@mysten-incubation/devstack 0.1.0 → 0.2.0

package/dist/plugins/sui/mode/local.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"local.mjs","names":["sharedFetchChainId"],"sources":["../../../../src/plugins/sui/mode/local.ts"],"sourcesContent":["// Sui plugin — local-container mode.\n//\n// In-stack Sui validator + faucet, running in the supervised docker\n// stack. Used during normal dev loops when the developer wants fresh,\n// fast, throwaway chain state with a working faucet.\n//\n// Boot sequence (load-bearing order):\n//\n//   1. Resolve image — vendored Dockerfile build via the\n//      ContainerRuntime contract (caller `image` override honoured for\n//      `{build}`; `{pull}` is deferred — see stub list in the README).\n//   2. Allocate + ensure container — `sui start --with-faucet=0.0.0.0:9123\n//      --with-graphql=0.0.0.0:9125` with direct host port-publishing\n//      for internal boot probes. User-facing URLs are router-fronted\n//      named hosts; the direct host ports intentionally live in the\n//      high private windows so they do not collide with router\n//      entrypoints.\n//      RecreatePolicy is `on-failure` so the writable layer (chain\n//      state at `/root/.sui`) survives clean stop/start cycles, but an\n//      unclean SIGKILL/137 exit recreates instead of resuming a suspect\n//      RocksDB/checkpoint state. The image's entrypoint forwards SIGINT\n//      to a non-PID-1 sui child so clean shutdown (RocksDB checkpoint\n//      drain → exit 0/130) is the normal case.\n//   3. Ready probe — RPC `getChainIdentifier`, faucet `GET /`, and\n//      GraphQL HTTP liveness. Per-fetch deadline + outer deadline.\n//   4. Fetch chain id from the now-responsive client (bounded timeout).\n//   5. Build `waitForTransactionsReady` — `Effect.cached` against a\n//      real faucet funding tx; first failure caches for the scope.\n//      Manual `invalidate` clears the memo.\n//   6. Return resolved `SuiClient`. Auto-tick is the no-op advancer\n//      (localnet drives its own consensus).\n//\n// Faucet socket-level readiness does NOT imply funds-transferability.\n// The first `waitForTransactionsReady.wait` POSTs a real funding tx,\n// retrying on body-level `{Failure}` responses during the post-RPC /\n// pre-fund window.\n//\n// What this body deliberately defers:\n//   - Postgres indexer sidecar — GraphQL is enabled by `sui start` and\n//     routed as a first-class endpoint, but no separate postgres\n//     lifecycle is supervised here.\n//   - Snapshot capture — the framework exists in the plugin's\n//     snapshot.ts; this body produces the running container that the\n//     orchestrator captures.\n\nimport { Duration, Effect, type Scope } from 'effect';\n\nimport { SuiGrpcClient } from '@mysten/sui/grpc';\n\nimport type {\n\tContainerHandle,\n\tContainerRuntime,\n\tContainerRuntimeError,\n\tImageRef,\n\tContainerPortPublish,\n\tPortBindingReconciliation,\n} from '../../../contracts/container-runtime.ts';\nimport type { ContainerLabelTuple } from '../../../contracts/snapshotable.ts';\nimport type { Identity } from '../../../substrate/identity.ts';\nimport type { AllocatedPort, PortBroker } from '../../../substrate/runtime/port-broker/index.ts';\nimport { waitForHttpEndpoint } from '../../../substrate/runtime/http-probe.ts';\nimport { setCurrentPluginPhase } from '../../../substrate/runtime/current-plugin.ts';\nimport { ensureManagedContainer } from '../../../substrate/runtime/managed-container.ts';\nimport { SpanAttr } from '../../../substrate/runtime/observability/spans.ts';\nimport { renderUrl, routedHostname } from '../../../substrate/runtime/routed-url.ts';\nimport {\n\tDEFAULT_SUI_CLI_VERSION,\n\tsuiCliImageBuildContext,\n} from '../../../substrate/runtime/sui-move-build/index.ts';\nimport { suiPluginError, type SuiConfigError, type SuiPluginError } from '../errors.ts';\nimport { formatUnknownError } from '../../../substrate/runtime/format-unknown-error.ts';\nimport type { ResolvedSuiNetwork } from '../network-resolver.ts';\nimport { SuiSpans } from '../spans.ts';\nimport {\n\tSUI_FAUCET_ENTRYPOINT_PORT,\n\tSUI_FAUCET_ENDPOINT_NAME,\n\tSUI_GRAPHQL_ENDPOINT_NAME,\n\tSUI_GRAPHQL_ENTRYPOINT_PORT,\n\tSUI_RPC_ENDPOINT_NAME,\n\tSUI_RPC_ENTRYPOINT_PORT,\n} from '../routable.ts';\nimport type { SuiClient } from './shared.ts';\nimport { toDockerHostGatewayUrl } from './shared.ts';\nimport {\n\tassembleSuiClient,\n\tbuildWaitForTransactionsReady,\n\tfetchChainId as sharedFetchChainId,\n\tmakeResolvedNetwork,\n} from './shared-boot.ts';\nimport type { SuiLocalOptions } from './spec.ts';\n\n/** Default ready-probe timeout for localnet. The validator's cold\n *  start runs genesis + faucet bootstrap; 60 s is the documented\n *  ceiling. */\nexport const DEFAULT_LOCAL_READY_TIMEOUT = Duration.seconds(60);\n\n/** Default sui validator binary version pinned by the vendored\n *  `images/sui/` Dockerfile. The build arg `SUI_VERSION` is threaded\n *  through to the release-tarball URL. Bump in lockstep with matching\n *  Walrus / Seal versions (else the Move package ABIs drift). */\nexport const DEFAULT_SUI_VERSION = DEFAULT_SUI_CLI_VERSION;\n\n// In-container ports the sui binary binds on. These match the router\n// entrypoint ports; direct host publishes below use different high\n// ports so Traefik owns the public listener ports.\nconst CONTAINER_RPC_PORT = SUI_RPC_ENTRYPOINT_PORT;\nconst CONTAINER_FAUCET_PORT = SUI_FAUCET_ENTRYPOINT_PORT;\nconst CONTAINER_GRAPHQL_PORT = SUI_GRAPHQL_ENTRYPOINT_PORT;\n\n// Default host ports. Without `opts.ports`, these are preferences\n// brokered against the kernel before Docker publishes them.\nexport const DEFAULT_HOST_RPC_PORT = 51000;\nexport const DEFAULT_HOST_FAUCET_PORT = 50000;\nexport const DEFAULT_HOST_GRAPHQL_PORT = 51001;\nconst DOCKER_PUBLISH_HOST = '0.0.0.0' as const;\nexport const MAX_DOCKER_PUBLISH_PORT_RETRIES = 3;\nexport const LOCAL_VALIDATOR_STOP_GRACE_SECONDS = 30;\n\n/** Per-fetch deadline for the ready-probe HTTP calls. Without it a\n *  hung fetch would block the outer ready deadline with no signal\n *  about which probe wedged. */\nconst PROBE_FETCH_TIMEOUT_MS = 3000;\n\n/** Resolved local-mode boot artifacts. */\nexport interface LocalModeBootResult {\n\treadonly resolved: ResolvedSuiNetwork;\n\treadonly client: SuiClient;\n}\n\n/**\n * Build the local-mode boot Effect.\n *\n * `identity` is threaded in by the caller (the plugin barrel's acquire\n * body, which has access to the substrate's `IdentityContext` via the\n * outer composition layer); the body uses it to stamp the canonical\n * container label tuple so sweep / inventory are name-blind.\n *\n * `{pull}`, `{build}`, and vendored-build image branches are wired.\n */\nexport const bootLocalMode = (\n\truntime: ContainerRuntime,\n\tidentity: Identity,\n\tportBroker: PortBroker,\n\topts: SuiLocalOptions,\n): Effect.Effect<LocalModeBootResult, SuiPluginError | SuiConfigError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\t// ----- 1. Resolve image ---------------------------------------------\n\t\tyield* setCurrentPluginPhase('resolving Sui local image');\n\t\tconst image = yield* resolveImage(runtime, identity, opts);\n\n\t\t// ----- 2. Allocate ports + ensure container --------------------------\n\t\tyield* setCurrentPluginPhase('creating Sui validator container');\n\t\tconst labels: ContainerLabelTuple = {\n\t\t\tapp: identity.app,\n\t\t\tstack: identity.stack,\n\t\t\tplugin: 'sui',\n\t\t\trole: 'validator',\n\t\t};\n\t\tconst containerName = `devstack-${identity.app}-${identity.stack}-sui-validator`;\n\t\tconst { handle, ports } = yield* ensureLocalValidatorContainer(\n\t\t\truntime,\n\t\t\tportBroker,\n\t\t\timage,\n\t\t\tlabels,\n\t\t\tcontainerName,\n\t\t\topts,\n\t\t);\n\n\t\t// ----- 3. Ready probes ----------------------------------------------\n\t\tconst publishedPorts = resolvePublishedPortMapping(ports, handle.ports);\n\t\tconst directRpcUrl = `http://127.0.0.1:${publishedPorts[0]!.hostPort}`;\n\t\tconst directFaucetUrl = `http://127.0.0.1:${publishedPorts[1]!.hostPort}`;\n\t\tconst directGraphqlUrl = `http://127.0.0.1:${publishedPorts[2]!.hostPort}`;\n\t\tconst rpcUrl = yield* routedSuiUrl(identity, SUI_RPC_ENDPOINT_NAME, SUI_RPC_ENTRYPOINT_PORT);\n\t\tconst faucetUrl = yield* routedSuiUrl(\n\t\t\tidentity,\n\t\t\tSUI_FAUCET_ENDPOINT_NAME,\n\t\t\tSUI_FAUCET_ENTRYPOINT_PORT,\n\t\t);\n\t\tconst graphqlUrl = yield* routedSuiUrl(\n\t\t\tidentity,\n\t\t\tSUI_GRAPHQL_ENDPOINT_NAME,\n\t\t\tSUI_GRAPHQL_ENTRYPOINT_PORT,\n\t\t);\n\t\tconst readyTimeout = opts.readyTimeout ?? DEFAULT_LOCAL_READY_TIMEOUT;\n\n\t\tyield* setCurrentPluginPhase('waiting for Sui RPC, faucet, and GraphQL');\n\t\tyield* waitForReady(directRpcUrl, directFaucetUrl, directGraphqlUrl, readyTimeout).pipe(\n\t\t\tEffect.annotateLogs({ [SuiSpans.container]: handle.name }),\n\t\t);\n\n\t\tconst sdkClient = new SuiGrpcClient({ baseUrl: directRpcUrl, network: 'localnet' });\n\n\t\t// ----- 4. Resolve chain id ------------------------------------------\n\t\tyield* setCurrentPluginPhase('fetching Sui chain id');\n\t\tconst chain = yield* sharedFetchChainId(sdkClient, {\n\t\t\tspan: 'devstack.plugin.sui.local.fetchChainId',\n\t\t});\n\n\t\t// ----- 5. waitForTransactionsReady (memoised) -----------------------\n\t\tyield* setCurrentPluginPhase('preparing Sui funds-ready gate');\n\t\tconst waitForTransactionsReady = yield* buildWaitForTransactionsReady(directFaucetUrl);\n\n\t\t// ----- 6. Assemble resolved SuiClient -------------------------------\n\t\t// Surface `buildImage` so package's path-(b) `docker run --rm`\n\t\t// build path can spawn a one-shot sui-cli container using the\n\t\t// SAME image we built/resolved here. Without this the package\n\t\t// plugin would have to re-resolve the image, doubling the\n\t\t// build-context hash work and risking digest drift.\n\t\tconst { client } = yield* assembleSuiClient({\n\t\t\tsdkClient,\n\t\t\tchain,\n\t\t\trpcUrl,\n\t\t\tfaucetUrl,\n\t\t\tfundingFaucetUrl: directFaucetUrl,\n\t\t\tgraphqlUrl,\n\t\t\twaitForTransactionsReady,\n\t\t\tbuildImage: image,\n\t\t\thostGateway: {\n\t\t\t\trpcUrl: toDockerHostGatewayUrl(directRpcUrl),\n\t\t\t\tfaucetUrl: toDockerHostGatewayUrl(directFaucetUrl),\n\t\t\t\tgraphqlUrl: toDockerHostGatewayUrl(directGraphqlUrl),\n\t\t\t},\n\t\t});\n\t\tconst resolved = makeResolvedNetwork({\n\t\t\tmode: 'local',\n\t\t\tchain,\n\t\t\trpc: rpcUrl,\n\t\t\tfaucet: faucetUrl,\n\t\t\tgraphql: graphqlUrl,\n\t\t\tsource: 'default',\n\t\t});\n\t\treturn {\n\t\t\tresolved,\n\t\t\tclient,\n\t\t};\n\t}).pipe(\n\t\tEffect.withSpan('devstack.plugin.sui.local.boot', { attributes: { [SpanAttr.plugin]: 'sui' } }),\n\t);\n\n// ---------------------------------------------------------------------------\n// Image resolution — vendored Dockerfile build via `ContainerRuntime`\n// ---------------------------------------------------------------------------\n\nexport const resolveImage = (\n\truntime: ContainerRuntime,\n\tidentity: Identity,\n\topts: SuiLocalOptions,\n): Effect.Effect<ImageRef, SuiPluginError> =>\n\tEffect.gen(function* () {\n\t\tif (opts.image && 'pull' in opts.image) {\n\t\t\tconst pullRef = opts.image.pull;\n\t\t\tif (runtime.pullImage === undefined) {\n\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t'image-build',\n\t\t\t\t\t\t`sui local mode cannot pull image '${pullRef}' because the configured container runtime does not expose image pulls.`,\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn yield* runtime\n\t\t\t\t.pullImage(pullRef)\n\t\t\t\t.pipe(\n\t\t\t\t\tEffect.mapError((cause) =>\n\t\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t\t'image-build',\n\t\t\t\t\t\t\t`sui local mode failed to pull image '${pullRef}': ${cause.reason}: ${cause.detail}`,\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t}\n\t\tconst version = opts.version ?? DEFAULT_SUI_VERSION;\n\t\tconst owner = {\n\t\t\tapp: identity.app,\n\t\t\tstack: identity.stack,\n\t\t\tplugin: 'sui',\n\t\t\trole: 'validator',\n\t\t} as const;\n\t\tconst buildCtx =\n\t\t\topts.image && 'build' in opts.image\n\t\t\t\t? {\n\t\t\t\t\t\tcontextPath: opts.image.build.context,\n\t\t\t\t\t\tdockerfile: opts.image.build.dockerfile ?? 'Dockerfile',\n\t\t\t\t\t\tbuildArgs: { SUI_VERSION: version },\n\t\t\t\t\t\towner,\n\t\t\t\t\t}\n\t\t\t\t: { ...suiCliImageBuildContext(version), owner };\n\t\treturn yield* runtime\n\t\t\t.ensureImage(buildCtx)\n\t\t\t.pipe(\n\t\t\t\tEffect.mapError((cause) =>\n\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t'image-build',\n\t\t\t\t\t\t`sui image build failed: ${cause.reason}: ${cause.detail}`,\n\t\t\t\t\t\tcause,\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t);\n\t}).pipe(Effect.withSpan('devstack.plugin.sui.local.resolveImage'));\n\ninterface LocalValidatorContainerResult {\n\treadonly handle: ContainerHandle;\n\treadonly ports: ReadonlyArray<ContainerPortPublish>;\n}\n\ninterface ResolvedPortMapping {\n\treadonly ports: ReadonlyArray<ContainerPortPublish>;\n\treadonly release: Effect.Effect<void>;\n}\n\nexport const ensureLocalValidatorContainer = (\n\truntime: ContainerRuntime,\n\tportBroker: PortBroker,\n\timage: ImageRef,\n\tlabels: ContainerLabelTuple,\n\tcontainerName: string,\n\topts: SuiLocalOptions,\n): Effect.Effect<LocalValidatorContainerResult, SuiPluginError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tconst reusablePorts =\n\t\t\topts.ports === undefined\n\t\t\t\t? yield* findReusablePortMapping(runtime, labels, containerName)\n\t\t\t\t: undefined;\n\t\tif (reusablePorts !== undefined) {\n\t\t\treturn yield* ensureLocalValidatorContainerAttempt({\n\t\t\t\truntime,\n\t\t\t\tportBroker,\n\t\t\t\timage,\n\t\t\t\tlabels,\n\t\t\t\tcontainerName,\n\t\t\t\topts,\n\t\t\t\tports: reusablePorts,\n\t\t\t\tattempt: 0,\n\t\t\t\treconciliation: 'adopt-existing',\n\t\t\t});\n\t\t}\n\t\treturn yield* ensureLocalValidatorContainerWithFreshPorts({\n\t\t\truntime,\n\t\t\tportBroker,\n\t\t\timage,\n\t\t\tlabels,\n\t\t\tcontainerName,\n\t\t\topts,\n\t\t\tattempt: 0,\n\t\t\treconciliation: opts.ports ? 'exact' : 'adopt-existing',\n\t\t});\n\t});\n\ninterface EnsureLocalValidatorContainerBase {\n\treadonly runtime: ContainerRuntime;\n\treadonly portBroker: PortBroker;\n\treadonly image: ImageRef;\n\treadonly labels: ContainerLabelTuple;\n\treadonly containerName: string;\n\treadonly opts: SuiLocalOptions;\n}\n\nconst ensureLocalValidatorContainerWithFreshPorts = (\n\tparams: EnsureLocalValidatorContainerBase & {\n\t\treadonly attempt: number;\n\t\treadonly reconciliation: PortBindingReconciliation;\n\t},\n): Effect.Effect<LocalValidatorContainerResult, SuiPluginError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tconst mapping = yield* resolvePortMappingWithRelease(params.portBroker, params.opts.ports);\n\t\treturn yield* ensureLocalValidatorContainerAttempt({\n\t\t\t...params,\n\t\t\tports: mapping.ports,\n\t\t\treleasePorts: mapping.release,\n\t\t});\n\t});\n\nconst ensureLocalValidatorContainerAttempt = (\n\tparams: EnsureLocalValidatorContainerBase & {\n\t\treadonly ports: ReadonlyArray<ContainerPortPublish>;\n\t\treadonly releasePorts?: Effect.Effect<void>;\n\t\treadonly attempt: number;\n\t\treadonly reconciliation: PortBindingReconciliation;\n\t},\n): Effect.Effect<LocalValidatorContainerResult, SuiPluginError, Scope.Scope> =>\n\tensureManagedContainer({\n\t\truntime: params.runtime,\n\t\tlabels: params.labels,\n\t\tspec: {\n\t\t\tname: params.containerName,\n\t\t\timage: params.image,\n\t\t\t// Keep the writable layer only after clean exits. If Docker\n\t\t\t// escalates a previous stop to SIGKILL (137), resume can hang\n\t\t\t// in RocksDB/checkpoint recovery with no RPC/faucet probes.\n\t\t\t// `on-failure` routes that stale layer to recreate while still\n\t\t\t// warm-resuming normal exit 0 / 130 stops. The longer grace\n\t\t\t// gives the entrypoint's SIGINT forwarding time to drain.\n\t\t\trecreate: 'on-failure',\n\t\t\tstopGraceSeconds: LOCAL_VALIDATOR_STOP_GRACE_SECONDS,\n\t\t\tports: params.ports,\n\t\t\tportBindingReconciliation: params.reconciliation,\n\t\t},\n\t\tmapError: (cause) => cause,\n\t}).pipe(\n\t\tEffect.map((handle) => ({ handle, ports: params.ports })),\n\t\tEffect.catch((cause: ContainerRuntimeError) => {\n\t\t\tif (\n\t\t\t\tparams.opts.ports === undefined &&\n\t\t\t\tcause.reason === 'publish-port-conflict' &&\n\t\t\t\tparams.attempt < MAX_DOCKER_PUBLISH_PORT_RETRIES\n\t\t\t) {\n\t\t\t\treturn (params.releasePorts ?? Effect.void).pipe(\n\t\t\t\t\tEffect.andThen(\n\t\t\t\t\t\tensureLocalValidatorContainerWithFreshPorts({\n\t\t\t\t\t\t\t...params,\n\t\t\t\t\t\t\tattempt: params.attempt + 1,\n\t\t\t\t\t\t\treconciliation: 'exact',\n\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn Effect.fail(\n\t\t\t\tsuiPluginError(\n\t\t\t\t\t'container-start',\n\t\t\t\t\t`sui-validator container failed: ${cause.reason}: ${cause.detail}`,\n\t\t\t\t\tcause,\n\t\t\t\t),\n\t\t\t);\n\t\t}),\n\t);\n\n// ---------------------------------------------------------------------------\n// Port mapping — host:container pairs\n// ---------------------------------------------------------------------------\n\n// Exported test entry point: resolves the host:container port pairs\n// without surfacing the release handle (the live boot path uses\n// `resolvePortMappingWithRelease` directly to retain the release).\nexport const resolvePortMapping = (\n\tportBroker: PortBroker,\n\toverride: Readonly<Record<number, number>> | undefined,\n): Effect.Effect<ReadonlyArray<ContainerPortPublish>, SuiPluginError, Scope.Scope> =>\n\tresolvePortMappingWithRelease(portBroker, override).pipe(Effect.map((mapping) => mapping.ports));\n\nconst resolvePortMappingWithRelease = (\n\tportBroker: PortBroker,\n\toverride: Readonly<Record<number, number>> | undefined,\n): Effect.Effect<ResolvedPortMapping, SuiPluginError, Scope.Scope> => {\n\tconst pick = (containerPort: number, fallback: number): number => {\n\t\tif (!override) return fallback;\n\t\tconst hit = override[containerPort];\n\t\treturn typeof hit === 'number' ? hit : fallback;\n\t};\n\tif (override) {\n\t\treturn Effect.succeed({\n\t\t\tports: [\n\t\t\t\tportPublish(CONTAINER_RPC_PORT, pick(CONTAINER_RPC_PORT, DEFAULT_HOST_RPC_PORT)),\n\t\t\t\tportPublish(CONTAINER_FAUCET_PORT, pick(CONTAINER_FAUCET_PORT, DEFAULT_HOST_FAUCET_PORT)),\n\t\t\t\tportPublish(\n\t\t\t\t\tCONTAINER_GRAPHQL_PORT,\n\t\t\t\t\tpick(CONTAINER_GRAPHQL_PORT, DEFAULT_HOST_GRAPHQL_PORT),\n\t\t\t\t),\n\t\t\t],\n\t\t\trelease: Effect.void,\n\t\t});\n\t}\n\treturn Effect.gen(function* () {\n\t\tconst rpc = yield* allocatePort(portBroker, 'sui:rpc', DEFAULT_HOST_RPC_PORT, 'rpc');\n\t\tconst faucet = yield* allocatePort(\n\t\t\tportBroker,\n\t\t\t'sui:faucet',\n\t\t\tDEFAULT_HOST_FAUCET_PORT,\n\t\t\t'faucet',\n\t\t);\n\t\tconst graphql = yield* allocatePort(\n\t\t\tportBroker,\n\t\t\t'sui:graphql',\n\t\t\tDEFAULT_HOST_GRAPHQL_PORT,\n\t\t\t'graphql',\n\t\t);\n\t\treturn {\n\t\t\tports: [\n\t\t\t\tportPublish(CONTAINER_RPC_PORT, rpc.port),\n\t\t\t\tportPublish(CONTAINER_FAUCET_PORT, faucet.port),\n\t\t\t\tportPublish(CONTAINER_GRAPHQL_PORT, graphql.port),\n\t\t\t],\n\t\t\trelease: Effect.all([rpc.release, faucet.release, graphql.release], { discard: true }),\n\t\t};\n\t});\n};\n\nexport const resolvePublishedPortMapping = (\n\trequested: ReadonlyArray<ContainerPortPublish>,\n\tactual: ReadonlyArray<ContainerPortPublish> | undefined,\n): ReadonlyArray<ContainerPortPublish> => [\n\tpickPublishedPort(requested, actual, CONTAINER_RPC_PORT, DEFAULT_HOST_RPC_PORT),\n\tpickPublishedPort(requested, actual, CONTAINER_FAUCET_PORT, DEFAULT_HOST_FAUCET_PORT),\n\tpickPublishedPort(requested, actual, CONTAINER_GRAPHQL_PORT, DEFAULT_HOST_GRAPHQL_PORT),\n];\n\nconst pickPublishedPort = (\n\trequested: ReadonlyArray<ContainerPortPublish>,\n\tactual: ReadonlyArray<ContainerPortPublish> | undefined,\n\tcontainerPort: number,\n\tfallbackHostPort: number,\n): ContainerPortPublish =>\n\tactual?.find((port) => port.containerPort === containerPort) ??\n\trequested.find((port) => port.containerPort === containerPort) ??\n\tportPublish(containerPort, fallbackHostPort);\n\nexport const selectReusablePortMapping = (\n\thandles: ReadonlyArray<ContainerHandle>,\n\tcontainerName: string,\n): ReadonlyArray<ContainerPortPublish> | undefined => {\n\tconst ports = handles.find((handle) => handle.name === containerName)?.ports;\n\tif (!hasSuiPortMapping(ports)) return undefined;\n\treturn resolvePublishedPortMapping([], ports);\n};\n\nconst findReusablePortMapping = (\n\truntime: ContainerRuntime,\n\tlabels: ContainerLabelTuple,\n\tcontainerName: string,\n): Effect.Effect<ReadonlyArray<ContainerPortPublish> | undefined, SuiPluginError> =>\n\truntime.inspectByLabels(labels).pipe(\n\t\tEffect.map((handles) => selectReusablePortMapping(handles, containerName)),\n\t\tEffect.mapError((cause) =>\n\t\t\tsuiPluginError(\n\t\t\t\t'container-start',\n\t\t\t\t`sui local mode: failed to inspect existing validator container: ${cause.reason}: ${cause.detail}`,\n\t\t\t\tcause,\n\t\t\t),\n\t\t),\n\t);\n\nconst hasSuiPortMapping = (\n\tports: ReadonlyArray<ContainerPortPublish> | undefined,\n): ports is ReadonlyArray<ContainerPortPublish> =>\n\tports !== undefined &&\n\tports.some((port) => port.containerPort === CONTAINER_RPC_PORT) &&\n\tports.some((port) => port.containerPort === CONTAINER_FAUCET_PORT) &&\n\tports.some((port) => port.containerPort === CONTAINER_GRAPHQL_PORT);\n\nconst portPublish = (containerPort: number, hostPort: number): ContainerPortPublish => ({\n\tcontainerPort,\n\thostPort,\n\thostIp: DOCKER_PUBLISH_HOST,\n});\n\nconst allocatePort = (\n\tportBroker: PortBroker,\n\towner: string,\n\tpreferredPort: number | undefined,\n\tlabel: 'rpc' | 'faucet' | 'graphql',\n): Effect.Effect<AllocatedPort, SuiPluginError, Scope.Scope> => {\n\tconst allocate = (\n\t\thint: number | undefined,\n\t): Effect.Effect<AllocatedPort, SuiPluginError, Scope.Scope> =>\n\t\tportBroker\n\t\t\t.allocate({\n\t\t\t\towner,\n\t\t\t\t...(hint === undefined ? {} : { preferredPort: hint }),\n\t\t\t\tprobeHost: DOCKER_PUBLISH_HOST,\n\t\t\t})\n\t\t\t.pipe(\n\t\t\t\tEffect.catchTag('PortBrokerError', (cause) =>\n\t\t\t\t\thint !== undefined && cause.reason === 'preferred-busy'\n\t\t\t\t\t\t? portBroker.allocate({ owner, probeHost: DOCKER_PUBLISH_HOST })\n\t\t\t\t\t\t: Effect.fail(cause),\n\t\t\t\t),\n\t\t\t\tEffect.mapError((cause) =>\n\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t'port-allocate',\n\t\t\t\t\t\t`sui local mode: failed to allocate ${label} host port ` +\n\t\t\t\t\t\t\t`(preferred ${hint ?? 'auto'}): ${cause.detail}`,\n\t\t\t\t\t\tcause,\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t);\n\treturn allocate(preferredPort);\n};\n\n// ---------------------------------------------------------------------------\n// Ready-probe coordination\n// ---------------------------------------------------------------------------\n\n/** Coordinated readiness gate. Both RPC + faucet must respond within\n *  the outer deadline; each probe has its own per-fetch deadline so a\n *  wedged endpoint surfaces by name. */\nconst waitForReady = (\n\trpcUrl: string,\n\tfaucetUrl: string,\n\tgraphqlUrl: string,\n\treadyTimeout: Duration.Duration,\n): Effect.Effect<void, SuiPluginError> =>\n\tEffect.gen(function* () {\n\t\tconst readyTimeoutMs = Duration.toMillis(readyTimeout);\n\t\tconst rpcProbe: Effect.Effect<void, SuiPluginError> = waitForHttpEndpoint({\n\t\t\tendpoint: rpcUrl,\n\t\t\ttimeoutMs: readyTimeoutMs,\n\t\t\tintervalMs: 1_000,\n\t\t\trequestTimeoutMs: PROBE_FETCH_TIMEOUT_MS,\n\t\t\trequestInit: {\n\t\t\t\tmethod: 'POST',\n\t\t\t\theaders: { 'content-type': 'application/json' },\n\t\t\t\tbody: JSON.stringify({\n\t\t\t\t\tjsonrpc: '2.0',\n\t\t\t\t\tid: 1,\n\t\t\t\t\tmethod: 'sui_getLatestCheckpointSequenceNumber',\n\t\t\t\t\tparams: [],\n\t\t\t\t}),\n\t\t\t},\n\t\t\tvalidate: async (response) => {\n\t\t\t\tif (!response.ok) return false;\n\t\t\t\tconst body = (await response.json()) as { readonly result?: unknown };\n\t\t\t\treturn typeof body.result === 'string' || typeof body.result === 'number';\n\t\t\t},\n\t\t}).pipe(\n\t\t\tEffect.mapError(\n\t\t\t\t(cause): SuiPluginError =>\n\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t'rpc-probe',\n\t\t\t\t\t\t`sui local mode: RPC endpoint ${rpcUrl} did not become ready within ` +\n\t\t\t\t\t\t\t`${readyTimeoutMs}ms: ${formatUnknownError(cause)}`,\n\t\t\t\t\t\tcause,\n\t\t\t\t\t),\n\t\t\t),\n\t\t\tEffect.withSpan('devstack.plugin.sui.local.probe.rpc'),\n\t\t);\n\n\t\t// Faucet socket-level liveness — `GET /` returns \"OK\" as soon as\n\t\t// the HTTP server is bound. We do NOT POST `/v2/gas` here; that's\n\t\t// the funds-ready probe, which is paid for lazily on first call.\n\t\tconst faucetProbe: Effect.Effect<void, SuiPluginError> = waitForHttpEndpoint({\n\t\t\tendpoint: faucetUrl,\n\t\t\ttimeoutMs: readyTimeoutMs,\n\t\t\tintervalMs: 1_000,\n\t\t\trequestTimeoutMs: PROBE_FETCH_TIMEOUT_MS,\n\t\t\tvalidate: (response) => response.status < 500,\n\t\t}).pipe(\n\t\t\tEffect.mapError(\n\t\t\t\t(cause): SuiPluginError =>\n\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t'faucet-probe',\n\t\t\t\t\t\t`sui local mode: faucet endpoint ${faucetUrl} did not become ready within ` +\n\t\t\t\t\t\t\t`${readyTimeoutMs}ms: ${formatUnknownError(cause)}`,\n\t\t\t\t\t\tcause,\n\t\t\t\t\t),\n\t\t\t),\n\t\t\tEffect.withSpan('devstack.plugin.sui.local.probe.faucet'),\n\t\t);\n\n\t\tconst graphqlProbe: Effect.Effect<void, SuiPluginError> = waitForHttpEndpoint({\n\t\t\tendpoint: graphqlUrl,\n\t\t\ttimeoutMs: readyTimeoutMs,\n\t\t\tintervalMs: 1_000,\n\t\t\trequestTimeoutMs: PROBE_FETCH_TIMEOUT_MS,\n\t\t\tvalidate: (response) => response.status < 500,\n\t\t}).pipe(\n\t\t\tEffect.mapError(\n\t\t\t\t(cause): SuiPluginError =>\n\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t'graphql-probe',\n\t\t\t\t\t\t`sui local mode: GraphQL endpoint ${graphqlUrl} did not become ready within ` +\n\t\t\t\t\t\t\t`${readyTimeoutMs}ms: ${formatUnknownError(cause)}`,\n\t\t\t\t\t\tcause,\n\t\t\t\t\t),\n\t\t\t),\n\t\t\tEffect.withSpan('devstack.plugin.sui.local.probe.graphql'),\n\t\t);\n\n\t\tyield* Effect.all([rpcProbe, faucetProbe, graphqlProbe], { concurrency: 'unbounded' }).pipe(\n\t\t\tEffect.asVoid,\n\t\t);\n\t}).pipe(Effect.withSpan('devstack.plugin.sui.local.waitForReady'));\n\n// Chain-id fetch + waitForTransactionsReady builders live in\n// `shared-boot.ts` — see imports at the top of this file.\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\nconst routedSuiUrl = (\n\tidentity: Identity,\n\tendpointName: string,\n\tport: number,\n): Effect.Effect<string, SuiPluginError> =>\n\troutedHostname(identity, endpointName).pipe(\n\t\tEffect.map((hostname) => renderUrl({ protocol: 'http', hostname, port })),\n\t\tEffect.mapError((cause) =>\n\t\t\tsuiPluginError(\n\t\t\t\t'container-start',\n\t\t\t\t`sui local mode: failed to construct router URL for ${endpointName}: ${cause.detail}`,\n\t\t\t\tcause,\n\t\t\t),\n\t\t),\n\t);\n"],"mappings":";;;;;;;;;;;;;;;;;;AA8FA,MAAa,8BAA8B,SAAS,QAAQ,GAAG;;;;;AAM/D,MAAa,sBAAsB;AAKnC,MAAM,qBAAqB;AAC3B,MAAM,wBAAwB;AAC9B,MAAM,yBAAyB;AAI/B,MAAa,wBAAwB;AACrC,MAAa,2BAA2B;AACxC,MAAa,4BAA4B;AACzC,MAAM,sBAAsB;;;;AAO5B,MAAM,yBAAyB;;;;;;;;;;;AAkB/B,MAAa,iBACZ,SACA,UACA,YACA,SAEA,OAAO,IAAI,aAAa;AAEvB,QAAO,sBAAsB,4BAA4B;CACzD,MAAM,QAAQ,OAAO,aAAa,SAAS,UAAU,KAAK;AAG1D,QAAO,sBAAsB,mCAAmC;CAQhE,MAAM,EAAE,QAAQ,UAAU,OAAO,8BAChC,SACA,YACA,OACA;EAVA,KAAK,SAAS;EACd,OAAO,SAAS;EAChB,QAAQ;EACR,MAAM;EAOA,EACN,YANiC,SAAS,IAAI,GAAG,SAAS,MAAM,iBAOhE,KACA;CAGD,MAAM,iBAAiB,4BAA4B,OAAO,OAAO,MAAM;CACvE,MAAM,eAAe,oBAAoB,eAAe,GAAI;CAC5D,MAAM,kBAAkB,oBAAoB,eAAe,GAAI;CAC/D,MAAM,mBAAmB,oBAAoB,eAAe,GAAI;CAChE,MAAM,SAAS,OAAO,aAAa,UAAA,OAAiC,wBAAwB;CAC5F,MAAM,YAAY,OAAO,aACxB,UACA,0BACA,2BACA;CACD,MAAM,aAAa,OAAO,aACzB,UACA,2BACA,4BACA;CACD,MAAM,eAAe,KAAK,gBAAgB;AAE1C,QAAO,sBAAsB,2CAA2C;AACxE,QAAO,aAAa,cAAc,iBAAiB,kBAAkB,aAAa,CAAC,KAClF,OAAO,aAAa,GAAG,SAAS,YAAY,OAAO,MAAM,CAAC,CAC1D;CAED,MAAM,YAAY,IAAI,cAAc;EAAE,SAAS;EAAc,SAAS;EAAY,CAAC;AAGnF,QAAO,sBAAsB,wBAAwB;CACrD,MAAM,QAAQ,OAAOA,aAAmB,WAAW,EAClD,MAAM,0CACN,CAAC;AAGF,QAAO,sBAAsB,iCAAiC;CAS9D,MAAM,EAAE,WAAW,OAAO,kBAAkB;EAC3C;EACA;EACA;EACA;EACA,kBAAkB;EAClB;EACA,0BAAA,OAfuC,8BAA8B,gBAAgB;EAgBrF,YAAY;EACZ,aAAa;GACZ,QAAQ,uBAAuB,aAAa;GAC5C,WAAW,uBAAuB,gBAAgB;GAClD,YAAY,uBAAuB,iBAAiB;GACpD;EACD,CAAC;AASF,QAAO;EACN,UATgB,oBAAoB;GACpC,MAAM;GACN;GACA,KAAK;GACL,QAAQ;GACR,SAAS;GACT,QAAQ;GACR,CAEQ;EACR;EACA;EACA,CAAC,KACF,OAAO,SAAS,kCAAkC,EAAE,YAAY,GAAG,SAAS,SAAS,OAAO,EAAE,CAAC,CAC/F;AAMF,MAAa,gBACZ,SACA,UACA,SAEA,OAAO,IAAI,aAAa;AACvB,KAAI,KAAK,SAAS,UAAU,KAAK,OAAO;EACvC,MAAM,UAAU,KAAK,MAAM;AAC3B,MAAI,QAAQ,cAAc,KAAA,EACzB,QAAO,OAAO,OAAO,KACpB,eACC,eACA,qCAAqC,QAAQ,yEAC7C,CACD;AAEF,SAAO,OAAO,QACZ,UAAU,QAAQ,CAClB,KACA,OAAO,UAAU,UAChB,eACC,eACA,wCAAwC,QAAQ,KAAK,MAAM,OAAO,IAAI,MAAM,UAC5E,MACA,CACD,CACD;;CAEH,MAAM,UAAU,KAAK,WAAW;CAChC,MAAM,QAAQ;EACb,KAAK,SAAS;EACd,OAAO,SAAS;EAChB,QAAQ;EACR,MAAM;EACN;CACD,MAAM,WACL,KAAK,SAAS,WAAW,KAAK,QAC3B;EACA,aAAa,KAAK,MAAM,MAAM;EAC9B,YAAY,KAAK,MAAM,MAAM,cAAc;EAC3C,WAAW,EAAE,aAAa,SAAS;EACnC;EACA,GACA;EAAE,GAAG,wBAAwB,QAAQ;EAAE;EAAO;AAClD,QAAO,OAAO,QACZ,YAAY,SAAS,CACrB,KACA,OAAO,UAAU,UAChB,eACC,eACA,2BAA2B,MAAM,OAAO,IAAI,MAAM,UAClD,MACA,CACD,CACD;EACD,CAAC,KAAK,OAAO,SAAS,yCAAyC,CAAC;AAYnE,MAAa,iCACZ,SACA,YACA,OACA,QACA,eACA,SAEA,OAAO,IAAI,aAAa;CACvB,MAAM,gBACL,KAAK,UAAU,KAAA,IACZ,OAAO,wBAAwB,SAAS,QAAQ,cAAc,GAC9D,KAAA;AACJ,KAAI,kBAAkB,KAAA,EACrB,QAAO,OAAO,qCAAqC;EAClD;EACA;EACA;EACA;EACA;EACA;EACA,OAAO;EACP,SAAS;EACT,gBAAgB;EAChB,CAAC;AAEH,QAAO,OAAO,4CAA4C;EACzD;EACA;EACA;EACA;EACA;EACA;EACA,SAAS;EACT,gBAAgB,KAAK,QAAQ,UAAU;EACvC,CAAC;EACD;AAWH,MAAM,+CACL,WAKA,OAAO,IAAI,aAAa;CACvB,MAAM,UAAU,OAAO,8BAA8B,OAAO,YAAY,OAAO,KAAK,MAAM;AAC1F,QAAO,OAAO,qCAAqC;EAClD,GAAG;EACH,OAAO,QAAQ;EACf,cAAc,QAAQ;EACtB,CAAC;EACD;AAEH,MAAM,wCACL,WAOA,uBAAuB;CACtB,SAAS,OAAO;CAChB,QAAQ,OAAO;CACf,MAAM;EACL,MAAM,OAAO;EACb,OAAO,OAAO;EAOd,UAAU;EACV,kBAAA;EACA,OAAO,OAAO;EACd,2BAA2B,OAAO;EAClC;CACD,WAAW,UAAU;CACrB,CAAC,CAAC,KACF,OAAO,KAAK,YAAY;CAAE;CAAQ,OAAO,OAAO;CAAO,EAAE,EACzD,OAAO,OAAO,UAAiC;AAC9C,KACC,OAAO,KAAK,UAAU,KAAA,KACtB,MAAM,WAAW,2BACjB,OAAO,UAAA,EAEP,SAAQ,OAAO,gBAAgB,OAAO,MAAM,KAC3C,OAAO,QACN,4CAA4C;EAC3C,GAAG;EACH,SAAS,OAAO,UAAU;EAC1B,gBAAgB;EAChB,CAAC,CACF,CACD;AAEF,QAAO,OAAO,KACb,eACC,mBACA,mCAAmC,MAAM,OAAO,IAAI,MAAM,UAC1D,MACA,CACD;EACA,CACF;AAeF,MAAM,iCACL,YACA,aACqE;CACrE,MAAM,QAAQ,eAAuB,aAA6B;AACjE,MAAI,CAAC,SAAU,QAAO;EACtB,MAAM,MAAM,SAAS;AACrB,SAAO,OAAO,QAAQ,WAAW,MAAM;;AAExC,KAAI,SACH,QAAO,OAAO,QAAQ;EACrB,OAAO;GACN,YAAY,oBAAoB,KAAK,oBAAoB,sBAAsB,CAAC;GAChF,YAAY,uBAAuB,KAAK,uBAAuB,yBAAyB,CAAC;GACzF,YACC,wBACA,KAAK,wBAAwB,0BAA0B,CACvD;GACD;EACD,SAAS,OAAO;EAChB,CAAC;AAEH,QAAO,OAAO,IAAI,aAAa;EAC9B,MAAM,MAAM,OAAO,aAAa,YAAY,WAAW,uBAAuB,MAAM;EACpF,MAAM,SAAS,OAAO,aACrB,YACA,cACA,0BACA,SACA;EACD,MAAM,UAAU,OAAO,aACtB,YACA,eACA,2BACA,UACA;AACD,SAAO;GACN,OAAO;IACN,YAAY,oBAAoB,IAAI,KAAK;IACzC,YAAY,uBAAuB,OAAO,KAAK;IAC/C,YAAY,wBAAwB,QAAQ,KAAK;IACjD;GACD,SAAS,OAAO,IAAI;IAAC,IAAI;IAAS,OAAO;IAAS,QAAQ;IAAQ,EAAE,EAAE,SAAS,MAAM,CAAC;GACtF;GACA;;AAGH,MAAa,+BACZ,WACA,WACyC;CACzC,kBAAkB,WAAW,QAAQ,oBAAoB,sBAAsB;CAC/E,kBAAkB,WAAW,QAAQ,uBAAuB,yBAAyB;CACrF,kBAAkB,WAAW,QAAQ,wBAAwB,0BAA0B;CACvF;AAED,MAAM,qBACL,WACA,QACA,eACA,qBAEA,QAAQ,MAAM,SAAS,KAAK,kBAAkB,cAAc,IAC5D,UAAU,MAAM,SAAS,KAAK,kBAAkB,cAAc,IAC9D,YAAY,eAAe,iBAAiB;AAE7C,MAAa,6BACZ,SACA,kBACqD;CACrD,MAAM,QAAQ,QAAQ,MAAM,WAAW,OAAO,SAAS,cAAc,EAAE;AACvE,KAAI,CAAC,kBAAkB,MAAM,CAAE,QAAO,KAAA;AACtC,QAAO,4BAA4B,EAAE,EAAE,MAAM;;AAG9C,MAAM,2BACL,SACA,QACA,kBAEA,QAAQ,gBAAgB,OAAO,CAAC,KAC/B,OAAO,KAAK,YAAY,0BAA0B,SAAS,cAAc,CAAC,EAC1E,OAAO,UAAU,UAChB,eACC,mBACA,mEAAmE,MAAM,OAAO,IAAI,MAAM,UAC1F,MACA,CACD,CACD;AAEF,MAAM,qBACL,UAEA,UAAU,KAAA,KACV,MAAM,MAAM,SAAS,KAAK,kBAAkB,mBAAmB,IAC/D,MAAM,MAAM,SAAS,KAAK,kBAAkB,sBAAsB,IAClE,MAAM,MAAM,SAAS,KAAK,kBAAkB,uBAAuB;AAEpE,MAAM,eAAe,eAAuB,cAA4C;CACvF;CACA;CACA,QAAQ;CACR;AAED,MAAM,gBACL,YACA,OACA,eACA,UAC+D;CAC/D,MAAM,YACL,SAEA,WACE,SAAS;EACT;EACA,GAAI,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,eAAe,MAAM;EACrD,WAAW;EACX,CAAC,CACD,KACA,OAAO,SAAS,oBAAoB,UACnC,SAAS,KAAA,KAAa,MAAM,WAAW,mBACpC,WAAW,SAAS;EAAE;EAAO,WAAW;EAAqB,CAAC,GAC9D,OAAO,KAAK,MAAM,CACrB,EACD,OAAO,UAAU,UAChB,eACC,iBACA,sCAAsC,MAAM,wBAC7B,QAAQ,OAAO,KAAK,MAAM,UACzC,MACA,CACD,CACD;AACH,QAAO,SAAS,cAAc;;;;;AAU/B,MAAM,gBACL,QACA,WACA,YACA,iBAEA,OAAO,IAAI,aAAa;CACvB,MAAM,iBAAiB,SAAS,SAAS,aAAa;CACtD,MAAM,WAAgD,oBAAoB;EACzE,UAAU;EACV,WAAW;EACX,YAAY;EACZ,kBAAkB;EAClB,aAAa;GACZ,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAC/C,MAAM,KAAK,UAAU;IACpB,SAAS;IACT,IAAI;IACJ,QAAQ;IACR,QAAQ,EAAE;IACV,CAAC;GACF;EACD,UAAU,OAAO,aAAa;AAC7B,OAAI,CAAC,SAAS,GAAI,QAAO;GACzB,MAAM,OAAQ,MAAM,SAAS,MAAM;AACnC,UAAO,OAAO,KAAK,WAAW,YAAY,OAAO,KAAK,WAAW;;EAElE,CAAC,CAAC,KACF,OAAO,UACL,UACA,eACC,aACA,gCAAgC,OAAO,+BACnC,eAAe,MAAM,mBAAmB,MAAM,IAClD,MACA,CACF,EACD,OAAO,SAAS,sCAAsC,CACtD;CAKD,MAAM,cAAmD,oBAAoB;EAC5E,UAAU;EACV,WAAW;EACX,YAAY;EACZ,kBAAkB;EAClB,WAAW,aAAa,SAAS,SAAS;EAC1C,CAAC,CAAC,KACF,OAAO,UACL,UACA,eACC,gBACA,mCAAmC,UAAU,+BACzC,eAAe,MAAM,mBAAmB,MAAM,IAClD,MACA,CACF,EACD,OAAO,SAAS,yCAAyC,CACzD;CAED,MAAM,eAAoD,oBAAoB;EAC7E,UAAU;EACV,WAAW;EACX,YAAY;EACZ,kBAAkB;EAClB,WAAW,aAAa,SAAS,SAAS;EAC1C,CAAC,CAAC,KACF,OAAO,UACL,UACA,eACC,iBACA,oCAAoC,WAAW,+BAC3C,eAAe,MAAM,mBAAmB,MAAM,IAClD,MACA,CACF,EACD,OAAO,SAAS,0CAA0C,CAC1D;AAED,QAAO,OAAO,IAAI;EAAC;EAAU;EAAa;EAAa,EAAE,EAAE,aAAa,aAAa,CAAC,CAAC,KACtF,OAAO,OACP;EACA,CAAC,KAAK,OAAO,SAAS,yCAAyC,CAAC;AASnE,MAAM,gBACL,UACA,cACA,SAEA,eAAe,UAAU,aAAa,CAAC,KACtC,OAAO,KAAK,aAAa,UAAU;CAAE,UAAU;CAAQ;CAAU;CAAM,CAAC,CAAC,EACzE,OAAO,UAAU,UAChB,eACC,mBACA,sDAAsD,aAAa,IAAI,MAAM,UAC7E,MACA,CACD,CACD"}
+{"version":3,"file":"local.mjs","names":["sharedFetchChainId"],"sources":["../../../../src/plugins/sui/mode/local.ts"],"sourcesContent":["// Sui plugin — local-container mode.\n//\n// In-stack Sui validator + faucet, running in the supervised docker\n// stack. Used during normal dev loops when the developer wants fresh,\n// fast, throwaway chain state with a working faucet.\n//\n// Boot sequence (load-bearing order):\n//\n//   1. Resolve image — vendored Dockerfile build via the\n//      ContainerRuntime contract (caller `image` override honoured for\n//      `{build}`; `{pull}` is deferred — see stub list in the README).\n//   2. Allocate + ensure container — `sui start --with-faucet=0.0.0.0:9123\n//      --with-graphql=0.0.0.0:9125` with direct host port-publishing\n//      for internal boot probes. User-facing URLs are router-fronted\n//      named hosts; the direct host ports intentionally live in the\n//      high private windows so they do not collide with router\n//      entrypoints.\n//      RecreatePolicy is `on-failure` so the writable layer (chain\n//      state at `/root/.sui`) survives clean stop/start cycles, but an\n//      unclean SIGKILL/137 exit recreates instead of resuming a suspect\n//      RocksDB/checkpoint state. The runtime stops the container with\n//      SIGINT so sui runs its ctrl-c shutdown path.\n//   3. Ready probe — gRPC service info, faucet `GET /`, and GraphQL\n//      HTTP liveness. Per-fetch deadline + outer deadline.\n//   4. Fetch chain id from the now-responsive client (bounded timeout).\n//   5. Build `waitForTransactionsReady` — `Effect.cached` against a\n//      real faucet funding tx; first failure caches for the scope.\n//      Manual `invalidate` clears the memo.\n//   6. Return resolved `SuiClient`. Auto-tick is the no-op advancer\n//      (localnet drives its own consensus).\n//\n// Faucet socket-level readiness does NOT imply funds-transferability.\n// The first `waitForTransactionsReady.wait` POSTs a real funding tx,\n// retrying on body-level `{Failure}` responses during the post-RPC /\n// pre-fund window.\n//\n// GraphQL indexer (on by default):\n//   - The sui-tools base ships no embedded Postgres, so `--with-graphql`\n//     reads from a separate DB. By default the sui plugin OWNS that DB as\n//     a postgres SIDECAR (provisioned in the barrel before this body\n//     runs); the caller can instead BYO a Postgres, or opt out entirely.\n//     Either way this body receives a resolved `{ url, network }`\n//     (`undefined` when indexer is off), attaches the validator to that\n//     network, and passes the DSN in via `DEVSTACK_SUI_INDEXER_URL` so\n//     the entrypoint appends `--with-graphql` + `--with-indexer=<dsn>`.\n//\n// What this body deliberately defers:\n//   - Snapshot capture — the framework exists in the plugin's\n//     snapshot.ts; this body produces the running container that the\n//     orchestrator captures.\n\nimport { Duration, Effect, type Scope } from 'effect';\n\nimport { SuiGrpcClient } from '@mysten/sui/grpc';\n\nimport type {\n\tContainerHandle,\n\tContainerRuntime,\n\tContainerRuntimeError,\n\tImageRef,\n\tContainerPortPublish,\n\tPortBindingReconciliation,\n} from '../../../contracts/container-runtime.ts';\nimport type { ContainerLabelTuple } from '../../../contracts/snapshotable.ts';\nimport type { Identity } from '../../../substrate/identity.ts';\nimport type { AllocatedPort, PortBroker } from '../../../substrate/runtime/port-broker/index.ts';\nimport { waitForHttpEndpoint } from '../../../substrate/runtime/http-probe.ts';\nimport { waitForProbe } from '../../../substrate/runtime/probes.ts';\nimport { setCurrentPluginPhase } from '../../../substrate/runtime/current-plugin.ts';\nimport { ensureManagedContainer } from '../../../substrate/runtime/managed-container.ts';\nimport { renderUrl, routedHostname } from '../../../substrate/runtime/routed-url.ts';\nimport { suiCliImageBuildContext } from '../move/index.ts';\nimport { suiPluginError, type SuiConfigError, type SuiPluginError } from '../errors.ts';\nimport { formatUnknownError } from '../../../substrate/runtime/format-unknown-error.ts';\nimport type { ResolvedSuiNetwork } from '../network-resolver.ts';\nimport { SuiLogAttr } from '../log-attrs.ts';\nimport {\n\tSUI_FAUCET_ENTRYPOINT_PORT,\n\tSUI_FAUCET_ENDPOINT_NAME,\n\tSUI_GRAPHQL_ENDPOINT_NAME,\n\tSUI_GRAPHQL_ENTRYPOINT_PORT,\n\tSUI_RPC_ENDPOINT_NAME,\n\tSUI_RPC_ENTRYPOINT_PORT,\n} from '../routable.ts';\nimport type { SuiClient } from './shared.ts';\nimport { toDockerHostGatewayUrl } from './shared.ts';\nimport {\n\tassembleSuiClient,\n\tbuildWaitForTransactionsReady,\n\tfetchChainId as sharedFetchChainId,\n\tmakeResolvedNetwork,\n} from './shared-boot.ts';\nimport type { SuiLocalOptions } from './spec.ts';\n\n/** Default ready-probe timeout for localnet.\n *\n *  The pinned sui-tools image carries the embedded-fullnode resume fix\n *  (sui #26884), so BOTH the validator AND the embedded fullnode resume\n *  from their persisted dbs on every `sui start` — there is no per-boot\n *  genesis re-sync. (Pre-#26884, each `sui start` minted the fullnode a\n *  fresh key + empty db and it re-synced the whole chain from seq=0 at\n *  ~50x realtime; that band no longer exists.) So both bands satisfy the\n *  catch-up gate almost immediately:\n *\n *    - cold boot — genesis + faucet bootstrap; empty store, live cadence\n *      from the first sample.\n *    - warm restart / snapshot restore — both nodes resume from disk;\n *      the head is already at the persisted tip, so it stabilizes at\n *      once.\n *\n *  180s is therefore generous headroom, not a re-sync budget: the gate\n *  satisfies in a couple of polls on a healthy boot, and the timeout only\n *  bounds a genuinely wedged boot (gRPC bound but head never stabilizing\n *  → typed `grpc-probe` error). */\nexport const DEFAULT_LOCAL_READY_TIMEOUT = Duration.seconds(180);\n\n// In-container ports the sui binary binds on. These match the router\n// entrypoint ports; direct host publishes below use different high\n// ports so Traefik owns the public listener ports.\nconst CONTAINER_RPC_PORT = SUI_RPC_ENTRYPOINT_PORT;\nconst CONTAINER_FAUCET_PORT = SUI_FAUCET_ENTRYPOINT_PORT;\nconst CONTAINER_GRAPHQL_PORT = SUI_GRAPHQL_ENTRYPOINT_PORT;\n\n// Default host ports. Without `opts.ports`, these are preferences\n// brokered against the kernel before Docker publishes them.\nexport const DEFAULT_HOST_RPC_PORT = 51000;\nexport const DEFAULT_HOST_FAUCET_PORT = 50000;\nexport const DEFAULT_HOST_GRAPHQL_PORT = 51001;\nconst DOCKER_PUBLISH_HOST = '0.0.0.0' as const;\nexport const MAX_DOCKER_PUBLISH_PORT_RETRIES = 3;\nexport const LOCAL_VALIDATOR_STOP_GRACE_SECONDS = 30;\n\n/** Per-fetch deadline for the ready-probe HTTP calls. Without it a\n *  hung fetch would block the outer ready deadline with no signal\n *  about which probe wedged. */\nconst PROBE_FETCH_TIMEOUT_MS = 3000;\n\n/** Role label for sui's owned GraphQL-indexer postgres sidecar. Shared\n *  const so the container label (in `bootPostgresSidecar`'s caller) and\n *  the snapshotable capture tuple agree exactly. */\nexport const SUI_INDEXER_DB_ROLE = 'indexer-db' as const;\n\n/** Resolved indexer wiring for local mode. The URL is the PostgreSQL DSN\n *  (sui-owned sidecar by default, or the caller's BYO DB); `network` is\n *  the container network the validator joins to reach it.\n *\n *  A chain re-genesis resets the sui-owned sidecar DB before boot:\n *  absent or SIGKILLed validators cause the sidecar container to be\n *  removed, while validator image identity is folded into the sidecar\n *  `configHash` for image-driven re-genesis. Clean restarts resume it. */\nexport interface LocalIndexer {\n\treadonly url: string;\n\treadonly network: string;\n}\n\n/** Resolved local-mode boot artifacts. */\nexport interface LocalModeBootResult {\n\treadonly resolved: ResolvedSuiNetwork;\n\treadonly client: SuiClient;\n}\n\n/**\n * Build the local-mode boot Effect.\n *\n * `identity` is threaded in by the caller (the plugin barrel's acquire\n * body, which has access to the substrate's `IdentityContext` via the\n * outer composition layer); the body uses it to stamp the canonical\n * container label tuple so sweep / inventory are name-blind.\n *\n * `{pull}`, `{build}`, and vendored-build image branches are wired.\n */\nexport const bootLocalMode = (\n\truntime: ContainerRuntime,\n\tidentity: Identity,\n\tportBroker: PortBroker,\n\topts: SuiLocalOptions,\n\tindexer: LocalIndexer | undefined,\n\t// Pre-resolved validator image. The barrel resolves it BEFORE the\n\t// indexer-db sidecar is provisioned (so the sidecar's `configHash` can\n\t// fold the validator's image ref — see `provisionLocalIndexer`) and\n\t// hands the SAME `ImageRef` here. Single source: the image the sidecar\n\t// hashed and the image this container runs are byte-identical, so they\n\t// cannot drift. `undefined` (the `indexer: false` / no-sidecar path)\n\t// resolves it inline.\n\tprebuiltImage?: ImageRef,\n): Effect.Effect<LocalModeBootResult, SuiPluginError | SuiConfigError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\t// ----- 1. Resolve image ---------------------------------------------\n\t\tyield* setCurrentPluginPhase('resolving Sui local image');\n\t\tconst image = prebuiltImage ?? (yield* resolveImage(runtime, identity, opts));\n\n\t\t// ----- 2. Allocate ports + ensure container --------------------------\n\t\tyield* setCurrentPluginPhase('creating Sui validator container');\n\t\tconst labels: ContainerLabelTuple = {\n\t\t\tapp: identity.app,\n\t\t\tstack: identity.stack,\n\t\t\tplugin: 'sui',\n\t\t\trole: 'validator',\n\t\t};\n\t\tconst containerName = `devstack-${identity.app}-${identity.stack}-sui-validator`;\n\t\tconst { handle, ports } = yield* ensureLocalValidatorContainer(\n\t\t\truntime,\n\t\t\tportBroker,\n\t\t\timage,\n\t\t\tlabels,\n\t\t\tcontainerName,\n\t\t\topts,\n\t\t\tindexer,\n\t\t);\n\n\t\t// GraphQL is gated on a resolved indexer DB (on by default via the\n\t\t// sui-owned sidecar; off when `indexer: false`). Without `indexer`\n\t\t// the entrypoint omits `--with-graphql`, so we skip its routed URL +\n\t\t// probe and resolve a graphql-less client.\n\t\tconst graphqlEnabled = indexer !== undefined;\n\n\t\t// ----- 3. Ready probes ----------------------------------------------\n\t\tconst publishedPorts = resolvePublishedPortMapping(ports, handle.ports);\n\t\tconst directRpcUrl = `http://127.0.0.1:${publishedPorts[0]!.hostPort}`;\n\t\tconst directFaucetUrl = `http://127.0.0.1:${publishedPorts[1]!.hostPort}`;\n\t\tconst directGraphqlUrl = `http://127.0.0.1:${publishedPorts[2]!.hostPort}`;\n\t\tconst rpcUrl = yield* routedSuiUrl(identity, SUI_RPC_ENDPOINT_NAME, SUI_RPC_ENTRYPOINT_PORT);\n\t\tconst faucetUrl = yield* routedSuiUrl(\n\t\t\tidentity,\n\t\t\tSUI_FAUCET_ENDPOINT_NAME,\n\t\t\tSUI_FAUCET_ENTRYPOINT_PORT,\n\t\t);\n\t\tconst graphqlUrl = graphqlEnabled\n\t\t\t? yield* routedSuiUrl(identity, SUI_GRAPHQL_ENDPOINT_NAME, SUI_GRAPHQL_ENTRYPOINT_PORT)\n\t\t\t: undefined;\n\t\tconst readyTimeout = opts.readyTimeout ?? DEFAULT_LOCAL_READY_TIMEOUT;\n\t\tconst sdkClient = new SuiGrpcClient({ baseUrl: directRpcUrl, network: 'localnet' });\n\n\t\tyield* setCurrentPluginPhase(\n\t\t\tgraphqlEnabled\n\t\t\t\t? 'waiting for Sui gRPC, faucet, and GraphQL'\n\t\t\t\t: 'waiting for Sui gRPC and faucet',\n\t\t);\n\t\tyield* waitForReady(\n\t\t\tsdkClient,\n\t\t\tdirectRpcUrl,\n\t\t\tdirectFaucetUrl,\n\t\t\tgraphqlEnabled ? directGraphqlUrl : undefined,\n\t\t\treadyTimeout,\n\t\t).pipe(Effect.annotateLogs({ [SuiLogAttr.container]: handle.name }));\n\n\t\t// Head-stabilization gate. `waitForReady` only proves the RPC\n\t\t// listener is BOUND, not that it serves the committed head. With the\n\t\t// #26884 resume fix both the validator and the embedded fullnode\n\t\t// resume from their persisted dbs (see DEFAULT_LOCAL_READY_TIMEOUT),\n\t\t// so there is no genesis re-sync — this gate is now a FAST safety\n\t\t// check, not a long wait: it polls the checkpoint head until it\n\t\t// stabilizes to live cadence, satisfying in a couple of polls on both\n\t\t// warm-restart and cold boot. Kept because it is cheap and closes a\n\t\t// real correctness window: it guarantees the RPC serves the persisted\n\t\t// head BEFORE downstream deploy-verify probes read object ids —\n\t\t// without it a probe firing into a still-settling head could read a\n\t\t// committed id as not-found and spuriously re-deploy with fresh ids.\n\t\tyield* setCurrentPluginPhase('waiting for Sui checkpoint head to stabilize');\n\t\tyield* waitForCheckpointCatchUp(sdkClient, directRpcUrl, readyTimeout).pipe(\n\t\t\tEffect.annotateLogs({ [SuiLogAttr.container]: handle.name }),\n\t\t);\n\n\t\t// ----- 4. Resolve chain id ------------------------------------------\n\t\tyield* setCurrentPluginPhase('fetching Sui chain id');\n\t\tconst chainId = yield* sharedFetchChainId(sdkClient);\n\n\t\t// ----- 5. waitForTransactionsReady (memoised) -----------------------\n\t\tyield* setCurrentPluginPhase('preparing Sui funds-ready gate');\n\t\tconst waitForTransactionsReady = yield* buildWaitForTransactionsReady(directFaucetUrl);\n\n\t\t// ----- 6. Assemble resolved SuiClient -------------------------------\n\t\t// Surface `buildImage` so package's path-(b) `docker run --rm`\n\t\t// build path can spawn a one-shot sui-cli container using the\n\t\t// SAME image we built/resolved here. Without this the package\n\t\t// plugin would have to re-resolve the image, doubling the\n\t\t// build-context hash work and risking digest drift.\n\t\tconst { client } = yield* assembleSuiClient({\n\t\t\tsdkClient,\n\t\t\tchainId,\n\t\t\trpcUrl,\n\t\t\tfaucetUrl,\n\t\t\tfundingFaucetUrl: directFaucetUrl,\n\t\t\t...(graphqlUrl !== undefined ? { graphqlUrl } : {}),\n\t\t\twaitForTransactionsReady,\n\t\t\tbuildImage: image,\n\t\t\thostGateway: {\n\t\t\t\trpcUrl: toDockerHostGatewayUrl(directRpcUrl),\n\t\t\t\tfaucetUrl: toDockerHostGatewayUrl(directFaucetUrl),\n\t\t\t\tgraphqlUrl: graphqlEnabled ? toDockerHostGatewayUrl(directGraphqlUrl) : null,\n\t\t\t},\n\t\t});\n\t\tconst resolved = makeResolvedNetwork({\n\t\t\tmode: 'local',\n\t\t\tchainId,\n\t\t\trpc: rpcUrl,\n\t\t\tfaucet: faucetUrl,\n\t\t\t...(graphqlUrl !== undefined ? { graphql: graphqlUrl } : {}),\n\t\t\tsource: 'default',\n\t\t});\n\t\treturn {\n\t\t\tresolved,\n\t\t\tclient,\n\t\t};\n\t});\n\n// ---------------------------------------------------------------------------\n// Image resolution — vendored Dockerfile build via `ContainerRuntime`\n// ---------------------------------------------------------------------------\n\nexport const resolveImage = (\n\truntime: ContainerRuntime,\n\tidentity: Identity,\n\topts: SuiLocalOptions,\n): Effect.Effect<ImageRef, SuiPluginError> =>\n\tEffect.gen(function* () {\n\t\tif (opts.image && 'pull' in opts.image) {\n\t\t\tconst pullRef = opts.image.pull;\n\t\t\tif (runtime.pullImage === undefined) {\n\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t'image-build',\n\t\t\t\t\t\t`sui local mode cannot pull image '${pullRef}' because the configured container runtime does not expose image pulls.`,\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn yield* runtime\n\t\t\t\t.pullImage(pullRef)\n\t\t\t\t.pipe(\n\t\t\t\t\tEffect.mapError((cause) =>\n\t\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t\t'image-build',\n\t\t\t\t\t\t\t`sui local mode failed to pull image '${pullRef}': ${cause.reason}: ${cause.detail}`,\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t}\n\t\tconst owner = {\n\t\t\tapp: identity.app,\n\t\t\tstack: identity.stack,\n\t\t\tplugin: 'sui',\n\t\t\trole: 'validator',\n\t\t} as const;\n\t\tconst vendored = suiCliImageBuildContext();\n\t\tconst buildCtx =\n\t\t\topts.image && 'build' in opts.image\n\t\t\t\t? {\n\t\t\t\t\t\tcontextPath: opts.image.build.context,\n\t\t\t\t\t\tdockerfile: opts.image.build.dockerfile ?? 'Dockerfile',\n\t\t\t\t\t\tbuildArgs: vendored.buildArgs,\n\t\t\t\t\t\towner,\n\t\t\t\t\t}\n\t\t\t\t: { ...vendored, owner };\n\t\treturn yield* runtime\n\t\t\t.ensureImage(buildCtx)\n\t\t\t.pipe(\n\t\t\t\tEffect.mapError((cause) =>\n\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t'image-build',\n\t\t\t\t\t\t`sui image build failed: ${cause.reason}: ${cause.detail}`,\n\t\t\t\t\t\tcause,\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t);\n\t});\n\ninterface LocalValidatorContainerResult {\n\treadonly handle: ContainerHandle;\n\treadonly ports: ReadonlyArray<ContainerPortPublish>;\n}\n\ninterface ResolvedPortMapping {\n\treadonly ports: ReadonlyArray<ContainerPortPublish>;\n\treadonly release: Effect.Effect<void>;\n}\n\nexport const ensureLocalValidatorContainer = (\n\truntime: ContainerRuntime,\n\tportBroker: PortBroker,\n\timage: ImageRef,\n\tlabels: ContainerLabelTuple,\n\tcontainerName: string,\n\topts: SuiLocalOptions,\n\tindexer: LocalIndexer | undefined,\n): Effect.Effect<LocalValidatorContainerResult, SuiPluginError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tconst reusablePorts =\n\t\t\topts.ports === undefined\n\t\t\t\t? yield* findReusablePortMapping(runtime, labels, containerName)\n\t\t\t\t: undefined;\n\t\tif (reusablePorts !== undefined) {\n\t\t\treturn yield* ensureLocalValidatorContainerAttempt({\n\t\t\t\truntime,\n\t\t\t\tportBroker,\n\t\t\t\timage,\n\t\t\t\tlabels,\n\t\t\t\tcontainerName,\n\t\t\t\topts,\n\t\t\t\tindexer,\n\t\t\t\tports: reusablePorts,\n\t\t\t\tattempt: 0,\n\t\t\t\treconciliation: 'adopt-existing',\n\t\t\t});\n\t\t}\n\t\treturn yield* ensureLocalValidatorContainerWithFreshPorts({\n\t\t\truntime,\n\t\t\tportBroker,\n\t\t\timage,\n\t\t\tlabels,\n\t\t\tcontainerName,\n\t\t\topts,\n\t\t\tindexer,\n\t\t\tattempt: 0,\n\t\t\treconciliation: opts.ports ? 'exact' : 'adopt-existing',\n\t\t});\n\t});\n\ninterface EnsureLocalValidatorContainerBase {\n\treadonly runtime: ContainerRuntime;\n\treadonly portBroker: PortBroker;\n\treadonly image: ImageRef;\n\treadonly labels: ContainerLabelTuple;\n\treadonly containerName: string;\n\treadonly opts: SuiLocalOptions;\n\treadonly indexer: LocalIndexer | undefined;\n}\n\nconst ensureLocalValidatorContainerWithFreshPorts = (\n\tparams: EnsureLocalValidatorContainerBase & {\n\t\treadonly attempt: number;\n\t\treadonly reconciliation: PortBindingReconciliation;\n\t},\n): Effect.Effect<LocalValidatorContainerResult, SuiPluginError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tconst mapping = yield* resolvePortMappingWithRelease(params.portBroker, params.opts.ports);\n\t\treturn yield* ensureLocalValidatorContainerAttempt({\n\t\t\t...params,\n\t\t\tports: mapping.ports,\n\t\t\treleasePorts: mapping.release,\n\t\t});\n\t});\n\nconst ensureLocalValidatorContainerAttempt = (\n\tparams: EnsureLocalValidatorContainerBase & {\n\t\treadonly ports: ReadonlyArray<ContainerPortPublish>;\n\t\treadonly releasePorts?: Effect.Effect<void>;\n\t\treadonly attempt: number;\n\t\treadonly reconciliation: PortBindingReconciliation;\n\t},\n): Effect.Effect<LocalValidatorContainerResult, SuiPluginError, Scope.Scope> =>\n\tensureManagedContainer({\n\t\truntime: params.runtime,\n\t\tlabels: params.labels,\n\t\tspec: {\n\t\t\tname: params.containerName,\n\t\t\timage: params.image,\n\t\t\t// Keep the writable layer only after clean exits. If Docker\n\t\t\t// escalates stop to SIGKILL (137), recreate on the next boot\n\t\t\t// instead of resuming suspect RocksDB/checkpoint state.\n\t\t\trecreate: 'on-failure',\n\t\t\tstopGraceSeconds: LOCAL_VALIDATOR_STOP_GRACE_SECONDS,\n\t\t\tstopSignal: 'SIGINT',\n\t\t\tports: params.ports,\n\t\t\tportBindingReconciliation: params.reconciliation,\n\t\t\t// Indexer (when on): join the indexer DB's network + hand the\n\t\t\t// entrypoint the DSN so it enables `--with-graphql` against it\n\t\t\t// (sui-owned sidecar by default, or a BYO DB). Omitted = RPC +\n\t\t\t// faucet only.\n\t\t\t//\n\t\t\t// The DSN is a credentialed env var, so it (and the sidecar's\n\t\t\t// POSTGRES_PASSWORD) bakes into the `docker commit` snapshot\n\t\t\t// image. Deliberate and accepted: the password is a deterministic\n\t\t\t// localnet credential (derived per app/stack/stackRoot) with no\n\t\t\t// production exposure.\n\t\t\t...(params.indexer !== undefined\n\t\t\t\t? {\n\t\t\t\t\t\tnetworkAttach: [params.indexer.network],\n\t\t\t\t\t\tenv: { DEVSTACK_SUI_INDEXER_URL: params.indexer.url },\n\t\t\t\t\t}\n\t\t\t\t: {}),\n\t\t},\n\t\tmapError: (cause) => cause,\n\t}).pipe(\n\t\tEffect.map((handle) => ({ handle, ports: params.ports })),\n\t\tEffect.catch((cause: ContainerRuntimeError) => {\n\t\t\tif (\n\t\t\t\tparams.opts.ports === undefined &&\n\t\t\t\tcause.reason === 'publish-port-conflict' &&\n\t\t\t\tparams.attempt < MAX_DOCKER_PUBLISH_PORT_RETRIES\n\t\t\t) {\n\t\t\t\treturn (params.releasePorts ?? Effect.void).pipe(\n\t\t\t\t\tEffect.andThen(\n\t\t\t\t\t\tensureLocalValidatorContainerWithFreshPorts({\n\t\t\t\t\t\t\t...params,\n\t\t\t\t\t\t\tattempt: params.attempt + 1,\n\t\t\t\t\t\t\treconciliation: 'exact',\n\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn Effect.fail(\n\t\t\t\tsuiPluginError(\n\t\t\t\t\t'container-start',\n\t\t\t\t\t`sui-validator container failed: ${cause.reason}: ${cause.detail}`,\n\t\t\t\t\tcause,\n\t\t\t\t),\n\t\t\t);\n\t\t}),\n\t);\n\n// ---------------------------------------------------------------------------\n// Port mapping — host:container pairs\n// ---------------------------------------------------------------------------\n\n// Exported test entry point: resolves the host:container port pairs\n// without surfacing the release handle (the live boot path uses\n// `resolvePortMappingWithRelease` directly to retain the release).\nexport const resolvePortMapping = (\n\tportBroker: PortBroker,\n\toverride: Readonly<Record<number, number>> | undefined,\n): Effect.Effect<ReadonlyArray<ContainerPortPublish>, SuiPluginError, Scope.Scope> =>\n\tresolvePortMappingWithRelease(portBroker, override).pipe(Effect.map((mapping) => mapping.ports));\n\nconst resolvePortMappingWithRelease = (\n\tportBroker: PortBroker,\n\toverride: Readonly<Record<number, number>> | undefined,\n): Effect.Effect<ResolvedPortMapping, SuiPluginError, Scope.Scope> => {\n\tconst pick = (containerPort: number, fallback: number): number => {\n\t\tif (!override) return fallback;\n\t\tconst hit = override[containerPort];\n\t\treturn typeof hit === 'number' ? hit : fallback;\n\t};\n\tif (override) {\n\t\treturn Effect.succeed({\n\t\t\tports: [\n\t\t\t\tportPublish(CONTAINER_RPC_PORT, pick(CONTAINER_RPC_PORT, DEFAULT_HOST_RPC_PORT)),\n\t\t\t\tportPublish(CONTAINER_FAUCET_PORT, pick(CONTAINER_FAUCET_PORT, DEFAULT_HOST_FAUCET_PORT)),\n\t\t\t\tportPublish(\n\t\t\t\t\tCONTAINER_GRAPHQL_PORT,\n\t\t\t\t\tpick(CONTAINER_GRAPHQL_PORT, DEFAULT_HOST_GRAPHQL_PORT),\n\t\t\t\t),\n\t\t\t],\n\t\t\trelease: Effect.void,\n\t\t});\n\t}\n\treturn Effect.gen(function* () {\n\t\tconst rpc = yield* allocatePort(portBroker, 'sui:rpc', DEFAULT_HOST_RPC_PORT, 'rpc');\n\t\tconst faucet = yield* allocatePort(\n\t\t\tportBroker,\n\t\t\t'sui:faucet',\n\t\t\tDEFAULT_HOST_FAUCET_PORT,\n\t\t\t'faucet',\n\t\t);\n\t\tconst graphql = yield* allocatePort(\n\t\t\tportBroker,\n\t\t\t'sui:graphql',\n\t\t\tDEFAULT_HOST_GRAPHQL_PORT,\n\t\t\t'graphql',\n\t\t);\n\t\treturn {\n\t\t\tports: [\n\t\t\t\tportPublish(CONTAINER_RPC_PORT, rpc.port),\n\t\t\t\tportPublish(CONTAINER_FAUCET_PORT, faucet.port),\n\t\t\t\tportPublish(CONTAINER_GRAPHQL_PORT, graphql.port),\n\t\t\t],\n\t\t\trelease: Effect.all([rpc.release, faucet.release, graphql.release], { discard: true }),\n\t\t};\n\t});\n};\n\nexport const resolvePublishedPortMapping = (\n\trequested: ReadonlyArray<ContainerPortPublish>,\n\tactual: ReadonlyArray<ContainerPortPublish> | undefined,\n): ReadonlyArray<ContainerPortPublish> => [\n\tpickPublishedPort(requested, actual, CONTAINER_RPC_PORT, DEFAULT_HOST_RPC_PORT),\n\tpickPublishedPort(requested, actual, CONTAINER_FAUCET_PORT, DEFAULT_HOST_FAUCET_PORT),\n\tpickPublishedPort(requested, actual, CONTAINER_GRAPHQL_PORT, DEFAULT_HOST_GRAPHQL_PORT),\n];\n\nconst pickPublishedPort = (\n\trequested: ReadonlyArray<ContainerPortPublish>,\n\tactual: ReadonlyArray<ContainerPortPublish> | undefined,\n\tcontainerPort: number,\n\tfallbackHostPort: number,\n): ContainerPortPublish =>\n\tactual?.find((port) => port.containerPort === containerPort) ??\n\trequested.find((port) => port.containerPort === containerPort) ??\n\tportPublish(containerPort, fallbackHostPort);\n\nexport const selectReusablePortMapping = (\n\thandles: ReadonlyArray<ContainerHandle>,\n\tcontainerName: string,\n): ReadonlyArray<ContainerPortPublish> | undefined => {\n\tconst ports = handles.find((handle) => handle.name === containerName)?.ports;\n\tif (!hasSuiPortMapping(ports)) return undefined;\n\treturn resolvePublishedPortMapping([], ports);\n};\n\nconst findReusablePortMapping = (\n\truntime: ContainerRuntime,\n\tlabels: ContainerLabelTuple,\n\tcontainerName: string,\n): Effect.Effect<ReadonlyArray<ContainerPortPublish> | undefined, SuiPluginError> =>\n\truntime.inspectByLabels(labels).pipe(\n\t\tEffect.map((handles) => selectReusablePortMapping(handles, containerName)),\n\t\tEffect.mapError((cause) =>\n\t\t\tsuiPluginError(\n\t\t\t\t'container-start',\n\t\t\t\t`sui local mode: failed to inspect existing validator container: ${cause.reason}: ${cause.detail}`,\n\t\t\t\tcause,\n\t\t\t),\n\t\t),\n\t);\n\nconst hasSuiPortMapping = (\n\tports: ReadonlyArray<ContainerPortPublish> | undefined,\n): ports is ReadonlyArray<ContainerPortPublish> =>\n\tports !== undefined &&\n\tports.some((port) => port.containerPort === CONTAINER_RPC_PORT) &&\n\tports.some((port) => port.containerPort === CONTAINER_FAUCET_PORT) &&\n\tports.some((port) => port.containerPort === CONTAINER_GRAPHQL_PORT);\n\nconst portPublish = (containerPort: number, hostPort: number): ContainerPortPublish => ({\n\tcontainerPort,\n\thostPort,\n\thostIp: DOCKER_PUBLISH_HOST,\n});\n\nconst allocatePort = (\n\tportBroker: PortBroker,\n\towner: string,\n\tpreferredPort: number | undefined,\n\tlabel: 'rpc' | 'faucet' | 'graphql',\n): Effect.Effect<AllocatedPort, SuiPluginError, Scope.Scope> => {\n\tconst allocate = (\n\t\thint: number | undefined,\n\t): Effect.Effect<AllocatedPort, SuiPluginError, Scope.Scope> =>\n\t\tportBroker\n\t\t\t.allocate({\n\t\t\t\towner,\n\t\t\t\t...(hint === undefined ? {} : { preferredPort: hint }),\n\t\t\t\tprobeHost: DOCKER_PUBLISH_HOST,\n\t\t\t})\n\t\t\t.pipe(\n\t\t\t\tEffect.catchTag('PortBrokerError', (cause) =>\n\t\t\t\t\thint !== undefined && cause.reason === 'preferred-busy'\n\t\t\t\t\t\t? portBroker.allocate({ owner, probeHost: DOCKER_PUBLISH_HOST })\n\t\t\t\t\t\t: Effect.fail(cause),\n\t\t\t\t),\n\t\t\t\tEffect.mapError((cause) =>\n\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t'port-allocate',\n\t\t\t\t\t\t`sui local mode: failed to allocate ${label} host port ` +\n\t\t\t\t\t\t\t`(preferred ${hint ?? 'auto'}): ${cause.detail}`,\n\t\t\t\t\t\tcause,\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t);\n\treturn allocate(preferredPort);\n};\n\n// ---------------------------------------------------------------------------\n// Ready-probe coordination\n// ---------------------------------------------------------------------------\n\n/** Coordinated readiness gate. RPC + faucet must respond within the\n *  outer deadline; GraphQL is probed only when enabled (gated on the\n *  external indexer). Each probe has its own per-fetch deadline so a\n *  wedged endpoint surfaces by name. */\nconst waitForReady = (\n\tsdkClient: SuiGrpcClient,\n\trpcUrl: string,\n\tfaucetUrl: string,\n\tgraphqlUrl: string | undefined,\n\treadyTimeout: Duration.Duration,\n): Effect.Effect<void, SuiPluginError> =>\n\tEffect.gen(function* () {\n\t\tconst readyTimeoutMs = Duration.toMillis(readyTimeout);\n\t\tconst grpcProbe: Effect.Effect<void, SuiPluginError> = waitForProbe({\n\t\t\tlabel: `${rpcUrl} (gRPC service info)`,\n\t\t\ttimeoutMs: readyTimeoutMs,\n\t\t\tintervalMs: 1_000,\n\t\t\tattemptTimeoutMs: PROBE_FETCH_TIMEOUT_MS,\n\t\t\tprobe: () =>\n\t\t\t\tfetchServiceInfo(sdkClient, PROBE_FETCH_TIMEOUT_MS).pipe(\n\t\t\t\t\tEffect.map((info) =>\n\t\t\t\t\t\tinfo.chainId !== undefined || info.checkpointHeight !== undefined\n\t\t\t\t\t\t\t? true\n\t\t\t\t\t\t\t: { ready: false, detail: { reason: 'missing-service-info' } },\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t}).pipe(\n\t\t\tEffect.mapError(\n\t\t\t\t(cause): SuiPluginError =>\n\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t'grpc-probe',\n\t\t\t\t\t\t`sui local mode: gRPC endpoint ${rpcUrl} did not become ready within ` +\n\t\t\t\t\t\t\t`${readyTimeoutMs}ms: ${formatUnknownError(cause)}`,\n\t\t\t\t\t\tcause,\n\t\t\t\t\t),\n\t\t\t),\n\t\t);\n\n\t\t// Faucet socket-level liveness — `GET /` returns \"OK\" as soon as\n\t\t// the HTTP server is bound. We do NOT POST `/v2/gas` here; that's\n\t\t// the funds-ready probe, which is paid for lazily on first call.\n\t\tconst faucetProbe: Effect.Effect<void, SuiPluginError> = waitForHttpEndpoint({\n\t\t\tendpoint: faucetUrl,\n\t\t\ttimeoutMs: readyTimeoutMs,\n\t\t\tintervalMs: 1_000,\n\t\t\trequestTimeoutMs: PROBE_FETCH_TIMEOUT_MS,\n\t\t\tvalidate: (response) => response.status < 500,\n\t\t}).pipe(\n\t\t\tEffect.mapError(\n\t\t\t\t(cause): SuiPluginError =>\n\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t'faucet-probe',\n\t\t\t\t\t\t`sui local mode: faucet endpoint ${faucetUrl} did not become ready within ` +\n\t\t\t\t\t\t\t`${readyTimeoutMs}ms: ${formatUnknownError(cause)}`,\n\t\t\t\t\t\tcause,\n\t\t\t\t\t),\n\t\t\t),\n\t\t);\n\n\t\tconst graphqlProbe: ReadonlyArray<Effect.Effect<void, SuiPluginError>> =\n\t\t\tgraphqlUrl === undefined\n\t\t\t\t? []\n\t\t\t\t: [\n\t\t\t\t\t\twaitForHttpEndpoint({\n\t\t\t\t\t\t\tendpoint: graphqlUrl,\n\t\t\t\t\t\t\ttimeoutMs: readyTimeoutMs,\n\t\t\t\t\t\t\tintervalMs: 1_000,\n\t\t\t\t\t\t\trequestTimeoutMs: PROBE_FETCH_TIMEOUT_MS,\n\t\t\t\t\t\t\tvalidate: (response) => response.status < 500,\n\t\t\t\t\t\t}).pipe(\n\t\t\t\t\t\t\tEffect.mapError(\n\t\t\t\t\t\t\t\t(cause): SuiPluginError =>\n\t\t\t\t\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t\t\t\t\t'graphql-probe',\n\t\t\t\t\t\t\t\t\t\t`sui local mode: GraphQL endpoint ${graphqlUrl} did not become ready within ` +\n\t\t\t\t\t\t\t\t\t\t\t`${readyTimeoutMs}ms: ${formatUnknownError(cause)}`,\n\t\t\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t),\n\t\t\t\t\t];\n\n\t\tyield* Effect.all([grpcProbe, faucetProbe, ...graphqlProbe], { concurrency: 'unbounded' }).pipe(\n\t\t\tEffect.asVoid,\n\t\t);\n\t});\n\n// ---------------------------------------------------------------------------\n// Caught-up-to-head gate\n// ---------------------------------------------------------------------------\n\n/** Poll interval for the head-stabilization gate. With the #26884 resume\n *  fix there is no routine re-sync, but a 1s interval still samples a wide\n *  enough window to tell any transient fast burst (hundreds/poll) apart\n *  from live cadence (a handful/poll) before declaring the head stable. */\nconst CATCH_UP_POLL_INTERVAL_MS = 1_000;\n\n/** Per-poll delta at or below which the head is considered to be moving\n *  at LIVE cadence rather than fast-replay cadence. Localnet's narwhal/\n *  bullshark consensus produces only a few checkpoints per second when\n *  idle; replay produces hundreds per `CATCH_UP_POLL_INTERVAL_MS`. A\n *  threshold of 25 sits well above live idle cadence and far below the\n *  replay rate, so it cannot mistake live ticking for replay. */\nconst CATCH_UP_LIVE_CADENCE_DELTA = 25;\n\n/** Number of CONSECUTIVE live-cadence polls required before declaring\n *  caught-up. Two consecutive small deltas rules out the moment replay\n *  briefly stalls (e.g. a GC pause) from being read as caught-up: a\n *  paused replay shows one small delta then resumes with a large one,\n *  so it never strings two together. A genuinely caught-up validator\n *  holds small deltas indefinitely. */\nconst CATCH_UP_STABLE_POLLS_REQUIRED = 2;\n\ninterface SuiServiceInfo {\n\treadonly chainId?: string;\n\treadonly checkpointHeight?: bigint;\n}\n\nconst fetchServiceInfo = (\n\tsdkClient: SuiGrpcClient,\n\ttimeoutMs: number,\n): Effect.Effect<SuiServiceInfo, unknown> =>\n\tEffect.tryPromise({\n\t\ttry: (signal) =>\n\t\t\tsdkClient.ledgerService.getServiceInfo({}, { abort: signal, timeout: timeoutMs }).response,\n\t\tcatch: (cause) => cause,\n\t});\n\n/** Fetch the latest checkpoint height via the gRPC service-info surface.\n *  Returns the number, or `undefined` when the listener answered but did\n *  not include a safely numeric checkpoint height. */\nconst fetchLatestCheckpoint = (\n\tsdkClient: SuiGrpcClient,\n): Effect.Effect<number | undefined, unknown> =>\n\tfetchServiceInfo(sdkClient, PROBE_FETCH_TIMEOUT_MS).pipe(\n\t\tEffect.map((body) => {\n\t\t\tif (body.checkpointHeight === undefined) return undefined;\n\t\t\tconst checkpoint = Number(body.checkpointHeight);\n\t\t\treturn Number.isSafeInteger(checkpoint) ? checkpoint : undefined;\n\t\t}),\n\t);\n\n/** One poll's verdict from the catch-up cadence evaluator. */\nexport type CatchUpVerdict =\n\t| { readonly caughtUp: true }\n\t| { readonly caughtUp: false; readonly detail: unknown };\n\n/** Build the stateful cadence evaluator the catch-up gate feeds samples\n *  into. Pure + injectable so the cadence logic is unit-testable without\n *  a live validator. Each `step(sample)` consumes one\n *  gRPC service-info checkpoint-height reading:\n *\n *    - `undefined` (listener answered, result unparseable) resets the\n *      stability streak.\n *    - the FIRST numeric sample only establishes a baseline (its delta is\n *      `+Infinity`), so the gate always takes at least two samples before\n *      it can declare caught-up — cheap on cold boot, correct on restore.\n *    - a NEGATIVE delta (the head regressed — mid-re-sync / reset) resets\n *      the streak; it is NOT counted as live cadence even though it is\n *      `<= CATCH_UP_LIVE_CADENCE_DELTA`.\n *    - a delta in `[0, CATCH_UP_LIVE_CADENCE_DELTA]` counts toward the\n *      live-cadence streak; a larger delta (fast replay) resets it.\n *    - `CATCH_UP_STABLE_POLLS_REQUIRED` consecutive live-cadence deltas →\n *      caught-up. */\nexport const makeCatchUpEvaluator = (opts?: {\n\treadonly liveCadenceDelta?: number;\n\treadonly stablePollsRequired?: number;\n}): {\n\treadonly step: (sample: number | undefined) => CatchUpVerdict;\n\treadonly last: () => number | undefined;\n} => {\n\tconst liveCadenceDelta = opts?.liveCadenceDelta ?? CATCH_UP_LIVE_CADENCE_DELTA;\n\tconst stablePollsRequired = opts?.stablePollsRequired ?? CATCH_UP_STABLE_POLLS_REQUIRED;\n\tlet previous: number | undefined;\n\tlet stablePolls = 0;\n\treturn {\n\t\tstep: (sample) => {\n\t\t\tif (sample === undefined) {\n\t\t\t\tstablePolls = 0;\n\t\t\t\treturn { caughtUp: false, detail: { reason: 'unparseable-checkpoint' } };\n\t\t\t}\n\t\t\tconst delta = previous === undefined ? Number.POSITIVE_INFINITY : sample - previous;\n\t\t\tprevious = sample;\n\t\t\t// A NEGATIVE delta means the checkpoint sequence REGRESSED (the head\n\t\t\t// went backwards — e.g. an RPC reading a node mid-re-sync, or a\n\t\t\t// reset). That is NOT live cadence: a regression satisfies\n\t\t\t// `<= liveCadenceDelta`, so counting it toward the streak could\n\t\t\t// falsely declare caught-up while the store is still settling. Reset\n\t\t\t// the streak and keep waiting for forward, live-cadence progress.\n\t\t\tif (delta < 0) {\n\t\t\t\tstablePolls = 0;\n\t\t\t\treturn {\n\t\t\t\t\tcaughtUp: false,\n\t\t\t\t\tdetail: { current: sample, delta, stablePolls, regressed: true },\n\t\t\t\t};\n\t\t\t}\n\t\t\tif (delta <= liveCadenceDelta) {\n\t\t\t\tstablePolls += 1;\n\t\t\t} else {\n\t\t\t\tstablePolls = 0;\n\t\t\t}\n\t\t\tif (stablePolls >= stablePollsRequired) return { caughtUp: true };\n\t\t\treturn { caughtUp: false, detail: { current: sample, delta, stablePolls } };\n\t\t},\n\t\tlast: () => previous,\n\t};\n};\n\n/** Head-stabilization gate.\n *\n *  Polls the gRPC service-info checkpoint height and treats the head as\n *  stable once the per-poll delta is at live cadence (`<= CATCH_UP_LIVE_\n *  CADENCE_DELTA`/poll) and HOLDS there for `CATCH_UP_STABLE_POLLS_\n *  REQUIRED` consecutive polls. With the #26884 resume fix both nodes\n *  resume from disk, so there is no genesis re-sync to wait out: cold and\n *  warm/restore boots alike are at live cadence from the first samples\n *  and satisfy in a couple of polls. The fast-replay reset branch in the\n *  evaluator is retained as a cheap guard for any transient burst rather\n *  than a routine restart band.\n *\n *  A wedged boot (gRPC bound but head never stabilizing) lapses the outer\n *  deadline → typed `grpc-probe` error rather than hanging forever. */\nconst waitForCheckpointCatchUp = (\n\tsdkClient: SuiGrpcClient,\n\trpcUrl: string,\n\treadyTimeout: Duration.Duration,\n): Effect.Effect<void, SuiPluginError> =>\n\tEffect.gen(function* () {\n\t\tconst readyTimeoutMs = Duration.toMillis(readyTimeout);\n\t\tconst evaluator = makeCatchUpEvaluator();\n\n\t\treturn yield* waitForProbe({\n\t\t\tlabel: `${rpcUrl} (checkpoint catch-up)`,\n\t\t\ttimeoutMs: readyTimeoutMs,\n\t\t\tintervalMs: CATCH_UP_POLL_INTERVAL_MS,\n\t\t\tattemptTimeoutMs: PROBE_FETCH_TIMEOUT_MS,\n\t\t\tprobe: () =>\n\t\t\t\tfetchLatestCheckpoint(sdkClient).pipe(\n\t\t\t\t\tEffect.map((current) => {\n\t\t\t\t\t\tconst verdict = evaluator.step(current);\n\t\t\t\t\t\treturn verdict.caughtUp ? true : { ready: false, detail: verdict.detail };\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t}).pipe(\n\t\t\tEffect.mapError(\n\t\t\t\t(cause): SuiPluginError =>\n\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t'grpc-probe',\n\t\t\t\t\t\t`sui local mode: checkpoint head did not stabilize within ` +\n\t\t\t\t\t\t\t`${readyTimeoutMs}ms (last seq=${evaluator.last() ?? 'n/a'}). With the #26884 ` +\n\t\t\t\t\t\t\t`resume fix both nodes resume from disk, so the head should reach live cadence ` +\n\t\t\t\t\t\t\t`almost immediately; a stall here points to a wedged boot, not a re-sync: ` +\n\t\t\t\t\t\t\t`${formatUnknownError(cause)}`,\n\t\t\t\t\t\tcause,\n\t\t\t\t\t),\n\t\t\t),\n\t\t);\n\t});\n\n// Chain-id fetch + waitForTransactionsReady builders live in\n// `shared-boot.ts` — see imports at the top of this file.\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\nconst routedSuiUrl = (\n\tidentity: Identity,\n\tendpointName: string,\n\tport: number,\n): Effect.Effect<string, SuiPluginError> =>\n\troutedHostname(identity, endpointName).pipe(\n\t\tEffect.map((hostname) => renderUrl({ protocol: 'http', hostname, port })),\n\t\tEffect.mapError((cause) =>\n\t\t\tsuiPluginError(\n\t\t\t\t'container-start',\n\t\t\t\t`sui local mode: failed to construct router URL for ${endpointName}: ${cause.detail}`,\n\t\t\t\tcause,\n\t\t\t),\n\t\t),\n\t);\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkHA,MAAa,8BAA8B,SAAS,QAAQ,GAAG;AAK/D,MAAM,qBAAqB;AAC3B,MAAM,wBAAwB;AAC9B,MAAM,yBAAyB;AAI/B,MAAa,wBAAwB;AACrC,MAAa,2BAA2B;AACxC,MAAa,4BAA4B;AACzC,MAAM,sBAAsB;;;;AAO5B,MAAM,yBAAyB;;;;AAK/B,MAAa,sBAAsB;;;;;;;;;;;AA+BnC,MAAa,iBACZ,SACA,UACA,YACA,MACA,SAQA,kBAEA,OAAO,IAAI,aAAa;CAEvB,OAAO,sBAAsB,2BAA2B;CACxD,MAAM,QAAQ,kBAAkB,OAAO,aAAa,SAAS,UAAU,IAAI;CAG3E,OAAO,sBAAsB,kCAAkC;CAQ/D,MAAM,EAAE,QAAQ,UAAU,OAAO,8BAChC,SACA,YACA,OACA;EAVA,KAAK,SAAS;EACd,OAAO,SAAS;EAChB,QAAQ;EACR,MAAM;CAOD,GACL,YANiC,SAAS,IAAI,GAAG,SAAS,MAAM,iBAOhE,MACA,OACD;CAMA,MAAM,iBAAiB,YAAY,KAAA;CAGnC,MAAM,iBAAiB,4BAA4B,OAAO,OAAO,KAAK;CACtE,MAAM,eAAe,oBAAoB,eAAe,EAAE,CAAE;CAC5D,MAAM,kBAAkB,oBAAoB,eAAe,EAAE,CAAE;CAC/D,MAAM,mBAAmB,oBAAoB,eAAe,EAAE,CAAE;CAChE,MAAM,SAAS,OAAO,aAAa,UAAA,OAAiC,uBAAuB;CAC3F,MAAM,YAAY,OAAO,aACxB,UACA,0BACA,0BACD;CACA,MAAM,aAAa,iBAChB,OAAO,aAAa,UAAU,2BAA2B,2BAA2B,IACpF,KAAA;CACH,MAAM,eAAe,KAAK,gBAAgB;CAC1C,MAAM,YAAY,IAAI,cAAc;EAAE,SAAS;EAAc,SAAS;CAAW,CAAC;CAElF,OAAO,sBACN,iBACG,8CACA,iCACJ;CACA,OAAO,aACN,WACA,cACA,iBACA,iBAAiB,mBAAmB,KAAA,GACpC,YACD,CAAC,CAAC,KAAK,OAAO,aAAa,GAAG,WAAW,YAAY,OAAO,KAAK,CAAC,CAAC;CAcnE,OAAO,sBAAsB,8CAA8C;CAC3E,OAAO,yBAAyB,WAAW,cAAc,YAAY,CAAC,CAAC,KACtE,OAAO,aAAa,GAAG,WAAW,YAAY,OAAO,KAAK,CAAC,CAC5D;CAGA,OAAO,sBAAsB,uBAAuB;CACpD,MAAM,UAAU,OAAOA,aAAmB,SAAS;CAGnD,OAAO,sBAAsB,gCAAgC;CAC7D,MAAM,2BAA2B,OAAO,8BAA8B,eAAe;CAQrF,MAAM,EAAE,WAAW,OAAO,kBAAkB;EAC3C;EACA;EACA;EACA;EACA,kBAAkB;EAClB,GAAI,eAAe,KAAA,IAAY,EAAE,WAAW,IAAI,CAAC;EACjD;EACA,YAAY;EACZ,aAAa;GACZ,QAAQ,uBAAuB,YAAY;GAC3C,WAAW,uBAAuB,eAAe;GACjD,YAAY,iBAAiB,uBAAuB,gBAAgB,IAAI;EACzE;CACD,CAAC;CASD,OAAO;EACN,UATgB,oBAAoB;GACpC,MAAM;GACN;GACA,KAAK;GACL,QAAQ;GACR,GAAI,eAAe,KAAA,IAAY,EAAE,SAAS,WAAW,IAAI,CAAC;GAC1D,QAAQ;EACT,CAEQ;EACP;CACD;AACD,CAAC;AAMF,MAAa,gBACZ,SACA,UACA,SAEA,OAAO,IAAI,aAAa;CACvB,IAAI,KAAK,SAAS,UAAU,KAAK,OAAO;EACvC,MAAM,UAAU,KAAK,MAAM;EAC3B,IAAI,QAAQ,cAAc,KAAA,GACzB,OAAO,OAAO,OAAO,KACpB,eACC,eACA,qCAAqC,QAAQ,wEAC9C,CACD;EAED,OAAO,OAAO,QACZ,UAAU,OAAO,CAAC,CAClB,KACA,OAAO,UAAU,UAChB,eACC,eACA,wCAAwC,QAAQ,KAAK,MAAM,OAAO,IAAI,MAAM,UAC5E,KACD,CACD,CACD;CACF;CACA,MAAM,QAAQ;EACb,KAAK,SAAS;EACd,OAAO,SAAS;EAChB,QAAQ;EACR,MAAM;CACP;CACA,MAAM,WAAW,wBAAwB;CACzC,MAAM,WACL,KAAK,SAAS,WAAW,KAAK,QAC3B;EACA,aAAa,KAAK,MAAM,MAAM;EAC9B,YAAY,KAAK,MAAM,MAAM,cAAc;EAC3C,WAAW,SAAS;EACpB;CACD,IACC;EAAE,GAAG;EAAU;CAAM;CACzB,OAAO,OAAO,QACZ,YAAY,QAAQ,CAAC,CACrB,KACA,OAAO,UAAU,UAChB,eACC,eACA,2BAA2B,MAAM,OAAO,IAAI,MAAM,UAClD,KACD,CACD,CACD;AACF,CAAC;AAYF,MAAa,iCACZ,SACA,YACA,OACA,QACA,eACA,MACA,YAEA,OAAO,IAAI,aAAa;CACvB,MAAM,gBACL,KAAK,UAAU,KAAA,IACZ,OAAO,wBAAwB,SAAS,QAAQ,aAAa,IAC7D,KAAA;CACJ,IAAI,kBAAkB,KAAA,GACrB,OAAO,OAAO,qCAAqC;EAClD;EACA;EACA;EACA;EACA;EACA;EACA;EACA,OAAO;EACP,SAAS;EACT,gBAAgB;CACjB,CAAC;CAEF,OAAO,OAAO,4CAA4C;EACzD;EACA;EACA;EACA;EACA;EACA;EACA;EACA,SAAS;EACT,gBAAgB,KAAK,QAAQ,UAAU;CACxC,CAAC;AACF,CAAC;AAYF,MAAM,+CACL,WAKA,OAAO,IAAI,aAAa;CACvB,MAAM,UAAU,OAAO,8BAA8B,OAAO,YAAY,OAAO,KAAK,KAAK;CACzF,OAAO,OAAO,qCAAqC;EAClD,GAAG;EACH,OAAO,QAAQ;EACf,cAAc,QAAQ;CACvB,CAAC;AACF,CAAC;AAEF,MAAM,wCACL,WAOA,uBAAuB;CACtB,SAAS,OAAO;CAChB,QAAQ,OAAO;CACf,MAAM;EACL,MAAM,OAAO;EACb,OAAO,OAAO;EAId,UAAU;EACV,kBAAA;EACA,YAAY;EACZ,OAAO,OAAO;EACd,2BAA2B,OAAO;EAWlC,GAAI,OAAO,YAAY,KAAA,IACpB;GACA,eAAe,CAAC,OAAO,QAAQ,OAAO;GACtC,KAAK,EAAE,0BAA0B,OAAO,QAAQ,IAAI;EACrD,IACC,CAAC;CACL;CACA,WAAW,UAAU;AACtB,CAAC,CAAC,CAAC,KACF,OAAO,KAAK,YAAY;CAAE;CAAQ,OAAO,OAAO;AAAM,EAAE,GACxD,OAAO,OAAO,UAAiC;CAC9C,IACC,OAAO,KAAK,UAAU,KAAA,KACtB,MAAM,WAAW,2BACjB,OAAO,UAAA,GAEP,QAAQ,OAAO,gBAAgB,OAAO,KAAA,CAAM,KAC3C,OAAO,QACN,4CAA4C;EAC3C,GAAG;EACH,SAAS,OAAO,UAAU;EAC1B,gBAAgB;CACjB,CAAC,CACF,CACD;CAED,OAAO,OAAO,KACb,eACC,mBACA,mCAAmC,MAAM,OAAO,IAAI,MAAM,UAC1D,KACD,CACD;AACD,CAAC,CACF;AAeD,MAAM,iCACL,YACA,aACqE;CACrE,MAAM,QAAQ,eAAuB,aAA6B;EACjE,IAAI,CAAC,UAAU,OAAO;EACtB,MAAM,MAAM,SAAS;EACrB,OAAO,OAAO,QAAQ,WAAW,MAAM;CACxC;CACA,IAAI,UACH,OAAO,OAAO,QAAQ;EACrB,OAAO;GACN,YAAY,oBAAoB,KAAK,oBAAoB,qBAAqB,CAAC;GAC/E,YAAY,uBAAuB,KAAK,uBAAuB,wBAAwB,CAAC;GACxF,YACC,wBACA,KAAK,wBAAwB,yBAAyB,CACvD;EACD;EACA,SAAS,OAAO;CACjB,CAAC;CAEF,OAAO,OAAO,IAAI,aAAa;EAC9B,MAAM,MAAM,OAAO,aAAa,YAAY,WAAW,uBAAuB,KAAK;EACnF,MAAM,SAAS,OAAO,aACrB,YACA,cACA,0BACA,QACD;EACA,MAAM,UAAU,OAAO,aACtB,YACA,eACA,2BACA,SACD;EACA,OAAO;GACN,OAAO;IACN,YAAY,oBAAoB,IAAI,IAAI;IACxC,YAAY,uBAAuB,OAAO,IAAI;IAC9C,YAAY,wBAAwB,QAAQ,IAAI;GACjD;GACA,SAAS,OAAO,IAAI;IAAC,IAAI;IAAS,OAAO;IAAS,QAAQ;GAAO,GAAG,EAAE,SAAS,KAAK,CAAC;EACtF;CACD,CAAC;AACF;AAEA,MAAa,+BACZ,WACA,WACyC;CACzC,kBAAkB,WAAW,QAAQ,oBAAoB,qBAAqB;CAC9E,kBAAkB,WAAW,QAAQ,uBAAuB,wBAAwB;CACpF,kBAAkB,WAAW,QAAQ,wBAAwB,yBAAyB;AACvF;AAEA,MAAM,qBACL,WACA,QACA,eACA,qBAEA,QAAQ,MAAM,SAAS,KAAK,kBAAkB,aAAa,KAC3D,UAAU,MAAM,SAAS,KAAK,kBAAkB,aAAa,KAC7D,YAAY,eAAe,gBAAgB;AAE5C,MAAa,6BACZ,SACA,kBACqD;CACrD,MAAM,QAAQ,QAAQ,MAAM,WAAW,OAAO,SAAS,aAAa,CAAC,EAAE;CACvE,IAAI,CAAC,kBAAkB,KAAK,GAAG,OAAO,KAAA;CACtC,OAAO,4BAA4B,CAAC,GAAG,KAAK;AAC7C;AAEA,MAAM,2BACL,SACA,QACA,kBAEA,QAAQ,gBAAgB,MAAM,CAAC,CAAC,KAC/B,OAAO,KAAK,YAAY,0BAA0B,SAAS,aAAa,CAAC,GACzE,OAAO,UAAU,UAChB,eACC,mBACA,mEAAmE,MAAM,OAAO,IAAI,MAAM,UAC1F,KACD,CACD,CACD;AAED,MAAM,qBACL,UAEA,UAAU,KAAA,KACV,MAAM,MAAM,SAAS,KAAK,kBAAkB,kBAAkB,KAC9D,MAAM,MAAM,SAAS,KAAK,kBAAkB,qBAAqB,KACjE,MAAM,MAAM,SAAS,KAAK,kBAAkB,sBAAsB;AAEnE,MAAM,eAAe,eAAuB,cAA4C;CACvF;CACA;CACA,QAAQ;AACT;AAEA,MAAM,gBACL,YACA,OACA,eACA,UAC+D;CAC/D,MAAM,YACL,SAEA,WACE,SAAS;EACT;EACA,GAAI,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,eAAe,KAAK;EACpD,WAAW;CACZ,CAAC,CAAC,CACD,KACA,OAAO,SAAS,oBAAoB,UACnC,SAAS,KAAA,KAAa,MAAM,WAAW,mBACpC,WAAW,SAAS;EAAE;EAAO,WAAW;CAAoB,CAAC,IAC7D,OAAO,KAAK,KAAK,CACrB,GACA,OAAO,UAAU,UAChB,eACC,iBACA,sCAAsC,MAAM,wBAC7B,QAAQ,OAAO,KAAK,MAAM,UACzC,KACD,CACD,CACD;CACF,OAAO,SAAS,aAAa;AAC9B;;;;;AAUA,MAAM,gBACL,WACA,QACA,WACA,YACA,iBAEA,OAAO,IAAI,aAAa;CACvB,MAAM,iBAAiB,SAAS,SAAS,YAAY;CACrD,MAAM,YAAiD,aAAa;EACnE,OAAO,GAAG,OAAO;EACjB,WAAW;EACX,YAAY;EACZ,kBAAkB;EAClB,aACC,iBAAiB,WAAW,sBAAsB,CAAC,CAAC,KACnD,OAAO,KAAK,SACX,KAAK,YAAY,KAAA,KAAa,KAAK,qBAAqB,KAAA,IACrD,OACA;GAAE,OAAO;GAAO,QAAQ,EAAE,QAAQ,uBAAuB;EAAE,CAC/D,CACD;CACF,CAAC,CAAC,CAAC,KACF,OAAO,UACL,UACA,eACC,cACA,iCAAiC,OAAO,+BACpC,eAAe,MAAM,mBAAmB,KAAK,KACjD,KACD,CACF,CACD;CAKA,MAAM,cAAmD,oBAAoB;EAC5E,UAAU;EACV,WAAW;EACX,YAAY;EACZ,kBAAkB;EAClB,WAAW,aAAa,SAAS,SAAS;CAC3C,CAAC,CAAC,CAAC,KACF,OAAO,UACL,UACA,eACC,gBACA,mCAAmC,UAAU,+BACzC,eAAe,MAAM,mBAAmB,KAAK,KACjD,KACD,CACF,CACD;CAEA,MAAM,eACL,eAAe,KAAA,IACZ,CAAC,IACD,CACA,oBAAoB;EACnB,UAAU;EACV,WAAW;EACX,YAAY;EACZ,kBAAkB;EAClB,WAAW,aAAa,SAAS,SAAS;CAC3C,CAAC,CAAC,CAAC,KACF,OAAO,UACL,UACA,eACC,iBACA,oCAAoC,WAAW,+BAC3C,eAAe,MAAM,mBAAmB,KAAK,KACjD,KACD,CACF,CACD,CACD;CAEH,OAAO,OAAO,IAAI;EAAC;EAAW;EAAa,GAAG;CAAY,GAAG,EAAE,aAAa,YAAY,CAAC,CAAC,CAAC,KAC1F,OAAO,MACR;AACD,CAAC;;;;;AAUF,MAAM,4BAA4B;;;;;;;AAQlC,MAAM,8BAA8B;;;;;;;AAQpC,MAAM,iCAAiC;AAOvC,MAAM,oBACL,WACA,cAEA,OAAO,WAAW;CACjB,MAAM,WACL,UAAU,cAAc,eAAe,CAAC,GAAG;EAAE,OAAO;EAAQ,SAAS;CAAU,CAAC,CAAC,CAAC;CACnF,QAAQ,UAAU;AACnB,CAAC;;;;AAKF,MAAM,yBACL,cAEA,iBAAiB,WAAW,sBAAsB,CAAC,CAAC,KACnD,OAAO,KAAK,SAAS;CACpB,IAAI,KAAK,qBAAqB,KAAA,GAAW,OAAO,KAAA;CAChD,MAAM,aAAa,OAAO,KAAK,gBAAgB;CAC/C,OAAO,OAAO,cAAc,UAAU,IAAI,aAAa,KAAA;AACxD,CAAC,CACF;;;;;;;;;;;;;;;;;;AAwBD,MAAa,wBAAwB,SAMhC;CACJ,MAAM,mBAAmB,MAAM,oBAAoB;CACnD,MAAM,sBAAsB,MAAM,uBAAuB;CACzD,IAAI;CACJ,IAAI,cAAc;CAClB,OAAO;EACN,OAAO,WAAW;GACjB,IAAI,WAAW,KAAA,GAAW;IACzB,cAAc;IACd,OAAO;KAAE,UAAU;KAAO,QAAQ,EAAE,QAAQ,yBAAyB;IAAE;GACxE;GACA,MAAM,QAAQ,aAAa,KAAA,IAAY,OAAO,oBAAoB,SAAS;GAC3E,WAAW;GAOX,IAAI,QAAQ,GAAG;IACd,cAAc;IACd,OAAO;KACN,UAAU;KACV,QAAQ;MAAE,SAAS;MAAQ;MAAO;MAAa,WAAW;KAAK;IAChE;GACD;GACA,IAAI,SAAS,kBACZ,eAAe;QAEf,cAAc;GAEf,IAAI,eAAe,qBAAqB,OAAO,EAAE,UAAU,KAAK;GAChE,OAAO;IAAE,UAAU;IAAO,QAAQ;KAAE,SAAS;KAAQ;KAAO;IAAY;GAAE;EAC3E;EACA,YAAY;CACb;AACD;;;;;;;;;;;;;;;AAgBA,MAAM,4BACL,WACA,QACA,iBAEA,OAAO,IAAI,aAAa;CACvB,MAAM,iBAAiB,SAAS,SAAS,YAAY;CACrD,MAAM,YAAY,qBAAqB;CAEvC,OAAO,OAAO,aAAa;EAC1B,OAAO,GAAG,OAAO;EACjB,WAAW;EACX,YAAY;EACZ,kBAAkB;EAClB,aACC,sBAAsB,SAAS,CAAC,CAAC,KAChC,OAAO,KAAK,YAAY;GACvB,MAAM,UAAU,UAAU,KAAK,OAAO;GACtC,OAAO,QAAQ,WAAW,OAAO;IAAE,OAAO;IAAO,QAAQ,QAAQ;GAAO;EACzE,CAAC,CACF;CACF,CAAC,CAAC,CAAC,KACF,OAAO,UACL,UACA,eACC,cACA,4DACI,eAAe,eAAe,UAAU,KAAK,KAAK,MAAM,4KAGxD,mBAAmB,KAAK,KAC5B,KACD,CACF,CACD;AACD,CAAC;AASF,MAAM,gBACL,UACA,cACA,SAEA,eAAe,UAAU,YAAY,CAAC,CAAC,KACtC,OAAO,KAAK,aAAa,UAAU;CAAE,UAAU;CAAQ;CAAU;AAAK,CAAC,CAAC,GACxE,OAAO,UAAU,UAChB,eACC,mBACA,sDAAsD,aAAa,IAAI,MAAM,UAC7E,KACD,CACD,CACD"}

package/dist/plugins/sui/mode/shared-boot.mjs

@@ -1,18 +1,16 @@
-import { chainId } from "../../../substrate/brand.mjs";
 import { waitForHttpEndpoint } from "../../../substrate/runtime/http-probe.mjs";
 import { suiConfigError, suiPluginError } from "../errors.mjs";
 import { formatUnknownError } from "../../../substrate/runtime/format-unknown-error.mjs";
-import { SuiSpans } from "../spans.mjs";
-import { makeSuiChainProbe } from "../chain-probe.mjs";
 import { toDockerHostGatewayUrl } from "./shared.mjs";
+import { makeSuiChainProbe } from "../chain-probe.mjs";
 import { Duration, Effect, SynchronizedRef } from "effect";
 //#region src/plugins/sui/mode/shared-boot.ts
 /** Default chain-id fetch timeout. The wire latency is the dominant
 *  cost on real RPCs; 30 s is the documented ceiling. */
 const DEFAULT_CHAIN_ID_TIMEOUT = Duration.seconds(30);
 /** Fetch the chain identifier off a constructed grpc client. The
-*  result is the bare string that downstream cache layers fold into
-*  their state-store keys. */
+*  result is the bare string that the substrate's content-addressed
+*  cache folds into its keys (`(namespace, chainId, contentHash)`). */
 const fetchChainId = (sdkClient, opts) => {
 	const timeout = opts?.timeout ?? DEFAULT_CHAIN_ID_TIMEOUT;
 	const timeoutMs = Duration.toMillis(timeout);
@@ -28,12 +26,11 @@ const fetchChainId = (sdkClient, opts) => {
 	}).pipe(Effect.timeoutOrElse({
 		duration: timeout,
 		orElse: () => Effect.fail(suiPluginError("chain-id-fetch", `sui chain-id fetch did not respond within ${timeoutMs}ms`))
-	}), Effect.tap((id) => Effect.annotateCurrentSpan({ [SuiSpans.chain]: id })), Effect.withSpan(opts?.span ?? "devstack.plugin.sui.fetchChainId"));
+	}));
 };
 /** Per-attempt and total budget for the `waitForTransactionsReady`
 *  retry loop. The 2 s spacing matches the upstream sui-faucet's
-*  internal cadence; the 90 s ceiling matches the v3 service's
-*  documented wall-clock. */
+*  internal cadence; the 90 s ceiling is the wall-clock budget. */
 const FUNDS_READY_RETRY_SPACING = Duration.seconds(2);
 const FUNDS_READY_TIMEOUT = Duration.seconds(90);
 /** Per-fetch deadline for the faucet probe POST. Bounded short so
@@ -114,26 +111,25 @@ const makeSdkShim = (sdkClient) => ({
 *  `fork: null` discriminator is invariant for non-fork modes; the
 *  fork builder constructs its own client with the admin surface.
 *
-*  `chain` is accepted as a bare string and branded to `ChainId` at
-*  this single boundary — every consumer downstream reads the
-*  branded shape so capability-key constructors (`chainProbe…`,
-*  `faucet…`) accept it without a cast.
+*  `chainId` is a plain string value — every consumer downstream reads
+*  it directly and capability-key constructors (`chainProbe…`,
+*  `faucet…`) key on the string.
 *
-*  Returns an `Effect` on the `SuiConfigError` channel: the empty-chain
+*  Returns an `Effect` on the `SuiConfigError` channel: the empty-chainId
 *  guard must surface as a typed, `catchTag`-able failure. Calling it
 *  un-yielded as a sync function (as it once was) turned a thrown
 *  `SuiConfigError` into a DEFECT inside the mode-boot `Effect.gen`
 *  bodies — a hidden crash the channel could never recover (mirrors the
 *  fix already applied to `auto-tick.ts`; STYLE_GUIDE §2). */
 const assembleSuiClient = (parts) => Effect.gen(function* () {
-	if (typeof parts.chain !== "string" || parts.chain.length === 0) return yield* Effect.fail(suiConfigError({
-		field: "chain",
+	if (typeof parts.chainId !== "string" || parts.chainId.length === 0) return yield* Effect.fail(suiConfigError({
+		field: "chainId",
 		message: "sui.assembleSuiClient: chain id must be a non-empty string",
 		hint: "check fetchChainId / network resolver returned a real chain id"
 	}));
-	const chain = parts.chain;
+	const chainId = parts.chainId;
 	const sdkShim = makeSdkShim(parts.sdkClient);
-	const chainProbe = makeSuiChainProbe(sdkShim, chain);
+	const chainProbe = makeSuiChainProbe(sdkShim, chainId);
 	return {
 		client: {
 			sdk: sdkShim,
@@ -146,7 +142,7 @@ const assembleSuiClient = (parts) => Effect.gen(function* () {
 				faucetUrl: parts.faucetUrl === void 0 ? null : toDockerHostGatewayUrl(parts.faucetUrl),
 				graphqlUrl: parts.graphqlUrl === void 0 ? null : toDockerHostGatewayUrl(parts.graphqlUrl)
 			},
-			chain: chainId(chain),
+			chainId,
 			waitForTransactionsReady: parts.waitForTransactionsReady,
 			chainProbe,
 			fork: null,
@@ -157,13 +153,12 @@ const assembleSuiClient = (parts) => Effect.gen(function* () {
 	};
 });
 /** Shape the resolved network record the boot builders all hand
-*  back. The substrate-network mapping is uniform per mode. Brands
-*  the raw chain string at this boundary so consumers downstream
-*  (codegen, capabilities, walrus/seal deps) read a `ChainId` and
-*  don't re-wrap. */
+*  back. The substrate-network mapping is uniform per mode. The raw
+*  chainId string flows through verbatim — consumers downstream (codegen,
+*  capabilities, walrus/seal deps) read it as a plain string value. */
 const makeResolvedNetwork = (parts) => ({
 	mode: parts.mode,
-	chain: chainId(parts.chain),
+	chainId: parts.chainId,
 	rpc: parts.rpc,
 	source: parts.source,
 	...parts.faucet !== void 0 ? { faucet: parts.faucet } : {},

package/dist/plugins/sui/mode/shared-boot.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"shared-boot.mjs","names":["brandChainId"],"sources":["../../../../src/plugins/sui/mode/shared-boot.ts"],"sourcesContent":["// Sui plugin — boot helpers shared across local / external / live modes.\n//\n// What lives here (and why):\n//\n//   - `fetchChainId(client, opts?)` — bounded chain-id probe. The\n//     only readiness sentinel for external + live; local treats it\n//     as the chain-id capture step after the multi-probe gate has\n//     succeeded.\n//   - `buildWaitForTransactionsReady(faucetUrl, opts?)` — memoised\n//     funds-ready gate for faucet-bearing networks. `Effect.cached`\n//     with a manual-invalidation surface (the distilled-doc\n//     opportunity called out in `mode/shared.ts`).\n//   - `noopWaitForTransactionsReady` — trivially-succeeding gate for\n//     faucet-less networks (live mainnet, fork).\n//   - `assembleSuiClient(...)` — collapses the boilerplate that\n//     local/local-rpc/live all repeat (sdk shim + chainProbe + the\n//     `fork: null` discriminator).\n//\n// Why not jam this into `mode/local.ts`: external + live can't\n// import from `local.ts` without dragging the container-runtime\n// import path along; the helpers below are wire-only and have NO\n// substrate-context dependencies.\n\nimport { Duration, Effect, SynchronizedRef, type Scope } from 'effect';\n\nimport type { SuiGrpcClient } from '@mysten/sui/grpc';\n\nimport type { ChainProbe } from '../../../contracts/chain-probe.ts';\nimport { chainId as brandChainId } from '../../../substrate/brand.ts';\nimport { waitForHttpEndpoint } from '../../../substrate/runtime/http-probe.ts';\nimport { makeSuiChainProbe, type SuiSdkShim, type SuiProbeKey } from '../chain-probe.ts';\nimport {\n\tsuiConfigError,\n\tsuiPluginError,\n\ttype SuiConfigError,\n\ttype SuiPluginError,\n} from '../errors.ts';\nimport { formatUnknownError } from '../../../substrate/runtime/format-unknown-error.ts';\nimport type { ResolvedSuiNetwork } from '../network-resolver.ts';\nimport { SuiSpans } from '../spans.ts';\nimport { toDockerHostGatewayUrl, type SuiClient, type WaitForTransactionsReady } from './shared.ts';\n\n// ---------------------------------------------------------------------------\n// Chain-id fetch — bounded, typed-error\n// ---------------------------------------------------------------------------\n\n/** Default chain-id fetch timeout. The wire latency is the dominant\n *  cost on real RPCs; 30 s is the documented ceiling. */\nexport const DEFAULT_CHAIN_ID_TIMEOUT = Duration.seconds(30);\n\n/** Fetch the chain identifier off a constructed grpc client. The\n *  result is the bare string that downstream cache layers fold into\n *  their state-store keys. */\nexport const fetchChainId = (\n\tsdkClient: SuiGrpcClient,\n\topts?: { readonly timeout?: Duration.Duration; readonly span?: string },\n): Effect.Effect<string, SuiPluginError> => {\n\tconst timeout = opts?.timeout ?? DEFAULT_CHAIN_ID_TIMEOUT;\n\tconst timeoutMs = Duration.toMillis(timeout);\n\treturn Effect.tryPromise({\n\t\ttry: (signal) =>\n\t\t\tsdkClient.ledgerService\n\t\t\t\t.getServiceInfo({}, { abort: signal, timeout: timeoutMs })\n\t\t\t\t.response.then((response) => {\n\t\t\t\t\tif (!response.chainId) {\n\t\t\t\t\t\tthrow new Error('Chain identifier not found in service info');\n\t\t\t\t\t}\n\t\t\t\t\treturn response.chainId;\n\t\t\t\t}),\n\t\tcatch: (cause): SuiPluginError =>\n\t\t\tsuiPluginError(\n\t\t\t\t'chain-id-fetch',\n\t\t\t\t`sui chain-id fetch failed: ${formatUnknownError(cause)}`,\n\t\t\t\tcause,\n\t\t\t),\n\t}).pipe(\n\t\tEffect.timeoutOrElse({\n\t\t\tduration: timeout,\n\t\t\torElse: (): Effect.Effect<string, SuiPluginError> =>\n\t\t\t\tEffect.fail(\n\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t'chain-id-fetch',\n\t\t\t\t\t\t`sui chain-id fetch did not respond within ${timeoutMs}ms`,\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t}),\n\t\tEffect.tap((id: string) => Effect.annotateCurrentSpan({ [SuiSpans.chain]: id })),\n\t\tEffect.withSpan(opts?.span ?? 'devstack.plugin.sui.fetchChainId'),\n\t);\n};\n\n// ---------------------------------------------------------------------------\n// waitForTransactionsReady — memoised, with manual invalidation\n// ---------------------------------------------------------------------------\n\n/** Per-attempt and total budget for the `waitForTransactionsReady`\n *  retry loop. The 2 s spacing matches the upstream sui-faucet's\n *  internal cadence; the 90 s ceiling matches the v3 service's\n *  documented wall-clock. */\nconst FUNDS_READY_RETRY_SPACING = Duration.seconds(2);\nconst FUNDS_READY_TIMEOUT = Duration.seconds(90);\n\n/** Per-fetch deadline for the faucet probe POST. Bounded short so\n *  the outer retry loop hammers quickly. */\nconst PROBE_FETCH_TIMEOUT_MS = 3000;\n\n/** Probe recipient for the faucet funds-ready check. A literal\n *  zero-balance address so the real call doesn't pollute caller wallets;\n *  any well-formed address works. */\nconst FAUCET_PROBE_RECIPIENT = '0x0000000000000000000000000000000000000000000000000000000000000001';\n\n/**\n * Build the funds-transferable gate against a real HTTP faucet.\n * Memoised — first successful resolution sticks for the scope; the\n * manual `invalidate` surface clears the memo so long-running\n * supervisors can re-probe without a full restart.\n */\nexport const buildWaitForTransactionsReady = (\n\tfaucetUrl: string,\n\topts?: {\n\t\treadonly retrySpacing?: Duration.Duration;\n\t\treadonly timeout?: Duration.Duration;\n\t},\n): Effect.Effect<WaitForTransactionsReady, never, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tconst retrySpacing = opts?.retrySpacing ?? FUNDS_READY_RETRY_SPACING;\n\t\tconst timeout = opts?.timeout ?? FUNDS_READY_TIMEOUT;\n\t\t// SynchronizedRef serialises the get-or-init transition so two\n\t\t// concurrent callers can't both observe `null` and both build\n\t\t// their own `Effect.cached` instance (CAS-style guard against\n\t\t// the build-once race).\n\t\tconst ref = yield* SynchronizedRef.make<Effect.Effect<void, SuiPluginError> | null>(null);\n\n\t\tconst makeProbe = (): Effect.Effect<void, SuiPluginError> =>\n\t\t\twaitForHttpEndpoint({\n\t\t\t\tendpoint: `${faucetUrl}/v2/gas`,\n\t\t\t\ttimeoutMs: Duration.toMillis(timeout),\n\t\t\t\tintervalMs: Duration.toMillis(retrySpacing),\n\t\t\t\trequestTimeoutMs: PROBE_FETCH_TIMEOUT_MS,\n\t\t\t\trequestInit: {\n\t\t\t\t\tmethod: 'POST',\n\t\t\t\t\theaders: { 'content-type': 'application/json' },\n\t\t\t\t\tbody: JSON.stringify({\n\t\t\t\t\t\tFixedAmountRequest: { recipient: FAUCET_PROBE_RECIPIENT },\n\t\t\t\t\t}),\n\t\t\t\t},\n\t\t\t\tvalidate: async (response) => {\n\t\t\t\t\tif (!response.ok) throw new Error(`faucet HTTP ${response.status}`);\n\t\t\t\t\tconst body = (await response.json()) as { status?: unknown };\n\t\t\t\t\tconst status = body.status;\n\t\t\t\t\tif (typeof status === 'object' && status !== null && 'Failure' in status) {\n\t\t\t\t\t\tconst failure = (status as { Failure: unknown }).Failure;\n\t\t\t\t\t\tthrow new Error(`faucet body: Failure ${JSON.stringify(failure)}`);\n\t\t\t\t\t}\n\t\t\t\t\treturn true;\n\t\t\t\t},\n\t\t\t}).pipe(\n\t\t\t\tEffect.mapError(\n\t\t\t\t\t(cause): SuiPluginError =>\n\t\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t\t'wait-funds-ready',\n\t\t\t\t\t\t\t`sui faucet at ${faucetUrl} did not become funds-transferable within ` +\n\t\t\t\t\t\t\t\t`${Duration.toMillis(timeout)}ms (still returning body-level Failure or 5xx): ` +\n\t\t\t\t\t\t\t\tformatUnknownError(cause),\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t);\n\n\t\t// `modifyEffect` atomically observes-then-updates inside a\n\t\t// serialised critical section: at most one fiber builds the\n\t\t// memoised probe, every other caller reads it back. This\n\t\t// closes the read-build-write race the plain Ref had.\n\t\tconst getOrInit: Effect.Effect<Effect.Effect<void, SuiPluginError>> =\n\t\t\tSynchronizedRef.modifyEffect(ref, (existing) =>\n\t\t\t\texisting !== null\n\t\t\t\t\t? Effect.succeed([existing, existing] as const)\n\t\t\t\t\t: Effect.cached(makeProbe()).pipe(Effect.map((cached) => [cached, cached] as const)),\n\t\t\t);\n\n\t\treturn {\n\t\t\twait: getOrInit.pipe(Effect.flatMap((eff) => eff)),\n\t\t\tinvalidate: SynchronizedRef.set(ref, null),\n\t\t};\n\t});\n\n/** Trivially-succeeding gate. Used by faucet-less networks (live\n *  mainnet, fork — fork funds via impersonation, not HTTP). */\nexport const noopWaitForTransactionsReady: WaitForTransactionsReady = {\n\twait: Effect.void,\n\tinvalidate: Effect.void,\n};\n\n// ---------------------------------------------------------------------------\n// SuiClient assembly — collapses the per-mode boilerplate\n// ---------------------------------------------------------------------------\n\n/** Build the `SuiSdkShim` over a constructed grpc client.\n *  Account/Coin/Wallet read through this seam, so we expose\n *  `executeTransaction` + `waitForTransaction` in addition to the\n *  read methods needed by the chain probe.\n *\n *  Every read/write goes through `sdkClient.core.*` — the gRPC\n *  TransportMethods surface from `@mysten/sui`. JSON-RPC is\n *  deprecated; do not reintroduce it. */\nexport const makeSdkShim = (sdkClient: SuiGrpcClient): SuiSdkShim => ({\n\tcore: {\n\t\tgetObject: (args) => sdkClient.core.getObject(args),\n\t\tgetTransaction: (args) => sdkClient.core.getTransaction(args),\n\t\tgetBalance: (args) => sdkClient.core.getBalance(args),\n\t\tlistCoins: (args) => sdkClient.core.listCoins(args),\n\t\t// Extended surfaces — used by the account plugin's sign + execute\n\t\t// closure. Routes through `client.core.*` (the cross-transport\n\t\t// canonical surface per STYLE_GUIDE §16). The SDK accepts a\n\t\t// mutable `signatures: string[]`; the shim's readonly signature\n\t\t// is widened with a copy at the boundary.\n\t\texecuteTransaction: (args) =>\n\t\t\tsdkClient.core.executeTransaction({\n\t\t\t\ttransaction: args.transaction,\n\t\t\t\tsignatures: [...args.signatures],\n\t\t\t\t...(args.include !== undefined ? { include: args.include } : {}),\n\t\t\t}),\n\t\twaitForTransaction: (args) =>\n\t\t\tsdkClient.core.waitForTransaction({\n\t\t\t\tdigest: args.digest,\n\t\t\t\t...(args.timeout !== undefined ? { timeout: args.timeout } : {}),\n\t\t\t}),\n\t},\n\t// Client passthrough — Package's publish-tx builder hands this to\n\t// `Transaction.build({ client })`; sibling plugins reach\n\t// `client.core.*` directly through this slot. Typed as\n\t// ClientWithCoreApi via SuiSdkShim.client.\n\tclient: sdkClient,\n});\n\n/** Assemble a `SuiClient` from the per-mode building blocks. The\n *  `fork: null` discriminator is invariant for non-fork modes; the\n *  fork builder constructs its own client with the admin surface.\n *\n *  `chain` is accepted as a bare string and branded to `ChainId` at\n *  this single boundary — every consumer downstream reads the\n *  branded shape so capability-key constructors (`chainProbe…`,\n *  `faucet…`) accept it without a cast.\n *\n *  Returns an `Effect` on the `SuiConfigError` channel: the empty-chain\n *  guard must surface as a typed, `catchTag`-able failure. Calling it\n *  un-yielded as a sync function (as it once was) turned a thrown\n *  `SuiConfigError` into a DEFECT inside the mode-boot `Effect.gen`\n *  bodies — a hidden crash the channel could never recover (mirrors the\n *  fix already applied to `auto-tick.ts`; STYLE_GUIDE §2). */\nexport const assembleSuiClient = (parts: {\n\treadonly sdkClient: SuiGrpcClient;\n\treadonly chain: string;\n\treadonly rpcUrl: string;\n\treadonly faucetUrl?: string;\n\treadonly fundingFaucetUrl?: string;\n\treadonly graphqlUrl?: string;\n\treadonly waitForTransactionsReady: WaitForTransactionsReady;\n\t/** Image ref consumed by package's path (b) (`docker run --rm`)\n\t *  build path. `null` for modes that have no in-stack image\n\t *  (external + live). */\n\treadonly buildImage?: import('../../../contracts/container-runtime.ts').ImageRef | null;\n\t/** Container-reachable mirrors. Local mode resolves public URLs\n\t *  through the router but sibling containers still need direct\n\t *  host-gateway URLs during boot. */\n\treadonly hostGateway?: SuiClient['hostGateway'];\n}): Effect.Effect<\n\t{\n\t\treadonly client: SuiClient;\n\t\treadonly sdkShim: SuiSdkShim;\n\t\treadonly chainProbe: ChainProbe<SuiProbeKey>;\n\t},\n\tSuiConfigError\n> =>\n\tEffect.gen(function* () {\n\t\t// Defense-in-depth — `fetchChainId` should never resolve to an\n\t\t// empty string (RPC rejects that earlier), but a branded empty\n\t\t// string would silently fold into every downstream cache key. A\n\t\t// caller-pinned `chain: ''` (e.g. `.live.custom({ chain: '' })`)\n\t\t// reaches here, so fail on the typed channel rather than throw.\n\t\tif (typeof parts.chain !== 'string' || parts.chain.length === 0) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\tsuiConfigError({\n\t\t\t\t\tfield: 'chain',\n\t\t\t\t\tmessage: 'sui.assembleSuiClient: chain id must be a non-empty string',\n\t\t\t\t\thint: 'check fetchChainId / network resolver returned a real chain id',\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\t\tconst chain = parts.chain;\n\t\tconst sdkShim = makeSdkShim(parts.sdkClient);\n\t\tconst chainProbe = makeSuiChainProbe(sdkShim, chain);\n\t\tconst client: SuiClient = {\n\t\t\tsdk: sdkShim,\n\t\t\trpcUrl: parts.rpcUrl,\n\t\t\tfaucetUrl: parts.faucetUrl ?? null,\n\t\t\tfundingFaucetUrl: parts.fundingFaucetUrl ?? parts.faucetUrl ?? null,\n\t\t\tgraphqlUrl: parts.graphqlUrl ?? null,\n\t\t\thostGateway: parts.hostGateway ?? {\n\t\t\t\trpcUrl: toDockerHostGatewayUrl(parts.rpcUrl),\n\t\t\t\tfaucetUrl: parts.faucetUrl === undefined ? null : toDockerHostGatewayUrl(parts.faucetUrl),\n\t\t\t\tgraphqlUrl:\n\t\t\t\t\tparts.graphqlUrl === undefined ? null : toDockerHostGatewayUrl(parts.graphqlUrl),\n\t\t\t},\n\t\t\tchain: brandChainId(chain),\n\t\t\twaitForTransactionsReady: parts.waitForTransactionsReady,\n\t\t\tchainProbe,\n\t\t\tfork: null,\n\t\t\tbuildImage: parts.buildImage ?? null,\n\t\t};\n\t\treturn { client, sdkShim, chainProbe };\n\t});\n\n/** Shape the resolved network record the boot builders all hand\n *  back. The substrate-network mapping is uniform per mode. Brands\n *  the raw chain string at this boundary so consumers downstream\n *  (codegen, capabilities, walrus/seal deps) read a `ChainId` and\n *  don't re-wrap. */\nexport const makeResolvedNetwork = (parts: {\n\treadonly mode: ResolvedSuiNetwork['mode'];\n\treadonly chain: string;\n\treadonly rpc: string;\n\treadonly faucet?: string;\n\treadonly graphql?: string;\n\treadonly source: ResolvedSuiNetwork['source'];\n\treadonly checkpoint?: string;\n\treadonly forkUpstream?: ResolvedSuiNetwork['forkUpstream'];\n}): ResolvedSuiNetwork => ({\n\tmode: parts.mode,\n\tchain: brandChainId(parts.chain),\n\trpc: parts.rpc,\n\tsource: parts.source,\n\t...(parts.faucet !== undefined ? { faucet: parts.faucet } : {}),\n\t...(parts.graphql !== undefined ? { graphql: parts.graphql } : {}),\n\t...(parts.checkpoint !== undefined ? { checkpoint: parts.checkpoint } : {}),\n\t...(parts.forkUpstream !== undefined ? { forkUpstream: parts.forkUpstream } : {}),\n});\n"],"mappings":";;;;;;;;;;;AAgDA,MAAa,2BAA2B,SAAS,QAAQ,GAAG;;;;AAK5D,MAAa,gBACZ,WACA,SAC2C;CAC3C,MAAM,UAAU,MAAM,WAAW;CACjC,MAAM,YAAY,SAAS,SAAS,QAAQ;AAC5C,QAAO,OAAO,WAAW;EACxB,MAAM,WACL,UAAU,cACR,eAAe,EAAE,EAAE;GAAE,OAAO;GAAQ,SAAS;GAAW,CAAC,CACzD,SAAS,MAAM,aAAa;AAC5B,OAAI,CAAC,SAAS,QACb,OAAM,IAAI,MAAM,6CAA6C;AAE9D,UAAO,SAAS;IACf;EACJ,QAAQ,UACP,eACC,kBACA,8BAA8B,mBAAmB,MAAM,IACvD,MACA;EACF,CAAC,CAAC,KACF,OAAO,cAAc;EACpB,UAAU;EACV,cACC,OAAO,KACN,eACC,kBACA,6CAA6C,UAAU,IACvD,CACD;EACF,CAAC,EACF,OAAO,KAAK,OAAe,OAAO,oBAAoB,GAAG,SAAS,QAAQ,IAAI,CAAC,CAAC,EAChF,OAAO,SAAS,MAAM,QAAQ,mCAAmC,CACjE;;;;;;AAWF,MAAM,4BAA4B,SAAS,QAAQ,EAAE;AACrD,MAAM,sBAAsB,SAAS,QAAQ,GAAG;;;AAIhD,MAAM,yBAAyB;;;;AAK/B,MAAM,yBAAyB;;;;;;;AAQ/B,MAAa,iCACZ,WACA,SAKA,OAAO,IAAI,aAAa;CACvB,MAAM,eAAe,MAAM,gBAAgB;CAC3C,MAAM,UAAU,MAAM,WAAW;CAKjC,MAAM,MAAM,OAAO,gBAAgB,KAAiD,KAAK;CAEzF,MAAM,kBACL,oBAAoB;EACnB,UAAU,GAAG,UAAU;EACvB,WAAW,SAAS,SAAS,QAAQ;EACrC,YAAY,SAAS,SAAS,aAAa;EAC3C,kBAAkB;EAClB,aAAa;GACZ,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAC/C,MAAM,KAAK,UAAU,EACpB,oBAAoB,EAAE,WAAW,wBAAwB,EACzD,CAAC;GACF;EACD,UAAU,OAAO,aAAa;AAC7B,OAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,eAAe,SAAS,SAAS;GAEnE,MAAM,UAAS,MADK,SAAS,MAAM,EACf;AACpB,OAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,aAAa,QAAQ;IACzE,MAAM,UAAW,OAAgC;AACjD,UAAM,IAAI,MAAM,wBAAwB,KAAK,UAAU,QAAQ,GAAG;;AAEnE,UAAO;;EAER,CAAC,CAAC,KACF,OAAO,UACL,UACA,eACC,oBACA,iBAAiB,UAAU,4CACvB,SAAS,SAAS,QAAQ,CAAC,oDAC9B,mBAAmB,MAAM,EAC1B,MACA,CACF,CACD;AAaF,QAAO;EACN,MAPA,gBAAgB,aAAa,MAAM,aAClC,aAAa,OACV,OAAO,QAAQ,CAAC,UAAU,SAAS,CAAU,GAC7C,OAAO,OAAO,WAAW,CAAC,CAAC,KAAK,OAAO,KAAK,WAAW,CAAC,QAAQ,OAAO,CAAU,CAAC,CAIvE,CAAC,KAAK,OAAO,SAAS,QAAQ,IAAI,CAAC;EAClD,YAAY,gBAAgB,IAAI,KAAK,KAAK;EAC1C;EACA;;;AAIH,MAAa,+BAAyD;CACrE,MAAM,OAAO;CACb,YAAY,OAAO;CACnB;;;;;;;;;AAcD,MAAa,eAAe,eAA0C;CACrE,MAAM;EACL,YAAY,SAAS,UAAU,KAAK,UAAU,KAAK;EACnD,iBAAiB,SAAS,UAAU,KAAK,eAAe,KAAK;EAC7D,aAAa,SAAS,UAAU,KAAK,WAAW,KAAK;EACrD,YAAY,SAAS,UAAU,KAAK,UAAU,KAAK;EAMnD,qBAAqB,SACpB,UAAU,KAAK,mBAAmB;GACjC,aAAa,KAAK;GAClB,YAAY,CAAC,GAAG,KAAK,WAAW;GAChC,GAAI,KAAK,YAAY,KAAA,IAAY,EAAE,SAAS,KAAK,SAAS,GAAG,EAAE;GAC/D,CAAC;EACH,qBAAqB,SACpB,UAAU,KAAK,mBAAmB;GACjC,QAAQ,KAAK;GACb,GAAI,KAAK,YAAY,KAAA,IAAY,EAAE,SAAS,KAAK,SAAS,GAAG,EAAE;GAC/D,CAAC;EACH;CAKD,QAAQ;CACR;;;;;;;;;;;;;;;;AAiBD,MAAa,qBAAqB,UAwBjC,OAAO,IAAI,aAAa;AAMvB,KAAI,OAAO,MAAM,UAAU,YAAY,MAAM,MAAM,WAAW,EAC7D,QAAO,OAAO,OAAO,KACpB,eAAe;EACd,OAAO;EACP,SAAS;EACT,MAAM;EACN,CAAC,CACF;CAEF,MAAM,QAAQ,MAAM;CACpB,MAAM,UAAU,YAAY,MAAM,UAAU;CAC5C,MAAM,aAAa,kBAAkB,SAAS,MAAM;AAmBpD,QAAO;EAAE,QAAA;GAjBR,KAAK;GACL,QAAQ,MAAM;GACd,WAAW,MAAM,aAAa;GAC9B,kBAAkB,MAAM,oBAAoB,MAAM,aAAa;GAC/D,YAAY,MAAM,cAAc;GAChC,aAAa,MAAM,eAAe;IACjC,QAAQ,uBAAuB,MAAM,OAAO;IAC5C,WAAW,MAAM,cAAc,KAAA,IAAY,OAAO,uBAAuB,MAAM,UAAU;IACzF,YACC,MAAM,eAAe,KAAA,IAAY,OAAO,uBAAuB,MAAM,WAAW;IACjF;GACD,OAAOA,QAAa,MAAM;GAC1B,0BAA0B,MAAM;GAChC;GACA,MAAM;GACN,YAAY,MAAM,cAAc;GAElB;EAAE;EAAS;EAAY;EACrC;;;;;;AAOH,MAAa,uBAAuB,WAST;CAC1B,MAAM,MAAM;CACZ,OAAOA,QAAa,MAAM,MAAM;CAChC,KAAK,MAAM;CACX,QAAQ,MAAM;CACd,GAAI,MAAM,WAAW,KAAA,IAAY,EAAE,QAAQ,MAAM,QAAQ,GAAG,EAAE;CAC9D,GAAI,MAAM,YAAY,KAAA,IAAY,EAAE,SAAS,MAAM,SAAS,GAAG,EAAE;CACjE,GAAI,MAAM,eAAe,KAAA,IAAY,EAAE,YAAY,MAAM,YAAY,GAAG,EAAE;CAC1E,GAAI,MAAM,iBAAiB,KAAA,IAAY,EAAE,cAAc,MAAM,cAAc,GAAG,EAAE;CAChF"}
+{"version":3,"file":"shared-boot.mjs","names":[],"sources":["../../../../src/plugins/sui/mode/shared-boot.ts"],"sourcesContent":["// Sui plugin — boot helpers shared across local / external / live modes.\n//\n// What lives here (and why):\n//\n//   - `fetchChainId(client, opts?)` — bounded chain-id probe. The\n//     only readiness sentinel for external + live; local treats it\n//     as the chain-id capture step after the multi-probe gate has\n//     succeeded.\n//   - `buildWaitForTransactionsReady(faucetUrl, opts?)` — memoised\n//     funds-ready gate for faucet-bearing networks. `Effect.cached`\n//     with a manual-invalidation surface (the distilled-doc\n//     opportunity called out in `mode/shared.ts`).\n//   - `noopWaitForTransactionsReady` — trivially-succeeding gate for\n//     faucet-less networks (live mainnet, fork).\n//   - `assembleSuiClient(...)` — collapses the boilerplate that\n//     local/local-rpc/live all repeat (sdk shim + chainProbe + the\n//     `fork: null` discriminator).\n//\n// Why not jam this into `mode/local.ts`: external + live can't\n// import from `local.ts` without dragging the container-runtime\n// import path along; the helpers below are wire-only and have NO\n// substrate-context dependencies.\n\nimport { Duration, Effect, SynchronizedRef, type Scope } from 'effect';\n\nimport type { SuiGrpcClient } from '@mysten/sui/grpc';\n\nimport type { ChainProbe } from '../../../contracts/chain-probe.ts';\nimport { waitForHttpEndpoint } from '../../../substrate/runtime/http-probe.ts';\nimport { makeSuiChainProbe, type SuiSdkShim, type SuiProbeKey } from '../chain-probe.ts';\nimport {\n\tsuiConfigError,\n\tsuiPluginError,\n\ttype SuiConfigError,\n\ttype SuiPluginError,\n} from '../errors.ts';\nimport { formatUnknownError } from '../../../substrate/runtime/format-unknown-error.ts';\nimport type { ResolvedSuiNetwork } from '../network-resolver.ts';\nimport { toDockerHostGatewayUrl, type SuiClient, type WaitForTransactionsReady } from './shared.ts';\n\n// ---------------------------------------------------------------------------\n// Chain-id fetch — bounded, typed-error\n// ---------------------------------------------------------------------------\n\n/** Default chain-id fetch timeout. The wire latency is the dominant\n *  cost on real RPCs; 30 s is the documented ceiling. */\nexport const DEFAULT_CHAIN_ID_TIMEOUT = Duration.seconds(30);\n\n/** Fetch the chain identifier off a constructed grpc client. The\n *  result is the bare string that the substrate's content-addressed\n *  cache folds into its keys (`(namespace, chainId, contentHash)`). */\nexport const fetchChainId = (\n\tsdkClient: SuiGrpcClient,\n\topts?: { readonly timeout?: Duration.Duration },\n): Effect.Effect<string, SuiPluginError> => {\n\tconst timeout = opts?.timeout ?? DEFAULT_CHAIN_ID_TIMEOUT;\n\tconst timeoutMs = Duration.toMillis(timeout);\n\treturn Effect.tryPromise({\n\t\ttry: (signal) =>\n\t\t\tsdkClient.ledgerService\n\t\t\t\t.getServiceInfo({}, { abort: signal, timeout: timeoutMs })\n\t\t\t\t.response.then((response) => {\n\t\t\t\t\tif (!response.chainId) {\n\t\t\t\t\t\tthrow new Error('Chain identifier not found in service info');\n\t\t\t\t\t}\n\t\t\t\t\treturn response.chainId;\n\t\t\t\t}),\n\t\tcatch: (cause): SuiPluginError =>\n\t\t\tsuiPluginError(\n\t\t\t\t'chain-id-fetch',\n\t\t\t\t`sui chain-id fetch failed: ${formatUnknownError(cause)}`,\n\t\t\t\tcause,\n\t\t\t),\n\t}).pipe(\n\t\tEffect.timeoutOrElse({\n\t\t\tduration: timeout,\n\t\t\torElse: (): Effect.Effect<string, SuiPluginError> =>\n\t\t\t\tEffect.fail(\n\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t'chain-id-fetch',\n\t\t\t\t\t\t`sui chain-id fetch did not respond within ${timeoutMs}ms`,\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t}),\n\t);\n};\n\n// ---------------------------------------------------------------------------\n// waitForTransactionsReady — memoised, with manual invalidation\n// ---------------------------------------------------------------------------\n\n/** Per-attempt and total budget for the `waitForTransactionsReady`\n *  retry loop. The 2 s spacing matches the upstream sui-faucet's\n *  internal cadence; the 90 s ceiling is the wall-clock budget. */\nconst FUNDS_READY_RETRY_SPACING = Duration.seconds(2);\nconst FUNDS_READY_TIMEOUT = Duration.seconds(90);\n\n/** Per-fetch deadline for the faucet probe POST. Bounded short so\n *  the outer retry loop hammers quickly. */\nconst PROBE_FETCH_TIMEOUT_MS = 3000;\n\n/** Probe recipient for the faucet funds-ready check. A literal\n *  zero-balance address so the real call doesn't pollute caller wallets;\n *  any well-formed address works. */\nconst FAUCET_PROBE_RECIPIENT = '0x0000000000000000000000000000000000000000000000000000000000000001';\n\n/**\n * Build the funds-transferable gate against a real HTTP faucet.\n * Memoised — first successful resolution sticks for the scope; the\n * manual `invalidate` surface clears the memo so long-running\n * supervisors can re-probe without a full restart.\n */\nexport const buildWaitForTransactionsReady = (\n\tfaucetUrl: string,\n\topts?: {\n\t\treadonly retrySpacing?: Duration.Duration;\n\t\treadonly timeout?: Duration.Duration;\n\t},\n): Effect.Effect<WaitForTransactionsReady, never, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tconst retrySpacing = opts?.retrySpacing ?? FUNDS_READY_RETRY_SPACING;\n\t\tconst timeout = opts?.timeout ?? FUNDS_READY_TIMEOUT;\n\t\t// SynchronizedRef serialises the get-or-init transition so two\n\t\t// concurrent callers can't both observe `null` and both build\n\t\t// their own `Effect.cached` instance (CAS-style guard against\n\t\t// the build-once race).\n\t\tconst ref = yield* SynchronizedRef.make<Effect.Effect<void, SuiPluginError> | null>(null);\n\n\t\tconst makeProbe = (): Effect.Effect<void, SuiPluginError> =>\n\t\t\twaitForHttpEndpoint({\n\t\t\t\tendpoint: `${faucetUrl}/v2/gas`,\n\t\t\t\ttimeoutMs: Duration.toMillis(timeout),\n\t\t\t\tintervalMs: Duration.toMillis(retrySpacing),\n\t\t\t\trequestTimeoutMs: PROBE_FETCH_TIMEOUT_MS,\n\t\t\t\trequestInit: {\n\t\t\t\t\tmethod: 'POST',\n\t\t\t\t\theaders: { 'content-type': 'application/json' },\n\t\t\t\t\tbody: JSON.stringify({\n\t\t\t\t\t\tFixedAmountRequest: { recipient: FAUCET_PROBE_RECIPIENT },\n\t\t\t\t\t}),\n\t\t\t\t},\n\t\t\t\tvalidate: async (response) => {\n\t\t\t\t\tif (!response.ok) throw new Error(`faucet HTTP ${response.status}`);\n\t\t\t\t\tconst body = (await response.json()) as { status?: unknown };\n\t\t\t\t\tconst status = body.status;\n\t\t\t\t\tif (typeof status === 'object' && status !== null && 'Failure' in status) {\n\t\t\t\t\t\tconst failure = (status as { Failure: unknown }).Failure;\n\t\t\t\t\t\tthrow new Error(`faucet body: Failure ${JSON.stringify(failure)}`);\n\t\t\t\t\t}\n\t\t\t\t\treturn true;\n\t\t\t\t},\n\t\t\t}).pipe(\n\t\t\t\tEffect.mapError(\n\t\t\t\t\t(cause): SuiPluginError =>\n\t\t\t\t\t\tsuiPluginError(\n\t\t\t\t\t\t\t'wait-funds-ready',\n\t\t\t\t\t\t\t`sui faucet at ${faucetUrl} did not become funds-transferable within ` +\n\t\t\t\t\t\t\t\t`${Duration.toMillis(timeout)}ms (still returning body-level Failure or 5xx): ` +\n\t\t\t\t\t\t\t\tformatUnknownError(cause),\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t);\n\n\t\t// `modifyEffect` atomically observes-then-updates inside a\n\t\t// serialised critical section: at most one fiber builds the\n\t\t// memoised probe, every other caller reads it back. This\n\t\t// closes the read-build-write race the plain Ref had.\n\t\tconst getOrInit: Effect.Effect<Effect.Effect<void, SuiPluginError>> =\n\t\t\tSynchronizedRef.modifyEffect(ref, (existing) =>\n\t\t\t\texisting !== null\n\t\t\t\t\t? Effect.succeed([existing, existing] as const)\n\t\t\t\t\t: Effect.cached(makeProbe()).pipe(Effect.map((cached) => [cached, cached] as const)),\n\t\t\t);\n\n\t\treturn {\n\t\t\twait: getOrInit.pipe(Effect.flatMap((eff) => eff)),\n\t\t\tinvalidate: SynchronizedRef.set(ref, null),\n\t\t};\n\t});\n\n/** Trivially-succeeding gate. Used by faucet-less networks (live\n *  mainnet, fork — fork funds via impersonation, not HTTP). */\nexport const noopWaitForTransactionsReady: WaitForTransactionsReady = {\n\twait: Effect.void,\n\tinvalidate: Effect.void,\n};\n\n// ---------------------------------------------------------------------------\n// SuiClient assembly — collapses the per-mode boilerplate\n// ---------------------------------------------------------------------------\n\n/** Build the `SuiSdkShim` over a constructed grpc client.\n *  Account/Coin/Wallet read through this seam, so we expose\n *  `executeTransaction` + `waitForTransaction` in addition to the\n *  read methods needed by the chain probe.\n *\n *  Every read/write goes through `sdkClient.core.*` — the gRPC\n *  TransportMethods surface from `@mysten/sui`. JSON-RPC is\n *  deprecated; do not reintroduce it. */\nexport const makeSdkShim = (sdkClient: SuiGrpcClient): SuiSdkShim => ({\n\tcore: {\n\t\tgetObject: (args) => sdkClient.core.getObject(args),\n\t\tgetTransaction: (args) => sdkClient.core.getTransaction(args),\n\t\tgetBalance: (args) => sdkClient.core.getBalance(args),\n\t\tlistCoins: (args) => sdkClient.core.listCoins(args),\n\t\t// Extended surfaces — used by the account plugin's sign + execute\n\t\t// closure. Routes through `client.core.*` (the cross-transport\n\t\t// canonical surface per STYLE_GUIDE §16). The SDK accepts a\n\t\t// mutable `signatures: string[]`; the shim's readonly signature\n\t\t// is widened with a copy at the boundary.\n\t\texecuteTransaction: (args) =>\n\t\t\tsdkClient.core.executeTransaction({\n\t\t\t\ttransaction: args.transaction,\n\t\t\t\tsignatures: [...args.signatures],\n\t\t\t\t...(args.include !== undefined ? { include: args.include } : {}),\n\t\t\t}),\n\t\twaitForTransaction: (args) =>\n\t\t\tsdkClient.core.waitForTransaction({\n\t\t\t\tdigest: args.digest,\n\t\t\t\t...(args.timeout !== undefined ? { timeout: args.timeout } : {}),\n\t\t\t}),\n\t},\n\t// Client passthrough — Package's publish-tx builder hands this to\n\t// `Transaction.build({ client })`; sibling plugins reach\n\t// `client.core.*` directly through this slot. Typed as\n\t// ClientWithCoreApi via SuiSdkShim.client.\n\tclient: sdkClient,\n});\n\n/** Assemble a `SuiClient` from the per-mode building blocks. The\n *  `fork: null` discriminator is invariant for non-fork modes; the\n *  fork builder constructs its own client with the admin surface.\n *\n *  `chainId` is a plain string value — every consumer downstream reads\n *  it directly and capability-key constructors (`chainProbe…`,\n *  `faucet…`) key on the string.\n *\n *  Returns an `Effect` on the `SuiConfigError` channel: the empty-chainId\n *  guard must surface as a typed, `catchTag`-able failure. Calling it\n *  un-yielded as a sync function (as it once was) turned a thrown\n *  `SuiConfigError` into a DEFECT inside the mode-boot `Effect.gen`\n *  bodies — a hidden crash the channel could never recover (mirrors the\n *  fix already applied to `auto-tick.ts`; STYLE_GUIDE §2). */\nexport const assembleSuiClient = (parts: {\n\treadonly sdkClient: SuiGrpcClient;\n\treadonly chainId: string;\n\treadonly rpcUrl: string;\n\treadonly faucetUrl?: string;\n\treadonly fundingFaucetUrl?: string;\n\treadonly graphqlUrl?: string;\n\treadonly waitForTransactionsReady: WaitForTransactionsReady;\n\t/** Image ref consumed by package's path (b) (`docker run --rm`)\n\t *  build path. `null` for modes that have no in-stack image\n\t *  (external + live). */\n\treadonly buildImage?: import('../../../contracts/container-runtime.ts').ImageRef | null;\n\t/** Container-reachable mirrors. Local mode resolves public URLs\n\t *  through the router but sibling containers still need direct\n\t *  host-gateway URLs during boot. */\n\treadonly hostGateway?: SuiClient['hostGateway'];\n}): Effect.Effect<\n\t{\n\t\treadonly client: SuiClient;\n\t\treadonly sdkShim: SuiSdkShim;\n\t\treadonly chainProbe: ChainProbe<SuiProbeKey>;\n\t},\n\tSuiConfigError\n> =>\n\tEffect.gen(function* () {\n\t\t// Defense-in-depth — `fetchChainId` should never resolve to an\n\t\t// empty string (RPC rejects that earlier), but a branded empty\n\t\t// string would silently fold into every downstream cache key. A\n\t\t// caller-pinned `chainId: ''` (e.g. `.live.custom({ chainId: '' })`)\n\t\t// reaches here, so fail on the typed channel rather than throw.\n\t\tif (typeof parts.chainId !== 'string' || parts.chainId.length === 0) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\tsuiConfigError({\n\t\t\t\t\tfield: 'chainId',\n\t\t\t\t\tmessage: 'sui.assembleSuiClient: chain id must be a non-empty string',\n\t\t\t\t\thint: 'check fetchChainId / network resolver returned a real chain id',\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\t\tconst chainId = parts.chainId;\n\t\tconst sdkShim = makeSdkShim(parts.sdkClient);\n\t\tconst chainProbe = makeSuiChainProbe(sdkShim, chainId);\n\t\tconst client: SuiClient = {\n\t\t\tsdk: sdkShim,\n\t\t\trpcUrl: parts.rpcUrl,\n\t\t\tfaucetUrl: parts.faucetUrl ?? null,\n\t\t\tfundingFaucetUrl: parts.fundingFaucetUrl ?? parts.faucetUrl ?? null,\n\t\t\tgraphqlUrl: parts.graphqlUrl ?? null,\n\t\t\thostGateway: parts.hostGateway ?? {\n\t\t\t\trpcUrl: toDockerHostGatewayUrl(parts.rpcUrl),\n\t\t\t\tfaucetUrl: parts.faucetUrl === undefined ? null : toDockerHostGatewayUrl(parts.faucetUrl),\n\t\t\t\tgraphqlUrl:\n\t\t\t\t\tparts.graphqlUrl === undefined ? null : toDockerHostGatewayUrl(parts.graphqlUrl),\n\t\t\t},\n\t\t\tchainId,\n\t\t\twaitForTransactionsReady: parts.waitForTransactionsReady,\n\t\t\tchainProbe,\n\t\t\tfork: null,\n\t\t\tbuildImage: parts.buildImage ?? null,\n\t\t};\n\t\treturn { client, sdkShim, chainProbe };\n\t});\n\n/** Shape the resolved network record the boot builders all hand\n *  back. The substrate-network mapping is uniform per mode. The raw\n *  chainId string flows through verbatim — consumers downstream (codegen,\n *  capabilities, walrus/seal deps) read it as a plain string value. */\nexport const makeResolvedNetwork = (parts: {\n\treadonly mode: ResolvedSuiNetwork['mode'];\n\treadonly chainId: string;\n\treadonly rpc: string;\n\treadonly faucet?: string;\n\treadonly graphql?: string;\n\treadonly source: ResolvedSuiNetwork['source'];\n\treadonly checkpoint?: string;\n\treadonly forkUpstream?: ResolvedSuiNetwork['forkUpstream'];\n}): ResolvedSuiNetwork => ({\n\tmode: parts.mode,\n\tchainId: parts.chainId,\n\trpc: parts.rpc,\n\tsource: parts.source,\n\t...(parts.faucet !== undefined ? { faucet: parts.faucet } : {}),\n\t...(parts.graphql !== undefined ? { graphql: parts.graphql } : {}),\n\t...(parts.checkpoint !== undefined ? { checkpoint: parts.checkpoint } : {}),\n\t...(parts.forkUpstream !== undefined ? { forkUpstream: parts.forkUpstream } : {}),\n});\n"],"mappings":";;;;;;;;;AA8CA,MAAa,2BAA2B,SAAS,QAAQ,EAAE;;;;AAK3D,MAAa,gBACZ,WACA,SAC2C;CAC3C,MAAM,UAAU,MAAM,WAAW;CACjC,MAAM,YAAY,SAAS,SAAS,OAAO;CAC3C,OAAO,OAAO,WAAW;EACxB,MAAM,WACL,UAAU,cACR,eAAe,CAAC,GAAG;GAAE,OAAO;GAAQ,SAAS;EAAU,CAAC,CAAC,CACzD,SAAS,MAAM,aAAa;GAC5B,IAAI,CAAC,SAAS,SACb,MAAM,IAAI,MAAM,4CAA4C;GAE7D,OAAO,SAAS;EACjB,CAAC;EACH,QAAQ,UACP,eACC,kBACA,8BAA8B,mBAAmB,KAAK,KACtD,KACD;CACF,CAAC,CAAC,CAAC,KACF,OAAO,cAAc;EACpB,UAAU;EACV,cACC,OAAO,KACN,eACC,kBACA,6CAA6C,UAAU,GACxD,CACD;CACF,CAAC,CACF;AACD;;;;AASA,MAAM,4BAA4B,SAAS,QAAQ,CAAC;AACpD,MAAM,sBAAsB,SAAS,QAAQ,EAAE;;;AAI/C,MAAM,yBAAyB;;;;AAK/B,MAAM,yBAAyB;;;;;;;AAQ/B,MAAa,iCACZ,WACA,SAKA,OAAO,IAAI,aAAa;CACvB,MAAM,eAAe,MAAM,gBAAgB;CAC3C,MAAM,UAAU,MAAM,WAAW;CAKjC,MAAM,MAAM,OAAO,gBAAgB,KAAiD,IAAI;CAExF,MAAM,kBACL,oBAAoB;EACnB,UAAU,GAAG,UAAU;EACvB,WAAW,SAAS,SAAS,OAAO;EACpC,YAAY,SAAS,SAAS,YAAY;EAC1C,kBAAkB;EAClB,aAAa;GACZ,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,MAAM,KAAK,UAAU,EACpB,oBAAoB,EAAE,WAAW,uBAAuB,EACzD,CAAC;EACF;EACA,UAAU,OAAO,aAAa;GAC7B,IAAI,CAAC,SAAS,IAAI,MAAM,IAAI,MAAM,eAAe,SAAS,QAAQ;GAElE,MAAM,UAAS,MADK,SAAS,KAAK,EAAA,CACd;GACpB,IAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,aAAa,QAAQ;IACzE,MAAM,UAAW,OAAgC;IACjD,MAAM,IAAI,MAAM,wBAAwB,KAAK,UAAU,OAAO,GAAG;GAClE;GACA,OAAO;EACR;CACD,CAAC,CAAC,CAAC,KACF,OAAO,UACL,UACA,eACC,oBACA,iBAAiB,UAAU,4CACvB,SAAS,SAAS,OAAO,EAAE,oDAC9B,mBAAmB,KAAK,GACzB,KACD,CACF,CACD;CAaD,OAAO;EACN,MAPA,gBAAgB,aAAa,MAAM,aAClC,aAAa,OACV,OAAO,QAAQ,CAAC,UAAU,QAAQ,CAAU,IAC5C,OAAO,OAAO,UAAU,CAAC,CAAC,CAAC,KAAK,OAAO,KAAK,WAAW,CAAC,QAAQ,MAAM,CAAU,CAAC,CAIvE,CAAC,CAAC,KAAK,OAAO,SAAS,QAAQ,GAAG,CAAC;EACjD,YAAY,gBAAgB,IAAI,KAAK,IAAI;CAC1C;AACD,CAAC;;;AAIF,MAAa,+BAAyD;CACrE,MAAM,OAAO;CACb,YAAY,OAAO;AACpB;;;;;;;;;AAcA,MAAa,eAAe,eAA0C;CACrE,MAAM;EACL,YAAY,SAAS,UAAU,KAAK,UAAU,IAAI;EAClD,iBAAiB,SAAS,UAAU,KAAK,eAAe,IAAI;EAC5D,aAAa,SAAS,UAAU,KAAK,WAAW,IAAI;EACpD,YAAY,SAAS,UAAU,KAAK,UAAU,IAAI;EAMlD,qBAAqB,SACpB,UAAU,KAAK,mBAAmB;GACjC,aAAa,KAAK;GAClB,YAAY,CAAC,GAAG,KAAK,UAAU;GAC/B,GAAI,KAAK,YAAY,KAAA,IAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;EAC/D,CAAC;EACF,qBAAqB,SACpB,UAAU,KAAK,mBAAmB;GACjC,QAAQ,KAAK;GACb,GAAI,KAAK,YAAY,KAAA,IAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;EAC/D,CAAC;CACH;CAKA,QAAQ;AACT;;;;;;;;;;;;;;;AAgBA,MAAa,qBAAqB,UAwBjC,OAAO,IAAI,aAAa;CAMvB,IAAI,OAAO,MAAM,YAAY,YAAY,MAAM,QAAQ,WAAW,GACjE,OAAO,OAAO,OAAO,KACpB,eAAe;EACd,OAAO;EACP,SAAS;EACT,MAAM;CACP,CAAC,CACF;CAED,MAAM,UAAU,MAAM;CACtB,MAAM,UAAU,YAAY,MAAM,SAAS;CAC3C,MAAM,aAAa,kBAAkB,SAAS,OAAO;CAmBrD,OAAO;EAAE,QAAA;GAjBR,KAAK;GACL,QAAQ,MAAM;GACd,WAAW,MAAM,aAAa;GAC9B,kBAAkB,MAAM,oBAAoB,MAAM,aAAa;GAC/D,YAAY,MAAM,cAAc;GAChC,aAAa,MAAM,eAAe;IACjC,QAAQ,uBAAuB,MAAM,MAAM;IAC3C,WAAW,MAAM,cAAc,KAAA,IAAY,OAAO,uBAAuB,MAAM,SAAS;IACxF,YACC,MAAM,eAAe,KAAA,IAAY,OAAO,uBAAuB,MAAM,UAAU;GACjF;GACA;GACA,0BAA0B,MAAM;GAChC;GACA,MAAM;GACN,YAAY,MAAM,cAAc;EAEnB;EAAG;EAAS;CAAW;AACtC,CAAC;;;;;AAMF,MAAa,uBAAuB,WAST;CAC1B,MAAM,MAAM;CACZ,SAAS,MAAM;CACf,KAAK,MAAM;CACX,QAAQ,MAAM;CACd,GAAI,MAAM,WAAW,KAAA,IAAY,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;CAC7D,GAAI,MAAM,YAAY,KAAA,IAAY,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;CAChE,GAAI,MAAM,eAAe,KAAA,IAAY,EAAE,YAAY,MAAM,WAAW,IAAI,CAAC;CACzE,GAAI,MAAM,iBAAiB,KAAA,IAAY,EAAE,cAAc,MAAM,aAAa,IAAI,CAAC;AAChF"}

package/dist/plugins/sui/mode/shared.d.mts

@@ -1,4 +1,3 @@
-import { ChainId } from "../../../substrate/brand.mjs";
 import { ImageRef } from "../../../contracts/container-runtime.mjs";
 import { ChainProbe } from "../../../contracts/chain-probe.mjs";
 import { SuiProbeKey, SuiSdkShim } from "../chain-probe.mjs";
@@ -70,12 +69,12 @@ interface SuiClient {
     readonly faucetUrl: string | null;
     readonly graphqlUrl: string | null;
   };
-  /** Chain identity — downstream cache primitives fold this into
-   *  their state-store keys so on-chain artifacts re-derive when
-   *  the chain is wiped. Branded so consumers can hand it directly
-   *  to `chainProbeCapabilityKey(chain)` / `faucetCapabilityKey(chain)`
-   *  without a cast. */
-  readonly chain: ChainId;
+  /** Genesis-digest chain identifier — the substrate's content-addressed
+   *  cache folds this into its keys (`(namespace, chainId, contentHash)`)
+   *  so on-chain artifacts re-derive when the chain is wiped. A plain
+   *  string value handed directly to `chainProbeCapabilityKey(chainId)`
+   *  / `faucetCapabilityKey(chainId)`. NOT the network name. */
+  readonly chainId: string;
   /** Mode-aware funds-transferable gate; trivially-succeeding on
    *  faucet-less networks. */
   readonly waitForTransactionsReady: WaitForTransactionsReady;

package/dist/plugins/sui/mode/shared.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"shared.mjs","names":[],"sources":["../../../../src/plugins/sui/mode/shared.ts"],"sourcesContent":["// Shared shapes across mode builders.\n//\n// `SuiClient` is the resolved-value the plugin's `provides` tag\n// publishes — every consumer (Account, Coin, Wallet, Faucet,\n// Package, Codegen, Walrus/Seal/Deepbook fork variants) reads\n// THIS shape.\n//\n// Why one shape: distilled-doc finding — Sui's factory + builder\n// file is ~2000 LOC because the four per-network builders share\n// boilerplate (publish endpoints + fetch chain id + publish state)\n// but their bodies diverge in mode-specific ways. The redesign\n// bakes the seam in: the resolved value is uniform, the boot path\n// is mode-specific, and the admin surfaces narrow at the type\n// level (fork has `Sui.fork.advanceClock`; live does not).\n\nimport { Effect } from 'effect';\n\nimport type { SuiPluginError } from '../errors.ts';\nimport type { SuiSdkShim } from '../chain-probe.ts';\nimport type { ChainProbe } from '../../../contracts/chain-probe.ts';\nimport type { ImageRef } from '../../../contracts/container-runtime.ts';\nimport type { SuiProbeKey } from '../chain-probe.ts';\nimport type { ChainId } from '../../../substrate/brand.ts';\n\n/** Funds-ready strategy contributed by Sui. Mode-aware:\n *\n *   - local container — first call POSTs a real funding tx against\n *     the faucet, retrying on body-level {Failure} during the\n *     post-RPC / pre-fund window. Memoised after first success.\n *   - external w/ faucet — same as local container.\n *   - live testnet — same, but no retry needed (the public faucet\n *     is rate-limited differently).\n *   - live mainnet / faucet-less — trivially-succeeding no-op.\n *     (Architecture: \"no-faucet network has a trivially-succeeding\n *     funds-ready gate\" is a first-class property of the mode.)\n *   - fork — trivially-succeeding (impersonation funds, not\n *     faucet).\n *\n *  Distilled-doc opportunity: `Effect.cached` caches the first-call\n *  failure for the whole scope; add a manual-invalidation surface\n *  so a fork restart can re-probe. The shape below leaves room for\n *  that knob. */\nexport interface WaitForTransactionsReady {\n\treadonly wait: Effect.Effect<void, SuiPluginError>;\n\t/** Manual invalidation — clears the memoised result. The default\n\t *  built-in invalidates on plugin restart; this surface lets\n\t *  long-running supervisors invalidate without a full restart. */\n\treadonly invalidate: Effect.Effect<void>;\n}\n\n/** Fork admin surface — mode-narrowed. Only the fork-mode factory's\n *  resolved value carries this; local/local-rpc/live values have a\n *  type-level `null`. */\nexport interface ForkAdminSurface {\n\treadonly status: Effect.Effect<\n\t\t{ readonly checkpoint: string; readonly clock: number },\n\t\tSuiPluginError\n\t>;\n\treadonly advanceClock: (intervalMs: number) => Effect.Effect<void, SuiPluginError>;\n\treadonly advanceCheckpoint: Effect.Effect<void, SuiPluginError>;\n\treadonly impersonate: (\n\t\tsender: string,\n\t\ttx: unknown,\n\t) => Effect.Effect<\n\t\t{ readonly digest: string; readonly success: boolean; readonly raw: unknown },\n\t\tSuiPluginError\n\t>;\n}\n\n/** The resolved value Sui publishes via its resource id. */\nexport interface SuiClient {\n\t/** The SDK shim. Fork mode wraps this with the property-access\n\t *  blocklist (`fork-orchestration.wrapWithForkGuard`). */\n\treadonly sdk: SuiSdkShim;\n\t/** Host-reachable RPC URL for this resolved network. Local mode\n\t *  surfaces the router-fronted URL; direct boot/probe ports are\n\t *  available through `hostGateway` for sibling containers. */\n\treadonly rpcUrl: string;\n\t/** Host-reachable faucet base URL when this network has a faucet. */\n\treadonly faucetUrl: string | null;\n\t/** Faucet URL used by account funding strategies. Local mode keeps\n\t *  this on the direct validator port used by the funds-ready gate. */\n\treadonly fundingFaucetUrl: string | null;\n\t/** Host-reachable GraphQL URL when the mode exposes one. */\n\treadonly graphqlUrl: string | null;\n\t/** Container-reachable mirrors of the host URLs. Loopback hosts are\n\t *  rewritten to `host.docker.internal`; public URLs pass through. */\n\treadonly hostGateway: {\n\t\treadonly rpcUrl: string;\n\t\treadonly faucetUrl: string | null;\n\t\treadonly graphqlUrl: string | null;\n\t};\n\t/** Chain identity — downstream cache primitives fold this into\n\t *  their state-store keys so on-chain artifacts re-derive when\n\t *  the chain is wiped. Branded so consumers can hand it directly\n\t *  to `chainProbeCapabilityKey(chain)` / `faucetCapabilityKey(chain)`\n\t *  without a cast. */\n\treadonly chain: ChainId;\n\t/** Mode-aware funds-transferable gate; trivially-succeeding on\n\t *  faucet-less networks. */\n\treadonly waitForTransactionsReady: WaitForTransactionsReady;\n\t/** Schema-validated read surface. Folded into every consumer's\n\t *  context via `chain-probe:<chainId>` strategy lookup. */\n\treadonly chainProbe: ChainProbe<SuiProbeKey>;\n\t/** Fork-mode-only admin sub-surface. `null` for non-fork\n\t *  modes; the mode-narrowed factory namespace narrows this at\n\t *  the type level so consumers don't have to nullcheck. */\n\treadonly fork: ForkAdminSurface | null;\n\t/** Container image ref the Sui plugin built/pulled for its\n\t *  validator. Surfaced so cross-service consumers (Package's\n\t *  Move build, codegen's `summary` invocation) can spawn a\n\t *  one-shot container running the SAME sui binary without\n\t *  re-resolving the image. `null` for modes that have no\n\t *  in-stack container (external + live). */\n\treadonly buildImage: ImageRef | null;\n}\n\nexport const toDockerHostGatewayUrl = (url: string): string => {\n\tconst parsed = new URL(url);\n\tif (\n\t\tparsed.hostname === '127.0.0.1' ||\n\t\tparsed.hostname === 'localhost' ||\n\t\tparsed.hostname === '0.0.0.0' ||\n\t\tparsed.hostname === '::1' ||\n\t\tparsed.hostname === '[::1]'\n\t) {\n\t\tparsed.hostname = 'host.docker.internal';\n\t}\n\tconst rendered = parsed.toString();\n\treturn parsed.pathname === '/' && parsed.search === '' && parsed.hash === ''\n\t\t? rendered.slice(0, -1)\n\t\t: rendered;\n};\n"],"mappings":";;AAqHA,MAAa,0BAA0B,QAAwB;CAC9D,MAAM,SAAS,IAAI,IAAI,IAAI;AAC3B,KACC,OAAO,aAAa,eACpB,OAAO,aAAa,eACpB,OAAO,aAAa,aACpB,OAAO,aAAa,SACpB,OAAO,aAAa,QAEpB,QAAO,WAAW;CAEnB,MAAM,WAAW,OAAO,UAAU;AAClC,QAAO,OAAO,aAAa,OAAO,OAAO,WAAW,MAAM,OAAO,SAAS,KACvE,SAAS,MAAM,GAAG,GAAG,GACrB"}
+{"version":3,"file":"shared.mjs","names":[],"sources":["../../../../src/plugins/sui/mode/shared.ts"],"sourcesContent":["// Shared shapes across mode builders.\n//\n// `SuiClient` is the resolved-value the plugin's `provides` tag\n// publishes — every consumer (Account, Coin, Wallet, Faucet,\n// Package, Codegen, Walrus/Seal/Deepbook fork variants) reads\n// THIS shape.\n//\n// Why one shape: distilled-doc finding — Sui's factory + builder\n// file is ~2000 LOC because the four per-network builders share\n// boilerplate (publish endpoints + fetch chain id + publish state)\n// but their bodies diverge in mode-specific ways. The redesign\n// bakes the seam in: the resolved value is uniform, the boot path\n// is mode-specific, and the admin surfaces narrow at the type\n// level (fork has `Sui.fork.advanceClock`; live does not).\n\nimport { Effect } from 'effect';\n\nimport type { SuiPluginError } from '../errors.ts';\nimport type { SuiSdkShim } from '../chain-probe.ts';\nimport type { ChainProbe } from '../../../contracts/chain-probe.ts';\nimport type { ImageRef } from '../../../contracts/container-runtime.ts';\nimport type { SuiProbeKey } from '../chain-probe.ts';\n\n/** Funds-ready strategy contributed by Sui. Mode-aware:\n *\n *   - local container — first call POSTs a real funding tx against\n *     the faucet, retrying on body-level {Failure} during the\n *     post-RPC / pre-fund window. Memoised after first success.\n *   - external w/ faucet — same as local container.\n *   - live testnet — same, but no retry needed (the public faucet\n *     is rate-limited differently).\n *   - live mainnet / faucet-less — trivially-succeeding no-op.\n *     (Architecture: \"no-faucet network has a trivially-succeeding\n *     funds-ready gate\" is a first-class property of the mode.)\n *   - fork — trivially-succeeding (impersonation funds, not\n *     faucet).\n *\n *  Distilled-doc opportunity: `Effect.cached` caches the first-call\n *  failure for the whole scope; add a manual-invalidation surface\n *  so a fork restart can re-probe. The shape below leaves room for\n *  that knob. */\nexport interface WaitForTransactionsReady {\n\treadonly wait: Effect.Effect<void, SuiPluginError>;\n\t/** Manual invalidation — clears the memoised result. The default\n\t *  built-in invalidates on plugin restart; this surface lets\n\t *  long-running supervisors invalidate without a full restart. */\n\treadonly invalidate: Effect.Effect<void>;\n}\n\n/** Fork admin surface — mode-narrowed. Only the fork-mode factory's\n *  resolved value carries this; local/local-rpc/live values have a\n *  type-level `null`. */\nexport interface ForkAdminSurface {\n\treadonly status: Effect.Effect<\n\t\t{ readonly checkpoint: string; readonly clock: number },\n\t\tSuiPluginError\n\t>;\n\treadonly advanceClock: (intervalMs: number) => Effect.Effect<void, SuiPluginError>;\n\treadonly advanceCheckpoint: Effect.Effect<void, SuiPluginError>;\n\treadonly impersonate: (\n\t\tsender: string,\n\t\ttx: unknown,\n\t) => Effect.Effect<\n\t\t{ readonly digest: string; readonly success: boolean; readonly raw: unknown },\n\t\tSuiPluginError\n\t>;\n}\n\n/** The resolved value Sui publishes via its resource id. */\nexport interface SuiClient {\n\t/** The SDK shim. Fork mode wraps this with the property-access\n\t *  blocklist (`fork-orchestration.wrapWithForkGuard`). */\n\treadonly sdk: SuiSdkShim;\n\t/** Host-reachable RPC URL for this resolved network. Local mode\n\t *  surfaces the router-fronted URL; direct boot/probe ports are\n\t *  available through `hostGateway` for sibling containers. */\n\treadonly rpcUrl: string;\n\t/** Host-reachable faucet base URL when this network has a faucet. */\n\treadonly faucetUrl: string | null;\n\t/** Faucet URL used by account funding strategies. Local mode keeps\n\t *  this on the direct validator port used by the funds-ready gate. */\n\treadonly fundingFaucetUrl: string | null;\n\t/** Host-reachable GraphQL URL when the mode exposes one. */\n\treadonly graphqlUrl: string | null;\n\t/** Container-reachable mirrors of the host URLs. Loopback hosts are\n\t *  rewritten to `host.docker.internal`; public URLs pass through. */\n\treadonly hostGateway: {\n\t\treadonly rpcUrl: string;\n\t\treadonly faucetUrl: string | null;\n\t\treadonly graphqlUrl: string | null;\n\t};\n\t/** Genesis-digest chain identifier — the substrate's content-addressed\n\t *  cache folds this into its keys (`(namespace, chainId, contentHash)`)\n\t *  so on-chain artifacts re-derive when the chain is wiped. A plain\n\t *  string value handed directly to `chainProbeCapabilityKey(chainId)`\n\t *  / `faucetCapabilityKey(chainId)`. NOT the network name. */\n\treadonly chainId: string;\n\t/** Mode-aware funds-transferable gate; trivially-succeeding on\n\t *  faucet-less networks. */\n\treadonly waitForTransactionsReady: WaitForTransactionsReady;\n\t/** Schema-validated read surface. Folded into every consumer's\n\t *  context via `chain-probe:<chainId>` strategy lookup. */\n\treadonly chainProbe: ChainProbe<SuiProbeKey>;\n\t/** Fork-mode-only admin sub-surface. `null` for non-fork\n\t *  modes; the mode-narrowed factory namespace narrows this at\n\t *  the type level so consumers don't have to nullcheck. */\n\treadonly fork: ForkAdminSurface | null;\n\t/** Container image ref the Sui plugin built/pulled for its\n\t *  validator. Surfaced so cross-service consumers (Package's\n\t *  Move build, codegen's `summary` invocation) can spawn a\n\t *  one-shot container running the SAME sui binary without\n\t *  re-resolving the image. `null` for modes that have no\n\t *  in-stack container (external + live). */\n\treadonly buildImage: ImageRef | null;\n}\n\nexport const toDockerHostGatewayUrl = (url: string): string => {\n\tconst parsed = new URL(url);\n\tif (\n\t\tparsed.hostname === '127.0.0.1' ||\n\t\tparsed.hostname === 'localhost' ||\n\t\tparsed.hostname === '0.0.0.0' ||\n\t\tparsed.hostname === '::1' ||\n\t\tparsed.hostname === '[::1]'\n\t) {\n\t\tparsed.hostname = 'host.docker.internal';\n\t}\n\tconst rendered = parsed.toString();\n\treturn parsed.pathname === '/' && parsed.search === '' && parsed.hash === ''\n\t\t? rendered.slice(0, -1)\n\t\t: rendered;\n};\n"],"mappings":";;AAoHA,MAAa,0BAA0B,QAAwB;CAC9D,MAAM,SAAS,IAAI,IAAI,GAAG;CAC1B,IACC,OAAO,aAAa,eACpB,OAAO,aAAa,eACpB,OAAO,aAAa,aACpB,OAAO,aAAa,SACpB,OAAO,aAAa,SAEpB,OAAO,WAAW;CAEnB,MAAM,WAAW,OAAO,SAAS;CACjC,OAAO,OAAO,aAAa,OAAO,OAAO,WAAW,MAAM,OAAO,SAAS,KACvE,SAAS,MAAM,GAAG,EAAE,IACpB;AACJ"}

package/dist/plugins/sui/mode/spec.d.mts

@@ -12,8 +12,13 @@ interface SuiCommonOptions {
   /** Ready-probe timeout. Per-mode defaults are mode-specific. */
   readonly readyTimeout?: Duration.Duration;
 }
-/** Local container mode — in-stack validator + faucet + GraphQL +
- *  postgres indexer. */
+/** Local container mode — in-stack validator + faucet + GraphQL. GraphQL,
+ *  its indexer, and a Postgres are ON BY DEFAULT: the sui plugin OWNS a
+ *  postgres sidecar container (labelled under sui) and auto-creates its
+ *  `sui_indexer` DB, so a bare `sui()` boots the full GraphQL surface with
+ *  no cross-plugin wiring. Two escape hatches: `indexer: false` opts out
+ *  (RPC + faucet only, no sidecar), and `indexerDb` points GraphQL at a
+ *  Postgres the caller already runs (no sidecar). */
 interface SuiLocalOptions extends SuiCommonOptions {
   readonly mode: 'local';
   /** Image override — `{pull}` skips the build; `{build}` uses
@@ -26,8 +31,20 @@ interface SuiLocalOptions extends SuiCommonOptions {
       readonly dockerfile?: string;
     };
   };
-  /** Sui binary version (default in mode/local.ts). */
-  readonly version?: string;
+  /** GraphQL/indexer/Postgres on-off. Default `true` — sui owns a
+   *  postgres sidecar and runs `--with-graphql` against it. `false` ⇒
+   *  RPC + faucet only, no sidecar, no GraphQL. */
+  readonly indexer?: boolean;
+  /** BYO indexer Postgres (value-based escape hatch). When set, GraphQL
+   *  reads from the caller's own DB and NO sidecar is provisioned. `url`
+   *  is a PostgreSQL DSN reachable from the validator on `network`;
+   *  `database` (default `'sui_indexer'`) is appended to the DSN if it
+   *  carries no path segment. */
+  readonly indexerDb?: {
+    readonly url: string;
+    readonly network: string;
+    readonly database?: string;
+  };
   /** Optional direct host port mapping keyed by container port. When
    *  supplied, the mapping is exact: Sui does not reassign missing
    *  or busy host ports through the PortBroker. Omit this field to
@@ -45,7 +62,7 @@ interface SuiLocalRpcOptions extends SuiCommonOptions {
   readonly graphqlUrl?: string;
   /** Optional chain id pin for caller-owned endpoints. Omit to
    *  probe the RPC endpoint. */
-  readonly chain?: string;
+  readonly chainId?: string;
 }
 /** Live testnet / mainnet / custom-RPC mode. */
 interface SuiLiveOptions extends SuiCommonOptions {
@@ -58,7 +75,7 @@ interface SuiLiveOptions extends SuiCommonOptions {
   readonly graphqlUrl?: string;
   /** Optional chain id pin for custom/caller-owned live endpoints.
    *  Omit to probe the RPC endpoint. */
-  readonly chain?: string;
+  readonly chainId?: string;
 }
 /** Fork-mode faucet config. Funds test accounts by impersonating a
  *  large-reserve "whale" address on the forked upstream and transferring