mystenlabs/fix-client-bug
.agents/skills/fix-client-bug/SKILL.md
Fix bugs or add features in the @mysten/sui client layer (gRPC, JSON-RPC, GraphQL). Ensures all three transport implementations stay in sync.
$ install --global
skillsauthnpx skillsauth add mystenlabs/ts-sdks fix-client-bugInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 20, 2026, 12:30 PM141.4s1 file scanned
SKILL.md
- name:
- fix-client-bug
- description:
- Fix bugs or add features in the @mysten/sui client layer (gRPC, JSON-RPC, GraphQL). Ensures all three transport implementations stay in sync.
- user-invocable:
- true
- allowed-tools:
- Bash, Read, Edit, Write, Grep, Glob
Fix Client Bug / Add Client Feature
Use this workflow when making changes to Core API methods in packages/sui/src/. The key architectural constraint is that the three transport implementations (gRPC, JSON-RPC, GraphQL) must always produce identical results for the same Core API call.
Phase 1: Read Before Writing
- Identify the affected Core API method(s) in
packages/sui/src/client/core.ts. - Read the shared return types in
packages/sui/src/client/types.ts. - Read all three transport implementations of the method:
packages/sui/src/grpc/core.tspackages/sui/src/jsonRpc/core.tspackages/sui/src/graphql/core.ts
- If the method is implemented in the abstract
CoreClient(not abstract), check whether the bug is in the shared logic or in a method it delegates to.
Do not stop after reading one implementation. A bug in one transport very often exists in a different form in the others.
Phase 2: Update Types
If the change affects the return type in src/client/types.ts:
- Follow the existing
$kinddiscriminated union pattern for any polymorphic data. Search types.ts for$kindto see howObjectOwner,TransactionResult,ExecutionError, etc. are structured. - Extract named types for array items rather than using inline anonymous objects.
- Use explicit return type annotations in the mapping functions (e.g.,
(item): SuiClientTypes.SomeType => { ... }) to catch type mismatches at the implementation site.
Phase 3: Update All Three Implementations
gRPC (src/grpc/core.ts)
- Check the
readMask.pathsarray — fields not listed here are not returned by the server. - Reference proto types in
src/grpc/proto/to discover available fields.
GraphQL (src/graphql/core.ts)
- If new data is needed from the API, edit the
.graphqlquery file insrc/graphql/queries/. - Regenerate types:
pnpm --filter @mysten/sui codegen:graphql - This updates
src/graphql/generated/queries.tswith new typed document nodes.
JSON-RPC (src/jsonRpc/core.ts)
- JSON-RPC response shapes often differ from unified types. Check what the RPC actually returns.
- Some data must be derived rather than mapped directly. Utilities in
src/utils/(e.g.,deriveDynamicFieldID,normalizeStructTag) may be needed.
Phase 4: Add E2E Tests
- Add or update tests in
packages/sui/test/e2e/clients/core/. - Use
testWithAllClientsto run the test across all transports. - Use
expectAllClientsReturnSameDatato assert identical results across clients. - If you need new on-chain state, add Move functions to
test/e2e/data/shared/test_data/sources/. - If you add lines to Move source files, check whether existing snapshot tests reference line numbers from those files (search for the filename in test files).
Phase 5: Verify and Changeset
- Build:
pnpm turbo build --filter=@mysten/sui - Lint:
pnpm --filter @mysten/sui oxlint:check - Unit tests:
pnpm --filter @mysten/sui test - Format:
pnpm prettier:check - Create a changeset — use
minorif you're adding new fields or types to the public API,patchfor internal-only fixes.
Related Skills
mystenlabs/fix-audit
testing
VerifiedTrustedCommunity
Fix pnpm audit vulnerabilities. Upgrades packages, adds overrides, handles minimumReleaseAge restrictions, and cleans up stale overrides.
95SKILL.mdUpdated Apr 15, 2026
mystenlabs/find-skills
data-ai
VerifiedTrustedCommunity
Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express interest in extending capabilities. This skill should be used when the user is looking for functionality that might exist as an installable skill.
95SKILL.mdUpdated Apr 15, 2026
mystenlabs/docs-writing
development
VerifiedTrustedCommunity
Write and maintain SDK documentation in packages/docs/content/. Use when adding new doc pages, updating existing docs, or modifying the documentation structure. Ensures frontmatter, meta.json, and LLM index stay in sync.
95SKILL.mdUpdated Apr 15, 2026
mystenlabs/agent-browser
tools
VerifiedTrustedCommunity
Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to "open a website", "fill out a form", "click a button", "take a screenshot", "scrape data from a page", "test this web app", "login to a site", "automate browser actions", or any task requiring programmatic web interaction.
95SKILL.mdUpdated Apr 15, 2026