@arcote.tech/arc-cli 0.7.5 → 0.7.7

package/dist/index.js

@@ -2754,17 +2754,15 @@ var init_strip_ansi = __esm(() => {
   regex = ansiRegex();
 });
 
-// ../../node_modules/.bun/get-east-asian-width@1.5.0/node_modules/get-east-asian-width/lookup-data.js
-var ambiguousRanges, fullwidthRanges, halfwidthRanges, narrowRanges, wideRanges;
+// ../../node_modules/.bun/get-east-asian-width@1.6.0/node_modules/get-east-asian-width/lookup-data.js
+var ambiguousMinimalCodePoint = 161, ambiguousMaximumCodePoint = 1114109, ambiguousRanges, fullwidthMinimalCodePoint = 12288, fullwidthMaximumCodePoint = 65510, fullwidthRanges, wideMinimalCodePoint = 4352, wideMaximumCodePoint = 262141, wideRanges;
 var init_lookup_data = __esm(() => {
   ambiguousRanges = [161, 161, 164, 164, 167, 168, 170, 170, 173, 174, 176, 180, 182, 186, 188, 191, 198, 198, 208, 208, 215, 216, 222, 225, 230, 230, 232, 234, 236, 237, 240, 240, 242, 243, 247, 250, 252, 252, 254, 254, 257, 257, 273, 273, 275, 275, 283, 283, 294, 295, 299, 299, 305, 307, 312, 312, 319, 322, 324, 324, 328, 331, 333, 333, 338, 339, 358, 359, 363, 363, 462, 462, 464, 464, 466, 466, 468, 468, 470, 470, 472, 472, 474, 474, 476, 476, 593, 593, 609, 609, 708, 708, 711, 711, 713, 715, 717, 717, 720, 720, 728, 731, 733, 733, 735, 735, 768, 879, 913, 929, 931, 937, 945, 961, 963, 969, 1025, 1025, 1040, 1103, 1105, 1105, 8208, 8208, 8211, 8214, 8216, 8217, 8220, 8221, 8224, 8226, 8228, 8231, 8240, 8240, 8242, 8243, 8245, 8245, 8251, 8251, 8254, 8254, 8308, 8308, 8319, 8319, 8321, 8324, 8364, 8364, 8451, 8451, 8453, 8453, 8457, 8457, 8467, 8467, 8470, 8470, 8481, 8482, 8486, 8486, 8491, 8491, 8531, 8532, 8539, 8542, 8544, 8555, 8560, 8569, 8585, 8585, 8592, 8601, 8632, 8633, 8658, 8658, 8660, 8660, 8679, 8679, 8704, 8704, 8706, 8707, 8711, 8712, 8715, 8715, 8719, 8719, 8721, 8721, 8725, 8725, 8730, 8730, 8733, 8736, 8739, 8739, 8741, 8741, 8743, 8748, 8750, 8750, 8756, 8759, 8764, 8765, 8776, 8776, 8780, 8780, 8786, 8786, 8800, 8801, 8804, 8807, 8810, 8811, 8814, 8815, 8834, 8835, 8838, 8839, 8853, 8853, 8857, 8857, 8869, 8869, 8895, 8895, 8978, 8978, 9312, 9449, 9451, 9547, 9552, 9587, 9600, 9615, 9618, 9621, 9632, 9633, 9635, 9641, 9650, 9651, 9654, 9655, 9660, 9661, 9664, 9665, 9670, 9672, 9675, 9675, 9678, 9681, 9698, 9701, 9711, 9711, 9733, 9734, 9737, 9737, 9742, 9743, 9756, 9756, 9758, 9758, 9792, 9792, 9794, 9794, 9824, 9825, 9827, 9829, 9831, 9834, 9836, 9837, 9839, 9839, 9886, 9887, 9919, 9919, 9926, 9933, 9935, 9939, 9941, 9953, 9955, 9955, 9960, 9961, 9963, 9969, 9972, 9972, 9974, 9977, 9979, 9980, 9982, 9983, 10045, 10045, 10102, 10111, 11094, 11097, 12872, 12879, 57344, 63743, 65024, 65039, 65533, 65533, 127232, 127242, 127248, 127277, 127280, 127337, 127344, 127373, 127375, 127376, 127387, 127404, 917760, 917999, 983040, 1048573, 1048576, 1114109];
   fullwidthRanges = [12288, 12288, 65281, 65376, 65504, 65510];
-  halfwidthRanges = [8361, 8361, 65377, 65470, 65474, 65479, 65482, 65487, 65490, 65495, 65498, 65500, 65512, 65518];
-  narrowRanges = [32, 126, 162, 163, 165, 166, 172, 172, 175, 175, 10214, 10221, 10629, 10630];
   wideRanges = [4352, 4447, 8986, 8987, 9001, 9002, 9193, 9196, 9200, 9200, 9203, 9203, 9725, 9726, 9748, 9749, 9776, 9783, 9800, 9811, 9855, 9855, 9866, 9871, 9875, 9875, 9889, 9889, 9898, 9899, 9917, 9918, 9924, 9925, 9934, 9934, 9940, 9940, 9962, 9962, 9970, 9971, 9973, 9973, 9978, 9978, 9981, 9981, 9989, 9989, 9994, 9995, 10024, 10024, 10060, 10060, 10062, 10062, 10067, 10069, 10071, 10071, 10133, 10135, 10160, 10160, 10175, 10175, 11035, 11036, 11088, 11088, 11093, 11093, 11904, 11929, 11931, 12019, 12032, 12245, 12272, 12287, 12289, 12350, 12353, 12438, 12441, 12543, 12549, 12591, 12593, 12686, 12688, 12773, 12783, 12830, 12832, 12871, 12880, 42124, 42128, 42182, 43360, 43388, 44032, 55203, 63744, 64255, 65040, 65049, 65072, 65106, 65108, 65126, 65128, 65131, 94176, 94180, 94192, 94198, 94208, 101589, 101631, 101662, 101760, 101874, 110576, 110579, 110581, 110587, 110589, 110590, 110592, 110882, 110898, 110898, 110928, 110930, 110933, 110933, 110948, 110951, 110960, 111355, 119552, 119638, 119648, 119670, 126980, 126980, 127183, 127183, 127374, 127374, 127377, 127386, 127488, 127490, 127504, 127547, 127552, 127560, 127568, 127569, 127584, 127589, 127744, 127776, 127789, 127797, 127799, 127868, 127870, 127891, 127904, 127946, 127951, 127955, 127968, 127984, 127988, 127988, 127992, 128062, 128064, 128064, 128066, 128252, 128255, 128317, 128331, 128334, 128336, 128359, 128378, 128378, 128405, 128406, 128420, 128420, 128507, 128591, 128640, 128709, 128716, 128716, 128720, 128722, 128725, 128728, 128732, 128735, 128747, 128748, 128756, 128764, 128992, 129003, 129008, 129008, 129292, 129338, 129340, 129349, 129351, 129535, 129648, 129660, 129664, 129674, 129678, 129734, 129736, 129736, 129741, 129756, 129759, 129770, 129775, 129784, 131072, 196605, 196608, 262141];
 });
 
-// ../../node_modules/.bun/get-east-asian-width@1.5.0/node_modules/get-east-asian-width/utilities.js
+// ../../node_modules/.bun/get-east-asian-width@1.6.0/node_modules/get-east-asian-width/utilities.js
 var isInRange = (ranges, codePoint) => {
   let low = 0;
   let high = Math.floor(ranges.length / 2) - 1;
@@ -2782,7 +2780,7 @@ var isInRange = (ranges, codePoint) => {
   return false;
 };
 
-// ../../node_modules/.bun/get-east-asian-width@1.5.0/node_modules/get-east-asian-width/lookup.js
+// ../../node_modules/.bun/get-east-asian-width@1.6.0/node_modules/get-east-asian-width/lookup.js
 function findWideFastPathRange(ranges) {
   let fastPathStart = ranges[0];
   let fastPathEnd = ranges[1];
@@ -2799,13 +2797,13 @@ function findWideFastPathRange(ranges) {
   }
   return [fastPathStart, fastPathEnd];
 }
-var minimumAmbiguousCodePoint, maximumAmbiguousCodePoint, minimumFullWidthCodePoint, maximumFullWidthCodePoint, minimumHalfWidthCodePoint, maximumHalfWidthCodePoint, minimumNarrowCodePoint, maximumNarrowCodePoint, minimumWideCodePoint, maximumWideCodePoint, commonCjkCodePoint = 19968, wideFastPathStart, wideFastPathEnd, isAmbiguous = (codePoint) => {
-  if (codePoint < minimumAmbiguousCodePoint || codePoint > maximumAmbiguousCodePoint) {
+var commonCjkCodePoint = 19968, wideFastPathStart, wideFastPathEnd, isAmbiguous = (codePoint) => {
+  if (codePoint < ambiguousMinimalCodePoint || codePoint > ambiguousMaximumCodePoint) {
     return false;
   }
   return isInRange(ambiguousRanges, codePoint);
 }, isFullWidth = (codePoint) => {
-  if (codePoint < minimumFullWidthCodePoint || codePoint > maximumFullWidthCodePoint) {
+  if (codePoint < fullwidthMinimalCodePoint || codePoint > fullwidthMaximumCodePoint) {
     return false;
   }
   return isInRange(fullwidthRanges, codePoint);
@@ -2813,27 +2811,17 @@ var minimumAmbiguousCodePoint, maximumAmbiguousCodePoint, minimumFullWidthCodePo
   if (codePoint >= wideFastPathStart && codePoint <= wideFastPathEnd) {
     return true;
   }
-  if (codePoint < minimumWideCodePoint || codePoint > maximumWideCodePoint) {
+  if (codePoint < wideMinimalCodePoint || codePoint > wideMaximumCodePoint) {
     return false;
   }
   return isInRange(wideRanges, codePoint);
 };
 var init_lookup = __esm(() => {
   init_lookup_data();
-  minimumAmbiguousCodePoint = ambiguousRanges[0];
-  maximumAmbiguousCodePoint = ambiguousRanges.at(-1);
-  minimumFullWidthCodePoint = fullwidthRanges[0];
-  maximumFullWidthCodePoint = fullwidthRanges.at(-1);
-  minimumHalfWidthCodePoint = halfwidthRanges[0];
-  maximumHalfWidthCodePoint = halfwidthRanges.at(-1);
-  minimumNarrowCodePoint = narrowRanges[0];
-  maximumNarrowCodePoint = narrowRanges.at(-1);
-  minimumWideCodePoint = wideRanges[0];
-  maximumWideCodePoint = wideRanges.at(-1);
-  [wideFastPathStart, wideFastPathEnd] = findWideFastPathRange(wideRanges);
+  [wideFastPathStart, wideFastPathEnd] = /* @__PURE__ */ findWideFastPathRange(wideRanges);
 });
 
-// ../../node_modules/.bun/get-east-asian-width@1.5.0/node_modules/get-east-asian-width/index.js
+// ../../node_modules/.bun/get-east-asian-width@1.6.0/node_modules/get-east-asian-width/index.js
 function validate(codePoint) {
   if (!Number.isSafeInteger(codePoint)) {
     throw new TypeError(`Expected a code point, got \`${typeof codePoint}\`.`);
@@ -3687,7 +3675,7 @@ var require_balanced_match = __commonJS((exports, module) => {
   }
 });
 
-// ../../node_modules/.bun/brace-expansion@2.0.3/node_modules/brace-expansion/index.js
+// ../../node_modules/.bun/brace-expansion@2.1.0/node_modules/brace-expansion/index.js
 var require_brace_expansion = __commonJS((exports, module) => {
   var balanced = require_balanced_match();
   module.exports = expandTop;
@@ -3725,13 +3713,15 @@ var require_brace_expansion = __commonJS((exports, module) => {
     parts.push.apply(parts, p);
     return parts;
   }
-  function expandTop(str) {
+  function expandTop(str, options) {
     if (!str)
       return [];
+    options = options || {};
+    var max = options.max == null ? Infinity : options.max;
     if (str.substr(0, 2) === "{}") {
       str = "\\{\\}" + str.substr(2);
     }
-    return expand(escapeBraces(str), true).map(unescapeBraces);
+    return expand(escapeBraces(str), max, true).map(unescapeBraces);
   }
   function embrace(str) {
     return "{" + str + "}";
@@ -3745,15 +3735,15 @@ var require_brace_expansion = __commonJS((exports, module) => {
   function gte(i, y) {
     return i >= y;
   }
-  function expand(str, isTop) {
+  function expand(str, max, isTop) {
     var expansions = [];
     var m = balanced("{", "}", str);
     if (!m)
       return [str];
     var pre = m.pre;
-    var post = m.post.length ? expand(m.post, false) : [""];
+    var post = m.post.length ? expand(m.post, max, false) : [""];
     if (/\$$/.test(m.pre)) {
-      for (var k = 0;k < post.length; k++) {
+      for (var k = 0;k < post.length && k < max; k++) {
         var expansion = pre + "{" + m.body + "}" + post[k];
         expansions.push(expansion);
       }
@@ -3765,7 +3755,7 @@ var require_brace_expansion = __commonJS((exports, module) => {
       if (!isSequence && !isOptions) {
         if (m.post.match(/,(?!,).*\}/)) {
           str = m.pre + "{" + m.body + escClose + m.post;
-          return expand(str);
+          return expand(str, max, true);
         }
         return [str];
       }
@@ -3775,7 +3765,7 @@ var require_brace_expansion = __commonJS((exports, module) => {
       } else {
         n = parseCommaParts(m.body);
         if (n.length === 1) {
-          n = expand(n[0], false).map(embrace);
+          n = expand(n[0], max, false).map(embrace);
           if (n.length === 1) {
             return post.map(function(p) {
               return m.pre + n[0] + p;
@@ -3821,11 +3811,11 @@ var require_brace_expansion = __commonJS((exports, module) => {
       } else {
         N = [];
         for (var j = 0;j < n.length; j++) {
-          N.push.apply(N, expand(n[j], false));
+          N.push.apply(N, expand(n[j], max, false));
         }
       }
       for (var j = 0;j < N.length; j++) {
-        for (var k = 0;k < post.length; k++) {
+        for (var k = 0;k < post.length && expansions.length < max; k++) {
           var expansion = pre + N[j] + post[k];
           if (!isTop || isSequence || expansion)
             expansions.push(expansion);
@@ -10327,7 +10317,7 @@ var require_timespan = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/internal/constants.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/internal/constants.js
 var require_constants4 = __commonJS((exports, module) => {
   var SEMVER_SPEC_VERSION = "2.0.0";
   var MAX_LENGTH = 256;
@@ -10355,13 +10345,13 @@ var require_constants4 = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/internal/debug.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/internal/debug.js
 var require_debug = __commonJS((exports, module) => {
   var debug = typeof process === "object" && process.env && process.env.NODE_DEBUG && /\bsemver\b/i.test(process.env.NODE_DEBUG) ? (...args) => console.error("SEMVER", ...args) : () => {};
   module.exports = debug;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/internal/re.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/internal/re.js
 var require_re = __commonJS((exports, module) => {
   var {
     MAX_SAFE_COMPONENT_LENGTH,
@@ -10446,7 +10436,7 @@ var require_re = __commonJS((exports, module) => {
   createToken("GTE0PRE", "^\\s*>=\\s*0\\.0\\.0-0\\s*$");
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/internal/parse-options.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/internal/parse-options.js
 var require_parse_options = __commonJS((exports, module) => {
   var looseOption = Object.freeze({ loose: true });
   var emptyOpts = Object.freeze({});
@@ -10462,7 +10452,7 @@ var require_parse_options = __commonJS((exports, module) => {
   module.exports = parseOptions;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/internal/identifiers.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/internal/identifiers.js
 var require_identifiers = __commonJS((exports, module) => {
   var numeric = /^[0-9]+$/;
   var compareIdentifiers = (a2, b2) => {
@@ -10484,7 +10474,7 @@ var require_identifiers = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/classes/semver.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/classes/semver.js
 var require_semver = __commonJS((exports, module) => {
   var debug = require_debug();
   var { MAX_LENGTH, MAX_SAFE_INTEGER } = require_constants4();
@@ -10753,7 +10743,7 @@ var require_semver = __commonJS((exports, module) => {
   module.exports = SemVer;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/parse.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/parse.js
 var require_parse3 = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var parse = (version, options, throwErrors = false) => {
@@ -10772,7 +10762,7 @@ var require_parse3 = __commonJS((exports, module) => {
   module.exports = parse;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/valid.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/valid.js
 var require_valid = __commonJS((exports, module) => {
   var parse = require_parse3();
   var valid = (version, options) => {
@@ -10782,7 +10772,7 @@ var require_valid = __commonJS((exports, module) => {
   module.exports = valid;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/clean.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/clean.js
 var require_clean = __commonJS((exports, module) => {
   var parse = require_parse3();
   var clean = (version, options) => {
@@ -10792,7 +10782,7 @@ var require_clean = __commonJS((exports, module) => {
   module.exports = clean;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/inc.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/inc.js
 var require_inc = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var inc = (version, release, options, identifier, identifierBase) => {
@@ -10810,7 +10800,7 @@ var require_inc = __commonJS((exports, module) => {
   module.exports = inc;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/diff.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/diff.js
 var require_diff = __commonJS((exports, module) => {
   var parse = require_parse3();
   var diff = (version1, version2) => {
@@ -10851,28 +10841,28 @@ var require_diff = __commonJS((exports, module) => {
   module.exports = diff;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/major.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/major.js
 var require_major = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var major = (a2, loose) => new SemVer(a2, loose).major;
   module.exports = major;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/minor.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/minor.js
 var require_minor = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var minor = (a2, loose) => new SemVer(a2, loose).minor;
   module.exports = minor;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/patch.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/patch.js
 var require_patch = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var patch = (a2, loose) => new SemVer(a2, loose).patch;
   module.exports = patch;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/prerelease.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/prerelease.js
 var require_prerelease = __commonJS((exports, module) => {
   var parse = require_parse3();
   var prerelease = (version, options) => {
@@ -10882,28 +10872,28 @@ var require_prerelease = __commonJS((exports, module) => {
   module.exports = prerelease;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/compare.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/compare.js
 var require_compare = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var compare = (a2, b2, loose) => new SemVer(a2, loose).compare(new SemVer(b2, loose));
   module.exports = compare;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/rcompare.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/rcompare.js
 var require_rcompare = __commonJS((exports, module) => {
   var compare = require_compare();
   var rcompare = (a2, b2, loose) => compare(b2, a2, loose);
   module.exports = rcompare;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/compare-loose.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/compare-loose.js
 var require_compare_loose = __commonJS((exports, module) => {
   var compare = require_compare();
   var compareLoose = (a2, b2) => compare(a2, b2, true);
   module.exports = compareLoose;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/compare-build.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/compare-build.js
 var require_compare_build = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var compareBuild = (a2, b2, loose) => {
@@ -10914,63 +10904,63 @@ var require_compare_build = __commonJS((exports, module) => {
   module.exports = compareBuild;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/sort.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/sort.js
 var require_sort = __commonJS((exports, module) => {
   var compareBuild = require_compare_build();
   var sort = (list, loose) => list.sort((a2, b2) => compareBuild(a2, b2, loose));
   module.exports = sort;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/rsort.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/rsort.js
 var require_rsort = __commonJS((exports, module) => {
   var compareBuild = require_compare_build();
   var rsort = (list, loose) => list.sort((a2, b2) => compareBuild(b2, a2, loose));
   module.exports = rsort;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/gt.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/gt.js
 var require_gt = __commonJS((exports, module) => {
   var compare = require_compare();
   var gt = (a2, b2, loose) => compare(a2, b2, loose) > 0;
   module.exports = gt;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/lt.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/lt.js
 var require_lt = __commonJS((exports, module) => {
   var compare = require_compare();
   var lt = (a2, b2, loose) => compare(a2, b2, loose) < 0;
   module.exports = lt;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/eq.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/eq.js
 var require_eq = __commonJS((exports, module) => {
   var compare = require_compare();
   var eq = (a2, b2, loose) => compare(a2, b2, loose) === 0;
   module.exports = eq;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/neq.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/neq.js
 var require_neq = __commonJS((exports, module) => {
   var compare = require_compare();
   var neq = (a2, b2, loose) => compare(a2, b2, loose) !== 0;
   module.exports = neq;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/gte.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/gte.js
 var require_gte = __commonJS((exports, module) => {
   var compare = require_compare();
   var gte = (a2, b2, loose) => compare(a2, b2, loose) >= 0;
   module.exports = gte;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/lte.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/lte.js
 var require_lte = __commonJS((exports, module) => {
   var compare = require_compare();
   var lte = (a2, b2, loose) => compare(a2, b2, loose) <= 0;
   module.exports = lte;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/cmp.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/cmp.js
 var require_cmp = __commonJS((exports, module) => {
   var eq = require_eq();
   var neq = require_neq();
@@ -11017,7 +11007,7 @@ var require_cmp = __commonJS((exports, module) => {
   module.exports = cmp;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/coerce.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/coerce.js
 var require_coerce = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var parse = require_parse3();
@@ -11060,7 +11050,45 @@ var require_coerce = __commonJS((exports, module) => {
   module.exports = coerce;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/internal/lrucache.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/truncate.js
+var require_truncate = __commonJS((exports, module) => {
+  var parse = require_parse3();
+  var constants = require_constants4();
+  var SemVer = require_semver();
+  var truncate = (version, truncation, options) => {
+    if (!constants.RELEASE_TYPES.includes(truncation)) {
+      return null;
+    }
+    const clonedVersion = cloneInputVersion(version, options);
+    return clonedVersion && doTruncation(clonedVersion, truncation);
+  };
+  var cloneInputVersion = (version, options) => {
+    const versionStringToParse = version instanceof SemVer ? version.version : version;
+    return parse(versionStringToParse, options);
+  };
+  var doTruncation = (version, truncation) => {
+    if (isPrerelease(truncation)) {
+      return version.version;
+    }
+    version.prerelease = [];
+    switch (truncation) {
+      case "major":
+        version.minor = 0;
+        version.patch = 0;
+        break;
+      case "minor":
+        version.patch = 0;
+        break;
+    }
+    return version.format();
+  };
+  var isPrerelease = (type) => {
+    return type.startsWith("pre");
+  };
+  module.exports = truncate;
+});
+
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/internal/lrucache.js
 var require_lrucache = __commonJS((exports, module) => {
   class LRUCache2 {
     constructor() {
@@ -11095,7 +11123,7 @@ var require_lrucache = __commonJS((exports, module) => {
   module.exports = LRUCache2;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/classes/range.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/classes/range.js
 var require_range = __commonJS((exports, module) => {
   var SPACE_CHARACTERS = /\s+/g;
 
@@ -11469,7 +11497,7 @@ var require_range = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/classes/comparator.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/classes/comparator.js
 var require_comparator = __commonJS((exports, module) => {
   var ANY = Symbol("SemVer ANY");
 
@@ -11580,7 +11608,7 @@ var require_comparator = __commonJS((exports, module) => {
   var Range = require_range();
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/satisfies.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/satisfies.js
 var require_satisfies = __commonJS((exports, module) => {
   var Range = require_range();
   var satisfies = (version, range, options) => {
@@ -11594,14 +11622,14 @@ var require_satisfies = __commonJS((exports, module) => {
   module.exports = satisfies;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/ranges/to-comparators.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/ranges/to-comparators.js
 var require_to_comparators = __commonJS((exports, module) => {
   var Range = require_range();
   var toComparators = (range, options) => new Range(range, options).set.map((comp) => comp.map((c2) => c2.value).join(" ").trim().split(" "));
   module.exports = toComparators;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/ranges/max-satisfying.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/ranges/max-satisfying.js
 var require_max_satisfying = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var Range = require_range();
@@ -11627,7 +11655,7 @@ var require_max_satisfying = __commonJS((exports, module) => {
   module.exports = maxSatisfying;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/ranges/min-satisfying.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/ranges/min-satisfying.js
 var require_min_satisfying = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var Range = require_range();
@@ -11653,7 +11681,7 @@ var require_min_satisfying = __commonJS((exports, module) => {
   module.exports = minSatisfying;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/ranges/min-version.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/ranges/min-version.js
 var require_min_version = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var Range = require_range();
@@ -11707,7 +11735,7 @@ var require_min_version = __commonJS((exports, module) => {
   module.exports = minVersion;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/ranges/valid.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/ranges/valid.js
 var require_valid2 = __commonJS((exports, module) => {
   var Range = require_range();
   var validRange = (range, options) => {
@@ -11720,7 +11748,7 @@ var require_valid2 = __commonJS((exports, module) => {
   module.exports = validRange;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/ranges/outside.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/ranges/outside.js
 var require_outside = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var Comparator = require_comparator();
@@ -11786,21 +11814,21 @@ var require_outside = __commonJS((exports, module) => {
   module.exports = outside;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/ranges/gtr.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/ranges/gtr.js
 var require_gtr = __commonJS((exports, module) => {
   var outside = require_outside();
   var gtr = (version, range, options) => outside(version, range, ">", options);
   module.exports = gtr;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/ranges/ltr.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/ranges/ltr.js
 var require_ltr = __commonJS((exports, module) => {
   var outside = require_outside();
   var ltr = (version, range, options) => outside(version, range, "<", options);
   module.exports = ltr;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/ranges/intersects.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/ranges/intersects.js
 var require_intersects = __commonJS((exports, module) => {
   var Range = require_range();
   var intersects = (r1, r2, options) => {
@@ -11811,7 +11839,7 @@ var require_intersects = __commonJS((exports, module) => {
   module.exports = intersects;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/ranges/simplify.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/ranges/simplify.js
 var require_simplify = __commonJS((exports, module) => {
   var satisfies = require_satisfies();
   var compare = require_compare();
@@ -11858,7 +11886,7 @@ var require_simplify = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/ranges/subset.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/ranges/subset.js
 var require_subset = __commonJS((exports, module) => {
   var Range = require_range();
   var Comparator = require_comparator();
@@ -12018,7 +12046,7 @@ var require_subset = __commonJS((exports, module) => {
   module.exports = subset;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/index.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/index.js
 var require_semver2 = __commonJS((exports, module) => {
   var internalRe = require_re();
   var constants = require_constants4();
@@ -12047,6 +12075,7 @@ var require_semver2 = __commonJS((exports, module) => {
   var lte = require_lte();
   var cmp = require_cmp();
   var coerce = require_coerce();
+  var truncate = require_truncate();
   var Comparator = require_comparator();
   var Range = require_range();
   var satisfies = require_satisfies();
@@ -12085,6 +12114,7 @@ var require_semver2 = __commonJS((exports, module) => {
     lte,
     cmp,
     coerce,
+    truncate,
     Comparator,
     Range,
     satisfies,
@@ -25734,6 +25764,394 @@ var init_dist2 = __esm(() => {
   };
 });
 
+// ../observability/dist/init-server.js
+var exports_init_server = {};
+__export(exports_init_server, {
+  wrapDbAdapter: () => wrapDbAdapter,
+  initServerTelemetry: () => initServerTelemetry
+});
+import { OTLPLogExporter } from "@opentelemetry/exporter-logs-otlp-http";
+import { OTLPMetricExporter } from "@opentelemetry/exporter-metrics-otlp-http";
+import { OTLPTraceExporter } from "@opentelemetry/exporter-trace-otlp-http";
+import { Resource } from "@opentelemetry/resources";
+import {
+  BatchLogRecordProcessor,
+  LoggerProvider
+} from "@opentelemetry/sdk-logs";
+import {
+  MeterProvider,
+  PeriodicExportingMetricReader
+} from "@opentelemetry/sdk-metrics";
+import {
+  BatchSpanProcessor,
+  ParentBasedSampler,
+  TraceIdRatioBasedSampler
+} from "@opentelemetry/sdk-trace-base";
+import { NodeTracerProvider } from "@opentelemetry/sdk-trace-node";
+import {
+  ATTR_DEPLOYMENT_ENVIRONMENT_NAME,
+  ATTR_SERVICE_NAME,
+  ATTR_SERVICE_VERSION
+} from "@opentelemetry/semantic-conventions/incubating";
+import {
+  context,
+  propagation,
+  SpanStatusCode,
+  trace
+} from "@opentelemetry/api";
+import {
+  logs,
+  SeverityNumber
+} from "@opentelemetry/api-logs";
+function sanitizeAttrs(input, opts = {}) {
+  if (!input)
+    return {};
+  const redactPattern = opts.redactKeyPattern ?? DEFAULT_REDACT_KEY_PATTERN;
+  const maxStr = opts.maxStringLen ?? DEFAULT_MAX_STRING_LEN;
+  const maxJson = opts.maxJsonLen ?? DEFAULT_MAX_JSON_LEN;
+  const out = {};
+  for (const [key, raw] of Object.entries(input)) {
+    if (redactPattern.test(key))
+      continue;
+    const value = sanitizeValue(raw, redactPattern, maxStr, maxJson);
+    if (value !== undefined)
+      out[key] = value;
+  }
+  return out;
+}
+function sanitizeValue(raw, redactPattern, maxStr, maxJson) {
+  if (raw === null || raw === undefined)
+    return;
+  if (typeof raw === "boolean" || typeof raw === "number")
+    return raw;
+  if (typeof raw === "string") {
+    return raw.length > maxStr ? `${raw.slice(0, maxStr)}\u2026(truncated:${raw.length})` : raw;
+  }
+  try {
+    const filtered = filterRedacted(raw, redactPattern);
+    const json = JSON.stringify(filtered);
+    if (json === undefined)
+      return;
+    return json.length > maxJson ? `${json.slice(0, maxJson)}\u2026(truncated:${json.length})` : json;
+  } catch {
+    return "[unserializable]";
+  }
+}
+function filterRedacted(node, pattern, seen = new WeakSet) {
+  if (node === null || typeof node !== "object")
+    return node;
+  if (seen.has(node))
+    return "[circular]";
+  seen.add(node);
+  if (Array.isArray(node)) {
+    return node.map((v3) => filterRedacted(v3, pattern, seen));
+  }
+  const out = {};
+  for (const [k4, v3] of Object.entries(node)) {
+    if (pattern.test(k4))
+      continue;
+    out[k4] = filterRedacted(v3, pattern, seen);
+  }
+  return out;
+}
+
+class ArcTelemetry {
+  config;
+  tracer = null;
+  logger = null;
+  meter = null;
+  histograms = new Map;
+  counters = new Map;
+  constructor(config) {
+    const mode = config.mode ?? "development";
+    const enabled = config.enabled ?? mode !== "disabled";
+    const sampleRate = config.sampleRate ?? (config.environment === "server" ? 1 : 0.1);
+    this.config = {
+      ...config,
+      enabled,
+      sampleRate,
+      mode,
+      debug: config.debug ?? false
+    };
+  }
+  attach(opts) {
+    this.tracer = opts.tracer;
+    this.logger = opts.logger ?? null;
+    this.meter = opts.meter ?? null;
+  }
+  get active() {
+    return this.config.enabled && this.tracer !== null;
+  }
+  shouldIncludePayloads() {
+    if (this.config.includePayloads !== undefined)
+      return this.config.includePayloads;
+    return this.config.mode === "development";
+  }
+  async startSpan(name, fn, options = {}) {
+    if (!this.active || !this.tracer) {
+      return fn(trace.getActiveSpan() ?? noopSpan());
+    }
+    const attributes = this.toAttributes(options.attributes, options.unsafeAttrs);
+    return this.tracer.startActiveSpan(name, { kind: options.kind, attributes }, async (span) => {
+      try {
+        const result = await fn(span);
+        span.setStatus({ code: SpanStatusCode.OK });
+        return result;
+      } catch (error) {
+        this.recordError(span, error);
+        throw error;
+      } finally {
+        span.end();
+      }
+    });
+  }
+  createSpan(name, options = {}) {
+    if (!this.active || !this.tracer)
+      return noopSpan();
+    const attributes = this.toAttributes(options.attributes, options.unsafeAttrs);
+    return this.tracer.startSpan(name, { kind: options.kind, attributes });
+  }
+  getCurrentSpan() {
+    return trace.getActiveSpan();
+  }
+  withSpan(parent, fn) {
+    return context.with(trace.setSpan(context.active(), parent), fn);
+  }
+  runWithExtractedContext(carrier, fn) {
+    if (!this.active)
+      return fn();
+    const flat = {};
+    if (typeof Headers !== "undefined" && carrier instanceof Headers) {
+      carrier.forEach((value, key) => {
+        flat[key.toLowerCase()] = value;
+      });
+    } else if (carrier) {
+      for (const [k4, v3] of Object.entries(carrier)) {
+        if (typeof v3 === "string")
+          flat[k4.toLowerCase()] = v3;
+      }
+    }
+    const parent = propagation.extract(context.active(), flat);
+    return context.with(parent, fn);
+  }
+  recordError(span, error) {
+    const err3 = error instanceof Error ? error : new Error(String(error ?? "unknown error"));
+    try {
+      span.setStatus({ code: SpanStatusCode.ERROR, message: err3.message });
+      span.recordException(err3);
+    } catch {}
+  }
+  addAttributes(attrs, unsafeAttrs = false) {
+    const span = this.getCurrentSpan();
+    if (!span)
+      return;
+    span.setAttributes(this.toAttributes(attrs, unsafeAttrs));
+  }
+  log(level, body, attrs = {}, unsafeAttrs = false) {
+    if (!this.active)
+      return;
+    const logger = this.logger ?? logs.getLogger(this.config.serviceName);
+    const record = {
+      severityNumber: severityFor(level),
+      severityText: level.toUpperCase(),
+      body,
+      attributes: this.toAttributes(attrs, unsafeAttrs)
+    };
+    try {
+      logger.emit(record);
+    } catch {}
+  }
+  incrementCounter(name, value = 1, attrs = {}) {
+    if (!this.active || !this.meter)
+      return;
+    let counter = this.counters.get(name);
+    if (!counter) {
+      counter = this.meter.createCounter(name);
+      this.counters.set(name, counter);
+    }
+    try {
+      counter.add(value, attrs);
+    } catch {}
+  }
+  recordHistogram(name, value, attrs = {}) {
+    if (!this.active || !this.meter)
+      return;
+    let histogram = this.histograms.get(name);
+    if (!histogram) {
+      histogram = this.meter.createHistogram(name, { unit: "ms" });
+      this.histograms.set(name, histogram);
+    }
+    try {
+      histogram.record(value, attrs);
+    } catch {}
+  }
+  measureSince(name, start, attrs = {}) {
+    this.recordHistogram(name, Date.now() - start, attrs);
+  }
+  toAttributes(raw, unsafe) {
+    if (!raw)
+      return {};
+    if (unsafe)
+      return raw;
+    return sanitizeAttrs(raw, this.config.sanitize);
+  }
+}
+function severityFor(level) {
+  switch (level) {
+    case "debug":
+      return SeverityNumber.DEBUG;
+    case "info":
+      return SeverityNumber.INFO;
+    case "warn":
+      return SeverityNumber.WARN;
+    case "error":
+      return SeverityNumber.ERROR;
+    default:
+      return SeverityNumber.INFO;
+  }
+}
+function noopSpan() {
+  return trace.getActiveSpan() ?? trace.wrapSpanContext({
+    traceId: "00000000000000000000000000000000",
+    spanId: "0000000000000000",
+    traceFlags: 0
+  });
+}
+function wrapDbAdapter(adapter, telemetry, dbSystem) {
+  if (!telemetry || !telemetry.active)
+    return adapter;
+  const wrapRead = (tx) => ({
+    find: async (store, options) => telemetry.startSpan(`db.find ${store}`, async (span) => {
+      const start = Date.now();
+      try {
+        const rows = await tx.find(store, options);
+        span.setAttribute("db.response.row_count", rows.length);
+        return rows;
+      } finally {
+        telemetry.measureSince("arc.db.find_ms", start, {
+          "db.system": dbSystem,
+          "db.collection.name": store
+        });
+      }
+    }, {
+      kind: 3,
+      attributes: {
+        "db.system": dbSystem,
+        "db.operation.name": "find",
+        "db.collection.name": store
+      }
+    })
+  });
+  const wrapReadWrite = (tx) => ({
+    ...wrapRead(tx),
+    set: async (store, data) => telemetry.startSpan(`db.set ${store}`, () => tx.set(store, data), {
+      kind: 3,
+      attributes: {
+        "db.system": dbSystem,
+        "db.operation.name": "set",
+        "db.collection.name": store
+      }
+    }),
+    remove: async (store, id3) => telemetry.startSpan(`db.remove ${store}`, () => tx.remove(store, id3), {
+      kind: 3,
+      attributes: {
+        "db.system": dbSystem,
+        "db.operation.name": "remove",
+        "db.collection.name": store
+      }
+    }),
+    commit: async () => telemetry.startSpan("db.commit", () => tx.commit(), {
+      kind: 3,
+      attributes: {
+        "db.system": dbSystem,
+        "db.operation.name": "commit"
+      }
+    })
+  });
+  return new Proxy(adapter, {
+    get(target, prop) {
+      const orig = target[prop];
+      if (prop === "readTransaction") {
+        return (...args) => wrapRead(orig.apply(target, args));
+      }
+      if (prop === "readWriteTransaction") {
+        return (...args) => wrapReadWrite(orig.apply(target, args));
+      }
+      return typeof orig === "function" ? orig.bind(target) : orig;
+    }
+  });
+}
+function initServerTelemetry(config) {
+  const telemetry = new ArcTelemetry({ ...config, environment: "server" });
+  if (!telemetry.config.enabled) {
+    return { telemetry, shutdown: async () => {} };
+  }
+  const endpoint = config.endpoint ?? process.env.OTEL_EXPORTER_OTLP_ENDPOINT ?? "http://localhost:4318";
+  const resource = new Resource({
+    [ATTR_SERVICE_NAME]: config.serviceName,
+    [ATTR_SERVICE_VERSION]: process.env.ARC_VERSION ?? "unknown",
+    [ATTR_DEPLOYMENT_ENVIRONMENT_NAME]: "development"
+  });
+  const tracerProvider = new NodeTracerProvider({
+    resource,
+    sampler: new ParentBasedSampler({
+      root: new TraceIdRatioBasedSampler(telemetry.config.sampleRate)
+    }),
+    spanProcessors: [
+      new BatchSpanProcessor(new OTLPTraceExporter({ url: `${endpoint}/v1/traces` }), {
+        maxQueueSize: 1000,
+        maxExportBatchSize: 50,
+        scheduledDelayMillis: 5000
+      })
+    ]
+  });
+  tracerProvider.register();
+  const loggerProvider = new LoggerProvider({ resource });
+  loggerProvider.addLogRecordProcessor(new BatchLogRecordProcessor(new OTLPLogExporter({ url: `${endpoint}/v1/logs` }), {
+    maxQueueSize: 1000,
+    maxExportBatchSize: 50,
+    scheduledDelayMillis: 5000
+  }));
+  const meterProvider = new MeterProvider({
+    resource,
+    readers: [
+      new PeriodicExportingMetricReader({
+        exporter: new OTLPMetricExporter({ url: `${endpoint}/v1/metrics` }),
+        exportIntervalMillis: 15000
+      })
+    ]
+  });
+  telemetry.attach({
+    tracer: tracerProvider.getTracer(config.serviceName),
+    logger: loggerProvider.getLogger(config.serviceName),
+    meter: meterProvider.getMeter(config.serviceName)
+  });
+  if (telemetry.config.debug) {
+    console.log("[arc-otel] server init", {
+      serviceName: config.serviceName,
+      endpoint,
+      sampleRate: telemetry.config.sampleRate,
+      mode: telemetry.config.mode
+    });
+  }
+  const shutdown = async () => {
+    try {
+      await Promise.all([
+        tracerProvider.shutdown(),
+        loggerProvider.shutdown(),
+        meterProvider.shutdown()
+      ]);
+    } catch (err3) {
+      console.error("[arc-otel] shutdown error", err3);
+    }
+  };
+  return { telemetry, shutdown };
+}
+var DEFAULT_REDACT_KEY_PATTERN, DEFAULT_MAX_STRING_LEN = 2048, DEFAULT_MAX_JSON_LEN = 4096;
+var init_init_server = __esm(() => {
+  DEFAULT_REDACT_KEY_PATTERN = /(password|passwd|token|secret|authorization|jwt|api[_-]?key|cookie|email|credit[_-]?card|ssn)/i;
+});
+
 // ../../node_modules/.bun/commander@11.1.0/node_modules/commander/esm.mjs
 var import__ = __toESM(require_commander(), 1);
 var {
@@ -33964,7 +34382,7 @@ ${colors3.yellow}Type declaration errors:${colors3.reset}`);
 
 // src/platform/shared.ts
 import { copyFileSync, existsSync as existsSync10, mkdirSync as mkdirSync9, readdirSync as readdirSync5, readFileSync as readFileSync10, writeFileSync as writeFileSync9 } from "fs";
-import { dirname as dirname7, join as join11 } from "path";
+import { dirname as dirname8, join as join11 } from "path";
 
 // src/builder/module-builder.ts
 import { execSync } from "child_process";
@@ -34794,13 +35212,27 @@ function resolveChunk(moduleName, access) {
 // src/builder/dependency-collector.ts
 import { createHash } from "crypto";
 import { existsSync as existsSync9, mkdirSync as mkdirSync8, readFileSync as readFileSync9, writeFileSync as writeFileSync8 } from "fs";
-import { basename as basename4, join as join10 } from "path";
+import { basename as basename4, dirname as dirname7, join as join10 } from "path";
+import { fileURLToPath as fileURLToPath6 } from "url";
 function collectFrameworkDeps(arcDir, rootDir, packages, sharedDeps = []) {
   mkdirSync8(arcDir, { recursive: true });
   const versions = resolveFrameworkVersions(rootDir, packages);
   for (const { name, version } of sharedDeps) {
     versions[name] = version;
   }
+  try {
+    const cliDir = dirname7(fileURLToPath6(import.meta.url));
+    const arcOtelPkgPath = Bun.resolveSync("@arcote.tech/arc-otel/package.json", cliDir);
+    const arcOtelPkg = JSON.parse(readFileSync9(arcOtelPkgPath, "utf-8"));
+    for (const [name, spec] of Object.entries(arcOtelPkg.dependencies ?? {})) {
+      if (name.startsWith("@opentelemetry/")) {
+        versions[name] = spec;
+      }
+    }
+    versions["@arcote.tech/arc-otel"] = `^${arcOtelPkg.version}`;
+  } catch (e) {
+    console.warn(`[arc-otel] could not resolve @arcote.tech/arc-otel \u2014 image will run without telemetry deps: ${e.message}`);
+  }
   const manifest = {
     name: "arc-platform-framework",
     private: true,
@@ -34877,7 +35309,7 @@ function resolveWorkspace() {
     err("No package.json found");
     process.exit(1);
   }
-  const rootDir = dirname7(packageJsonPath);
+  const rootDir = dirname8(packageJsonPath);
   const rootPkg = JSON.parse(readFileSync10(packageJsonPath, "utf-8"));
   const appName = rootPkg.name ?? "Arc App";
   const arcDir = join11(rootDir, ".arc", "platform");
@@ -35054,7 +35486,7 @@ async function copyBrowserAssets(ws, cache, noCache) {
   const outputHashes = {};
   for (const asset of assets) {
     const dest = join11(ws.assetsDir, asset.to);
-    mkdirSync9(dirname7(dest), { recursive: true });
+    mkdirSync9(dirname8(dest), { recursive: true });
     copyFileSync(asset.src, dest);
     outputHashes[asset.to] = sha256Hex(readFileSync10(dest));
   }
@@ -35113,14 +35545,14 @@ async function platformBuild(opts = {}) {
 
 // src/commands/platform-deploy.ts
 import { existsSync as existsSync17, readFileSync as readFileSync14 } from "fs";
-import { dirname as dirname9, join as join19 } from "path";
-import { fileURLToPath as fileURLToPath7 } from "url";
+import { dirname as dirname11, join as join19 } from "path";
+import { fileURLToPath as fileURLToPath8 } from "url";
 
 // src/deploy/bootstrap.ts
 var {spawn: spawn4 } = globalThis.Bun;
 import { mkdirSync as mkdirSync12, writeFileSync as writeFileSync13 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
-import { join as join17 } from "path";
+import { dirname as dirname9, join as join17 } from "path";
 
 // src/deploy/ansible.ts
 import { spawn as nodeSpawn } from "child_process";
@@ -35477,10 +35909,34 @@ function generateCaddyfile(cfg) {
   lines.push("");
   for (const [name, env2] of Object.entries(cfg.envs)) {
     lines.push(`${env2.domain} {${tlsDirective}`);
-    lines.push(`    reverse_proxy arc-${name}:5005`);
+    if (cfg.observability?.enabled) {
+      lines.push("    handle_path /otel/* {");
+      lines.push("        reverse_proxy otel-collector:4318");
+      lines.push("    }");
+      lines.push("    handle {");
+      lines.push(`        reverse_proxy arc-${name}:5005`);
+      lines.push("    }");
+    } else {
+      lines.push(`    reverse_proxy arc-${name}:5005`);
+    }
     lines.push("}");
     lines.push("");
   }
+  if (cfg.observability?.enabled) {
+    const firstEnv = Object.values(cfg.envs)[0];
+    if (firstEnv) {
+      const subdomain = cfg.observability.subdomain ?? "observability";
+      const apex = apexOf(firstEnv.domain);
+      const observabilityDomain = `${subdomain}.${apex}`;
+      lines.push(`${observabilityDomain} {${tlsDirective}`);
+      lines.push("    basic_auth {");
+      lines.push("        import /etc/caddy/observability-htpasswd");
+      lines.push("    }");
+      lines.push("    reverse_proxy grafana:3000");
+      lines.push("}");
+      lines.push("");
+    }
+  }
   lines.push(`${cfg.registry.domain} {${tlsDirective}`);
   lines.push("    reverse_proxy registry:5000 {");
   lines.push("        header_up Host {host}");
@@ -35493,6 +35949,12 @@ function generateCaddyfile(cfg) {
 `) + `
 `;
 }
+function apexOf(host) {
+  const parts = host.split(".");
+  if (parts.length <= 2)
+    return host;
+  return parts.slice(-2).join(".");
+}
 
 // src/deploy/compose.ts
 function generateCompose({ cfg }) {
@@ -35508,6 +35970,9 @@ function generateCompose({ cfg }) {
   lines.push('      - "443:443"');
   lines.push("    volumes:");
   lines.push("      - ./Caddyfile:/etc/caddy/Caddyfile:ro");
+  if (cfg.observability?.enabled) {
+    lines.push("      - ./observability-htpasswd:/etc/caddy/observability-htpasswd:ro");
+  }
   lines.push("      - caddy_data:/data");
   lines.push("      - caddy_config:/config");
   lines.push("    networks:");
@@ -35554,7 +36019,20 @@ function generateCompose({ cfg }) {
     if (usePostgres) {
       lines.push(`      DATABASE_URL: "postgresql://arc:\${ARC_PG_PASSWORD_${upperName}:?missing ARC_PG_PASSWORD_${upperName}}@arc-db-${name}:5432/arc"`);
     }
-    const reserved = new Set(["PORT", "DATABASE_URL"]);
+    if (cfg.observability?.enabled) {
+      lines.push('      ARC_OTEL_ENABLED: "true"');
+      lines.push("      OTEL_EXPORTER_OTLP_ENDPOINT: http://otel-collector:4318");
+      lines.push(`      OTEL_SERVICE_NAME: arc-${name}`);
+      lines.push(`      OTEL_RESOURCE_ATTRIBUTES: "service.namespace=arc,deployment.environment=${name}"`);
+    }
+    const reserved = new Set([
+      "PORT",
+      "DATABASE_URL",
+      "ARC_OTEL_ENABLED",
+      "OTEL_EXPORTER_OTLP_ENDPOINT",
+      "OTEL_SERVICE_NAME",
+      "OTEL_RESOURCE_ATTRIBUTES"
+    ]);
     for (const [k, v] of Object.entries(userEnv)) {
       if (reserved.has(k))
         continue;
@@ -35590,6 +36068,93 @@ function generateCompose({ cfg }) {
     lines.push("      - arc-net");
     lines.push("");
   }
+  if (cfg.observability?.enabled) {
+    lines.push("  otel-collector:");
+    lines.push("    image: otel/opentelemetry-collector-contrib:0.114.0");
+    lines.push("    container_name: arc-otel-collector");
+    lines.push("    restart: unless-stopped");
+    lines.push('    command: ["--config=/etc/otelcol-contrib/config.yaml"]');
+    lines.push("    volumes:");
+    lines.push("      - ./observability/otel-collector-config.yaml:/etc/otelcol-contrib/config.yaml:ro");
+    lines.push("    networks: [arc-net]");
+    lines.push("    expose:");
+    lines.push('      - "4317"  # OTLP gRPC');
+    lines.push('      - "4318"  # OTLP HTTP');
+    lines.push('      - "8888"  # collector self-metrics (Prom scrape)');
+    lines.push("    depends_on:");
+    lines.push("      - tempo");
+    lines.push("      - loki");
+    lines.push("      - prometheus");
+    lines.push("");
+    lines.push("  tempo:");
+    lines.push("    image: grafana/tempo:2.6.1");
+    lines.push("    container_name: arc-tempo");
+    lines.push("    restart: unless-stopped");
+    lines.push('    command: ["-config.file=/etc/tempo.yaml"]');
+    lines.push('    user: "0"  # tempo writes to /var/tempo, owned by root in the image');
+    lines.push("    volumes:");
+    lines.push("      - ./observability/tempo.yaml:/etc/tempo.yaml:ro");
+    lines.push("      - tempo_data:/var/tempo");
+    lines.push("    networks: [arc-net]");
+    lines.push("    expose:");
+    lines.push('      - "3200"  # HTTP API for Grafana');
+    lines.push('      - "4317"  # OTLP from collector');
+    lines.push("");
+    lines.push("  loki:");
+    lines.push("    image: grafana/loki:3.3.2");
+    lines.push("    container_name: arc-loki");
+    lines.push("    restart: unless-stopped");
+    lines.push('    command: ["-config.file=/etc/loki/local-config.yaml"]');
+    lines.push('    user: "0"');
+    lines.push("    volumes:");
+    lines.push("      - ./observability/loki-config.yaml:/etc/loki/local-config.yaml:ro");
+    lines.push("      - loki_data:/loki");
+    lines.push("    networks: [arc-net]");
+    lines.push("    expose:");
+    lines.push('      - "3100"  # HTTP API');
+    lines.push("");
+    const metricsRetention = cfg.observability.retention?.metrics ?? "30d";
+    lines.push("  prometheus:");
+    lines.push("    image: prom/prometheus:v2.55.1");
+    lines.push("    container_name: arc-prometheus");
+    lines.push("    restart: unless-stopped");
+    lines.push("    command:");
+    lines.push('      - "--config.file=/etc/prometheus/prometheus.yml"');
+    lines.push('      - "--storage.tsdb.path=/prometheus"');
+    lines.push(`      - "--storage.tsdb.retention.time=${metricsRetention}"`);
+    lines.push('      - "--web.enable-remote-write-receiver"');
+    lines.push('      - "--enable-feature=exemplar-storage"');
+    lines.push("    volumes:");
+    lines.push("      - ./observability/prometheus.yml:/etc/prometheus/prometheus.yml:ro");
+    lines.push("      - prometheus_data:/prometheus");
+    lines.push("    networks: [arc-net]");
+    lines.push("    expose:");
+    lines.push('      - "9090"  # HTTP API + remote_write receiver');
+    lines.push("");
+    const adminPasswordEnv = cfg.observability.adminPasswordEnv ?? "ARC_OBSERVABILITY_PASSWORD";
+    lines.push("  grafana:");
+    lines.push("    image: grafana/grafana:11.4.0");
+    lines.push("    container_name: arc-grafana");
+    lines.push("    restart: unless-stopped");
+    lines.push("    environment:");
+    lines.push("      GF_SECURITY_ADMIN_USER: admin");
+    lines.push(`      GF_SECURITY_ADMIN_PASSWORD: \${${adminPasswordEnv}:?missing ${adminPasswordEnv}}`);
+    lines.push('      GF_USERS_ALLOW_SIGN_UP: "false"');
+    lines.push('      GF_AUTH_ANONYMOUS_ENABLED: "false"');
+    lines.push("    volumes:");
+    lines.push("      - ./observability/grafana-datasources.yaml:/etc/grafana/provisioning/datasources/datasources.yaml:ro");
+    lines.push("      - ./observability/grafana-dashboards.yaml:/etc/grafana/provisioning/dashboards/dashboards.yaml:ro");
+    lines.push("      - ./observability/grafana-dashboards:/etc/grafana/provisioning/dashboards/arc:ro");
+    lines.push("      - grafana_data:/var/lib/grafana");
+    lines.push("    networks: [arc-net]");
+    lines.push("    expose:");
+    lines.push('      - "3000"  # Grafana UI (behind Caddy basic-auth)');
+    lines.push("    depends_on:");
+    lines.push("      - tempo");
+    lines.push("      - loki");
+    lines.push("      - prometheus");
+    lines.push("");
+  }
   lines.push("networks:");
   lines.push("  arc-net:");
   lines.push("");
@@ -35604,6 +36169,12 @@ function generateCompose({ cfg }) {
       lines.push(`  arc-data-${name}:`);
     }
   }
+  if (cfg.observability?.enabled) {
+    lines.push("  tempo_data:");
+    lines.push("  loki_data:");
+    lines.push("  prometheus_data:");
+    lines.push("  grafana_data:");
+  }
   return lines.join(`
 `) + `
 `;
@@ -35633,6 +36204,707 @@ async function generateHtpasswd(user, password) {
   return `${user}:${hash}
 `;
 }
+async function generateCaddyBasicAuthLine(user, password) {
+  if (!user || !password) {
+    throw new Error("caddy basic_auth: user and password must both be non-empty");
+  }
+  const hash = await Bun.password.hash(password, {
+    algorithm: "bcrypt",
+    cost: 10
+  });
+  return `${user} ${hash}
+`;
+}
+
+// src/deploy/observability-configs.ts
+var DEFAULT_RETENTION = {
+  traces: "168h",
+  logs: "168h",
+  metrics: "30d"
+};
+function pickRetention(o) {
+  return {
+    traces: o?.retention?.traces ?? DEFAULT_RETENTION.traces,
+    logs: o?.retention?.logs ?? DEFAULT_RETENTION.logs,
+    metrics: o?.retention?.metrics ?? DEFAULT_RETENTION.metrics
+  };
+}
+function generateOtelCollectorConfig(cfg) {
+  const envNames = Object.keys(cfg.envs);
+  return `# Generated by \`arc platform deploy\` \u2014 do not edit by hand.
+receivers:
+  otlp:
+    protocols:
+      grpc:
+        endpoint: 0.0.0.0:4317
+      http:
+        endpoint: 0.0.0.0:4318
+        cors:
+          allowed_origins:
+${envNames.map((name) => `            - "https://${cfg.envs[name].domain}"`).join(`
+`)}
+          allowed_headers:
+            - traceparent
+            - tracestate
+            - content-type
+
+processors:
+  batch:
+    timeout: 5s
+    send_batch_size: 512
+    send_batch_max_size: 1024
+
+  # Tail-based sampling \u2014 applied after a full trace has been assembled.
+  # Errors and slow traces are kept 100%, everything else at 10%.
+  tail_sampling:
+    decision_wait: 10s
+    num_traces: 50000
+    expected_new_traces_per_sec: 100
+    policies:
+      - name: errors
+        type: status_code
+        status_code: { status_codes: [ERROR] }
+      - name: slow
+        type: latency
+        latency: { threshold_ms: 500 }
+      - name: random_10pct
+        type: probabilistic
+        probabilistic: { sampling_percentage: 10 }
+
+  # Drop high-cardinality / PII attributes that might slip past app-side
+  # sanitization. Belt-and-suspenders before they hit long-term storage.
+  attributes:
+    actions:
+      - key: http.request.header.authorization
+        action: delete
+      - key: http.request.header.cookie
+        action: delete
+
+exporters:
+  otlp/tempo:
+    endpoint: tempo:4317
+    tls:
+      insecure: true
+
+  otlphttp/loki:
+    endpoint: http://loki:3100/otlp
+    tls:
+      insecure: true
+
+  prometheusremotewrite:
+    endpoint: http://prometheus:9090/api/v1/write
+    tls:
+      insecure: true
+
+extensions:
+  health_check: {}
+  zpages: {}
+
+service:
+  extensions: [health_check, zpages]
+  pipelines:
+    traces:
+      receivers: [otlp]
+      processors: [tail_sampling, attributes, batch]
+      exporters: [otlp/tempo]
+    logs:
+      receivers: [otlp]
+      processors: [attributes, batch]
+      exporters: [otlphttp/loki]
+    metrics:
+      receivers: [otlp]
+      processors: [batch]
+      exporters: [prometheusremotewrite]
+`;
+}
+function generateTempoConfig(cfg) {
+  const retention = pickRetention(cfg.observability);
+  return `# Generated by \`arc platform deploy\` \u2014 do not edit by hand.
+server:
+  http_listen_port: 3200
+  grpc_listen_port: 9095
+
+distributor:
+  receivers:
+    otlp:
+      protocols:
+        grpc:
+          endpoint: 0.0.0.0:4317
+        http:
+          endpoint: 0.0.0.0:4318
+
+ingester:
+  trace_idle_period: 10s
+  max_block_bytes: 1048576
+  max_block_duration: 5m
+
+compactor:
+  compaction:
+    block_retention: ${retention.traces}
+
+storage:
+  trace:
+    backend: local
+    local:
+      path: /var/tempo/blocks
+    wal:
+      path: /var/tempo/wal
+
+metrics_generator:
+  registry:
+    external_labels:
+      source: tempo
+  storage:
+    path: /var/tempo/generator/wal
+    remote_write:
+      - url: http://prometheus:9090/api/v1/write
+        send_exemplars: true
+
+overrides:
+  defaults:
+    metrics_generator:
+      processors: [service-graphs, span-metrics]
+`;
+}
+function generateLokiConfig(cfg) {
+  const retention = pickRetention(cfg.observability);
+  return `# Generated by \`arc platform deploy\` \u2014 do not edit by hand.
+auth_enabled: false
+
+server:
+  http_listen_port: 3100
+
+common:
+  instance_addr: 127.0.0.1
+  path_prefix: /loki
+  storage:
+    filesystem:
+      chunks_directory: /loki/chunks
+      rules_directory: /loki/rules
+  replication_factor: 1
+  ring:
+    kvstore:
+      store: inmemory
+
+schema_config:
+  configs:
+    - from: 2024-01-01
+      store: tsdb
+      object_store: filesystem
+      schema: v13
+      index:
+        prefix: index_
+        period: 24h
+
+limits_config:
+  retention_period: ${retention.logs}
+  allow_structured_metadata: true
+
+compactor:
+  working_directory: /loki/compactor
+  retention_enabled: true
+  delete_request_store: filesystem
+`;
+}
+function generatePrometheusConfig(_cfg) {
+  return `# Generated by \`arc platform deploy\` \u2014 do not edit by hand.
+global:
+  scrape_interval: 15s
+  evaluation_interval: 15s
+
+scrape_configs:
+  - job_name: prometheus
+    static_configs:
+      - targets: [localhost:9090]
+  - job_name: otel-collector
+    static_configs:
+      - targets: [otel-collector:8888]
+
+# remote-write inbound is enabled via the --web.enable-remote-write-receiver
+# command-line flag (compose.ts). Retention via --storage.tsdb.retention.time.
+`;
+}
+function generateGrafanaDatasources() {
+  return `# Generated by \`arc platform deploy\` \u2014 do not edit by hand.
+apiVersion: 1
+datasources:
+  - name: Tempo
+    type: tempo
+    access: proxy
+    url: http://tempo:3200
+    uid: tempo
+    jsonData:
+      tracesToLogsV2:
+        datasourceUid: loki
+        spanStartTimeShift: -5m
+        spanEndTimeShift: 5m
+      serviceMap:
+        datasourceUid: prometheus
+  - name: Loki
+    type: loki
+    access: proxy
+    url: http://loki:3100
+    uid: loki
+    jsonData:
+      derivedFields:
+        - datasourceUid: tempo
+          matcherRegex: "trace_id=(\\\\w+)"
+          name: TraceID
+          url: $\${__value.raw}
+  - name: Prometheus
+    type: prometheus
+    access: proxy
+    url: http://prometheus:9090
+    uid: prometheus
+    isDefault: true
+`;
+}
+function generateGrafanaDashboardsProvider() {
+  return `# Generated by \`arc platform deploy\` \u2014 do not edit by hand.
+apiVersion: 1
+providers:
+  - name: arc
+    orgId: 1
+    folder: Arc
+    type: file
+    disableDeletion: false
+    editable: true
+    updateIntervalSeconds: 30
+    allowUiUpdates: true
+    options:
+      path: /etc/grafana/provisioning/dashboards/arc
+      foldersFromFilesStructure: false
+`;
+}
+function generateArcOverviewDashboard() {
+  const dashboard = {
+    title: "Arc Service Overview",
+    uid: "arc-overview",
+    schemaVersion: 39,
+    version: 1,
+    refresh: "30s",
+    time: { from: "now-1h", to: "now" },
+    timepicker: {},
+    tags: ["arc", "auto-provisioned"],
+    templating: {
+      list: [
+        {
+          name: "service",
+          label: "Service",
+          type: "query",
+          datasource: { type: "prometheus", uid: "prometheus" },
+          query: "label_values(traces_spanmetrics_calls_total, service_name)",
+          refresh: 2,
+          includeAll: false,
+          multi: false,
+          current: { text: "arc-prod", value: "arc-prod" }
+        }
+      ]
+    },
+    panels: [
+      panelStat("Request rate (req/s)", { x: 0, y: 0, w: 6, h: 4 }, 'sum(rate(traces_spanmetrics_calls_total{service_name="$service", span_kind="SPAN_KIND_SERVER"}[5m]))', "reqps"),
+      panelStat("Error rate (%)", { x: 6, y: 0, w: 6, h: 4 }, 'sum(rate(traces_spanmetrics_calls_total{service_name="$service", span_kind="SPAN_KIND_SERVER", status_code="STATUS_CODE_ERROR"}[5m])) / clamp_min(sum(rate(traces_spanmetrics_calls_total{service_name="$service", span_kind="SPAN_KIND_SERVER"}[5m])), 0.001) * 100', "percent", { red: 1, orange: 0.1 }),
+      panelStat("P99 latency", { x: 12, y: 0, w: 6, h: 4 }, 'histogram_quantile(0.99, sum(rate(traces_spanmetrics_latency_bucket{service_name="$service", span_kind="SPAN_KIND_SERVER"}[5m])) by (le))', "ms", { red: 1000, orange: 300 }),
+      panelStat("Active commands/sec", { x: 18, y: 0, w: 6, h: 4 }, 'sum(rate(arc_commands_total{service_name="$service"}[5m]))', "ops"),
+      panelTimeseries("Request rate by route", { x: 0, y: 4, w: 12, h: 8 }, 'sum by (span_name) (rate(traces_spanmetrics_calls_total{service_name="$service", span_kind="SPAN_KIND_SERVER"}[1m]))', "{{span_name}}", "reqps"),
+      panelTimeseries("Latency percentiles", { x: 12, y: 4, w: 12, h: 8 }, [
+        {
+          expr: 'histogram_quantile(0.5, sum(rate(traces_spanmetrics_latency_bucket{service_name="$service", span_kind="SPAN_KIND_SERVER"}[5m])) by (le))',
+          legend: "p50"
+        },
+        {
+          expr: 'histogram_quantile(0.95, sum(rate(traces_spanmetrics_latency_bucket{service_name="$service", span_kind="SPAN_KIND_SERVER"}[5m])) by (le))',
+          legend: "p95"
+        },
+        {
+          expr: 'histogram_quantile(0.99, sum(rate(traces_spanmetrics_latency_bucket{service_name="$service", span_kind="SPAN_KIND_SERVER"}[5m])) by (le))',
+          legend: "p99"
+        }
+      ], "ms"),
+      panelTimeseries("Commands per second", { x: 0, y: 12, w: 12, h: 8 }, 'sum by (arc_command_name) (rate(arc_commands_total{service_name="$service"}[1m]))', "{{arc_command_name}}", "ops"),
+      panelTimeseries("Command p95 latency", { x: 12, y: 12, w: 12, h: 8 }, 'histogram_quantile(0.95, sum by (arc_command_name, le) (rate(arc_command_duration_ms_milliseconds_bucket{service_name="$service"}[5m])))', "{{arc_command_name}}", "ms"),
+      panelTimeseries("DB find ops/sec by collection", { x: 0, y: 20, w: 12, h: 8 }, 'sum by (db_collection_name) (rate(arc_db_find_ms_milliseconds_count{service_name="$service"}[1m]))', "{{db_collection_name}}", "ops"),
+      panelTimeseries("DB find p95 latency", { x: 12, y: 20, w: 12, h: 8 }, 'histogram_quantile(0.95, sum by (db_collection_name, le) (rate(arc_db_find_ms_milliseconds_bucket{service_name="$service"}[5m])))', "{{db_collection_name}}", "ms"),
+      {
+        title: "Recent error logs",
+        type: "logs",
+        gridPos: { x: 0, y: 28, w: 24, h: 8 },
+        datasource: { type: "loki", uid: "loki" },
+        targets: [
+          {
+            expr: '{service_name="$service"} |= `ERROR`',
+            refId: "A"
+          }
+        ],
+        options: {
+          showTime: true,
+          showLabels: false,
+          showCommonLabels: false,
+          wrapLogMessage: true,
+          enableLogDetails: true,
+          dedupStrategy: "none",
+          sortOrder: "Descending"
+        }
+      }
+    ]
+  };
+  return JSON.stringify(dashboard, null, 2);
+}
+function generateArcTracesDashboard() {
+  const dashboard = {
+    title: "Arc Recent Traces",
+    uid: "arc-traces",
+    schemaVersion: 39,
+    version: 1,
+    refresh: "1m",
+    time: { from: "now-1h", to: "now" },
+    tags: ["arc", "auto-provisioned"],
+    templating: {
+      list: [
+        {
+          name: "service",
+          label: "Service",
+          type: "query",
+          datasource: { type: "prometheus", uid: "prometheus" },
+          query: "label_values(traces_spanmetrics_calls_total, service_name)",
+          refresh: 2,
+          current: { text: "arc-prod", value: "arc-prod" }
+        }
+      ]
+    },
+    panels: [
+      {
+        title: "Slowest traces (p95 \u2265 500ms)",
+        type: "traces",
+        gridPos: { x: 0, y: 0, w: 24, h: 14 },
+        datasource: { type: "tempo", uid: "tempo" },
+        targets: [
+          {
+            queryType: "traceql",
+            query: '{resource.service.name = "$service" && duration > 500ms}',
+            refId: "A",
+            limit: 20
+          }
+        ]
+      },
+      {
+        title: "Recent errors",
+        type: "traces",
+        gridPos: { x: 0, y: 14, w: 24, h: 14 },
+        datasource: { type: "tempo", uid: "tempo" },
+        targets: [
+          {
+            queryType: "traceql",
+            query: '{resource.service.name = "$service" && status = error}',
+            refId: "A",
+            limit: 20
+          }
+        ]
+      }
+    ]
+  };
+  return JSON.stringify(dashboard, null, 2);
+}
+function generateArcServiceMapDashboard() {
+  const dashboard = {
+    title: "Arc Service Map",
+    uid: "arc-service-map",
+    schemaVersion: 39,
+    version: 1,
+    refresh: "30s",
+    time: { from: "now-1h", to: "now" },
+    tags: ["arc", "auto-provisioned"],
+    panels: [
+      panelTimeseries("Service-to-service request rate", { x: 0, y: 0, w: 24, h: 9 }, "sum by (client, server) (rate(traces_service_graph_request_total[1m]))", "{{client}} \u2192 {{server}}", "reqps"),
+      panelTimeseries("Inter-service p95 latency", { x: 0, y: 9, w: 24, h: 9 }, "histogram_quantile(0.95, sum by (client, server, le) (rate(traces_service_graph_request_server_seconds_bucket[5m]))) * 1000", "{{client}} \u2192 {{server}}", "ms"),
+      {
+        title: "Service-graph edges (last 5m)",
+        type: "table",
+        gridPos: { x: 0, y: 18, w: 24, h: 8 },
+        datasource: { type: "prometheus", uid: "prometheus" },
+        targets: [
+          {
+            expr: "sum by (client, server) (increase(traces_service_graph_request_total[5m]))",
+            refId: "A",
+            instant: true,
+            format: "table"
+          }
+        ],
+        transformations: [
+          { id: "organize", options: { excludeByName: { Time: true } } },
+          { id: "sortBy", options: { sort: [{ field: "Value", desc: true }] } }
+        ]
+      }
+    ]
+  };
+  return JSON.stringify(dashboard, null, 2);
+}
+function generateArcLogsDashboard() {
+  const dashboard = {
+    title: "Arc Logs Explorer",
+    uid: "arc-logs",
+    schemaVersion: 39,
+    version: 1,
+    refresh: "30s",
+    time: { from: "now-1h", to: "now" },
+    tags: ["arc", "auto-provisioned"],
+    templating: {
+      list: [
+        {
+          name: "service",
+          label: "Service",
+          type: "query",
+          datasource: { type: "loki", uid: "loki" },
+          query: "label_values(service_name)",
+          refresh: 2,
+          current: { text: "arc-prod", value: "arc-prod" }
+        },
+        {
+          name: "search",
+          label: "Filter",
+          type: "textbox",
+          query: "",
+          current: { text: "", value: "" }
+        }
+      ]
+    },
+    panels: [
+      panelStat("Logs ingested (1h)", { x: 0, y: 0, w: 6, h: 4 }, 'sum(increase({service_name="$service"}[1h]))', "short"),
+      panelStat("Errors (1h)", { x: 6, y: 0, w: 6, h: 4 }, 'sum(increase({service_name="$service", severity_text=~"ERROR|FATAL"}[1h]))', "short", { orange: 1, red: 50 }),
+      {
+        title: "Log volume by severity",
+        type: "timeseries",
+        gridPos: { x: 12, y: 0, w: 12, h: 8 },
+        datasource: { type: "loki", uid: "loki" },
+        targets: [
+          {
+            expr: 'sum by (severity_text) (count_over_time({service_name="$service"} |~ "$search" [$__interval]))',
+            refId: "A",
+            legendFormat: "{{severity_text}}"
+          }
+        ],
+        fieldConfig: {
+          defaults: {
+            unit: "short",
+            custom: {
+              drawStyle: "bars",
+              fillOpacity: 50,
+              lineWidth: 0,
+              stacking: { mode: "normal", group: "A" }
+            }
+          },
+          overrides: []
+        },
+        options: {
+          legend: { displayMode: "list", placement: "bottom", showLegend: true },
+          tooltip: { mode: "multi", sort: "desc" }
+        }
+      },
+      {
+        title: "Live tail (filtered by $search)",
+        type: "logs",
+        gridPos: { x: 0, y: 8, w: 24, h: 18 },
+        datasource: { type: "loki", uid: "loki" },
+        targets: [
+          {
+            expr: '{service_name="$service"} |~ "$search"',
+            refId: "A"
+          }
+        ],
+        options: {
+          showTime: true,
+          showLabels: false,
+          showCommonLabels: false,
+          wrapLogMessage: true,
+          enableLogDetails: true,
+          dedupStrategy: "none",
+          sortOrder: "Descending"
+        }
+      }
+    ]
+  };
+  return JSON.stringify(dashboard, null, 2);
+}
+function generateArcSamplingDashboard() {
+  const dashboard = {
+    title: "Arc Tail Sampling & Collector Health",
+    uid: "arc-sampling",
+    schemaVersion: 39,
+    version: 1,
+    refresh: "30s",
+    time: { from: "now-3h", to: "now" },
+    tags: ["arc", "auto-provisioned"],
+    panels: [
+      panelStat("Spans received/sec", { x: 0, y: 0, w: 6, h: 4 }, "sum(rate(otelcol_receiver_accepted_spans[5m]))", "ops"),
+      panelStat("Spans exported/sec (sampled)", { x: 6, y: 0, w: 6, h: 4 }, "sum(rate(otelcol_exporter_sent_spans[5m]))", "ops"),
+      panelStat("Spans dropped (refused) / 5m", { x: 12, y: 0, w: 6, h: 4 }, "sum(increase(otelcol_receiver_refused_spans[5m]))", "short", { orange: 1, red: 100 }),
+      panelStat("Export failures / 5m", { x: 18, y: 0, w: 6, h: 4 }, "sum(increase(otelcol_exporter_send_failed_spans[5m]))", "short", { orange: 1, red: 50 }),
+      panelTimeseries("Tail-sampling policy decisions", { x: 0, y: 4, w: 12, h: 8 }, 'sum by (policy) (rate(otelcol_processor_tail_sampling_count_traces_sampled{sampled="true"}[1m]))', "{{policy}} sampled", "ops"),
+      panelTimeseries("Receiver vs Exporter (effective sampling rate)", { x: 12, y: 4, w: 12, h: 8 }, [
+        {
+          expr: "sum(rate(otelcol_receiver_accepted_spans[1m]))",
+          legend: "received"
+        },
+        {
+          expr: "sum(rate(otelcol_exporter_sent_spans[1m]))",
+          legend: "exported"
+        }
+      ], "ops"),
+      panelTimeseries("Collector queue size (BatchSpanProcessor)", { x: 0, y: 12, w: 12, h: 8 }, "otelcol_processor_batch_batch_send_size_sum / clamp_min(otelcol_processor_batch_batch_send_size_count, 1)", "avg batch size", "short"),
+      panelTimeseries("Collector process memory", { x: 12, y: 12, w: 12, h: 8 }, 'process_resident_memory_bytes{job="otel-collector"}', "RSS", "bytes")
+    ]
+  };
+  return JSON.stringify(dashboard, null, 2);
+}
+function generateArcCommandDashboard() {
+  const dashboard = {
+    title: "Arc Command Drill-Down",
+    uid: "arc-command",
+    schemaVersion: 39,
+    version: 1,
+    refresh: "30s",
+    time: { from: "now-3h", to: "now" },
+    tags: ["arc", "auto-provisioned"],
+    templating: {
+      list: [
+        {
+          name: "service",
+          label: "Service",
+          type: "query",
+          datasource: { type: "prometheus", uid: "prometheus" },
+          query: "label_values(arc_commands_total, service_name)",
+          refresh: 2,
+          current: { text: "arc-prod", value: "arc-prod" }
+        },
+        {
+          name: "command",
+          label: "Command",
+          type: "query",
+          datasource: { type: "prometheus", uid: "prometheus" },
+          query: 'label_values(arc_commands_total{service_name="$service"}, arc_command_name)',
+          refresh: 2,
+          includeAll: false,
+          multi: false
+        }
+      ]
+    },
+    panels: [
+      panelStat("Call rate", { x: 0, y: 0, w: 6, h: 4 }, 'sum(rate(arc_commands_total{service_name="$service", arc_command_name="$command"}[5m]))', "ops"),
+      panelStat("P50 latency", { x: 6, y: 0, w: 6, h: 4 }, 'histogram_quantile(0.5, sum by (le) (rate(arc_command_duration_ms_milliseconds_bucket{service_name="$service", arc_command_name="$command"}[5m])))', "ms"),
+      panelStat("P95 latency", { x: 12, y: 0, w: 6, h: 4 }, 'histogram_quantile(0.95, sum by (le) (rate(arc_command_duration_ms_milliseconds_bucket{service_name="$service", arc_command_name="$command"}[5m])))', "ms", { orange: 200, red: 1000 }),
+      panelStat("P99 latency", { x: 18, y: 0, w: 6, h: 4 }, 'histogram_quantile(0.99, sum by (le) (rate(arc_command_duration_ms_milliseconds_bucket{service_name="$service", arc_command_name="$command"}[5m])))', "ms", { orange: 500, red: 2000 }),
+      panelTimeseries("Call rate over time", { x: 0, y: 4, w: 12, h: 8 }, 'sum(rate(arc_commands_total{service_name="$service", arc_command_name="$command"}[1m]))', "calls/s", "ops"),
+      panelTimeseries("Latency percentiles", { x: 12, y: 4, w: 12, h: 8 }, [
+        {
+          expr: 'histogram_quantile(0.5, sum by (le) (rate(arc_command_duration_ms_milliseconds_bucket{service_name="$service", arc_command_name="$command"}[5m])))',
+          legend: "p50"
+        },
+        {
+          expr: 'histogram_quantile(0.95, sum by (le) (rate(arc_command_duration_ms_milliseconds_bucket{service_name="$service", arc_command_name="$command"}[5m])))',
+          legend: "p95"
+        },
+        {
+          expr: 'histogram_quantile(0.99, sum by (le) (rate(arc_command_duration_ms_milliseconds_bucket{service_name="$service", arc_command_name="$command"}[5m])))',
+          legend: "p99"
+        }
+      ], "ms"),
+      {
+        title: "Recent traces (sampled)",
+        type: "traces",
+        gridPos: { x: 0, y: 12, w: 24, h: 14 },
+        datasource: { type: "tempo", uid: "tempo" },
+        targets: [
+          {
+            queryType: "traceql",
+            query: '{resource.service.name = "$service" && name = "command.$command"}',
+            refId: "A",
+            limit: 20
+          }
+        ]
+      }
+    ]
+  };
+  return JSON.stringify(dashboard, null, 2);
+}
+function generateObservabilityConfigs(cfg) {
+  return {
+    "observability/otel-collector-config.yaml": generateOtelCollectorConfig(cfg),
+    "observability/tempo.yaml": generateTempoConfig(cfg),
+    "observability/loki-config.yaml": generateLokiConfig(cfg),
+    "observability/prometheus.yml": generatePrometheusConfig(cfg),
+    "observability/grafana-datasources.yaml": generateGrafanaDatasources(),
+    "observability/grafana-dashboards.yaml": generateGrafanaDashboardsProvider(),
+    "observability/grafana-dashboards/arc-overview.json": generateArcOverviewDashboard(),
+    "observability/grafana-dashboards/arc-traces.json": generateArcTracesDashboard(),
+    "observability/grafana-dashboards/arc-service-map.json": generateArcServiceMapDashboard(),
+    "observability/grafana-dashboards/arc-logs.json": generateArcLogsDashboard(),
+    "observability/grafana-dashboards/arc-sampling.json": generateArcSamplingDashboard(),
+    "observability/grafana-dashboards/arc-command.json": generateArcCommandDashboard()
+  };
+}
+function panelStat(title, gridPos, expr, unit, thresholds) {
+  const steps = [
+    { color: "green", value: null }
+  ];
+  if (thresholds?.orange !== undefined) {
+    steps.push({ color: "orange", value: thresholds.orange });
+  }
+  if (thresholds?.red !== undefined) {
+    steps.push({ color: "red", value: thresholds.red });
+  }
+  return {
+    title,
+    type: "stat",
+    gridPos,
+    datasource: { type: "prometheus", uid: "prometheus" },
+    targets: [{ expr, refId: "A", legendFormat: title }],
+    fieldConfig: {
+      defaults: {
+        unit,
+        thresholds: { mode: "absolute", steps }
+      },
+      overrides: []
+    },
+    options: {
+      colorMode: "value",
+      graphMode: "area",
+      justifyMode: "auto",
+      reduceOptions: { calcs: ["lastNotNull"], fields: "", values: false },
+      textMode: "auto"
+    }
+  };
+}
+function panelTimeseries(title, gridPos, query, legend, unit) {
+  const targets = Array.isArray(query) ? query.map((q, i) => ({
+    expr: q.expr,
+    refId: String.fromCharCode(65 + i),
+    legendFormat: q.legend
+  })) : [{ expr: query, refId: "A", legendFormat: legend }];
+  return {
+    title,
+    type: "timeseries",
+    gridPos,
+    datasource: { type: "prometheus", uid: "prometheus" },
+    targets,
+    fieldConfig: {
+      defaults: {
+        unit,
+        custom: {
+          drawStyle: "line",
+          lineInterpolation: "smooth",
+          lineWidth: 1.5,
+          fillOpacity: 10,
+          showPoints: "never"
+        }
+      },
+      overrides: []
+    },
+    options: {
+      legend: { displayMode: "list", placement: "bottom", showLegend: true },
+      tooltip: { mode: "multi", sort: "desc" }
+    }
+  };
+}
 
 // src/deploy/terraform.ts
 import { spawn as nodeSpawn2 } from "child_process";
@@ -35742,10 +37014,11 @@ function applyDeployGlobals(globals) {
     }
   }
 }
-function ensurePersistedSecret(rootDir, envName, key, generate) {
+function ensurePersistedSecret(rootDir, scope, key, generate) {
   if (process.env[key])
     return process.env[key];
-  const path4 = join14(rootDir, `deploy.arc.${envName}.env`);
+  const fileName = scope === "globals" ? "deploy.arc.env" : `deploy.arc.${scope}.env`;
+  const path4 = join14(rootDir, fileName);
   if (existsSync13(path4)) {
     const existing = parseEnvFile(readFileSync11(path4, "utf-8"), path4);
     if (existing[key]) {
@@ -35923,6 +37196,31 @@ function validateDeployConfig(input) {
     }
     validated.envs[name] = { domain, envVars, db };
   }
+  const observabilityRaw = input.observability;
+  if (observabilityRaw !== undefined) {
+    if (!isObject(observabilityRaw))
+      throw cfgErr("observability", "object");
+    const enabledRaw = observabilityRaw.enabled;
+    if (typeof enabledRaw !== "boolean")
+      throw cfgErr("observability.enabled", "boolean");
+    const retentionRaw = observabilityRaw.retention;
+    let retention;
+    if (retentionRaw !== undefined) {
+      if (!isObject(retentionRaw))
+        throw cfgErr("observability.retention", "object");
+      retention = {
+        traces: optionalString(retentionRaw, "observability.retention.traces"),
+        logs: optionalString(retentionRaw, "observability.retention.logs"),
+        metrics: optionalString(retentionRaw, "observability.retention.metrics")
+      };
+    }
+    validated.observability = {
+      enabled: enabledRaw,
+      subdomain: optionalString(observabilityRaw, "observability.subdomain") ?? "observability",
+      adminPasswordEnv: optionalString(observabilityRaw, "observability.adminPasswordEnv") ?? "ARC_OBSERVABILITY_PASSWORD",
+      retention
+    };
+  }
   const provision = input.provision;
   if (provision !== undefined) {
     if (!isObject(provision))
@@ -36221,6 +37519,12 @@ async function bootstrap(inputs) {
     await upStack(inputs);
     ok("Docker stack up");
   }
+  if (cfg.observability?.enabled) {
+    log2("Ensuring observability sidecars are running...");
+    const obsServices = ["otel-collector", "tempo", "loki", "prometheus", "grafana"];
+    await assertExec(cfg.target, `cd ${cfg.target.remoteDir} && docker compose pull --ignore-pull-failures ${obsServices.join(" ")} && docker compose up -d ${obsServices.join(" ")}`);
+    ok("Observability stack up");
+  }
   await writeStateMarker(cfg.target, {
     cliVersion: inputs.cliVersion,
     configHash: inputs.configHash,
@@ -36258,6 +37562,23 @@ async function upStack(inputs) {
   writeFileSync13(join17(workDir, "htpasswd"), htpasswdLine);
   writeFileSync13(join17(workDir, "Caddyfile"), generateCaddyfile(cfg));
   writeFileSync13(join17(workDir, "docker-compose.yml"), generateCompose({ cfg }));
+  let observabilityFiles = null;
+  let observabilityHtpasswd = null;
+  if (cfg.observability?.enabled) {
+    observabilityFiles = generateObservabilityConfigs(cfg);
+    const adminPasswordEnv = cfg.observability.adminPasswordEnv ?? "ARC_OBSERVABILITY_PASSWORD";
+    const adminPassword = process.env[adminPasswordEnv];
+    if (!adminPassword) {
+      throw new Error(`bootstrap: ${adminPasswordEnv} not set \u2014 observability needs a Grafana admin password.`);
+    }
+    observabilityHtpasswd = await generateCaddyBasicAuthLine("admin", adminPassword);
+    for (const [relPath, contents] of Object.entries(observabilityFiles)) {
+      const fullPath = join17(workDir, relPath);
+      mkdirSync12(dirname9(fullPath), { recursive: true });
+      writeFileSync13(fullPath, contents);
+    }
+    writeFileSync13(join17(workDir, "observability-htpasswd"), observabilityHtpasswd);
+  }
   await assertExec(cfg.target, `sudo mkdir -p ${cfg.target.remoteDir} && sudo chown ${cfg.target.user}:${cfg.target.user} ${cfg.target.remoteDir}`);
   for (const name of Object.keys(cfg.envs)) {
     await assertExec(cfg.target, `mkdir -p ${cfg.target.remoteDir}/${name}`);
@@ -36266,7 +37587,26 @@ async function upStack(inputs) {
   await scpUpload(cfg.target, join17(workDir, "Caddyfile"), `${cfg.target.remoteDir}/Caddyfile`);
   await scpUpload(cfg.target, join17(workDir, "docker-compose.yml"), `${cfg.target.remoteDir}/docker-compose.yml`);
   await scpUpload(cfg.target, join17(workDir, "htpasswd"), `${cfg.target.remoteDir}/registry-auth/htpasswd`);
+  if (observabilityFiles && observabilityHtpasswd) {
+    await assertExec(cfg.target, `mkdir -p ${cfg.target.remoteDir}/observability/grafana-dashboards`);
+    for (const relPath of Object.keys(observabilityFiles)) {
+      const localDir = dirname9(join17(workDir, relPath));
+      mkdirSync12(localDir, { recursive: true });
+    }
+    for (const relPath of Object.keys(observabilityFiles)) {
+      await scpUpload(cfg.target, join17(workDir, relPath), `${cfg.target.remoteDir}/${relPath}`);
+    }
+    await scpUpload(cfg.target, join17(workDir, "observability-htpasswd"), `${cfg.target.remoteDir}/observability-htpasswd`);
+  }
   await assertExec(cfg.target, `touch ${cfg.target.remoteDir}/.env`);
+  if (cfg.observability?.enabled) {
+    const key = cfg.observability.adminPasswordEnv ?? "ARC_OBSERVABILITY_PASSWORD";
+    const value = process.env[key];
+    if (!value) {
+      throw new Error(`bootstrap: ${key} not set \u2014 observability needs a Grafana admin password.`);
+    }
+    await writeEnvLine(cfg.target, `${cfg.target.remoteDir}/.env`, key, value);
+  }
   for (const [name, env2] of Object.entries(cfg.envs)) {
     if (env2.db?.type !== "postgres")
       continue;
@@ -36429,8 +37769,8 @@ import {
   writeFileSync as writeFileSync14
 } from "fs";
 import { tmpdir as tmpdir3 } from "os";
-import { dirname as dirname8, join as join18 } from "path";
-import { fileURLToPath as fileURLToPath6 } from "url";
+import { dirname as dirname10, join as join18 } from "path";
+import { fileURLToPath as fileURLToPath7 } from "url";
 
 // src/deploy/image-template.ts
 function generateDockerfile(inputs) {
@@ -36522,8 +37862,8 @@ function embedCliBundle(ws) {
   copyFileSync2(source, target);
 }
 function locateCliBundle() {
-  const here = fileURLToPath6(import.meta.url);
-  let cur = dirname8(here);
+  const here = fileURLToPath7(import.meta.url);
+  let cur = dirname10(here);
   while (cur !== "/" && cur !== "") {
     const candidate = join18(cur, "package.json");
     if (existsSync16(candidate)) {
@@ -36541,7 +37881,7 @@ function locateCliBundle() {
           throw e;
       }
     }
-    const parent = dirname8(cur);
+    const parent = dirname10(cur);
     if (parent === cur)
       break;
     cur = parent;
@@ -37394,6 +38734,10 @@ async function platformDeploy(envArg, options = {}) {
   for (const pg of pgEnvs) {
     ensurePersistedSecret(ws.rootDir, pg.name, pg.passwordKey, () => crypto.randomUUID().replace(/-/g, ""));
   }
+  if (cfg.observability?.enabled) {
+    const key = cfg.observability.adminPasswordEnv ?? "ARC_OBSERVABILITY_PASSWORD";
+    ensurePersistedSecret(ws.rootDir, "globals", key, () => crypto.randomUUID().replace(/-/g, ""));
+  }
   const targetEnvs = envArg ? envArg in cfg.envs ? [envArg] : (() => {
     err(`Unknown env "${envArg}". Known: ${Object.keys(cfg.envs).join(", ")}`);
     process.exit(1);
@@ -37468,8 +38812,8 @@ async function platformDeploy(envArg, options = {}) {
 }
 function readCliVersion2() {
   try {
-    let cur = dirname9(fileURLToPath7(import.meta.url));
-    const root = dirname9(cur).startsWith("/") ? "/" : ".";
+    let cur = dirname11(fileURLToPath8(import.meta.url));
+    const root = dirname11(cur).startsWith("/") ? "/" : ".";
     while (cur !== root && cur !== "") {
       const candidate = join19(cur, "package.json");
       if (existsSync17(candidate)) {
@@ -37478,7 +38822,7 @@ function readCliVersion2() {
           return pkg.version ?? "unknown";
         }
       }
-      const parent = dirname9(cur);
+      const parent = dirname11(cur);
       if (parent === cur)
         break;
       cur = parent;
@@ -37493,6 +38837,7 @@ async function hashDeployConfig(rootDir) {
   const content = readFileSync14(p2);
   const hasher = new Bun.CryptoHasher("sha256");
   hasher.update(content);
+  hasher.update(readCliVersion2());
   return hasher.digest("hex").slice(0, 16);
 }
 
@@ -37668,14 +39013,16 @@ function filterEventsForTokens(tokens, events, eventDefinitions) {
 // ../host/src/context-handler.ts
 class ContextHandler {
   context;
+  telemetry;
   model;
   dataStorage;
   eventPublisher;
   eventDefinitions = new Map;
   hostEventIdCounter = 0;
   initialized = false;
-  constructor(context, dbAdapter) {
+  constructor(context, dbAdapter, telemetry) {
     this.context = context;
+    this.telemetry = telemetry;
     this.dataStorage = new MasterDataStorage(dbAdapter);
     this.eventPublisher = new LocalEventPublisher(this.dataStorage);
     this.model = new Model(context, {
@@ -37723,27 +39070,49 @@ class ContextHandler {
     }
   }
   async executeCommand(commandName, params, rawToken) {
-    const scoped = new ScopedModel(this.model, "request");
-    if (rawToken)
-      scoped.setToken(rawToken);
-    const mutations = mutationExecutor(scoped);
-    let command;
-    if (commandName.includes(".")) {
-      const [elementName, methodName] = commandName.split(".");
-      const element = mutations[elementName];
-      command = element?.[methodName];
-    } else {
-      command = mutations[commandName];
-    }
-    if (!command) {
-      throw new Error(`Command '${commandName}' not found`);
-    }
+    const includePayloads = this.telemetry?.shouldIncludePayloads() ?? false;
+    const baseAttrs = {
+      "rpc.system": "arc",
+      "rpc.method": commandName,
+      "arc.command.name": commandName,
+      "arc.command.params_size": params ? JSON.stringify(params).length : 0,
+      ...includePayloads ? { "arc.command.params": params } : {}
+    };
+    const runCommand = async () => {
+      const scoped = new ScopedModel(this.model, "request");
+      if (rawToken)
+        scoped.setToken(rawToken);
+      const mutations = mutationExecutor(scoped);
+      let command;
+      if (commandName.includes(".")) {
+        const [elementName, methodName] = commandName.split(".");
+        const element = mutations[elementName];
+        command = element?.[methodName];
+      } else {
+        command = mutations[commandName];
+      }
+      if (!command) {
+        throw new Error(`Command '${commandName}' not found`);
+      }
+      try {
+        return await command(params);
+      } catch (error) {
+        console.error(`[ARC] Command '${commandName}' failed:`, error);
+        throw error;
+      }
+    };
+    if (!this.telemetry)
+      return runCommand();
+    const start = Date.now();
     try {
-      const result = await command(params);
-      return result;
-    } catch (error) {
-      console.error(`[ARC] Command '${commandName}' failed:`, error);
-      throw error;
+      return await this.telemetry.startSpan(`command.${commandName}`, runCommand, { attributes: baseAttrs });
+    } finally {
+      this.telemetry.measureSince("arc.command.duration_ms", start, {
+        "arc.command.name": commandName
+      });
+      this.telemetry.incrementCounter("arc.commands.total", 1, {
+        "arc.command.name": commandName
+      });
     }
   }
   async persistEvents(events, clientId, token) {
@@ -38806,7 +40175,7 @@ async function createArcServer(config) {
   const jwtSecret = config.jwtSecret || process.env.JWT_SECRET || "arc-host-secret-change-in-production";
   const port = config.port || 5005;
   const dbAdapter = config.dbAdapterFactory(config.context);
-  const contextHandler = new ContextHandler(config.context, dbAdapter);
+  const contextHandler = new ContextHandler(config.context, dbAdapter, config.telemetry);
   await contextHandler.init();
   const cronScheduler = new CronScheduler(contextHandler);
   cronScheduler.start();
@@ -38871,39 +40240,51 @@ async function createArcServer(config) {
       if (req.method === "OPTIONS") {
         return new Response(null, { headers: corsHeaders2 });
       }
-      const authHeader = req.headers.get("Authorization");
-      let rawToken = authHeader?.replace("Bearer ", "") || url.searchParams.get("token");
-      if (!rawToken) {
-        const cookieHeader = req.headers.get("Cookie");
-        if (cookieHeader) {
-          const match2 = cookieHeader.match(/arc_token=([^;]+)/);
-          if (match2)
-            rawToken = decodeURIComponent(match2[1]);
+      const handleRequest = async (span) => {
+        const authHeader = req.headers.get("Authorization");
+        let rawToken = authHeader?.replace("Bearer ", "") || url.searchParams.get("token");
+        if (!rawToken) {
+          const cookieHeader = req.headers.get("Cookie");
+          if (cookieHeader) {
+            const match2 = cookieHeader.match(/arc_token=([^;]+)/);
+            if (match2)
+              rawToken = decodeURIComponent(match2[1]);
+          }
         }
-      }
-      const tokenPayload = rawToken ? verifyToken(rawToken) : null;
-      if (url.pathname === "/ws" && req.headers.get("Upgrade") === "websocket") {
-        if (server2.upgrade(req, { data: { clientId: "" } }))
-          return;
-        return new Response("WebSocket upgrade failed", {
-          status: 500,
-          headers: corsHeaders2
-        });
-      }
-      const reqCtx = {
-        rawToken,
-        tokenPayload,
-        corsHeaders: corsHeaders2
+        const tokenPayload = rawToken ? verifyToken(rawToken) : null;
+        if (url.pathname === "/ws" && req.headers.get("Upgrade") === "websocket") {
+          if (server2.upgrade(req, { data: { clientId: "" } }))
+            return;
+          return new Response("WebSocket upgrade failed", {
+            status: 500,
+            headers: corsHeaders2
+          });
+        }
+        const reqCtx = { rawToken, tokenPayload, corsHeaders: corsHeaders2 };
+        for (const handler of httpHandlers) {
+          const response = await handler(req, url, reqCtx);
+          if (response) {
+            span?.setAttribute("http.response.status_code", response.status);
+            return response;
+          }
+        }
+        span?.setAttribute("http.response.status_code", 404);
+        return new Response("Not Found", { status: 404, headers: corsHeaders2 });
       };
-      for (const handler of httpHandlers) {
-        const response = await handler(req, url, reqCtx);
-        if (response)
-          return response;
-      }
-      return new Response("Not Found", {
-        status: 404,
-        headers: corsHeaders2
-      });
+      const telemetry = config.telemetry;
+      if (!telemetry)
+        return handleRequest(undefined);
+      return telemetry.runWithExtractedContext(req.headers, () => telemetry.startSpan(`${req.method} ${url.pathname}`, (span) => handleRequest(span), {
+        kind: 2,
+        attributes: {
+          "http.request.method": req.method,
+          "http.route": url.pathname,
+          "url.scheme": url.protocol.replace(":", ""),
+          "url.path": url.pathname,
+          "server.address": url.host,
+          "user_agent.original": req.headers.get("user-agent") ?? undefined
+        }
+      }));
     },
     websocket: {
       open(ws) {
@@ -38913,16 +40294,43 @@ async function createArcServer(config) {
         const client = connectionManager.getClientByWs(ws);
         if (!client)
           return;
+        let message;
         try {
-          const message = JSON.parse(messageStr);
-          for (const handler of wsHandlers) {
-            const handled = await handler(client, message, wsCtx);
-            if (handled)
-              break;
-          }
+          message = JSON.parse(messageStr);
         } catch (error) {
           console.error("Failed to parse WS message:", error);
+          return;
+        }
+        const dispatch = async () => {
+          try {
+            for (const handler of wsHandlers) {
+              const handled = await handler(client, message, wsCtx);
+              if (handled)
+                break;
+            }
+          } catch (error) {
+            console.error("WS handler error:", error);
+          }
+        };
+        const telemetry = config.telemetry;
+        if (!telemetry) {
+          await dispatch();
+          return;
         }
+        const carrier = {};
+        if (typeof message?.traceparent === "string")
+          carrier.traceparent = message.traceparent;
+        if (typeof message?.tracestate === "string")
+          carrier.tracestate = message.tracestate;
+        await telemetry.runWithExtractedContext(carrier, () => telemetry.startSpan(`ws.${message?.type ?? "message"}`, () => dispatch(), {
+          kind: 2,
+          attributes: {
+            "messaging.system": "arc-ws",
+            "messaging.operation": "process",
+            "messaging.message.type": message?.type,
+            "arc.ws.client_id": client.id
+          }
+        }));
       },
       close(ws) {
         const client = connectionManager.getClientByWs(ws);
@@ -38964,6 +40372,15 @@ async function resolveDbAdapterFactory(dbPath) {
   return createBunSQLiteAdapterFactory2(dbPath);
 }
 function generateShellHtml(appName, manifest, initial, stylesHash) {
+  const otelConfig = process.env.ARC_OTEL_ENABLED === "true" ? {
+    enabled: true,
+    endpoint: "/otel",
+    serviceName: process.env.OTEL_SERVICE_NAME ?? `${appName}-browser`,
+    environment: "development",
+    sampleRate: Number(process.env.ARC_OTEL_BROWSER_SAMPLE_RATE ?? "0.1")
+  } : null;
+  const otelTag = otelConfig ? `
+  <script>window.__ARC_OTEL_CONFIG=${JSON.stringify(otelConfig)};</script>` : "";
   const initialUrl = initial ? `/browser/${initial.file}` : null;
   if (!initialUrl) {
     throw new Error("generateShellHtml: initial bundle missing from manifest");
@@ -38979,7 +40396,7 @@ function generateShellHtml(appName, manifest, initial, stylesHash) {
   <link rel="manifest" href="/manifest.json">` : ""}
   <link rel="stylesheet" href="/styles.css${stylesQs}" />
   <link rel="stylesheet" href="/theme.css${stylesQs}" />
-  <link rel="modulepreload" href="${initialUrl}" />
+  <link rel="modulepreload" href="${initialUrl}" />${otelTag}
 </head>
 <body>
   <div id="root"></div>
@@ -39227,8 +40644,27 @@ function spaFallbackHandler(getShellHtml) {
   };
 }
 async function startPlatformServer(opts) {
-  const { ws, port, devMode, context } = opts;
+  const { ws, port, devMode, context: context2 } = opts;
   ensureModuleSigSecret(ws, !!devMode);
+  let telemetry;
+  let telemetryShutdown;
+  if (process.env.ARC_OTEL_ENABLED === "true") {
+    try {
+      const { initServerTelemetry: initServerTelemetry2 } = await Promise.resolve().then(() => (init_init_server(), exports_init_server));
+      const init2 = initServerTelemetry2({
+        serviceName: process.env.OTEL_SERVICE_NAME ?? ws.appName,
+        environment: "server",
+        endpoint: process.env.OTEL_EXPORTER_OTLP_ENDPOINT,
+        mode: devMode ? "development" : "production",
+        sampleRate: devMode ? 1 : 1
+      });
+      telemetry = init2.telemetry;
+      telemetryShutdown = init2.shutdown;
+      ok("Telemetry enabled \u2014 exporting to " + process.env.OTEL_EXPORTER_OTLP_ENDPOINT);
+    } catch (e2) {
+      err(`Failed to init telemetry: ${e2.message}`);
+    }
+  }
   const moduleAccessMap = opts.moduleAccess ?? new Map;
   let manifest = opts.manifest;
   const getManifest = () => manifest;
@@ -39249,7 +40685,7 @@ async function startPlatformServer(opts) {
       }
     }
   };
-  if (!context) {
+  if (!context2) {
     const cors = {
       "Access-Control-Allow-Origin": "*",
       "Access-Control-Allow-Methods": "GET, POST, PUT, DELETE, PATCH, OPTIONS",
@@ -39293,9 +40729,18 @@ async function startPlatformServer(opts) {
     };
   }
   const dbPath = opts.dbPath || join20(ws.arcDir, "data", "arc.db");
-  const dbAdapterFactory = await resolveDbAdapterFactory(dbPath);
+  const baseDbFactory = await resolveDbAdapterFactory(dbPath);
+  let dbAdapterFactory = baseDbFactory;
+  if (telemetry) {
+    const { wrapDbAdapter: wrapDbAdapter2 } = await Promise.resolve().then(() => (init_init_server(), exports_init_server));
+    const dbSystem = process.env.DATABASE_URL ? "postgresql" : "sqlite";
+    dbAdapterFactory = async (ctx) => {
+      const a2 = await baseDbFactory(ctx);
+      return wrapDbAdapter2(a2, telemetry, dbSystem);
+    };
+  }
   const arcServer = await createArcServer({
-    context,
+    context: context2,
     dbAdapterFactory,
     port,
     httpHandlers: [
@@ -39304,7 +40749,8 @@ async function startPlatformServer(opts) {
       staticFilesHandler(ws, !!devMode, getManifest),
       spaFallbackHandler(getShellHtml)
     ],
-    onWsClose: (clientId) => cleanupClientSubs(clientId)
+    onWsClose: (clientId) => cleanupClientSubs(clientId),
+    telemetry
   });
   return {
     server: arcServer.server,
@@ -39312,7 +40758,10 @@ async function startPlatformServer(opts) {
     connectionManager: arcServer.connectionManager,
     setManifest,
     notifyReload,
-    stop: () => arcServer.stop()
+    stop: () => {
+      arcServer.stop();
+      telemetryShutdown?.();
+    }
   };
 }
 
@@ -39333,8 +40782,8 @@ async function startPlatform(opts) {
     manifest = JSON.parse(readFileSync15(manifestPath, "utf-8"));
   }
   log2("Loading server context...");
-  const { context, moduleAccess } = await loadServerContext(ws);
-  if (context) {
+  const { context: context2, moduleAccess } = await loadServerContext(ws);
+  if (context2) {
     ok("Context loaded");
   } else {
     log2("No context \u2014 server endpoints skipped");
@@ -39343,7 +40792,7 @@ async function startPlatform(opts) {
     ws,
     port,
     manifest,
-    context,
+    context: context2,
     moduleAccess,
     dbPath,
     devMode