@mysten-incubation/devstack 0.1.1 → 0.2.0

package/dist/plugins/account/funding.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"funding.mjs","names":[],"sources":["../../../src/plugins/account/funding.ts"],"sourcesContent":["// Account plugin — funding logic.\n//\n// Two funding paths converge here:\n//\n//   1. **Default funding** — applies to the `ephemeral` variant only.\n//      On non-fork networks: faucet POST via the SUI HTTP strategy\n//      auto-registered by Faucet (see 11-faucet.md). On fork networks:\n//      \"pay from a seed via impersonation\" because forks have no\n//      faucet. The auto-promotion is LOUD by default per the\n//      architecture's \"no silent surprises\" principle — we emit a\n//      `log.appended` event the first time a stack hits this path.\n//\n//   2. **Cross-cutting funding** — declared per-account via\n//      `AccountOptions.funding`. Applies to every variant.\n//      Dispatched through the ambient strategy registry. Missing\n//      strategy for non-SUI coins ⇒ silent noop (architecture-\n//      mandated test-ergonomics contract, distilled-doc invariant:\n//      \"Optional Faucet is a noop, not an error\"). Explicit SUI\n//      entries use the SUI faucet strategy and fail loudly when no\n//      faucet-bearing strategy exists.\n//\n// Distilled-doc invariant: per-address serialization — concurrent\n// funding requests for the same address MUST serialize. We share the\n// substrate `LeaseBroker` handle from `service.ts` and open a fresh\n// scope per wire call so the lease releases the moment that call\n// returns. Each cross-cutting iteration is its own scope: the broker\n// is non-reentrant by design, so a hypothetical loop holding a single\n// lease across iterations would deadlock the second one.\n\nimport { Effect } from 'effect';\n\nimport { FAUCET_CAPABILITY_KEY_PREFIX, type FaucetStrategy } from '../faucet/index.ts';\nimport {\n\tchainKeyedStrategyFor,\n\tStrategyRegistryService,\n} from '../../substrate/runtime/strategy-registry/index.ts';\nimport type { AnyResourceRef, ResourceRef } from '../../api/define-plugin.ts';\nimport type { LeaseBroker } from '../../substrate/runtime/lease-broker/index.ts';\nimport type { ChainId } from '../../substrate/brand.ts';\nimport type {\n\tAccountFundingRequest as ContractAccountFundingRequest,\n\tAccountFundingStrategy as ContractAccountFundingStrategy,\n} from '../../contracts/funding-strategy.ts';\nimport { setCurrentPluginPhase } from '../../substrate/runtime/current-plugin.ts';\nimport {\n\tBALANCE_POLL_PROFILE,\n\tmakeBoundedSpacedSchedule,\n} from '../../substrate/runtime/retry-policy.ts';\n\nimport {\n\taccountAcquireError,\n\ttype AccountAcquireError,\n\ttype AccountVariantKind,\n} from './errors.ts';\nimport { withAddressLease } from './lease.ts';\nimport { fundingFailureError } from '../internal/funding-failure-error.ts';\nimport type { AccountValue } from './service.ts';\nimport { AccountSpans } from './spans.ts';\nimport { SuiSpans } from '../sui/index.ts';\n\n// `CoinResourceId` is the literal-typed resource id the coin plugin\n// publishes. Inlined here as `coin:${Sym}` so this file does NOT\n// cross-import the coin plugin — the substrate's compose-time dedup\n// works by string equality on the resource id, and the coin plugin's\n// `coinResourceId` constructor produces the same shape. This is the\n// per-Task-A \"inline the literal type alias\" decision (the literal\n// pattern is the contract; promoting it to a substrate type would\n// be more ceremony than the single string template warrants).\ntype CoinResourceId<Sym extends string> = `coin:${Sym}`;\n\n/** Direct resource ref shape for a coin upstream. The user passes the\n *  result of `coin.fromPackage(...)` / `coin.known(...)` /\n *  `coin.builtin(...)` — NOT a bare string or discriminator. Generic\n *  over the literal symbol so the account's dependency tuple preserves\n *  each per-coin resource id (`coin:managed_coin/managed_coin`,\n *  `coin:wal`, ...).\n *\n *  Architecture (Direct Member Refs): cross-plugin references at the\n *  user-facing surface are plugin/resource refs directly — no opaque\n *  tag or string discriminator vocabulary. */\nexport interface AccountFundingCoinValue {\n\treadonly fullCoinType: string;\n\treadonly symbol?: string;\n}\n\nexport type CoinMember<Sym extends string = string> = ResourceRef<\n\tCoinResourceId<Sym>,\n\tAccountFundingCoinValue\n>;\n\n/** Optional dependency edge for the plugin that contributes the\n *  funding strategy. Coin refs force the coin metadata edge; `via`\n *  forces the strategy-provider edge (e.g. a known DeepBook\n *  deployment that contributes `coinType:<DEEP>`). */\nexport type CrossCuttingFundingProvider = AnyResourceRef | readonly AnyResourceRef[];\n\n/** Built-in SUI funding entry. This uses the same account funding\n *  list as arbitrary coins but avoids requiring `coin.builtin('sui')`\n *  for the normal SUI faucet path. */\nexport interface SuiFundingEntry {\n\treadonly coin: 'sui';\n\treadonly amount: number | bigint;\n}\n\n/** A single cross-cutting funding entry. `coin` is a direct member ref\n *  (the value returned by `coin.fromPackage(...)` etc.) — the account plugin\n *  threads it through `dependsOn` so the substrate's dep graph forces\n *  the publishing / discovery edge to land before funding.\n *\n *  Distilled-doc invariant (\"Strict upstream declaration\"): coin\n *  references cited by Account must force a dep edge. `via` is the\n *  same contract for the strategy contributor that can satisfy the\n *  funding request. */\nexport interface CrossCuttingFundingEntry<M extends CoinMember = CoinMember> {\n\treadonly coin: M;\n\treadonly amount: bigint;\n\treadonly via?: CrossCuttingFundingProvider;\n}\n\nexport type AccountFundingEntry<M extends CoinMember = CoinMember> =\n\t| SuiFundingEntry\n\t| CrossCuttingFundingEntry<M>;\n\nexport type AccountFunding = ReadonlyArray<AccountFundingEntry>;\n\n/** Internal projected shape — the acquire body in `account/index.ts`\n *  receives each funding entry's resolved `CoinValue`, reads\n *  `fullCoinType`, and passes the projected entries to\n *  `applyCrossCuttingFunding`. The funding pass never sees the raw\n *  member refs — keeps the strategy dispatch logic\n *  substrate-name-blind. */\nexport interface ProjectedFundingEntry {\n\treadonly coin: string;\n\treadonly fullCoinType: string;\n\treadonly amount: bigint;\n}\n\nexport type ProjectedFunding = ReadonlyArray<ProjectedFundingEntry>;\n\n/** Outcome marker carried on each `applied` entry — distinguishes a\n *  faucet/strategy call that actually moved funds (`'funded'`) from\n *  the short-circuit case where the existing balance already covered\n *  the request (`'already-satisfied'`). Downstream projection turns\n *  this into the `AccountRegistryFundingEntry.status` column so a\n *  no-faucet-call entry is not mislabeled as \"funded\".\n *\n *  Distilled-doc invariant: the `applied` projection must reflect\n *  what actually happened — not the user's request shape. */\nexport type AppliedFundingOutcome = 'funded' | 'already-satisfied';\n\nexport interface AppliedFundingEntry extends ProjectedFundingEntry {\n\treadonly outcome: AppliedFundingOutcome;\n}\n\nexport type AppliedFunding = ReadonlyArray<AppliedFundingEntry>;\n\nexport interface AccountFundingResult {\n\treadonly requested: ProjectedFunding;\n\treadonly applied: AppliedFunding;\n}\n\n/** Account-bus projection of the substrate funding-request contract\n *  (`contracts/funding-strategy.ts`). Narrows the contract's generic\n *  account-handle slot to the concrete `AccountValue` this plugin\n *  publishes; strategies inside account or in sibling plugins\n *  (coin/walrus/deepbook) see the real handle type without re-stating\n *  the substrate shape. */\nexport type AccountFundingRequest = ContractAccountFundingRequest<AccountValue>;\n\n/** Account-bus projection of the substrate strategy contract. The\n *  generic account-handle slot is fixed to `AccountValue` so\n *  contributing plugins receive a typed account handle. */\nexport type AccountFundingStrategy<E = unknown> = ContractAccountFundingStrategy<E, AccountValue>;\n\nexport interface FundingBalanceReader {\n\treadonly readBalance: (args: {\n\t\treadonly owner: string;\n\t\treadonly coinType: string;\n\t}) => Effect.Effect<bigint | null>;\n}\n\n/** Sentinel brand identifying the test-only no-op reader. Surfaced as\n *  a separate `readonly skipFinalityWait?: true` discriminator on\n *  `NULL_BALANCE_READER` so the funding pass can short-circuit the\n *  finality wait deterministically WITHOUT exhausting the bounded\n *  poll schedule. Production readers MUST NOT set this. */\ninterface NullBalanceReader extends FundingBalanceReader {\n\treadonly skipFinalityWait: true;\n}\n\n/** Test-only no-op balance reader.\n *\n *  Production callers (`account/service.ts`) build a real reader from\n *  the live SDK via `makeFundingBalanceReader`; the funding pass\n *  REQUIRES a reader so the post-faucet finality wait is load-bearing\n *  on real wire calls. Tests that don't model the read/poll loop pass\n *  this sentinel to explicitly opt OUT of the wait — the absence of\n *  this opt-out previously hid as a silent `Effect.void` short-circuit\n *  on any production caller that forgot to wire the reader. */\nexport const NULL_BALANCE_READER: FundingBalanceReader = {\n\treadBalance: () => Effect.succeed(null),\n\tskipFinalityWait: true,\n} as NullBalanceReader;\n\nconst skipsFinalityWait = (reader: FundingBalanceReader): boolean =>\n\t(reader as NullBalanceReader).skipFinalityWait === true;\n\n/** The canonical builtin SUI coin type. Used by the funding dispatch\n *  to route SUI entries to the faucet strategy (same key as the\n *  default-funding pass), and by everything that needs to detect\n *  \"this is the protocol-defined SUI\". Mirrors `BUILTIN_COINS.sui`\n *  in the coin plugin. */\nexport const SUI_FULL_COIN_TYPE = '0x2::sui::SUI' as const;\n\n/** Default funding amount for ephemeral accounts — 1 SUI in MIST.\n *  Documented at the user-facing factory so a bare `account('alice')`\n *  is predictable. */\nexport const DEFAULT_EPHEMERAL_FUND_MIST = 1_000_000_000n;\n\n/** Inputs the default-funding pass needs from the per-acquire ctx. */\nexport interface FundEphemeralDefaultArgs {\n\treadonly accountName: string;\n\treadonly address: string;\n\treadonly amountMist: bigint;\n\treadonly suiMode: 'local' | 'local-rpc' | 'live' | 'fork';\n\t/** Resolved sui chain id — the substrate-level chain identity used\n\t *  to compose the faucet strategy's capability key\n\t *  (`faucet:request:<chainId>`). */\n\treadonly chainId: ChainId;\n\t/** Loud-by-default auto-promotion event (called on fork before the\n\t *  strategy is invoked, per the architecture's \"no silent surprises\"\n\t *  principle). */\n\treadonly emitAutoPromotionEvent: () => Effect.Effect<void>;\n\t/** Substrate lease-broker handle — funding opens a fresh scope per\n\t *  wire call and acquires the per-address lease so concurrent wire\n\t *  calls for the same address serialize at the chain boundary. */\n\treadonly broker: LeaseBroker;\n\t/** Required. Production callers build this from the SDK via\n\t *  `makeFundingBalanceReader`; tests that don't model the read/poll\n\t *  loop opt out explicitly with `NULL_BALANCE_READER`. The previous\n\t *  optional shape allowed a silent `Effect.void` short-circuit on\n\t *  the finality wait when callers forgot to wire it. */\n\treadonly balanceReader: FundingBalanceReader;\n}\n\n/** Outcome of `fundEphemeralDefault`. `'skipped'` covers the\n *  zero-amount no-op; `'already-satisfied'` covers the pre-existing-\n *  balance short-circuit (no faucet call); `'funded'` covers the\n *  successful wire path. Callers project this into the `applied`\n *  shape so the `funded`-vs-`already-satisfied` distinction survives\n *  to the registry projection. */\nexport type FundEphemeralDefaultOutcome = 'funded' | 'already-satisfied' | 'skipped';\n\n/** Apply the default-funding pass for an ephemeral account.\n *\n *  Wiring: yields `StrategyRegistryService` (the R-channel from\n *  Round 7), looks up the faucet strategy registered by the Sui\n *  plugin under `faucet:request:<chainId>`, and dispatches a request\n *  through it. Per-address serialization is enforced by acquiring\n *  the address lock around the wire call. */\nexport const fundEphemeralDefault = (\n\tparts: FundEphemeralDefaultArgs,\n): Effect.Effect<FundEphemeralDefaultOutcome, AccountAcquireError, StrategyRegistryService> =>\n\tEffect.gen(function* () {\n\t\t// LOUD AUTO-PROMOTION — distilled-doc invariant: \"no silent\n\t\t// surprises\". Emit BEFORE attempting the dispatch so the user\n\t\t// sees the path change even if the wire call subsequently\n\t\t// fails. On fork we surface the path-change event; on non-fork\n\t\t// the strategy registered by Sui IS the canonical default and\n\t\t// no auto-promotion is needed.\n\t\tif (parts.suiMode === 'fork') {\n\t\t\tyield* parts.emitAutoPromotionEvent();\n\t\t}\n\n\t\t// Zero-amount short-circuit — both real strategies treat zero\n\t\t// as a no-op; doing the same here avoids a registry lookup +\n\t\t// span emission for the legitimately-no-funding case.\n\t\tif (parts.amountMist <= 0n) {\n\t\t\treturn 'skipped' as const;\n\t\t}\n\n\t\tyield* setCurrentPluginPhase('checking SUI funding');\n\t\tconst existingBalance = yield* readExistingBalance(parts.balanceReader, {\n\t\t\towner: parts.address,\n\t\t\tcoinType: SUI_FULL_COIN_TYPE,\n\t\t});\n\t\tif (existingBalance !== null && existingBalance >= parts.amountMist) {\n\t\t\treturn 'already-satisfied' as const;\n\t\t}\n\n\t\t// Look up the strategy. Sui auto-registers a faucet strategy\n\t\t// on non-fork modes; fork-mode strategies have to be supplied\n\t\t// by the faucet plugin (with the fork admin closed over). If\n\t\t// nothing is registered we surface a typed, actionable error\n\t\t// pointing at the architecture's contract: ephemeral-on-non-\n\t\t// fork without a Faucet MUST fail at acquire time.\n\t\tconst strategy = yield* chainKeyedStrategyFor<FaucetStrategy>(\n\t\t\tFAUCET_CAPABILITY_KEY_PREFIX,\n\t\t\tparts.chainId,\n\t\t).pipe(\n\t\t\tEffect.catchTag('StrategyNotFoundError', (err) =>\n\t\t\t\tEffect.fail(\n\t\t\t\t\taccountAcquireError({\n\t\t\t\t\t\tphase: 'fund-default',\n\t\t\t\t\t\taccountName: parts.accountName,\n\t\t\t\t\t\tvariant: 'ephemeral',\n\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t`Account '${parts.accountName}': no faucet strategy registered for ` +\n\t\t\t\t\t\t\t`chain '${parts.chainId}' (sui mode=${parts.suiMode}). ` +\n\t\t\t\t\t\t\t`Registered keys: [${err.registeredKeys.join(', ')}].`,\n\t\t\t\t\t\thint:\n\t\t\t\t\t\t\tparts.suiMode === 'fork'\n\t\t\t\t\t\t\t\t? 'Fork networks have no HTTP faucet — compose a plugin that contributes defineFaucetStrategy(...) for this chain id.'\n\t\t\t\t\t\t\t\t: 'Ensure a sui() plugin with a faucet-bearing mode (local/live-testnet/live-devnet) is in the stack.',\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t\t),\n\t\t);\n\n\t\t// Per-address serialization around the wire call. The lease is\n\t\t// scope-bound and releases as soon as `request(...)` returns;\n\t\t// two concurrent funding requests for the same address — e.g.\n\t\t// ephemeral default + cross-cutting SUI top-up — interleave\n\t\t// deterministically via the broker's FIFO queue.\n\t\tconst wrapFaucetFailure = (cause: {\n\t\t\treadonly _tag: 'FaucetUnreachable' | 'FaucetExhausted' | 'FaucetBodyError';\n\t\t}) =>\n\t\t\tEffect.fail(\n\t\t\t\tfundingFailureError({\n\t\t\t\t\tphase: 'fund-default',\n\t\t\t\t\taccountName: parts.accountName,\n\t\t\t\t\tvariant: 'ephemeral',\n\t\t\t\t\tchainId: parts.chainId,\n\t\t\t\t\tcause,\n\t\t\t\t}),\n\t\t\t);\n\t\tyield* setCurrentPluginPhase('funding SUI');\n\t\tyield* withAddressLease(\n\t\t\tparts.broker,\n\t\t\tparts.accountName,\n\t\t\tparts.address,\n\t\t\tstrategy.request({ address: parts.address, amount: parts.amountMist }).pipe(\n\t\t\t\tEffect.catchTags({\n\t\t\t\t\tFaucetUnreachable: wrapFaucetFailure,\n\t\t\t\t\tFaucetExhausted: wrapFaucetFailure,\n\t\t\t\t\tFaucetBodyError: wrapFaucetFailure,\n\t\t\t\t}),\n\t\t\t),\n\t\t);\n\t\tyield* setCurrentPluginPhase('waiting for SUI funding settlement');\n\t\tyield* waitForBalanceAtLeast({\n\t\t\tbalanceReader: parts.balanceReader,\n\t\t\taccountName: parts.accountName,\n\t\t\tvariant: 'ephemeral',\n\t\t\tphase: 'fund-default',\n\t\t\towner: parts.address,\n\t\t\tcoinType: SUI_FULL_COIN_TYPE,\n\t\t\tcoinLabel: 'SUI',\n\t\t\tamount: parts.amountMist,\n\t\t});\n\n\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t[AccountSpans.name]: parts.accountName,\n\t\t\t[AccountSpans.address]: parts.address,\n\t\t\t[AccountSpans.fundAmountMist]: parts.amountMist.toString(),\n\t\t\t[SuiSpans.chain]: parts.chainId,\n\t\t\t[SuiSpans.mode]: parts.suiMode,\n\t\t});\n\t\treturn 'funded' as const;\n\t}).pipe(\n\t\tEffect.withSpan('devstack.plugin.account.fundEphemeralDefault', {\n\t\t\tattributes: {\n\t\t\t\t[AccountSpans.name]: parts.accountName,\n\t\t\t\t[AccountSpans.address]: parts.address,\n\t\t\t\t[SuiSpans.mode]: parts.suiMode,\n\t\t\t},\n\t\t}),\n\t);\n\n/** Inputs the cross-cutting funding pass needs from the per-acquire ctx.\n *\n *  `funding` is the PROJECTED shape — the acquire body in\n *  `account/index.ts` receives each user-supplied `CoinMember` as a\n *  resolved dependency and projects to `{fullCoinType, amount}` BEFORE\n *  invoking this pass. Keeps the dispatch logic substrate-name-blind. */\nexport interface ApplyCrossCuttingFundingArgs {\n\treadonly accountName: string;\n\treadonly address: string;\n\treadonly variant: AccountVariantKind;\n\treadonly account: AccountValue;\n\treadonly funding: ProjectedFunding;\n\treadonly chainId: ChainId;\n\treadonly broker: LeaseBroker;\n\t/** Required. See `FundEphemeralDefaultArgs.balanceReader`. */\n\treadonly balanceReader: FundingBalanceReader;\n}\n\n/** Apply the cross-cutting funding pass. Variant-agnostic — runs for\n *  every variant once the keypair / impersonation slot is bound and\n *  the address is known.\n *\n *  Distilled-doc invariant: \"Optional Faucet is a noop, not an\n *  error\". Absence of a registered strategy for a non-SUI coin's\n *  capability key short-circuits silently (the entry is dropped).\n *  Explicit SUI entries are stricter: they route through the active\n *  chain's faucet strategy and fail loudly when none is registered.\n *  This lets a test author opt INTO arbitrary-coin funding without\n *  forcing every surrounding network to satisfy every custom coin.\n *\n *  Wiring: SUI entries (`fullCoinType === '0x2::sui::SUI'`) dispatch\n *  through `faucet:request:<chainId>` (same key as the default pass);\n *  other entries dispatch through `coinType:<fullCoinType>` keys\n *  contributed by the respective Coin/Walrus/Seal plugins.\n *\n *  Entries are processed serially. Strategies that use the resolved\n *  account signer acquire the per-address lease internally; strategies\n *  that do not are wrapped by this dispatcher. */\nexport const applyCrossCuttingFunding = (\n\tparts: ApplyCrossCuttingFundingArgs,\n): Effect.Effect<AppliedFunding, AccountAcquireError, StrategyRegistryService> =>\n\tEffect.gen(function* () {\n\t\tif (parts.funding.length === 0) {\n\t\t\treturn [];\n\t\t}\n\t\tconst registry = yield* StrategyRegistryService;\n\t\tconst applied: AppliedFundingEntry[] = [];\n\n\t\tfor (const entry of parts.funding) {\n\t\t\tif (entry.amount <= 0n) {\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\tyield* setCurrentPluginPhase(`checking ${entry.coin} funding`);\n\t\t\tconst existingBalance = yield* readExistingBalance(parts.balanceReader, {\n\t\t\t\towner: parts.address,\n\t\t\t\tcoinType: entry.fullCoinType,\n\t\t\t});\n\t\t\tif (existingBalance !== null && existingBalance >= entry.amount) {\n\t\t\t\tapplied.push({ ...entry, outcome: 'already-satisfied' });\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\t// Resolve the capability key from the projected coin type.\n\t\t\t//\n\t\t\t// SUI (`0x2::sui::SUI`) → reuse the faucet-request key so the\n\t\t\t// SUI auto-registered strategy fields the request (this\n\t\t\t// matches the default-funding pass and keeps the registry\n\t\t\t// surface uniform). The faucet contract takes\n\t\t\t// `{address, amount}` only (it never sees the resolved\n\t\t\t// account handle) — kept as its own helper so the typing is\n\t\t\t// honest at the dispatch site.\n\t\t\t//\n\t\t\t// Everything else → `coinType:<fullCoinType>` so user-defined\n\t\t\t// Coin plugins (and Walrus's exchange strategy keyed by\n\t\t\t// `coinType:<WAL fullCoinType>`) can contribute strategies\n\t\t\t// declaratively. These satisfy `AccountFundingStrategy` and\n\t\t\t// receive the resolved account handle in the request.\n\t\t\tconst isSui = entry.fullCoinType === SUI_FULL_COIN_TYPE;\n\t\t\tconst coinKey = `coinType:${entry.fullCoinType}` as const;\n\t\t\tconst key = isSui ? (`faucet:request:${parts.chainId}` as const) : coinKey;\n\n\t\t\tconst wrapCrossCuttingFailure = (cause: unknown): AccountAcquireError =>\n\t\t\t\tfundingFailureError({\n\t\t\t\t\tphase: 'fund-cross-cutting',\n\t\t\t\t\taccountName: parts.accountName,\n\t\t\t\t\tvariant: parts.variant,\n\t\t\t\t\tkey,\n\t\t\t\t\tamount: entry.amount,\n\t\t\t\t\tcause,\n\t\t\t\t});\n\n\t\t\tlet request: Effect.Effect<void, AccountAcquireError>;\n\t\t\tlet usesAccountSigner = false;\n\t\t\tif (isSui) {\n\t\t\t\t// FaucetStrategy lookup — request shape is `{address, amount}`.\n\t\t\t\t// Architecture-distilled: explicit SUI entries are the\n\t\t\t\t// normal gas faucet path, so missing strategy is\n\t\t\t\t// actionable and loud (no silent drop).\n\t\t\t\tconst strategy = yield* chainKeyedStrategyFor<FaucetStrategy>(\n\t\t\t\t\tFAUCET_CAPABILITY_KEY_PREFIX,\n\t\t\t\t\tparts.chainId,\n\t\t\t\t).pipe(\n\t\t\t\t\tEffect.catchTag('StrategyNotFoundError', (err) =>\n\t\t\t\t\t\tEffect.fail(\n\t\t\t\t\t\t\taccountAcquireError({\n\t\t\t\t\t\t\t\tphase: 'fund-cross-cutting',\n\t\t\t\t\t\t\t\taccountName: parts.accountName,\n\t\t\t\t\t\t\t\tvariant: parts.variant,\n\t\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t\t`Account '${parts.accountName}': no SUI funding strategy registered ` +\n\t\t\t\t\t\t\t\t\t`for chain '${parts.chainId}'. Registered keys: [${err.registeredKeys.join(', ')}].`,\n\t\t\t\t\t\t\t\tcause: err,\n\t\t\t\t\t\t\t\thint: 'Ensure a sui() plugin with a faucet-bearing mode (local/live-testnet/live-devnet) is in the stack.',\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\trequest = strategy\n\t\t\t\t\t.request({ address: parts.address, amount: entry.amount })\n\t\t\t\t\t.pipe(Effect.mapError(wrapCrossCuttingFailure));\n\t\t\t} else {\n\t\t\t\t// AccountFundingStrategy lookup — request shape is\n\t\t\t\t// `{address, amount, account}`. Architecture-distilled:\n\t\t\t\t// optional-faucet-is-noop for arbitrary coins — missing\n\t\t\t\t// registration short-circuits silently rather than\n\t\t\t\t// failing the acquire.\n\t\t\t\tconst strategy = yield* registry\n\t\t\t\t\t.get<typeof coinKey, AccountFundingStrategy>(coinKey)\n\t\t\t\t\t.pipe(\n\t\t\t\t\t\tEffect.catchTag('StrategyNotFoundError', () =>\n\t\t\t\t\t\t\tEffect.succeed(null as AccountFundingStrategy | null),\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\tif (strategy === null) {\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tusesAccountSigner = strategy.usesAccountSigner === true;\n\t\t\t\trequest = strategy\n\t\t\t\t\t.request({ address: parts.address, amount: entry.amount, account: parts.account })\n\t\t\t\t\t.pipe(Effect.mapError(wrapCrossCuttingFailure));\n\t\t\t}\n\n\t\t\tyield* setCurrentPluginPhase(`funding ${entry.coin}`);\n\t\t\tyield* usesAccountSigner\n\t\t\t\t? request\n\t\t\t\t: withAddressLease(parts.broker, parts.accountName, parts.address, request);\n\t\t\tyield* setCurrentPluginPhase(`waiting for ${entry.coin} funding settlement`);\n\t\t\tyield* waitForBalanceAtLeast({\n\t\t\t\tbalanceReader: parts.balanceReader,\n\t\t\t\taccountName: parts.accountName,\n\t\t\t\tvariant: parts.variant,\n\t\t\t\tphase: 'fund-cross-cutting',\n\t\t\t\towner: parts.address,\n\t\t\t\tcoinType: entry.fullCoinType,\n\t\t\t\tcoinLabel: entry.coin,\n\t\t\t\tamount: entry.amount,\n\t\t\t});\n\t\t\tapplied.push({ ...entry, outcome: 'funded' });\n\t\t}\n\n\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t[AccountSpans.name]: parts.accountName,\n\t\t\t[AccountSpans.address]: parts.address,\n\t\t\t[AccountSpans.fundCrossCuttingCount]: parts.funding.length,\n\t\t\t[SuiSpans.chain]: parts.chainId,\n\t\t});\n\t\treturn applied;\n\t}).pipe(\n\t\tEffect.withSpan('devstack.plugin.account.applyCrossCuttingFunding', {\n\t\t\tattributes: {\n\t\t\t\t[AccountSpans.name]: parts.accountName,\n\t\t\t\t[AccountSpans.address]: parts.address,\n\t\t\t\t[AccountSpans.fundCrossCuttingEntries]: parts.funding.length,\n\t\t\t},\n\t\t}),\n\t);\n\nconst readExistingBalance = (\n\tbalanceReader: FundingBalanceReader,\n\targs: {\n\t\treadonly owner: string;\n\t\treadonly coinType: string;\n\t},\n): Effect.Effect<bigint | null> => balanceReader.readBalance(args);\n\nconst waitForBalanceAtLeast = (parts: {\n\treadonly balanceReader: FundingBalanceReader;\n\treadonly accountName: string;\n\treadonly variant: AccountVariantKind;\n\treadonly phase: 'fund-default' | 'fund-cross-cutting';\n\treadonly owner: string;\n\treadonly coinType: string;\n\treadonly coinLabel: string;\n\treadonly amount: bigint;\n}): Effect.Effect<void, AccountAcquireError> => {\n\tconst reader = parts.balanceReader;\n\t// Test-only opt-out — the `NULL_BALANCE_READER` sentinel explicitly\n\t// declares \"this caller doesn't model the read/poll loop\". Production\n\t// readers never set `skipFinalityWait`, so the wait stays load-bearing\n\t// on real wire calls.\n\tif (skipsFinalityWait(reader)) {\n\t\treturn Effect.void;\n\t}\n\treturn Effect.gen(function* () {\n\t\tconst read = readExistingBalance(reader, {\n\t\t\towner: parts.owner,\n\t\t\tcoinType: parts.coinType,\n\t\t});\n\t\tconst lastBalance = yield* read.pipe(\n\t\t\tEffect.repeat({\n\t\t\t\tschedule: makeBoundedSpacedSchedule(\n\t\t\t\t\tBALANCE_POLL_PROFILE.intervalMs,\n\t\t\t\t\tBALANCE_POLL_PROFILE.timeoutMs,\n\t\t\t\t),\n\t\t\t\tuntil: (balance) => balance !== null && balance >= parts.amount,\n\t\t\t}),\n\t\t);\n\t\tif (lastBalance !== null && lastBalance >= parts.amount) {\n\t\t\treturn;\n\t\t}\n\t\treturn yield* Effect.fail(\n\t\t\taccountAcquireError({\n\t\t\t\tphase: parts.phase,\n\t\t\t\taccountName: parts.accountName,\n\t\t\t\tvariant: parts.variant,\n\t\t\t\tmessage:\n\t\t\t\t\t`Account '${parts.accountName}': funding for ${parts.coinLabel} was accepted ` +\n\t\t\t\t\t`but balance did not reach ${parts.amount} before the settlement timeout ` +\n\t\t\t\t\t`(last=${lastBalance === null ? '<unavailable>' : lastBalance}).`,\n\t\t\t\thint:\n\t\t\t\t\t'The faucet or funding strategy returned before the funded coin became spendable. ' +\n\t\t\t\t\t'Check the funding strategy finality gate and Sui RPC health.',\n\t\t\t}),\n\t\t);\n\t});\n};\n"],"mappings":";;;;;;;;;;;;;;;AA4MA,MAAM,qBAAqB,WACzB,OAA6B,qBAAqB;;;;;;AAOpD,MAAa,qBAAqB;;;;AAKlC,MAAa,8BAA8B;;;;;;;;AA2C3C,MAAa,wBACZ,UAEA,OAAO,IAAI,aAAa;AAOvB,KAAI,MAAM,YAAY,OACrB,QAAO,MAAM,wBAAwB;AAMtC,KAAI,MAAM,cAAc,GACvB,QAAO;AAGR,QAAO,sBAAsB,uBAAuB;CACpD,MAAM,kBAAkB,OAAO,oBAAoB,MAAM,eAAe;EACvE,OAAO,MAAM;EACb,UAAU;EACV,CAAC;AACF,KAAI,oBAAoB,QAAQ,mBAAmB,MAAM,WACxD,QAAO;CASR,MAAM,WAAW,OAAO,sBACvB,8BACA,MAAM,QACN,CAAC,KACD,OAAO,SAAS,0BAA0B,QACzC,OAAO,KACN,oBAAoB;EACnB,OAAO;EACP,aAAa,MAAM;EACnB,SAAS;EACT,SACC,YAAY,MAAM,YAAY,8CACpB,MAAM,QAAQ,cAAc,MAAM,QAAQ,uBAC/B,IAAI,eAAe,KAAK,KAAK,CAAC;EACpD,MACC,MAAM,YAAY,SACf,uHACA;EACJ,CAAC,CACF,CACD,CACD;CAOD,MAAM,qBAAqB,UAG1B,OAAO,KACN,oBAAoB;EACnB,OAAO;EACP,aAAa,MAAM;EACnB,SAAS;EACT,SAAS,MAAM;EACf;EACA,CAAC,CACF;AACF,QAAO,sBAAsB,cAAc;AAC3C,QAAO,iBACN,MAAM,QACN,MAAM,aACN,MAAM,SACN,SAAS,QAAQ;EAAE,SAAS,MAAM;EAAS,QAAQ,MAAM;EAAY,CAAC,CAAC,KACtE,OAAO,UAAU;EAChB,mBAAmB;EACnB,iBAAiB;EACjB,iBAAiB;EACjB,CAAC,CACF,CACD;AACD,QAAO,sBAAsB,qCAAqC;AAClE,QAAO,sBAAsB;EAC5B,eAAe,MAAM;EACrB,aAAa,MAAM;EACnB,SAAS;EACT,OAAO;EACP,OAAO,MAAM;EACb,UAAU;EACV,WAAW;EACX,QAAQ,MAAM;EACd,CAAC;AAEF,QAAO,OAAO,oBAAoB;GAChC,aAAa,OAAO,MAAM;GAC1B,aAAa,UAAU,MAAM;GAC7B,aAAa,iBAAiB,MAAM,WAAW,UAAU;GACzD,SAAS,QAAQ,MAAM;GACvB,SAAS,OAAO,MAAM;EACvB,CAAC;AACF,QAAO;EACN,CAAC,KACF,OAAO,SAAS,gDAAgD,EAC/D,YAAY;EACV,aAAa,OAAO,MAAM;EAC1B,aAAa,UAAU,MAAM;EAC7B,SAAS,OAAO,MAAM;CACvB,EACD,CAAC,CACF;;;;;;;;;;;;;;;;;;;;;AAwCF,MAAa,4BACZ,UAEA,OAAO,IAAI,aAAa;AACvB,KAAI,MAAM,QAAQ,WAAW,EAC5B,QAAO,EAAE;CAEV,MAAM,WAAW,OAAO;CACxB,MAAM,UAAiC,EAAE;AAEzC,MAAK,MAAM,SAAS,MAAM,SAAS;AAClC,MAAI,MAAM,UAAU,GACnB;AAGD,SAAO,sBAAsB,YAAY,MAAM,KAAK,UAAU;EAC9D,MAAM,kBAAkB,OAAO,oBAAoB,MAAM,eAAe;GACvE,OAAO,MAAM;GACb,UAAU,MAAM;GAChB,CAAC;AACF,MAAI,oBAAoB,QAAQ,mBAAmB,MAAM,QAAQ;AAChE,WAAQ,KAAK;IAAE,GAAG;IAAO,SAAS;IAAqB,CAAC;AACxD;;EAkBD,MAAM,QAAQ,MAAM,iBAAiB;EACrC,MAAM,UAAU,YAAY,MAAM;EAClC,MAAM,MAAM,QAAS,kBAAkB,MAAM,YAAsB;EAEnE,MAAM,2BAA2B,UAChC,oBAAoB;GACnB,OAAO;GACP,aAAa,MAAM;GACnB,SAAS,MAAM;GACf;GACA,QAAQ,MAAM;GACd;GACA,CAAC;EAEH,IAAI;EACJ,IAAI,oBAAoB;AACxB,MAAI,MAwBH,YAAU,OAnBc,sBACvB,8BACA,MAAM,QACN,CAAC,KACD,OAAO,SAAS,0BAA0B,QACzC,OAAO,KACN,oBAAoB;GACnB,OAAO;GACP,aAAa,MAAM;GACnB,SAAS,MAAM;GACf,SACC,YAAY,MAAM,YAAY,mDAChB,MAAM,QAAQ,uBAAuB,IAAI,eAAe,KAAK,KAAK,CAAC;GAClF,OAAO;GACP,MAAM;GACN,CAAC,CACF,CACD,CACD,EAEC,QAAQ;GAAE,SAAS,MAAM;GAAS,QAAQ,MAAM;GAAQ,CAAC,CACzD,KAAK,OAAO,SAAS,wBAAwB,CAAC;OAC1C;GAMN,MAAM,WAAW,OAAO,SACtB,IAA4C,QAAQ,CACpD,KACA,OAAO,SAAS,+BACf,OAAO,QAAQ,KAAsC,CACrD,CACD;AACF,OAAI,aAAa,KAChB;AAED,uBAAoB,SAAS,sBAAsB;AACnD,aAAU,SACR,QAAQ;IAAE,SAAS,MAAM;IAAS,QAAQ,MAAM;IAAQ,SAAS,MAAM;IAAS,CAAC,CACjF,KAAK,OAAO,SAAS,wBAAwB,CAAC;;AAGjD,SAAO,sBAAsB,WAAW,MAAM,OAAO;AACrD,SAAO,oBACJ,UACA,iBAAiB,MAAM,QAAQ,MAAM,aAAa,MAAM,SAAS,QAAQ;AAC5E,SAAO,sBAAsB,eAAe,MAAM,KAAK,qBAAqB;AAC5E,SAAO,sBAAsB;GAC5B,eAAe,MAAM;GACrB,aAAa,MAAM;GACnB,SAAS,MAAM;GACf,OAAO;GACP,OAAO,MAAM;GACb,UAAU,MAAM;GAChB,WAAW,MAAM;GACjB,QAAQ,MAAM;GACd,CAAC;AACF,UAAQ,KAAK;GAAE,GAAG;GAAO,SAAS;GAAU,CAAC;;AAG9C,QAAO,OAAO,oBAAoB;GAChC,aAAa,OAAO,MAAM;GAC1B,aAAa,UAAU,MAAM;GAC7B,aAAa,wBAAwB,MAAM,QAAQ;GACnD,SAAS,QAAQ,MAAM;EACxB,CAAC;AACF,QAAO;EACN,CAAC,KACF,OAAO,SAAS,oDAAoD,EACnE,YAAY;EACV,aAAa,OAAO,MAAM;EAC1B,aAAa,UAAU,MAAM;EAC7B,aAAa,0BAA0B,MAAM,QAAQ;CACtD,EACD,CAAC,CACF;AAEF,MAAM,uBACL,eACA,SAIkC,cAAc,YAAY,KAAK;AAElE,MAAM,yBAAyB,UASiB;CAC/C,MAAM,SAAS,MAAM;AAKrB,KAAI,kBAAkB,OAAO,CAC5B,QAAO,OAAO;AAEf,QAAO,OAAO,IAAI,aAAa;EAK9B,MAAM,cAAc,OAJP,oBAAoB,QAAQ;GACxC,OAAO,MAAM;GACb,UAAU,MAAM;GAChB,CAC8B,CAAC,KAC/B,OAAO,OAAO;GACb,UAAU,0BACT,qBAAqB,YACrB,qBAAqB,UACrB;GACD,QAAQ,YAAY,YAAY,QAAQ,WAAW,MAAM;GACzD,CAAC,CACF;AACD,MAAI,gBAAgB,QAAQ,eAAe,MAAM,OAChD;AAED,SAAO,OAAO,OAAO,KACpB,oBAAoB;GACnB,OAAO,MAAM;GACb,aAAa,MAAM;GACnB,SAAS,MAAM;GACf,SACC,YAAY,MAAM,YAAY,iBAAiB,MAAM,UAAU,0CAClC,MAAM,OAAO,uCACjC,gBAAgB,OAAO,kBAAkB,YAAY;GAC/D,MACC;GAED,CAAC,CACF;GACA"}
+{"version":3,"file":"funding.mjs","names":[],"sources":["../../../src/plugins/account/funding.ts"],"sourcesContent":["// Account plugin — funding logic.\n//\n// Two funding paths converge here:\n//\n//   1. **Default funding** — applies to the `ephemeral` variant only.\n//      On non-fork networks: faucet POST via the SUI HTTP strategy\n//      auto-registered by Faucet (see 11-faucet.md). On fork networks:\n//      \"pay from a seed via impersonation\" because forks have no\n//      faucet. The auto-promotion is LOUD by default per the\n//      architecture's \"no silent surprises\" principle — we emit a\n//      `log.appended` event the first time a stack hits this path.\n//\n//   2. **Cross-cutting funding** — declared per-account via\n//      `AccountOptions.funding`. Applies to every variant.\n//      Dispatched through the ambient strategy registry. Missing\n//      strategy for non-SUI coins ⇒ silent noop (architecture-\n//      mandated test-ergonomics contract, distilled-doc invariant:\n//      \"Optional Faucet is a noop, not an error\"). Explicit SUI\n//      entries use the SUI faucet strategy and fail loudly when no\n//      faucet-bearing strategy exists.\n//\n// Distilled-doc invariant: per-address serialization — concurrent\n// funding requests for the same address MUST serialize. We share the\n// substrate `LeaseBroker` handle from `service.ts` and open a fresh\n// scope per wire call so the lease releases the moment that call\n// returns. Each cross-cutting iteration is its own scope: the broker\n// is non-reentrant by design, so a hypothetical loop holding a single\n// lease across iterations would deadlock the second one.\n\nimport { Effect } from 'effect';\n\nimport { FAUCET_CAPABILITY_KEY_PREFIX, type FaucetStrategy } from '../faucet/index.ts';\nimport {\n\tchainKeyedStrategyFor,\n\tStrategyRegistryService,\n} from '../../substrate/runtime/strategy-registry/index.ts';\nimport type { AnyResourceRef, ResourceRef } from '../../api/define-plugin.ts';\nimport type { LeaseBroker } from '../../substrate/runtime/lease-broker/index.ts';\nimport type {\n\tAccountFundingRequest as ContractAccountFundingRequest,\n\tAccountFundingStrategy as ContractAccountFundingStrategy,\n} from '../../contracts/funding-strategy.ts';\nimport { setCurrentPluginPhase } from '../../substrate/runtime/current-plugin.ts';\nimport {\n\tBALANCE_POLL_PROFILE,\n\tmakeBoundedSpacedSchedule,\n} from '../../substrate/runtime/retry-policy.ts';\n\nimport {\n\taccountAcquireError,\n\ttype AccountAcquireError,\n\ttype AccountVariantKind,\n} from './errors.ts';\nimport { withAddressLease } from './lease.ts';\nimport { fundingFailureError } from '../internal/funding-failure-error.ts';\nimport type { AccountValue } from './service.ts';\n\n// `CoinResourceId` is the literal-typed resource id the coin plugin\n// publishes. Inlined here as `coin:${Sym}` so this file does NOT\n// cross-import the coin plugin — the substrate's compose-time dedup\n// works by string equality on the resource id, and the coin plugin's\n// `coinResourceId` constructor produces the same shape. This is the\n// per-Task-A \"inline the literal type alias\" decision (the literal\n// pattern is the contract; promoting it to a substrate type would\n// be more ceremony than the single string template warrants).\ntype CoinResourceId<Sym extends string> = `coin:${Sym}`;\n\n/** Direct resource ref shape for a coin upstream. The user passes the\n *  result of `coin.fromPackage(...)` / `coin.known(...)` /\n *  `coin.builtin(...)` — NOT a bare string or discriminator. Generic\n *  over the literal symbol so the account's dependency tuple preserves\n *  each per-coin resource id (`coin:managed_coin/managed_coin`,\n *  `coin:wal`, ...).\n *\n *  Architecture (Direct Member Refs): cross-plugin references at the\n *  user-facing surface are plugin/resource refs directly — no opaque\n *  tag or string discriminator vocabulary. */\nexport interface AccountFundingCoinValue {\n\treadonly fullCoinType: string;\n\treadonly symbol?: string;\n}\n\nexport type CoinMember<Sym extends string = string> = ResourceRef<\n\tCoinResourceId<Sym>,\n\tAccountFundingCoinValue\n>;\n\n/** Optional dependency edge for the plugin that contributes the\n *  funding strategy. Coin refs force the coin metadata edge; `via`\n *  forces the strategy-provider edge (e.g. a known DeepBook\n *  deployment that contributes `coinType:<DEEP>`). */\nexport type CrossCuttingFundingProvider = AnyResourceRef | readonly AnyResourceRef[];\n\n/** Built-in SUI funding entry. This uses the same account funding\n *  list as arbitrary coins but avoids requiring `coin.builtin('sui')`\n *  for the normal SUI faucet path. */\nexport interface SuiFundingEntry {\n\treadonly coin: 'sui';\n\treadonly amount: number | bigint;\n}\n\n/** A single cross-cutting funding entry. `coin` is a direct member ref\n *  (the value returned by `coin.fromPackage(...)` etc.) — the account plugin\n *  threads it through `dependsOn` so the substrate's dep graph forces\n *  the publishing / discovery edge to land before funding.\n *\n *  Distilled-doc invariant (\"Strict upstream declaration\"): coin\n *  references cited by Account must force a dep edge. `via` is the\n *  same contract for the strategy contributor that can satisfy the\n *  funding request. */\nexport interface CrossCuttingFundingEntry<M extends CoinMember = CoinMember> {\n\treadonly coin: M;\n\treadonly amount: bigint;\n\treadonly via?: CrossCuttingFundingProvider;\n}\n\nexport type AccountFundingEntry<M extends CoinMember = CoinMember> =\n\t| SuiFundingEntry\n\t| CrossCuttingFundingEntry<M>;\n\nexport type AccountFunding = ReadonlyArray<AccountFundingEntry>;\n\n/** Internal projected shape — the acquire body in `account/index.ts`\n *  receives each funding entry's resolved `CoinValue`, reads\n *  `fullCoinType`, and passes the projected entries to\n *  `applyCrossCuttingFunding`. The funding pass never sees the raw\n *  member refs — keeps the strategy dispatch logic\n *  substrate-name-blind. */\nexport interface ProjectedFundingEntry {\n\treadonly coin: string;\n\treadonly fullCoinType: string;\n\treadonly amount: bigint;\n}\n\nexport type ProjectedFunding = ReadonlyArray<ProjectedFundingEntry>;\n\n/** Outcome marker carried on each `applied` entry — distinguishes a\n *  faucet/strategy call that actually moved funds (`'funded'`) from\n *  the short-circuit case where the existing balance already covered\n *  the request (`'already-satisfied'`). Downstream projection turns\n *  this into the `AccountRegistryFundingEntry.status` column so a\n *  no-faucet-call entry is not mislabeled as \"funded\".\n *\n *  Distilled-doc invariant: the `applied` projection must reflect\n *  what actually happened — not the user's request shape. */\nexport type AppliedFundingOutcome = 'funded' | 'already-satisfied';\n\nexport interface AppliedFundingEntry extends ProjectedFundingEntry {\n\treadonly outcome: AppliedFundingOutcome;\n}\n\nexport type AppliedFunding = ReadonlyArray<AppliedFundingEntry>;\n\nexport interface AccountFundingResult {\n\treadonly requested: ProjectedFunding;\n\treadonly applied: AppliedFunding;\n}\n\n/** Account-bus projection of the substrate funding-request contract\n *  (`contracts/funding-strategy.ts`). Narrows the contract's generic\n *  account-handle slot to the concrete `AccountValue` this plugin\n *  publishes; strategies inside account or in sibling plugins\n *  (coin/walrus/deepbook) see the real handle type without re-stating\n *  the substrate shape. */\nexport type AccountFundingRequest = ContractAccountFundingRequest<AccountValue>;\n\n/** Account-bus projection of the substrate strategy contract. The\n *  generic account-handle slot is fixed to `AccountValue` so\n *  contributing plugins receive a typed account handle. */\nexport type AccountFundingStrategy<E = unknown> = ContractAccountFundingStrategy<E, AccountValue>;\n\nexport interface FundingBalanceReader {\n\treadonly readBalance: (args: {\n\t\treadonly owner: string;\n\t\treadonly coinType: string;\n\t}) => Effect.Effect<bigint | null>;\n}\n\n/** Sentinel brand identifying the test-only no-op reader. Surfaced as\n *  a separate `readonly skipFinalityWait?: true` discriminator on\n *  `NULL_BALANCE_READER` so the funding pass can short-circuit the\n *  finality wait deterministically WITHOUT exhausting the bounded\n *  poll schedule. Production readers MUST NOT set this. */\ninterface NullBalanceReader extends FundingBalanceReader {\n\treadonly skipFinalityWait: true;\n}\n\n/** Test-only no-op balance reader.\n *\n *  Production callers (`account/service.ts`) build a real reader from\n *  the live SDK via `makeFundingBalanceReader`; the funding pass\n *  REQUIRES a reader so the post-faucet finality wait is load-bearing\n *  on real wire calls. Tests that don't model the read/poll loop pass\n *  this sentinel to explicitly opt OUT of the wait. Requiring an\n *  explicit reader means a production caller that forgets to wire one\n *  fails loudly rather than silently short-circuiting the wait. */\nexport const NULL_BALANCE_READER: FundingBalanceReader = {\n\treadBalance: () => Effect.succeed(null),\n\tskipFinalityWait: true,\n} as NullBalanceReader;\n\nconst skipsFinalityWait = (reader: FundingBalanceReader): boolean =>\n\t(reader as NullBalanceReader).skipFinalityWait === true;\n\n/** The canonical builtin SUI coin type. Used by the funding dispatch\n *  to route SUI entries to the faucet strategy (same key as the\n *  default-funding pass), and by everything that needs to detect\n *  \"this is the protocol-defined SUI\". Mirrors `BUILTIN_COINS.sui`\n *  in the coin plugin. */\nexport const SUI_FULL_COIN_TYPE = '0x2::sui::SUI' as const;\n\n/** Default funding amount for ephemeral accounts — 1 SUI in MIST.\n *  Documented at the user-facing factory so a bare `account('alice')`\n *  is predictable. */\nexport const DEFAULT_EPHEMERAL_FUND_MIST = 1_000_000_000n;\n\n/** Inputs the default-funding pass needs from the per-acquire ctx. */\nexport interface FundEphemeralDefaultArgs {\n\treadonly accountName: string;\n\treadonly address: string;\n\treadonly amountMist: bigint;\n\treadonly suiMode: 'local' | 'local-rpc' | 'live' | 'fork';\n\t/** Resolved sui chain id — the substrate-level chain identity used\n\t *  to compose the faucet strategy's capability key\n\t *  (`faucet:request:<chainId>`). */\n\treadonly chainId: string;\n\t/** Loud-by-default auto-promotion event (called on fork before the\n\t *  strategy is invoked, per the architecture's \"no silent surprises\"\n\t *  principle). */\n\treadonly emitAutoPromotionEvent: () => Effect.Effect<void>;\n\t/** Substrate lease-broker handle — funding opens a fresh scope per\n\t *  wire call and acquires the per-address lease so concurrent wire\n\t *  calls for the same address serialize at the chain boundary. */\n\treadonly broker: LeaseBroker;\n\t/** Required. Production callers build this from the SDK via\n\t *  `makeFundingBalanceReader`; tests that don't model the read/poll\n\t *  loop opt out explicitly with `NULL_BALANCE_READER`. The previous\n\t *  optional shape allowed a silent `Effect.void` short-circuit on\n\t *  the finality wait when callers forgot to wire it. */\n\treadonly balanceReader: FundingBalanceReader;\n}\n\n/** Outcome of `fundEphemeralDefault`. `'skipped'` covers the\n *  zero-amount no-op; `'already-satisfied'` covers the pre-existing-\n *  balance short-circuit (no faucet call); `'funded'` covers the\n *  successful wire path. Callers project this into the `applied`\n *  shape so the `funded`-vs-`already-satisfied` distinction survives\n *  to the registry projection. */\nexport type FundEphemeralDefaultOutcome = 'funded' | 'already-satisfied' | 'skipped';\n\n/** Apply the default-funding pass for an ephemeral account.\n *\n *  Wiring: yields `StrategyRegistryService` (the R-channel from\n *  Round 7), looks up the faucet strategy registered by the Sui\n *  plugin under `faucet:request:<chainId>`, and dispatches a request\n *  through it. Per-address serialization is enforced by acquiring\n *  the address lock around the wire call. */\nexport const fundEphemeralDefault = (\n\tparts: FundEphemeralDefaultArgs,\n): Effect.Effect<FundEphemeralDefaultOutcome, AccountAcquireError, StrategyRegistryService> =>\n\tEffect.gen(function* () {\n\t\t// LOUD AUTO-PROMOTION — distilled-doc invariant: \"no silent\n\t\t// surprises\". Emit BEFORE attempting the dispatch so the user\n\t\t// sees the path change even if the wire call subsequently\n\t\t// fails. On fork we surface the path-change event; on non-fork\n\t\t// the strategy registered by Sui IS the canonical default and\n\t\t// no auto-promotion is needed.\n\t\tif (parts.suiMode === 'fork') {\n\t\t\tyield* parts.emitAutoPromotionEvent();\n\t\t}\n\n\t\t// Zero-amount short-circuit — both real strategies treat zero\n\t\t// as a no-op; doing the same here avoids a registry lookup +\n\t\t// span emission for the legitimately-no-funding case.\n\t\tif (parts.amountMist <= 0n) {\n\t\t\treturn 'skipped' as const;\n\t\t}\n\n\t\tyield* setCurrentPluginPhase('checking SUI funding');\n\t\tconst existingBalance = yield* readExistingBalance(parts.balanceReader, {\n\t\t\towner: parts.address,\n\t\t\tcoinType: SUI_FULL_COIN_TYPE,\n\t\t});\n\t\tif (existingBalance !== null && existingBalance >= parts.amountMist) {\n\t\t\treturn 'already-satisfied' as const;\n\t\t}\n\n\t\t// Look up the strategy. Sui auto-registers a faucet strategy\n\t\t// on non-fork modes; fork-mode strategies have to be supplied\n\t\t// by the faucet plugin (with the fork admin closed over). If\n\t\t// nothing is registered we surface a typed, actionable error\n\t\t// pointing at the architecture's contract: ephemeral-on-non-\n\t\t// fork without a Faucet MUST fail at acquire time.\n\t\tconst strategy = yield* chainKeyedStrategyFor<FaucetStrategy>(\n\t\t\tFAUCET_CAPABILITY_KEY_PREFIX,\n\t\t\tparts.chainId,\n\t\t).pipe(\n\t\t\tEffect.catchTag('StrategyNotFoundError', (err) =>\n\t\t\t\tEffect.fail(\n\t\t\t\t\taccountAcquireError({\n\t\t\t\t\t\tphase: 'fund-default',\n\t\t\t\t\t\taccountName: parts.accountName,\n\t\t\t\t\t\tvariant: 'ephemeral',\n\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t`Account '${parts.accountName}': no faucet strategy registered for ` +\n\t\t\t\t\t\t\t`chain '${parts.chainId}' (sui mode=${parts.suiMode}). ` +\n\t\t\t\t\t\t\t`Registered keys: [${err.registeredKeys.join(', ')}].`,\n\t\t\t\t\t\thint:\n\t\t\t\t\t\t\tparts.suiMode === 'fork'\n\t\t\t\t\t\t\t\t? 'Fork networks have no HTTP faucet — compose a plugin that contributes defineFaucetStrategy(...) for this chain id.'\n\t\t\t\t\t\t\t\t: 'Ensure a sui() plugin with a faucet-bearing mode (local/live-testnet/live-devnet) is in the stack.',\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t\t),\n\t\t);\n\n\t\t// Per-address serialization around the wire call. The lease is\n\t\t// scope-bound and releases as soon as `request(...)` returns;\n\t\t// two concurrent funding requests for the same address — e.g.\n\t\t// ephemeral default + cross-cutting SUI top-up — interleave\n\t\t// deterministically via the broker's FIFO queue.\n\t\tconst wrapFaucetFailure = (cause: {\n\t\t\treadonly _tag: 'FaucetUnreachable' | 'FaucetExhausted' | 'FaucetBodyError';\n\t\t}) =>\n\t\t\tEffect.fail(\n\t\t\t\tfundingFailureError({\n\t\t\t\t\tphase: 'fund-default',\n\t\t\t\t\taccountName: parts.accountName,\n\t\t\t\t\tvariant: 'ephemeral',\n\t\t\t\t\tchainId: parts.chainId,\n\t\t\t\t\tcause,\n\t\t\t\t}),\n\t\t\t);\n\t\tyield* setCurrentPluginPhase('funding SUI');\n\t\tyield* withAddressLease(\n\t\t\tparts.broker,\n\t\t\tparts.accountName,\n\t\t\tparts.address,\n\t\t\tstrategy.request({ address: parts.address, amount: parts.amountMist }).pipe(\n\t\t\t\tEffect.catchTags({\n\t\t\t\t\tFaucetUnreachable: wrapFaucetFailure,\n\t\t\t\t\tFaucetExhausted: wrapFaucetFailure,\n\t\t\t\t\tFaucetBodyError: wrapFaucetFailure,\n\t\t\t\t}),\n\t\t\t),\n\t\t);\n\t\tyield* setCurrentPluginPhase('waiting for SUI funding settlement');\n\t\tyield* waitForBalanceAtLeast({\n\t\t\tbalanceReader: parts.balanceReader,\n\t\t\taccountName: parts.accountName,\n\t\t\tvariant: 'ephemeral',\n\t\t\tphase: 'fund-default',\n\t\t\towner: parts.address,\n\t\t\tcoinType: SUI_FULL_COIN_TYPE,\n\t\t\tcoinLabel: 'SUI',\n\t\t\tamount: parts.amountMist,\n\t\t});\n\n\t\treturn 'funded' as const;\n\t});\n\n/** Inputs the cross-cutting funding pass needs from the per-acquire ctx.\n *\n *  `funding` is the PROJECTED shape — the acquire body in\n *  `account/index.ts` receives each user-supplied `CoinMember` as a\n *  resolved dependency and projects to `{fullCoinType, amount}` BEFORE\n *  invoking this pass. Keeps the dispatch logic substrate-name-blind. */\nexport interface ApplyCrossCuttingFundingArgs {\n\treadonly accountName: string;\n\treadonly address: string;\n\treadonly variant: AccountVariantKind;\n\treadonly account: AccountValue;\n\treadonly funding: ProjectedFunding;\n\treadonly chainId: string;\n\treadonly broker: LeaseBroker;\n\t/** Required. See `FundEphemeralDefaultArgs.balanceReader`. */\n\treadonly balanceReader: FundingBalanceReader;\n}\n\n/** Apply the cross-cutting funding pass. Variant-agnostic — runs for\n *  every variant once the keypair / impersonation slot is bound and\n *  the address is known.\n *\n *  Distilled-doc invariant: \"Optional Faucet is a noop, not an\n *  error\". Absence of a registered strategy for a non-SUI coin's\n *  capability key short-circuits silently (the entry is dropped).\n *  Explicit SUI entries are stricter: they route through the active\n *  chain's faucet strategy and fail loudly when none is registered.\n *  This lets a test author opt INTO arbitrary-coin funding without\n *  forcing every surrounding network to satisfy every custom coin.\n *\n *  Wiring: SUI entries (`fullCoinType === '0x2::sui::SUI'`) dispatch\n *  through `faucet:request:<chainId>` (same key as the default pass);\n *  other entries dispatch through `coinType:<fullCoinType>` keys\n *  contributed by the respective Coin/Walrus/Seal plugins.\n *\n *  Entries are processed serially. Strategies that use the resolved\n *  account signer acquire the per-address lease internally; strategies\n *  that do not are wrapped by this dispatcher. */\nexport const applyCrossCuttingFunding = (\n\tparts: ApplyCrossCuttingFundingArgs,\n): Effect.Effect<AppliedFunding, AccountAcquireError, StrategyRegistryService> =>\n\tEffect.gen(function* () {\n\t\tif (parts.funding.length === 0) {\n\t\t\treturn [];\n\t\t}\n\t\tconst registry = yield* StrategyRegistryService;\n\t\tconst applied: AppliedFundingEntry[] = [];\n\n\t\tfor (const entry of parts.funding) {\n\t\t\tif (entry.amount <= 0n) {\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\tyield* setCurrentPluginPhase(`checking ${entry.coin} funding`);\n\t\t\tconst existingBalance = yield* readExistingBalance(parts.balanceReader, {\n\t\t\t\towner: parts.address,\n\t\t\t\tcoinType: entry.fullCoinType,\n\t\t\t});\n\t\t\tif (existingBalance !== null && existingBalance >= entry.amount) {\n\t\t\t\tapplied.push({ ...entry, outcome: 'already-satisfied' });\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\t// Resolve the capability key from the projected coin type.\n\t\t\t//\n\t\t\t// SUI (`0x2::sui::SUI`) → reuse the faucet-request key so the\n\t\t\t// SUI auto-registered strategy fields the request (this\n\t\t\t// matches the default-funding pass and keeps the registry\n\t\t\t// surface uniform). The faucet contract takes\n\t\t\t// `{address, amount}` only (it never sees the resolved\n\t\t\t// account handle) — kept as its own helper so the typing is\n\t\t\t// honest at the dispatch site.\n\t\t\t//\n\t\t\t// Everything else → `coinType:<fullCoinType>` so user-defined\n\t\t\t// Coin plugins (and Walrus's exchange strategy keyed by\n\t\t\t// `coinType:<WAL fullCoinType>`) can contribute strategies\n\t\t\t// declaratively. These satisfy `AccountFundingStrategy` and\n\t\t\t// receive the resolved account handle in the request.\n\t\t\tconst isSui = entry.fullCoinType === SUI_FULL_COIN_TYPE;\n\t\t\tconst coinKey = `coinType:${entry.fullCoinType}` as const;\n\t\t\tconst key = isSui ? (`faucet:request:${parts.chainId}` as const) : coinKey;\n\n\t\t\tconst wrapCrossCuttingFailure = (cause: unknown): AccountAcquireError =>\n\t\t\t\tfundingFailureError({\n\t\t\t\t\tphase: 'fund-cross-cutting',\n\t\t\t\t\taccountName: parts.accountName,\n\t\t\t\t\tvariant: parts.variant,\n\t\t\t\t\tkey,\n\t\t\t\t\tamount: entry.amount,\n\t\t\t\t\tcause,\n\t\t\t\t});\n\n\t\t\tlet request: Effect.Effect<void, AccountAcquireError>;\n\t\t\tlet usesAccountSigner = false;\n\t\t\tif (isSui) {\n\t\t\t\t// FaucetStrategy lookup — request shape is `{address, amount}`.\n\t\t\t\t// Architecture-distilled: explicit SUI entries are the\n\t\t\t\t// normal gas faucet path, so missing strategy is\n\t\t\t\t// actionable and loud (no silent drop).\n\t\t\t\tconst strategy = yield* chainKeyedStrategyFor<FaucetStrategy>(\n\t\t\t\t\tFAUCET_CAPABILITY_KEY_PREFIX,\n\t\t\t\t\tparts.chainId,\n\t\t\t\t).pipe(\n\t\t\t\t\tEffect.catchTag('StrategyNotFoundError', (err) =>\n\t\t\t\t\t\tEffect.fail(\n\t\t\t\t\t\t\taccountAcquireError({\n\t\t\t\t\t\t\t\tphase: 'fund-cross-cutting',\n\t\t\t\t\t\t\t\taccountName: parts.accountName,\n\t\t\t\t\t\t\t\tvariant: parts.variant,\n\t\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t\t`Account '${parts.accountName}': no SUI funding strategy registered ` +\n\t\t\t\t\t\t\t\t\t`for chain '${parts.chainId}'. Registered keys: [${err.registeredKeys.join(', ')}].`,\n\t\t\t\t\t\t\t\tcause: err,\n\t\t\t\t\t\t\t\thint: 'Ensure a sui() plugin with a faucet-bearing mode (local/live-testnet/live-devnet) is in the stack.',\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\trequest = strategy\n\t\t\t\t\t.request({ address: parts.address, amount: entry.amount })\n\t\t\t\t\t.pipe(Effect.mapError(wrapCrossCuttingFailure));\n\t\t\t} else {\n\t\t\t\t// AccountFundingStrategy lookup — request shape is\n\t\t\t\t// `{address, amount, account}`. Architecture-distilled:\n\t\t\t\t// optional-faucet-is-noop for arbitrary coins — missing\n\t\t\t\t// registration short-circuits silently rather than\n\t\t\t\t// failing the acquire.\n\t\t\t\tconst strategy = yield* registry\n\t\t\t\t\t.get<typeof coinKey, AccountFundingStrategy>(coinKey)\n\t\t\t\t\t.pipe(\n\t\t\t\t\t\tEffect.catchTag('StrategyNotFoundError', () =>\n\t\t\t\t\t\t\tEffect.succeed(null as AccountFundingStrategy | null),\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\tif (strategy === null) {\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tusesAccountSigner = strategy.usesAccountSigner === true;\n\t\t\t\trequest = strategy\n\t\t\t\t\t.request({ address: parts.address, amount: entry.amount, account: parts.account })\n\t\t\t\t\t.pipe(Effect.mapError(wrapCrossCuttingFailure));\n\t\t\t}\n\n\t\t\tyield* setCurrentPluginPhase(`funding ${entry.coin}`);\n\t\t\tyield* usesAccountSigner\n\t\t\t\t? request\n\t\t\t\t: withAddressLease(parts.broker, parts.accountName, parts.address, request);\n\t\t\tyield* setCurrentPluginPhase(`waiting for ${entry.coin} funding settlement`);\n\t\t\tyield* waitForBalanceAtLeast({\n\t\t\t\tbalanceReader: parts.balanceReader,\n\t\t\t\taccountName: parts.accountName,\n\t\t\t\tvariant: parts.variant,\n\t\t\t\tphase: 'fund-cross-cutting',\n\t\t\t\towner: parts.address,\n\t\t\t\tcoinType: entry.fullCoinType,\n\t\t\t\tcoinLabel: entry.coin,\n\t\t\t\tamount: entry.amount,\n\t\t\t});\n\t\t\tapplied.push({ ...entry, outcome: 'funded' });\n\t\t}\n\n\t\treturn applied;\n\t});\n\nconst readExistingBalance = (\n\tbalanceReader: FundingBalanceReader,\n\targs: {\n\t\treadonly owner: string;\n\t\treadonly coinType: string;\n\t},\n): Effect.Effect<bigint | null> => balanceReader.readBalance(args);\n\nconst waitForBalanceAtLeast = (parts: {\n\treadonly balanceReader: FundingBalanceReader;\n\treadonly accountName: string;\n\treadonly variant: AccountVariantKind;\n\treadonly phase: 'fund-default' | 'fund-cross-cutting';\n\treadonly owner: string;\n\treadonly coinType: string;\n\treadonly coinLabel: string;\n\treadonly amount: bigint;\n}): Effect.Effect<void, AccountAcquireError> => {\n\tconst reader = parts.balanceReader;\n\t// Test-only opt-out — the `NULL_BALANCE_READER` sentinel explicitly\n\t// declares \"this caller doesn't model the read/poll loop\". Production\n\t// readers never set `skipFinalityWait`, so the wait stays load-bearing\n\t// on real wire calls.\n\tif (skipsFinalityWait(reader)) {\n\t\treturn Effect.void;\n\t}\n\treturn Effect.gen(function* () {\n\t\tconst read = readExistingBalance(reader, {\n\t\t\towner: parts.owner,\n\t\t\tcoinType: parts.coinType,\n\t\t});\n\t\tconst lastBalance = yield* read.pipe(\n\t\t\tEffect.repeat({\n\t\t\t\tschedule: makeBoundedSpacedSchedule(\n\t\t\t\t\tBALANCE_POLL_PROFILE.intervalMs,\n\t\t\t\t\tBALANCE_POLL_PROFILE.timeoutMs,\n\t\t\t\t),\n\t\t\t\tuntil: (balance) => balance !== null && balance >= parts.amount,\n\t\t\t}),\n\t\t);\n\t\tif (lastBalance !== null && lastBalance >= parts.amount) {\n\t\t\treturn;\n\t\t}\n\t\treturn yield* Effect.fail(\n\t\t\taccountAcquireError({\n\t\t\t\tphase: parts.phase,\n\t\t\t\taccountName: parts.accountName,\n\t\t\t\tvariant: parts.variant,\n\t\t\t\tmessage:\n\t\t\t\t\t`Account '${parts.accountName}': funding for ${parts.coinLabel} was accepted ` +\n\t\t\t\t\t`but balance did not reach ${parts.amount} before the settlement timeout ` +\n\t\t\t\t\t`(last=${lastBalance === null ? '<unavailable>' : lastBalance}).`,\n\t\t\t\thint:\n\t\t\t\t\t'The faucet or funding strategy returned before the funded coin became spendable. ' +\n\t\t\t\t\t'Check the funding strategy finality gate and Sui RPC health.',\n\t\t\t}),\n\t\t);\n\t});\n};\n"],"mappings":";;;;;;;;;;;;AAyMA,MAAM,qBAAqB,WACzB,OAA6B,qBAAqB;;;;;;AAOpD,MAAa,qBAAqB;;;;AAKlC,MAAa,8BAA8B;;;;;;;;AA2C3C,MAAa,wBACZ,UAEA,OAAO,IAAI,aAAa;CAOvB,IAAI,MAAM,YAAY,QACrB,OAAO,MAAM,uBAAuB;CAMrC,IAAI,MAAM,cAAc,IACvB,OAAO;CAGR,OAAO,sBAAsB,sBAAsB;CACnD,MAAM,kBAAkB,OAAO,oBAAoB,MAAM,eAAe;EACvE,OAAO,MAAM;EACb,UAAU;CACX,CAAC;CACD,IAAI,oBAAoB,QAAQ,mBAAmB,MAAM,YACxD,OAAO;CASR,MAAM,WAAW,OAAO,sBACvB,8BACA,MAAM,OACP,CAAC,CAAC,KACD,OAAO,SAAS,0BAA0B,QACzC,OAAO,KACN,oBAAoB;EACnB,OAAO;EACP,aAAa,MAAM;EACnB,SAAS;EACT,SACC,YAAY,MAAM,YAAY,8CACpB,MAAM,QAAQ,cAAc,MAAM,QAAQ,uBAC/B,IAAI,eAAe,KAAK,IAAI,EAAE;EACpD,MACC,MAAM,YAAY,SACf,uHACA;CACL,CAAC,CACF,CACD,CACD;CAOA,MAAM,qBAAqB,UAG1B,OAAO,KACN,oBAAoB;EACnB,OAAO;EACP,aAAa,MAAM;EACnB,SAAS;EACT,SAAS,MAAM;EACf;CACD,CAAC,CACF;CACD,OAAO,sBAAsB,aAAa;CAC1C,OAAO,iBACN,MAAM,QACN,MAAM,aACN,MAAM,SACN,SAAS,QAAQ;EAAE,SAAS,MAAM;EAAS,QAAQ,MAAM;CAAW,CAAC,CAAC,CAAC,KACtE,OAAO,UAAU;EAChB,mBAAmB;EACnB,iBAAiB;EACjB,iBAAiB;CAClB,CAAC,CACF,CACD;CACA,OAAO,sBAAsB,oCAAoC;CACjE,OAAO,sBAAsB;EAC5B,eAAe,MAAM;EACrB,aAAa,MAAM;EACnB,SAAS;EACT,OAAO;EACP,OAAO,MAAM;EACb,UAAU;EACV,WAAW;EACX,QAAQ,MAAM;CACf,CAAC;CAED,OAAO;AACR,CAAC;;;;;;;;;;;;;;;;;;;;;AAwCF,MAAa,4BACZ,UAEA,OAAO,IAAI,aAAa;CACvB,IAAI,MAAM,QAAQ,WAAW,GAC5B,OAAO,CAAC;CAET,MAAM,WAAW,OAAO;CACxB,MAAM,UAAiC,CAAC;CAExC,KAAK,MAAM,SAAS,MAAM,SAAS;EAClC,IAAI,MAAM,UAAU,IACnB;EAGD,OAAO,sBAAsB,YAAY,MAAM,KAAK,SAAS;EAC7D,MAAM,kBAAkB,OAAO,oBAAoB,MAAM,eAAe;GACvE,OAAO,MAAM;GACb,UAAU,MAAM;EACjB,CAAC;EACD,IAAI,oBAAoB,QAAQ,mBAAmB,MAAM,QAAQ;GAChE,QAAQ,KAAK;IAAE,GAAG;IAAO,SAAS;GAAoB,CAAC;GACvD;EACD;EAiBA,MAAM,QAAQ,MAAM,iBAAiB;EACrC,MAAM,UAAU,YAAY,MAAM;EAClC,MAAM,MAAM,QAAS,kBAAkB,MAAM,YAAsB;EAEnE,MAAM,2BAA2B,UAChC,oBAAoB;GACnB,OAAO;GACP,aAAa,MAAM;GACnB,SAAS,MAAM;GACf;GACA,QAAQ,MAAM;GACd;EACD,CAAC;EAEF,IAAI;EACJ,IAAI,oBAAoB;EACxB,IAAI,OAwBH,WAAU,OAnBc,sBACvB,8BACA,MAAM,OACP,CAAC,CAAC,KACD,OAAO,SAAS,0BAA0B,QACzC,OAAO,KACN,oBAAoB;GACnB,OAAO;GACP,aAAa,MAAM;GACnB,SAAS,MAAM;GACf,SACC,YAAY,MAAM,YAAY,mDAChB,MAAM,QAAQ,uBAAuB,IAAI,eAAe,KAAK,IAAI,EAAE;GAClF,OAAO;GACP,MAAM;EACP,CAAC,CACF,CACD,CACD,EAAA,CAEE,QAAQ;GAAE,SAAS,MAAM;GAAS,QAAQ,MAAM;EAAO,CAAC,CAAC,CACzD,KAAK,OAAO,SAAS,uBAAuB,CAAC;OACzC;GAMN,MAAM,WAAW,OAAO,SACtB,IAA4C,OAAO,CAAC,CACpD,KACA,OAAO,SAAS,+BACf,OAAO,QAAQ,IAAqC,CACrD,CACD;GACD,IAAI,aAAa,MAChB;GAED,oBAAoB,SAAS,sBAAsB;GACnD,UAAU,SACR,QAAQ;IAAE,SAAS,MAAM;IAAS,QAAQ,MAAM;IAAQ,SAAS,MAAM;GAAQ,CAAC,CAAC,CACjF,KAAK,OAAO,SAAS,uBAAuB,CAAC;EAChD;EAEA,OAAO,sBAAsB,WAAW,MAAM,MAAM;EACpD,OAAO,oBACJ,UACA,iBAAiB,MAAM,QAAQ,MAAM,aAAa,MAAM,SAAS,OAAO;EAC3E,OAAO,sBAAsB,eAAe,MAAM,KAAK,oBAAoB;EAC3E,OAAO,sBAAsB;GAC5B,eAAe,MAAM;GACrB,aAAa,MAAM;GACnB,SAAS,MAAM;GACf,OAAO;GACP,OAAO,MAAM;GACb,UAAU,MAAM;GAChB,WAAW,MAAM;GACjB,QAAQ,MAAM;EACf,CAAC;EACD,QAAQ,KAAK;GAAE,GAAG;GAAO,SAAS;EAAS,CAAC;CAC7C;CAEA,OAAO;AACR,CAAC;AAEF,MAAM,uBACL,eACA,SAIkC,cAAc,YAAY,IAAI;AAEjE,MAAM,yBAAyB,UASiB;CAC/C,MAAM,SAAS,MAAM;CAKrB,IAAI,kBAAkB,MAAM,GAC3B,OAAO,OAAO;CAEf,OAAO,OAAO,IAAI,aAAa;EAK9B,MAAM,cAAc,OAJP,oBAAoB,QAAQ;GACxC,OAAO,MAAM;GACb,UAAU,MAAM;EACjB,CAC8B,CAAC,CAAC,KAC/B,OAAO,OAAO;GACb,UAAU,0BACT,qBAAqB,YACrB,qBAAqB,SACtB;GACA,QAAQ,YAAY,YAAY,QAAQ,WAAW,MAAM;EAC1D,CAAC,CACF;EACA,IAAI,gBAAgB,QAAQ,eAAe,MAAM,QAChD;EAED,OAAO,OAAO,OAAO,KACpB,oBAAoB;GACnB,OAAO,MAAM;GACb,aAAa,MAAM;GACnB,SAAS,MAAM;GACf,SACC,YAAY,MAAM,YAAY,iBAAiB,MAAM,UAAU,0CAClC,MAAM,OAAO,uCACjC,gBAAgB,OAAO,kBAAkB,YAAY;GAC/D,MACC;EAEF,CAAC,CACF;CACD,CAAC;AACF"}

package/dist/plugins/account/index.d.mts

@@ -1,14 +1,9 @@
-import { CodegenableDecl } from "../../contracts/codegenable.mjs";
-import { ProjectionDecl } from "../../contracts/projection.mjs";
-import { SnapshotableDecl } from "../../contracts/snapshotable.mjs";
-import { StrategyContributorDecl } from "../../contracts/strategy-contributor.mjs";
 import { AnyResourceRef, Plugin, ResourceRef } from "../../substrate/plugin.mjs";
-import { SuiClient } from "../sui/mode/shared.mjs";
 import { SuiOptions } from "../sui/mode/spec.mjs";
+import { SuiClient } from "../sui/mode/shared.mjs";
 import { AccountAcquireError, AccountAcquirePhase, AccountError, AccountSignError, AccountSignPhase, AccountVariantKind } from "./errors.mjs";
-import { AccountOptions, AccountValue, SignAndExecuteResult, TxResult } from "./service.mjs";
+import { AccountOptions, AccountSignerInput, AccountValue, SignAndExecuteResult, TxResult } from "./service.mjs";
 import { AccountFunding, AccountFundingCoinValue, AccountFundingEntry, AccountFundingRequest, AccountFundingResult, AccountFundingStrategy, AppliedFunding, AppliedFundingEntry, AppliedFundingOutcome, CoinMember, CrossCuttingFundingEntry, CrossCuttingFundingProvider, DEFAULT_EPHEMERAL_FUND_MIST, ProjectedFunding, ProjectedFundingEntry, SUI_FULL_COIN_TYPE, SuiFundingEntry } from "./funding.mjs";
-import { AccountRegistryEntry, AccountRegistryFunding } from "./registry.mjs";
 import { AccountBindings } from "./codegen.mjs";
 import { ResolvedKeypair, SignatureScheme } from "./keypair.mjs";
 import { SyntheticImpersonationSigner } from "./variants/impersonate.mjs";
@@ -46,7 +41,7 @@ type FundingEntryProviderDependencies<Entry> = Entry extends {
 type FundingProviderDependencies<Entries extends readonly unknown[]> = Entries extends readonly [infer Head, ...infer Tail] ? readonly [...FundingEntryProviderDependencies<Head>, ...FundingProviderDependencies<Tail>] : readonly [];
 declare const account: <const N extends string, const Funding extends AccountFunding = readonly []>(name: N, opts?: AccountOptions<Funding>) => Plugin<`account/${N}`, AccountValue, readonly [ResourceRef<"sui", SuiClient & {
   readonly mode: SuiOptions["mode"];
-}>, ...FundingCoinDependencies<Funding>, ...FundingProviderDependencies<Funding>], readonly [SnapshotableDecl, CodegenableDecl<`account/${N}`>, StrategyContributorDecl<`account:${N}`, AccountRegistryEntry>, ProjectionDecl]>;
+}>, ...FundingCoinDependencies<Funding>, ...FundingProviderDependencies<Funding>]>;
 //#endregion
 export { AccountResourceId, account };
 //# sourceMappingURL=index.d.mts.map

package/dist/plugins/account/index.mjs

@@ -1,19 +1,17 @@
-import { definePlugin, resource } from "../../substrate/plugin.mjs";
+import { definePlugin, resource, staticInputIdentity } from "../../substrate/plugin.mjs";
 import "../../api/define-plugin.mjs";
 import { IdentityContext, StackPathsService } from "../../substrate/runtime/paths.mjs";
-import { pluginErrorContributions } from "../../api/plugin-errors.mjs";
-import { SuiSpans } from "../sui/spans.mjs";
+import { PluginContext } from "../../substrate/plugin-ctx.mjs";
+import { SuiLogAttr } from "../sui/log-attrs.mjs";
 import { suiResource } from "../sui/index.mjs";
-import { AccountSpans } from "./spans.mjs";
 import { makeAccountCodegen } from "./codegen.mjs";
-import { ACCOUNT_ERROR_TAGS, accountAcquireError } from "./errors.mjs";
-import { SUI_FULL_COIN_TYPE } from "./funding.mjs";
+import { accountAcquireError } from "./errors.mjs";
+import { DEFAULT_EPHEMERAL_FUND_MIST, SUI_FULL_COIN_TYPE } from "./funding.mjs";
 import { makeAccountProjectionContribution, makeAccountRegistryContribution } from "./registry.mjs";
 import { makeAccountSnapshotable } from "./snapshot.mjs";
 import { acquireAccount, assertAccountName } from "./service.mjs";
 import { Effect } from "effect";
 //#region src/plugins/account/index.ts
-const accountErrorContributions = pluginErrorContributions(ACCOUNT_ERROR_TAGS);
 const accountResource = (name) => resource(`account/${name}`);
 const isCoinFundingEntry = (entry) => typeof entry === "object" && entry.coin !== "sui";
 const fundingProviders = (provider) => {
@@ -44,6 +42,47 @@ const fundingAmountToBigInt = (amount, accountName) => {
 	return Effect.succeed(BigInt(amount));
 };
 const coinLabelFor = (coin) => coin.symbol ?? coin.fullCoinType.split("::").at(-1) ?? coin.fullCoinType;
+const inputAmount = (amount) => amount.toString();
+const inputFundingProviderIds = (provider) => fundingProviders(provider).map((ref) => ref.id).sort((a, b) => a.localeCompare(b));
+const inputFundingIdentityFor = (entry) => {
+	if (entry.coin === "sui") return {
+		coin: "sui",
+		amountMist: inputAmount(entry.amount)
+	};
+	const via = inputFundingProviderIds(entry.via);
+	return {
+		coin: entry.coin.id,
+		amountMist: entry.amount.toString(),
+		...via.length === 0 ? {} : { via }
+	};
+};
+const accountFundingInputIdentity = (opts, fundingEntries) => {
+	const explicit = fundingEntries.map(inputFundingIdentityFor);
+	if (opts.kind === "ephemeral" && opts.funding === void 0) return [{
+		coin: "sui",
+		amountMist: DEFAULT_EPHEMERAL_FUND_MIST.toString()
+	}, ...explicit];
+	return explicit;
+};
+const accountVariantInputIdentity = (opts) => {
+	switch (opts.kind) {
+		case "ephemeral": return { kind: "ephemeral" };
+		case "impersonate": return {
+			kind: "impersonate",
+			address: opts.address
+		};
+		case "signer": return {
+			kind: "signer",
+			address: opts.addressOverride ?? opts.signer.toSuiAddress()
+		};
+	}
+};
+const accountInputIdentity = (opts, fundingEntries) => ({
+	plugin: "account",
+	name: opts.name,
+	variant: accountVariantInputIdentity(opts),
+	funding: accountFundingInputIdentity(opts, fundingEntries)
+});
 const account = (name, opts) => {
 	assertAccountName(name);
 	const opts2 = opts === void 0 ? {
@@ -68,7 +107,9 @@ const account = (name, opts) => {
 		dependsOn: dependencies,
 		role: "task",
 		section: "account",
+		inputIdentity: staticInputIdentity(accountInputIdentity(opts2, fundingEntryList)),
 		start: (deps) => Effect.gen(function* () {
+			const ctx = yield* PluginContext;
 			const [sui, ...resolvedDeps] = deps;
 			const resolvedCoinValues = resolvedDeps.slice(0, coinFundingEntries.length);
 			const identity = yield* IdentityContext;
@@ -94,10 +135,10 @@ const account = (name, opts) => {
 				});
 			}
 			const projectedFunding = projectedFundingMutable;
-			return yield* acquireAccount(opts2, {
+			const resolved = yield* acquireAccount(opts2, {
 				sui: {
 					mode: sui.mode,
-					chain: sui.chain,
+					chainId: sui.chainId,
 					sdk: sui.sdk,
 					fork: sui.fork
 				},
@@ -105,16 +146,13 @@ const account = (name, opts) => {
 				app: identity.app,
 				stack: identity.stack,
 				emitAutoPromotionEvent: () => Effect.logWarning("account funding auto-promoted for fork mode").pipe(Effect.annotateLogs({
-					[AccountSpans.name]: name,
-					[AccountSpans.fundingFrom]: "faucet",
-					[AccountSpans.fundingTo]: "pay-from-seed-via-impersonate",
-					[SuiSpans.mode]: "fork"
+					"account.name": name,
+					"account.funding.from": "faucet",
+					"account.funding.to": "pay-from-seed-via-impersonate",
+					[SuiLogAttr.mode]: "fork"
 				})),
 				projectedFunding
 			});
-		}),
-		errorContributions: accountErrorContributions,
-		capabilities: ({ value: resolved, runtime: acquireCtx2 }) => {
 			const realEntry = {
 				name,
 				address: resolved.address,
@@ -122,27 +160,25 @@ const account = (name, opts) => {
 				source: resolved.source,
 				funding: fundingProjectionForResult(resolved.funding)
 			};
-			const bindings = {
+			ctx.snapshotExtra(makeAccountSnapshotable({
+				accountName: name,
+				variant: opts2.kind,
+				app: identity.app,
+				stack: identity.stack
+			}));
+			ctx.codegen(makeAccountCodegen({
 				name,
-				address: resolved.address,
-				scheme: resolved.scheme,
-				source: resolved.source
-			};
-			return [
-				makeAccountSnapshotable({
-					accountName: name,
-					variant: opts2.kind,
-					app: acquireCtx2.identity.app,
-					stack: acquireCtx2.identity.stack
-				}),
-				makeAccountCodegen({
+				resolved: {
 					name,
-					resolved: bindings
-				}),
-				makeAccountRegistryContribution(realEntry),
-				makeAccountProjectionContribution(realEntry)
-			];
-		}
+					address: resolved.address,
+					scheme: resolved.scheme,
+					source: resolved.source
+				}
+			}));
+			ctx.provides(makeAccountRegistryContribution(realEntry));
+			ctx.publish(makeAccountProjectionContribution(realEntry));
+			return resolved;
+		})
 	});
 };
 /** @internal — exported only for the projection regression test

package/dist/plugins/account/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../src/plugins/account/index.ts"],"sourcesContent":["// Account plugin — barrel + `account(name, opts?)` factory.\n//\n// Architecture (12-account.md): Account is the named-identity layer\n// for devstack. It acquires a keypair (or impersonation slot), funds\n// it (default + cross-cutting), registers `{name, address}`, and\n// publishes a per-account resolved value via a unique resource id.\n//\n// User-facing factory shape:\n//\n//   account('alice')                                  // default ephemeral\n//   account('alice', { kind: 'ephemeral', funding: [{ coin: 'sui', amount: 5_000_000_000n }] })\n//   account('alice', { kind: 'keystore', path: '~/.sui/keystore', aliasOrAddress: 'alice' })\n//   account('alice', { kind: 'env',      key: 'ALICE_PRIVATE_KEY' })\n//   account('alice', { kind: 'inline',   privateKey: 'suiprivkey1...' })\n//   account('alice', { kind: 'signer',   signer: hardwareWallet })\n//   account('alice', { kind: 'impersonate', address: '0xabc...' })\n//\n// **Bare-form default**: `account('alice')` is shorthand for\n//\n//   { kind: 'ephemeral' } plus default SUI funding.\n//\n// Distilled-doc invariant (12-account.md \"Make the bare-form auto-\n// promotion to fork-impersonate funding discoverable\"): on fork-\n// runtime Sui, the default-funding pass internally promotes from\n// \"faucet POST\" to \"pay-from-seed-via-impersonate\" because no\n// faucet exists on a fork. The promotion is LOUD by default — we\n// emit a `log.appended` event the first time the promotion fires\n// (see `funding.ts`).\n//\n// The plugin emits THREE capability decls + an error-tag contribution:\n//\n//   1. Snapshotable        — secret-material subtree (ephemeral only).\n//   2. Codegenable         — `account-map` bindings (name → address).\n//   3. StrategyContributor — per-stack `account:<name>` registry entry.\n//\n// Plus `errorContributions: [{ errorTags: ACCOUNT_ERROR_TAGS }]` —\n// harvested by the supervisor into the FormatterRegistry so the\n// cascade formatter renders account-tagged failures with the right\n// taxonomy header.\n\nimport { Effect } from 'effect';\n\nimport { definePlugin, resource, type AnyResourceRef } from '../../api/define-plugin.ts';\nimport { pluginErrorContributions } from '../../api/plugin-errors.ts';\nimport { IdentityContext, StackPathsService } from '../../substrate/runtime/paths.ts';\nimport { suiResource, SuiSpans } from '../sui/index.ts';\n\nimport { AccountSpans } from './spans.ts';\n\nimport { makeAccountCodegen, type AccountBindings } from './codegen.ts';\nimport { ACCOUNT_ERROR_TAGS, accountAcquireError, type AccountAcquireError } from './errors.ts';\nimport {\n\tSUI_FULL_COIN_TYPE,\n\ttype AccountFunding,\n\ttype AccountFundingEntry,\n\ttype AccountFundingResult,\n\ttype CrossCuttingFundingEntry,\n\ttype CrossCuttingFundingProvider,\n\ttype CoinMember,\n\ttype ProjectedFundingEntry,\n} from './funding.ts';\nimport {\n\tmakeAccountProjectionContribution,\n\tmakeAccountRegistryContribution,\n\ttype AccountRegistryEntry,\n\ttype AccountRegistryFunding,\n} from './registry.ts';\nimport { makeAccountSnapshotable } from './snapshot.ts';\nimport {\n\tacquireAccount,\n\tassertAccountName,\n\ttype AccountAcquireContext,\n\ttype AccountOptions,\n\ttype ResolvedAccountOptions,\n\ttype AccountValue,\n} from './service.ts';\n\nconst accountErrorContributions = pluginErrorContributions(ACCOUNT_ERROR_TAGS);\n\n// ---------------------------------------------------------------------------\n// Resource construction\n// ---------------------------------------------------------------------------\n\n/** Per-account-instance resource. The substrate's resource id MUST be unique\n *  across the stack — we encode the account name as a literal-typed\n *  template literal so the compiler catches duplicate-name composes\n *  at the `defineDevstack` call site.\n *\n *  Distilled-doc invariant: resource id flows into the on-disk path, the\n *  manifest key, container labels, and generated TypeScript exports —\n *  the identifier-safe name validation (in `service.ts`) protects\n *  those call sites. */\nexport type AccountResourceId<Name extends string> = `account/${Name}`;\n\nconst accountResource = <Name extends string>(name: Name) =>\n\tresource<AccountResourceId<Name>, AccountValue>(`account/${name}` as AccountResourceId<Name>);\n\n// ---------------------------------------------------------------------------\n// User-facing factory\n// ---------------------------------------------------------------------------\n\n/** Construct the account plugin instance.\n *\n *  Variants — typed at the API boundary via the discriminated\n *  `AccountOptions` union. The factory's second arg is OPTIONAL —\n *  omitting it yields the bare-form default (ephemeral + default\n *  funding). Passing a non-matching `kind:` is a compile error\n *  thanks to the union's discriminator.\n *\n *  Distilled-doc invariant: the name is validated at the FACTORY\n *  boundary (not just at acquire time) so a typo surfaces\n *  immediately, not at runtime. */\ntype FundingCoinDependencies<Entries extends readonly unknown[]> = Entries extends readonly [\n\tinfer Head,\n\t...infer Tail,\n]\n\t? Head extends { readonly coin: infer Coin }\n\t\t? Coin extends CoinMember\n\t\t\t? readonly [Coin, ...FundingCoinDependencies<Tail>]\n\t\t\t: FundingCoinDependencies<Tail>\n\t\t: FundingCoinDependencies<Tail>\n\t: readonly [];\n\ntype FundingProviderDependenciesFor<Provider> = Provider extends readonly AnyResourceRef[]\n\t? Provider\n\t: Provider extends AnyResourceRef\n\t\t? readonly [Provider]\n\t\t: readonly [];\n\ntype FundingEntryProviderDependencies<Entry> = Entry extends { readonly coin: CoinMember }\n\t? 'via' extends keyof Entry\n\t\t? Entry extends { readonly via: infer Provider }\n\t\t\t? FundingProviderDependenciesFor<Provider>\n\t\t\t: readonly []\n\t\t: readonly []\n\t: readonly [];\n\ntype FundingProviderDependencies<Entries extends readonly unknown[]> = Entries extends readonly [\n\tinfer Head,\n\t...infer Tail,\n]\n\t? readonly [...FundingEntryProviderDependencies<Head>, ...FundingProviderDependencies<Tail>]\n\t: readonly [];\n\ntype AccountDependencyMembers<Funding extends AccountFunding> = readonly [\n\ttypeof suiResource,\n\t...FundingCoinDependencies<Funding>,\n\t...FundingProviderDependencies<Funding>,\n];\n\nconst isCoinFundingEntry = (entry: AccountFundingEntry): entry is CrossCuttingFundingEntry =>\n\ttypeof entry === 'object' && entry.coin !== 'sui';\n\nconst fundingProviders = (\n\tprovider: CrossCuttingFundingProvider | undefined,\n): ReadonlyArray<AnyResourceRef> => {\n\tif (provider === undefined) return [];\n\treturn Array.isArray(provider)\n\t\t? (provider as ReadonlyArray<AnyResourceRef>)\n\t\t: [provider as AnyResourceRef];\n};\n\n/** Validate a SUI funding amount and project it to bigint MIST.\n *  Returns a typed-error Effect so a bad amount surfaces as\n *  `AccountAcquireError(phase: 'validate-funding')` on the failure\n *  channel — NOT a synchronous throw lifted to a defect when called\n *  from inside the acquire body's `Effect.gen`. */\nconst fundingAmountToBigInt = (\n\tamount: number | bigint,\n\taccountName: string,\n): Effect.Effect<bigint, AccountAcquireError> => {\n\tif (typeof amount === 'bigint') {\n\t\tif (amount < 0n) {\n\t\t\treturn Effect.fail(\n\t\t\t\taccountAcquireError({\n\t\t\t\t\tphase: 'validate-funding',\n\t\t\t\t\taccountName,\n\t\t\t\t\tvariant: 'ephemeral',\n\t\t\t\t\tmessage: `Account '${accountName}': SUI funding amount must be a non-negative integer in MIST (got ${amount}).`,\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\t\treturn Effect.succeed(amount);\n\t}\n\tif (!Number.isSafeInteger(amount) || amount < 0) {\n\t\treturn Effect.fail(\n\t\t\taccountAcquireError({\n\t\t\t\tphase: 'validate-funding',\n\t\t\t\taccountName,\n\t\t\t\tvariant: 'ephemeral',\n\t\t\t\tmessage: `Account '${accountName}': SUI funding amount must be a non-negative safe integer in MIST (got ${amount}).`,\n\t\t\t}),\n\t\t);\n\t}\n\treturn Effect.succeed(BigInt(amount));\n};\n\nconst coinLabelFor = (coin: { readonly fullCoinType: string; readonly symbol?: string }): string =>\n\tcoin.symbol ?? coin.fullCoinType.split('::').at(-1) ?? coin.fullCoinType;\n\nexport const account = <const N extends string, const Funding extends AccountFunding = readonly []>(\n\tname: N,\n\topts?: AccountOptions<Funding>,\n) => {\n\tassertAccountName(name);\n\n\t// Normalize bare-form to ephemeral default. The user-facing\n\t// `AccountOptions` union does not include \"kind absent\" — we\n\t// inject the default here so the rest of the body sees a\n\t// fully-discriminated value.\n\tconst opts2: ResolvedAccountOptions =\n\t\topts === undefined\n\t\t\t? { kind: 'ephemeral', name }\n\t\t\t: ({ ...opts, name } as ResolvedAccountOptions);\n\n\tconst accountRef = accountResource(name);\n\n\t// Pull the funding resource tuple out of opts (may be undefined for\n\t// the bare form / variants without funding). The tuple preserves\n\t// plugin-valued refs when the caller passed coin plugins, so\n\t// recursive stack composition can include those publishers.\n\tconst fundingEntries = (opts?.funding ?? []) as unknown as Funding;\n\tconst fundingEntryList = fundingEntries as AccountFunding;\n\tconst coinFundingEntries = fundingEntryList.filter(isCoinFundingEntry);\n\tconst fundingMembers = coinFundingEntries.map((e) => e.coin);\n\tconst strategyProviderMembers = coinFundingEntries.flatMap((entry) =>\n\t\tfundingProviders(entry.via),\n\t);\n\tconst dependencies = [\n\t\tsuiResource,\n\t\t...fundingMembers,\n\t\t...strategyProviderMembers,\n\t] as unknown as AccountDependencyMembers<Funding>;\n\n\treturn definePlugin({\n\t\tid: accountRef.id,\n\t\tdependsOn: dependencies,\n\t\t// Account is a value-producer (no long-lived server / container);\n\t\t// tasks acquire their value, publish contributions, then reach\n\t\t// `done`.\n\t\trole: 'task',\n\t\tsection: 'account',\n\t\tstart: (deps) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst [sui, ...resolvedDeps] = deps;\n\t\t\t\tconst resolvedCoinValues = resolvedDeps.slice(\n\t\t\t\t\t0,\n\t\t\t\t\tcoinFundingEntries.length,\n\t\t\t\t) as ReadonlyArray<{\n\t\t\t\t\treadonly fullCoinType: string;\n\t\t\t\t\treadonly symbol?: string;\n\t\t\t\t}>;\n\t\t\t\t// Identity + on-disk runtime root come from the\n\t\t\t\t// supervisor-provided substrate context.\n\t\t\t\tconst identity = yield* IdentityContext;\n\t\t\t\tconst paths = yield* StackPathsService;\n\n\t\t\t\t// Project each funding dependency value to a\n\t\t\t\t// `{fullCoinType, amount}` projection. Dependency order\n\t\t\t\t// mirrors `fundingEntries`, after the hard Sui upstream.\n\t\t\t\t// SUI amount validation lives on the failure channel so a\n\t\t\t\t// negative / non-integer amount surfaces as a typed\n\t\t\t\t// `AccountAcquireError(phase: 'validate-funding')` instead\n\t\t\t\t// of a defect (the old sync-throw lifted to a defect when\n\t\t\t\t// run inside this `Effect.gen`).\n\t\t\t\tlet coinIndex = 0;\n\t\t\t\tconst projectedFundingMutable: ProjectedFundingEntry[] = [];\n\t\t\t\tfor (const entry of fundingEntryList) {\n\t\t\t\t\tif (entry.coin === 'sui') {\n\t\t\t\t\t\tconst amount = yield* fundingAmountToBigInt(entry.amount, name);\n\t\t\t\t\t\tprojectedFundingMutable.push({\n\t\t\t\t\t\t\tcoin: 'SUI',\n\t\t\t\t\t\t\tfullCoinType: SUI_FULL_COIN_TYPE,\n\t\t\t\t\t\t\tamount,\n\t\t\t\t\t\t});\n\t\t\t\t\t\tcontinue;\n\t\t\t\t\t}\n\t\t\t\t\tconst resolvedCoin = resolvedCoinValues[coinIndex]!;\n\t\t\t\t\tcoinIndex += 1;\n\t\t\t\t\tprojectedFundingMutable.push({\n\t\t\t\t\t\tcoin: coinLabelFor(resolvedCoin),\n\t\t\t\t\t\tfullCoinType: resolvedCoin.fullCoinType,\n\t\t\t\t\t\tamount: entry.amount,\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t\tconst projectedFunding: ReadonlyArray<ProjectedFundingEntry> = projectedFundingMutable;\n\n\t\t\t\tconst acquireCtx: AccountAcquireContext = {\n\t\t\t\t\tsui: {\n\t\t\t\t\t\tmode: sui.mode,\n\t\t\t\t\t\tchain: sui.chain,\n\t\t\t\t\t\tsdk: sui.sdk,\n\t\t\t\t\t\tfork: sui.fork,\n\t\t\t\t\t},\n\t\t\t\t\truntimeRoot: paths.stackRoot,\n\t\t\t\t\tapp: identity.app,\n\t\t\t\t\tstack: identity.stack,\n\t\t\t\t\temitAutoPromotionEvent: () =>\n\t\t\t\t\t\tEffect.logWarning('account funding auto-promoted for fork mode').pipe(\n\t\t\t\t\t\t\tEffect.annotateLogs({\n\t\t\t\t\t\t\t\t[AccountSpans.name]: name,\n\t\t\t\t\t\t\t\t[AccountSpans.fundingFrom]: 'faucet',\n\t\t\t\t\t\t\t\t[AccountSpans.fundingTo]: 'pay-from-seed-via-impersonate',\n\t\t\t\t\t\t\t\t[SuiSpans.mode]: 'fork',\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t),\n\t\t\t\t\tprojectedFunding,\n\t\t\t\t};\n\t\t\t\treturn yield* acquireAccount(opts2, acquireCtx);\n\t\t\t}),\n\t\t// Dynamic capability factory — receives the resolved\n\t\t// `AccountValue` + acquire context AFTER `acquire` succeeds.\n\t\t// Lets snapshot + codegen + registry decls reference the\n\t\t// REAL address (and identity app/stack) — the static form\n\t\t// would force placeholder values for fields only known at\n\t\t// acquire time.\n\t\terrorContributions: accountErrorContributions,\n\t\tcapabilities: ({ value: resolved, runtime: acquireCtx2 }) => {\n\t\t\tconst realEntry: AccountRegistryEntry = {\n\t\t\t\tname,\n\t\t\t\taddress: resolved.address,\n\t\t\t\tscheme: resolved.scheme,\n\t\t\t\tsource: resolved.source,\n\t\t\t\tfunding: fundingProjectionForResult(resolved.funding),\n\t\t\t};\n\t\t\tconst bindings: AccountBindings = {\n\t\t\t\tname,\n\t\t\t\taddress: resolved.address,\n\t\t\t\tscheme: resolved.scheme,\n\t\t\t\tsource: resolved.source,\n\t\t\t};\n\t\t\tconst snapshot = makeAccountSnapshotable({\n\t\t\t\taccountName: name,\n\t\t\t\tvariant: opts2.kind,\n\t\t\t\tapp: acquireCtx2.identity.app,\n\t\t\t\tstack: acquireCtx2.identity.stack,\n\t\t\t});\n\t\t\tconst codegen = makeAccountCodegen<N>({ name, resolved: bindings });\n\t\t\tconst registry = makeAccountRegistryContribution<N>(\n\t\t\t\trealEntry as AccountRegistryEntry & { readonly name: N },\n\t\t\t);\n\t\t\tconst projection = makeAccountProjectionContribution<N>(\n\t\t\t\trealEntry as AccountRegistryEntry & { readonly name: N },\n\t\t\t);\n\t\t\treturn [snapshot, codegen, registry, projection] as const;\n\t\t},\n\t});\n};\n\n/** @internal — exported only for the projection regression test\n *  (`test/plugins/account/funding-projection.test.ts`). Projects the runtime\n *  `AccountFundingResult` (requested + applied) into the registry's\n *  per-row funded/already-satisfied/skipped status. */\nexport const fundingProjectionForResult = (\n\tfunding: AccountFundingResult,\n): AccountRegistryFunding => {\n\tif (funding.requested.length === 0) {\n\t\treturn { status: 'skipped', balanceMist: null, requestedMist: null, entries: [] };\n\t}\n\n\t// Positional outcome consume so the projection can distinguish a\n\t// real faucet call (`funded`) from the pre-existing-balance\n\t// short-circuit (`already-satisfied`). `applied` is an\n\t// order-preserving SUBSEQUENCE of `requested`:\n\t// `applyCrossCuttingFunding` (and the default-funding pass) iterate\n\t// `requested` in order and only push a processed entry onto\n\t// `applied`, dropping zero-amount and no-strategy entries. So we\n\t// walk a cursor through `applied` and adopt its outcome for the\n\t// matching requested row by (fullCoinType, amount) — a keyed Map\n\t// would collapse duplicate (coin, amount) entries and mislabel the\n\t// genuinely-funded first row as `already-satisfied`. An entry the\n\t// funding pass never reached (zero-amount, or absent from `applied`)\n\t// does not match the cursor and projects as `skipped` without\n\t// advancing it.\n\tlet appliedCursor = 0;\n\tconst entries = funding.requested.map((entry) => {\n\t\tconst candidate = funding.applied[appliedCursor];\n\t\tconst matches =\n\t\t\tcandidate !== undefined &&\n\t\t\tcandidate.fullCoinType === entry.fullCoinType &&\n\t\t\tcandidate.amount === entry.amount;\n\t\tconst outcome = matches ? candidate.outcome : undefined;\n\t\tif (matches) {\n\t\t\tappliedCursor += 1;\n\t\t}\n\t\treturn {\n\t\t\tcoin: entry.coin,\n\t\t\tfullCoinType: entry.fullCoinType,\n\t\t\tamount: entry.amount.toString(),\n\t\t\tstatus:\n\t\t\t\toutcome === 'funded'\n\t\t\t\t\t? ('funded' as const)\n\t\t\t\t\t: outcome === 'already-satisfied'\n\t\t\t\t\t\t? ('already-satisfied' as const)\n\t\t\t\t\t\t: ('skipped' as const),\n\t\t};\n\t});\n\tconst requestedMist =\n\t\tfunding.requested\n\t\t\t.find((entry) => entry.fullCoinType === SUI_FULL_COIN_TYPE)\n\t\t\t?.amount.toString() ?? null;\n\tconst settledCount = entries.filter(\n\t\t(entry) => entry.status === 'funded' || entry.status === 'already-satisfied',\n\t).length;\n\treturn {\n\t\t// `funded` here means \"every requested entry is satisfied\" —\n\t\t// either the faucet succeeded or the pre-existing balance\n\t\t// already covered it. `unknown` covers the mixed partial-success\n\t\t// case so consumers can distinguish from \"nothing ran at all\".\n\t\tstatus: settledCount === entries.length ? 'funded' : settledCount === 0 ? 'skipped' : 'unknown',\n\t\tbalanceMist: null,\n\t\trequestedMist,\n\t\tentries,\n\t};\n};\n\n// ---------------------------------------------------------------------------\n// Re-exports for advanced callers (Coin, Wallet, Package)\n// ---------------------------------------------------------------------------\n\nexport type {\n\tAccountOptions,\n\tResolvedAccountOptions,\n\tAccountValue,\n\tSignAndExecuteResult,\n\tTxResult,\n} from './service.ts';\nexport type {\n\tAccountError,\n\tAccountAcquireError,\n\tAccountAcquirePhase,\n\tAccountSignError,\n\tAccountSignPhase,\n\tAccountVariantKind,\n} from './errors.ts';\nexport { ACCOUNT_ERROR_TAGS } from './errors.ts';\nexport type {\n\tAccountFunding,\n\tAccountFundingEntry,\n\tAccountFundingCoinValue,\n\tAccountFundingResult,\n\tAccountFundingRequest,\n\tAccountFundingStrategy,\n\tAppliedFunding,\n\tAppliedFundingEntry,\n\tAppliedFundingOutcome,\n\tCoinMember,\n\tCrossCuttingFundingEntry,\n\tCrossCuttingFundingProvider,\n\tFundEphemeralDefaultOutcome,\n\tProjectedFunding,\n\tProjectedFundingEntry,\n\tSuiFundingEntry,\n} from './funding.ts';\nexport { DEFAULT_EPHEMERAL_FUND_MIST, SUI_FULL_COIN_TYPE } from './funding.ts';\nexport type { AccountBindings } from './codegen.ts';\nexport type {\n\tAccountRegistryEntry,\n\tAccountRegistryFunding,\n\tAccountRegistryKey,\n} from './registry.ts';\nexport { accountRegistryKey } from './registry.ts';\nexport type { SyntheticImpersonationSigner } from './variants/impersonate.ts';\nexport type { SignatureScheme, ResolvedKeypair } from './keypair.ts';\nexport { AccountSpans } from './spans.ts';\n"],"mappings":";;;;;;;;;;;;;;;AA6EA,MAAM,4BAA4B,yBAAyB,mBAAmB;AAiB9E,MAAM,mBAAwC,SAC7C,SAAgD,WAAW,OAAkC;AAuD9F,MAAM,sBAAsB,UAC3B,OAAO,UAAU,YAAY,MAAM,SAAS;AAE7C,MAAM,oBACL,aACmC;AACnC,KAAI,aAAa,KAAA,EAAW,QAAO,EAAE;AACrC,QAAO,MAAM,QAAQ,SAAS,GAC1B,WACD,CAAC,SAA2B;;;;;;;AAQhC,MAAM,yBACL,QACA,gBACgD;AAChD,KAAI,OAAO,WAAW,UAAU;AAC/B,MAAI,SAAS,GACZ,QAAO,OAAO,KACb,oBAAoB;GACnB,OAAO;GACP;GACA,SAAS;GACT,SAAS,YAAY,YAAY,oEAAoE,OAAO;GAC5G,CAAC,CACF;AAEF,SAAO,OAAO,QAAQ,OAAO;;AAE9B,KAAI,CAAC,OAAO,cAAc,OAAO,IAAI,SAAS,EAC7C,QAAO,OAAO,KACb,oBAAoB;EACnB,OAAO;EACP;EACA,SAAS;EACT,SAAS,YAAY,YAAY,yEAAyE,OAAO;EACjH,CAAC,CACF;AAEF,QAAO,OAAO,QAAQ,OAAO,OAAO,CAAC;;AAGtC,MAAM,gBAAgB,SACrB,KAAK,UAAU,KAAK,aAAa,MAAM,KAAK,CAAC,GAAG,GAAG,IAAI,KAAK;AAE7D,MAAa,WACZ,MACA,SACI;AACJ,mBAAkB,KAAK;CAMvB,MAAM,QACL,SAAS,KAAA,IACN;EAAE,MAAM;EAAa;EAAM,GAC1B;EAAE,GAAG;EAAM;EAAM;CAEtB,MAAM,aAAa,gBAAgB,KAAK;CAOxC,MAAM,mBADkB,MAAM,WAAW,EAAE;CAE3C,MAAM,qBAAqB,iBAAiB,OAAO,mBAAmB;CACtE,MAAM,iBAAiB,mBAAmB,KAAK,MAAM,EAAE,KAAK;CAC5D,MAAM,0BAA0B,mBAAmB,SAAS,UAC3D,iBAAiB,MAAM,IAAI,CAC3B;CACD,MAAM,eAAe;EACpB;EACA,GAAG;EACH,GAAG;EACH;AAED,QAAO,aAAa;EACnB,IAAI,WAAW;EACf,WAAW;EAIX,MAAM;EACN,SAAS;EACT,QAAQ,SACP,OAAO,IAAI,aAAa;GACvB,MAAM,CAAC,KAAK,GAAG,gBAAgB;GAC/B,MAAM,qBAAqB,aAAa,MACvC,GACA,mBAAmB,OACnB;GAMD,MAAM,WAAW,OAAO;GACxB,MAAM,QAAQ,OAAO;GAUrB,IAAI,YAAY;GAChB,MAAM,0BAAmD,EAAE;AAC3D,QAAK,MAAM,SAAS,kBAAkB;AACrC,QAAI,MAAM,SAAS,OAAO;KACzB,MAAM,SAAS,OAAO,sBAAsB,MAAM,QAAQ,KAAK;AAC/D,6BAAwB,KAAK;MAC5B,MAAM;MACN,cAAc;MACd;MACA,CAAC;AACF;;IAED,MAAM,eAAe,mBAAmB;AACxC,iBAAa;AACb,4BAAwB,KAAK;KAC5B,MAAM,aAAa,aAAa;KAChC,cAAc,aAAa;KAC3B,QAAQ,MAAM;KACd,CAAC;;GAEH,MAAM,mBAAyD;AAuB/D,UAAO,OAAO,eAAe,OAAO;IApBnC,KAAK;KACJ,MAAM,IAAI;KACV,OAAO,IAAI;KACX,KAAK,IAAI;KACT,MAAM,IAAI;KACV;IACD,aAAa,MAAM;IACnB,KAAK,SAAS;IACd,OAAO,SAAS;IAChB,8BACC,OAAO,WAAW,8CAA8C,CAAC,KAChE,OAAO,aAAa;MAClB,aAAa,OAAO;MACpB,aAAa,cAAc;MAC3B,aAAa,YAAY;MACzB,SAAS,OAAO;KACjB,CAAC,CACF;IACF;IAE6C,CAAC;IAC9C;EAOH,oBAAoB;EACpB,eAAe,EAAE,OAAO,UAAU,SAAS,kBAAkB;GAC5D,MAAM,YAAkC;IACvC;IACA,SAAS,SAAS;IAClB,QAAQ,SAAS;IACjB,QAAQ,SAAS;IACjB,SAAS,2BAA2B,SAAS,QAAQ;IACrD;GACD,MAAM,WAA4B;IACjC;IACA,SAAS,SAAS;IAClB,QAAQ,SAAS;IACjB,QAAQ,SAAS;IACjB;AAcD,UAAO;IAbU,wBAAwB;KACxC,aAAa;KACb,SAAS,MAAM;KACf,KAAK,YAAY,SAAS;KAC1B,OAAO,YAAY,SAAS;KAC5B,CAQe;IAPA,mBAAsB;KAAE;KAAM,UAAU;KAAU,CAOzC;IANR,gCAChB,UAKkC;IAHhB,kCAClB,UAE8C;IAAC;;EAEjD,CAAC;;;;;;AAOH,MAAa,8BACZ,YAC4B;AAC5B,KAAI,QAAQ,UAAU,WAAW,EAChC,QAAO;EAAE,QAAQ;EAAW,aAAa;EAAM,eAAe;EAAM,SAAS,EAAE;EAAE;CAiBlF,IAAI,gBAAgB;CACpB,MAAM,UAAU,QAAQ,UAAU,KAAK,UAAU;EAChD,MAAM,YAAY,QAAQ,QAAQ;EAClC,MAAM,UACL,cAAc,KAAA,KACd,UAAU,iBAAiB,MAAM,gBACjC,UAAU,WAAW,MAAM;EAC5B,MAAM,UAAU,UAAU,UAAU,UAAU,KAAA;AAC9C,MAAI,QACH,kBAAiB;AAElB,SAAO;GACN,MAAM,MAAM;GACZ,cAAc,MAAM;GACpB,QAAQ,MAAM,OAAO,UAAU;GAC/B,QACC,YAAY,WACR,WACD,YAAY,sBACV,sBACA;GACN;GACA;CACF,MAAM,gBACL,QAAQ,UACN,MAAM,UAAU,MAAM,iBAAA,gBAAoC,EACzD,OAAO,UAAU,IAAI;CACzB,MAAM,eAAe,QAAQ,QAC3B,UAAU,MAAM,WAAW,YAAY,MAAM,WAAW,oBACzD,CAAC;AACF,QAAO;EAKN,QAAQ,iBAAiB,QAAQ,SAAS,WAAW,iBAAiB,IAAI,YAAY;EACtF,aAAa;EACb;EACA;EACA"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../src/plugins/account/index.ts"],"sourcesContent":["// Account plugin — barrel + `account(name, opts?)` factory.\n//\n// Architecture (12-account.md): Account is the named-identity layer\n// for devstack. It acquires a keypair (or impersonation slot), funds\n// it (default + cross-cutting), registers `{name, address}`, and\n// publishes a per-account resolved value via a unique resource id.\n//\n// User-facing factory shape — THREE variants:\n//\n//   account('alice')                                  // default ephemeral\n//   account('alice', { kind: 'ephemeral', funding: [{ coin: 'sui', amount: 5_000_000_000n }] })\n//   account('alice', { kind: 'signer',   signer: hardwareWallet })\n//   account('alice', { kind: 'impersonate', address: '0xabc...' })  // fork-mode only\n//\n// The `signer` variant is the single bring-your-own door. Pass any\n// `@mysten/sui/cryptography` `Signer` or `Keypair`. Loading a secret\n// from an env var or an inline literal is expressed by constructing\n// the keypair yourself and passing it as the signer:\n//\n//   account('ci',   { kind: 'signer', signer: Ed25519Keypair.fromSecretKey(process.env.ALICE_PRIVATE_KEY!) })\n//   account('demo', { kind: 'signer', signer: Ed25519Keypair.fromSecretKey('suiprivkey1...') })\n//\n// **Bare-form default**: `account('alice')` is shorthand for\n//\n//   { kind: 'ephemeral' } plus default SUI funding.\n//\n// Distilled-doc invariant (12-account.md \"Make the bare-form auto-\n// promotion to fork-impersonate funding discoverable\"): on fork-\n// runtime Sui, the default-funding pass internally promotes from\n// \"faucet POST\" to \"pay-from-seed-via-impersonate\" because no\n// faucet exists on a fork. The promotion is LOUD by default — we\n// emit a `log.appended` event the first time the promotion fires\n// (see `funding.ts`).\n//\n// During `start`, the plugin emits (via the typed `ctx.*` verbs) plus an\n// error-tag contribution:\n//\n//   1. `ctx.snapshotExtra` — secret-material subtree (ephemeral only).\n//   2. `ctx.codegen`       — `account-map` bindings (name → address).\n//   3. `ctx.provides`      — per-stack `account:<name>` registry entry.\n\nimport { Effect } from 'effect';\n\nimport {\n\tdefinePlugin,\n\tresource,\n\tstaticInputIdentity,\n\ttype AnyResourceRef,\n} from '../../api/define-plugin.ts';\nimport { PluginContext } from '../../substrate/plugin-ctx.ts';\nimport { IdentityContext, StackPathsService } from '../../substrate/runtime/paths.ts';\nimport { suiResource, SuiLogAttr } from '../sui/index.ts';\n\nimport { makeAccountCodegen } from './codegen.ts';\nimport { accountAcquireError, type AccountAcquireError } from './errors.ts';\nimport {\n\tDEFAULT_EPHEMERAL_FUND_MIST,\n\tSUI_FULL_COIN_TYPE,\n\ttype AccountFunding,\n\ttype AccountFundingEntry,\n\ttype AccountFundingResult,\n\ttype CrossCuttingFundingEntry,\n\ttype CrossCuttingFundingProvider,\n\ttype CoinMember,\n\ttype ProjectedFundingEntry,\n} from './funding.ts';\nimport {\n\tmakeAccountProjectionContribution,\n\tmakeAccountRegistryContribution,\n\ttype AccountRegistryEntry,\n\ttype AccountRegistryFunding,\n} from './registry.ts';\nimport { makeAccountSnapshotable } from './snapshot.ts';\nimport {\n\tacquireAccount,\n\tassertAccountName,\n\ttype AccountAcquireContext,\n\ttype AccountOptions,\n\ttype ResolvedAccountOptions,\n\ttype AccountValue,\n} from './service.ts';\n\n// ---------------------------------------------------------------------------\n// Resource construction\n// ---------------------------------------------------------------------------\n\n/** Per-account-instance resource. The substrate's resource id MUST be unique\n *  across the stack — we encode the account name as a literal-typed\n *  template literal so the compiler catches duplicate-name composes\n *  at the `defineDevstack` call site.\n *\n *  Distilled-doc invariant: resource id flows into the on-disk path, the\n *  manifest key, container labels, and generated TypeScript exports —\n *  the identifier-safe name validation (in `service.ts`) protects\n *  those call sites. */\nexport type AccountResourceId<Name extends string> = `account/${Name}`;\n\nconst accountResource = <Name extends string>(name: Name) =>\n\tresource<AccountResourceId<Name>, AccountValue>(`account/${name}` as AccountResourceId<Name>);\n\n// ---------------------------------------------------------------------------\n// User-facing factory\n// ---------------------------------------------------------------------------\n\n/** Construct the account plugin instance.\n *\n *  Variants — typed at the API boundary via the discriminated\n *  `AccountOptions` union. The factory's second arg is OPTIONAL —\n *  omitting it yields the bare-form default (ephemeral + default\n *  funding). Passing a non-matching `kind:` is a compile error\n *  thanks to the union's discriminator.\n *\n *  Distilled-doc invariant: the name is validated at the FACTORY\n *  boundary (not just at acquire time) so a typo surfaces\n *  immediately, not at runtime. */\ntype FundingCoinDependencies<Entries extends readonly unknown[]> = Entries extends readonly [\n\tinfer Head,\n\t...infer Tail,\n]\n\t? Head extends { readonly coin: infer Coin }\n\t\t? Coin extends CoinMember\n\t\t\t? readonly [Coin, ...FundingCoinDependencies<Tail>]\n\t\t\t: FundingCoinDependencies<Tail>\n\t\t: FundingCoinDependencies<Tail>\n\t: readonly [];\n\ntype FundingProviderDependenciesFor<Provider> = Provider extends readonly AnyResourceRef[]\n\t? Provider\n\t: Provider extends AnyResourceRef\n\t\t? readonly [Provider]\n\t\t: readonly [];\n\ntype FundingEntryProviderDependencies<Entry> = Entry extends { readonly coin: CoinMember }\n\t? 'via' extends keyof Entry\n\t\t? Entry extends { readonly via: infer Provider }\n\t\t\t? FundingProviderDependenciesFor<Provider>\n\t\t\t: readonly []\n\t\t: readonly []\n\t: readonly [];\n\ntype FundingProviderDependencies<Entries extends readonly unknown[]> = Entries extends readonly [\n\tinfer Head,\n\t...infer Tail,\n]\n\t? readonly [...FundingEntryProviderDependencies<Head>, ...FundingProviderDependencies<Tail>]\n\t: readonly [];\n\ntype AccountDependencyMembers<Funding extends AccountFunding> = readonly [\n\ttypeof suiResource,\n\t...FundingCoinDependencies<Funding>,\n\t...FundingProviderDependencies<Funding>,\n];\n\nconst isCoinFundingEntry = (entry: AccountFundingEntry): entry is CrossCuttingFundingEntry =>\n\ttypeof entry === 'object' && entry.coin !== 'sui';\n\nconst fundingProviders = (\n\tprovider: CrossCuttingFundingProvider | undefined,\n): ReadonlyArray<AnyResourceRef> => {\n\tif (provider === undefined) return [];\n\treturn Array.isArray(provider)\n\t\t? (provider as ReadonlyArray<AnyResourceRef>)\n\t\t: [provider as AnyResourceRef];\n};\n\n/** Validate a SUI funding amount and project it to bigint MIST.\n *  Returns a typed-error Effect so a bad amount surfaces as\n *  `AccountAcquireError(phase: 'validate-funding')` on the failure\n *  channel — NOT a synchronous throw lifted to a defect when called\n *  from inside the acquire body's `Effect.gen`. */\nconst fundingAmountToBigInt = (\n\tamount: number | bigint,\n\taccountName: string,\n): Effect.Effect<bigint, AccountAcquireError> => {\n\tif (typeof amount === 'bigint') {\n\t\tif (amount < 0n) {\n\t\t\treturn Effect.fail(\n\t\t\t\taccountAcquireError({\n\t\t\t\t\tphase: 'validate-funding',\n\t\t\t\t\taccountName,\n\t\t\t\t\tvariant: 'ephemeral',\n\t\t\t\t\tmessage: `Account '${accountName}': SUI funding amount must be a non-negative integer in MIST (got ${amount}).`,\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\t\treturn Effect.succeed(amount);\n\t}\n\tif (!Number.isSafeInteger(amount) || amount < 0) {\n\t\treturn Effect.fail(\n\t\t\taccountAcquireError({\n\t\t\t\tphase: 'validate-funding',\n\t\t\t\taccountName,\n\t\t\t\tvariant: 'ephemeral',\n\t\t\t\tmessage: `Account '${accountName}': SUI funding amount must be a non-negative safe integer in MIST (got ${amount}).`,\n\t\t\t}),\n\t\t);\n\t}\n\treturn Effect.succeed(BigInt(amount));\n};\n\nconst coinLabelFor = (coin: { readonly fullCoinType: string; readonly symbol?: string }): string =>\n\tcoin.symbol ?? coin.fullCoinType.split('::').at(-1) ?? coin.fullCoinType;\n\nconst inputAmount = (amount: number | bigint): string => amount.toString();\n\nconst inputFundingProviderIds = (\n\tprovider: CrossCuttingFundingProvider | undefined,\n): ReadonlyArray<string> =>\n\tfundingProviders(provider)\n\t\t.map((ref) => ref.id)\n\t\t.sort((a, b) => a.localeCompare(b));\n\nconst inputFundingIdentityFor = (entry: AccountFundingEntry): unknown => {\n\tif (entry.coin === 'sui') {\n\t\treturn { coin: 'sui', amountMist: inputAmount(entry.amount) };\n\t}\n\tconst via = inputFundingProviderIds(entry.via);\n\treturn {\n\t\tcoin: entry.coin.id,\n\t\tamountMist: entry.amount.toString(),\n\t\t...(via.length === 0 ? {} : { via }),\n\t};\n};\n\nconst accountFundingInputIdentity = (\n\topts: ResolvedAccountOptions,\n\tfundingEntries: AccountFunding,\n): ReadonlyArray<unknown> => {\n\tconst explicit = fundingEntries.map(inputFundingIdentityFor);\n\tif (opts.kind === 'ephemeral' && opts.funding === undefined) {\n\t\treturn [{ coin: 'sui', amountMist: DEFAULT_EPHEMERAL_FUND_MIST.toString() }, ...explicit];\n\t}\n\treturn explicit;\n};\n\nconst accountVariantInputIdentity = (opts: ResolvedAccountOptions): unknown => {\n\tswitch (opts.kind) {\n\t\tcase 'ephemeral':\n\t\t\treturn { kind: 'ephemeral' };\n\t\tcase 'impersonate':\n\t\t\treturn { kind: 'impersonate', address: opts.address };\n\t\tcase 'signer':\n\t\t\treturn {\n\t\t\t\tkind: 'signer',\n\t\t\t\taddress: opts.addressOverride ?? opts.signer.toSuiAddress(),\n\t\t\t};\n\t}\n};\n\nconst accountInputIdentity = (\n\topts: ResolvedAccountOptions,\n\tfundingEntries: AccountFunding,\n): unknown => ({\n\tplugin: 'account',\n\tname: opts.name,\n\tvariant: accountVariantInputIdentity(opts),\n\tfunding: accountFundingInputIdentity(opts, fundingEntries),\n});\n\n// ---------------------------------------------------------------------------\n// Capability emission — dynamic (POST-acquire). Receives the resolved\n// `AccountValue` + the identity so snapshot + codegen + registry + projection\n// decls reference the REAL address (and identity app/stack) — the static form\n// would force placeholder values for fields only known at acquire time.\n//\n// The account `start` emits its four contributions inline — snapshot →\n// codegen → registry → projection — directly via the typed `ctx` verbs,\n// AFTER resolving the value. The decl shapes + emit ORDER are load-bearing.\n// ---------------------------------------------------------------------------\n\nexport const account = <const N extends string, const Funding extends AccountFunding = readonly []>(\n\tname: N,\n\topts?: AccountOptions<Funding>,\n) => {\n\tassertAccountName(name);\n\n\t// Normalize bare-form to ephemeral default. The user-facing\n\t// `AccountOptions` union does not include \"kind absent\" — we\n\t// inject the default here so the rest of the body sees a\n\t// fully-discriminated value.\n\tconst opts2: ResolvedAccountOptions =\n\t\topts === undefined\n\t\t\t? { kind: 'ephemeral', name }\n\t\t\t: ({ ...opts, name } as ResolvedAccountOptions);\n\n\tconst accountRef = accountResource(name);\n\n\t// Pull the funding resource tuple out of opts (may be undefined for\n\t// the bare form / variants without funding). The tuple preserves\n\t// plugin-valued refs when the caller passed coin plugins, so\n\t// recursive stack composition can include those publishers.\n\tconst fundingEntries = (opts?.funding ?? []) as unknown as Funding;\n\tconst fundingEntryList = fundingEntries as AccountFunding;\n\tconst coinFundingEntries = fundingEntryList.filter(isCoinFundingEntry);\n\tconst fundingMembers = coinFundingEntries.map((e) => e.coin);\n\tconst strategyProviderMembers = coinFundingEntries.flatMap((entry) =>\n\t\tfundingProviders(entry.via),\n\t);\n\tconst dependencies = [\n\t\tsuiResource,\n\t\t...fundingMembers,\n\t\t...strategyProviderMembers,\n\t] as unknown as AccountDependencyMembers<Funding>;\n\n\treturn definePlugin({\n\t\tid: accountRef.id,\n\t\tdependsOn: dependencies,\n\t\t// Account is a value-producer (no long-lived server / container);\n\t\t// tasks acquire their value, publish contributions, then reach\n\t\t// `done`.\n\t\trole: 'task',\n\t\tsection: 'account',\n\t\tinputIdentity: staticInputIdentity(accountInputIdentity(opts2, fundingEntryList)),\n\t\t// `deps` auto-infers from the resolved `dependsOn`; `ctx` arrives\n\t\t// via the `PluginContext` service.\n\t\tstart: (deps) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst ctx = yield* PluginContext;\n\t\t\t\tconst [sui, ...resolvedDeps] = deps;\n\t\t\t\tconst resolvedCoinValues = resolvedDeps.slice(\n\t\t\t\t\t0,\n\t\t\t\t\tcoinFundingEntries.length,\n\t\t\t\t) as ReadonlyArray<{\n\t\t\t\t\treadonly fullCoinType: string;\n\t\t\t\t\treadonly symbol?: string;\n\t\t\t\t}>;\n\t\t\t\t// Identity + on-disk runtime root come from the\n\t\t\t\t// supervisor-provided substrate context.\n\t\t\t\tconst identity = yield* IdentityContext;\n\t\t\t\tconst paths = yield* StackPathsService;\n\n\t\t\t\t// Project each funding dependency value to a\n\t\t\t\t// `{fullCoinType, amount}` projection. Dependency order\n\t\t\t\t// mirrors `fundingEntries`, after the hard Sui upstream.\n\t\t\t\t// SUI amount validation lives on the failure channel so a\n\t\t\t\t// negative / non-integer amount surfaces as a typed\n\t\t\t\t// `AccountAcquireError(phase: 'validate-funding')` instead\n\t\t\t\t// of a defect (the old sync-throw lifted to a defect when\n\t\t\t\t// run inside this `Effect.gen`).\n\t\t\t\tlet coinIndex = 0;\n\t\t\t\tconst projectedFundingMutable: ProjectedFundingEntry[] = [];\n\t\t\t\tfor (const entry of fundingEntryList) {\n\t\t\t\t\tif (entry.coin === 'sui') {\n\t\t\t\t\t\tconst amount = yield* fundingAmountToBigInt(entry.amount, name);\n\t\t\t\t\t\tprojectedFundingMutable.push({\n\t\t\t\t\t\t\tcoin: 'SUI',\n\t\t\t\t\t\t\tfullCoinType: SUI_FULL_COIN_TYPE,\n\t\t\t\t\t\t\tamount,\n\t\t\t\t\t\t});\n\t\t\t\t\t\tcontinue;\n\t\t\t\t\t}\n\t\t\t\t\tconst resolvedCoin = resolvedCoinValues[coinIndex]!;\n\t\t\t\t\tcoinIndex += 1;\n\t\t\t\t\tprojectedFundingMutable.push({\n\t\t\t\t\t\tcoin: coinLabelFor(resolvedCoin),\n\t\t\t\t\t\tfullCoinType: resolvedCoin.fullCoinType,\n\t\t\t\t\t\tamount: entry.amount,\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t\tconst projectedFunding: ReadonlyArray<ProjectedFundingEntry> = projectedFundingMutable;\n\n\t\t\t\tconst acquireCtx: AccountAcquireContext = {\n\t\t\t\t\tsui: {\n\t\t\t\t\t\tmode: sui.mode,\n\t\t\t\t\t\tchainId: sui.chainId,\n\t\t\t\t\t\tsdk: sui.sdk,\n\t\t\t\t\t\tfork: sui.fork,\n\t\t\t\t\t},\n\t\t\t\t\truntimeRoot: paths.stackRoot,\n\t\t\t\t\tapp: identity.app,\n\t\t\t\t\tstack: identity.stack,\n\t\t\t\t\temitAutoPromotionEvent: () =>\n\t\t\t\t\t\tEffect.logWarning('account funding auto-promoted for fork mode').pipe(\n\t\t\t\t\t\t\tEffect.annotateLogs({\n\t\t\t\t\t\t\t\t'account.name': name,\n\t\t\t\t\t\t\t\t'account.funding.from': 'faucet',\n\t\t\t\t\t\t\t\t'account.funding.to': 'pay-from-seed-via-impersonate',\n\t\t\t\t\t\t\t\t[SuiLogAttr.mode]: 'fork',\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t),\n\t\t\t\t\tprojectedFunding,\n\t\t\t\t};\n\t\t\t\tconst resolved = yield* acquireAccount(opts2, acquireCtx);\n\n\t\t\t\t// Emit the resolved account's contributions inline, in order:\n\t\t\t\t// snapshot → codegen → registry → projection. `resolved` is the\n\t\t\t\t// just-acquired `AccountValue`; `identity` (from\n\t\t\t\t// `IdentityContext`) supplies the snapshot's pre-restore guard\n\t\t\t\t// app/stack; the variant kind is `opts2.kind`. The registry +\n\t\t\t\t// projection decls share one `realEntry` so the registered\n\t\t\t\t// strategy and the published event agree byte-for-byte.\n\t\t\t\tconst realEntry: AccountRegistryEntry = {\n\t\t\t\t\tname,\n\t\t\t\t\taddress: resolved.address,\n\t\t\t\t\tscheme: resolved.scheme,\n\t\t\t\t\tsource: resolved.source,\n\t\t\t\t\tfunding: fundingProjectionForResult(resolved.funding),\n\t\t\t\t};\n\t\t\t\tctx.snapshotExtra(\n\t\t\t\t\tmakeAccountSnapshotable({\n\t\t\t\t\t\taccountName: name,\n\t\t\t\t\t\tvariant: opts2.kind,\n\t\t\t\t\t\tapp: identity.app,\n\t\t\t\t\t\tstack: identity.stack,\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t\tctx.codegen(\n\t\t\t\t\tmakeAccountCodegen<N>({\n\t\t\t\t\t\tname,\n\t\t\t\t\t\tresolved: {\n\t\t\t\t\t\t\tname,\n\t\t\t\t\t\t\taddress: resolved.address,\n\t\t\t\t\t\t\tscheme: resolved.scheme,\n\t\t\t\t\t\t\tsource: resolved.source,\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t\tctx.provides(\n\t\t\t\t\tmakeAccountRegistryContribution<N>(\n\t\t\t\t\t\trealEntry as AccountRegistryEntry & { readonly name: N },\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\tctx.publish(\n\t\t\t\t\tmakeAccountProjectionContribution<N>(\n\t\t\t\t\t\trealEntry as AccountRegistryEntry & { readonly name: N },\n\t\t\t\t\t),\n\t\t\t\t);\n\n\t\t\t\treturn resolved;\n\t\t\t}),\n\t});\n};\n\n/** @internal — exported only for the projection regression test\n *  (`test/plugins/account/funding-projection.test.ts`). Projects the runtime\n *  `AccountFundingResult` (requested + applied) into the registry's\n *  per-row funded/already-satisfied/skipped status. */\nexport const fundingProjectionForResult = (\n\tfunding: AccountFundingResult,\n): AccountRegistryFunding => {\n\tif (funding.requested.length === 0) {\n\t\treturn { status: 'skipped', balanceMist: null, requestedMist: null, entries: [] };\n\t}\n\n\t// Positional outcome consume so the projection can distinguish a\n\t// real faucet call (`funded`) from the pre-existing-balance\n\t// short-circuit (`already-satisfied`). `applied` is an\n\t// order-preserving SUBSEQUENCE of `requested`:\n\t// `applyCrossCuttingFunding` (and the default-funding pass) iterate\n\t// `requested` in order and only push a processed entry onto\n\t// `applied`, dropping zero-amount and no-strategy entries. So we\n\t// walk a cursor through `applied` and adopt its outcome for the\n\t// matching requested row by (fullCoinType, amount) — a keyed Map\n\t// would collapse duplicate (coin, amount) entries and mislabel the\n\t// genuinely-funded first row as `already-satisfied`. An entry the\n\t// funding pass never reached (zero-amount, or absent from `applied`)\n\t// does not match the cursor and projects as `skipped` without\n\t// advancing it.\n\tlet appliedCursor = 0;\n\tconst entries = funding.requested.map((entry) => {\n\t\tconst candidate = funding.applied[appliedCursor];\n\t\tconst matches =\n\t\t\tcandidate !== undefined &&\n\t\t\tcandidate.fullCoinType === entry.fullCoinType &&\n\t\t\tcandidate.amount === entry.amount;\n\t\tconst outcome = matches ? candidate.outcome : undefined;\n\t\tif (matches) {\n\t\t\tappliedCursor += 1;\n\t\t}\n\t\treturn {\n\t\t\tcoin: entry.coin,\n\t\t\tfullCoinType: entry.fullCoinType,\n\t\t\tamount: entry.amount.toString(),\n\t\t\tstatus:\n\t\t\t\toutcome === 'funded'\n\t\t\t\t\t? ('funded' as const)\n\t\t\t\t\t: outcome === 'already-satisfied'\n\t\t\t\t\t\t? ('already-satisfied' as const)\n\t\t\t\t\t\t: ('skipped' as const),\n\t\t};\n\t});\n\tconst requestedMist =\n\t\tfunding.requested\n\t\t\t.find((entry) => entry.fullCoinType === SUI_FULL_COIN_TYPE)\n\t\t\t?.amount.toString() ?? null;\n\tconst settledCount = entries.filter(\n\t\t(entry) => entry.status === 'funded' || entry.status === 'already-satisfied',\n\t).length;\n\treturn {\n\t\t// `funded` here means \"every requested entry is satisfied\" —\n\t\t// either the faucet succeeded or the pre-existing balance\n\t\t// already covered it. `unknown` covers the mixed partial-success\n\t\t// case so consumers can distinguish from \"nothing ran at all\".\n\t\tstatus: settledCount === entries.length ? 'funded' : settledCount === 0 ? 'skipped' : 'unknown',\n\t\tbalanceMist: null,\n\t\trequestedMist,\n\t\tentries,\n\t};\n};\n\n// ---------------------------------------------------------------------------\n// Re-exports for advanced callers (Coin, Wallet, Package)\n// ---------------------------------------------------------------------------\n\nexport type {\n\tAccountOptions,\n\tAccountSignerInput,\n\tResolvedAccountOptions,\n\tAccountValue,\n\tSignAndExecuteResult,\n\tTxResult,\n} from './service.ts';\nexport type {\n\tAccountError,\n\tAccountAcquireError,\n\tAccountAcquirePhase,\n\tAccountSignError,\n\tAccountSignPhase,\n\tAccountVariantKind,\n} from './errors.ts';\nexport type {\n\tAccountFunding,\n\tAccountFundingEntry,\n\tAccountFundingCoinValue,\n\tAccountFundingResult,\n\tAccountFundingRequest,\n\tAccountFundingStrategy,\n\tAppliedFunding,\n\tAppliedFundingEntry,\n\tAppliedFundingOutcome,\n\tCoinMember,\n\tCrossCuttingFundingEntry,\n\tCrossCuttingFundingProvider,\n\tFundEphemeralDefaultOutcome,\n\tProjectedFunding,\n\tProjectedFundingEntry,\n\tSuiFundingEntry,\n} from './funding.ts';\nexport { DEFAULT_EPHEMERAL_FUND_MIST, SUI_FULL_COIN_TYPE } from './funding.ts';\nexport type { AccountBindings } from './codegen.ts';\nexport type {\n\tAccountRegistryEntry,\n\tAccountRegistryFunding,\n\tAccountRegistryKey,\n} from './registry.ts';\nexport { accountRegistryKey } from './registry.ts';\nexport type { SyntheticImpersonationSigner } from './variants/impersonate.ts';\nexport type { SignatureScheme, ResolvedKeypair } from './keypair.ts';\n"],"mappings":";;;;;;;;;;;;;;AAiGA,MAAM,mBAAwC,SAC7C,SAAgD,WAAW,MAAiC;AAuD7F,MAAM,sBAAsB,UAC3B,OAAO,UAAU,YAAY,MAAM,SAAS;AAE7C,MAAM,oBACL,aACmC;CACnC,IAAI,aAAa,KAAA,GAAW,OAAO,CAAC;CACpC,OAAO,MAAM,QAAQ,QAAQ,IACzB,WACD,CAAC,QAA0B;AAC/B;;;;;;AAOA,MAAM,yBACL,QACA,gBACgD;CAChD,IAAI,OAAO,WAAW,UAAU;EAC/B,IAAI,SAAS,IACZ,OAAO,OAAO,KACb,oBAAoB;GACnB,OAAO;GACP;GACA,SAAS;GACT,SAAS,YAAY,YAAY,oEAAoE,OAAO;EAC7G,CAAC,CACF;EAED,OAAO,OAAO,QAAQ,MAAM;CAC7B;CACA,IAAI,CAAC,OAAO,cAAc,MAAM,KAAK,SAAS,GAC7C,OAAO,OAAO,KACb,oBAAoB;EACnB,OAAO;EACP;EACA,SAAS;EACT,SAAS,YAAY,YAAY,yEAAyE,OAAO;CAClH,CAAC,CACF;CAED,OAAO,OAAO,QAAQ,OAAO,MAAM,CAAC;AACrC;AAEA,MAAM,gBAAgB,SACrB,KAAK,UAAU,KAAK,aAAa,MAAM,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,KAAK;AAE7D,MAAM,eAAe,WAAoC,OAAO,SAAS;AAEzE,MAAM,2BACL,aAEA,iBAAiB,QAAQ,CAAC,CACxB,KAAK,QAAQ,IAAI,EAAE,CAAC,CACpB,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;AAEpC,MAAM,2BAA2B,UAAwC;CACxE,IAAI,MAAM,SAAS,OAClB,OAAO;EAAE,MAAM;EAAO,YAAY,YAAY,MAAM,MAAM;CAAE;CAE7D,MAAM,MAAM,wBAAwB,MAAM,GAAG;CAC7C,OAAO;EACN,MAAM,MAAM,KAAK;EACjB,YAAY,MAAM,OAAO,SAAS;EAClC,GAAI,IAAI,WAAW,IAAI,CAAC,IAAI,EAAE,IAAI;CACnC;AACD;AAEA,MAAM,+BACL,MACA,mBAC4B;CAC5B,MAAM,WAAW,eAAe,IAAI,uBAAuB;CAC3D,IAAI,KAAK,SAAS,eAAe,KAAK,YAAY,KAAA,GACjD,OAAO,CAAC;EAAE,MAAM;EAAO,YAAY,4BAA4B,SAAS;CAAE,GAAG,GAAG,QAAQ;CAEzF,OAAO;AACR;AAEA,MAAM,+BAA+B,SAA0C;CAC9E,QAAQ,KAAK,MAAb;EACC,KAAK,aACJ,OAAO,EAAE,MAAM,YAAY;EAC5B,KAAK,eACJ,OAAO;GAAE,MAAM;GAAe,SAAS,KAAK;EAAQ;EACrD,KAAK,UACJ,OAAO;GACN,MAAM;GACN,SAAS,KAAK,mBAAmB,KAAK,OAAO,aAAa;EAC3D;CACF;AACD;AAEA,MAAM,wBACL,MACA,oBACc;CACd,QAAQ;CACR,MAAM,KAAK;CACX,SAAS,4BAA4B,IAAI;CACzC,SAAS,4BAA4B,MAAM,cAAc;AAC1D;AAaA,MAAa,WACZ,MACA,SACI;CACJ,kBAAkB,IAAI;CAMtB,MAAM,QACL,SAAS,KAAA,IACN;EAAE,MAAM;EAAa;CAAK,IACzB;EAAE,GAAG;EAAM;CAAK;CAErB,MAAM,aAAa,gBAAgB,IAAI;CAOvC,MAAM,mBADkB,MAAM,WAAW,CAAC;CAE1C,MAAM,qBAAqB,iBAAiB,OAAO,kBAAkB;CACrE,MAAM,iBAAiB,mBAAmB,KAAK,MAAM,EAAE,IAAI;CAC3D,MAAM,0BAA0B,mBAAmB,SAAS,UAC3D,iBAAiB,MAAM,GAAG,CAC3B;CACA,MAAM,eAAe;EACpB;EACA,GAAG;EACH,GAAG;CACJ;CAEA,OAAO,aAAa;EACnB,IAAI,WAAW;EACf,WAAW;EAIX,MAAM;EACN,SAAS;EACT,eAAe,oBAAoB,qBAAqB,OAAO,gBAAgB,CAAC;EAGhF,QAAQ,SACP,OAAO,IAAI,aAAa;GACvB,MAAM,MAAM,OAAO;GACnB,MAAM,CAAC,KAAK,GAAG,gBAAgB;GAC/B,MAAM,qBAAqB,aAAa,MACvC,GACA,mBAAmB,MACpB;GAMA,MAAM,WAAW,OAAO;GACxB,MAAM,QAAQ,OAAO;GAUrB,IAAI,YAAY;GAChB,MAAM,0BAAmD,CAAC;GAC1D,KAAK,MAAM,SAAS,kBAAkB;IACrC,IAAI,MAAM,SAAS,OAAO;KACzB,MAAM,SAAS,OAAO,sBAAsB,MAAM,QAAQ,IAAI;KAC9D,wBAAwB,KAAK;MAC5B,MAAM;MACN,cAAc;MACd;KACD,CAAC;KACD;IACD;IACA,MAAM,eAAe,mBAAmB;IACxC,aAAa;IACb,wBAAwB,KAAK;KAC5B,MAAM,aAAa,YAAY;KAC/B,cAAc,aAAa;KAC3B,QAAQ,MAAM;IACf,CAAC;GACF;GACA,MAAM,mBAAyD;GAuB/D,MAAM,WAAW,OAAO,eAAe,OAAO;IApB7C,KAAK;KACJ,MAAM,IAAI;KACV,SAAS,IAAI;KACb,KAAK,IAAI;KACT,MAAM,IAAI;IACX;IACA,aAAa,MAAM;IACnB,KAAK,SAAS;IACd,OAAO,SAAS;IAChB,8BACC,OAAO,WAAW,6CAA6C,CAAC,CAAC,KAChE,OAAO,aAAa;KACnB,gBAAgB;KAChB,wBAAwB;KACxB,sBAAsB;MACrB,WAAW,OAAO;IACpB,CAAC,CACF;IACD;GAEsD,CAAC;GASxD,MAAM,YAAkC;IACvC;IACA,SAAS,SAAS;IAClB,QAAQ,SAAS;IACjB,QAAQ,SAAS;IACjB,SAAS,2BAA2B,SAAS,OAAO;GACrD;GACA,IAAI,cACH,wBAAwB;IACvB,aAAa;IACb,SAAS,MAAM;IACf,KAAK,SAAS;IACd,OAAO,SAAS;GACjB,CAAC,CACF;GACA,IAAI,QACH,mBAAsB;IACrB;IACA,UAAU;KACT;KACA,SAAS,SAAS;KAClB,QAAQ,SAAS;KACjB,QAAQ,SAAS;IAClB;GACD,CAAC,CACF;GACA,IAAI,SACH,gCACC,SACD,CACD;GACA,IAAI,QACH,kCACC,SACD,CACD;GAEA,OAAO;EACR,CAAC;CACH,CAAC;AACF;;;;;AAMA,MAAa,8BACZ,YAC4B;CAC5B,IAAI,QAAQ,UAAU,WAAW,GAChC,OAAO;EAAE,QAAQ;EAAW,aAAa;EAAM,eAAe;EAAM,SAAS,CAAC;CAAE;CAiBjF,IAAI,gBAAgB;CACpB,MAAM,UAAU,QAAQ,UAAU,KAAK,UAAU;EAChD,MAAM,YAAY,QAAQ,QAAQ;EAClC,MAAM,UACL,cAAc,KAAA,KACd,UAAU,iBAAiB,MAAM,gBACjC,UAAU,WAAW,MAAM;EAC5B,MAAM,UAAU,UAAU,UAAU,UAAU,KAAA;EAC9C,IAAI,SACH,iBAAiB;EAElB,OAAO;GACN,MAAM,MAAM;GACZ,cAAc,MAAM;GACpB,QAAQ,MAAM,OAAO,SAAS;GAC9B,QACC,YAAY,WACR,WACD,YAAY,sBACV,sBACA;EACP;CACD,CAAC;CACD,MAAM,gBACL,QAAQ,UACN,MAAM,UAAU,MAAM,iBAAA,eAAmC,CAAC,EACzD,OAAO,SAAS,KAAK;CACzB,MAAM,eAAe,QAAQ,QAC3B,UAAU,MAAM,WAAW,YAAY,MAAM,WAAW,mBAC1D,CAAC,CAAC;CACF,OAAO;EAKN,QAAQ,iBAAiB,QAAQ,SAAS,WAAW,iBAAiB,IAAI,YAAY;EACtF,aAAa;EACb;EACA;CACD;AACD"}

package/dist/plugins/account/keypair.d.mts

@@ -17,14 +17,15 @@ interface ResolvedKeypair {
   readonly address: string;
   readonly scheme: SignatureScheme;
   readonly publicKey: Uint8Array;
-  /** Opaque signer handle — typed loosely here because the four
-   *  real variants (ed25519/secp256k1/secp256r1 + bring-your-own
-   *  Signer) share no narrow TS type beyond `Signer`. The wallet /
-   *  sign-and-execute capability narrows downstream. */
+  /** Opaque signer handle — typed loosely here because the real
+   *  variants (a generated/recovered Ed25519 keypair + a
+   *  bring-your-own `Signer`) share no narrow TS type beyond
+   *  `Signer`. The wallet / sign-and-execute capability narrows
+   *  downstream. */
   readonly signer: unknown;
-  /** Bech32-encoded secret. Only present for ephemeral / inline /
-   *  env / keystore variants — `null` for `signer` (we never ask
-   *  for it) and `impersonate` (no secret exists). */
+  /** Bech32-encoded secret. Only present for the `ephemeral` variant
+   *  (the persisted generated key) — `null` for `signer` (we never
+   *  ask for it) and `impersonate` (no secret exists). */
   readonly bech32Secret: string | null;
 }
 //#endregion

package/dist/plugins/account/keypair.mjs

@@ -23,8 +23,9 @@ const normalizeScheme = (raw, accountName, variant) => {
 *  `ephemeral` variant.
 *
 *  Architecture-distilled invariant: schemes other than Ed25519
-*  must be loaded via keystore/env/inline; we never generate
-*  Secp256* keys from scratch. */
+*  must be brought in via the `signer` variant (pass a Secp256* or
+*  custom `Keypair`/`Signer`); we never generate Secp256* keys from
+*  scratch. */
 const generateEd25519Keypair = (accountName) => Effect.try({
 	try: () => {
 		return resolvedKeypairFromEd25519(Ed25519Keypair.generate());
@@ -38,7 +39,7 @@ const generateEd25519Keypair = (accountName) => Effect.try({
 	})
 });
 /** Decode a bech32 `suiprivkey1...` string into a resolved keypair.
-*  Used by the inline / env / keystore variants. */
+*  Used by the `ephemeral` variant to recover a persisted key. */
 const decodeBech32Secret = (bech32, accountName, variant) => Effect.gen(function* () {
 	const parsed = yield* Effect.try({
 		try: () => decodeSuiPrivateKey(bech32),
@@ -69,20 +70,6 @@ const decodeBech32Secret = (bech32, accountName, variant) => Effect.gen(function
 		})
 	});
 });
-/** Build a `ResolvedKeypair` view from a raw Ed25519 secret-key
-*  byte array. Used by the inline-bytes path (`variants/inline.ts`
-*  Uint8Array branch). */
-const resolvedKeypairFromEd25519Bytes = (secretKey, accountName, variant) => Effect.try({
-	try: () => {
-		return resolvedKeypairFromEd25519(Ed25519Keypair.fromSecretKey(secretKey));
-	},
-	catch: () => accountAcquireError({
-		phase: "decode-inline",
-		accountName,
-		variant,
-		message: `Account '${accountName}': Ed25519Keypair.fromSecretKey() rejected the supplied raw bytes.`
-	})
-});
 const resolvedKeypairFromEd25519 = (kp) => ({
 	address: kp.toSuiAddress(),
 	scheme: "ed25519",
@@ -91,6 +78,6 @@ const resolvedKeypairFromEd25519 = (kp) => ({
 	bech32Secret: kp.getSecretKey()
 });
 //#endregion
-export { decodeBech32Secret, generateEd25519Keypair, normalizeScheme, resolvedKeypairFromEd25519Bytes };
+export { decodeBech32Secret, generateEd25519Keypair, normalizeScheme };
 
 //# sourceMappingURL=keypair.mjs.map

package/dist/plugins/account/keypair.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"keypair.mjs","names":[],"sources":["../../../src/plugins/account/keypair.ts"],"sourcesContent":["// Account plugin — keypair generation + scheme normalization helpers.\n//\n// Distilled-doc finding (12-account.md \"Scheme normalization\"\n// invariant): scheme surfaced to consumers MUST be lowercased at the\n// account boundary. Mixed-case from the SDK leaks into manifest\n// serialization and on-chain Move type matching if not converted. We\n// pin the canonical lowercased union at this module's boundary and\n// every variant resolver dumps through `normalizeScheme` before\n// producing the resolved value.\n//\n// Distilled-doc opportunity (\"Co-locate the canonical Account-value\n// Schema with the canonical type\"): the canonical signature scheme\n// union lives here, NOT next to the factory, so future Schema sits\n// alongside the type.\n\nimport { Effect } from 'effect';\n\nimport { decodeSuiPrivateKey, encodeSuiPrivateKey } from '@mysten/sui/cryptography';\nimport { Ed25519Keypair } from '@mysten/sui/keypairs/ed25519';\n\nimport {\n\taccountAcquireError,\n\ttype AccountAcquireError,\n\ttype AccountVariantKind,\n} from './errors.ts';\n\n/** Lowercased signature scheme — the canonical wire form. The SDK\n *  occasionally hands us `'ED25519'` / `'Secp256k1'`; the boundary\n *  conversion lives in `normalizeScheme`. */\nexport type SignatureScheme = 'ed25519' | 'secp256k1' | 'secp256r1';\n\n/** Resolved keypair shape — the variant resolvers all funnel into\n *  this so the funding + register passes are variant-agnostic.\n *\n *  Note: impersonation accounts do NOT produce a `Keypair`; they\n *  produce a `SyntheticImpersonationSigner` (see\n *  `variants/impersonate.ts`). The discriminator lives on the\n *  resolved `AccountValue` (architecture: distilled doc opportunity\n *  \"Tighten the resolved-account type\"). */\nexport interface ResolvedKeypair {\n\treadonly address: string;\n\treadonly scheme: SignatureScheme;\n\treadonly publicKey: Uint8Array;\n\t/** Opaque signer handle — typed loosely here because the four\n\t *  real variants (ed25519/secp256k1/secp256r1 + bring-your-own\n\t *  Signer) share no narrow TS type beyond `Signer`. The wallet /\n\t *  sign-and-execute capability narrows downstream. */\n\treadonly signer: unknown;\n\t/** Bech32-encoded secret. Only present for ephemeral / inline /\n\t *  env / keystore variants — `null` for `signer` (we never ask\n\t *  for it) and `impersonate` (no secret exists). */\n\treadonly bech32Secret: string | null;\n}\n\n/** Normalize the SDK's mixed-case scheme to the lowercased wire form.\n *  Unknown schemes surface as a typed acquisition error (distilled\n *  doc: \"Unsupported signature scheme (multisig / zklogin / passkey)\n *  — currently a raw throw; should be promoted to the typed-error\n *  channel\"). */\nexport const normalizeScheme = (\n\traw: string,\n\taccountName: string,\n\tvariant: AccountVariantKind,\n): Effect.Effect<SignatureScheme, AccountAcquireError> => {\n\tconst lower = raw.toLowerCase();\n\tif (lower === 'ed25519' || lower === 'secp256k1' || lower === 'secp256r1') {\n\t\treturn Effect.succeed(lower);\n\t}\n\treturn Effect.fail(\n\t\taccountAcquireError({\n\t\t\tphase: 'unsupported-scheme',\n\t\t\taccountName,\n\t\t\tvariant,\n\t\t\tmessage: `Account '${accountName}': unsupported signature scheme '${raw}'. devstack supports ed25519, secp256k1, secp256r1.`,\n\t\t\thint: 'Multisig, zklogin, and passkey schemes are not yet supported via the Account plugin — bring your own Signer via {kind:\"signer\"}.',\n\t\t}),\n\t);\n};\n\n/** Generate a fresh Ed25519 keypair. The default for the\n *  `ephemeral` variant.\n *\n *  Architecture-distilled invariant: schemes other than Ed25519\n *  must be loaded via keystore/env/inline; we never generate\n *  Secp256* keys from scratch. */\nexport const generateEd25519Keypair = (\n\taccountName: string,\n): Effect.Effect<ResolvedKeypair, AccountAcquireError> =>\n\tEffect.try({\n\t\ttry: () => {\n\t\t\tconst kp = Ed25519Keypair.generate();\n\t\t\treturn resolvedKeypairFromEd25519(kp);\n\t\t},\n\t\tcatch: (cause): AccountAcquireError =>\n\t\t\taccountAcquireError({\n\t\t\t\tphase: 'generate-keypair',\n\t\t\t\taccountName,\n\t\t\t\tvariant: 'ephemeral',\n\t\t\t\tmessage: `Account '${accountName}': Ed25519Keypair.generate() threw.`,\n\t\t\t\tcause,\n\t\t\t}),\n\t});\n\n/** Decode a bech32 `suiprivkey1...` string into a resolved keypair.\n *  Used by the inline / env / keystore variants. */\nexport const decodeBech32Secret = (\n\tbech32: string,\n\taccountName: string,\n\tvariant: AccountVariantKind,\n): Effect.Effect<ResolvedKeypair, AccountAcquireError> =>\n\tEffect.gen(function* () {\n\t\tconst parsed = yield* Effect.try({\n\t\t\ttry: () => decodeSuiPrivateKey(bech32),\n\t\t\t// Secret-leak guard: the thrown error from `decodeSuiPrivateKey`\n\t\t\t// can echo the rejected bech32 string back in its message, so we\n\t\t\t// deliberately DROP the raw `cause`. The typed `message` already\n\t\t\t// names the failure; a malformed-secret error carries no\n\t\t\t// actionable diagnostic beyond \"it was malformed\".\n\t\t\tcatch: (): AccountAcquireError =>\n\t\t\t\taccountAcquireError({\n\t\t\t\t\tphase: 'decode-inline',\n\t\t\t\t\taccountName,\n\t\t\t\t\tvariant,\n\t\t\t\t\tmessage: `Account '${accountName}': decodeSuiPrivateKey() rejected the supplied bech32 secret.`,\n\t\t\t\t}),\n\t\t});\n\t\tconst scheme = yield* normalizeScheme(parsed.scheme, accountName, variant);\n\t\tif (scheme !== 'ed25519') {\n\t\t\t// Architecture-distilled: today we only construct Ed25519 here.\n\t\t\t// Secp256k1 / Secp256r1 paths land when the SDK's per-scheme\n\t\t\t// Keypair classes are wired in; the typed-error channel keeps\n\t\t\t// the failure actionable until then.\n\t\t\treturn yield* Effect.fail(\n\t\t\t\taccountAcquireError({\n\t\t\t\t\tphase: 'unsupported-scheme',\n\t\t\t\t\taccountName,\n\t\t\t\t\tvariant,\n\t\t\t\t\tmessage: `Account '${accountName}': scheme '${scheme}' is not yet wired for the ${variant} variant.`,\n\t\t\t\t\thint: 'Wire the matching @mysten/sui/keypairs/<scheme> import next to the Ed25519 path.',\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\t\treturn yield* Effect.try({\n\t\t\ttry: () => {\n\t\t\t\tconst kp = Ed25519Keypair.fromSecretKey(parsed.secretKey);\n\t\t\t\treturn resolvedKeypairFromEd25519(kp);\n\t\t\t},\n\t\t\t// Secret-leak guard: `fromSecretKey` can echo the decoded\n\t\t\t// secret-key bytes in its error — DROP the raw `cause`.\n\t\t\tcatch: (): AccountAcquireError =>\n\t\t\t\taccountAcquireError({\n\t\t\t\t\tphase: 'decode-inline',\n\t\t\t\t\taccountName,\n\t\t\t\t\tvariant,\n\t\t\t\t\tmessage: `Account '${accountName}': Ed25519Keypair.fromSecretKey() rejected the decoded secret.`,\n\t\t\t\t}),\n\t\t});\n\t});\n\n/** Build a `ResolvedKeypair` view from a raw Ed25519 secret-key\n *  byte array. Used by the inline-bytes path (`variants/inline.ts`\n *  Uint8Array branch). */\nexport const resolvedKeypairFromEd25519Bytes = (\n\tsecretKey: Uint8Array,\n\taccountName: string,\n\tvariant: AccountVariantKind,\n): Effect.Effect<ResolvedKeypair, AccountAcquireError> =>\n\tEffect.try({\n\t\ttry: () => {\n\t\t\tconst kp = Ed25519Keypair.fromSecretKey(secretKey);\n\t\t\treturn resolvedKeypairFromEd25519(kp);\n\t\t},\n\t\t// Secret-leak guard: `fromSecretKey` can echo the raw secret-key\n\t\t// bytes in its error — DROP the raw `cause`. (Mirrors the\n\t\t// bech32 path in `decodeBech32Secret`.)\n\t\tcatch: (): AccountAcquireError =>\n\t\t\taccountAcquireError({\n\t\t\t\tphase: 'decode-inline',\n\t\t\t\taccountName,\n\t\t\t\tvariant,\n\t\t\t\tmessage: `Account '${accountName}': Ed25519Keypair.fromSecretKey() rejected the supplied raw bytes.`,\n\t\t\t}),\n\t});\n\n/** Encode a 32-byte secret key as a bech32 `suiprivkey1...` string\n *  for the canonical wire form. Re-exported because the\n *  `variants/inline.ts` Uint8Array branch needs it. */\nexport const encodeEd25519Bech32 = (bytes: Uint8Array): string =>\n\tencodeSuiPrivateKey(bytes, 'ED25519');\n\nconst resolvedKeypairFromEd25519 = (kp: Ed25519Keypair): ResolvedKeypair => ({\n\taddress: kp.toSuiAddress(),\n\tscheme: 'ed25519',\n\tpublicKey: kp.getPublicKey().toRawBytes(),\n\tsigner: kp,\n\tbech32Secret: kp.getSecretKey(),\n});\n"],"mappings":";;;;;;;;;;AA2DA,MAAa,mBACZ,KACA,aACA,YACyD;CACzD,MAAM,QAAQ,IAAI,aAAa;AAC/B,KAAI,UAAU,aAAa,UAAU,eAAe,UAAU,YAC7D,QAAO,OAAO,QAAQ,MAAM;AAE7B,QAAO,OAAO,KACb,oBAAoB;EACnB,OAAO;EACP;EACA;EACA,SAAS,YAAY,YAAY,mCAAmC,IAAI;EACxE,MAAM;EACN,CAAC,CACF;;;;;;;;AASF,MAAa,0BACZ,gBAEA,OAAO,IAAI;CACV,WAAW;AAEV,SAAO,2BADI,eAAe,UACU,CAAC;;CAEtC,QAAQ,UACP,oBAAoB;EACnB,OAAO;EACP;EACA,SAAS;EACT,SAAS,YAAY,YAAY;EACjC;EACA,CAAC;CACH,CAAC;;;AAIH,MAAa,sBACZ,QACA,aACA,YAEA,OAAO,IAAI,aAAa;CACvB,MAAM,SAAS,OAAO,OAAO,IAAI;EAChC,WAAW,oBAAoB,OAAO;EAMtC,aACC,oBAAoB;GACnB,OAAO;GACP;GACA;GACA,SAAS,YAAY,YAAY;GACjC,CAAC;EACH,CAAC;CACF,MAAM,SAAS,OAAO,gBAAgB,OAAO,QAAQ,aAAa,QAAQ;AAC1E,KAAI,WAAW,UAKd,QAAO,OAAO,OAAO,KACpB,oBAAoB;EACnB,OAAO;EACP;EACA;EACA,SAAS,YAAY,YAAY,aAAa,OAAO,6BAA6B,QAAQ;EAC1F,MAAM;EACN,CAAC,CACF;AAEF,QAAO,OAAO,OAAO,IAAI;EACxB,WAAW;AAEV,UAAO,2BADI,eAAe,cAAc,OAAO,UACX,CAAC;;EAItC,aACC,oBAAoB;GACnB,OAAO;GACP;GACA;GACA,SAAS,YAAY,YAAY;GACjC,CAAC;EACH,CAAC;EACD;;;;AAKH,MAAa,mCACZ,WACA,aACA,YAEA,OAAO,IAAI;CACV,WAAW;AAEV,SAAO,2BADI,eAAe,cAAc,UACJ,CAAC;;CAKtC,aACC,oBAAoB;EACnB,OAAO;EACP;EACA;EACA,SAAS,YAAY,YAAY;EACjC,CAAC;CACH,CAAC;AAQH,MAAM,8BAA8B,QAAyC;CAC5E,SAAS,GAAG,cAAc;CAC1B,QAAQ;CACR,WAAW,GAAG,cAAc,CAAC,YAAY;CACzC,QAAQ;CACR,cAAc,GAAG,cAAc;CAC/B"}
+{"version":3,"file":"keypair.mjs","names":[],"sources":["../../../src/plugins/account/keypair.ts"],"sourcesContent":["// Account plugin — keypair generation + scheme normalization helpers.\n//\n// Distilled-doc finding (12-account.md \"Scheme normalization\"\n// invariant): scheme surfaced to consumers MUST be lowercased at the\n// account boundary. Mixed-case from the SDK leaks into manifest\n// serialization and on-chain Move type matching if not converted. We\n// pin the canonical lowercased union at this module's boundary and\n// every variant resolver dumps through `normalizeScheme` before\n// producing the resolved value.\n//\n// Distilled-doc opportunity (\"Co-locate the canonical Account-value\n// Schema with the canonical type\"): the canonical signature scheme\n// union lives here, NOT next to the factory, so future Schema sits\n// alongside the type.\n\nimport { Effect } from 'effect';\n\nimport { decodeSuiPrivateKey } from '@mysten/sui/cryptography';\nimport { Ed25519Keypair } from '@mysten/sui/keypairs/ed25519';\n\nimport {\n\taccountAcquireError,\n\ttype AccountAcquireError,\n\ttype AccountVariantKind,\n} from './errors.ts';\n\n/** Lowercased signature scheme — the canonical wire form. The SDK\n *  occasionally hands us `'ED25519'` / `'Secp256k1'`; the boundary\n *  conversion lives in `normalizeScheme`. */\nexport type SignatureScheme = 'ed25519' | 'secp256k1' | 'secp256r1';\n\n/** Resolved keypair shape — the variant resolvers all funnel into\n *  this so the funding + register passes are variant-agnostic.\n *\n *  Note: impersonation accounts do NOT produce a `Keypair`; they\n *  produce a `SyntheticImpersonationSigner` (see\n *  `variants/impersonate.ts`). The discriminator lives on the\n *  resolved `AccountValue` (architecture: distilled doc opportunity\n *  \"Tighten the resolved-account type\"). */\nexport interface ResolvedKeypair {\n\treadonly address: string;\n\treadonly scheme: SignatureScheme;\n\treadonly publicKey: Uint8Array;\n\t/** Opaque signer handle — typed loosely here because the real\n\t *  variants (a generated/recovered Ed25519 keypair + a\n\t *  bring-your-own `Signer`) share no narrow TS type beyond\n\t *  `Signer`. The wallet / sign-and-execute capability narrows\n\t *  downstream. */\n\treadonly signer: unknown;\n\t/** Bech32-encoded secret. Only present for the `ephemeral` variant\n\t *  (the persisted generated key) — `null` for `signer` (we never\n\t *  ask for it) and `impersonate` (no secret exists). */\n\treadonly bech32Secret: string | null;\n}\n\n/** Normalize the SDK's mixed-case scheme to the lowercased wire form.\n *  Unknown schemes surface as a typed acquisition error (distilled\n *  doc: \"Unsupported signature scheme (multisig / zklogin / passkey)\n *  — currently a raw throw; should be promoted to the typed-error\n *  channel\"). */\nexport const normalizeScheme = (\n\traw: string,\n\taccountName: string,\n\tvariant: AccountVariantKind,\n): Effect.Effect<SignatureScheme, AccountAcquireError> => {\n\tconst lower = raw.toLowerCase();\n\tif (lower === 'ed25519' || lower === 'secp256k1' || lower === 'secp256r1') {\n\t\treturn Effect.succeed(lower);\n\t}\n\treturn Effect.fail(\n\t\taccountAcquireError({\n\t\t\tphase: 'unsupported-scheme',\n\t\t\taccountName,\n\t\t\tvariant,\n\t\t\tmessage: `Account '${accountName}': unsupported signature scheme '${raw}'. devstack supports ed25519, secp256k1, secp256r1.`,\n\t\t\thint: 'Multisig, zklogin, and passkey schemes are not yet supported via the Account plugin — bring your own Signer via {kind:\"signer\"}.',\n\t\t}),\n\t);\n};\n\n/** Generate a fresh Ed25519 keypair. The default for the\n *  `ephemeral` variant.\n *\n *  Architecture-distilled invariant: schemes other than Ed25519\n *  must be brought in via the `signer` variant (pass a Secp256* or\n *  custom `Keypair`/`Signer`); we never generate Secp256* keys from\n *  scratch. */\nexport const generateEd25519Keypair = (\n\taccountName: string,\n): Effect.Effect<ResolvedKeypair, AccountAcquireError> =>\n\tEffect.try({\n\t\ttry: () => {\n\t\t\tconst kp = Ed25519Keypair.generate();\n\t\t\treturn resolvedKeypairFromEd25519(kp);\n\t\t},\n\t\tcatch: (cause): AccountAcquireError =>\n\t\t\taccountAcquireError({\n\t\t\t\tphase: 'generate-keypair',\n\t\t\t\taccountName,\n\t\t\t\tvariant: 'ephemeral',\n\t\t\t\tmessage: `Account '${accountName}': Ed25519Keypair.generate() threw.`,\n\t\t\t\tcause,\n\t\t\t}),\n\t});\n\n/** Decode a bech32 `suiprivkey1...` string into a resolved keypair.\n *  Used by the `ephemeral` variant to recover a persisted key. */\nexport const decodeBech32Secret = (\n\tbech32: string,\n\taccountName: string,\n\tvariant: AccountVariantKind,\n): Effect.Effect<ResolvedKeypair, AccountAcquireError> =>\n\tEffect.gen(function* () {\n\t\tconst parsed = yield* Effect.try({\n\t\t\ttry: () => decodeSuiPrivateKey(bech32),\n\t\t\t// Secret-leak guard: the thrown error from `decodeSuiPrivateKey`\n\t\t\t// can echo the rejected bech32 string back in its message, so we\n\t\t\t// deliberately DROP the raw `cause`. The typed `message` already\n\t\t\t// names the failure; a malformed-secret error carries no\n\t\t\t// actionable diagnostic beyond \"it was malformed\".\n\t\t\tcatch: (): AccountAcquireError =>\n\t\t\t\taccountAcquireError({\n\t\t\t\t\tphase: 'decode-inline',\n\t\t\t\t\taccountName,\n\t\t\t\t\tvariant,\n\t\t\t\t\tmessage: `Account '${accountName}': decodeSuiPrivateKey() rejected the supplied bech32 secret.`,\n\t\t\t\t}),\n\t\t});\n\t\tconst scheme = yield* normalizeScheme(parsed.scheme, accountName, variant);\n\t\tif (scheme !== 'ed25519') {\n\t\t\t// Architecture-distilled: today we only construct Ed25519 here.\n\t\t\t// Secp256k1 / Secp256r1 paths land when the SDK's per-scheme\n\t\t\t// Keypair classes are wired in; the typed-error channel keeps\n\t\t\t// the failure actionable until then.\n\t\t\treturn yield* Effect.fail(\n\t\t\t\taccountAcquireError({\n\t\t\t\t\tphase: 'unsupported-scheme',\n\t\t\t\t\taccountName,\n\t\t\t\t\tvariant,\n\t\t\t\t\tmessage: `Account '${accountName}': scheme '${scheme}' is not yet wired for the ${variant} variant.`,\n\t\t\t\t\thint: 'Wire the matching @mysten/sui/keypairs/<scheme> import next to the Ed25519 path.',\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\t\treturn yield* Effect.try({\n\t\t\ttry: () => {\n\t\t\t\tconst kp = Ed25519Keypair.fromSecretKey(parsed.secretKey);\n\t\t\t\treturn resolvedKeypairFromEd25519(kp);\n\t\t\t},\n\t\t\t// Secret-leak guard: `fromSecretKey` can echo the decoded\n\t\t\t// secret-key bytes in its error — DROP the raw `cause`.\n\t\t\tcatch: (): AccountAcquireError =>\n\t\t\t\taccountAcquireError({\n\t\t\t\t\tphase: 'decode-inline',\n\t\t\t\t\taccountName,\n\t\t\t\t\tvariant,\n\t\t\t\t\tmessage: `Account '${accountName}': Ed25519Keypair.fromSecretKey() rejected the decoded secret.`,\n\t\t\t\t}),\n\t\t});\n\t});\n\nconst resolvedKeypairFromEd25519 = (kp: Ed25519Keypair): ResolvedKeypair => ({\n\taddress: kp.toSuiAddress(),\n\tscheme: 'ed25519',\n\tpublicKey: kp.getPublicKey().toRawBytes(),\n\tsigner: kp,\n\tbech32Secret: kp.getSecretKey(),\n});\n"],"mappings":";;;;;;;;;;AA4DA,MAAa,mBACZ,KACA,aACA,YACyD;CACzD,MAAM,QAAQ,IAAI,YAAY;CAC9B,IAAI,UAAU,aAAa,UAAU,eAAe,UAAU,aAC7D,OAAO,OAAO,QAAQ,KAAK;CAE5B,OAAO,OAAO,KACb,oBAAoB;EACnB,OAAO;EACP;EACA;EACA,SAAS,YAAY,YAAY,mCAAmC,IAAI;EACxE,MAAM;CACP,CAAC,CACF;AACD;;;;;;;;AASA,MAAa,0BACZ,gBAEA,OAAO,IAAI;CACV,WAAW;EAEV,OAAO,2BADI,eAAe,SACS,CAAC;CACrC;CACA,QAAQ,UACP,oBAAoB;EACnB,OAAO;EACP;EACA,SAAS;EACT,SAAS,YAAY,YAAY;EACjC;CACD,CAAC;AACH,CAAC;;;AAIF,MAAa,sBACZ,QACA,aACA,YAEA,OAAO,IAAI,aAAa;CACvB,MAAM,SAAS,OAAO,OAAO,IAAI;EAChC,WAAW,oBAAoB,MAAM;EAMrC,aACC,oBAAoB;GACnB,OAAO;GACP;GACA;GACA,SAAS,YAAY,YAAY;EAClC,CAAC;CACH,CAAC;CACD,MAAM,SAAS,OAAO,gBAAgB,OAAO,QAAQ,aAAa,OAAO;CACzE,IAAI,WAAW,WAKd,OAAO,OAAO,OAAO,KACpB,oBAAoB;EACnB,OAAO;EACP;EACA;EACA,SAAS,YAAY,YAAY,aAAa,OAAO,6BAA6B,QAAQ;EAC1F,MAAM;CACP,CAAC,CACF;CAED,OAAO,OAAO,OAAO,IAAI;EACxB,WAAW;GAEV,OAAO,2BADI,eAAe,cAAc,OAAO,SACZ,CAAC;EACrC;EAGA,aACC,oBAAoB;GACnB,OAAO;GACP;GACA;GACA,SAAS,YAAY,YAAY;EAClC,CAAC;CACH,CAAC;AACF,CAAC;AAEF,MAAM,8BAA8B,QAAyC;CAC5E,SAAS,GAAG,aAAa;CACzB,QAAQ;CACR,WAAW,GAAG,aAAa,CAAC,CAAC,WAAW;CACxC,QAAQ;CACR,cAAc,GAAG,aAAa;AAC/B"}

package/dist/plugins/account/lease.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"lease.mjs","names":[],"sources":["../../../src/plugins/account/lease.ts"],"sourcesContent":["// Account plugin — per-address lease helper.\n//\n// Thin wrapper over `LeaseBrokerService.acquire(...)` that opens a\n// fresh scope per call and keys the lease as `account:<address>`.\n// Both the funding pass (`funding.ts`) and the resolved-value\n// sign/execute closures (`service.ts`) share this helper so the\n// per-key encoding lives in exactly one place.\n//\n// Substrate name-blindness: the broker treats the key as opaque —\n// the `account:` prefix is a plugin convention so the broker's\n// `holders()` snapshot is readable in the renderer / debug logs.\n\nimport { Effect } from 'effect';\n\nimport { leaseKey, type LeaseBroker } from '../../substrate/runtime/lease-broker/index.ts';\n\n/** Run `effect` while holding the per-address lease. Scope-bound\n *  release: a fresh scope is opened per call, the broker installs\n *  an uninterruptible finalizer, and the lease drops the moment\n *  the inner Effect returns. Same-address concurrent callers\n *  serialize via the broker's FIFO queue.\n *\n *  Non-reentrant: nested calls for the SAME (broker, accountName,\n *  address) tuple deadlock. The broker has no concept of\n *  re-entrancy by design — per-address sequence-number semantics\n *  require at-most-one in-flight. */\nexport const withAddressLease = <A, E, R>(\n\tbroker: LeaseBroker,\n\taccountName: string,\n\taddress: string,\n\teffect: Effect.Effect<A, E, R>,\n): Effect.Effect<A, E, R> =>\n\tEffect.scoped(\n\t\tEffect.gen(function* () {\n\t\t\tyield* broker.acquire(leaseKey(`account:${address}`), accountName);\n\t\t\treturn yield* effect;\n\t\t}),\n\t);\n"],"mappings":";;;;;;;;;;;;;;AA0BA,MAAa,oBACZ,QACA,aACA,SACA,WAEA,OAAO,OACN,OAAO,IAAI,aAAa;AACvB,QAAO,OAAO,QAAQ,SAAS,WAAW,UAAU,EAAE,YAAY;AAClE,QAAO,OAAO;EACb,CACF"}
+{"version":3,"file":"lease.mjs","names":[],"sources":["../../../src/plugins/account/lease.ts"],"sourcesContent":["// Account plugin — per-address lease helper.\n//\n// Thin wrapper over `LeaseBrokerService.acquire(...)` that opens a\n// fresh scope per call and keys the lease as `account:<address>`.\n// Both the funding pass (`funding.ts`) and the resolved-value\n// sign/execute closures (`service.ts`) share this helper so the\n// per-key encoding lives in exactly one place.\n//\n// Substrate name-blindness: the broker treats the key as opaque —\n// the `account:` prefix is a plugin convention so the broker's\n// `holders()` snapshot is readable in the renderer / debug logs.\n\nimport { Effect } from 'effect';\n\nimport { leaseKey, type LeaseBroker } from '../../substrate/runtime/lease-broker/index.ts';\n\n/** Run `effect` while holding the per-address lease. Scope-bound\n *  release: a fresh scope is opened per call, the broker installs\n *  an uninterruptible finalizer, and the lease drops the moment\n *  the inner Effect returns. Same-address concurrent callers\n *  serialize via the broker's FIFO queue.\n *\n *  Non-reentrant: nested calls for the SAME (broker, accountName,\n *  address) tuple deadlock. The broker has no concept of\n *  re-entrancy by design — per-address sequence-number semantics\n *  require at-most-one in-flight. */\nexport const withAddressLease = <A, E, R>(\n\tbroker: LeaseBroker,\n\taccountName: string,\n\taddress: string,\n\teffect: Effect.Effect<A, E, R>,\n): Effect.Effect<A, E, R> =>\n\tEffect.scoped(\n\t\tEffect.gen(function* () {\n\t\t\tyield* broker.acquire(leaseKey(`account:${address}`), accountName);\n\t\t\treturn yield* effect;\n\t\t}),\n\t);\n"],"mappings":";;;;;;;;;;;;;;AA0BA,MAAa,oBACZ,QACA,aACA,SACA,WAEA,OAAO,OACN,OAAO,IAAI,aAAa;CACvB,OAAO,OAAO,QAAQ,SAAS,WAAW,SAAS,GAAG,WAAW;CACjE,OAAO,OAAO;AACf,CAAC,CACF"}