@mysten-incubation/devstack 0.1.1 → 0.2.0

package/dist/substrate/runtime/state-store/service.mjs

@@ -1,145 +0,0 @@
-import { StackPathsService } from "../paths.mjs";
-import { StateStoreError } from "../errors.mjs";
-import { atomicWriteJson } from "../atomic-write.mjs";
-import { decodeJsonText } from "../runtime-decode.mjs";
-import { StateDocument, emptyDocument } from "./schema.mjs";
-import { CrossProcessLock } from "../cross-process/lock.mjs";
-import { Context, Effect, FileSystem, Layer, Ref } from "effect";
-//#region src/substrate/runtime/state-store/service.ts
-/**
-* The substrate-internal state-store service. The
-* `StateStore` interface re-exported from `substrate/state-store.ts`
-* is the user-facing shape; this is the wired-up implementation.
-*/
-var StateStoreService = class extends Context.Service()("@devstack/substrate/StateStore") {};
-/**
-* Parse `StateKey<V>` (`<pluginKey>/<suffix>`) into its two parts.
-* The key invariant from `substrate/state-store.ts`'s
-* `defineStateKey` is the single `/` separator; we cope with
-* suffix-contains-slash by splitting on the FIRST `/`.
-*/
-const splitKey = (key) => {
-	const i = key.indexOf("/");
-	if (i < 0) return {
-		plugin: "__malformed__",
-		suffix: key
-	};
-	return {
-		plugin: key.slice(0, i),
-		suffix: key.slice(i + 1)
-	};
-};
-/** Read+decode the document. Missing file → empty document. */
-const readDocument = Effect.gen(function* () {
-	const fs = yield* FileSystem.FileSystem;
-	const paths = yield* StackPathsService;
-	if (!(yield* fs.exists(paths.stateFile).pipe(Effect.catch((cause) => Effect.fail(new StateStoreError({
-		reason: "io-failed",
-		detail: `failed to stat state file: ${paths.stateFile}`,
-		cause
-	})))))) return emptyDocument;
-	return yield* decodeJsonText(StateDocument, yield* fs.readFileString(paths.stateFile).pipe(Effect.catch((cause) => Effect.fail(new StateStoreError({
-		reason: "io-failed",
-		detail: `failed to read state file: ${paths.stateFile}`,
-		cause
-	})))), {
-		source: paths.stateFile,
-		mkError: (issue) => new StateStoreError({
-			reason: "corruption",
-			detail: issue.message === "failed to parse JSON" ? `state file is not valid JSON: ${paths.stateFile}` : `state file failed schema decode: ${paths.stateFile}`,
-			cause: issue.cause
-		})
-	});
-}).pipe(Effect.withSpan("substrate.stateStore.read"));
-/** Write+encode the document atomically. */
-const writeDocument = (doc) => Effect.gen(function* () {
-	const paths = yield* StackPathsService;
-	yield* atomicWriteJson(paths.stateFile, StateDocument, doc).pipe(Effect.catch((cause) => Effect.fail(new StateStoreError({
-		reason: "io-failed",
-		detail: `atomic write failed: ${paths.stateFile}`,
-		cause
-	}))));
-}).pipe(Effect.withSpan("substrate.stateStore.write"));
-Layer.effect(StateStoreService, Effect.gen(function* () {
-	const lock = yield* CrossProcessLock;
-	const fs = yield* FileSystem.FileSystem;
-	const paths = yield* StackPathsService;
-	const provideEnv = (effect) => effect.pipe(Effect.provideService(FileSystem.FileSystem, fs), Effect.provideService(StackPathsService, paths));
-	const initial = yield* provideEnv(readDocument);
-	const cache = yield* Ref.make(initial);
-	const get = (key) => Effect.gen(function* () {
-		const doc = yield* Ref.get(cache);
-		const { plugin, suffix } = splitKey(key);
-		const entry = doc.plugins[plugin]?.[suffix];
-		if (!entry) return null;
-		if (entry.state === "tombstone") return null;
-		return entry.value;
-	});
-	const mapLockErrors = (eff) => eff.pipe(Effect.catchTags({
-		StackLockTimeoutError: (e) => Effect.fail(new StateStoreError({
-			reason: "lock-contention",
-			detail: `state-store write blocked: peer holds ${e.path} (waited ${e.waitedMillis}ms)`,
-			cause: e
-		})),
-		StackLockIoError: (e) => Effect.fail(new StateStoreError({
-			reason: "io-failed",
-			detail: `state-store lock IO error on ${e.path}`,
-			cause: e.cause
-		}))
-	}));
-	const set = (key, value) => mapLockErrors(lock.withLock(provideEnv(Effect.uninterruptible(Effect.gen(function* () {
-		const fresh = yield* readDocument;
-		const { plugin, suffix } = splitKey(key);
-		const next = {
-			version: 1,
-			plugins: {
-				...fresh.plugins,
-				[plugin]: {
-					...fresh.plugins[plugin],
-					[suffix]: {
-						state: "present",
-						value,
-						updatedAt: Date.now()
-					}
-				}
-			}
-		};
-		yield* writeDocument(next);
-		yield* Ref.set(cache, next);
-	})))));
-	const del = (key) => mapLockErrors(lock.withLock(provideEnv(Effect.uninterruptible(Effect.gen(function* () {
-		const fresh = yield* readDocument;
-		const { plugin, suffix } = splitKey(key);
-		const next = {
-			version: 1,
-			plugins: {
-				...fresh.plugins,
-				[plugin]: {
-					...fresh.plugins[plugin],
-					[suffix]: {
-						state: "tombstone",
-						value: null,
-						updatedAt: Date.now()
-					}
-				}
-			}
-		};
-		yield* writeDocument(next);
-		yield* Ref.set(cache, next);
-	})))));
-	const listUnder = (prefix) => Effect.gen(function* () {
-		const ns = (yield* Ref.get(cache)).plugins[prefix];
-		if (!ns) return [];
-		return Object.entries(ns).filter(([, entry]) => entry.state === "present").map(([suffix]) => `${prefix}/${suffix}`);
-	});
-	return StateStoreService.of({
-		get,
-		set,
-		delete: del,
-		listUnder
-	});
-}));
-//#endregion
-export { StateStoreService };
-
-//# sourceMappingURL=service.mjs.map

package/dist/substrate/runtime/state-store/service.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"service.mjs","names":[],"sources":["../../../../src/substrate/runtime/state-store/service.ts"],"sourcesContent":["// State-store implementation.\n//\n// Per-stack JSON file at `<runtime-root>/stacks/<stack>/state.json`.\n// Plugin-keyed namespacing; tombstone-vs-missing distinction;\n// atomic-write on every mutation; cross-process safety via the\n// injected lock.\n//\n// Tombstones:\n//   - `get` on a tombstoned key returns `null` (same as missing) —\n//     the type-level contract is \"absent\". The on-disk distinction\n//     is preserved so snapshot/restore round-trips correctly\n//     classify a deletion (tombstone) vs a never-written key\n//     (missing). Inspectors can `peek` to see the discriminator;\n//     normal plugin code never needs it.\n//   - `delete` writes a tombstone (rather than deleting the field).\n//     Two reasons:\n//       (a) Snapshot equality is now precise — \"removed since\n//           snapshot\" survives the round-trip.\n//       (b) An interrupted writer never silently resurrects a\n//           previously-deleted key (the present-record stays\n//           tombstone-shaped until set() runs again).\n//   - `wipe()` (full plugin namespace removal) IS a hard remove;\n//     tombstones are field-grain, namespace-grain wipe is route-\n//     grain.\n\nimport { Context, Effect, FileSystem, Layer, Ref } from 'effect';\n\nimport type { PluginKey } from '../../brand.ts';\nimport type { StateKey, StateStore } from '../../state-store.ts';\nimport { atomicWriteJson } from '../atomic-write.ts';\nimport { CrossProcessLock } from '../cross-process/lock.ts';\nimport type { StackLockIoError, StackLockTimeoutError } from '../cross-process/stack-lock.ts';\nimport { StateStoreError } from '../errors.ts';\nimport { StackPathsService } from '../paths.ts';\nimport { decodeJsonText } from '../runtime-decode.ts';\nimport { emptyDocument, StateDocument, type StateEntry } from './schema.ts';\n\n/**\n * The substrate-internal state-store service. The\n * `StateStore` interface re-exported from `substrate/state-store.ts`\n * is the user-facing shape; this is the wired-up implementation.\n */\nexport class StateStoreService extends Context.Service<StateStoreService, StateStore>()(\n\t'@devstack/substrate/StateStore',\n) {}\n\n/**\n * Parse `StateKey<V>` (`<pluginKey>/<suffix>`) into its two parts.\n * The key invariant from `substrate/state-store.ts`'s\n * `defineStateKey` is the single `/` separator; we cope with\n * suffix-contains-slash by splitting on the FIRST `/`.\n */\nconst splitKey = (key: string): { readonly plugin: string; readonly suffix: string } => {\n\tconst i = key.indexOf('/');\n\t// A key without `/` is programmer error (`defineStateKey`\n\t// always produces one). Fall back gracefully so we don't\n\t// hard-crash on a misuse — store the whole string under a\n\t// `__malformed__` namespace, surfaced on listUnder for the\n\t// authoring plugin to notice in dev.\n\tif (i < 0) return { plugin: '__malformed__', suffix: key };\n\treturn { plugin: key.slice(0, i), suffix: key.slice(i + 1) };\n};\n\n/** Read+decode the document. Missing file → empty document. */\nconst readDocument: Effect.Effect<\n\tStateDocument,\n\tStateStoreError,\n\tFileSystem.FileSystem | StackPathsService\n> = Effect.gen(function* () {\n\tconst fs = yield* FileSystem.FileSystem;\n\tconst paths = yield* StackPathsService;\n\tconst exists = yield* fs.exists(paths.stateFile).pipe(\n\t\tEffect.catch((cause) =>\n\t\t\tEffect.fail(\n\t\t\t\tnew StateStoreError({\n\t\t\t\t\treason: 'io-failed',\n\t\t\t\t\tdetail: `failed to stat state file: ${paths.stateFile}`,\n\t\t\t\t\tcause,\n\t\t\t\t}),\n\t\t\t),\n\t\t),\n\t);\n\tif (!exists) return emptyDocument;\n\tconst text = yield* fs.readFileString(paths.stateFile).pipe(\n\t\tEffect.catch((cause) =>\n\t\t\tEffect.fail(\n\t\t\t\tnew StateStoreError({\n\t\t\t\t\treason: 'io-failed',\n\t\t\t\t\tdetail: `failed to read state file: ${paths.stateFile}`,\n\t\t\t\t\tcause,\n\t\t\t\t}),\n\t\t\t),\n\t\t),\n\t);\n\treturn yield* decodeJsonText(StateDocument, text, {\n\t\tsource: paths.stateFile,\n\t\tmkError: (issue) =>\n\t\t\tnew StateStoreError({\n\t\t\t\treason: 'corruption',\n\t\t\t\tdetail:\n\t\t\t\t\tissue.message === 'failed to parse JSON'\n\t\t\t\t\t\t? `state file is not valid JSON: ${paths.stateFile}`\n\t\t\t\t\t\t: `state file failed schema decode: ${paths.stateFile}`,\n\t\t\t\tcause: issue.cause,\n\t\t\t}),\n\t});\n}).pipe(Effect.withSpan('substrate.stateStore.read'));\n\n/** Write+encode the document atomically. */\nconst writeDocument = (\n\tdoc: StateDocument,\n): Effect.Effect<void, StateStoreError, FileSystem.FileSystem | StackPathsService> =>\n\tEffect.gen(function* () {\n\t\tconst paths = yield* StackPathsService;\n\t\tyield* atomicWriteJson(paths.stateFile, StateDocument, doc).pipe(\n\t\t\tEffect.catch((cause) =>\n\t\t\t\tEffect.fail(\n\t\t\t\t\tnew StateStoreError({\n\t\t\t\t\t\treason: 'io-failed',\n\t\t\t\t\t\tdetail: `atomic write failed: ${paths.stateFile}`,\n\t\t\t\t\t\tcause,\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t\t),\n\t\t);\n\t}).pipe(Effect.withSpan('substrate.stateStore.write'));\n\n/**\n * The state-store Layer. Caches the document in a process-local\n * `Ref` so reads after the first don't touch disk; every mutation\n * runs under the cross-process lock so foreign processes don't\n * trample our changes mid-flight.\n *\n * Cache semantics: the in-process `Ref` is the truth for in-process\n * readers; it is invalidated by re-reading inside the locked\n * mutation. This deliberately does NOT poll the file — if another\n * process writes between our reads, we'll observe the change on the\n * next `withLock` r-m-w (re-read inside the critical section).\n * Plugins that need \"see foreign writes\" must invoke `refresh`\n * (exposed for the supervisor / watch dispatcher).\n */\nexport const layerStateStore: Layer.Layer<\n\tStateStoreService,\n\tStateStoreError,\n\tFileSystem.FileSystem | StackPathsService | CrossProcessLock\n> = Layer.effect(\n\tStateStoreService,\n\tEffect.gen(function* () {\n\t\tconst lock = yield* CrossProcessLock;\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tconst paths = yield* StackPathsService;\n\t\t// `readDocument` / `writeDocument` declare `FileSystem |\n\t\t// StackPathsService` requirements; we discharge both from the\n\t\t// Layer-level closure so the per-method Effects are `R = never`,\n\t\t// matching the `StateStore` contract.\n\t\tconst provideEnv = <A, E>(\n\t\t\teffect: Effect.Effect<A, E, FileSystem.FileSystem | StackPathsService>,\n\t\t): Effect.Effect<A, E> =>\n\t\t\teffect.pipe(\n\t\t\t\tEffect.provideService(FileSystem.FileSystem, fs),\n\t\t\t\tEffect.provideService(StackPathsService, paths),\n\t\t\t);\n\t\t// Prime the cache with the on-disk document. If decoding\n\t\t// fails at boot, we fail the Layer — the supervisor must\n\t\t// surface the corruption to the user (not silently re-init).\n\t\tconst initial = yield* provideEnv(readDocument);\n\t\tconst cache = yield* Ref.make(initial);\n\n\t\tconst get: StateStore['get'] = <V>(key: StateKey<V>) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst doc = yield* Ref.get(cache);\n\t\t\t\tconst { plugin, suffix } = splitKey(key);\n\t\t\t\tconst entry: StateEntry | undefined = doc.plugins[plugin]?.[suffix];\n\t\t\t\tif (!entry) return null;\n\t\t\t\tif (entry.state === 'tombstone') return null;\n\t\t\t\treturn entry.value as V;\n\t\t\t});\n\n\t\t// Map the lock's typed acquire failures onto our `lock-contention`\n\t\t// reason on `StateStoreError`. The `StateStore` contract already\n\t\t// advertises that mutation methods surface this reason — caller\n\t\t// recovery is the same shape as any other write failure (retry on\n\t\t// the next user action; surface in the supervisor cascade).\n\t\tconst mapLockErrors = <A, R>(\n\t\t\teff: Effect.Effect<A, StateStoreError | StackLockTimeoutError | StackLockIoError, R>,\n\t\t): Effect.Effect<A, StateStoreError, R> =>\n\t\t\teff.pipe(\n\t\t\t\tEffect.catchTags({\n\t\t\t\t\tStackLockTimeoutError: (e) =>\n\t\t\t\t\t\tEffect.fail(\n\t\t\t\t\t\t\tnew StateStoreError({\n\t\t\t\t\t\t\t\treason: 'lock-contention',\n\t\t\t\t\t\t\t\tdetail: `state-store write blocked: peer holds ${e.path} (waited ${e.waitedMillis}ms)`,\n\t\t\t\t\t\t\t\tcause: e,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t),\n\t\t\t\t\tStackLockIoError: (e) =>\n\t\t\t\t\t\tEffect.fail(\n\t\t\t\t\t\t\tnew StateStoreError({\n\t\t\t\t\t\t\t\treason: 'io-failed',\n\t\t\t\t\t\t\t\tdetail: `state-store lock IO error on ${e.path}`,\n\t\t\t\t\t\t\t\tcause: e.cause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t),\n\t\t\t\t}),\n\t\t\t);\n\n\t\tconst set: StateStore['set'] = <V>(key: StateKey<V>, value: V) =>\n\t\t\tmapLockErrors(\n\t\t\t\tlock.withLock(\n\t\t\t\t\tprovideEnv(\n\t\t\t\t\t\t// Uninterruptible: an interrupt landing between the\n\t\t\t\t\t\t// disk write and the cache update would leave the\n\t\t\t\t\t\t// in-process cache stale vs disk. The section is\n\t\t\t\t\t\t// short and already serialized by `withLock`, so\n\t\t\t\t\t\t// masking interruption here costs nothing and keeps\n\t\t\t\t\t\t// cache/disk coherent.\n\t\t\t\t\t\tEffect.uninterruptible(\n\t\t\t\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\t\t\t\t// Re-read INSIDE the lock so we don't clobber\n\t\t\t\t\t\t\t\t// foreign writes that landed since our prime.\n\t\t\t\t\t\t\t\tconst fresh = yield* readDocument;\n\t\t\t\t\t\t\t\tconst { plugin, suffix } = splitKey(key);\n\t\t\t\t\t\t\t\tconst next: StateDocument = {\n\t\t\t\t\t\t\t\t\tversion: 1,\n\t\t\t\t\t\t\t\t\tplugins: {\n\t\t\t\t\t\t\t\t\t\t...fresh.plugins,\n\t\t\t\t\t\t\t\t\t\t[plugin]: {\n\t\t\t\t\t\t\t\t\t\t\t...fresh.plugins[plugin],\n\t\t\t\t\t\t\t\t\t\t\t[suffix]: {\n\t\t\t\t\t\t\t\t\t\t\t\tstate: 'present',\n\t\t\t\t\t\t\t\t\t\t\t\tvalue: value as unknown,\n\t\t\t\t\t\t\t\t\t\t\t\tupdatedAt: Date.now(),\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t};\n\t\t\t\t\t\t\t\tyield* writeDocument(next);\n\t\t\t\t\t\t\t\tyield* Ref.set(cache, next);\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t);\n\n\t\tconst del: StateStore['delete'] = <V>(key: StateKey<V>) =>\n\t\t\tmapLockErrors(\n\t\t\t\tlock.withLock(\n\t\t\t\t\tprovideEnv(\n\t\t\t\t\t\t// Uninterruptible for the same cache/disk coherence\n\t\t\t\t\t\t// reason as `set` — see the note there.\n\t\t\t\t\t\tEffect.uninterruptible(\n\t\t\t\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\t\t\t\tconst fresh = yield* readDocument;\n\t\t\t\t\t\t\t\tconst { plugin, suffix } = splitKey(key);\n\t\t\t\t\t\t\t\t// Tombstone-write — preserves the\n\t\t\t\t\t\t\t\t// \"deleted-since\" record across snapshots.\n\t\t\t\t\t\t\t\tconst next: StateDocument = {\n\t\t\t\t\t\t\t\t\tversion: 1,\n\t\t\t\t\t\t\t\t\tplugins: {\n\t\t\t\t\t\t\t\t\t\t...fresh.plugins,\n\t\t\t\t\t\t\t\t\t\t[plugin]: {\n\t\t\t\t\t\t\t\t\t\t\t...fresh.plugins[plugin],\n\t\t\t\t\t\t\t\t\t\t\t[suffix]: {\n\t\t\t\t\t\t\t\t\t\t\t\tstate: 'tombstone',\n\t\t\t\t\t\t\t\t\t\t\t\tvalue: null,\n\t\t\t\t\t\t\t\t\t\t\t\tupdatedAt: Date.now(),\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t};\n\t\t\t\t\t\t\t\tyield* writeDocument(next);\n\t\t\t\t\t\t\t\tyield* Ref.set(cache, next);\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t);\n\n\t\tconst listUnder: StateStore['listUnder'] = (prefix: PluginKey) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst doc = yield* Ref.get(cache);\n\t\t\t\tconst ns = doc.plugins[prefix];\n\t\t\t\tif (!ns) return [];\n\t\t\t\t// Skip tombstones from `listUnder` — they're\n\t\t\t\t// internally observable via `peek` but the public\n\t\t\t\t// \"what keys are present?\" view hides them.\n\t\t\t\treturn Object.entries(ns)\n\t\t\t\t\t.filter(([, entry]) => entry.state === 'present')\n\t\t\t\t\t.map(([suffix]) => `${prefix}/${suffix}`);\n\t\t\t});\n\n\t\treturn StateStoreService.of({\n\t\t\tget,\n\t\t\tset,\n\t\t\tdelete: del,\n\t\t\tlistUnder,\n\t\t});\n\t}),\n);\n"],"mappings":";;;;;;;;;;;;;AA0CA,IAAa,oBAAb,cAAuC,QAAQ,SAAwC,CACtF,iCACA,CAAC;;;;;;;AAQF,MAAM,YAAY,QAAsE;CACvF,MAAM,IAAI,IAAI,QAAQ,IAAI;AAM1B,KAAI,IAAI,EAAG,QAAO;EAAE,QAAQ;EAAiB,QAAQ;EAAK;AAC1D,QAAO;EAAE,QAAQ,IAAI,MAAM,GAAG,EAAE;EAAE,QAAQ,IAAI,MAAM,IAAI,EAAE;EAAE;;;AAI7D,MAAM,eAIF,OAAO,IAAI,aAAa;CAC3B,MAAM,KAAK,OAAO,WAAW;CAC7B,MAAM,QAAQ,OAAO;AAYrB,KAAI,EAAC,OAXiB,GAAG,OAAO,MAAM,UAAU,CAAC,KAChD,OAAO,OAAO,UACb,OAAO,KACN,IAAI,gBAAgB;EACnB,QAAQ;EACR,QAAQ,8BAA8B,MAAM;EAC5C;EACA,CAAC,CACF,CACD,CACD,EACY,QAAO;AAYpB,QAAO,OAAO,eAAe,eAAe,OAXxB,GAAG,eAAe,MAAM,UAAU,CAAC,KACtD,OAAO,OAAO,UACb,OAAO,KACN,IAAI,gBAAgB;EACnB,QAAQ;EACR,QAAQ,8BAA8B,MAAM;EAC5C;EACA,CAAC,CACF,CACD,CACD,EACiD;EACjD,QAAQ,MAAM;EACd,UAAU,UACT,IAAI,gBAAgB;GACnB,QAAQ;GACR,QACC,MAAM,YAAY,yBACf,iCAAiC,MAAM,cACvC,oCAAoC,MAAM;GAC9C,OAAO,MAAM;GACb,CAAC;EACH,CAAC;EACD,CAAC,KAAK,OAAO,SAAS,4BAA4B,CAAC;;AAGrD,MAAM,iBACL,QAEA,OAAO,IAAI,aAAa;CACvB,MAAM,QAAQ,OAAO;AACrB,QAAO,gBAAgB,MAAM,WAAW,eAAe,IAAI,CAAC,KAC3D,OAAO,OAAO,UACb,OAAO,KACN,IAAI,gBAAgB;EACnB,QAAQ;EACR,QAAQ,wBAAwB,MAAM;EACtC;EACA,CAAC,CACF,CACD,CACD;EACA,CAAC,KAAK,OAAO,SAAS,6BAA6B,CAAC;AAoBnD,MAAM,OACT,mBACA,OAAO,IAAI,aAAa;CACvB,MAAM,OAAO,OAAO;CACpB,MAAM,KAAK,OAAO,WAAW;CAC7B,MAAM,QAAQ,OAAO;CAKrB,MAAM,cACL,WAEA,OAAO,KACN,OAAO,eAAe,WAAW,YAAY,GAAG,EAChD,OAAO,eAAe,mBAAmB,MAAM,CAC/C;CAIF,MAAM,UAAU,OAAO,WAAW,aAAa;CAC/C,MAAM,QAAQ,OAAO,IAAI,KAAK,QAAQ;CAEtC,MAAM,OAA6B,QAClC,OAAO,IAAI,aAAa;EACvB,MAAM,MAAM,OAAO,IAAI,IAAI,MAAM;EACjC,MAAM,EAAE,QAAQ,WAAW,SAAS,IAAI;EACxC,MAAM,QAAgC,IAAI,QAAQ,UAAU;AAC5D,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,MAAM,UAAU,YAAa,QAAO;AACxC,SAAO,MAAM;GACZ;CAOH,MAAM,iBACL,QAEA,IAAI,KACH,OAAO,UAAU;EAChB,wBAAwB,MACvB,OAAO,KACN,IAAI,gBAAgB;GACnB,QAAQ;GACR,QAAQ,yCAAyC,EAAE,KAAK,WAAW,EAAE,aAAa;GAClF,OAAO;GACP,CAAC,CACF;EACF,mBAAmB,MAClB,OAAO,KACN,IAAI,gBAAgB;GACnB,QAAQ;GACR,QAAQ,gCAAgC,EAAE;GAC1C,OAAO,EAAE;GACT,CAAC,CACF;EACF,CAAC,CACF;CAEF,MAAM,OAA6B,KAAkB,UACpD,cACC,KAAK,SACJ,WAOC,OAAO,gBACN,OAAO,IAAI,aAAa;EAGvB,MAAM,QAAQ,OAAO;EACrB,MAAM,EAAE,QAAQ,WAAW,SAAS,IAAI;EACxC,MAAM,OAAsB;GAC3B,SAAS;GACT,SAAS;IACR,GAAG,MAAM;KACR,SAAS;KACT,GAAG,MAAM,QAAQ;MAChB,SAAS;MACT,OAAO;MACA;MACP,WAAW,KAAK,KAAK;MACrB;KACD;IACD;GACD;AACD,SAAO,cAAc,KAAK;AAC1B,SAAO,IAAI,IAAI,OAAO,KAAK;GAC1B,CACF,CACD,CACD,CACD;CAEF,MAAM,OAAgC,QACrC,cACC,KAAK,SACJ,WAGC,OAAO,gBACN,OAAO,IAAI,aAAa;EACvB,MAAM,QAAQ,OAAO;EACrB,MAAM,EAAE,QAAQ,WAAW,SAAS,IAAI;EAGxC,MAAM,OAAsB;GAC3B,SAAS;GACT,SAAS;IACR,GAAG,MAAM;KACR,SAAS;KACT,GAAG,MAAM,QAAQ;MAChB,SAAS;MACT,OAAO;MACP,OAAO;MACP,WAAW,KAAK,KAAK;MACrB;KACD;IACD;GACD;AACD,SAAO,cAAc,KAAK;AAC1B,SAAO,IAAI,IAAI,OAAO,KAAK;GAC1B,CACF,CACD,CACD,CACD;CAEF,MAAM,aAAsC,WAC3C,OAAO,IAAI,aAAa;EAEvB,MAAM,MAAK,OADQ,IAAI,IAAI,MAAM,EAClB,QAAQ;AACvB,MAAI,CAAC,GAAI,QAAO,EAAE;AAIlB,SAAO,OAAO,QAAQ,GAAG,CACvB,QAAQ,GAAG,WAAW,MAAM,UAAU,UAAU,CAChD,KAAK,CAAC,YAAY,GAAG,OAAO,GAAG,SAAS;GACzC;AAEH,QAAO,kBAAkB,GAAG;EAC3B;EACA;EACA,QAAQ;EACR;EACA,CAAC;EACD,CACF"}

package/dist/substrate/runtime/sui-execute/index.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/substrate/runtime/sui-execute/index.ts"],"sourcesContent":["// sui-execute — substrate helper for the Sui-SDK transaction\n// roundtrip.\n//\n// ARCHITECTURE NOTE — substrate-name-awareness escape hatch:\n//\n// This module is the ONE blessed substrate-side Sui-aware module.\n// The substrate is otherwise strictly name-blind (see ARCHITECTURE.md\n// §\"Substrate name-blindness\"), but the \"build → sign → execute →\n// wait → project\" roundtrip is duplicated verbatim across\n// `plugins/package/publish-executor.ts` and `plugins/action/execute.ts`\n// — ~80% identical line-for-line — and the same shape is needed for\n// `seal` (deploy + key-server registration), `coin.mint`, `action`,\n// and `deepbook` (publish + pool creation).\n//\n// Lifting the dispatch here gives every Sui-tx plugin one well-tested\n// surface and surfaces the SDK-envelope shape decisions (`include:\n// { effects, objectTypes }`, `$kind` projection, `FailedTransaction`\n// detection) ONCE.\n//\n// Boundary discipline:\n//\n//   - This module is L1-adjacent: it lives under `substrate/runtime/`\n//     but consumes opaque shapes (`unknown` SDK client; opaque\n//     signer closure). It does NOT import from `plugins/sui/*` or\n//     `@mysten/sui/*` — the caller passes in the resolved SDK ref\n//     and the signer; the substrate just orchestrates the roundtrip.\n//   - The return shape (`ExecutedReceipt`) is name-blind: a flat\n//     digest + a uniform `objectChanges` array. Callers map to their\n//     domain shape (PublishReceipt, ActionReceipt, MintReceipt, …).\n//   - Transport / protocol failures (serialize, sign, execute, no-digest,\n//     wait-for-finality) route through `SuiExecuteError` whose `phase`\n//     discriminates the failing step. Callers map to their plugin's\n//     phase taxonomy in their produce body's `mapError` closure.\n//   - On-chain `FailedTransaction` is a RETURN-CHANNEL variant of\n//     `SuiExecuteResult`, NOT an error — mirrors `account.signAndExecute`\n//     and STYLE_GUIDE §2's return-channel discriminated-union rule.\n//     Callers dispatch on `$kind` after the call.\n\nimport { Effect, Schema, Scope } from 'effect';\nimport type { ClientWithCoreApi } from '@mysten/sui/client';\n\nimport { formatUnknownError } from '../format-unknown-error.ts';\n\n// ---------------------------------------------------------------------------\n// Errors — substrate-style Schema.TaggedErrorClass\n// ---------------------------------------------------------------------------\n\n/** Tagged failure during one step of the Sui-tx roundtrip. `phase`\n *  discriminates which step failed so callers can map to their\n *  plugin's phase taxonomy (publish-tx, sign, parse, …) without\n *  losing the original cause.\n *\n *  On-chain `FailedTransaction` is NOT a phase here — it surfaces as\n *  the `$kind: 'FailedTransaction'` variant of `SuiExecuteResult`\n *  (return channel). Only transport / protocol failures live in this\n *  taxonomy. See STYLE_GUIDE §2. */\nexport class SuiExecuteError extends Schema.TaggedErrorClass<SuiExecuteError>()('SuiExecuteError', {\n\tphase: Schema.Literals(['serialize', 'sign', 'execute', 'no-digest', 'wait-for-finality']),\n\tsignerName: Schema.String,\n\tsignerAddress: Schema.String,\n\tmessage: Schema.String,\n\t/** Echoed digest when the SDK returned one but a later step\n\t *  failed — surfaces in cause-walker output. */\n\tdigest: Schema.optional(Schema.String),\n\tcause: Schema.optional(Schema.Defect),\n}) {}\n\n// ---------------------------------------------------------------------------\n// Inputs / outputs — opaque at the substrate boundary\n// ---------------------------------------------------------------------------\n\n/** The SDK client this helper drives. Accepts any `ClientWithCoreApi`\n *  (the published cross-transport surface from `@mysten/sui/client`).\n *  `executeSuiTx` calls `client.core.executeTransaction` /\n *  `client.core.waitForTransaction` per STYLE_GUIDE §16. */\nexport type SuiExecuteClient = ClientWithCoreApi;\n\n/** Serialised transaction-build callback. Returns the BCS bytes ready\n *  for signing. The caller owns the `Transaction` construction — the\n *  substrate does not import `@mysten/sui/transactions` — and resolves\n *  it via `Transaction.build({ client })`. */\nexport type SerializedTxBuilder = () => Promise<Uint8Array>;\n\nexport interface TransactionSignerScope<SignError = unknown> {\n\treadonly signTransaction: (\n\t\ttx: Uint8Array,\n\t) => Effect.Effect<{ readonly bytes: string; readonly signature: string }, SignError>;\n}\n\n/** Resolved signer — narrow slice of `AccountValue`. */\nexport interface ResolvedSigner {\n\treadonly name: string;\n\treadonly address: string;\n\treadonly signTransaction: (\n\t\ttx: Uint8Array,\n\t) => Effect.Effect<{ readonly bytes: string; readonly signature: string }, unknown>;\n\treadonly withTransactionSigner: <A, E, R>(\n\t\tbody: (signer: TransactionSignerScope) => Effect.Effect<A, E, R>,\n\t) => Effect.Effect<A, E, R>;\n}\n\n/** Flat per-object change record. Mirrors the union of fields that\n *  `PublishObjectChange` (package) and `ActionObjectChange` (action)\n *  expose so callers can pick whichever subset they surface. */\nexport interface ExecutedObjectChange {\n\treadonly objectId: string;\n\treadonly objectType?: string;\n\treadonly outputState?: string;\n\treadonly idOperation?: string;\n}\n\n/** Result of one successful execute round. Callers map this to their\n *  domain shape (PublishReceipt, ActionReceipt, MintReceipt, …). */\nexport interface ExecutedReceipt {\n\treadonly digest: string;\n\treadonly objectChanges: ReadonlyArray<ExecutedObjectChange>;\n}\n\n/** On-chain failure projection. The transaction was delivered +\n *  executed by the validator but the on-chain execution failed.\n *  Carries the digest (for log correlation) plus the validator's\n *  stringified error when one was attached. `executionError` is\n *  omitted when the SDK returns no message (STYLE_GUIDE §5: no\n *  sentinel placeholders at resolved-value surfaces). An envelope\n *  without a digest fails at projection with\n *  `SuiExecuteError(phase: 'no-digest')`.\n *\n *  This is the single source of truth for the on-chain-failure shape\n *  across the devstack: `account.SignAndExecuteResult`'s\n *  `FailedTransaction` variant carries it directly; every plugin that\n *  renders one of these failures into a user-facing error message goes\n *  through `formatExecutedFailure` (below). */\nexport interface ExecutedFailure {\n\treadonly digest: string;\n\treadonly executionError?: string;\n}\n\n/** Render the canonical \"digest + executionError-or-noted-absent\" tail\n *  used by every plugin's `FailedTransaction` surface. Pure projection;\n *  does not throw.\n *\n *  Used at the call site as e.g.\n *  `\\`seal publish ... ${formatExecutedFailure(result.FailedTransaction)}\\``.\n *  Centralising the wording means future tweaks propagate uniformly\n *  across the seal / coin / walrus / deepbook / action / package\n *  surfaces. */\nexport const formatExecutedFailure = (failure: ExecutedFailure): string =>\n\tfailure.executionError !== undefined\n\t\t? `at ${failure.digest}: ${failure.executionError}`\n\t\t: `at ${failure.digest} (no validator error attached)`;\n\n/** Outcome of `executeSuiTx`. Mirrors the SDK's discriminated\n *  `SuiClientTypes.TransactionResult` shape — on-chain failures are a\n *  RETURN VALUE (callers dispatch on `$kind`), NOT an error. Only\n *  transport / protocol failures (sign refused, RPC unreachable,\n *  finality wait broke, no digest) surface through `SuiExecuteError`.\n *  See STYLE_GUIDE §2 for the return-channel discipline this matches. */\nexport type SuiExecuteResult =\n\t| { readonly $kind: 'Transaction'; readonly Transaction: ExecutedReceipt }\n\t| { readonly $kind: 'FailedTransaction'; readonly FailedTransaction: ExecutedFailure };\n\n// ---------------------------------------------------------------------------\n// SDK envelope projection (matches publish-executor + action.execute)\n// ---------------------------------------------------------------------------\n\ninterface RawExecuteEnvelope {\n\treadonly $kind?: 'Transaction' | 'FailedTransaction';\n\treadonly Transaction?: {\n\t\treadonly digest?: string;\n\t\treadonly effects?: {\n\t\t\treadonly changedObjects?: ReadonlyArray<{\n\t\t\t\treadonly objectId?: string;\n\t\t\t\treadonly outputState?: string;\n\t\t\t\treadonly idOperation?: string;\n\t\t\t}>;\n\t\t};\n\t\treadonly objectTypes?: Readonly<Record<string, string>>;\n\t};\n\treadonly FailedTransaction?: {\n\t\treadonly digest?: string;\n\t\treadonly status?: { readonly error?: string };\n\t};\n}\n\n/** Pull the digest out of a raw `executeTransaction` envelope without\n *  committing to success vs on-chain failure. `FailedTransaction`\n *  carries its digest under a sibling key, so callers that only need\n *  the digest (impersonate / one-shot dispatch paths that don't run\n *  the full `executeSuiTx` projection) read it through this projector\n *  rather than re-deriving the `$kind`-branching shape inline.\n *  Returns `undefined` for a malformed envelope; callers decide\n *  whether a missing digest is a failure. */\nexport const extractExecuteDigest = (raw: unknown): string | undefined => {\n\tconst env = raw as RawExecuteEnvelope;\n\treturn env.$kind === 'FailedTransaction'\n\t\t? env.FailedTransaction?.digest\n\t\t: env.Transaction?.digest;\n};\n\n// ---------------------------------------------------------------------------\n// The helper\n// ---------------------------------------------------------------------------\n\n/** Drive the serialize → sign → execute → wait → project pipeline.\n *\n *  The caller passes:\n *   - `client`: an opaque SDK client exposing `executeTransaction` +\n *     `waitForTransaction` (matches the cast in both existing\n *     duplicates).\n *   - `signer`: a `ResolvedSigner` slice with an account-owned\n *     transaction scope. The build/sign/execute/wait pipeline runs\n *     inside that scope so gas/object-version resolution cannot race\n *     another transaction from the same address.\n *   - `build`: a closure returning the serialised tx bytes (the\n *     caller constructed the `Transaction` and resolved gas via\n *     `tx.build({ client })`).\n *   - `awaitFinality`: opt-out for the `waitForTransaction` step.\n *     Defaults to `true`. Some callers (action ready-probe) need it;\n *     others (mode-local publish ready probe path) wait separately\n *     via `getObject` polling and can pass `false`.\n *\n *  Returns a `SuiExecuteResult` discriminated union — callers dispatch\n *  on `$kind` to distinguish on-chain success (`'Transaction'`) from\n *  on-chain rejection (`'FailedTransaction'`). Transport / protocol\n *  failures (serialize, sign, execute, no-digest, wait-for-finality)\n *  surface as `SuiExecuteError` with a `phase` discriminator the\n *  caller maps to its plugin's phase taxonomy.\n */\nexport const executeSuiTx = (params: {\n\treadonly client: SuiExecuteClient;\n\treadonly signer: ResolvedSigner;\n\treadonly build: SerializedTxBuilder;\n\treadonly awaitFinality?: boolean;\n}): Effect.Effect<SuiExecuteResult, SuiExecuteError, Scope.Scope> =>\n\tparams.signer\n\t\t.withTransactionSigner((lockedSigner) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst { client, signer, build } = params;\n\t\t\t\tconst awaitFinality = params.awaitFinality ?? true;\n\n\t\t\t\t// 1. Serialise the transaction. Failures inside the build\n\t\t\t\t//    closure (e.g. `Transaction.build({ client })` rejection)\n\t\t\t\t//    surface as `phase: 'serialize'` so callers can attribute\n\t\t\t\t//    them at the call site.\n\t\t\t\tconst txBytes = yield* Effect.tryPromise({\n\t\t\t\t\ttry: () => build(),\n\t\t\t\t\tcatch: (cause) =>\n\t\t\t\t\t\tnew SuiExecuteError({\n\t\t\t\t\t\t\tphase: 'serialize',\n\t\t\t\t\t\t\tsignerName: signer.name,\n\t\t\t\t\t\t\tsignerAddress: signer.address,\n\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t`Transaction.build failed for signer '${signer.name}' ` +\n\t\t\t\t\t\t\t\t`(address=${signer.address}): ` +\n\t\t\t\t\t\t\t\tformatUnknownError(cause),\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t}),\n\t\t\t\t});\n\n\t\t\t\t// 2. Sign with the resolved signer. The signer's own typed\n\t\t\t\t//    error surfaces in `cause`; we collapse to `phase: 'sign'`\n\t\t\t\t//    so the cascade-formatter can walk the cause chain.\n\t\t\t\tconst signed = yield* lockedSigner.signTransaction(txBytes).pipe(\n\t\t\t\t\tEffect.mapError(\n\t\t\t\t\t\t(cause) =>\n\t\t\t\t\t\t\tnew SuiExecuteError({\n\t\t\t\t\t\t\t\tphase: 'sign',\n\t\t\t\t\t\t\t\tsignerName: signer.name,\n\t\t\t\t\t\t\t\tsignerAddress: signer.address,\n\t\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t\t`signer.signTransaction failed for '${signer.name}' ` +\n\t\t\t\t\t\t\t\t\t`(address=${signer.address}).`,\n\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t);\n\n\t\t\t\t// 3. Execute via the SDK. We always request `effects: true` and\n\t\t\t\t//    `objectTypes: true` because every existing caller needs\n\t\t\t\t//    `changedObjects` + types to project to its domain shape.\n\t\t\t\tconst raw = yield* Effect.tryPromise({\n\t\t\t\t\ttry: () =>\n\t\t\t\t\t\tclient.core.executeTransaction({\n\t\t\t\t\t\t\ttransaction: txBytes,\n\t\t\t\t\t\t\tsignatures: [signed.signature],\n\t\t\t\t\t\t\tinclude: { effects: true, objectTypes: true },\n\t\t\t\t\t\t}),\n\t\t\t\t\tcatch: (cause) =>\n\t\t\t\t\t\tnew SuiExecuteError({\n\t\t\t\t\t\t\tphase: 'execute',\n\t\t\t\t\t\t\tsignerName: signer.name,\n\t\t\t\t\t\t\tsignerAddress: signer.address,\n\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t`executeTransaction rejected for signer '${signer.name}': ` +\n\t\t\t\t\t\t\t\tformatUnknownError(cause),\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t}),\n\t\t\t\t});\n\n\t\t\t\t// 4. Project the envelope. `$kind === 'FailedTransaction'`\n\t\t\t\t//    surfaces as a return-channel variant — on-chain\n\t\t\t\t//    rejection is a normal outcome, NOT a transport failure\n\t\t\t\t//    (STYLE_GUIDE §2). Callers dispatch on `$kind` and map\n\t\t\t\t//    to their plugin's on-chain-failure shape.\n\t\t\t\tconst env = raw as RawExecuteEnvelope;\n\t\t\t\tif (env.$kind === 'FailedTransaction') {\n\t\t\t\t\tconst failedDigest = env.FailedTransaction?.digest;\n\t\t\t\t\tif (failedDigest === undefined) {\n\t\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\t\tnew SuiExecuteError({\n\t\t\t\t\t\t\t\tphase: 'no-digest',\n\t\t\t\t\t\t\t\tsignerName: signer.name,\n\t\t\t\t\t\t\t\tsignerAddress: signer.address,\n\t\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t\t`executeTransaction returned FailedTransaction with no digest. ` +\n\t\t\t\t\t\t\t\t\t`Raw=${JSON.stringify(raw).slice(0, 300)}`,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t\tif (awaitFinality) {\n\t\t\t\t\t\tyield* Effect.tryPromise({\n\t\t\t\t\t\t\ttry: () => client.core.waitForTransaction({ digest: failedDigest }),\n\t\t\t\t\t\t\tcatch: (cause) =>\n\t\t\t\t\t\t\t\tnew SuiExecuteError({\n\t\t\t\t\t\t\t\t\tphase: 'wait-for-finality',\n\t\t\t\t\t\t\t\t\tsignerName: signer.name,\n\t\t\t\t\t\t\t\t\tsignerAddress: signer.address,\n\t\t\t\t\t\t\t\t\tdigest: failedDigest,\n\t\t\t\t\t\t\t\t\tmessage: `waitForTransaction(${failedDigest}) failed.`,\n\t\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t});\n\t\t\t\t\t}\n\t\t\t\t\tconst executionError = env.FailedTransaction?.status?.error;\n\t\t\t\t\treturn {\n\t\t\t\t\t\t$kind: 'FailedTransaction',\n\t\t\t\t\t\tFailedTransaction: {\n\t\t\t\t\t\t\tdigest: failedDigest,\n\t\t\t\t\t\t\t...(executionError !== undefined ? { executionError } : {}),\n\t\t\t\t\t\t},\n\t\t\t\t\t} satisfies SuiExecuteResult;\n\t\t\t\t}\n\t\t\t\tconst txOk = env.Transaction;\n\t\t\t\tif (txOk?.digest === undefined) {\n\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\tnew SuiExecuteError({\n\t\t\t\t\t\t\tphase: 'no-digest',\n\t\t\t\t\t\t\tsignerName: signer.name,\n\t\t\t\t\t\t\tsignerAddress: signer.address,\n\t\t\t\t\t\t\tmessage: `executeTransaction returned no digest. Raw=${JSON.stringify(raw).slice(0, 300)}`,\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\t// 5. Wait for finality (opt-out — some callers wait separately).\n\t\t\t\tif (awaitFinality) {\n\t\t\t\t\tyield* Effect.tryPromise({\n\t\t\t\t\t\ttry: () => client.core.waitForTransaction({ digest: txOk.digest! }),\n\t\t\t\t\t\tcatch: (cause) =>\n\t\t\t\t\t\t\tnew SuiExecuteError({\n\t\t\t\t\t\t\t\tphase: 'wait-for-finality',\n\t\t\t\t\t\t\t\tsignerName: signer.name,\n\t\t\t\t\t\t\t\tsignerAddress: signer.address,\n\t\t\t\t\t\t\t\tdigest: txOk.digest,\n\t\t\t\t\t\t\t\tmessage: `waitForTransaction(${txOk.digest}) failed.`,\n\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t});\n\t\t\t\t}\n\n\t\t\t\t// 6. Project changedObjects flat. Callers pick which entries\n\t\t\t\t//    they care about (published / created / mutated / by-type\n\t\t\t\t//    substring).\n\t\t\t\tconst objectTypes = txOk.objectTypes ?? {};\n\t\t\t\tconst objectChanges: Array<ExecutedObjectChange> = [];\n\t\t\t\tfor (const ch of txOk.effects?.changedObjects ?? []) {\n\t\t\t\t\tif (typeof ch.objectId !== 'string') continue;\n\t\t\t\t\tconst objectType = objectTypes[ch.objectId];\n\t\t\t\t\tconst entry: { -readonly [K in keyof ExecutedObjectChange]: ExecutedObjectChange[K] } = {\n\t\t\t\t\t\tobjectId: ch.objectId,\n\t\t\t\t\t};\n\t\t\t\t\tif (objectType !== undefined) entry.objectType = objectType;\n\t\t\t\t\tif (ch.outputState !== undefined) entry.outputState = ch.outputState;\n\t\t\t\t\tif (ch.idOperation !== undefined) entry.idOperation = ch.idOperation;\n\t\t\t\t\tobjectChanges.push(entry);\n\t\t\t\t}\n\n\t\t\t\treturn {\n\t\t\t\t\t$kind: 'Transaction',\n\t\t\t\t\tTransaction: { digest: txOk.digest, objectChanges },\n\t\t\t\t} satisfies SuiExecuteResult;\n\t\t\t}),\n\t\t)\n\t\t.pipe(\n\t\t\tEffect.withSpan('substrate.sui-execute', {\n\t\t\t\tattributes: {\n\t\t\t\t\t'sui-execute.signer': params.signer.name,\n\t\t\t\t\t'sui-execute.address': params.signer.address,\n\t\t\t\t},\n\t\t\t}),\n\t\t);\n\n/** Decode a possibly URI-encoded SDK error message. The Sui SDK\n *  emits `decodeURIComponent`-able strings for some error paths\n *  (notably stale-object-version reports). Falls back to the raw\n *  message on decode failure. */\nconst decodeMessage = (message: string): string => {\n\ttry {\n\t\treturn decodeURIComponent(message);\n\t} catch {\n\t\treturn message;\n\t}\n};\n\n/** Typed predicate for the SDK's \"stale object version\" transient\n *  failure — the Move VM refuses a transaction that references an\n *  object reference older than the current chain version. Consumers\n *  retry with fresh refs; pair with `STALE_OBJECT_VERSION_RETRY_PROFILE`\n *  from `retry-policy.ts`. Detection sniffs the SDK message because the\n *  underlying gRPC error class doesn't expose a structured discriminator\n *  for this case. */\nexport const isSuiStaleObjectVersionError = (err: SuiExecuteError): boolean => {\n\tconst message = decodeMessage(err.message);\n\treturn (\n\t\tmessage.includes('needs to be rebuilt because object') && message.includes('current version')\n\t);\n};\n\n// ---------------------------------------------------------------------------\n// Sibling helpers\n// ---------------------------------------------------------------------------\n\nexport {\n\tsignAndDispatch,\n\ttype SignAndDispatchResult,\n\ttype SignAndDispatchSigner,\n\ttype TransactionSignerSource,\n} from './sign-and-dispatch.ts';\n"],"mappings":";;;;;;;;;;;;;AAwDA,IAAa,kBAAb,cAAqC,OAAO,kBAAmC,CAAC,mBAAmB;CAClG,OAAO,OAAO,SAAS;EAAC;EAAa;EAAQ;EAAW;EAAa;EAAoB,CAAC;CAC1F,YAAY,OAAO;CACnB,eAAe,OAAO;CACtB,SAAS,OAAO;;;CAGhB,QAAQ,OAAO,SAAS,OAAO,OAAO;CACtC,OAAO,OAAO,SAAS,OAAO,OAAO;CACrC,CAAC,CAAC;;;;;;;;;;AAiFH,MAAa,yBAAyB,YACrC,QAAQ,mBAAmB,KAAA,IACxB,MAAM,QAAQ,OAAO,IAAI,QAAQ,mBACjC,MAAM,QAAQ,OAAO;;;;;;;;;AA2CzB,MAAa,wBAAwB,QAAqC;CACzE,MAAM,MAAM;AACZ,QAAO,IAAI,UAAU,sBAClB,IAAI,mBAAmB,SACvB,IAAI,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCrB,MAAa,gBAAgB,WAM5B,OAAO,OACL,uBAAuB,iBACvB,OAAO,IAAI,aAAa;CACvB,MAAM,EAAE,QAAQ,QAAQ,UAAU;CAClC,MAAM,gBAAgB,OAAO,iBAAiB;CAM9C,MAAM,UAAU,OAAO,OAAO,WAAW;EACxC,WAAW,OAAO;EAClB,QAAQ,UACP,IAAI,gBAAgB;GACnB,OAAO;GACP,YAAY,OAAO;GACnB,eAAe,OAAO;GACtB,SACC,wCAAwC,OAAO,KAAK,aACxC,OAAO,QAAQ,OAC3B,mBAAmB,MAAM;GAC1B;GACA,CAAC;EACH,CAAC;CAKF,MAAM,SAAS,OAAO,aAAa,gBAAgB,QAAQ,CAAC,KAC3D,OAAO,UACL,UACA,IAAI,gBAAgB;EACnB,OAAO;EACP,YAAY,OAAO;EACnB,eAAe,OAAO;EACtB,SACC,sCAAsC,OAAO,KAAK,aACtC,OAAO,QAAQ;EAC5B;EACA,CAAC,CACH,CACD;CAKD,MAAM,MAAM,OAAO,OAAO,WAAW;EACpC,WACC,OAAO,KAAK,mBAAmB;GAC9B,aAAa;GACb,YAAY,CAAC,OAAO,UAAU;GAC9B,SAAS;IAAE,SAAS;IAAM,aAAa;IAAM;GAC7C,CAAC;EACH,QAAQ,UACP,IAAI,gBAAgB;GACnB,OAAO;GACP,YAAY,OAAO;GACnB,eAAe,OAAO;GACtB,SACC,2CAA2C,OAAO,KAAK,OACvD,mBAAmB,MAAM;GAC1B;GACA,CAAC;EACH,CAAC;CAOF,MAAM,MAAM;AACZ,KAAI,IAAI,UAAU,qBAAqB;EACtC,MAAM,eAAe,IAAI,mBAAmB;AAC5C,MAAI,iBAAiB,KAAA,EACpB,QAAO,OAAO,OAAO,KACpB,IAAI,gBAAgB;GACnB,OAAO;GACP,YAAY,OAAO;GACnB,eAAe,OAAO;GACtB,SACC,qEACO,KAAK,UAAU,IAAI,CAAC,MAAM,GAAG,IAAI;GACzC,CAAC,CACF;AAEF,MAAI,cACH,QAAO,OAAO,WAAW;GACxB,WAAW,OAAO,KAAK,mBAAmB,EAAE,QAAQ,cAAc,CAAC;GACnE,QAAQ,UACP,IAAI,gBAAgB;IACnB,OAAO;IACP,YAAY,OAAO;IACnB,eAAe,OAAO;IACtB,QAAQ;IACR,SAAS,sBAAsB,aAAa;IAC5C;IACA,CAAC;GACH,CAAC;EAEH,MAAM,iBAAiB,IAAI,mBAAmB,QAAQ;AACtD,SAAO;GACN,OAAO;GACP,mBAAmB;IAClB,QAAQ;IACR,GAAI,mBAAmB,KAAA,IAAY,EAAE,gBAAgB,GAAG,EAAE;IAC1D;GACD;;CAEF,MAAM,OAAO,IAAI;AACjB,KAAI,MAAM,WAAW,KAAA,EACpB,QAAO,OAAO,OAAO,KACpB,IAAI,gBAAgB;EACnB,OAAO;EACP,YAAY,OAAO;EACnB,eAAe,OAAO;EACtB,SAAS,8CAA8C,KAAK,UAAU,IAAI,CAAC,MAAM,GAAG,IAAI;EACxF,CAAC,CACF;AAIF,KAAI,cACH,QAAO,OAAO,WAAW;EACxB,WAAW,OAAO,KAAK,mBAAmB,EAAE,QAAQ,KAAK,QAAS,CAAC;EACnE,QAAQ,UACP,IAAI,gBAAgB;GACnB,OAAO;GACP,YAAY,OAAO;GACnB,eAAe,OAAO;GACtB,QAAQ,KAAK;GACb,SAAS,sBAAsB,KAAK,OAAO;GAC3C;GACA,CAAC;EACH,CAAC;CAMH,MAAM,cAAc,KAAK,eAAe,EAAE;CAC1C,MAAM,gBAA6C,EAAE;AACrD,MAAK,MAAM,MAAM,KAAK,SAAS,kBAAkB,EAAE,EAAE;AACpD,MAAI,OAAO,GAAG,aAAa,SAAU;EACrC,MAAM,aAAa,YAAY,GAAG;EAClC,MAAM,QAAkF,EACvF,UAAU,GAAG,UACb;AACD,MAAI,eAAe,KAAA,EAAW,OAAM,aAAa;AACjD,MAAI,GAAG,gBAAgB,KAAA,EAAW,OAAM,cAAc,GAAG;AACzD,MAAI,GAAG,gBAAgB,KAAA,EAAW,OAAM,cAAc,GAAG;AACzD,gBAAc,KAAK,MAAM;;AAG1B,QAAO;EACN,OAAO;EACP,aAAa;GAAE,QAAQ,KAAK;GAAQ;GAAe;EACnD;EACA,CACF,CACA,KACA,OAAO,SAAS,yBAAyB,EACxC,YAAY;CACX,sBAAsB,OAAO,OAAO;CACpC,uBAAuB,OAAO,OAAO;CACrC,EACD,CAAC,CACF;;;;;AAMH,MAAM,iBAAiB,YAA4B;AAClD,KAAI;AACH,SAAO,mBAAmB,QAAQ;SAC3B;AACP,SAAO;;;;;;;;;;AAWT,MAAa,gCAAgC,QAAkC;CAC9E,MAAM,UAAU,cAAc,IAAI,QAAQ;AAC1C,QACC,QAAQ,SAAS,qCAAqC,IAAI,QAAQ,SAAS,kBAAkB"}

package/dist/substrate/runtime/sui-execute/sign-and-dispatch.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"sign-and-dispatch.mjs","names":[],"sources":["../../../../src/substrate/runtime/sui-execute/sign-and-dispatch.ts"],"sourcesContent":["// signAndDispatch — boilerplate compactor for the\n// `withTransactionSigner → buildTxBytes → signAndExecute → $kind\n// dispatch` pattern that recurs across every Sui-tx plugin\n// (`package.publish`, `action.execute`, `coin.mint`, `walrus.fundWal`,\n// `deepbook.fundDeep`, and any future user-authored signer plugin).\n//\n// Distinct from `executeSuiTx` (sibling in this directory):\n//   - `executeSuiTx` drives `core.executeTransaction` directly via the\n//     raw SDK client + an opaque resolved signer. It splits sign and\n//     execute and projects the SDK envelope itself.\n//   - `signAndDispatch` consumes the Account plugin's higher-level\n//     `signAndExecute` surface (which fuses sign + execute + finality\n//     wait + projection into one Effect) and just compacts the\n//     surrounding boilerplate.\n//\n// Both helpers coexist: plugins that publish through the Account bus\n// (the majority) use `signAndDispatch`; lower-level callers that drive\n// the SDK client directly use `executeSuiTx`.\n//\n// Boundary discipline (matches the sui-execute escape-hatch in this\n// directory): this module is L1-adjacent — it consumes opaque shapes\n// (an `AccountValue`-like contract surface and the `SignAndExecuteResult`\n// union) but does NOT import from `plugins/*` or `@mysten/sui/*`. The\n// caller owns the transaction build, the error mapping, and the\n// dispatch bodies.\n//\n// On-chain `FailedTransaction` is a RETURN-CHANNEL outcome (caller\n// dispatches on `$kind` via the `onFailed` callback), NOT an error —\n// matches STYLE_GUIDE §2 and the upstream `SignAndExecuteResult` shape.\n\nimport { Effect } from 'effect';\n\nimport type { ExecutedFailure, ExecutedReceipt } from './index.ts';\n\n// ---------------------------------------------------------------------------\n// Resolved-signer shape — narrow slice of `AccountValue`\n// ---------------------------------------------------------------------------\n\n/** The SDK-shaped result of `lockedSigner.signAndExecute`. Mirrors the\n *  Account plugin's `SignAndExecuteResult` union; redeclared here so\n *  the substrate helper does not import from `plugins/account/*`. The\n *  Account plugin's projection uses the substrate `ExecutedFailure`\n *  shape already (single source of truth in `sui-execute/index.ts`).\n *  Generic over the success transaction shape because the Account\n *  plugin's `TxResult` widens `ExecutedReceipt` with `effects` /\n *  `balanceChanges` fields that not every caller needs to surface. */\nexport type SignAndDispatchResult<TxOk extends { readonly digest: string } = ExecutedReceipt> =\n\t| { readonly $kind: 'Transaction'; readonly Transaction: TxOk }\n\t| { readonly $kind: 'FailedTransaction'; readonly FailedTransaction: ExecutedFailure };\n\n/** Locked-signer slice handed to the caller's tx-build closure. Narrow\n *  view of `AccountTransactionSigner` — the substrate-side contract\n *  doesn't reach into the Account plugin's surface. Generic over the\n *  signer's sign-side error (typically `AccountSignError`) and the\n *  success transaction shape. */\nexport interface SignAndDispatchSigner<SignError, TxOk extends { readonly digest: string }> {\n\treadonly signAndExecute: (\n\t\ttx: Uint8Array,\n\t) => Effect.Effect<SignAndDispatchResult<TxOk>, SignError>;\n}\n\n/** Outer signer-source surface required by `signAndDispatch` — anything\n *  that exposes a `withTransactionSigner` scope. The substrate helper\n *  only reaches `withTransactionSigner`, so plugins composing custom\n *  signing surfaces can satisfy the slice without dragging in any\n *  particular publisher's full contract. */\nexport interface TransactionSignerSource<SignError, TxOk extends { readonly digest: string }> {\n\treadonly withTransactionSigner: <A, E, R>(\n\t\tbody: (signer: SignAndDispatchSigner<SignError, TxOk>) => Effect.Effect<A, E, R>,\n\t) => Effect.Effect<A, E, R>;\n}\n\n// ---------------------------------------------------------------------------\n// The helper\n// ---------------------------------------------------------------------------\n\n/** Run `withTransactionSigner( buildTxBytes → signAndExecute → mapSignError →\n *  dispatch on $kind )`. The caller owns:\n *\n *   - `buildTxBytes`: an Effect returning the serialised `Uint8Array`,\n *     run INSIDE the signer scope. Failures inside this effect\n *     propagate verbatim — the caller maps `Transaction.build` /\n *     impersonation-build errors to its plugin domain there.\n *   - `mapSignError`: projects the signer's typed sign error\n *     (`AccountSignError` for the Account bus) into the caller's\n *     domain error before dispatch. Without this projection\n *     `mapSignError` and the dispatch callbacks would need to share\n *     the same error channel, which forces every caller into a tagged\n *     domain error anyway.\n *   - `onFailed`: dispatch for the `FailedTransaction` variant.\n *     Typically `Effect.fail(domainError(formatExecutedFailure(...)))`.\n *   - `onSuccess`: dispatch for the `Transaction` variant — projects\n *     the SDK-shaped tx result to the caller's receipt shape.\n *\n *  Returns the union of the dispatch callbacks' types so callers do\n *  not have to wrap the call in a redundant `Effect.gen`. */\nexport const signAndDispatch = <\n\tA,\n\tBuildError,\n\tBuildEnv,\n\tSignError,\n\tDomainError,\n\tOnFailedError,\n\tOnFailedEnv,\n\tOnSuccessError,\n\tOnSuccessEnv,\n\tTxOk extends { readonly digest: string } = ExecutedReceipt,\n>(args: {\n\treadonly signerSource: TransactionSignerSource<SignError, TxOk>;\n\treadonly buildTxBytes: (\n\t\tsigner: SignAndDispatchSigner<SignError, TxOk>,\n\t) => Effect.Effect<Uint8Array, BuildError, BuildEnv>;\n\treadonly mapSignError: (cause: SignError) => DomainError;\n\treadonly onFailed: (failure: ExecutedFailure) => Effect.Effect<A, OnFailedError, OnFailedEnv>;\n\treadonly onSuccess: (ok: TxOk) => Effect.Effect<A, OnSuccessError, OnSuccessEnv>;\n}): Effect.Effect<\n\tA,\n\tBuildError | DomainError | OnFailedError | OnSuccessError,\n\tBuildEnv | OnFailedEnv | OnSuccessEnv\n> =>\n\targs.signerSource.withTransactionSigner((lockedSigner) =>\n\t\tEffect.gen(function* () {\n\t\t\tconst txBytes = yield* args.buildTxBytes(lockedSigner);\n\t\t\tconst result = yield* lockedSigner\n\t\t\t\t.signAndExecute(txBytes)\n\t\t\t\t.pipe(Effect.mapError(args.mapSignError));\n\t\t\tif (result.$kind === 'FailedTransaction') {\n\t\t\t\treturn yield* args.onFailed(result.FailedTransaction);\n\t\t\t}\n\t\t\treturn yield* args.onSuccess(result.Transaction);\n\t\t}),\n\t);\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAgGA,MAAa,mBAWX,SAaD,KAAK,aAAa,uBAAuB,iBACxC,OAAO,IAAI,aAAa;CACvB,MAAM,UAAU,OAAO,KAAK,aAAa,aAAa;CACtD,MAAM,SAAS,OAAO,aACpB,eAAe,QAAQ,CACvB,KAAK,OAAO,SAAS,KAAK,aAAa,CAAC;AAC1C,KAAI,OAAO,UAAU,oBACpB,QAAO,OAAO,KAAK,SAAS,OAAO,kBAAkB;AAEtD,QAAO,OAAO,KAAK,UAAU,OAAO,YAAY;EAC/C,CACF"}

package/dist/substrate/runtime/sui-ledger/object-ref.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"object-ref.mjs","names":[],"sources":["../../../../src/substrate/runtime/sui-ledger/object-ref.ts"],"sourcesContent":["// substrate/runtime/sui-ledger — `ledgerService.getObject` workaround.\n//\n// `SuiSdkShim.core.getObject` returns the simplified `core`-surface\n// projection (no version/digest) per `@mysten/sui`'s `ClientWithCoreApi`\n// shape. The gRPC ledger service provides the BCS-encoded object\n// envelope WITH version + digest under a `readMask` projection — see\n// `@mysten/sui/docs/clients/grpc.md` § Ledger service.\n//\n// The cast `sdk.client as unknown as {ledgerService: {…}}` is the\n// sanctioned escape hatch — `ClientWithCoreApi` doesn't structurally\n// overlap with the gRPC `{ledgerService}` shape, so a direct cast fails.\n// Folded into one substrate-side helper so every plugin that needs an\n// up-to-date `{objectId, version, digest}` ObjectRef goes through the\n// same projection (and the same `unknown`-cast escape hatch) rather\n// than re-deriving it.\n//\n// NOTE: not exported from the public barrel — this is an internal\n// substrate primitive used by plugins, not a published API.\n//\n// Sibling of `substrate/runtime/sui-execute/` — same opacity discipline\n// (no `@mysten/sui/client` type import; the opaque `SuiSdkShim` carries\n// the client through).\n\nimport type { SuiSdkShim } from '../../../plugins/sui/index.ts';\n\n/** Shape of the gRPC ledger-service projection we need. Hand-written\n *  because the public `ClientWithCoreApi` surface doesn't include the\n *  ledger service. */\ninterface LedgerObjectClient {\n\treadonly ledgerService: {\n\t\treadonly getObject: (args: {\n\t\t\treadonly objectId: string;\n\t\t\treadonly readMask?: { readonly paths: ReadonlyArray<string> };\n\t\t}) => Promise<{\n\t\t\treadonly response?: {\n\t\t\t\treadonly object?: {\n\t\t\t\t\treadonly objectId?: string;\n\t\t\t\t\treadonly version?: string | number | bigint;\n\t\t\t\t\treadonly digest?: string;\n\t\t\t\t};\n\t\t\t};\n\t\t}>;\n\t};\n}\n\n/** Re-cast a `SuiSdkShim` as the gRPC ledger-service client. The\n *  `unknown` hop is required because `ClientWithCoreApi` doesn't\n *  structurally overlap with `{ledgerService: …}`. */\nconst ledgerObjectClient = (sdk: SuiSdkShim): LedgerObjectClient =>\n\tsdk.client as unknown as LedgerObjectClient;\n\n/** Up-to-date `{objectId, version, digest}` ObjectRef for `objectId`,\n *  fetched through the gRPC ledger service.\n *\n *  Throws if the response envelope is missing any of `objectId` /\n *  `version` / `digest` — e.g. when the object was deleted or never\n *  existed. The error message includes the requested object id so\n *  call-site context surfaces in plugin error traces. */\nexport const currentLedgerObjectRef = async (\n\tsdk: SuiSdkShim,\n\tobjectId: string,\n): Promise<{\n\treadonly objectId: string;\n\treadonly version: string;\n\treadonly digest: string;\n}> => {\n\tconst raw = await ledgerObjectClient(sdk).ledgerService.getObject({\n\t\tobjectId,\n\t\treadMask: { paths: ['object_id', 'version', 'digest'] },\n\t});\n\tconst object = raw.response?.object;\n\tif (\n\t\tobject === undefined ||\n\t\tobject.objectId === undefined ||\n\t\tobject.version === undefined ||\n\t\tobject.digest === undefined\n\t) {\n\t\tthrow new Error(\n\t\t\t`currentLedgerObjectRef: object '${objectId}' was not found (response missing one of objectId/version/digest).`,\n\t\t);\n\t}\n\treturn {\n\t\tobjectId: object.objectId,\n\t\tversion: object.version.toString(),\n\t\tdigest: object.digest,\n\t};\n};\n"],"mappings":";;;;AAgDA,MAAM,sBAAsB,QAC3B,IAAI;;;;;;;;AASL,MAAa,yBAAyB,OACrC,KACA,aAKK;CAKL,MAAM,UAAS,MAJG,mBAAmB,IAAI,CAAC,cAAc,UAAU;EACjE;EACA,UAAU,EAAE,OAAO;GAAC;GAAa;GAAW;GAAS,EAAE;EACvD,CAAC,EACiB,UAAU;AAC7B,KACC,WAAW,KAAA,KACX,OAAO,aAAa,KAAA,KACpB,OAAO,YAAY,KAAA,KACnB,OAAO,WAAW,KAAA,EAElB,OAAM,IAAI,MACT,mCAAmC,SAAS,oEAC5C;AAEF,QAAO;EACN,UAAU,OAAO;EACjB,SAAS,OAAO,QAAQ,UAAU;EAClC,QAAQ,OAAO;EACf"}

package/dist/substrate/runtime/sui-move-build/index.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/substrate/runtime/sui-move-build/index.ts"],"sourcesContent":["// sui-move-build — shared Sui Move build helpers.\n//\n// ARCHITECTURE NOTE — substrate-name-awareness escape hatch:\n//\n// Like `sui-execute/`, this is an L1-adjacent Sui-aware helper. It owns\n// the mechanical \"scrub Move.lock → run sui move build → parse bytecode\"\n// path so Move-publishing plugins do not import each other's internals.\n// Listed as a documented exception in `ARCHITECTURE.md` §\"Substrate\n// name-blindness\" alongside `sui-execute/`. Rationale + alternative-\n// rejection are recorded there; new substrate-side Sui-aware exceptions\n// need explicit justification in that section before landing.\n\nimport { createHash } from 'node:crypto';\nimport { cp, lstat, mkdir, mkdtemp, readFile, readdir, rm, writeFile } from 'node:fs/promises';\nimport { homedir, tmpdir } from 'node:os';\nimport { basename, join, relative, resolve, sep } from 'node:path';\n\nimport { Effect, Schema, type Scope } from 'effect';\n\nimport type {\n\tContainerBuildContext,\n\tContainerRuntime,\n\tExecResult,\n\tImageRef,\n} from '../../../contracts/container-runtime.ts';\nimport { contentHash, type ChainId, type ContentHash } from '../../brand.ts';\nimport { mintRandomSuffix } from '../random-suffix.ts';\nimport { decodeJsonTextSync } from '../runtime-decode.ts';\n\nexport type MoveBuildPhase = 'hash' | 'scrub' | 'build' | 'parse';\n\nexport const DEFAULT_SUI_CLI_VERSION = 'devnet-v1.71.0';\n\nexport const suiCliImageBuildContext = (\n\tversion = DEFAULT_SUI_CLI_VERSION,\n): ContainerBuildContext => ({\n\tcontextPath: new URL('../../../../images/', import.meta.url).pathname,\n\tdockerfile: 'sui/Dockerfile',\n\tfingerprintPaths: ['sui/Dockerfile', 'sui/entrypoint.sh', '_shared/signal-forward.sh'],\n\tbuildArgs: { SUI_VERSION: version },\n});\n\nexport class MoveBuildError extends Schema.TaggedErrorClass<MoveBuildError>()('MoveBuildError', {\n\tphase: Schema.Literals(['hash', 'scrub', 'build', 'parse']),\n\tsourcePath: Schema.String,\n\tpackageName: Schema.String,\n\tmessage: Schema.String,\n\tcause: Schema.optional(Schema.Defect),\n}) {}\n\nconst moveBuildError = (\n\tphase: MoveBuildPhase,\n\tparts: {\n\t\treadonly sourcePath: string;\n\t\treadonly packageName: string;\n\t\treadonly message: string;\n\t\treadonly cause?: unknown;\n\t},\n): MoveBuildError =>\n\tnew MoveBuildError({\n\t\tphase,\n\t\tsourcePath: parts.sourcePath,\n\t\tpackageName: parts.packageName,\n\t\tmessage: parts.message,\n\t\t...(parts.cause !== undefined ? { cause: parts.cause } : {}),\n\t});\n\nexport interface MoveBuildContainer {\n\treadonly runBuild: (hostPackagePath: string) => Effect.Effect<ExecResult, unknown, Scope.Scope>;\n}\n\nexport interface BuildInputs {\n\treadonly sourcePath: string;\n\treadonly packageName: string;\n\treadonly chainId: ChainId | string;\n\treadonly buildContainer?: MoveBuildContainer;\n\treadonly runtime?: ContainerRuntime;\n\treadonly buildImage?: ImageRef;\n}\n\nexport interface BuildOutput {\n\treadonly modules: ReadonlyArray<Uint8Array>;\n\treadonly dependencies: ReadonlyArray<string>;\n}\n\nexport const stripPinnedSections = (source: string): string => {\n\tconst lines = source.split('\\n');\n\tconst out: Array<string> = [];\n\tlet skipping = false;\n\tfor (const line of lines) {\n\t\tconst trimmed = line.trimStart();\n\t\tif (trimmed.startsWith('[')) {\n\t\t\tconst header = trimmed.replace(/\\s+/g, '');\n\t\t\tif (header.startsWith('[pinned.') || header === '[env]' || header.startsWith('[env.')) {\n\t\t\t\tskipping = true;\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tskipping = false;\n\t\t}\n\t\tif (!skipping) out.push(line);\n\t}\n\tif (skipping && source.endsWith('\\n') && out.at(-1) === '') out.push('');\n\treturn out.join('\\n');\n};\n\nexport const CONTAINER_SCRUB_AWK_SCRIPT = [\n\t'/^\\\\[pinned\\\\./ || /^\\\\[env(\\\\.|\\\\])/ { skip=1; next }',\n\t'/^\\\\[/ && !/^\\\\[pinned\\\\./ && !/^\\\\[env(\\\\.|\\\\])/ { skip=0 }',\n\t'!skip { print }',\n].join('\\n');\n\nexport const containerScrubShellScript = (workspaceRoot: string, moveHomeRoot: string): string => {\n\tconst lines = CONTAINER_SCRUB_AWK_SCRIPT.split('\\n')\n\t\t.map((l) => `'${l}'`)\n\t\t.join(' ');\n\tconst stage = `printf '%s\\\\n%s\\\\n%s\\\\n' ${lines} > /tmp/scrub-move-lock.awk`;\n\tconst findPkg =\n\t\t`find ${workspaceRoot} -type f -name Move.lock ` +\n\t\t`-not -path '*/node_modules/*' -not -path '*/.git/*' ` +\n\t\t`-exec gawk -i inplace -f /tmp/scrub-move-lock.awk {} ';'`;\n\tconst findCache =\n\t\t`[ -d ${moveHomeRoot}/git ] && find ${moveHomeRoot}/git -type f -name Move.lock ` +\n\t\t`-not -path '*/.git/*' ` +\n\t\t`-exec gawk -i inplace -f /tmp/scrub-move-lock.awk {} ';' || true`;\n\treturn [stage, findPkg, findCache].join('; ');\n};\n\nexport interface MoveBuildInput {\n\treadonly packagePath: string;\n\treadonly rpcUrl: string;\n\treadonly faucetUrl?: string;\n}\n\nexport interface MoveBuildOutput {\n\treadonly exitCode: number;\n\treadonly stdoutJson: string;\n\treadonly stderr: string;\n}\n\nexport const shellQuote = (s: string): string => `'${s.replaceAll(\"'\", \"'\\\\''\")}'`;\n\nexport const extractTrailingJson = (text: string): string => {\n\tconst trimmed = text.trim();\n\tif (trimmed.startsWith('{')) return trimmed;\n\tconst idx = trimmed.lastIndexOf('{');\n\tif (idx === -1) return trimmed;\n\treturn trimmed.slice(idx);\n};\n\nexport const containerInnerScript = (pkgName: string): string => {\n\t// Copy the WHOLE mounted tree into an in-container scratch dir and scrub +\n\t// build the package THERE, never `/workspace/<pkg>` directly. `/workspace`\n\t// is a bind mount of the developer's real source tree (the per-app build\n\t// container in `chain-build-container.ts` mounts the app dir as-is), and the\n\t// scrub's `gawk -i inplace` rewrite of Move.lock would corrupt their\n\t// checked-in pinned deps if run against the mount.\n\t//\n\t// Two reasons we copy `/workspace/.` (the whole tree) rather than only\n\t// `/workspace/<pkgName>`:\n\t//   1. NESTED PACKAGES. `pkgName` is the package path RELATIVE to the\n\t//      bind-mounted app dir (e.g. `packages/demo`), so it can contain a\n\t//      slash. Copying only `/workspace/<pkgName>` into\n\t//      `/tmp/move-build-$$/<pkgName>` would need the intermediate\n\t//      `packages/` dir to exist first — it doesn't, and `set -e` would\n\t//      abort the build before `sui move build` ran.\n\t//   2. SIBLING LOCAL DEPS. A package can reference siblings via\n\t//      `{ local = \"../token\" }`. A scoped copy of only the package subtree\n\t//      drops those, failing the build with \"Invalid directory at ../…\".\n\t// Copying the whole tree both materialises the nested path AND carries the\n\t// sibling `../` deps. The mount itself is never rewritten (mirrors\n\t// `containerInnerScriptOneShot`, whose host-side staging tree is the disposable\n\t// copy there; here the in-container copy is the disposable one).\n\t//\n\t// `$$` (the shell PID) scopes the scratch dir per exec so concurrent\n\t// builds of the same package don't share a tree.\n\tconst quotedPkg = shellQuote(pkgName);\n\tconst scratchRoot = '/tmp/move-build-$$';\n\tconst scratchPkg = `${scratchRoot}/${quotedPkg}`;\n\tconst stage = `rm -rf ${scratchRoot} && mkdir -p ${scratchRoot} && cp -a /workspace/. ${scratchRoot}/`;\n\t// Scrub the whole scratch tree AND the mounted Move git cache. The cache\n\t// (`/root/.move/git`) is process-shared mutable state we legitimately want\n\t// scrubbed so a stale pin can't leak into the build; the scratch tree is the\n\t// disposable copy, so scrubbing all of it (package + staged siblings) is safe.\n\tconst scrub = containerScrubShellScript(scratchRoot, '/root/.move');\n\tconst build =\n\t\t`sui move build --path ${scratchPkg} ` +\n\t\t`-e testnet --no-tree-shaking --dump-bytecode-as-base64 ` +\n\t\t`--with-unpublished-dependencies`;\n\tconst cleanup = `rm -rf ${scratchRoot}`;\n\treturn [\n\t\t'set -e',\n\t\tstage,\n\t\tscrub,\n\t\t'set +e',\n\t\tbuild,\n\t\t'status=$?',\n\t\t'set -e',\n\t\tscrub,\n\t\tcleanup,\n\t\t'exit \"$status\"',\n\t].join('; ');\n};\n\n/** One-shot-path inner script. Mirrors {@link containerInnerScript} — both copy\n *  the WHOLE `/workspace` tree into an in-container scratch dir and scrub + build\n *  THERE, never the mount in place. The difference is only WHAT is mounted at\n *  `/workspace`: the exec path bind-mounts the developer's real app dir (so the\n *  whole-tree copy naturally carries nested packages + sibling `../` deps),\n *  whereas the one-shot path mounts a disposable host-side staging copy whose\n *  transitive local deps were pre-staged (see `stageLocalMoveDeps`). Copying only\n *  `/workspace/<pkg>` would drop sibling local dependencies\n *  (`{ local = \"../token\" }`), failing the build with \"Invalid directory at ../…\". */\nexport const containerInnerScriptOneShot = (pkgName: string): string => {\n\tconst quotedPkg = shellQuote(pkgName);\n\tconst scratchRoot = '/tmp/move-build-$$';\n\tconst scratchPkg = `${scratchRoot}/${quotedPkg}`;\n\t// Copy the WHOLE staging mount (package + its staged local `../` deps) into\n\t// an in-container scratch tree and scrub + build THERE — never the mounted\n\t// host staging dir. Building in the mount leaves root-owned `build/` +\n\t// scrubbed Move.lock files behind that the (non-root) host can't remove,\n\t// failing scope cleanup with EACCES. Copying ALL of /workspace (like\n\t// containerInnerScript) keeps sibling local deps like `{ local = \"../token\" }`\n\t// present in the scratch tree.\n\tconst stage = `rm -rf ${scratchRoot} && mkdir -p ${scratchRoot} && cp -a /workspace/. ${scratchRoot}/`;\n\tconst scrub = containerScrubShellScript(scratchRoot, '/root/.move');\n\tconst build =\n\t\t`sui move build --path ${scratchPkg} ` +\n\t\t`-e testnet --no-tree-shaking --dump-bytecode-as-base64 ` +\n\t\t`--with-unpublished-dependencies`;\n\tconst cleanup = `rm -rf ${scratchRoot}`;\n\treturn [\n\t\t'set -e',\n\t\tstage,\n\t\tscrub,\n\t\t'set +e',\n\t\tbuild,\n\t\t'status=$?',\n\t\t'set -e',\n\t\tscrub,\n\t\tcleanup,\n\t\t'exit \"$status\"',\n\t].join('; ');\n};\n\nconst isHashedFile = (name: string): boolean =>\n\tname === 'Move.toml' || name === 'Move.lock' || name.endsWith('.move');\n\nconst isSkippedDir = (name: string): boolean =>\n\tname === 'build' || name === 'node_modules' || name === '.git' || name.startsWith('.');\n\nconst collectHashedSources = async (root: string): Promise<ReadonlyArray<string>> => {\n\tconst out: Array<string> = [];\n\tconst walk = async (dir: string): Promise<void> => {\n\t\tlet entries: ReadonlyArray<{\n\t\t\treadonly name: string;\n\t\t\treadonly isDirectory: () => boolean;\n\t\t\treadonly isFile: () => boolean;\n\t\t}> = [];\n\t\ttry {\n\t\t\tentries = await readdir(dir, { withFileTypes: true });\n\t\t} catch {\n\t\t\treturn;\n\t\t}\n\t\tfor (const entry of entries) {\n\t\t\tif (entry.isDirectory()) {\n\t\t\t\tif (isSkippedDir(entry.name)) continue;\n\t\t\t\tawait walk(join(dir, entry.name));\n\t\t\t} else if (entry.isFile() && isHashedFile(entry.name)) {\n\t\t\t\tconst abs = join(dir, entry.name);\n\t\t\t\ttry {\n\t\t\t\t\tconst stat = await lstat(abs);\n\t\t\t\t\tif (stat.isFile() && !stat.isSymbolicLink()) out.push(abs);\n\t\t\t\t} catch {\n\t\t\t\t\t// vanished / unreadable — skip\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t};\n\tawait walk(root);\n\treturn out;\n};\n\nexport const hashMoveSources = (sourcePath: string): Effect.Effect<ContentHash, MoveBuildError> =>\n\tEffect.tryPromise({\n\t\ttry: async (): Promise<ContentHash> => {\n\t\t\tconst files = await collectHashedSources(sourcePath);\n\t\t\tconst sorted = [...files].sort((a, b) =>\n\t\t\t\trelative(sourcePath, a).localeCompare(relative(sourcePath, b)),\n\t\t\t);\n\t\t\tconst hasher = createHash('sha256');\n\t\t\tfor (const abs of sorted) {\n\t\t\t\tconst rel = relative(sourcePath, abs);\n\t\t\t\tconst raw = await readFile(abs, 'utf8');\n\t\t\t\tconst normalised = basename(abs) === 'Move.lock' ? stripPinnedSections(raw) : raw;\n\t\t\t\thasher.update(rel);\n\t\t\t\thasher.update('\\0');\n\t\t\t\thasher.update(normalised);\n\t\t\t\thasher.update('\\0');\n\t\t\t}\n\t\t\treturn contentHash(hasher.digest('hex'));\n\t\t},\n\t\tcatch: (cause): MoveBuildError =>\n\t\t\tmoveBuildError('hash', {\n\t\t\t\tsourcePath,\n\t\t\t\tpackageName: sourcePath,\n\t\t\t\tmessage: `source-tree hash failed: ${String((cause as Error)?.message ?? cause)}`,\n\t\t\t\tcause,\n\t\t\t}),\n\t});\n\nconst expandHome = (p: string): string =>\n\tp.startsWith('~/') ? join(homedir(), p.slice(2)) : p === '~' ? homedir() : p;\n\nconst findMoveLockFiles = async (root: string): Promise<ReadonlyArray<string>> => {\n\tconst out: Array<string> = [];\n\tconst walk = async (dir: string): Promise<void> => {\n\t\tlet entries: ReadonlyArray<{\n\t\t\treadonly name: string;\n\t\t\treadonly isDirectory: () => boolean;\n\t\t\treadonly isFile: () => boolean;\n\t\t}> = [];\n\t\ttry {\n\t\t\tentries = await readdir(dir, { withFileTypes: true });\n\t\t} catch {\n\t\t\treturn;\n\t\t}\n\t\tfor (const entry of entries) {\n\t\t\tif (entry.name === 'node_modules' || entry.name === '.git' || entry.name === 'build') {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst child = join(dir, entry.name);\n\t\t\tif (entry.isDirectory()) {\n\t\t\t\tawait walk(child);\n\t\t\t} else if (entry.isFile() && entry.name === 'Move.lock') {\n\t\t\t\ttry {\n\t\t\t\t\tconst stat = await lstat(child);\n\t\t\t\t\tif (stat.isFile() && !stat.isSymbolicLink()) out.push(child);\n\t\t\t\t} catch {\n\t\t\t\t\t// unreadable / vanished — skip\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t};\n\tawait walk(root);\n\treturn out;\n};\n\nconst scrubOneLockFile = async (path: string): Promise<void> => {\n\tconst original = await readFile(path, 'utf8');\n\tconst scrubbed = stripPinnedSections(original);\n\tif (scrubbed === original) return;\n\tawait writeFile(path, scrubbed, 'utf8');\n};\n\nconst scrubCachedLockFiles = async (root: string): Promise<void> => {\n\tconst cachedLocks = await findMoveLockFiles(root);\n\tfor (const f of cachedLocks) {\n\t\ttry {\n\t\t\tawait scrubOneLockFile(f);\n\t\t} catch {\n\t\t\t// The Docker build scrubs the mounted Move cache again from inside the container.\n\t\t}\n\t}\n};\n\n// Scrub ONLY the shared Move git cache (`~/.move/git`), never the caller's\n// source tree. The package's own Move.lock is scrubbed inside the container on\n// a disposable copy (see `containerInnerScript`), so rewriting the developer's\n// checked-in Move.lock here would corrupt their pinned deps for no benefit. The\n// cache is process-shared mutable state, so scrubbing it host-side keeps a stale\n// pin from leaking into the build.\nexport const scrubLocksHost = (\n\tsourcePath: string,\n\tmoveHomeRoot: string,\n): Effect.Effect<void, MoveBuildError, Scope.Scope> =>\n\tEffect.tryPromise({\n\t\ttry: async () => {\n\t\t\tconst moveHome = expandHome(moveHomeRoot);\n\t\t\tconst gitCache = join(moveHome, 'git');\n\t\t\ttry {\n\t\t\t\tawait lstat(gitCache);\n\t\t\t} catch {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tawait scrubCachedLockFiles(gitCache);\n\t\t},\n\t\tcatch: (cause): MoveBuildError =>\n\t\t\tmoveBuildError('scrub', {\n\t\t\t\tsourcePath,\n\t\t\t\tpackageName: sourcePath,\n\t\t\t\tmessage: `scrub host locks failed (root=${moveHomeRoot})`,\n\t\t\t\tcause,\n\t\t\t}),\n\t});\n\nconst SuiBuildJsonSchema = Schema.Struct({\n\tmodules: Schema.Array(Schema.String),\n\tdependencies: Schema.Array(Schema.String),\n});\n\nconst decodeBase64Module = (s: string): Uint8Array =>\n\tUint8Array.from(globalThis.Buffer.from(s, 'base64'));\n\nexport const parseBuildOutput = (\n\tstdout: string,\n\tsourcePath: string,\n\tpackageName: string,\n): Effect.Effect<BuildOutput, MoveBuildError> =>\n\tEffect.try({\n\t\ttry: (): BuildOutput => {\n\t\t\tconst trimmed = extractTrailingJson(stdout);\n\t\t\tconst parsed = decodeJsonTextSync(SuiBuildJsonSchema, trimmed, {\n\t\t\t\tsource: 'sui move build stdout',\n\t\t\t\tmessage: 'unexpected sui move build JSON shape',\n\t\t\t\tmkError: (issue) => new Error(issue.message, { cause: issue.cause }),\n\t\t\t});\n\t\t\tconst modules = parsed.modules.map((m) => decodeBase64Module(m));\n\t\t\tconst dependencies = parsed.dependencies;\n\t\t\treturn { modules, dependencies };\n\t\t},\n\t\tcatch: (cause): MoveBuildError =>\n\t\t\tmoveBuildError('parse', {\n\t\t\t\tsourcePath,\n\t\t\t\tpackageName,\n\t\t\t\tmessage: `failed to parse sui move build output: ${String((cause as Error)?.message ?? cause)}`,\n\t\t\t\tcause,\n\t\t\t}),\n\t});\n\nconst promoteNonZero = (\n\top: 'docker exec' | 'docker run --rm',\n\tresult: ExecResult,\n\tsourcePath: string,\n\tpackageName: string,\n): MoveBuildError =>\n\tmoveBuildError('build', {\n\t\tsourcePath,\n\t\tpackageName,\n\t\tmessage:\n\t\t\t`${op} sui move build exited ${result.exitCode} for package \"${packageName}\".\\n` +\n\t\t\t`stderr: ${result.stderr || '(empty)'}\\n` +\n\t\t\t`stdout (tail): ${result.stdout.slice(-400) || '(empty)'}`,\n\t});\n\nconst ensureMoveHomeMountSource = (\n\tmoveHome: string,\n\tsourcePath: string,\n\tpackageName: string,\n): Effect.Effect<void, MoveBuildError> =>\n\tEffect.tryPromise({\n\t\ttry: () => mkdir(moveHome, { recursive: true }),\n\t\tcatch: (cause): MoveBuildError =>\n\t\t\tmoveBuildError('build', {\n\t\t\t\tsourcePath,\n\t\t\t\tpackageName,\n\t\t\t\tmessage: `failed to create Move cache mount source \"${moveHome}\"`,\n\t\t\t\tcause,\n\t\t\t}),\n\t}).pipe(Effect.asVoid);\n\nconst buildViaContainerExec = (\n\tinputs: BuildInputs,\n\tbc: MoveBuildContainer,\n): Effect.Effect<BuildOutput, MoveBuildError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tconst result = yield* bc.runBuild(inputs.sourcePath).pipe(\n\t\t\tEffect.mapError(\n\t\t\t\t(err): MoveBuildError =>\n\t\t\t\t\tmoveBuildError('build', {\n\t\t\t\t\t\tsourcePath: inputs.sourcePath,\n\t\t\t\t\t\tpackageName: inputs.packageName,\n\t\t\t\t\t\tmessage: `buildContainer.runBuild failed: ${String(\n\t\t\t\t\t\t\t(err as { cause?: { message?: string } })?.cause?.message ?? err,\n\t\t\t\t\t\t)}`,\n\t\t\t\t\t\tcause: err,\n\t\t\t\t\t}),\n\t\t\t),\n\t\t);\n\t\tif (result.exitCode !== 0) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\tpromoteNonZero('docker exec', result, inputs.sourcePath, inputs.packageName),\n\t\t\t);\n\t\t}\n\t\treturn yield* parseBuildOutput(result.stdout, inputs.sourcePath, inputs.packageName);\n\t}).pipe(Effect.withSpan('sui-move-build.via-exec'));\n\n/** `{ local = \"../path\" }` dependency paths, harvested from a Move.toml. */\nconst LOCAL_MOVE_DEP_RE = /\\blocal\\s*=\\s*\"([^\"]+)\"/g;\n\n/** Copy a package's transitive local-path Move dependencies into a staging\n *  tree, preserving each dep's path RELATIVE to the staged package so\n *  references like `{ local = \"../token\" }` resolve. Without this, a scoped\n *  copy of only the package fails `sui move build` / `sui move summary` with\n *  \"Invalid directory at ../…\". Throws if a dep resolves outside `stagingRoot`\n *  (the single-mount layout can't represent it). Promise-based so the build\n *  (`MoveBuildError`) and summary (`CodegenBindingsFailed`) call sites can\n *  wrap it in their own error type. */\nexport const copyLocalMoveDeps = async (\n\tpackageSrc: string,\n\tstagedPackage: string,\n\tstagingRoot: string,\n): Promise<void> => {\n\tconst staged = new Set<string>([packageSrc]);\n\tconst walk = async (srcDir: string, stagedDir: string): Promise<void> => {\n\t\tlet toml: string;\n\t\ttry {\n\t\t\ttoml = await readFile(join(srcDir, 'Move.toml'), 'utf8');\n\t\t} catch {\n\t\t\treturn;\n\t\t}\n\t\tfor (const match of toml.matchAll(LOCAL_MOVE_DEP_RE)) {\n\t\t\tconst rel = match[1]!;\n\t\t\tconst depSrc = resolve(srcDir, rel);\n\t\t\tconst depStaged = resolve(stagedDir, rel);\n\t\t\tif (depStaged !== stagingRoot && !depStaged.startsWith(stagingRoot + sep)) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`local Move dependency \"${rel}\" of \"${basename(srcDir)}\" resolves outside the ` +\n\t\t\t\t\t\t`staging root; vendor it under the package tree so it can be staged.`,\n\t\t\t\t);\n\t\t\t}\n\t\t\tif (staged.has(depSrc)) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tstaged.add(depSrc);\n\t\t\tawait cp(depSrc, depStaged, { recursive: true });\n\t\t\tawait walk(depSrc, depStaged);\n\t\t}\n\t};\n\tawait walk(packageSrc, stagedPackage);\n};\n\n/** Build-path wrapper around {@link copyLocalMoveDeps}. */\nexport const stageLocalMoveDeps = (\n\tpackageSrc: string,\n\tstagedPackage: string,\n\tstagingRoot: string,\n\tinputs: BuildInputs,\n): Effect.Effect<void, MoveBuildError> =>\n\tEffect.tryPromise({\n\t\ttry: () => copyLocalMoveDeps(packageSrc, stagedPackage, stagingRoot),\n\t\tcatch: (cause): MoveBuildError =>\n\t\t\tmoveBuildError('scrub', {\n\t\t\t\tsourcePath: inputs.sourcePath,\n\t\t\t\tpackageName: inputs.packageName,\n\t\t\t\tmessage: 'failed to stage local Move dependencies for the one-shot build',\n\t\t\t\tcause,\n\t\t\t}),\n\t});\n\nconst buildViaOneShot = (\n\tinputs: BuildInputs,\n\truntime: ContainerRuntime,\n\timage: ImageRef,\n): Effect.Effect<BuildOutput, MoveBuildError, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tconst pkgName = basename(inputs.sourcePath);\n\t\tconst inner = containerInnerScriptOneShot(pkgName);\n\t\tconst moveHome = join(homedir(), '.move');\n\t\tyield* ensureMoveHomeMountSource(moveHome, inputs.sourcePath, inputs.packageName);\n\n\t\t// Stage a scoped copy of the package and mount THAT, never the user's\n\t\t// source tree. The container scrub (`gawk -i inplace`) rewrites Move.lock\n\t\t// in place; pointing it at the developer's checked-in tree corrupts their\n\t\t// pinned deps. The staging dir is scope-bound (acquireRelease removes it on\n\t\t// scope close) and carries a random suffix so two concurrent builds of the\n\t\t// same package don't share a tree. We keep the `/workspace/<pkgName>` layout\n\t\t// so `containerInnerScript(pkgName)` and the mounted Move cache stay unchanged.\n\t\tconst stagingRoot = yield* Effect.acquireRelease(\n\t\t\tEffect.tryPromise({\n\t\t\t\ttry: () => mkdtemp(join(tmpdir(), `move-build-${mintRandomSuffix(12)}-`)),\n\t\t\t\tcatch: (cause): MoveBuildError =>\n\t\t\t\t\tmoveBuildError('scrub', {\n\t\t\t\t\t\tsourcePath: inputs.sourcePath,\n\t\t\t\t\t\tpackageName: inputs.packageName,\n\t\t\t\t\t\tmessage: 'failed to create staging dir for Move build copy',\n\t\t\t\t\t\tcause,\n\t\t\t\t\t}),\n\t\t\t}),\n\t\t\t(dir) => Effect.promise(() => rm(dir, { recursive: true, force: true })),\n\t\t);\n\t\tconst stagedPackage = join(stagingRoot, pkgName);\n\t\tyield* Effect.tryPromise({\n\t\t\ttry: () => cp(inputs.sourcePath, stagedPackage, { recursive: true }),\n\t\t\tcatch: (cause): MoveBuildError =>\n\t\t\t\tmoveBuildError('scrub', {\n\t\t\t\t\tsourcePath: inputs.sourcePath,\n\t\t\t\t\tpackageName: inputs.packageName,\n\t\t\t\t\tmessage: `failed to stage package copy for Move build (staging=${stagedPackage})`,\n\t\t\t\t\tcause,\n\t\t\t\t}),\n\t\t});\n\t\t// Bring the package's transitive local `../` deps into the staging tree\n\t\t// so the in-place one-shot build resolves them (the scoped copy alone\n\t\t// would omit siblings like `{ local = \"../token\" }`).\n\t\tyield* stageLocalMoveDeps(inputs.sourcePath, stagedPackage, stagingRoot, inputs);\n\n\t\tconst result = yield* runtime\n\t\t\t.runOneShot({\n\t\t\t\timage,\n\t\t\t\tentrypoint: 'sh',\n\t\t\t\targv: ['-c', inner],\n\t\t\t\tmounts: [\n\t\t\t\t\t{ source: stagingRoot, target: '/workspace' },\n\t\t\t\t\t{ source: moveHome, target: '/root/.move' },\n\t\t\t\t],\n\t\t\t\ttimeoutMillis: 5 * 60_000,\n\t\t\t})\n\t\t\t.pipe(\n\t\t\t\tEffect.mapError(\n\t\t\t\t\t(err): MoveBuildError =>\n\t\t\t\t\t\tmoveBuildError('build', {\n\t\t\t\t\t\t\tsourcePath: inputs.sourcePath,\n\t\t\t\t\t\t\tpackageName: inputs.packageName,\n\t\t\t\t\t\t\tmessage: `runtime.runOneShot failed: ${err.reason}: ${err.detail}`,\n\t\t\t\t\t\t\tcause: err,\n\t\t\t\t\t\t}),\n\t\t\t\t),\n\t\t\t);\n\t\tif (result.exitCode !== 0) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\tpromoteNonZero('docker run --rm', result, inputs.sourcePath, inputs.packageName),\n\t\t\t);\n\t\t}\n\t\treturn yield* parseBuildOutput(result.stdout, inputs.sourcePath, inputs.packageName);\n\t}).pipe(Effect.withSpan('sui-move-build.via-one-shot'));\n\nexport const runMoveBuild = (\n\tinputs: BuildInputs,\n): Effect.Effect<BuildOutput, MoveBuildError, Scope.Scope> => {\n\tif (inputs.buildContainer !== undefined) {\n\t\treturn buildViaContainerExec(inputs, inputs.buildContainer);\n\t}\n\tif (inputs.runtime !== undefined && inputs.buildImage !== undefined) {\n\t\treturn buildViaOneShot(inputs, inputs.runtime, inputs.buildImage);\n\t}\n\treturn Effect.fail(\n\t\tmoveBuildError('build', {\n\t\t\tsourcePath: inputs.sourcePath,\n\t\t\tpackageName: inputs.packageName,\n\t\t\tmessage:\n\t\t\t\t'runMoveBuild: no build container and no fresh-container runtime/image — ' +\n\t\t\t\t'host `sui` CLI path is not available without a routed ChildProcessSpawner',\n\t\t}),\n\t);\n};\n"],"mappings":";;;;;;;;;AA+BA,MAAa,0BAA0B;AAEvC,MAAa,2BACZ,UAAU,6BACkB;CAC5B,aAAa,IAAI,IAAI,uBAAuB,OAAO,KAAK,IAAI,CAAC;CAC7D,YAAY;CACZ,kBAAkB;EAAC;EAAkB;EAAqB;EAA4B;CACtF,WAAW,EAAE,aAAa,SAAS;CACnC;AAED,IAAa,iBAAb,cAAoC,OAAO,kBAAkC,CAAC,kBAAkB;CAC/F,OAAO,OAAO,SAAS;EAAC;EAAQ;EAAS;EAAS;EAAQ,CAAC;CAC3D,YAAY,OAAO;CACnB,aAAa,OAAO;CACpB,SAAS,OAAO;CAChB,OAAO,OAAO,SAAS,OAAO,OAAO;CACrC,CAAC,CAAC;AAEH,MAAM,kBACL,OACA,UAOA,IAAI,eAAe;CAClB;CACA,YAAY,MAAM;CAClB,aAAa,MAAM;CACnB,SAAS,MAAM;CACf,GAAI,MAAM,UAAU,KAAA,IAAY,EAAE,OAAO,MAAM,OAAO,GAAG,EAAE;CAC3D,CAAC;AAoBH,MAAa,uBAAuB,WAA2B;CAC9D,MAAM,QAAQ,OAAO,MAAM,KAAK;CAChC,MAAM,MAAqB,EAAE;CAC7B,IAAI,WAAW;AACf,MAAK,MAAM,QAAQ,OAAO;EACzB,MAAM,UAAU,KAAK,WAAW;AAChC,MAAI,QAAQ,WAAW,IAAI,EAAE;GAC5B,MAAM,SAAS,QAAQ,QAAQ,QAAQ,GAAG;AAC1C,OAAI,OAAO,WAAW,WAAW,IAAI,WAAW,WAAW,OAAO,WAAW,QAAQ,EAAE;AACtF,eAAW;AACX;;AAED,cAAW;;AAEZ,MAAI,CAAC,SAAU,KAAI,KAAK,KAAK;;AAE9B,KAAI,YAAY,OAAO,SAAS,KAAK,IAAI,IAAI,GAAG,GAAG,KAAK,GAAI,KAAI,KAAK,GAAG;AACxE,QAAO,IAAI,KAAK,KAAK;;AAGtB,MAAa,6BAA6B;CACzC;CACA;CACA;CACA,CAAC,KAAK,KAAK;AAEZ,MAAa,6BAA6B,eAAuB,iBAAiC;AAajG,QAAO;EAAC,4BAZM,2BAA2B,MAAM,KAAK,CAClD,KAAK,MAAM,IAAI,EAAE,GAAG,CACpB,KAAK,IACwC,CAAC;EASjC,QAPN,cAAc;EAOC,QAHf,aAAa,iBAAiB,aAAa;EAGlB,CAAC,KAAK,KAAK;;AAe9C,MAAa,cAAc,MAAsB,IAAI,EAAE,WAAW,KAAK,QAAQ,CAAC;AAEhF,MAAa,uBAAuB,SAAyB;CAC5D,MAAM,UAAU,KAAK,MAAM;AAC3B,KAAI,QAAQ,WAAW,IAAI,CAAE,QAAO;CACpC,MAAM,MAAM,QAAQ,YAAY,IAAI;AACpC,KAAI,QAAQ,GAAI,QAAO;AACvB,QAAO,QAAQ,MAAM,IAAI;;;;;;;;;;;AAkE1B,MAAa,+BAA+B,YAA4B;CACvE,MAAM,YAAY,WAAW,QAAQ;CACrC,MAAM,cAAc;CACpB,MAAM,aAAa,GAAG,YAAY,GAAG;CAQrC,MAAM,QAAQ,UAAU,YAAY,eAAe,YAAY,yBAAyB,YAAY;CACpG,MAAM,QAAQ,0BAA0B,aAAa,cAAc;AAMnE,QAAO;EACN;EACA;EACA;EACA;EACA,yBATyB,WAAW;EAUpC;EACA;EACA;EACA,UAVyB;EAWzB;EACA,CAAC,KAAK,KAAK;;AAGb,MAAM,gBAAgB,SACrB,SAAS,eAAe,SAAS,eAAe,KAAK,SAAS,QAAQ;AAEvE,MAAM,gBAAgB,SACrB,SAAS,WAAW,SAAS,kBAAkB,SAAS,UAAU,KAAK,WAAW,IAAI;AAEvF,MAAM,uBAAuB,OAAO,SAAiD;CACpF,MAAM,MAAqB,EAAE;CAC7B,MAAM,OAAO,OAAO,QAA+B;EAClD,IAAI,UAIC,EAAE;AACP,MAAI;AACH,aAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,MAAM,CAAC;UAC9C;AACP;;AAED,OAAK,MAAM,SAAS,QACnB,KAAI,MAAM,aAAa,EAAE;AACxB,OAAI,aAAa,MAAM,KAAK,CAAE;AAC9B,SAAM,KAAK,KAAK,KAAK,MAAM,KAAK,CAAC;aACvB,MAAM,QAAQ,IAAI,aAAa,MAAM,KAAK,EAAE;GACtD,MAAM,MAAM,KAAK,KAAK,MAAM,KAAK;AACjC,OAAI;IACH,MAAM,OAAO,MAAM,MAAM,IAAI;AAC7B,QAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,gBAAgB,CAAE,KAAI,KAAK,IAAI;WACnD;;;AAMX,OAAM,KAAK,KAAK;AAChB,QAAO;;AAGR,MAAa,mBAAmB,eAC/B,OAAO,WAAW;CACjB,KAAK,YAAkC;EAEtC,MAAM,SAAS,CAAC,GAAG,MADC,qBAAqB,WAAW,CAC3B,CAAC,MAAM,GAAG,MAClC,SAAS,YAAY,EAAE,CAAC,cAAc,SAAS,YAAY,EAAE,CAAC,CAC9D;EACD,MAAM,SAAS,WAAW,SAAS;AACnC,OAAK,MAAM,OAAO,QAAQ;GACzB,MAAM,MAAM,SAAS,YAAY,IAAI;GACrC,MAAM,MAAM,MAAM,SAAS,KAAK,OAAO;GACvC,MAAM,aAAa,SAAS,IAAI,KAAK,cAAc,oBAAoB,IAAI,GAAG;AAC9E,UAAO,OAAO,IAAI;AAClB,UAAO,OAAO,KAAK;AACnB,UAAO,OAAO,WAAW;AACzB,UAAO,OAAO,KAAK;;AAEpB,SAAO,YAAY,OAAO,OAAO,MAAM,CAAC;;CAEzC,QAAQ,UACP,eAAe,QAAQ;EACtB;EACA,aAAa;EACb,SAAS,4BAA4B,OAAQ,OAAiB,WAAW,MAAM;EAC/E;EACA,CAAC;CACH,CAAC;AAEH,MAAM,cAAc,MACnB,EAAE,WAAW,KAAK,GAAG,KAAK,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,MAAM,SAAS,GAAG;AAE5E,MAAM,oBAAoB,OAAO,SAAiD;CACjF,MAAM,MAAqB,EAAE;CAC7B,MAAM,OAAO,OAAO,QAA+B;EAClD,IAAI,UAIC,EAAE;AACP,MAAI;AACH,aAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,MAAM,CAAC;UAC9C;AACP;;AAED,OAAK,MAAM,SAAS,SAAS;AAC5B,OAAI,MAAM,SAAS,kBAAkB,MAAM,SAAS,UAAU,MAAM,SAAS,QAC5E;GAED,MAAM,QAAQ,KAAK,KAAK,MAAM,KAAK;AACnC,OAAI,MAAM,aAAa,CACtB,OAAM,KAAK,MAAM;YACP,MAAM,QAAQ,IAAI,MAAM,SAAS,YAC3C,KAAI;IACH,MAAM,OAAO,MAAM,MAAM,MAAM;AAC/B,QAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,gBAAgB,CAAE,KAAI,KAAK,MAAM;WACrD;;;AAMX,OAAM,KAAK,KAAK;AAChB,QAAO;;AAGR,MAAM,mBAAmB,OAAO,SAAgC;CAC/D,MAAM,WAAW,MAAM,SAAS,MAAM,OAAO;CAC7C,MAAM,WAAW,oBAAoB,SAAS;AAC9C,KAAI,aAAa,SAAU;AAC3B,OAAM,UAAU,MAAM,UAAU,OAAO;;AAGxC,MAAM,uBAAuB,OAAO,SAAgC;CACnE,MAAM,cAAc,MAAM,kBAAkB,KAAK;AACjD,MAAK,MAAM,KAAK,YACf,KAAI;AACH,QAAM,iBAAiB,EAAE;SAClB;;AAYV,MAAa,kBACZ,YACA,iBAEA,OAAO,WAAW;CACjB,KAAK,YAAY;EAEhB,MAAM,WAAW,KADA,WAAW,aACE,EAAE,MAAM;AACtC,MAAI;AACH,SAAM,MAAM,SAAS;UACd;AACP;;AAED,QAAM,qBAAqB,SAAS;;CAErC,QAAQ,UACP,eAAe,SAAS;EACvB;EACA,aAAa;EACb,SAAS,iCAAiC,aAAa;EACvD;EACA,CAAC;CACH,CAAC;AAEH,MAAM,qBAAqB,OAAO,OAAO;CACxC,SAAS,OAAO,MAAM,OAAO,OAAO;CACpC,cAAc,OAAO,MAAM,OAAO,OAAO;CACzC,CAAC;AAEF,MAAM,sBAAsB,MAC3B,WAAW,KAAK,WAAW,OAAO,KAAK,GAAG,SAAS,CAAC;AAErD,MAAa,oBACZ,QACA,YACA,gBAEA,OAAO,IAAI;CACV,WAAwB;EAEvB,MAAM,SAAS,mBAAmB,oBADlB,oBAAoB,OACyB,EAAE;GAC9D,QAAQ;GACR,SAAS;GACT,UAAU,UAAU,IAAI,MAAM,MAAM,SAAS,EAAE,OAAO,MAAM,OAAO,CAAC;GACpE,CAAC;AAGF,SAAO;GAAE,SAFO,OAAO,QAAQ,KAAK,MAAM,mBAAmB,EAAE,CAE/C;GAAE,cADG,OAAO;GACI;;CAEjC,QAAQ,UACP,eAAe,SAAS;EACvB;EACA;EACA,SAAS,0CAA0C,OAAQ,OAAiB,WAAW,MAAM;EAC7F;EACA,CAAC;CACH,CAAC;AAEH,MAAM,kBACL,IACA,QACA,YACA,gBAEA,eAAe,SAAS;CACvB;CACA;CACA,SACC,GAAG,GAAG,yBAAyB,OAAO,SAAS,gBAAgB,YAAY,cAChE,OAAO,UAAU,UAAU,mBACpB,OAAO,OAAO,MAAM,KAAK,IAAI;CAChD,CAAC;AAEH,MAAM,6BACL,UACA,YACA,gBAEA,OAAO,WAAW;CACjB,WAAW,MAAM,UAAU,EAAE,WAAW,MAAM,CAAC;CAC/C,QAAQ,UACP,eAAe,SAAS;EACvB;EACA;EACA,SAAS,6CAA6C,SAAS;EAC/D;EACA,CAAC;CACH,CAAC,CAAC,KAAK,OAAO,OAAO;AAEvB,MAAM,yBACL,QACA,OAEA,OAAO,IAAI,aAAa;CACvB,MAAM,SAAS,OAAO,GAAG,SAAS,OAAO,WAAW,CAAC,KACpD,OAAO,UACL,QACA,eAAe,SAAS;EACvB,YAAY,OAAO;EACnB,aAAa,OAAO;EACpB,SAAS,mCAAmC,OAC1C,KAA0C,OAAO,WAAW,IAC7D;EACD,OAAO;EACP,CAAC,CACH,CACD;AACD,KAAI,OAAO,aAAa,EACvB,QAAO,OAAO,OAAO,KACpB,eAAe,eAAe,QAAQ,OAAO,YAAY,OAAO,YAAY,CAC5E;AAEF,QAAO,OAAO,iBAAiB,OAAO,QAAQ,OAAO,YAAY,OAAO,YAAY;EACnF,CAAC,KAAK,OAAO,SAAS,0BAA0B,CAAC;;AAGpD,MAAM,oBAAoB;;;;;;;;;AAU1B,MAAa,oBAAoB,OAChC,YACA,eACA,gBACmB;CACnB,MAAM,SAAS,IAAI,IAAY,CAAC,WAAW,CAAC;CAC5C,MAAM,OAAO,OAAO,QAAgB,cAAqC;EACxE,IAAI;AACJ,MAAI;AACH,UAAO,MAAM,SAAS,KAAK,QAAQ,YAAY,EAAE,OAAO;UACjD;AACP;;AAED,OAAK,MAAM,SAAS,KAAK,SAAS,kBAAkB,EAAE;GACrD,MAAM,MAAM,MAAM;GAClB,MAAM,SAAS,QAAQ,QAAQ,IAAI;GACnC,MAAM,YAAY,QAAQ,WAAW,IAAI;AACzC,OAAI,cAAc,eAAe,CAAC,UAAU,WAAW,cAAc,IAAI,CACxE,OAAM,IAAI,MACT,0BAA0B,IAAI,QAAQ,SAAS,OAAO,CAAC,4FAEvD;AAEF,OAAI,OAAO,IAAI,OAAO,CACrB;AAED,UAAO,IAAI,OAAO;AAClB,SAAM,GAAG,QAAQ,WAAW,EAAE,WAAW,MAAM,CAAC;AAChD,SAAM,KAAK,QAAQ,UAAU;;;AAG/B,OAAM,KAAK,YAAY,cAAc;;;AAItC,MAAa,sBACZ,YACA,eACA,aACA,WAEA,OAAO,WAAW;CACjB,WAAW,kBAAkB,YAAY,eAAe,YAAY;CACpE,QAAQ,UACP,eAAe,SAAS;EACvB,YAAY,OAAO;EACnB,aAAa,OAAO;EACpB,SAAS;EACT;EACA,CAAC;CACH,CAAC;AAEH,MAAM,mBACL,QACA,SACA,UAEA,OAAO,IAAI,aAAa;CACvB,MAAM,UAAU,SAAS,OAAO,WAAW;CAC3C,MAAM,QAAQ,4BAA4B,QAAQ;CAClD,MAAM,WAAW,KAAK,SAAS,EAAE,QAAQ;AACzC,QAAO,0BAA0B,UAAU,OAAO,YAAY,OAAO,YAAY;CASjF,MAAM,cAAc,OAAO,OAAO,eACjC,OAAO,WAAW;EACjB,WAAW,QAAQ,KAAK,QAAQ,EAAE,cAAc,iBAAiB,GAAG,CAAC,GAAG,CAAC;EACzE,QAAQ,UACP,eAAe,SAAS;GACvB,YAAY,OAAO;GACnB,aAAa,OAAO;GACpB,SAAS;GACT;GACA,CAAC;EACH,CAAC,GACD,QAAQ,OAAO,cAAc,GAAG,KAAK;EAAE,WAAW;EAAM,OAAO;EAAM,CAAC,CAAC,CACxE;CACD,MAAM,gBAAgB,KAAK,aAAa,QAAQ;AAChD,QAAO,OAAO,WAAW;EACxB,WAAW,GAAG,OAAO,YAAY,eAAe,EAAE,WAAW,MAAM,CAAC;EACpE,QAAQ,UACP,eAAe,SAAS;GACvB,YAAY,OAAO;GACnB,aAAa,OAAO;GACpB,SAAS,wDAAwD,cAAc;GAC/E;GACA,CAAC;EACH,CAAC;AAIF,QAAO,mBAAmB,OAAO,YAAY,eAAe,aAAa,OAAO;CAEhF,MAAM,SAAS,OAAO,QACpB,WAAW;EACX;EACA,YAAY;EACZ,MAAM,CAAC,MAAM,MAAM;EACnB,QAAQ,CACP;GAAE,QAAQ;GAAa,QAAQ;GAAc,EAC7C;GAAE,QAAQ;GAAU,QAAQ;GAAe,CAC3C;EACD,eAAe,IAAI;EACnB,CAAC,CACD,KACA,OAAO,UACL,QACA,eAAe,SAAS;EACvB,YAAY,OAAO;EACnB,aAAa,OAAO;EACpB,SAAS,8BAA8B,IAAI,OAAO,IAAI,IAAI;EAC1D,OAAO;EACP,CAAC,CACH,CACD;AACF,KAAI,OAAO,aAAa,EACvB,QAAO,OAAO,OAAO,KACpB,eAAe,mBAAmB,QAAQ,OAAO,YAAY,OAAO,YAAY,CAChF;AAEF,QAAO,OAAO,iBAAiB,OAAO,QAAQ,OAAO,YAAY,OAAO,YAAY;EACnF,CAAC,KAAK,OAAO,SAAS,8BAA8B,CAAC;AAExD,MAAa,gBACZ,WAC6D;AAC7D,KAAI,OAAO,mBAAmB,KAAA,EAC7B,QAAO,sBAAsB,QAAQ,OAAO,eAAe;AAE5D,KAAI,OAAO,YAAY,KAAA,KAAa,OAAO,eAAe,KAAA,EACzD,QAAO,gBAAgB,QAAQ,OAAO,SAAS,OAAO,WAAW;AAElE,QAAO,OAAO,KACb,eAAe,SAAS;EACvB,YAAY,OAAO;EACnB,aAAa,OAAO;EACpB,SACC;EAED,CAAC,CACF"}

package/dist/substrate/runtime/supervisor/dispatch-contributions.mjs

@@ -1,151 +0,0 @@
-import { withPluginSpan } from "../observability/spans.mjs";
-import "../capability-sinks/index.mjs";
-import { CapabilityFactoryFailed } from "./errors.mjs";
-import "../observability/index.mjs";
-import { StrategyRegistryService } from "../strategy-registry/service.mjs";
-import { OptionalService, noopStrategyRegistry, publish } from "./wiring.mjs";
-import { Cause, Effect, Scope } from "effect";
-//#region src/substrate/runtime/supervisor/dispatch-contributions.ts
-const strategyRegistryAccess = OptionalService(StrategyRegistryService);
-/**
-* Render the underlying cause of a `ContributionSinkFailed` to a single
-* human string for the operator-facing warning log.
-*
-* `ContributionSinkFailed.cause` is `unknown` — the failing sink may
-* reject with an Effect `Cause`, a tagged domain error (e.g.
-* `RouterBootFailed`, which carries the spec-mismatch `detail`), a plain
-* `Error`, or an arbitrary value. The original wrapper only logged its
-* own generic `err.message` ("capability sink 'routable' failed") and
-* DROPPED this cause, so an operator saw a healthy-looking stack with
-* dead RPC/wallet routing and no way to learn why. This recovers the
-* real detail across all of those shapes:
-*   - `Cause` → `Cause.pretty` (full failure tree).
-*   - `Error` → `.stack ?? .message` (keeps the tag + detail; a
-*     `TaggedError`'s `toString()` includes `_tag` and its fields).
-*   - anything else → `JSON.stringify`, falling back to `String` when
-*     the value is not serializable (cyclic / BigInt).
-*/
-const formatCause = (cause) => {
-	if (Cause.isCause(cause)) return Cause.pretty(cause);
-	if (cause instanceof Error) return cause.stack ?? cause.message;
-	if (typeof cause === "string") return cause;
-	try {
-		return JSON.stringify(cause) ?? String(cause);
-	} catch {
-		return String(cause);
-	}
-};
-/**
-* Best-effort discriminator for the wrapped cause — the failing sink
-* error's `_tag` (e.g. `RouterBootFailed`) when present. Feeds the
-* additive optional `causeType` on the `dispatchFailed` event so a
-* renderer/log consumer can route on the failure category without
-* parsing the message. Returns `undefined` for untagged causes so the
-* field is simply omitted.
-*/
-const causeTagOf = (cause) => {
-	if (typeof cause === "object" && cause !== null && "_tag" in cause && typeof cause._tag === "string") return cause._tag;
-};
-/**
-* Resolve a plugin's `capabilities` field to a concrete decl tuple.
-*
-* Two accepted shapes (see `Plugin.capabilities` for the
-* authoring-side contract):
-*
-*   (a) Static — a plain `ReadonlyArray<CapabilityDecl>`. Returned
-*       as-is.
-*
-*   (b) Dynamic — a `CapabilitiesFactory<…>` function. Invoked with
-*       the resolved plugin value + the acquire context built from
-*       the supervisor's identity + runtime root. The function is
-*       called once per acquire (post-success); the returned tuple
-*       flows into `dispatchContributions` like a static one.
-*
-* The dynamic seam exists so plugins' snapshot subtrees, codegen
-* bindings, routable URLs, strategy contributions, etc. can stamp
-* the REAL chain id / package id / network alias produced by their
-* acquire body, instead of the factory-time placeholder strings the
-* static form forces.
-*
-* The substrate stays generic: this resolver doesn't know any
-* service name; the discrimination is purely structural
-* (`typeof === 'function'`).
-*/
-const resolveCapabilities = (pluginKey, field, resolved, acquireContext) => {
-	if (field === void 0) return Effect.succeed([]);
-	if (typeof field === "function") return Effect.try({
-		try: () => field(resolved, acquireContext),
-		catch: (cause) => new CapabilityFactoryFailed({
-			pluginKey,
-			message: `capability factory failed for ${pluginKey}`,
-			cause
-		})
-	});
-	return Effect.succeed(field);
-};
-/**
-* Walk a plugin's `capabilities` tuple + `errorContributions` after a
-* successful acquire, route every contribution through the
-* substrate-owned `CapabilitySinksService`. The plugin's scope is
-* provided so each sink's `addFinalizer` lands on the plugin's scope —
-* registrations reap on selective-restart / shutdown.
-*
-* The supervisor stays kind-blind: it builds the contribution union
-* (`{source: 'capability'|'error', ...}`) and the dispatch happens
-* inside the service. Unknown kinds are downgraded to no-ops here so
-* the substrate-open-by-default contract holds — plugin authors can
-* emit a custom-kind decl that is observed only by the orchestrators
-* that registered the matching sink.
-*
-* Sink failures (`ContributionSinkFailed`) are routed through a
-* separate `engine.orchestrator.dispatchFailed` event so the plugin
-* remains ready and the orchestrator's broken sink is the visible
-* fault (backlog #39).
-*/
-const dispatchContributions = (pluginKey, capabilities, errorContributions, pluginRole, identity, pluginContext, pluginScope, sinks, ref, hub) => Effect.gen(function* () {
-	const strategyRegistry = strategyRegistryAccess.read(pluginContext, noopStrategyRegistry);
-	const harvestCtx = {
-		pluginKey,
-		identity,
-		publish: (event) => publish(ref, hub, event),
-		registerStrategy: (decl) => strategyRegistry.register(decl.capabilityKey, decl.strategy, {
-			autoMounted: decl.autoMounted,
-			...decl.priority === void 0 ? {} : { priority: decl.priority }
-		})
-	};
-	const items = [...capabilities.map((decl) => ({
-		source: "capability",
-		decl
-	})), ...errorContributions.map((contribution) => ({
-		source: "error",
-		contribution
-	}))];
-	for (const item of items) {
-		const dispatch = sinks.dispatch(item, harvestCtx).pipe(Effect.catchTags({
-			UnknownContributionKind: () => Effect.void,
-			ContributionSinkFailed: (err) => Effect.gen(function* () {
-				const causeType = causeTagOf(err.cause);
-				yield* publish(ref, hub, {
-					tag: "engine.orchestrator.dispatchFailed",
-					pluginKey,
-					kind: err.kind,
-					message: err.message,
-					...causeType === void 0 ? {} : { causeType },
-					at: Date.now()
-				});
-				yield* Effect.logWarning(`capability sink '${err.kind}' failed for plugin '${pluginKey}': ${formatCause(err.cause)}`);
-			})
-		}));
-		yield* Scope.provide(dispatch, pluginScope);
-	}
-}).pipe(withPluginSpan("lifecycle.supervisor.dispatchContributions", {
-	app: identity.app,
-	stack: identity.stack,
-	network: identity.chain,
-	pluginKey,
-	role: pluginRole
-}));
-//#endregion
-export { dispatchContributions, resolveCapabilities };
-
-//# sourceMappingURL=dispatch-contributions.mjs.map

package/dist/substrate/runtime/supervisor/dispatch-contributions.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"dispatch-contributions.mjs","names":[],"sources":["../../../../src/substrate/runtime/supervisor/dispatch-contributions.ts"],"sourcesContent":["// Supervisor capability-dispatch path.\n//\n// Walks a plugin's `capabilities` tuple + `errorContributions` after a\n// successful acquire and routes each item through the substrate-owned\n// `CapabilitySinksService`.\n//\n// Bug-fix history (backlog #39): the original implementation only\n// caught `UnknownContributionKind` from `sinks.dispatch()`. The error\n// channel also yields `ContributionSinkFailed` (a registered sink\n// rejected while handling a known kind — router/codegen collisions,\n// upstream IO faults). The wrapping `Effect.exit` at the acquire-node\n// callsite then projected the failure through `registry.markFailed`,\n// attributing the orchestrator's bug to the plugin.\n//\n// Fix: catch BOTH tags here and route them DIFFERENTLY.\n//   - `UnknownContributionKind` → no-op (substrate-open-by-default;\n//     the plugin emitted a contribution shape no sink claims).\n//   - `ContributionSinkFailed` → publish the typed\n//     `engine.orchestrator.dispatchFailed` event + log a warning; the\n//     plugin stays ready.\n\nimport { Cause, Context, Effect, Queue, Scope, SubscriptionRef } from 'effect';\n\nimport type { CapabilityDecl } from '../../../contracts/capability-decl.ts';\nimport type { StrategyContributorDecl } from '../../../contracts/strategy-contributor.ts';\nimport type { PluginKey } from '../../brand.ts';\nimport type { EngineEvent } from '../../events.ts';\nimport type { Identity } from '../../identity.ts';\nimport type { PluginRole } from '../../lifecycle.ts';\nimport type { AcquireContext, PluginErrorContribution } from '../../plugin.ts';\nimport type { SubscribableState } from '../../projection.ts';\nimport {\n\ttype AnyContribution,\n\ttype CapabilitySinksShape,\n\ttype HarvestContext,\n} from '../capability-sinks/index.ts';\nimport { withPluginSpan } from '../observability/index.ts';\nimport { StrategyRegistryService } from '../strategy-registry/service.ts';\nimport { CapabilityFactoryFailed } from './errors.ts';\nimport { noopStrategyRegistry, OptionalService, publish } from './wiring.ts';\n\nconst strategyRegistryAccess = OptionalService(StrategyRegistryService);\n\n/**\n * Render the underlying cause of a `ContributionSinkFailed` to a single\n * human string for the operator-facing warning log.\n *\n * `ContributionSinkFailed.cause` is `unknown` — the failing sink may\n * reject with an Effect `Cause`, a tagged domain error (e.g.\n * `RouterBootFailed`, which carries the spec-mismatch `detail`), a plain\n * `Error`, or an arbitrary value. The original wrapper only logged its\n * own generic `err.message` (\"capability sink 'routable' failed\") and\n * DROPPED this cause, so an operator saw a healthy-looking stack with\n * dead RPC/wallet routing and no way to learn why. This recovers the\n * real detail across all of those shapes:\n *   - `Cause` → `Cause.pretty` (full failure tree).\n *   - `Error` → `.stack ?? .message` (keeps the tag + detail; a\n *     `TaggedError`'s `toString()` includes `_tag` and its fields).\n *   - anything else → `JSON.stringify`, falling back to `String` when\n *     the value is not serializable (cyclic / BigInt).\n */\nconst formatCause = (cause: unknown): string => {\n\tif (Cause.isCause(cause)) return Cause.pretty(cause);\n\tif (cause instanceof Error) return cause.stack ?? cause.message;\n\tif (typeof cause === 'string') return cause;\n\ttry {\n\t\treturn JSON.stringify(cause) ?? String(cause);\n\t} catch {\n\t\treturn String(cause);\n\t}\n};\n\n/**\n * Best-effort discriminator for the wrapped cause — the failing sink\n * error's `_tag` (e.g. `RouterBootFailed`) when present. Feeds the\n * additive optional `causeType` on the `dispatchFailed` event so a\n * renderer/log consumer can route on the failure category without\n * parsing the message. Returns `undefined` for untagged causes so the\n * field is simply omitted.\n */\nconst causeTagOf = (cause: unknown): string | undefined => {\n\tif (\n\t\ttypeof cause === 'object' &&\n\t\tcause !== null &&\n\t\t'_tag' in cause &&\n\t\ttypeof (cause as { _tag: unknown })._tag === 'string'\n\t) {\n\t\treturn (cause as { _tag: string })._tag;\n\t}\n\treturn undefined;\n};\n\n/**\n * Resolve a plugin's `capabilities` field to a concrete decl tuple.\n *\n * Two accepted shapes (see `Plugin.capabilities` for the\n * authoring-side contract):\n *\n *   (a) Static — a plain `ReadonlyArray<CapabilityDecl>`. Returned\n *       as-is.\n *\n *   (b) Dynamic — a `CapabilitiesFactory<…>` function. Invoked with\n *       the resolved plugin value + the acquire context built from\n *       the supervisor's identity + runtime root. The function is\n *       called once per acquire (post-success); the returned tuple\n *       flows into `dispatchContributions` like a static one.\n *\n * The dynamic seam exists so plugins' snapshot subtrees, codegen\n * bindings, routable URLs, strategy contributions, etc. can stamp\n * the REAL chain id / package id / network alias produced by their\n * acquire body, instead of the factory-time placeholder strings the\n * static form forces.\n *\n * The substrate stays generic: this resolver doesn't know any\n * service name; the discrimination is purely structural\n * (`typeof === 'function'`).\n */\nexport const resolveCapabilities = (\n\tpluginKey: PluginKey,\n\tfield:\n\t\t| ReadonlyArray<CapabilityDecl>\n\t\t| ((resolved: unknown, ctx: AcquireContext) => ReadonlyArray<CapabilityDecl>)\n\t\t| undefined,\n\tresolved: unknown,\n\tacquireContext: AcquireContext,\n): Effect.Effect<ReadonlyArray<CapabilityDecl>, CapabilityFactoryFailed> => {\n\tif (field === undefined) return Effect.succeed([]);\n\tif (typeof field === 'function') {\n\t\treturn Effect.try({\n\t\t\ttry: () => field(resolved, acquireContext),\n\t\t\tcatch: (cause) =>\n\t\t\t\tnew CapabilityFactoryFailed({\n\t\t\t\t\tpluginKey,\n\t\t\t\t\tmessage: `capability factory failed for ${pluginKey}`,\n\t\t\t\t\tcause,\n\t\t\t\t}),\n\t\t});\n\t}\n\treturn Effect.succeed(field);\n};\n\n/**\n * Walk a plugin's `capabilities` tuple + `errorContributions` after a\n * successful acquire, route every contribution through the\n * substrate-owned `CapabilitySinksService`. The plugin's scope is\n * provided so each sink's `addFinalizer` lands on the plugin's scope —\n * registrations reap on selective-restart / shutdown.\n *\n * The supervisor stays kind-blind: it builds the contribution union\n * (`{source: 'capability'|'error', ...}`) and the dispatch happens\n * inside the service. Unknown kinds are downgraded to no-ops here so\n * the substrate-open-by-default contract holds — plugin authors can\n * emit a custom-kind decl that is observed only by the orchestrators\n * that registered the matching sink.\n *\n * Sink failures (`ContributionSinkFailed`) are routed through a\n * separate `engine.orchestrator.dispatchFailed` event so the plugin\n * remains ready and the orchestrator's broken sink is the visible\n * fault (backlog #39).\n */\nexport const dispatchContributions = (\n\tpluginKey: PluginKey,\n\tcapabilities: ReadonlyArray<CapabilityDecl>,\n\terrorContributions: ReadonlyArray<PluginErrorContribution>,\n\tpluginRole: PluginRole,\n\tidentity: Identity,\n\tpluginContext: Context.Context<never>,\n\tpluginScope: Scope.Scope,\n\tsinks: CapabilitySinksShape,\n\tref: SubscriptionRef.SubscriptionRef<SubscribableState>,\n\thub: Queue.Enqueue<EngineEvent>,\n): Effect.Effect<void, never, never> =>\n\tEffect.gen(function* () {\n\t\tconst strategyRegistry = strategyRegistryAccess.read(pluginContext, noopStrategyRegistry);\n\t\tconst harvestCtx: HarvestContext = {\n\t\t\tpluginKey,\n\t\t\tidentity,\n\t\t\tpublish: (event) => publish(ref, hub, event),\n\t\t\tregisterStrategy: (decl: StrategyContributorDecl<string, unknown>) =>\n\t\t\t\tstrategyRegistry.register(decl.capabilityKey, decl.strategy, {\n\t\t\t\t\tautoMounted: decl.autoMounted,\n\t\t\t\t\t...(decl.priority === undefined ? {} : { priority: decl.priority }),\n\t\t\t\t}),\n\t\t};\n\n\t\tconst items: ReadonlyArray<AnyContribution> = [\n\t\t\t...capabilities.map<AnyContribution>((decl) => ({\n\t\t\t\tsource: 'capability',\n\t\t\t\tdecl,\n\t\t\t})),\n\t\t\t...errorContributions.map<AnyContribution>((contribution) => ({\n\t\t\t\tsource: 'error',\n\t\t\t\tcontribution,\n\t\t\t})),\n\t\t];\n\n\t\tfor (const item of items) {\n\t\t\tconst dispatch = sinks.dispatch(item, harvestCtx).pipe(\n\t\t\t\tEffect.catchTags({\n\t\t\t\t\tUnknownContributionKind: () => Effect.void,\n\t\t\t\t\tContributionSinkFailed: (err) =>\n\t\t\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\t\t\t// Orchestrator-fault path: surface the typed event so\n\t\t\t\t\t\t\t// renderers + log consumers see WHICH sink failed\n\t\t\t\t\t\t\t// without misattributing to the plugin. The plugin's\n\t\t\t\t\t\t\t// lifecycle state is untouched; the markFailed path\n\t\t\t\t\t\t\t// in `acquireNode` is NOT taken for this branch.\n\t\t\t\t\t\t\t//\n\t\t\t\t\t\t\t// The underlying cause MUST travel with the warning:\n\t\t\t\t\t\t\t// a non-fatal sink (e.g. `routable`) leaves the plugin\n\t\t\t\t\t\t\t// `ready`, so without the cause an operator sees a\n\t\t\t\t\t\t\t// healthy-looking stack with dead RPC/wallet routing\n\t\t\t\t\t\t\t// and no diagnosis. `err.cause` holds the real domain\n\t\t\t\t\t\t\t// error (e.g. `RouterBootFailed` + its spec-mismatch\n\t\t\t\t\t\t\t// `detail`); we stringify it for the log and lift its\n\t\t\t\t\t\t\t// `_tag` onto the event's additive `causeType`.\n\t\t\t\t\t\t\tconst causeType = causeTagOf(err.cause);\n\t\t\t\t\t\t\tyield* publish(ref, hub, {\n\t\t\t\t\t\t\t\ttag: 'engine.orchestrator.dispatchFailed',\n\t\t\t\t\t\t\t\tpluginKey,\n\t\t\t\t\t\t\t\tkind: err.kind,\n\t\t\t\t\t\t\t\tmessage: err.message,\n\t\t\t\t\t\t\t\t...(causeType === undefined ? {} : { causeType }),\n\t\t\t\t\t\t\t\tat: Date.now(),\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\tyield* Effect.logWarning(\n\t\t\t\t\t\t\t\t`capability sink '${err.kind}' failed for plugin '${pluginKey}': ${formatCause(err.cause)}`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}),\n\t\t\t\t}),\n\t\t\t);\n\t\t\tyield* Scope.provide(dispatch, pluginScope);\n\t\t}\n\t}).pipe(\n\t\twithPluginSpan('lifecycle.supervisor.dispatchContributions', {\n\t\t\tapp: identity.app,\n\t\t\tstack: identity.stack,\n\t\t\tnetwork: identity.chain,\n\t\t\tpluginKey,\n\t\t\trole: pluginRole,\n\t\t}),\n\t);\n"],"mappings":";;;;;;;;AAyCA,MAAM,yBAAyB,gBAAgB,wBAAwB;;;;;;;;;;;;;;;;;;;AAoBvE,MAAM,eAAe,UAA2B;AAC/C,KAAI,MAAM,QAAQ,MAAM,CAAE,QAAO,MAAM,OAAO,MAAM;AACpD,KAAI,iBAAiB,MAAO,QAAO,MAAM,SAAS,MAAM;AACxD,KAAI,OAAO,UAAU,SAAU,QAAO;AACtC,KAAI;AACH,SAAO,KAAK,UAAU,MAAM,IAAI,OAAO,MAAM;SACtC;AACP,SAAO,OAAO,MAAM;;;;;;;;;;;AAYtB,MAAM,cAAc,UAAuC;AAC1D,KACC,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,SACV,OAAQ,MAA4B,SAAS,SAE7C,QAAQ,MAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BrC,MAAa,uBACZ,WACA,OAIA,UACA,mBAC2E;AAC3E,KAAI,UAAU,KAAA,EAAW,QAAO,OAAO,QAAQ,EAAE,CAAC;AAClD,KAAI,OAAO,UAAU,WACpB,QAAO,OAAO,IAAI;EACjB,WAAW,MAAM,UAAU,eAAe;EAC1C,QAAQ,UACP,IAAI,wBAAwB;GAC3B;GACA,SAAS,iCAAiC;GAC1C;GACA,CAAC;EACH,CAAC;AAEH,QAAO,OAAO,QAAQ,MAAM;;;;;;;;;;;;;;;;;;;;;AAsB7B,MAAa,yBACZ,WACA,cACA,oBACA,YACA,UACA,eACA,aACA,OACA,KACA,QAEA,OAAO,IAAI,aAAa;CACvB,MAAM,mBAAmB,uBAAuB,KAAK,eAAe,qBAAqB;CACzF,MAAM,aAA6B;EAClC;EACA;EACA,UAAU,UAAU,QAAQ,KAAK,KAAK,MAAM;EAC5C,mBAAmB,SAClB,iBAAiB,SAAS,KAAK,eAAe,KAAK,UAAU;GAC5D,aAAa,KAAK;GAClB,GAAI,KAAK,aAAa,KAAA,IAAY,EAAE,GAAG,EAAE,UAAU,KAAK,UAAU;GAClE,CAAC;EACH;CAED,MAAM,QAAwC,CAC7C,GAAG,aAAa,KAAsB,UAAU;EAC/C,QAAQ;EACR;EACA,EAAE,EACH,GAAG,mBAAmB,KAAsB,kBAAkB;EAC7D,QAAQ;EACR;EACA,EAAE,CACH;AAED,MAAK,MAAM,QAAQ,OAAO;EACzB,MAAM,WAAW,MAAM,SAAS,MAAM,WAAW,CAAC,KACjD,OAAO,UAAU;GAChB,+BAA+B,OAAO;GACtC,yBAAyB,QACxB,OAAO,IAAI,aAAa;IAevB,MAAM,YAAY,WAAW,IAAI,MAAM;AACvC,WAAO,QAAQ,KAAK,KAAK;KACxB,KAAK;KACL;KACA,MAAM,IAAI;KACV,SAAS,IAAI;KACb,GAAI,cAAc,KAAA,IAAY,EAAE,GAAG,EAAE,WAAW;KAChD,IAAI,KAAK,KAAK;KACd,CAAC;AACF,WAAO,OAAO,WACb,oBAAoB,IAAI,KAAK,uBAAuB,UAAU,KAAK,YAAY,IAAI,MAAM,GACzF;KACA;GACH,CAAC,CACF;AACD,SAAO,MAAM,QAAQ,UAAU,YAAY;;EAE3C,CAAC,KACF,eAAe,8CAA8C;CAC5D,KAAK,SAAS;CACd,OAAO,SAAS;CAChB,SAAS,SAAS;CAClB;CACA,MAAM;CACN,CAAC,CACF"}

package/dist/substrate/state-store.d.mts

@@ -1 +0,0 @@
-import { Effect } from "effect";