@mysten-incubation/devstack 0.1.1 → 0.2.0

package/dist/contracts/container-runtime.d.mts

@@ -76,6 +76,9 @@ interface EnsureContainerSpec {
    *  with RocksDB/WAL-backed data should request enough time to flush
    *  cleanly; the runtime default is 10 seconds. */
   readonly stopGraceSeconds?: number;
+  /** Optional signal for the scope finalizer's `docker stop` call.
+   *  Omit to use Docker's image/default stop signal. */
+  readonly stopSignal?: string;
   /** How published host ports participate in existing-container
    *  reconciliation. Default `exact` treats a binding mismatch as
    *  config drift. `adopt-existing` lets a same-name, image-matching
@@ -154,6 +157,17 @@ interface ContainerHandle {
   readonly status: 'running' | 'exited' | 'paused' | 'created';
   readonly ips: ReadonlyArray<string>;
   readonly ports?: ReadonlyArray<ContainerPortPublish>;
+  /** The container's last recorded exit code, surfaced from
+   *  `InspectFacts.exitCode` whenever Docker supplied a `State` (so a
+   *  running container or one that exited cleanly reports `0`; only a
+   *  container whose inspect omitted `State` entirely — an indeterminate
+   *  lifecycle — leaves this absent). Lets callers distinguish a clean exit
+   *  from a SIGKILL/OOM `137` — the only code the runtime's `decideRunAction`
+   *  recreates an `on-failure` container on. Sui's indexer-db sidecar keys
+   *  its `configHash` on `present + 137` (a validator crash-recreate ⇒
+   *  re-genesis incoming) so it resets rather than resuming stale rows
+   *  against a brand-new chain. */
+  readonly lastExitCode?: number;
 }
 /** Captured stdout/stderr/exit code from a one-shot `exec` invocation
  *  inside a running container. */
@@ -193,10 +207,8 @@ interface ContainerRuntime {
   readonly ensureContainer: (spec: EnsureContainerSpec) => Effect.Effect<ContainerHandle, ContainerRuntimeError, Scope.Scope>;
   /** Run a one-shot command inside a running container and capture
    *  its output. The runtime does NOT promote a non-zero exit to
-   *  failure — the caller is the policy holder (the postgres plugin
-   *  treats non-zero from `pg_isready` as "retry", but non-zero from
-   *  `createdb` as a typed plugin error). Only daemon-level failures
-   *  (no such container, daemon unreachable) surface as
+   *  failure — the caller is the policy holder. Only daemon-level
+   *  failures (no such container, daemon unreachable) surface as
    *  `ContainerRuntimeError`. */
   readonly exec: (handle: ContainerHandle, argv: ReadonlyArray<string>, opts?: ExecOptions) => Effect.Effect<ExecResult, ContainerRuntimeError>;
   /** Run a one-shot `docker run --rm` container and capture stdout +
@@ -206,19 +218,10 @@ interface ContainerRuntime {
    *  scope close to catch containers that survived a foreground kill. */
   readonly runOneShot: (spec: OneShotSpec) => Effect.Effect<ExecResult, ContainerRuntimeError, Scope.Scope>;
   readonly inspectByLabels: (labels: ContainerLabelTuple) => Effect.Effect<ReadonlyArray<ContainerHandle>, ContainerRuntimeError>;
-  readonly followLogs: (handle: ContainerHandle) => Stream.Stream<string, ContainerRuntimeError>;
-  /** Pause a running container. Snapshot capture uses this to establish
-   *  one stack-wide quiescence window before any artifact is written. */
-  readonly pause: (handle: ContainerHandle) => Effect.Effect<void, ContainerRuntimeError>;
   /** Commit a container's writable layer to a snapshot image. Running
    *  containers are paused first; paused, exited, and created
    *  containers are already quiescent and are committed as-is. */
   readonly pauseAndCommit: (handle: ContainerHandle) => Effect.Effect<TaggedImageRef, ContainerRuntimeError>;
-  /** Stream an image's bytes as if produced by `docker save <ref>`.
-   *  Used by the snapshot orchestrator to persist committed images to
-   *  tar files; consumers compose with a file-write sink so large
-   *  images don't materialise in memory. */
-  readonly saveImage: (ref: ImageRef, opts?: SaveImageOptions) => Stream.Stream<Uint8Array, ContainerRuntimeError>;
   /** Stream a deduplicated `docker save <ref...>` bundle. Snapshot
    *  capture uses this for multi-container stacks so shared base layers
    *  are written once per snapshot instead of once per container. */
@@ -237,11 +240,14 @@ interface ContainerRuntime {
    *  ownership of cleanup via `removeAfterSave`. Missing refs are
    *  treated as already-cleaned. */
   readonly removeImage: (ref: ImageRef) => Effect.Effect<void, ContainerRuntimeError>;
-  readonly unpause: (handle: ContainerHandle) => Effect.Effect<void, ContainerRuntimeError>;
+  /** Resolve a ref (tag or digest) to the image id/digest it currently
+   *  points at, or `null` when the ref does not exist on-host. Snapshot
+   *  capture-resume uses this to identify the layer a name resolved to
+   *  BEFORE a retag (the soon-to-be-superseded layer) and the layer it
+   *  resolves to AFTER (the freshly-committed one), so the orphaned
+   *  previous layer can be GC'd without touching the live tag. */
+  readonly inspectImageDigest: (ref: string) => Effect.Effect<string | null, ContainerRuntimeError>;
   readonly stop: (handle: ContainerHandle, grace: Duration.Duration) => Effect.Effect<void, ContainerRuntimeError>;
-  /** Boot-time orphan cleanup. This is container-only and skips names
-   *  still present in the cross-process claim ledger. */
-  readonly sweepOrphans: (labelMatch: Partial<ContainerLabelTuple>) => Effect.Effect<number, ContainerRuntimeError>;
   /** Force-remove managed containers matching the partial label tuple,
    *  regardless of claim-ledger entries. Wipe uses this for explicit
    *  teardown; restore uses it before the next `ensureContainer`

package/dist/contracts/plugin-expander.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-expander.mjs","names":[],"sources":["../../src/contracts/plugin-expander.ts"],"sourcesContent":["// PluginExpander — compose-time plugin-rewrite contract.\n//\n// Some plugins cannot know their final `dependsOn` tuple at their\n// factory's call site because the relevant members are introduced\n// LATER (positionally, to `defineDevstack(...)`). The wallet's\n// `accounts: 'all'` mode is the canonical case: the wallet's hard\n// ordering edge against every account member is required, but the\n// wallet factory has no view of which accounts the user passes in.\n//\n// The fix is a compose-time rewrite: the plugin returns a PLACEHOLDER\n// member carrying an expander hook at a substrate-owned well-known\n// symbol; the composer detects the symbol, calls the expander with the\n// full member tuple, and substitutes the result. This module owns\n// that symbol + expander shape so the composer does not import any\n// plugin module to perform the rewrite.\n//\n// Architecture (Plugin-author surface = user-surface): any plugin\n// — built-in or custom — that needs this rewrite attaches the same\n// substrate-owned symbol with the same expander shape. The composer\n// dispatches uniformly; no per-plugin special-case lives in\n// `api/define-devstack.ts`.\n//\n// Note: this is a COMPOSE-TIME hook, distinct from the runtime\n// `CapabilitySinks` harvest path. Capability sinks dispatch\n// contributions AFTER plugin acquire; expanders run BEFORE the\n// supervisor sees the member list at all. Both surfaces are\n// substrate-owned but they fire at different times.\n\nimport type { AnyPlugin } from '../substrate/plugin.ts';\n\n/** Globally registered symbol the composer probes for on every\n *  member. `Symbol.for(...)` avoids leaking a `unique symbol` identity\n *  into inferred Stack types (TS2742). */\nexport const PLUGIN_EXPANDER: symbol = Symbol.for('@devstack/contracts/plugin-expander');\n\n/** Compose-time expander closure. Receives the FULL composed-member\n *  tuple (post-dependency-closure expansion) and returns the member\n *  the composer should substitute for the placeholder. The substrate\n *  treats the closure opaquely — plugin authors interpret `members`\n *  through whatever filter matches their domain (the wallet picks\n *  members whose id starts with `account/`; a hypothetical role-based\n *  expander would pick members by `role` or by capability). */\nexport type PluginExpander = (members: ReadonlyArray<AnyPlugin>) => AnyPlugin;\n\n/** Read the expander hook from a member. Returns `undefined` when no\n *  hook is attached — the composer leaves the member alone in that\n *  case. */\nexport const readPluginExpander = (member: AnyPlugin): PluginExpander | undefined => {\n\tconst slot = (member as unknown as Record<symbol, unknown>)[PLUGIN_EXPANDER];\n\treturn typeof slot === 'function' ? (slot as PluginExpander) : undefined;\n};\n\n/** Attach an expander hook to a placeholder member. The symbol is\n *  written as a value-level property only — plugin factories MUST NOT\n *  surface the hook on the member's TS return type or the symbol\n *  identity leaks into inferred Stack types. */\nexport const attachPluginExpander = (placeholder: AnyPlugin, expander: PluginExpander): void => {\n\t(placeholder as unknown as Record<symbol, unknown>)[PLUGIN_EXPANDER] = expander;\n};\n\n/**\n * Run every registered expander once. Iterates the member tuple, finds\n * placeholders carrying a `PluginExpander`, and substitutes each with\n * the expander's resolved member. Members without a hook pass through\n * unchanged.\n *\n * Returns the input array verbatim (zero allocation) when no member\n * carries an expander — the explicit-tuple path remains the common case.\n *\n * **Single-pass contract.** This pass is single-shot: it scans the input\n * tuple once and substitutes in place. If an expander returns a member\n * that ITSELF carries `PLUGIN_EXPANDER`, that nested expander does NOT\n * fire — `runPluginExpanders` does not recurse. The composer is\n * responsible for re-invoking both `runPluginExpanders` and\n * `expandPluginDependencies` until fixed-point (typically: run expanders,\n * then re-run dependency closure so the now-resolved edges fold into the\n * member tuple; loop until neither pass produces a change). Keeping this\n * module ignorant of fixpoint policy means the substrate decides how\n * many iterations are allowed and what counts as convergence.\n */\nexport const runPluginExpanders = (members: ReadonlyArray<AnyPlugin>): ReadonlyArray<AnyPlugin> => {\n\tlet hasAny = false;\n\tfor (const m of members) {\n\t\tif (readPluginExpander(m) !== undefined) {\n\t\t\thasAny = true;\n\t\t\tbreak;\n\t\t}\n\t}\n\tif (!hasAny) return members;\n\n\treturn members.map((m) => {\n\t\tconst expand = readPluginExpander(m);\n\t\treturn expand === undefined ? m : expand(members);\n\t});\n};\n\n/** True when the placeholder + replacement form an expansion pair —\n *  same id, at least one side carries the expander hook. Used by the\n *  composer's duplicate-provider check to allow the \"placeholder + its\n *  expanded form\" pair (both share an id by construction). */\nexport const isPluginExpanderPair = (a: AnyPlugin, b: AnyPlugin): boolean =>\n\ta.id === b.id && (readPluginExpander(a) !== undefined || readPluginExpander(b) !== undefined);\n"],"mappings":";;;;AAiCA,MAAa,kBAA0B,OAAO,IAAI,sCAAsC;;;;AAcxF,MAAa,sBAAsB,WAAkD;CACpF,MAAM,OAAQ,OAA8C;AAC5D,QAAO,OAAO,SAAS,aAAc,OAA0B,KAAA;;;;;;AAOhE,MAAa,wBAAwB,aAAwB,aAAmC;AAC9F,aAAmD,mBAAmB;;;;;;;;;;;;;;;;;;;;;;AAuBxE,MAAa,sBAAsB,YAAgE;CAClG,IAAI,SAAS;AACb,MAAK,MAAM,KAAK,QACf,KAAI,mBAAmB,EAAE,KAAK,KAAA,GAAW;AACxC,WAAS;AACT;;AAGF,KAAI,CAAC,OAAQ,QAAO;AAEpB,QAAO,QAAQ,KAAK,MAAM;EACzB,MAAM,SAAS,mBAAmB,EAAE;AACpC,SAAO,WAAW,KAAA,IAAY,IAAI,OAAO,QAAQ;GAChD;;;;;;AAOH,MAAa,wBAAwB,GAAc,MAClD,EAAE,OAAO,EAAE,OAAO,mBAAmB,EAAE,KAAK,KAAA,KAAa,mBAAmB,EAAE,KAAK,KAAA"}
+{"version":3,"file":"plugin-expander.mjs","names":[],"sources":["../../src/contracts/plugin-expander.ts"],"sourcesContent":["// PluginExpander — compose-time plugin-rewrite contract.\n//\n// Some plugins cannot know their final `dependsOn` tuple at their\n// factory's call site because the relevant members are introduced\n// LATER (positionally, to `defineDevstack(...)`). The wallet's\n// `accounts: 'all'` mode is the canonical case: the wallet's hard\n// ordering edge against every account member is required, but the\n// wallet factory has no view of which accounts the user passes in.\n//\n// The fix is a compose-time rewrite: the plugin returns a PLACEHOLDER\n// member carrying an expander hook at a substrate-owned well-known\n// symbol; the composer detects the symbol, calls the expander with the\n// full member tuple, and substitutes the result. This module owns\n// that symbol + expander shape so the composer does not import any\n// plugin module to perform the rewrite.\n//\n// Architecture (Plugin-author surface = user-surface): any plugin\n// — built-in or custom — that needs this rewrite attaches the same\n// substrate-owned symbol with the same expander shape. The composer\n// dispatches uniformly; no per-plugin special-case lives in\n// `api/define-devstack.ts`.\n//\n// Note: this is a COMPOSE-TIME hook, distinct from the runtime\n// contribution-dispatch path (the ContributionDispatcher). Contribution\n// dispatch fires AFTER plugin acquire; expanders run BEFORE the\n// supervisor sees the member list at all. Both surfaces are\n// substrate-owned but they fire at different times.\n\nimport type { AnyPlugin } from '../substrate/plugin.ts';\n\n/** Globally registered symbol the composer probes for on every\n *  member. `Symbol.for(...)` avoids leaking a `unique symbol` identity\n *  into inferred Stack types (TS2742). */\nexport const PLUGIN_EXPANDER: symbol = Symbol.for('@devstack/contracts/plugin-expander');\n\n/** Compose-time expander closure. Receives the FULL composed-member\n *  tuple (post-dependency-closure expansion) and returns the member\n *  the composer should substitute for the placeholder. The substrate\n *  treats the closure opaquely — plugin authors interpret `members`\n *  through whatever filter matches their domain (the wallet picks\n *  members whose id starts with `account/`; a hypothetical role-based\n *  expander would pick members by `role` or by capability). */\nexport type PluginExpander = (members: ReadonlyArray<AnyPlugin>) => AnyPlugin;\n\n/** Read the expander hook from a member. Returns `undefined` when no\n *  hook is attached — the composer leaves the member alone in that\n *  case. */\nexport const readPluginExpander = (member: AnyPlugin): PluginExpander | undefined => {\n\tconst slot = (member as unknown as Record<symbol, unknown>)[PLUGIN_EXPANDER];\n\treturn typeof slot === 'function' ? (slot as PluginExpander) : undefined;\n};\n\n/** Attach an expander hook to a placeholder member. The symbol is\n *  written as a value-level property only — plugin factories MUST NOT\n *  surface the hook on the member's TS return type or the symbol\n *  identity leaks into inferred Stack types. */\nexport const attachPluginExpander = (placeholder: AnyPlugin, expander: PluginExpander): void => {\n\t(placeholder as unknown as Record<symbol, unknown>)[PLUGIN_EXPANDER] = expander;\n};\n\n/**\n * Run every registered expander once. Iterates the member tuple, finds\n * placeholders carrying a `PluginExpander`, and substitutes each with\n * the expander's resolved member. Members without a hook pass through\n * unchanged.\n *\n * Returns the input array verbatim (zero allocation) when no member\n * carries an expander — the explicit-tuple path remains the common case.\n *\n * **Single-pass contract.** This pass is single-shot: it scans the input\n * tuple once and substitutes in place. If an expander returns a member\n * that ITSELF carries `PLUGIN_EXPANDER`, that nested expander does NOT\n * fire — `runPluginExpanders` does not recurse. The composer is\n * responsible for re-invoking both `runPluginExpanders` and\n * `expandPluginDependencies` until fixed-point (typically: run expanders,\n * then re-run dependency closure so the now-resolved edges fold into the\n * member tuple; loop until neither pass produces a change). Keeping this\n * module ignorant of fixpoint policy means the substrate decides how\n * many iterations are allowed and what counts as convergence.\n */\nexport const runPluginExpanders = (members: ReadonlyArray<AnyPlugin>): ReadonlyArray<AnyPlugin> => {\n\tlet hasAny = false;\n\tfor (const m of members) {\n\t\tif (readPluginExpander(m) !== undefined) {\n\t\t\thasAny = true;\n\t\t\tbreak;\n\t\t}\n\t}\n\tif (!hasAny) return members;\n\n\treturn members.map((m) => {\n\t\tconst expand = readPluginExpander(m);\n\t\treturn expand === undefined ? m : expand(members);\n\t});\n};\n\n/** True when the placeholder + replacement form an expansion pair —\n *  same id, at least one side carries the expander hook. Used by the\n *  composer's duplicate-provider check to allow the \"placeholder + its\n *  expanded form\" pair (both share an id by construction). */\nexport const isPluginExpanderPair = (a: AnyPlugin, b: AnyPlugin): boolean =>\n\ta.id === b.id && (readPluginExpander(a) !== undefined || readPluginExpander(b) !== undefined);\n"],"mappings":";;;;AAiCA,MAAa,kBAA0B,OAAO,IAAI,qCAAqC;;;;AAcvF,MAAa,sBAAsB,WAAkD;CACpF,MAAM,OAAQ,OAA8C;CAC5D,OAAO,OAAO,SAAS,aAAc,OAA0B,KAAA;AAChE;;;;;AAMA,MAAa,wBAAwB,aAAwB,aAAmC;CAC/F,YAAoD,mBAAmB;AACxE;;;;;;;;;;;;;;;;;;;;;AAsBA,MAAa,sBAAsB,YAAgE;CAClG,IAAI,SAAS;CACb,KAAK,MAAM,KAAK,SACf,IAAI,mBAAmB,CAAC,MAAM,KAAA,GAAW;EACxC,SAAS;EACT;CACD;CAED,IAAI,CAAC,QAAQ,OAAO;CAEpB,OAAO,QAAQ,KAAK,MAAM;EACzB,MAAM,SAAS,mBAAmB,CAAC;EACnC,OAAO,WAAW,KAAA,IAAY,IAAI,OAAO,OAAO;CACjD,CAAC;AACF;;;;;AAMA,MAAa,wBAAwB,GAAc,MAClD,EAAE,OAAO,EAAE,OAAO,mBAAmB,CAAC,MAAM,KAAA,KAAa,mBAAmB,CAAC,MAAM,KAAA"}

package/dist/contracts/snapshotable.d.mts

@@ -1,4 +1,4 @@
-import { Effect, Scope } from "effect";
+import { Effect } from "effect";
 
 //#region src/contracts/snapshotable.d.ts
 /** Label tuple identifying managed containers. The orchestrator
@@ -20,7 +20,7 @@ type IdentityContributionValue = string | number | boolean | null | ReadonlyArra
  *  use a string-literal `kind` and JSON-serializable values; see the
  *  top-of-file convention section. The `[field]` index signature is
  *  permissive so existing payloads with `ReadonlyArray<string>` or
- *  nested object fields (e.g. postgres's `databases`) typecheck without
+ *  nested object fields typecheck without
  *  per-plugin schema duplication. */
 interface IdentityContributionShape {
   readonly kind: string;
@@ -37,12 +37,10 @@ interface SnapshotableDecl {
    *  + file-path rules. */
   readonly subtrees: ReadonlyArray<string>;
   /** Managed containers identified by label tuples — orchestrator
-   *  is name-blind. */
+   *  is name-blind. The capture bounce gracefully `docker stop`s each
+   *  (RocksDB/WAL flush) before commit, so no separate quiescence hook
+   *  is needed — the graceful stop IS the flush. */
   readonly managedContainers?: ReadonlyArray<ContainerLabelTuple>;
-  /** Quiescence hook: how to make state consistent before commit.
-   *  Default is "pause container"; postgres / RocksDB declare
-   *  longer grace. */
-  readonly quiesce?: Effect.Effect<void, never, Scope.Scope>;
   /** Pre-restore hook: contribute to the identity guard. The returned
    *  object is JSON-stringified to derive a stable comparison string.
    *  See `IdentityContributionShape` + the top-of-file convention

package/dist/contracts/wallet-protocol.d.mts

@@ -2,10 +2,7 @@
 /**
  * Canonical path constants under the `/api/v1/devstack/*` prefix.
  *
- * Distilled-doc note (15-wallet.md "Fork-control routes declared but
- * unimplemented"): the legacy server declared four `FORK_*` path
- * constants whose handlers never landed. Per "no compat for never-
- * cases", we drop them from the wire protocol entirely — when the
+ * The wire protocol carries no fork-control (`FORK_*`) routes. When the
  * fork-control surface is wired, those routes will be added (and the
  * dev-wallet adapter shipped together). No half-done stubs.
  */
@@ -33,7 +30,7 @@ declare const WALLET_TOKEN_HEX_LENGTH: 32;
  *  the manifest under `endpoints['wallet-app']`; downstream consumers
  *  (codegen, TUI, doctor) read it by this key.
  *
- *  Stable across rewrite + legacy so existing consumers don't break. */
+ *  A stable key so downstream consumers don't break. */
 declare const WALLET_ENDPOINT_NAME: "wallet-app";
 /** Conventional short endpoint key for the wallet plugin. Matches the
  *  substrate's `EndpointKey` brand. Build integrations (Playwright,

package/dist/contracts/wallet-protocol.mjs

@@ -2,10 +2,7 @@
 /**
 * Canonical path constants under the `/api/v1/devstack/*` prefix.
 *
-* Distilled-doc note (15-wallet.md "Fork-control routes declared but
-* unimplemented"): the legacy server declared four `FORK_*` path
-* constants whose handlers never landed. Per "no compat for never-
-* cases", we drop them from the wire protocol entirely — when the
+* The wire protocol carries no fork-control (`FORK_*`) routes. When the
 * fork-control surface is wired, those routes will be added (and the
 * dev-wallet adapter shipped together). No half-done stubs.
 */
@@ -32,7 +29,7 @@ const WALLET_TOKEN_HEX_LENGTH = 32;
 *  the manifest under `endpoints['wallet-app']`; downstream consumers
 *  (codegen, TUI, doctor) read it by this key.
 *
-*  Stable across rewrite + legacy so existing consumers don't break. */
+*  A stable key so downstream consumers don't break. */
 const WALLET_ENDPOINT_NAME = "wallet-app";
 /** Conventional short endpoint key for the wallet plugin. Matches the
 *  substrate's `EndpointKey` brand. Build integrations (Playwright,

package/dist/contracts/wallet-protocol.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"wallet-protocol.mjs","names":[],"sources":["../../src/contracts/wallet-protocol.ts"],"sourcesContent":["// Wallet wire-protocol constants — name-blind substrate contract.\n//\n// These are the PURE wire-protocol invariants shared across layers:\n// HTTP path strings, the protocol prefix gate, header/token constants,\n// and the canonical routed-endpoint name/key. They carry no runtime,\n// Effect, or service dependencies — only string/number literals.\n//\n// Lifted here (ARCHITECTURE.md § Layer table) because L5 build\n// integrations (`build-integrations/runtime/wallet-paths.ts` and the\n// Playwright/vitest helpers) need them but MUST NOT import L2 plugin\n// modules — there is no L5→L0–L3 carve-out. STYLE_GUIDE §7: shared\n// cross-layer shapes that no single layer should own live in\n// `src/contracts/`; plugin barrels re-export for ergonomics.\n//\n// One decl per file, no `contracts/index.ts` barrel (STYLE_GUIDE §8 /\n// §199): package-internal callers import this module directly; the\n// public root barrel re-exports the wallet-plugin barrel, which in\n// turn re-exports from here, so the public value/type identity is\n// unchanged.\n//\n// The wallet plugin's `protocol.ts` / `routable.ts` re-export these so\n// plugin-internal callers keep their current import sites. The Schema-\n// based request/response envelopes stay in `protocol.ts` (they drag in\n// `effect`'s Schema runtime and are not needed by the L5 surfaces).\n\n// ----------------------------------------------------------------------\n// Path constants\n// ----------------------------------------------------------------------\n\n/**\n * Canonical path constants under the `/api/v1/devstack/*` prefix.\n *\n * Distilled-doc note (15-wallet.md \"Fork-control routes declared but\n * unimplemented\"): the legacy server declared four `FORK_*` path\n * constants whose handlers never landed. Per \"no compat for never-\n * cases\", we drop them from the wire protocol entirely — when the\n * fork-control surface is wired, those routes will be added (and the\n * dev-wallet adapter shipped together). No half-done stubs.\n */\nexport const WalletHttpPath = {\n\tHEALTH: '/api/v1/devstack/health',\n\tACCOUNTS: '/api/v1/devstack/accounts',\n\tSIGN_TRANSACTION: '/api/v1/devstack/sign-transaction',\n\tSIGN_PERSONAL_MESSAGE: '/api/v1/devstack/sign-personal-message',\n} as const;\n\nexport type WalletHttpPathValue = (typeof WalletHttpPath)[keyof typeof WalletHttpPath];\n\n/** Prefix gate: ANY path under this prefix is treated as protocol traffic\n *  (and subject to mandatory Origin + bearer); anything else is a flat\n *  404. */\nexport const WALLET_PROTOCOL_PREFIX = '/api/v1/devstack/' as const;\n\n// ----------------------------------------------------------------------\n// Header / token constants (shared so the dev-wallet adapter doesn't\n// open-code the same strings).\n// ----------------------------------------------------------------------\n\nexport const WALLET_AUTH_HEADER = 'authorization' as const;\nexport const WALLET_BEARER_PREFIX = 'Bearer ' as const;\n\n/** URL-fragment key the pair-URL carries the token under\n *  (`<wallet-url>/#token=<32-hex>`). Fragments are not sent to the\n *  server, so the token never appears in access logs / referrers. */\nexport const WALLET_TOKEN_FRAGMENT_KEY = 'token' as const;\n\n/** Constant carried token byte length (16 random bytes → 32 hex chars).\n *  The on-disk token file is rejected + re-minted if it doesn't match. */\nexport const WALLET_TOKEN_HEX_LENGTH = 32 as const;\n\n// ----------------------------------------------------------------------\n// Routed-endpoint identity\n// ----------------------------------------------------------------------\n\n/** Canonical endpoint name. The router orchestrator surfaces this in\n *  the manifest under `endpoints['wallet-app']`; downstream consumers\n *  (codegen, TUI, doctor) read it by this key.\n *\n *  Stable across rewrite + legacy so existing consumers don't break. */\nexport const WALLET_ENDPOINT_NAME = 'wallet-app' as const;\n\n/** Conventional short endpoint key for the wallet plugin. Matches the\n *  substrate's `EndpointKey` brand. Build integrations (Playwright,\n *  vitest helpers) and the conventional-routes alias table look the\n *  endpoint up under this key; the substrate's alias resolver folds\n *  `'wallet'` → `WALLET_ENDPOINT_NAME` (`'wallet-app'`) before\n *  consulting the manifest.\n *\n *  Paired with the canonical name so both stay in lockstep when the\n *  plugin's HTTP server is renamed; the L5 conventional-routes table\n *  consumes the same constant so there is exactly one source of\n *  truth. */\nexport const WALLET_ENDPOINT_KEY = 'wallet' as const;\n"],"mappings":";;;;;;;;;;;AAuCA,MAAa,iBAAiB;CAC7B,QAAQ;CACR,UAAU;CACV,kBAAkB;CAClB,uBAAuB;CACvB;;;;AAOD,MAAa,yBAAyB;AAOtC,MAAa,qBAAqB;AAClC,MAAa,uBAAuB;;;;AAKpC,MAAa,4BAA4B;;;AAIzC,MAAa,0BAA0B;;;;;;AAWvC,MAAa,uBAAuB;;;;;;;;;;;;AAapC,MAAa,sBAAsB"}
+{"version":3,"file":"wallet-protocol.mjs","names":[],"sources":["../../src/contracts/wallet-protocol.ts"],"sourcesContent":["// Wallet wire-protocol constants — name-blind substrate contract.\n//\n// These are the PURE wire-protocol invariants shared across layers:\n// HTTP path strings, the protocol prefix gate, header/token constants,\n// and the canonical routed-endpoint name/key. They carry no runtime,\n// Effect, or service dependencies — only string/number literals.\n//\n// Lifted here (ARCHITECTURE.md § Layer table) because L5 build\n// integrations (`build-integrations/runtime/wallet-paths.ts` and the\n// Playwright/vitest helpers) need them but MUST NOT import L2 plugin\n// modules — there is no L5→L0–L3 carve-out. STYLE_GUIDE §7: shared\n// cross-layer shapes that no single layer should own live in\n// `src/contracts/`; plugin barrels re-export for ergonomics.\n//\n// One decl per file, no `contracts/index.ts` barrel (STYLE_GUIDE §8 /\n// §199): package-internal callers import this module directly; the\n// public root barrel re-exports the wallet-plugin barrel, which in\n// turn re-exports from here, so the public value/type identity is\n// unchanged.\n//\n// The wallet plugin's `protocol.ts` / `routable.ts` re-export these so\n// plugin-internal callers keep their current import sites. The Schema-\n// based request/response envelopes stay in `protocol.ts` (they drag in\n// `effect`'s Schema runtime and are not needed by the L5 surfaces).\n\n// ----------------------------------------------------------------------\n// Path constants\n// ----------------------------------------------------------------------\n\n/**\n * Canonical path constants under the `/api/v1/devstack/*` prefix.\n *\n * The wire protocol carries no fork-control (`FORK_*`) routes. When the\n * fork-control surface is wired, those routes will be added (and the\n * dev-wallet adapter shipped together). No half-done stubs.\n */\nexport const WalletHttpPath = {\n\tHEALTH: '/api/v1/devstack/health',\n\tACCOUNTS: '/api/v1/devstack/accounts',\n\tSIGN_TRANSACTION: '/api/v1/devstack/sign-transaction',\n\tSIGN_PERSONAL_MESSAGE: '/api/v1/devstack/sign-personal-message',\n} as const;\n\nexport type WalletHttpPathValue = (typeof WalletHttpPath)[keyof typeof WalletHttpPath];\n\n/** Prefix gate: ANY path under this prefix is treated as protocol traffic\n *  (and subject to mandatory Origin + bearer); anything else is a flat\n *  404. */\nexport const WALLET_PROTOCOL_PREFIX = '/api/v1/devstack/' as const;\n\n// ----------------------------------------------------------------------\n// Header / token constants (shared so the dev-wallet adapter doesn't\n// open-code the same strings).\n// ----------------------------------------------------------------------\n\nexport const WALLET_AUTH_HEADER = 'authorization' as const;\nexport const WALLET_BEARER_PREFIX = 'Bearer ' as const;\n\n/** URL-fragment key the pair-URL carries the token under\n *  (`<wallet-url>/#token=<32-hex>`). Fragments are not sent to the\n *  server, so the token never appears in access logs / referrers. */\nexport const WALLET_TOKEN_FRAGMENT_KEY = 'token' as const;\n\n/** Constant carried token byte length (16 random bytes → 32 hex chars).\n *  The on-disk token file is rejected + re-minted if it doesn't match. */\nexport const WALLET_TOKEN_HEX_LENGTH = 32 as const;\n\n// ----------------------------------------------------------------------\n// Routed-endpoint identity\n// ----------------------------------------------------------------------\n\n/** Canonical endpoint name. The router orchestrator surfaces this in\n *  the manifest under `endpoints['wallet-app']`; downstream consumers\n *  (codegen, TUI, doctor) read it by this key.\n *\n *  A stable key so downstream consumers don't break. */\nexport const WALLET_ENDPOINT_NAME = 'wallet-app' as const;\n\n/** Conventional short endpoint key for the wallet plugin. Matches the\n *  substrate's `EndpointKey` brand. Build integrations (Playwright,\n *  vitest helpers) and the conventional-routes alias table look the\n *  endpoint up under this key; the substrate's alias resolver folds\n *  `'wallet'` → `WALLET_ENDPOINT_NAME` (`'wallet-app'`) before\n *  consulting the manifest.\n *\n *  Paired with the canonical name so both stay in lockstep when the\n *  plugin's HTTP server is renamed; the L5 conventional-routes table\n *  consumes the same constant so there is exactly one source of\n *  truth. */\nexport const WALLET_ENDPOINT_KEY = 'wallet' as const;\n"],"mappings":";;;;;;;;AAoCA,MAAa,iBAAiB;CAC7B,QAAQ;CACR,UAAU;CACV,kBAAkB;CAClB,uBAAuB;AACxB;;;;AAOA,MAAa,yBAAyB;AAOtC,MAAa,qBAAqB;AAClC,MAAa,uBAAuB;;;;AAKpC,MAAa,4BAA4B;;;AAIzC,MAAa,0BAA0B;;;;;;AAWvC,MAAa,uBAAuB;;;;;;;;;;;;AAapC,MAAa,sBAAsB"}

package/dist/index.d.mts

@@ -1,29 +1,31 @@
 import { ManifestExtras, ManifestExtrasContext, ManifestExtrasInput, ManifestExtrasInvalid, ManifestExtrasLookupError } from "./substrate/manifest.mjs";
 import { runtime_decode_d_exports } from "./substrate/runtime/runtime-decode.mjs";
-import { CodegenEmitContext, CodegenEmitDone, CodegenableDecl } from "./contracts/codegenable.mjs";
-import { AppName, Brand, ChainId, ContentHash, EndpointKey, StackName, appName, chainId, contentHash, endpointKey, stackName } from "./substrate/brand.mjs";
+import { AppName, Brand, ContentHash, EndpointKey, StackName, appName, contentHash, endpointKey, stackName } from "./substrate/brand.mjs";
 import { LifecycleStatus, PhaseNarration, PluginRole } from "./substrate/lifecycle.mjs";
-import { ProjectionDecl, ProjectionEvent } from "./contracts/projection.mjs";
-import { DevstackRoutableUpstreamRegistry, DispatchId, EntrypointDecl, RoutableDecl, RoutableHttpDecl, RoutableTcpDecl, RoutableUpstream, RoutableUpstreamKind } from "./contracts/routable.mjs";
-import { ContainerLabelTuple, SnapshotableDecl } from "./contracts/snapshotable.mjs";
-import { StrategyContributorDecl, StrategyFor } from "./contracts/strategy-contributor.mjs";
-import { CapabilityDecl, CapabilityKind, CapabilityPayloadFor, DevstackCapabilityRegistry, ExactCapabilityPayload } from "./contracts/capability-decl.mjs";
-import { AnyPlugin, AnyResourceRef, DependencyInput, DependencyList, Plugin, PluginErrorContribution, PluginSpec, ResolvedDependencies, ResourceIdOf, ResourceRef, ResourceValueOf, defineId, definePlugin, resource } from "./substrate/plugin.mjs";
-import { DevstackNetworkModeRegistry, NetworkConfig, NetworkMode } from "./substrate/network.mjs";
+import { CodegenEmitContext, CodegenEmitDone, CodegenableDecl } from "./contracts/codegenable.mjs";
+import { AnyPlugin, AnyResourceRef, DependencyInput, DependencyList, Plugin, PluginSpec, ResolvedDependencies, ResourceIdOf, ResourceRef, ResourceValueOf, defineId, definePlugin, resource } from "./substrate/plugin.mjs";
 import { DevstackOptions } from "./substrate/options.mjs";
 import { Stack, defineDevstack } from "./api/define-devstack.mjs";
+import { DEFAULT_DEVSTACK_NETWORK, DEFAULT_STACK_NAME, DEVSTACK_NETWORK_NAMES, DevstackNetworkName, DevstackNetworkParseError, LOCAL_NETWORK_NAME, ParsedDevstackNetwork, ResolveNetworkOptions, ResolveStateDirOptions, ResolvedDevstackNetwork, chainIdForNetwork, networkNameFromChain, parseDevstackNetwork, parseDevstackNetworkName, resolveAppName, resolveNetwork, resolveNetworkSync, resolveStackName, resolveStateDir } from "./api/inference-network.mjs";
+import { DevstackNetworkModeRegistry, NetworkConfig, NetworkMode } from "./plugins/sui/network-config.mjs";
 import { BuildCtx, DevstackOptionsWith, defineDevstackWith } from "./api/define-devstack-with.mjs";
-import { RedactionRule, redaction_d_exports } from "./substrate/runtime/observability/redaction.mjs";
+import { ContainerLabelTuple, SnapshotableDecl } from "./contracts/snapshotable.mjs";
 import { ContainerHandle, ContainerRuntime, ContainerRuntimeError, ImageRef, LoadedImageBundle, TaggedImageRef } from "./contracts/container-runtime.mjs";
 import { IdentityContext } from "./substrate/runtime/paths.mjs";
 import { ContainerRuntimeService } from "./runtime/docker/service.mjs";
+import { DevstackRoutableUpstreamRegistry, DispatchId, EntrypointDecl, RoutableDecl, RoutableHttpDecl, RoutableTcpDecl, RoutableUpstream, RoutableUpstreamKind } from "./contracts/routable.mjs";
 import { http_probe_d_exports } from "./substrate/runtime/http-probe.mjs";
+import { StrategyContributorDecl, StrategyFor } from "./contracts/strategy-contributor.mjs";
+import { ChainProbe, ChainProbeError, ChainProbeMode } from "./contracts/chain-probe.mjs";
 import { LogLevel, LogLine, LogPayload, Logger, LoggerShape, TagBuffer } from "./substrate/runtime/observability/logger.mjs";
+import { RedactionRule, redaction_d_exports } from "./substrate/runtime/observability/redaction.mjs";
 import { process_lines_d_exports } from "./substrate/runtime/observability/process-lines.mjs";
+import { ProjectionDecl, ProjectionEvent } from "./contracts/projection.mjs";
+import { PackageBindings } from "./orchestrators/codegen/bindings.mjs";
+import { ResolvedKnownPackage, ResolvedLocalPackage } from "./plugins/package/registry.mjs";
 import { BootError, RunHandle, RunStackIdentityOptions, RunStackOptions, runStack } from "./api/run-stack.mjs";
-import { capability, capabilitySink, codegenable, defineCapability, projection, routable, snapshotable, strategyContributor } from "./api/define-capabilities.mjs";
-import { pluginErrorContributions } from "./api/plugin-errors.mjs";
-import { DEFAULT_DEVSTACK_NETWORK, DEFAULT_STACK_NAME, DEVSTACK_NETWORK_NAMES, DevstackNetworkName, DevstackNetworkParseError, ParsedDevstackNetwork, ResolveNetworkOptions, ResolveStateDirOptions, ResolvedDevstackNetwork, parseDevstackNetwork, parseDevstackNetworkName, resolveAppName, resolveNetwork, resolveNetworkSync, resolveStackName, resolveStateDir } from "./api/inference-network.mjs";
+import { projection } from "./api/define-capabilities.mjs";
+import { PluginContext, PluginCtx } from "./substrate/plugin-ctx.mjs";
 import { FactoriesByMode, FactoriesFor, ModeNamespace, defineModeNamespace } from "./api/mode-narrowed-factory.mjs";
 import { config_validation_d_exports } from "./substrate/runtime/config-validation.mjs";
 import { managed_container_d_exports } from "./substrate/runtime/managed-container.mjs";
@@ -31,14 +33,13 @@ import { process_supervisor_d_exports } from "./substrate/runtime/process-superv
 import { probes_d_exports } from "./substrate/runtime/probes.mjs";
 import { retry_policy_d_exports } from "./substrate/runtime/retry-policy.mjs";
 import { Renderer, RendererError } from "./contracts/renderer.mjs";
-import { ChainProbe, ChainProbeError, ChainProbeMode } from "./contracts/chain-probe.mjs";
+import { ForkUnsupportedError, SuiCliError, SuiConfigError, SuiError, SuiPluginError } from "./plugins/sui/errors.mjs";
 import { FaucetBodyError, FaucetConfigError, FaucetError, FaucetExhausted, FaucetUnreachable } from "./plugins/faucet/errors.mjs";
 import { FaucetStrategy } from "./plugins/faucet/dispatcher.mjs";
 import { FaucetStrategyContribution, defineFaucetStrategy } from "./plugins/faucet/index.mjs";
-import { ForkUnsupportedError, SuiCliError, SuiConfigError, SuiError, SuiPluginError } from "./plugins/sui/errors.mjs";
 import { SuiForkOptions, SuiLiveOptions, SuiLocalOptions, SuiLocalRpcOptions, SuiOptions } from "./plugins/sui/mode/spec.mjs";
 import { ResolvedSuiNetwork } from "./plugins/sui/network-resolver.mjs";
-import { SuiNetworkBindings } from "./plugins/sui/codegen.mjs";
+import { SuiNetworkConfigEntry } from "./plugins/sui/codegen.mjs";
 import { sui, suiFor } from "./plugins/sui/index.mjs";
 import { AccountAcquireError, AccountAcquirePhase, AccountError, AccountSignError, AccountSignPhase, AccountVariantKind } from "./plugins/account/errors.mjs";
 import { AccountOptions, AccountValue, TxResult } from "./plugins/account/service.mjs";
@@ -47,10 +48,6 @@ import { AccountBindings } from "./plugins/account/codegen.mjs";
 import { ResolvedKeypair, SignatureScheme } from "./plugins/account/keypair.mjs";
 import { SyntheticImpersonationSigner } from "./plugins/account/variants/impersonate.mjs";
 import { account } from "./plugins/account/index.mjs";
-import { ResolvedKnownPackage, ResolvedLocalPackage } from "./plugins/package/registry.mjs";
-import { PublishError } from "./plugins/package/errors.mjs";
-import { PackageBindings } from "./plugins/package/codegen.mjs";
-import { KnownPackageOptions, KnownPackageResolved, LocalPackageOptions, LocalPackageResolved, PackageCapture, PackageResolved, PublisherAccountMember, knownPackage, localPackage } from "./plugins/package/index.mjs";
 import { CoinError, CoinPhase } from "./plugins/coin/errors.mjs";
 import { isBareCoinType, validateBareCoinType } from "./plugins/coin/metadata.mjs";
 import { BUILTIN_COINS, BuiltinCoinName, ResolvedCoin } from "./plugins/coin/address-resolution.mjs";
@@ -58,6 +55,8 @@ import { CoinAddressForm, CoinValue } from "./plugins/coin/service.mjs";
 import { CoinBindings } from "./plugins/coin/codegen.mjs";
 import { DiscoveredCoin } from "./plugins/coin/discovery.mjs";
 import { PackageMember, coin } from "./plugins/coin/index.mjs";
+import { PublishError } from "./plugins/package/errors.mjs";
+import { KnownPackageOptions, KnownPackageResolved, LocalPackageOptions, LocalPackageResolved, PackageCapture, PackageResolved, PublisherAccountMember, knownPackage, localPackage } from "./plugins/package/index.mjs";
 import { WalletBootError, WalletBootPhase, WalletError, WalletRequestError, WalletRequestPhase } from "./plugins/wallet/errors.mjs";
 import { WalletAccountMember, WalletOptions, WalletValue } from "./plugins/wallet/service.mjs";
 import { wallet } from "./plugins/wallet/index.mjs";
@@ -65,10 +64,6 @@ import { DashboardOptions, DashboardValue, dashboard } from "./plugins/dashboard
 import { HostServiceError } from "./plugins/host-service/errors.mjs";
 import { HOST_SERVICE_PORT_TOKEN, HostServiceOptions, HostServiceReadyProbe, HostServiceValue } from "./plugins/host-service/service.mjs";
 import { hostService } from "./plugins/host-service/index.mjs";
-import { DatabaseCreateFailed, PostgresConfigError, PostgresConnectionTimeout, PostgresError, PostgresPhase, PostgresPluginError } from "./plugins/postgres/errors.mjs";
-import { Postgres, PostgresServiceOptions } from "./plugins/postgres/service.mjs";
-import { PostgresConnectionBindings, PostgresConnectionParts } from "./plugins/postgres/connection.mjs";
-import { PostgresPluginOptions, postgres } from "./plugins/postgres/index.mjs";
 import { ActionError, ActionPhase } from "./plugins/action/errors.mjs";
 import { ActionReceipt } from "./plugins/action/service.mjs";
 import { ActionBuildContext } from "./plugins/action/build-context.mjs";
@@ -85,6 +80,6 @@ import { SealBindings } from "./plugins/seal/codegen.mjs";
 import { SealCommonOptions, SealForkKnownOptions, SealLiveOptions, SealLocalKeygenOptions, SealOptions, seal, sealFor } from "./plugins/seal/index.mjs";
 import { DeepbookConfigError, DeepbookError, DeepbookPhase, DeepbookPluginError } from "./plugins/deepbook/errors.mjs";
 import { AccountMemberAlias, CoinMemberAlias, DEEP_PRICE_FEED_ID, DeepbookPackageMember, DeepbookPool, DeepbookPoolCoin, DeepbookPoolSeedLiquidity, DeepbookPoolSeedOrder, DeepbookPoolSpec, SUI_PRICE_FEED_ID, USDC_PRICE_FEED_ID, pythPriceFeedId } from "./plugins/deepbook/types.mjs";
-import { DeepbookBindings, DeepbookPoolBinding } from "./plugins/deepbook/codegen.mjs";
+import { DeepbookBindings } from "./plugins/deepbook/codegen.mjs";
 import { DeepbookCommonOptions, DeepbookKnownNetwork, DeepbookKnownOptions, DeepbookOptions, DeepbookOverrideOptions, DeepbookResolved, deepbookCore, deepbookFor } from "./plugins/deepbook/index.mjs";
-export { type AccountAcquireError, type AccountAcquirePhase, type AccountBindings, type AccountError, type AccountFunding, type AccountFundingCoinValue, type AccountFundingEntry, type AccountFundingRequest, type AccountFundingResult, type AccountFundingStrategy, type AccountMemberAlias, type AccountOptions, type AccountSignError, type AccountSignPhase, type AccountValue, type AccountVariantKind, type ActionBuildContext, type ActionError, type ActionOptions, type ActionPhase, type ActionReceipt, type ActionUpstreamRef, type AnyPlugin, type AnyResourceRef, type AppName, BUILTIN_COINS, type BootError, type Brand, type BuildCtx, type BuiltinCoinName, type CapabilityDecl, type CapabilityKind, type CapabilityPayloadFor, type ChainId, type ChainProbe, type ChainProbeError, type ChainProbeMode, type CodegenEmitContext, type CodegenEmitDone, type CodegenableDecl, type CoinAddressForm, type CoinBindings, type CoinError, type CoinMember, type CoinMemberAlias, type CoinPhase, type CoinValue, config_validation_d_exports as ConfigValidation, type ContainerHandle, type ContainerLabelTuple, type ContainerRuntime, type ContainerRuntimeError, ContainerRuntimeService, type ContentHash, type CrossCuttingFundingEntry, type CrossCuttingFundingProvider, DEEP_PRICE_FEED_ID, DEFAULT_DEVSTACK_NETWORK, DEFAULT_EPHEMERAL_FUND_MIST, DEFAULT_STACK_NAME, DEVSTACK_NETWORK_NAMES, type DashboardOptions, type DashboardValue, type DatabaseCreateFailed, type DeepbookBindings, type DeepbookCommonOptions, type DeepbookConfigError, type DeepbookError, type DeepbookKnownNetwork, type DeepbookKnownOptions, type DeepbookOptions, type DeepbookOverrideOptions, type DeepbookPackageMember, type DeepbookPhase, type DeepbookPluginError, type DeepbookPool, type DeepbookPoolBinding, type DeepbookPoolCoin, type DeepbookPoolSeedLiquidity, type DeepbookPoolSeedOrder, type DeepbookPoolSpec, type DeepbookResolved, type DependencyInput, type DependencyList, type DevstackCapabilityRegistry, type DevstackNetworkModeRegistry, type DevstackNetworkName, DevstackNetworkParseError, type DevstackOptions, type DevstackOptionsWith, type DevstackRoutableUpstreamRegistry, type DiscoveredCoin, type DispatchId, type EndpointKey, type EntrypointDecl, type ExactCapabilityPayload, type FactoriesByMode, type FactoriesFor, type FaucetBodyError, type FaucetConfigError, type FaucetError, type FaucetExhausted, type FaucetStrategy, type FaucetStrategyContribution, type FaucetUnreachable, type ForkUnsupportedError, HOST_SERVICE_PORT_TOKEN, type HostServiceError, type HostServiceOptions, type HostServiceReadyProbe, type HostServiceValue, http_probe_d_exports as HttpProbes, IdentityContext, type ImageRef, type KnownPackageOptions, type KnownPackageResolved, type LifecycleStatus, type LoadedImageBundle, type LocalPackageOptions, type LocalPackageResolved, type LogLevel, type LogLine, type LogPayload, Logger, type LoggerShape, managed_container_d_exports as ManagedContainers, type ManifestExtras, type ManifestExtrasContext, type ManifestExtrasInput, ManifestExtrasInvalid, ManifestExtrasLookupError, type ModeNamespace, type NetworkConfig, type NetworkMode, type PackageBindings, type PackageCapture, type PackageMember, type PackageResolved, type ParsedDevstackNetwork, type PhaseNarration, type Plugin, type PluginErrorContribution, type PluginRole, type PluginSpec, type Postgres, type PostgresConfigError, type PostgresConnectionBindings, type PostgresConnectionParts, type PostgresConnectionTimeout, type PostgresError, type PostgresPhase, type PostgresPluginError, type PostgresPluginOptions, type PostgresServiceOptions, probes_d_exports as Probes, process_lines_d_exports as ProcessLines, process_supervisor_d_exports as ProcessSupervisor, type ProjectionDecl, type ProjectionEvent, type PublishError, type PublisherAccountMember, redaction_d_exports as Redaction, type RedactionRule, type Renderer, type RendererError, type ResolveNetworkOptions, type ResolveStateDirOptions, type ResolvedCoin, type ResolvedDependencies, type ResolvedDevstackNetwork, type ResolvedKeypair, type ResolvedKnownPackage, type ResolvedLocalPackage, type ResolvedSuiNetwork, type ResourceIdOf, type ResourceRef, type ResourceValueOf, retry_policy_d_exports as RetryPolicy, type RoutableDecl, type RoutableHttpDecl, type RoutableTcpDecl, type RoutableUpstream, type RoutableUpstreamKind, type RunHandle, type RunStackIdentityOptions, type RunStackOptions, runtime_decode_d_exports as RuntimeDecode, SUI_FULL_COIN_TYPE, SUI_PRICE_FEED_ID, type SealError as SealAcquireError, type SealAnyError, type SealBindings, type SealCommonOptions, type SealConfigError, type SealError, type SealForkKnownOptions, type SealKeyServer, type SealKeyServerEntry, type SealKnownResolved, type SealLiveOptions, type SealLocalKeygenOptions, type SealLocalKeygenResolved, type SealOptions, type SealResolved, type SignatureScheme, type SnapshotableDecl, type Stack, type StackName, type StrategyContributorDecl, type StrategyFor, type SuiCliError, type SuiConfigError, type SuiError, type SuiForkOptions, type SuiFundingEntry, type SuiLiveOptions, type SuiLocalOptions, type SuiLocalRpcOptions, type SuiNetworkBindings, type SuiOptions, type SuiPluginError, type SyntheticImpersonationSigner, type TagBuffer, type TaggedImageRef, type TxResult, USDC_PRICE_FEED_ID, type WalCoinValue, type WalletAccountMember, type WalletBootError, type WalletBootPhase, type WalletError, type WalletOptions, type WalletRequestError, type WalletRequestPhase, type WalletValue, type WalrusBindings, type WalrusConfigError, type WalrusError, type WalrusKnownDeploymentOptions, type WalrusKnownNetwork, type WalrusLocalClusterOptions, type WalrusNodeBinding, type WalrusPhase, type WalrusPluginError, type WalrusResolved, type WalrusStorageNode, account, action, appName, capability, capabilitySink, chainId, codegenable, coin, contentHash, dashboard, deepbookCore as deepbook, deepbookFor, defineCapability, defineDevstack, defineDevstackWith, defineFaucetStrategy, defineId, defineModeNamespace, definePlugin, endpointKey, hostService, isBareCoinType, knownPackage, localPackage, parseDevstackNetwork, parseDevstackNetworkName, pluginErrorContributions, postgres, projection, pythPriceFeedId, resolveAppName, resolveNetwork, resolveNetworkSync, resolveStackName, resolveStateDir, resource, routable, runStack, seal, sealFor, snapshotable, stackName, strategyContributor, sui, suiFor, validateBareCoinType, walCoin, wallet, walrus, walrusFor };
+export { type AccountAcquireError, type AccountAcquirePhase, type AccountBindings, type AccountError, type AccountFunding, type AccountFundingCoinValue, type AccountFundingEntry, type AccountFundingRequest, type AccountFundingResult, type AccountFundingStrategy, type AccountMemberAlias, type AccountOptions, type AccountSignError, type AccountSignPhase, type AccountValue, type AccountVariantKind, type ActionBuildContext, type ActionError, type ActionOptions, type ActionPhase, type ActionReceipt, type ActionUpstreamRef, type AnyPlugin, type AnyResourceRef, type AppName, BUILTIN_COINS, type BootError, type Brand, type BuildCtx, type BuiltinCoinName, type ChainProbe, type ChainProbeError, type ChainProbeMode, type CodegenEmitContext, type CodegenEmitDone, type CodegenableDecl, type CoinAddressForm, type CoinBindings, type CoinError, type CoinMember, type CoinMemberAlias, type CoinPhase, type CoinValue, config_validation_d_exports as ConfigValidation, type ContainerHandle, type ContainerLabelTuple, type ContainerRuntime, type ContainerRuntimeError, ContainerRuntimeService, type ContentHash, type CrossCuttingFundingEntry, type CrossCuttingFundingProvider, DEEP_PRICE_FEED_ID, DEFAULT_DEVSTACK_NETWORK, DEFAULT_EPHEMERAL_FUND_MIST, DEFAULT_STACK_NAME, DEVSTACK_NETWORK_NAMES, type DashboardOptions, type DashboardValue, type DeepbookBindings, type DeepbookCommonOptions, type DeepbookConfigError, type DeepbookError, type DeepbookKnownNetwork, type DeepbookKnownOptions, type DeepbookOptions, type DeepbookOverrideOptions, type DeepbookPackageMember, type DeepbookPhase, type DeepbookPluginError, type DeepbookPool, type DeepbookPoolCoin, type DeepbookPoolSeedLiquidity, type DeepbookPoolSeedOrder, type DeepbookPoolSpec, type DeepbookResolved, type DependencyInput, type DependencyList, type DevstackNetworkModeRegistry, type DevstackNetworkName, DevstackNetworkParseError, type DevstackOptions, type DevstackOptionsWith, type DevstackRoutableUpstreamRegistry, type DiscoveredCoin, type DispatchId, type EndpointKey, type EntrypointDecl, type FactoriesByMode, type FactoriesFor, type FaucetBodyError, type FaucetConfigError, type FaucetError, type FaucetExhausted, type FaucetStrategy, type FaucetStrategyContribution, type FaucetUnreachable, type ForkUnsupportedError, HOST_SERVICE_PORT_TOKEN, type HostServiceError, type HostServiceOptions, type HostServiceReadyProbe, type HostServiceValue, http_probe_d_exports as HttpProbes, IdentityContext, type ImageRef, type KnownPackageOptions, type KnownPackageResolved, LOCAL_NETWORK_NAME, type LifecycleStatus, type LoadedImageBundle, type LocalPackageOptions, type LocalPackageResolved, type LogLevel, type LogLine, type LogPayload, Logger, type LoggerShape, managed_container_d_exports as ManagedContainers, type ManifestExtras, type ManifestExtrasContext, type ManifestExtrasInput, ManifestExtrasInvalid, ManifestExtrasLookupError, type ModeNamespace, type NetworkConfig, type NetworkMode, type PackageBindings, type PackageCapture, type PackageMember, type PackageResolved, type ParsedDevstackNetwork, type PhaseNarration, type Plugin, PluginContext, type PluginCtx, type PluginRole, type PluginSpec, probes_d_exports as Probes, process_lines_d_exports as ProcessLines, process_supervisor_d_exports as ProcessSupervisor, type ProjectionDecl, type ProjectionEvent, type PublishError, type PublisherAccountMember, redaction_d_exports as Redaction, type RedactionRule, type Renderer, type RendererError, type ResolveNetworkOptions, type ResolveStateDirOptions, type ResolvedCoin, type ResolvedDependencies, type ResolvedDevstackNetwork, type ResolvedKeypair, type ResolvedKnownPackage, type ResolvedLocalPackage, type ResolvedSuiNetwork, type ResourceIdOf, type ResourceRef, type ResourceValueOf, retry_policy_d_exports as RetryPolicy, type RoutableDecl, type RoutableHttpDecl, type RoutableTcpDecl, type RoutableUpstream, type RoutableUpstreamKind, type RunHandle, type RunStackIdentityOptions, type RunStackOptions, runtime_decode_d_exports as RuntimeDecode, SUI_FULL_COIN_TYPE, SUI_PRICE_FEED_ID, type SealError as SealAcquireError, type SealAnyError, type SealBindings, type SealCommonOptions, type SealConfigError, type SealError, type SealForkKnownOptions, type SealKeyServer, type SealKeyServerEntry, type SealKnownResolved, type SealLiveOptions, type SealLocalKeygenOptions, type SealLocalKeygenResolved, type SealOptions, type SealResolved, type SignatureScheme, type SnapshotableDecl, type Stack, type StackName, type StrategyContributorDecl, type StrategyFor, type SuiCliError, type SuiConfigError, type SuiError, type SuiForkOptions, type SuiFundingEntry, type SuiLiveOptions, type SuiLocalOptions, type SuiLocalRpcOptions, type SuiNetworkConfigEntry, type SuiOptions, type SuiPluginError, type SyntheticImpersonationSigner, type TagBuffer, type TaggedImageRef, type TxResult, USDC_PRICE_FEED_ID, type WalCoinValue, type WalletAccountMember, type WalletBootError, type WalletBootPhase, type WalletError, type WalletOptions, type WalletRequestError, type WalletRequestPhase, type WalletValue, type WalrusBindings, type WalrusConfigError, type WalrusError, type WalrusKnownDeploymentOptions, type WalrusKnownNetwork, type WalrusLocalClusterOptions, type WalrusNodeBinding, type WalrusPhase, type WalrusPluginError, type WalrusResolved, type WalrusStorageNode, account, action, appName, chainIdForNetwork, coin, contentHash, dashboard, deepbookCore as deepbook, deepbookFor, defineDevstack, defineDevstackWith, defineFaucetStrategy, defineId, defineModeNamespace, definePlugin, endpointKey, hostService, isBareCoinType, knownPackage, localPackage, networkNameFromChain, parseDevstackNetwork, parseDevstackNetworkName, projection, pythPriceFeedId, resolveAppName, resolveNetwork, resolveNetworkSync, resolveStackName, resolveStateDir, resource, runStack, seal, sealFor, stackName, sui, suiFor, validateBareCoinType, walCoin, wallet, walrus, walrusFor };

package/dist/index.mjs

@@ -2,43 +2,42 @@ import { defineId, definePlugin, resource } from "./substrate/plugin.mjs";
 import "./api/define-plugin.mjs";
 import { defineDevstack } from "./api/define-devstack.mjs";
 import { defineDevstackWith } from "./api/define-devstack-with.mjs";
-import { appName, chainId, contentHash, endpointKey, stackName } from "./substrate/brand.mjs";
-import { IdentityContext } from "./substrate/runtime/paths.mjs";
-import { redaction_exports } from "./substrate/runtime/observability/redaction.mjs";
+import { appName, contentHash, endpointKey, stackName } from "./substrate/brand.mjs";
 import { runtime_decode_exports } from "./substrate/runtime/runtime-decode.mjs";
 import { Logger } from "./substrate/runtime/observability/logger.mjs";
+import { redaction_exports } from "./substrate/runtime/observability/redaction.mjs";
 import { process_lines_exports } from "./substrate/runtime/observability/process-lines.mjs";
 import "./substrate/runtime/observability/index.mjs";
+import { IdentityContext } from "./substrate/runtime/paths.mjs";
 import { probes_exports } from "./substrate/runtime/probes.mjs";
 import { retry_policy_exports } from "./substrate/runtime/retry-policy.mjs";
 import { ContainerRuntimeService } from "./runtime/docker/service.mjs";
 import { process_supervisor_exports } from "./substrate/runtime/process-supervisor.mjs";
+import { PluginContext } from "./substrate/plugin-ctx.mjs";
 import { http_probe_exports } from "./substrate/runtime/http-probe.mjs";
 import { managed_container_exports } from "./substrate/runtime/managed-container.mjs";
 import { config_validation_exports } from "./substrate/runtime/config-validation.mjs";
 import { ManifestExtrasInvalid, ManifestExtrasLookupError } from "./substrate/manifest.mjs";
-import { DEFAULT_DEVSTACK_NETWORK, DEFAULT_STACK_NAME, DEVSTACK_NETWORK_NAMES, DevstackNetworkParseError, parseDevstackNetwork, parseDevstackNetworkName, resolveAppName, resolveNetwork, resolveNetworkSync, resolveStackName, resolveStateDir } from "./api/inference-network.mjs";
+import { DEFAULT_DEVSTACK_NETWORK, DEFAULT_STACK_NAME, DEVSTACK_NETWORK_NAMES, DevstackNetworkParseError, LOCAL_NETWORK_NAME, chainIdForNetwork, networkNameFromChain, parseDevstackNetwork, parseDevstackNetworkName, resolveAppName, resolveNetwork, resolveNetworkSync, resolveStackName, resolveStateDir } from "./api/inference-network.mjs";
 import { runStack } from "./api/run-stack.mjs";
-import { capability, capabilitySink, codegenable, defineCapability, projection, routable, snapshotable, strategyContributor } from "./api/define-capabilities.mjs";
-import { pluginErrorContributions } from "./api/plugin-errors.mjs";
+import { projection } from "./api/define-capabilities.mjs";
 import { defineModeNamespace } from "./api/mode-narrowed-factory.mjs";
 import "./substrate/runtime/container-runtime.mjs";
 import { defineFaucetStrategy } from "./plugins/faucet/index.mjs";
 import { sui, suiFor } from "./plugins/sui/index.mjs";
 import { DEFAULT_EPHEMERAL_FUND_MIST, SUI_FULL_COIN_TYPE } from "./plugins/account/funding.mjs";
 import { account } from "./plugins/account/index.mjs";
-import { knownPackage, localPackage } from "./plugins/package/index.mjs";
 import { isBareCoinType, validateBareCoinType } from "./plugins/coin/metadata.mjs";
 import { BUILTIN_COINS } from "./plugins/coin/address-resolution.mjs";
 import { coin } from "./plugins/coin/index.mjs";
+import { knownPackage, localPackage } from "./plugins/package/index.mjs";
 import { HOST_SERVICE_PORT_TOKEN } from "./plugins/host-service/service.mjs";
 import { hostService } from "./plugins/host-service/index.mjs";
 import { wallet } from "./plugins/wallet/index.mjs";
 import { dashboard } from "./plugins/dashboard/index.mjs";
-import { postgres } from "./plugins/postgres/index.mjs";
 import { action } from "./plugins/action/index.mjs";
 import { walCoin, walrus, walrusFor } from "./plugins/walrus/index.mjs";
 import { seal, sealFor } from "./plugins/seal/index.mjs";
 import { DEEP_PRICE_FEED_ID, SUI_PRICE_FEED_ID, USDC_PRICE_FEED_ID, pythPriceFeedId } from "./plugins/deepbook/types.mjs";
 import { deepbookCore, deepbookFor } from "./plugins/deepbook/index.mjs";
-export { BUILTIN_COINS, config_validation_exports as ConfigValidation, ContainerRuntimeService, DEEP_PRICE_FEED_ID, DEFAULT_DEVSTACK_NETWORK, DEFAULT_EPHEMERAL_FUND_MIST, DEFAULT_STACK_NAME, DEVSTACK_NETWORK_NAMES, DevstackNetworkParseError, HOST_SERVICE_PORT_TOKEN, http_probe_exports as HttpProbes, IdentityContext, Logger, managed_container_exports as ManagedContainers, ManifestExtrasInvalid, ManifestExtrasLookupError, probes_exports as Probes, process_lines_exports as ProcessLines, process_supervisor_exports as ProcessSupervisor, redaction_exports as Redaction, retry_policy_exports as RetryPolicy, runtime_decode_exports as RuntimeDecode, SUI_FULL_COIN_TYPE, SUI_PRICE_FEED_ID, USDC_PRICE_FEED_ID, account, action, appName, capability, capabilitySink, chainId, codegenable, coin, contentHash, dashboard, deepbookCore as deepbook, deepbookFor, defineCapability, defineDevstack, defineDevstackWith, defineFaucetStrategy, defineId, defineModeNamespace, definePlugin, endpointKey, hostService, isBareCoinType, knownPackage, localPackage, parseDevstackNetwork, parseDevstackNetworkName, pluginErrorContributions, postgres, projection, pythPriceFeedId, resolveAppName, resolveNetwork, resolveNetworkSync, resolveStackName, resolveStateDir, resource, routable, runStack, seal, sealFor, snapshotable, stackName, strategyContributor, sui, suiFor, validateBareCoinType, walCoin, wallet, walrus, walrusFor };
+export { BUILTIN_COINS, config_validation_exports as ConfigValidation, ContainerRuntimeService, DEEP_PRICE_FEED_ID, DEFAULT_DEVSTACK_NETWORK, DEFAULT_EPHEMERAL_FUND_MIST, DEFAULT_STACK_NAME, DEVSTACK_NETWORK_NAMES, DevstackNetworkParseError, HOST_SERVICE_PORT_TOKEN, http_probe_exports as HttpProbes, IdentityContext, LOCAL_NETWORK_NAME, Logger, managed_container_exports as ManagedContainers, ManifestExtrasInvalid, ManifestExtrasLookupError, PluginContext, probes_exports as Probes, process_lines_exports as ProcessLines, process_supervisor_exports as ProcessSupervisor, redaction_exports as Redaction, retry_policy_exports as RetryPolicy, runtime_decode_exports as RuntimeDecode, SUI_FULL_COIN_TYPE, SUI_PRICE_FEED_ID, USDC_PRICE_FEED_ID, account, action, appName, chainIdForNetwork, coin, contentHash, dashboard, deepbookCore as deepbook, deepbookFor, defineDevstack, defineDevstackWith, defineFaucetStrategy, defineId, defineModeNamespace, definePlugin, endpointKey, hostService, isBareCoinType, knownPackage, localPackage, networkNameFromChain, parseDevstackNetwork, parseDevstackNetworkName, projection, pythPriceFeedId, resolveAppName, resolveNetwork, resolveNetworkSync, resolveStackName, resolveStateDir, resource, runStack, seal, sealFor, stackName, sui, suiFor, validateBareCoinType, walCoin, wallet, walrus, walrusFor };

package/dist/orchestrators/boot.d.mts

@@ -0,0 +1,28 @@
+import { Context, Effect, FileSystem, Layer, Scope, SubscriptionRef } from "effect";
+import { ChildProcessSpawner } from "effect/unstable/process/ChildProcessSpawner";
+
+//#region src/orchestrators/boot.d.ts
+interface ProductionCodegenOptions {
+  readonly appRoot?: string;
+  /** Resolved absolute path to the dev-only + secret `generated-extras`
+   *  tree for this stack, threaded into `CodegenRoot.extrasDir` and
+   *  recorded in the manifest as `codegen.extrasDir` for the
+   *  `@devstack-dev` Vite alias. This is the ONLY tree boot's codegen
+   *  writes (`emitExtras`); boot never emits the committed `src/generated`
+   *  tree, so it pins no live `outputDir` — the `CodegenRoot.outputDir`
+   *  the production path carries is an unwritten default. The committed
+   *  tree is owned solely by the stack-free `codegen` verb (wired
+   *  separately, where it resolves its own output path). */
+  readonly extrasDir?: string;
+  /** Forwarded verbatim to `@mysten/codegen`'s
+   *  `generateFromPackageSummary` via `layerMystenMoveCodegen` — see
+   *  `DevstackOptions['codegen']` for the full contract. Default `false`
+   *  (`@mysten/codegen`'s own default): phantom-only structs render as
+   *  consts with the phantom placeholder baked into `.name`; `true`
+   *  renders them as factories whose required type arguments compose a
+   *  fully-qualified type tag. */
+  readonly includePhantomTypeParameters?: boolean;
+}
+//#endregion
+export { ProductionCodegenOptions };
+//# sourceMappingURL=boot.d.mts.map