe,SAAS;GAAE,GAAG,yBAAyB,IAAI;GAAE;GAAO,CAAC;GACjF,CACF,CACD;AAEF,QAAO,OAAO,eAAe,SAAS;EAAE,GAAG,yBAAyB,IAAI;EAAE;EAAO,CAAC;EACjF,CAAC,KAAK,OAAO,SAAS,wCAAwC,CAAC;AAOlE,MAAM,uBAAuB,WAS5B,OAAO,IAAI,aAAa;CACvB,MAAM,WACL,OAAO,KAAK,UAAU,KAAA,IACnB,OAAO,qBAAqB,OAAO,SAAS,OAAO,QAAQ,OAAO,cAAc,GAChF,KAAA;CACJ,MAAM,QACL,aAAa,KAAA,IACV,CAAC,OAAO,oBAAoB,OAAO,YAAY,OAAO,KAAK,MAAM,CAAC,GAClE,CAAC,SAAS;CACd,MAAM,iBACL,aAAa,KAAA,KAAa,OAAO,KAAK,UAAU,KAAA,IAAY,UAAU;CACvE,MAAM,UAAU,iBAAiB,OAAO,KAAK;AAyB7C,QAAO;EAAE,QAAA,OAxBa,uBAAuB;GAC5C,SAAS,OAAO;GAChB,QAAQ,OAAO;GACf,MAAM;IACL,MAAM,OAAO;IACb,OAAO,OAAO;IACd,UAAU;IACV,YAAY,wBAAwB,OAAO,MAAM,OAAO,SAAS,QAAQ;IACzE,kBAAA;IACA;IACA,2BAA2B;IAC3B,QAAQ,CAAC;KAAE,QAAQ,OAAO;KAAS,QAAQ;KAAyB,CAAC;IACrE;IACA;GACD,WAAW,UAAU;GACrB,CAAC,CAAC,KACF,OAAO,UAAU,UAChB,eACC,mBACA,8BAA8B,MAAM,OAAO,IAAI,MAAM,UACrD,MACA,CACD,CACD;EACgB;EAAO;EACvB;AAEH,MAAa,oBAAoB,SAAgD;CAChF,MAAM,OAAO,kBAAkB,KAAK;CACpC,MAAM,UAAU;EACf;EACA;EACA,KAAK;EACL;EACA;EACA;EACA,WAAW;EACX;AACD,KAAI,KAAK,eAAe,KAAA,EACvB,SAAQ,KAAK,gBAAgB,OAAO,KAAK,WAAW,CAAC;AAEtD,MAAK,MAAM,WAAW,KAAK,UAC1B,SAAQ,KAAK,aAAa,QAAQ;AAEnC,MAAK,MAAM,YAAY,KAAK,QAC3B,SAAQ,KAAK,YAAY,SAAS;AAEnC,QAAO;;AAGR,MAAM,qBAAqB,UAA0B;CACpD,WAAW,CACV,GAAG,IAAI,KAAK,KAAK,MAAM,aAAa,EAAE,EAAE,KAAK,YAAY,oBAAoB,QAAQ,CAAC,CAAC,CACvF,CAAC,MAAM;CACR,SAAS,CACR,GAAG,IAAI,KAAK,KAAK,MAAM,WAAW,EAAE,EAAE,KAAK,aAAa,qBAAqB,SAAS,CAAC,CAAC,CACxF,CAAC,MAAM;CACR;AAED,MAAM,2BACL,MACA,SACA,YAEA,WAAW,SAAS,CAClB,OACA,KAAK,UAAU;CACd;CACA;CACA,SAAS,KAAK,WAAA;CACd,OAAO,KAAK,SAAS;CACrB,CAAC,CACF,CACA,OAAO,MAAM;AAEhB,MAAM,uBACL,YACA,aACsE;CACtE,MAAM,eAAe,WAAW;AAChC,KAAI,iBAAiB,KAAA,EACpB,QAAO,OAAO,QAAQ,YAAY,oBAAoB,aAAa,CAAC;AAErE,QAAO,WACL,SAAS;EACT,OAAO;EACP,eAAe;EACf,WAAW;EACX,CAAC,CACD,KACA,OAAO,SAAS,oBAAoB,UACnC,MAAM,WAAW,mBACd,WAAW,SAAS;EAAE,OAAO;EAAgB,WAAW;EAAqB,CAAC,GAC9E,OAAO,KAAK,MAAM,CACrB,EACD,OAAO,KAAK,cAA6B,YAAY,oBAAoB,UAAU,KAAK,CAAC,EACzF,OAAO,UAAU,UAChB,eACC,iBACA,oDAAoD,MAAM,UAC1D,MACA,CACD,CACD;;AAGH,MAAM,wBACL,SACA,QACA,kBAEA,QAAQ,gBAAgB,OAAO,CAAC,KAC/B,OAAO,KAAK,YACX,QACE,MAAM,WAAW,OAAO,SAAS,cAAc,EAC9C,OAAO,MAAM,SAAS,KAAK,kBAAkB,mBAAmB,CACnE,EACD,OAAO,UAAU,UAChB,eACC,mBACA,6DAA6D,MAAM,OAAO,IAAI,MAAM,UACpF,MACA,CACD,CACD;AAEF,MAAM,qBACL,WACA,WAEA,QAAQ,MAAM,SAAS,KAAK,kBAAkB,mBAAmB,IACjE,UAAU,MAAM,SAAS,KAAK,kBAAkB,mBAAmB,IACnE,YAAY,oBAAA,MAA+C;AAE5D,MAAM,eAAe,eAAuB,cAA4C;CACvF;CACA;CACA,QAAQ;CACR;AAED,MAAa,kBAAkB,SAC9B,WAAW,SAAS,CAClB,OACA,KAAK,UAAU;CACd,UAAU,KAAK;CACf,YAAY,KAAK,cAAc;CAC/B,SAAS,KAAK,WAAA;CACd,MAAM,kBAAkB,KAAK;CAC7B,CAAC,CACF,CACA,OAAO,MAAM,CACb,MAAM,GAAG,GAAG;;;;AAKf,MAAM,qBACL,OACA,SAEA,OAAO,IAAI,aAAa;CACvB,MAAM,UAAU,QAAQ,KAAK,MAAM,WAAW,YAAY,eAAe,KAAK,CAAC,CAAC;AAChF,QAAO,OAAO,WAAW;EACxB,WAAW,MAAM,SAAS;GAAE,WAAW;GAAM,MAAM;GAAO,CAAC;EAC3D,QAAQ,UACP,eACC,iBACA,kDAAkD,QAAQ,IAAI,mBAAmB,MAAM,IACvF,MACA;EACF,CAAC;AACF,QAAO,yBAAyB,MAAM,eAAe,QAAQ;AAC7D,QAAO;EACN;AAQH,MAAM,oBACL,WACA,iBAEA,OAAO,IAAI,aAAa;CACvB,MAAM,iBAAiB,SAAS,SAAS,aAAa;AACtD,QAAO,aAAa;EACnB,OAAO;EACP,WAAW;EACX,YAAY;EACZ,kBAAkB;EAClB,aAAa,eAAe,UAAU,CAAC,KAAK,OAAO,GAAG,KAAK,CAAC;EAC5D,CAAC,CAAC,KACF,OAAO,UAAU,UAChB,iBAAiB,oBACd,eACA,qBACA,uEAAuE,eAAe,oKAGtF,MAAM,aAAa,MAAM,gBAAgB,MACzC,GACA,eACA,qBACA,yDAAyD,mBAAmB,MAAM,IAClF,MACA,CACH,CACD;AACD,QAAO,OAAO,eAAe,UAAU;EACtC,CAAC,KAAK,OAAO,SAAS,wCAAwC,CAAC;AAElE,MAAM,wBAAwB,eAAgD;CAC7E,QAAQ,eAAe,UAAU,CAAC,KACjC,OAAO,KAAK,EAAE,YAAY,aAAa;EAAE;EAAY;EAAO,EAAE,CAC9D;CACD,eAAe,eACd,OAAO,WAAW;EACjB,WAAW,UAAU,eAAe,aAAa,EAAE,YAAY,OAAO,WAAW,EAAE,CAAC,CAAC;EACrF,QAAQ,UACP,eACC,sBACA,+BAA+B,WAAW,YAAY,mBAAmB,MAAM,IAC/E,MACA;EACF,CAAC,CAAC,KAAK,OAAO,OAAO;CACvB,mBAAmB,OAAO,WAAW;EACpC,WAAW,UAAU,eAAe,kBAAkB,EAAE,CAAC,CAAC;EAC1D,QAAQ,UACP,eACC,2BACA,4CAA4C,mBAAmB,MAAM,IACrE,MACA;EACF,CAAC,CAAC,KAAK,OAAO,OAAO;CACtB,cAAc,QAAQ,OACrB,OAAO,IAAI,aAAa;AACvB,MAAI,EAAE,cAAc,YACnB,QAAO,OAAO,OAAO,KACpB,eACC,oBACA,8BAA8B,OAAO,0CACrC,CACD;AAEF,SAAO,8BAA8B,QAAQ,GAAG;EAChD,MAAM,MAAM,OAAO,OAAO,WAAW;GACpC,WACC,UAAU,KAAK,mBAAmB;IACjC,aAAa;IACb,YAAY,EAAE;IACd,SAAS;KAAE,SAAS;KAAM,aAAa;KAAM;IAC7C,CAAC;GACH,QAAQ,UACP,eACC,oBACA,8BAA8B,OAAO,YAAY,mBAAmB,MAAM,IAC1E,MACA;GACF,CAAC;EACF,MAAM,SAAS,qBAAqB,IAAI;AACxC,MAAI,WAAW,KAAA,EACd,QAAO,OAAO,OAAO,KACpB,eACC,oBACA,8BAA8B,OAAO,oCACrC,IACA,CACD;AAEF,SAAO;GAAE;GAAQ,SAAS,CAAC,oBAAoB,IAAI;GAAE;GAAK;GACzD;CACH;AAED,MAAM,kBAAkB,cACvB,OAAO,WAAW;CACjB,KAAK,YAAY;EAChB,MAAM,WAAW,MAAM,UAAU,eAAe,UAAU,EAAE,CAAC,CAAC;AAC9D,SAAO;GACN,YAAY,SAAS,yBAAyB,UAAU;GACxD,OAAO,OAAO,SAAS,YAAY;GACnC,oBAAoB,SAAS,mBAAmB,UAAU;GAC1D;;CAEF,QAAQ,UACP,eACC,qBACA,oCAAoC,mBAAmB,MAAM,IAC7D,MACA;CACF,CAAC;AAEH,MAAM,mBAAmB,aACxB,eAAe,UAAA,MAAgC,CAAC,KAC/C,OAAO,KAAK,aACX,UAAU;CAAE,UAAU;CAAQ;CAAU,MAAM;CAAyB,CAAC,CACxE,EACD,OAAO,UAAU,UAChB,eACC,mBACA,sDAAsD,MAAM,UAC5D,MACA,CACD,CACD;AAEF,MAAM,uBAAuB,QAC3B,IAAoC,UAAU"}
+{"version":3,"file":"fork.mjs","names":["sharedFetchChainId"],"sources":["../../../../src/plugins/sui/mode/fork.ts"],"sourcesContent":["// Sui plugin — fork mode.\n\nimport { createHash } from 'node:crypto';\nimport { mkdir } from 'node:fs/promises';\nimport { join, resolve } from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nimport { Duration, Effect, type Scope } from 'effect';\n\nimport { SuiGrpcClient } from '@mysten/sui/grpc';\nimport { normalizeSuiAddress, normalizeSuiObjectId } from '@mysten/sui/utils';\n\nimport type {\n\tContainerHandle,\n\tContainerPortPublish,\n\tContainerRuntime,\n\tContainerRuntimeError,\n\tImageRef,\n\tPortBindingReconciliation,\n} from '../../../contracts/container-runtime.ts';\nimport type { ContainerLabelTuple } from '../../../contracts/snapshotable.ts';\nimport type { Identity } from '../../../substrate/identity.ts';\nimport { ensureManagedContainer } from '../../../substrate/runtime/managed-container.ts';\nimport type { StackPaths } from '../../../substrate/runtime/paths.ts';\nimport type { AllocatedPort, PortBroker } from '../../../substrate/runtime/port-broker/index.ts';\nimport { ProbeTimeoutError, waitForProbe } from '../../../substrate/runtime/probes.ts';\nimport { formatUnknownError } from '../../../substrate/runtime/format-unknown-error.ts';\nimport { setCurrentPluginPhase } from '../../../substrate/runtime/current-plugin.ts';\nimport { renderUrl, routedHostname } from '../../../substrate/runtime/routed-url.ts';\nimport { extractExecuteDigest } from '../exec/index.ts';\nimport { resolveAutoTickIntervalMs, runAutoTickClock } from '../auto-tick.ts';\nimport { suiPluginError, type SuiConfigError, type SuiPluginError } from '../errors.ts';\nimport type { ResolvedSuiNetwork } from '../network-resolver.ts';\nimport { SUI_RPC_ENDPOINT_NAME, SUI_RPC_ENTRYPOINT_PORT } from '../routable.ts';\nimport { SuiLogAttr } from '../log-attrs.ts';\nimport { acquireForkDataDirHolder, wrapWithForkGuard } from '../fork-orchestration.ts';\nimport {\n\tFORK_IMPERSONATION_GAS_BUDGET,\n\tverifyForkImpersonationSender,\n} from '../fork-transaction.ts';\nimport { DEFAULT_SUI_CLI_VERSION } from '../move/index.ts';\nimport type { ForkAdminSurface, SuiClient } from './shared.ts';\nimport { toDockerHostGatewayUrl } from './shared.ts';\nimport {\n\tassembleSuiClient,\n\tfetchChainId as sharedFetchChainId,\n\tmakeResolvedNetwork,\n\tnoopWaitForTransactionsReady,\n} from './shared-boot.ts';\nimport type { SuiForkOptions } from './spec.ts';\n\n/** Default ready-probe timeout for fork-mode cold start. */\nexport const DEFAULT_FORK_READY_TIMEOUT = Duration.seconds(180);\n\n/** Default Sui repository revision used by the bundled `sui-fork` image build. */\nexport const DEFAULT_SUI_FORK_REV = '62ee6ada958cd61b3c8a4466dd33c9aba3cdff8a';\n\n/** Env var that supplies a prebuilt `sui-fork` image to pull for a single\n *  run (e.g. `ghcr.io/mysten/sui-fork:<rev>`). When set and the runtime can\n *  pull, `resolveForkImage` tries it first and falls back to a source build,\n *  sparing users the ~10-minute cold compile. No prebuilt default ships\n *  today, so absent this env var the fork always builds from source. */\nexport const FORK_IMAGE_ENV_VAR = 'DEVSTACK_SUI_FORK_IMAGE';\n\nconst prebuiltForkImageRef = (): string | undefined => {\n\tconst fromEnv = process.env[FORK_IMAGE_ENV_VAR]?.trim();\n\treturn fromEnv !== undefined && fromEnv.length > 0 ? fromEnv : undefined;\n};\n\nexport const DEFAULT_FORK_HOST_RPC_PORT = 51002;\nexport const FORK_VALIDATOR_STOP_GRACE_SECONDS = 30;\n\n/** Default impersonation \"whale\" per upstream — a large-reserve address\n *  known to hold a big single SUI coin in the upstream's state, used as\n *  the fork faucet funding source when `faucet.whale` is omitted. `null`\n *  means no default is known (the faucet then requires an explicit\n *  `faucet.whale`). Validated at boot via `selectSufficientForkCoin`. */\nexport const FORK_DEFAULT_WHALE: Record<'mainnet' | 'testnet' | 'devnet', string | null> = {\n\t// Long-lived validator addresses each holding a large single SUI coin\n\t// (validated 2026-05-28). `selectSufficientForkCoin` re-queries the address\n\t// at the fork checkpoint at runtime, so a rotated coin self-heals; a\n\t// drained/retired address degrades gracefully — boot validation warns and\n\t// disables the default faucet. Override any of these with `faucet.whale`.\n\tmainnet: '0xbc7e7537564bd939b62e5b24477ac00ba8cef33ccec72d63090a080a1253b725', // ~273k SUI\n\ttestnet: '0xc397477d8b445e6295bc34e593b9a95d5d233cec1a8fe3740d0ab86012a460f6', // ~127k SUI\n\t// devnet resets periodically; this genesis validator may go stale after a\n\t// reset, at which point the default faucet disables itself until a\n\t// `faucet.whale` is supplied.\n\tdevnet: '0x4296747d0bd91c41b668702bdca0bf769a0e32db66982d986101e7975db55cbe', // ~30M SUI\n};\n\n/** The common per-account fund the fork faucet must be able to cover. Mirrors\n *  the account plugin's `DEFAULT_EPHEMERAL_FUND_MIST` (1 SUI) — kept local\n *  because account → sui already, so importing it here would cycle; a test\n *  pins the two together. */\nexport const FORK_FAUCET_DEFAULT_FUND_MIST = 1_000_000_000n;\n\n/** Floor a single whale SUI coin must clear at boot to enable the fork faucet:\n *  a default ephemeral fund (1 SUI) plus the impersonation gas budget. Set to\n *  match the per-request requirement for the default fund so a whale that\n *  passes boot can actually satisfy the first auto-fund. */\nexport const FORK_FAUCET_WHALE_MIN_COIN_MIST =\n\tFORK_FAUCET_DEFAULT_FUND_MIST + FORK_IMPERSONATION_GAS_BUDGET;\n\n/** Default per-request funding cap (MIST) — 1000 SUI. */\nexport const DEFAULT_FORK_FAUCET_PER_REQUEST_CAP_MIST = 1_000_000_000_000n;\n\n/** Resolved fork faucet funding source. */\nexport interface ResolvedForkWhale {\n\treadonly whale: string;\n\treadonly perRequestCapMist: bigint;\n\t/** `true` when the user set `faucet.whale` explicitly — a validation\n\t *  failure then hard-fails boot; a default whale only warns + disables\n\t *  the faucet so the fork still boots. */\n\treadonly explicit: boolean;\n}\n\n/** Resolve the fork faucet whale from options + per-upstream defaults,\n *  or `null` when the faucet is disabled / no whale is known. */\nexport const resolveForkWhale = (opts: SuiForkOptions): ResolvedForkWhale | null => {\n\tif (opts.faucet?.enabled === false) {\n\t\treturn null;\n\t}\n\tconst perRequestCapMist =\n\t\topts.faucet?.perRequestCapMist ?? DEFAULT_FORK_FAUCET_PER_REQUEST_CAP_MIST;\n\tconst explicit = opts.faucet?.whale?.trim();\n\tif (explicit !== undefined && explicit.length > 0) {\n\t\treturn { whale: normalizeSuiAddress(explicit), perRequestCapMist, explicit: true };\n\t}\n\tconst fallback = FORK_DEFAULT_WHALE[opts.upstream];\n\treturn fallback === null\n\t\t? null\n\t\t: { whale: normalizeSuiAddress(fallback), perRequestCapMist, explicit: false };\n};\n\n/** Inject the resolved faucet whale into the fork seed so its coins exist\n *  in fork state. MUST run before the data-dir key / container config\n *  hash are computed (both fold the seed) so enabling the faucet doesn't\n *  silently reuse a whale-less fork data dir. */\nexport const withForkFaucetSeed = (opts: SuiForkOptions): SuiForkOptions => {\n\tconst resolved = resolveForkWhale(opts);\n\tif (resolved === null) {\n\t\treturn opts;\n\t}\n\treturn {\n\t\t...opts,\n\t\tseed: {\n\t\t\t...opts.seed,\n\t\t\taddresses: [...(opts.seed?.addresses ?? []), resolved.whale],\n\t\t},\n\t};\n};\n\nconst DOCKER_PUBLISH_HOST = '0.0.0.0' as const;\nconst CONTAINER_RPC_PORT = SUI_RPC_ENTRYPOINT_PORT;\nconst FORK_CONTAINER_DATA_DIR = '/var/lib/sui-fork';\nconst PROBE_ATTEMPT_TIMEOUT_MS = 3_000;\n\n/** Resolved fork-mode boot artifacts. */\nexport interface ForkModeBootResult {\n\treadonly resolved: ResolvedSuiNetwork;\n\treadonly client: SuiClient;\n\treadonly autoTickIntervalMs: number | undefined;\n}\n\nexport const bootForkMode = (\n\truntime: ContainerRuntime,\n\tidentity: Identity,\n\tportBroker: PortBroker,\n\tpaths: StackPaths,\n\topts: SuiForkOptions,\n): Effect.Effect<ForkModeBootResult, SuiPluginError | SuiConfigError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tconst autoTickIntervalMs = yield* resolveAutoTickIntervalMs(opts.autoTick);\n\t\t// Fold the faucet whale into the seed BEFORE the data-dir key /\n\t\t// container config hash are derived, so enabling the faucet keys a\n\t\t// distinct fork state rather than reusing a whale-less data dir.\n\t\tconst seededOpts = withForkFaucetSeed(opts);\n\t\tconst image = yield* resolveForkImage(runtime, identity, opts);\n\t\tconst dataDir = yield* ensureForkDataDir(paths, seededOpts);\n\n\t\tconst labels: ContainerLabelTuple = {\n\t\t\tapp: identity.app,\n\t\t\tstack: identity.stack,\n\t\t\tplugin: 'sui',\n\t\t\trole: 'fork-validator',\n\t\t};\n\t\tconst containerName = `devstack-${identity.app}-${identity.stack}-sui-fork`;\n\t\tconst { handle, ports } = yield* ensureForkContainer({\n\t\t\truntime,\n\t\t\tportBroker,\n\t\t\timage,\n\t\t\tlabels,\n\t\t\tcontainerName,\n\t\t\tdataDir,\n\t\t\topts: seededOpts,\n\t\t});\n\n\t\tconst published = pickPublishedPort(ports, handle.ports);\n\t\tconst directRpcUrl = `http://127.0.0.1:${published.hostPort}`;\n\t\tconst rpcUrl = yield* routedSuiRpcUrl(identity);\n\t\tconst sdkClient = new SuiGrpcClient({ baseUrl: directRpcUrl, network: opts.upstream });\n\t\tconst readyTimeout = opts.readyTimeout ?? DEFAULT_FORK_READY_TIMEOUT;\n\n\t\tconst status = yield* waitForForkReady(sdkClient, readyTimeout).pipe(\n\t\t\tEffect.annotateLogs({ [SuiLogAttr.container]: handle.name }),\n\t\t);\n\t\tconst chainId = yield* sharedFetchChainId(sdkClient);\n\n\t\tconst fork = makeForkAdminSurface(sdkClient);\n\t\tconst assembled = yield* assembleSuiClient({\n\t\t\tsdkClient,\n\t\t\tchainId,\n\t\t\trpcUrl,\n\t\t\twaitForTransactionsReady: noopWaitForTransactionsReady,\n\t\t\tbuildImage: image,\n\t\t\thostGateway: {\n\t\t\t\trpcUrl: toDockerHostGatewayUrl(directRpcUrl),\n\t\t\t\tfaucetUrl: null,\n\t\t\t\tgraphqlUrl: null,\n\t\t\t},\n\t\t});\n\t\tconst client: SuiClient = {\n\t\t\t...assembled.client,\n\t\t\tsdk: wrapWithForkGuard(assembled.sdkShim),\n\t\t\tfork,\n\t\t};\n\n\t\tif (autoTickIntervalMs !== undefined) {\n\t\t\tyield* runAutoTickClock(fork, autoTickIntervalMs);\n\t\t}\n\n\t\treturn {\n\t\t\tresolved: makeResolvedNetwork({\n\t\t\t\tmode: 'fork',\n\t\t\t\tchainId,\n\t\t\t\trpc: rpcUrl,\n\t\t\t\tsource: 'default',\n\t\t\t\tcheckpoint: status.forkedAtCheckpoint,\n\t\t\t\tforkUpstream: opts.upstream,\n\t\t\t}),\n\t\t\tclient,\n\t\t\tautoTickIntervalMs,\n\t\t};\n\t});\n\nexport const suiForkImageBuildContext = (rev = DEFAULT_SUI_FORK_REV) => ({\n\t// `fileURLToPath` normalises the URL → host-path conversion across\n\t// platforms (Windows `file:///C:/...` → `C:\\...`). Reading\n\t// `.pathname` directly leaves the leading `/` on Windows drive paths.\n\tcontextPath: fileURLToPath(new URL('../../../../images/', import.meta.url)),\n\tdockerfile: 'sui-fork/Dockerfile',\n\tbuildArgs: { SUI_FORK_REV: rev, SUI_CLI_VERSION: DEFAULT_SUI_CLI_VERSION },\n});\n\n/** Pull a prebuilt fork image, narrating progress on the supervisor row.\n *  Fails with a `SuiPluginError` if the runtime can't pull or the pull errors. */\nconst pullForkImage = (\n\truntime: ContainerRuntime,\n\tpullRef: string,\n): Effect.Effect<ImageRef, SuiPluginError> =>\n\tEffect.gen(function* () {\n\t\tif (runtime.pullImage === undefined) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\tsuiPluginError(\n\t\t\t\t\t'image-build',\n\t\t\t\t\t`sui fork mode cannot pull image '${pullRef}' because the configured container runtime does not expose image pulls.`,\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\tyield* setCurrentPluginPhase(`pulling sui-fork image ${pullRef}…`);\n\t\treturn yield* runtime.pullImage(pullRef).pipe(\n\t\t\tEffect.mapError((cause) =>\n\t\t\t\tsuiPluginError(\n\t\t\t\t\t'image-build',\n\t\t\t\t\t`sui fork mode failed to pull image '${pullRef}': ${cause.reason}: ${cause.detail}`,\n\t\t\t\t\tcause,\n\t\t\t\t),\n\t\t\t),\n\t\t\tEffect.ensuring(setCurrentPluginPhase(null)),\n\t\t);\n\t});\n\n/** Build the bundled `sui-fork` image from source, narrating the cold\n *  compile so the row doesn't look hung for ~10 minutes on first run. */\nconst buildForkImage = (\n\truntime: ContainerRuntime,\n\tbuildCtx: Parameters<ContainerRuntime['ensureImage']>[0],\n): Effect.Effect<ImageRef, SuiPluginError> =>\n\tEffect.gen(function* () {\n\t\tyield* setCurrentPluginPhase(\n\t\t\t'building sui-fork image — first run compiles sui-fork from source (~10+ min); cached after',\n\t\t);\n\t\treturn yield* runtime.ensureImage(buildCtx).pipe(\n\t\t\tEffect.mapError((cause) =>\n\t\t\t\tsuiPluginError(\n\t\t\t\t\t'image-build',\n\t\t\t\t\t`sui fork image build failed: ${cause.reason}: ${cause.detail}`,\n\t\t\t\t\tcause,\n\t\t\t\t),\n\t\t\t),\n\t\t\tEffect.ensuring(setCurrentPluginPhase(null)),\n\t\t);\n\t});\n\nexport const resolveForkImage = (\n\truntime: ContainerRuntime,\n\tidentity: Identity,\n\topts: SuiForkOptions,\n): Effect.Effect<ImageRef, SuiPluginError> =>\n\tEffect.gen(function* () {\n\t\t// Explicit image override always wins.\n\t\tif (opts.image && 'pull' in opts.image) {\n\t\t\treturn yield* pullForkImage(runtime, opts.image.pull);\n\t\t}\n\t\tconst rev = opts.version ?? DEFAULT_SUI_FORK_REV;\n\t\tconst owner = {\n\t\t\tapp: identity.app,\n\t\t\tstack: identity.stack,\n\t\t\tplugin: 'sui',\n\t\t\trole: 'validator',\n\t\t} as const;\n\t\tif (opts.image && 'build' in opts.image) {\n\t\t\treturn yield* buildForkImage(runtime, {\n\t\t\t\tcontextPath: opts.image.build.context,\n\t\t\t\tdockerfile: opts.image.build.dockerfile ?? 'Dockerfile',\n\t\t\t\tbuildArgs: { SUI_FORK_REV: rev, SUI_CLI_VERSION: DEFAULT_SUI_CLI_VERSION },\n\t\t\t\towner,\n\t\t\t});\n\t\t}\n\t\t// No explicit image: prefer a prebuilt ref (env / published default) to\n\t\t// skip the cold source compile, falling back to building on any miss.\n\t\tconst prebuilt = prebuiltForkImageRef();\n\t\tif (prebuilt !== undefined && runtime.pullImage !== undefined) {\n\t\t\treturn yield* pullForkImage(runtime, prebuilt).pipe(\n\t\t\t\tEffect.catchTag('SuiPluginError', (cause) =>\n\t\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\t\tyield* Effect.logWarning(\n\t\t\t\t\t\t\t`sui fork mode: prebuilt image '${prebuilt}' unavailable (${cause.message}); building from source.`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\treturn yield* buildForkImage(runtime, { ...suiForkImageBuildContext(rev), owner });\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\treturn yield* buildForkImage(runtime, { ...suiForkImageBuildContext(rev), owner });\n\t});\n\ninterface ForkContainerResult {\n\treadonly handle: ContainerHandle;\n\treadonly ports: ReadonlyArray<ContainerPortPublish>;\n}\n\nconst ensureForkContainer = (params: {\n\treadonly runtime: ContainerRuntime;\n\treadonly portBroker: PortBroker;\n\treadonly image: ImageRef;\n\treadonly labels: ContainerLabelTuple;\n\treadonly containerName: string;\n\treadonly dataDir: string;\n\treadonly opts: SuiForkOptions;\n}): Effect.Effect<ForkContainerResult, SuiPluginError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tconst reusable =\n\t\t\tparams.opts.ports === undefined\n\t\t\t\t? yield* findReusableForkPort(params.runtime, params.labels, params.containerName)\n\t\t\t\t: undefined;\n\t\tconst ports =\n\t\t\treusable === undefined\n\t\t\t\t? [yield* allocateForkRpcPort(params.portBroker, params.opts.ports)]\n\t\t\t\t: [reusable];\n\t\tconst reconciliation: PortBindingReconciliation =\n\t\t\treusable === undefined && params.opts.ports !== undefined ? 'exact' : 'adopt-existing';\n\t\tconst command = forkStartCommand(params.opts);\n\t\tconst handle = yield* ensureManagedContainer({\n\t\t\truntime: params.runtime,\n\t\t\tlabels: params.labels,\n\t\t\tspec: {\n\t\t\t\tname: params.containerName,\n\t\t\t\timage: params.image,\n\t\t\t\trecreate: 'on-config-change',\n\t\t\t\tconfigHash: forkContainerConfigHash(params.opts, params.dataDir, command),\n\t\t\t\tstopGraceSeconds: FORK_VALIDATOR_STOP_GRACE_SECONDS,\n\t\t\t\tports,\n\t\t\t\tportBindingReconciliation: reconciliation,\n\t\t\t\tmounts: [{ source: params.dataDir, target: FORK_CONTAINER_DATA_DIR }],\n\t\t\t\tcommand,\n\t\t\t},\n\t\t\tmapError: (cause) => cause,\n\t\t}).pipe(\n\t\t\tEffect.mapError((cause: ContainerRuntimeError) =>\n\t\t\t\tsuiPluginError(\n\t\t\t\t\t'container-start',\n\t\t\t\t\t`sui-fork container failed: ${cause.reason}: ${cause.detail}`,\n\t\t\t\t\tcause,\n\t\t\t\t),\n\t\t\t),\n\t\t);\n\t\treturn { handle, ports };\n\t});\n\nexport const forkStartCommand = (opts: SuiForkOptions): ReadonlyArray<string> => {\n\tconst seed = normalizeForkSeed(opts);\n\tconst command = [\n\t\t'start',\n\t\t'--network',\n\t\topts.upstream,\n\t\t'--data-dir',\n\t\tFORK_CONTAINER_DATA_DIR,\n\t\t'--rpc-addr',\n\t\t`0.0.0.0:${CONTAINER_RPC_PORT}`,\n\t];\n\tif (opts.checkpoint !== undefined) {\n\t\tcommand.push('--checkpoint', String(opts.checkpoint));\n\t}\n\tfor (const address of seed.addresses) {\n\t\tcommand.push('--address', address);\n\t}\n\tfor (const objectId of seed.objects) {\n\t\tcommand.push('--object', objectId);\n\t}\n\treturn command;\n};\n\nconst normalizeForkSeed = (opts: SuiForkOptions) => ({\n\taddresses: [\n\t\t...new Set((opts.seed?.addresses ?? []).map((address) => normalizeSuiAddress(address))),\n\t].sort(),\n\tobjects: [\n\t\t...new Set((opts.seed?.objects ?? []).map((objectId) => normalizeSuiObjectId(objectId))),\n\t].sort(),\n});\n\nconst forkContainerConfigHash = (\n\topts: SuiForkOptions,\n\tdataDir: string,\n\tcommand: ReadonlyArray<string>,\n): string =>\n\tcreateHash('sha256')\n\t\t.update(\n\t\t\tJSON.stringify({\n\t\t\t\tdataDir,\n\t\t\t\tcommand,\n\t\t\t\tversion: opts.version ?? DEFAULT_SUI_FORK_REV,\n\t\t\t\tports: opts.ports ?? null,\n\t\t\t}),\n\t\t)\n\t\t.digest('hex');\n\nconst allocateForkRpcPort = (\n\tportBroker: PortBroker,\n\toverride: Readonly<Record<number, number>> | undefined,\n): Effect.Effect<ContainerPortPublish, SuiPluginError, Scope.Scope> => {\n\tconst overridePort = override?.[CONTAINER_RPC_PORT];\n\tif (overridePort !== undefined) {\n\t\treturn Effect.succeed(portPublish(CONTAINER_RPC_PORT, overridePort));\n\t}\n\treturn portBroker\n\t\t.allocate({\n\t\t\towner: 'sui:fork-rpc',\n\t\t\tpreferredPort: DEFAULT_FORK_HOST_RPC_PORT,\n\t\t\tprobeHost: DOCKER_PUBLISH_HOST,\n\t\t})\n\t\t.pipe(\n\t\t\tEffect.catchTag('PortBrokerError', (cause) =>\n\t\t\t\tcause.reason === 'preferred-busy'\n\t\t\t\t\t? portBroker.allocate({ owner: 'sui:fork-rpc', probeHost: DOCKER_PUBLISH_HOST })\n\t\t\t\t\t: Effect.fail(cause),\n\t\t\t),\n\t\t\tEffect.map((allocated: AllocatedPort) => portPublish(CONTAINER_RPC_PORT, allocated.port)),\n\t\t\tEffect.mapError((cause) =>\n\t\t\t\tsuiPluginError(\n\t\t\t\t\t'port-allocate',\n\t\t\t\t\t`sui fork mode: failed to allocate RPC host port: ${cause.detail}`,\n\t\t\t\t\tcause,\n\t\t\t\t),\n\t\t\t),\n\t\t);\n};\n\nconst findReusableForkPort = (\n\truntime: ContainerRuntime,\n\tlabels: ContainerLabelTuple,\n\tcontainerName: string,\n): Effect.Effect<ContainerPortPublish | undefined, SuiPluginError> =>\n\truntime.inspectByLabels(labels).pipe(\n\t\tEffect.map((handles) =>\n\t\t\thandles\n\t\t\t\t.find((handle) => handle.name === containerName)\n\t\t\t\t?.ports?.find((port) => port.containerPort === CONTAINER_RPC_PORT),\n\t\t),\n\t\tEffect.mapError((cause) =>\n\t\t\tsuiPluginError(\n\t\t\t\t'container-start',\n\t\t\t\t`sui fork mode: failed to inspect existing fork container: ${cause.reason}: ${cause.detail}`,\n\t\t\t\tcause,\n\t\t\t),\n\t\t),\n\t);\n\nconst pickPublishedPort = (\n\trequested: ReadonlyArray<ContainerPortPublish>,\n\tactual: ReadonlyArray<ContainerPortPublish> | undefined,\n): ContainerPortPublish =>\n\tactual?.find((port) => port.containerPort === CONTAINER_RPC_PORT) ??\n\trequested.find((port) => port.containerPort === CONTAINER_RPC_PORT) ??\n\tportPublish(CONTAINER_RPC_PORT, DEFAULT_FORK_HOST_RPC_PORT);\n\nconst portPublish = (containerPort: number, hostPort: number): ContainerPortPublish => ({\n\tcontainerPort,\n\thostPort,\n\thostIp: DOCKER_PUBLISH_HOST,\n});\n\nexport const forkDataDirKey = (opts: SuiForkOptions): string =>\n\tcreateHash('sha256')\n\t\t.update(\n\t\t\tJSON.stringify({\n\t\t\t\tupstream: opts.upstream,\n\t\t\t\tcheckpoint: opts.checkpoint ?? null,\n\t\t\t\tversion: opts.version ?? DEFAULT_SUI_FORK_REV,\n\t\t\t\tseed: normalizeForkSeed(opts),\n\t\t\t}),\n\t\t)\n\t\t.digest('hex')\n\t\t.slice(0, 16);\n\n/** Bring the data dir into being and claim it against concurrent\n *  stacks via the holder protocol. The holder claim is scope-bound —\n *  it heartbeats for the stack's lifetime and releases on teardown. */\nconst ensureForkDataDir = (\n\tpaths: StackPaths,\n\topts: SuiForkOptions,\n): Effect.Effect<string, SuiPluginError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tconst dataDir = resolve(join(paths.stackRoot, 'sui-fork', forkDataDirKey(opts)));\n\t\tyield* Effect.tryPromise({\n\t\t\ttry: () => mkdir(dataDir, { recursive: true, mode: 0o700 }),\n\t\t\tcatch: (cause) =>\n\t\t\t\tsuiPluginError(\n\t\t\t\t\t'fork-data-dir',\n\t\t\t\t\t`sui fork mode: failed to create data directory ${dataDir}: ${formatUnknownError(cause)}`,\n\t\t\t\t\tcause,\n\t\t\t\t),\n\t\t});\n\t\tyield* acquireForkDataDirHolder(paths.stackLockFile, dataDir);\n\t\treturn dataDir;\n\t});\n\ninterface ForkStatus {\n\treadonly checkpoint: string;\n\treadonly clock: number;\n\treadonly forkedAtCheckpoint: string;\n}\n\nconst waitForForkReady = (\n\tsdkClient: SuiGrpcClient,\n\treadyTimeout: Duration.Duration,\n): Effect.Effect<ForkStatus, SuiPluginError> =>\n\tEffect.gen(function* () {\n\t\tconst readyTimeoutMs = Duration.toMillis(readyTimeout);\n\t\tyield* waitForProbe({\n\t\t\tlabel: 'sui.fork.rpc',\n\t\t\ttimeoutMs: readyTimeoutMs,\n\t\t\tintervalMs: 1_000,\n\t\t\tattemptTimeoutMs: PROBE_ATTEMPT_TIMEOUT_MS,\n\t\t\tprobe: () => readForkStatus(sdkClient).pipe(Effect.as(true)),\n\t\t}).pipe(\n\t\t\tEffect.mapError((cause) =>\n\t\t\t\tcause instanceof ProbeTimeoutError\n\t\t\t\t\t? suiPluginError(\n\t\t\t\t\t\t\t'fork-status-probe',\n\t\t\t\t\t\t\t`sui fork mode: ForkingService.GetStatus did not become ready within ${readyTimeoutMs}ms. ` +\n\t\t\t\t\t\t\t\t`Inspect the sui-fork container logs (\\`docker logs\\`); if the image is still ` +\n\t\t\t\t\t\t\t\t`building or the upstream checkpoint is large, raise the \\`readyTimeout\\` option.`,\n\t\t\t\t\t\t\tcause.lastError ?? cause.lastNotReady ?? cause,\n\t\t\t\t\t\t)\n\t\t\t\t\t: suiPluginError(\n\t\t\t\t\t\t\t'fork-status-probe',\n\t\t\t\t\t\t\t`sui fork mode: ForkingService.GetStatus probe failed: ${formatUnknownError(cause)}`,\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t),\n\t\t\t),\n\t\t);\n\t\treturn yield* readForkStatus(sdkClient);\n\t});\n\nconst makeForkAdminSurface = (sdkClient: SuiGrpcClient): ForkAdminSurface => ({\n\tstatus: readForkStatus(sdkClient).pipe(\n\t\tEffect.map(({ checkpoint, clock }) => ({ checkpoint, clock })),\n\t),\n\tadvanceClock: (intervalMs) =>\n\t\tEffect.tryPromise({\n\t\t\ttry: () => sdkClient.forkingService.advanceClock({ durationMs: BigInt(intervalMs) }).response,\n\t\t\tcatch: (cause) =>\n\t\t\t\tsuiPluginError(\n\t\t\t\t\t'fork-advance-clock',\n\t\t\t\t\t`sui fork mode: advanceClock(${intervalMs}) failed: ${formatUnknownError(cause)}`,\n\t\t\t\t\tcause,\n\t\t\t\t),\n\t\t}).pipe(Effect.asVoid),\n\tadvanceCheckpoint: Effect.tryPromise({\n\t\ttry: () => sdkClient.forkingService.advanceCheckpoint({}).response,\n\t\tcatch: (cause) =>\n\t\t\tsuiPluginError(\n\t\t\t\t'fork-advance-checkpoint',\n\t\t\t\t`sui fork mode: advanceCheckpoint failed: ${formatUnknownError(cause)}`,\n\t\t\t\tcause,\n\t\t\t),\n\t}).pipe(Effect.asVoid),\n\timpersonate: (sender, tx) =>\n\t\tEffect.gen(function* () {\n\t\t\tif (!(tx instanceof Uint8Array)) {\n\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t'fork-impersonate',\n\t\t\t\t\t\t`sui fork mode: impersonate(${sender}) expected serialized transaction bytes.`,\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t}\n\t\t\tyield* verifyForkImpersonationSender(sender, tx);\n\t\t\tconst raw = yield* Effect.tryPromise({\n\t\t\t\ttry: () =>\n\t\t\t\t\tsdkClient.core.executeTransaction({\n\t\t\t\t\t\ttransaction: tx,\n\t\t\t\t\t\tsignatures: [],\n\t\t\t\t\t\tinclude: { effects: true, objectTypes: true },\n\t\t\t\t\t}),\n\t\t\t\tcatch: (cause) =>\n\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t'fork-impersonate',\n\t\t\t\t\t\t`sui fork mode: impersonate(${sender}) failed: ${formatUnknownError(cause)}`,\n\t\t\t\t\t\tcause,\n\t\t\t\t\t),\n\t\t\t});\n\t\t\tconst digest = extractExecuteDigest(raw);\n\t\t\tif (digest === undefined) {\n\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t'fork-impersonate',\n\t\t\t\t\t\t`sui fork mode: impersonate(${sender}) returned no transaction digest.`,\n\t\t\t\t\t\traw,\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn { digest, success: !isFailedTransaction(raw), raw };\n\t\t}),\n});\n\nconst readForkStatus = (sdkClient: SuiGrpcClient): Effect.Effect<ForkStatus, SuiPluginError> =>\n\tEffect.tryPromise({\n\t\ttry: async () => {\n\t\t\tconst response = await sdkClient.forkingService.getStatus({}).response;\n\t\t\treturn {\n\t\t\t\tcheckpoint: response.checkpointSequenceNumber.toString(),\n\t\t\t\tclock: Number(response.timestampMs),\n\t\t\t\tforkedAtCheckpoint: response.forkedAtCheckpoint.toString(),\n\t\t\t};\n\t\t},\n\t\tcatch: (cause) =>\n\t\t\tsuiPluginError(\n\t\t\t\t'fork-status-probe',\n\t\t\t\t`sui fork mode: GetStatus failed: ${formatUnknownError(cause)}`,\n\t\t\t\tcause,\n\t\t\t),\n\t});\n\nconst routedSuiRpcUrl = (identity: Identity): Effect.Effect<string, SuiPluginError> =>\n\troutedHostname(identity, SUI_RPC_ENDPOINT_NAME).pipe(\n\t\tEffect.map((hostname) =>\n\t\t\trenderUrl({ protocol: 'http', hostname, port: SUI_RPC_ENTRYPOINT_PORT }),\n\t\t),\n\t\tEffect.mapError((cause) =>\n\t\t\tsuiPluginError(\n\t\t\t\t'container-start',\n\t\t\t\t`sui fork mode: failed to construct router RPC URL: ${cause.detail}`,\n\t\t\t\tcause,\n\t\t\t),\n\t\t),\n\t);\n\nconst isFailedTransaction = (raw: unknown): boolean =>\n\t(raw as { readonly $kind?: string }).$kind === 'FailedTransaction';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAoDA,MAAa,6BAA6B,SAAS,QAAQ,GAAG;;AAG9D,MAAa,uBAAuB;;;;;;AAOpC,MAAa,qBAAqB;AAElC,MAAM,6BAAiD;CACtD,MAAM,UAAU,QAAQ,IAAI,mBAAmB,EAAE,KAAK;CACtD,OAAO,YAAY,KAAA,KAAa,QAAQ,SAAS,IAAI,UAAU,KAAA;AAChE;AAEA,MAAa,6BAA6B;;;;;;AAQ1C,MAAa,qBAA8E;CAM1F,SAAS;CACT,SAAS;CAIT,QAAQ;AACT;;;;;AAYA,MAAa,kCACZ,cAAgC;;;AAiBjC,MAAa,oBAAoB,SAAmD;CACnF,IAAI,KAAK,QAAQ,YAAY,OAC5B,OAAO;CAER,MAAM,oBACL,KAAK,QAAQ,qBAAA;CACd,MAAM,WAAW,KAAK,QAAQ,OAAO,KAAK;CAC1C,IAAI,aAAa,KAAA,KAAa,SAAS,SAAS,GAC/C,OAAO;EAAE,OAAO,oBAAoB,QAAQ;EAAG;EAAmB,UAAU;CAAK;CAElF,MAAM,WAAW,mBAAmB,KAAK;CACzC,OAAO,aAAa,OACjB,OACA;EAAE,OAAO,oBAAoB,QAAQ;EAAG;EAAmB,UAAU;CAAM;AAC/E;;;;;AAMA,MAAa,sBAAsB,SAAyC;CAC3E,MAAM,WAAW,iBAAiB,IAAI;CACtC,IAAI,aAAa,MAChB,OAAO;CAER,OAAO;EACN,GAAG;EACH,MAAM;GACL,GAAG,KAAK;GACR,WAAW,CAAC,GAAI,KAAK,MAAM,aAAa,CAAC,GAAI,SAAS,KAAK;EAC5D;CACD;AACD;AAEA,MAAM,sBAAsB;AAC5B,MAAM,qBAAqB;AAC3B,MAAM,0BAA0B;AAChC,MAAM,2BAA2B;AASjC,MAAa,gBACZ,SACA,UACA,YACA,OACA,SAEA,OAAO,IAAI,aAAa;CACvB,MAAM,qBAAqB,OAAO,0BAA0B,KAAK,QAAQ;CAIzE,MAAM,aAAa,mBAAmB,IAAI;CAC1C,MAAM,QAAQ,OAAO,iBAAiB,SAAS,UAAU,IAAI;CAC7D,MAAM,UAAU,OAAO,kBAAkB,OAAO,UAAU;CAS1D,MAAM,EAAE,QAAQ,UAAU,OAAO,oBAAoB;EACpD;EACA;EACA;EACA,QAAA;GAVA,KAAK,SAAS;GACd,OAAO,SAAS;GAChB,QAAQ;GACR,MAAM;EAOD;EACL,eAAA,YANiC,SAAS,IAAI,GAAG,SAAS,MAAM;EAOhE;EACA,MAAM;CACP,CAAC;CAGD,MAAM,eAAe,oBADH,kBAAkB,OAAO,OAAO,KACD,CAAC,CAAC;CACnD,MAAM,SAAS,OAAO,gBAAgB,QAAQ;CAC9C,MAAM,YAAY,IAAI,cAAc;EAAE,SAAS;EAAc,SAAS,KAAK;CAAS,CAAC;CAGrF,MAAM,SAAS,OAAO,iBAAiB,WAFlB,KAAK,gBAAgB,0BAEoB,CAAC,CAAC,KAC/D,OAAO,aAAa,GAAG,WAAW,YAAY,OAAO,KAAK,CAAC,CAC5D;CACA,MAAM,UAAU,OAAOA,aAAmB,SAAS;CAEnD,MAAM,OAAO,qBAAqB,SAAS;CAC3C,MAAM,YAAY,OAAO,kBAAkB;EAC1C;EACA;EACA;EACA,0BAA0B;EAC1B,YAAY;EACZ,aAAa;GACZ,QAAQ,uBAAuB,YAAY;GAC3C,WAAW;GACX,YAAY;EACb;CACD,CAAC;CACD,MAAM,SAAoB;EACzB,GAAG,UAAU;EACb,KAAK,kBAAkB,UAAU,OAAO;EACxC;CACD;CAEA,IAAI,uBAAuB,KAAA,GAC1B,OAAO,iBAAiB,MAAM,kBAAkB;CAGjD,OAAO;EACN,UAAU,oBAAoB;GAC7B,MAAM;GACN;GACA,KAAK;GACL,QAAQ;GACR,YAAY,OAAO;GACnB,cAAc,KAAK;EACpB,CAAC;EACD;EACA;CACD;AACD,CAAC;AAEF,MAAa,4BAA4B,MAAM,0BAA0B;CAIxE,aAAa,cAAc,IAAI,IAAI,uBAAuB,OAAO,KAAK,GAAG,CAAC;CAC1E,YAAY;CACZ,WAAW;EAAE,cAAc;EAAK,iBAAiB;CAAwB;AAC1E;;;AAIA,MAAM,iBACL,SACA,YAEA,OAAO,IAAI,aAAa;CACvB,IAAI,QAAQ,cAAc,KAAA,GACzB,OAAO,OAAO,OAAO,KACpB,eACC,eACA,oCAAoC,QAAQ,wEAC7C,CACD;CAED,OAAO,sBAAsB,0BAA0B,QAAQ,EAAE;CACjE,OAAO,OAAO,QAAQ,UAAU,OAAO,CAAC,CAAC,KACxC,OAAO,UAAU,UAChB,eACC,eACA,uCAAuC,QAAQ,KAAK,MAAM,OAAO,IAAI,MAAM,UAC3E,KACD,CACD,GACA,OAAO,SAAS,sBAAsB,IAAI,CAAC,CAC5C;AACD,CAAC;;;AAIF,MAAM,kBACL,SACA,aAEA,OAAO,IAAI,aAAa;CACvB,OAAO,sBACN,4FACD;CACA,OAAO,OAAO,QAAQ,YAAY,QAAQ,CAAC,CAAC,KAC3C,OAAO,UAAU,UAChB,eACC,eACA,gCAAgC,MAAM,OAAO,IAAI,MAAM,UACvD,KACD,CACD,GACA,OAAO,SAAS,sBAAsB,IAAI,CAAC,CAC5C;AACD,CAAC;AAEF,MAAa,oBACZ,SACA,UACA,SAEA,OAAO,IAAI,aAAa;CAEvB,IAAI,KAAK,SAAS,UAAU,KAAK,OAChC,OAAO,OAAO,cAAc,SAAS,KAAK,MAAM,IAAI;CAErD,MAAM,MAAM,KAAK,WAAA;CACjB,MAAM,QAAQ;EACb,KAAK,SAAS;EACd,OAAO,SAAS;EAChB,QAAQ;EACR,MAAM;CACP;CACA,IAAI,KAAK,SAAS,WAAW,KAAK,OACjC,OAAO,OAAO,eAAe,SAAS;EACrC,aAAa,KAAK,MAAM,MAAM;EAC9B,YAAY,KAAK,MAAM,MAAM,cAAc;EAC3C,WAAW;GAAE,cAAc;GAAK,iBAAiB;EAAwB;EACzE;CACD,CAAC;CAIF,MAAM,WAAW,qBAAqB;CACtC,IAAI,aAAa,KAAA,KAAa,QAAQ,cAAc,KAAA,GACnD,OAAO,OAAO,cAAc,SAAS,QAAQ,CAAC,CAAC,KAC9C,OAAO,SAAS,mBAAmB,UAClC,OAAO,IAAI,aAAa;EACvB,OAAO,OAAO,WACb,kCAAkC,SAAS,iBAAiB,MAAM,QAAQ,yBAC3E;EACA,OAAO,OAAO,eAAe,SAAS;GAAE,GAAG,yBAAyB,GAAG;GAAG;EAAM,CAAC;CAClF,CAAC,CACF,CACD;CAED,OAAO,OAAO,eAAe,SAAS;EAAE,GAAG,yBAAyB,GAAG;EAAG;CAAM,CAAC;AAClF,CAAC;AAOF,MAAM,uBAAuB,WAS5B,OAAO,IAAI,aAAa;CACvB,MAAM,WACL,OAAO,KAAK,UAAU,KAAA,IACnB,OAAO,qBAAqB,OAAO,SAAS,OAAO,QAAQ,OAAO,aAAa,IAC/E,KAAA;CACJ,MAAM,QACL,aAAa,KAAA,IACV,CAAC,OAAO,oBAAoB,OAAO,YAAY,OAAO,KAAK,KAAK,CAAC,IACjE,CAAC,QAAQ;CACb,MAAM,iBACL,aAAa,KAAA,KAAa,OAAO,KAAK,UAAU,KAAA,IAAY,UAAU;CACvE,MAAM,UAAU,iBAAiB,OAAO,IAAI;CAyB5C,OAAO;EAAE,QAAA,OAxBa,uBAAuB;GAC5C,SAAS,OAAO;GAChB,QAAQ,OAAO;GACf,MAAM;IACL,MAAM,OAAO;IACb,OAAO,OAAO;IACd,UAAU;IACV,YAAY,wBAAwB,OAAO,MAAM,OAAO,SAAS,OAAO;IACxE,kBAAA;IACA;IACA,2BAA2B;IAC3B,QAAQ,CAAC;KAAE,QAAQ,OAAO;KAAS,QAAQ;IAAwB,CAAC;IACpE;GACD;GACA,WAAW,UAAU;EACtB,CAAC,CAAC,CAAC,KACF,OAAO,UAAU,UAChB,eACC,mBACA,8BAA8B,MAAM,OAAO,IAAI,MAAM,UACrD,KACD,CACD,CACD;EACiB;CAAM;AACxB,CAAC;AAEF,MAAa,oBAAoB,SAAgD;CAChF,MAAM,OAAO,kBAAkB,IAAI;CACnC,MAAM,UAAU;EACf;EACA;EACA,KAAK;EACL;EACA;EACA;EACA,WAAW;CACZ;CACA,IAAI,KAAK,eAAe,KAAA,GACvB,QAAQ,KAAK,gBAAgB,OAAO,KAAK,UAAU,CAAC;CAErD,KAAK,MAAM,WAAW,KAAK,WAC1B,QAAQ,KAAK,aAAa,OAAO;CAElC,KAAK,MAAM,YAAY,KAAK,SAC3B,QAAQ,KAAK,YAAY,QAAQ;CAElC,OAAO;AACR;AAEA,MAAM,qBAAqB,UAA0B;CACpD,WAAW,CACV,GAAG,IAAI,KAAK,KAAK,MAAM,aAAa,CAAC,EAAA,CAAG,KAAK,YAAY,oBAAoB,OAAO,CAAC,CAAC,CACvF,CAAC,CAAC,KAAK;CACP,SAAS,CACR,GAAG,IAAI,KAAK,KAAK,MAAM,WAAW,CAAC,EAAA,CAAG,KAAK,aAAa,qBAAqB,QAAQ,CAAC,CAAC,CACxF,CAAC,CAAC,KAAK;AACR;AAEA,MAAM,2BACL,MACA,SACA,YAEA,WAAW,QAAQ,CAAC,CAClB,OACA,KAAK,UAAU;CACd;CACA;CACA,SAAS,KAAK,WAAA;CACd,OAAO,KAAK,SAAS;AACtB,CAAC,CACF,CAAC,CACA,OAAO,KAAK;AAEf,MAAM,uBACL,YACA,aACsE;CACtE,MAAM,eAAe,WAAW;CAChC,IAAI,iBAAiB,KAAA,GACpB,OAAO,OAAO,QAAQ,YAAY,oBAAoB,YAAY,CAAC;CAEpE,OAAO,WACL,SAAS;EACT,OAAO;EACP,eAAe;EACf,WAAW;CACZ,CAAC,CAAC,CACD,KACA,OAAO,SAAS,oBAAoB,UACnC,MAAM,WAAW,mBACd,WAAW,SAAS;EAAE,OAAO;EAAgB,WAAW;CAAoB,CAAC,IAC7E,OAAO,KAAK,KAAK,CACrB,GACA,OAAO,KAAK,cAA6B,YAAY,oBAAoB,UAAU,IAAI,CAAC,GACxF,OAAO,UAAU,UAChB,eACC,iBACA,oDAAoD,MAAM,UAC1D,KACD,CACD,CACD;AACF;AAEA,MAAM,wBACL,SACA,QACA,kBAEA,QAAQ,gBAAgB,MAAM,CAAC,CAAC,KAC/B,OAAO,KAAK,YACX,QACE,MAAM,WAAW,OAAO,SAAS,aAAa,CAAC,EAC9C,OAAO,MAAM,SAAS,KAAK,kBAAkB,kBAAkB,CACnE,GACA,OAAO,UAAU,UAChB,eACC,mBACA,6DAA6D,MAAM,OAAO,IAAI,MAAM,UACpF,KACD,CACD,CACD;AAED,MAAM,qBACL,WACA,WAEA,QAAQ,MAAM,SAAS,KAAK,kBAAkB,kBAAkB,KAChE,UAAU,MAAM,SAAS,KAAK,kBAAkB,kBAAkB,KAClE,YAAY,oBAAA,KAA8C;AAE3D,MAAM,eAAe,eAAuB,cAA4C;CACvF;CACA;CACA,QAAQ;AACT;AAEA,MAAa,kBAAkB,SAC9B,WAAW,QAAQ,CAAC,CAClB,OACA,KAAK,UAAU;CACd,UAAU,KAAK;CACf,YAAY,KAAK,cAAc;CAC/B,SAAS,KAAK,WAAA;CACd,MAAM,kBAAkB,IAAI;AAC7B,CAAC,CACF,CAAC,CACA,OAAO,KAAK,CAAC,CACb,MAAM,GAAG,EAAE;;;;AAKd,MAAM,qBACL,OACA,SAEA,OAAO,IAAI,aAAa;CACvB,MAAM,UAAU,QAAQ,KAAK,MAAM,WAAW,YAAY,eAAe,IAAI,CAAC,CAAC;CAC/E,OAAO,OAAO,WAAW;EACxB,WAAW,MAAM,SAAS;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EAC1D,QAAQ,UACP,eACC,iBACA,kDAAkD,QAAQ,IAAI,mBAAmB,KAAK,KACtF,KACD;CACF,CAAC;CACD,OAAO,yBAAyB,MAAM,eAAe,OAAO;CAC5D,OAAO;AACR,CAAC;AAQF,MAAM,oBACL,WACA,iBAEA,OAAO,IAAI,aAAa;CACvB,MAAM,iBAAiB,SAAS,SAAS,YAAY;CACrD,OAAO,aAAa;EACnB,OAAO;EACP,WAAW;EACX,YAAY;EACZ,kBAAkB;EAClB,aAAa,eAAe,SAAS,CAAC,CAAC,KAAK,OAAO,GAAG,IAAI,CAAC;CAC5D,CAAC,CAAC,CAAC,KACF,OAAO,UAAU,UAChB,iBAAiB,oBACd,eACA,qBACA,uEAAuE,eAAe,oKAGtF,MAAM,aAAa,MAAM,gBAAgB,KAC1C,IACC,eACA,qBACA,yDAAyD,mBAAmB,KAAK,KACjF,KACD,CACH,CACD;CACA,OAAO,OAAO,eAAe,SAAS;AACvC,CAAC;AAEF,MAAM,wBAAwB,eAAgD;CAC7E,QAAQ,eAAe,SAAS,CAAC,CAAC,KACjC,OAAO,KAAK,EAAE,YAAY,aAAa;EAAE;EAAY;CAAM,EAAE,CAC9D;CACA,eAAe,eACd,OAAO,WAAW;EACjB,WAAW,UAAU,eAAe,aAAa,EAAE,YAAY,OAAO,UAAU,EAAE,CAAC,CAAC,CAAC;EACrF,QAAQ,UACP,eACC,sBACA,+BAA+B,WAAW,YAAY,mBAAmB,KAAK,KAC9E,KACD;CACF,CAAC,CAAC,CAAC,KAAK,OAAO,MAAM;CACtB,mBAAmB,OAAO,WAAW;EACpC,WAAW,UAAU,eAAe,kBAAkB,CAAC,CAAC,CAAC,CAAC;EAC1D,QAAQ,UACP,eACC,2BACA,4CAA4C,mBAAmB,KAAK,KACpE,KACD;CACF,CAAC,CAAC,CAAC,KAAK,OAAO,MAAM;CACrB,cAAc,QAAQ,OACrB,OAAO,IAAI,aAAa;EACvB,IAAI,EAAE,cAAc,aACnB,OAAO,OAAO,OAAO,KACpB,eACC,oBACA,8BAA8B,OAAO,yCACtC,CACD;EAED,OAAO,8BAA8B,QAAQ,EAAE;EAC/C,MAAM,MAAM,OAAO,OAAO,WAAW;GACpC,WACC,UAAU,KAAK,mBAAmB;IACjC,aAAa;IACb,YAAY,CAAC;IACb,SAAS;KAAE,SAAS;KAAM,aAAa;IAAK;GAC7C,CAAC;GACF,QAAQ,UACP,eACC,oBACA,8BAA8B,OAAO,YAAY,mBAAmB,KAAK,KACzE,KACD;EACF,CAAC;EACD,MAAM,SAAS,qBAAqB,GAAG;EACvC,IAAI,WAAW,KAAA,GACd,OAAO,OAAO,OAAO,KACpB,eACC,oBACA,8BAA8B,OAAO,oCACrC,GACD,CACD;EAED,OAAO;GAAE;GAAQ,SAAS,CAAC,oBAAoB,GAAG;GAAG;EAAI;CAC1D,CAAC;AACH;AAEA,MAAM,kBAAkB,cACvB,OAAO,WAAW;CACjB,KAAK,YAAY;EAChB,MAAM,WAAW,MAAM,UAAU,eAAe,UAAU,CAAC,CAAC,CAAC,CAAC;EAC9D,OAAO;GACN,YAAY,SAAS,yBAAyB,SAAS;GACvD,OAAO,OAAO,SAAS,WAAW;GAClC,oBAAoB,SAAS,mBAAmB,SAAS;EAC1D;CACD;CACA,QAAQ,UACP,eACC,qBACA,oCAAoC,mBAAmB,KAAK,KAC5D,KACD;AACF,CAAC;AAEF,MAAM,mBAAmB,aACxB,eAAe,UAAA,KAA+B,CAAC,CAAC,KAC/C,OAAO,KAAK,aACX,UAAU;CAAE,UAAU;CAAQ;CAAU,MAAM;AAAwB,CAAC,CACxE,GACA,OAAO,UAAU,UAChB,eACC,mBACA,sDAAsD,MAAM,UAC5D,KACD,CACD,CACD;AAED,MAAM,uBAAuB,QAC3B,IAAoC,UAAU"}