@bedrock-rbx/core 0.1.0-beta.12 → 0.1.0-beta.13

package/dist/{migrate-mantle-state-Dkk5zGHw.mjs → migrate-mantle-state-CQjWBZwT.mjs}

@@ -144,6 +144,7 @@ function deployErrorMessage(err) {
 		case "applyFailed": return `apply failed for '${err.cause.key}': ${applyCauseDetail(err.cause)}`;
 		case "buildDesiredFailed": return `build desired state failed for '${err.cause.key}' ${buildDesiredDetail(err.cause)}`;
 		case "configLoadFailed": return `config load failed: ${configErrorDetail(err.cause)}`;
+		case "incompletePassEntry": return `pass '${err.key}' is missing '${err.missingField}' under environment '${err.environment}'`;
 		case "incompletePlaceEntry": return `place '${err.key}' is missing '${err.missingField}' under environment '${err.environment}'`;
 		case "incompleteUniverseEntry": return `universe is missing '${err.missingField}' under environment '${err.environment}'`;
 		case "missingCredential": return `missing credential: environment variable ${err.variable} is not set`;
@@ -454,17 +455,255 @@ async function sha256Hex(bytes) {
 	return Array.from(new Uint8Array(buffer), (byte) => byte.toString(16).padStart(2, "0")).join("");
 }
 //#endregion
+//#region src/core/redacted-icon.ts
+const REDACTED_ICON_BYTES = new Uint8Array([
+	137,
+	80,
+	78,
+	71,
+	13,
+	10,
+	26,
+	10,
+	0,
+	0,
+	0,
+	13,
+	73,
+	72,
+	68,
+	82,
+	0,
+	0,
+	0,
+	64,
+	0,
+	0,
+	0,
+	64,
+	8,
+	0,
+	0,
+	0,
+	0,
+	143,
+	2,
+	46,
+	2,
+	0,
+	0,
+	0,
+	137,
+	73,
+	68,
+	65,
+	84,
+	120,
+	156,
+	237,
+	86,
+	209,
+	14,
+	128,
+	32,
+	8,
+	244,
+	83,
+	252,
+	148,
+	254,
+	255,
+	167,
+	174,
+	37,
+	98,
+	130,
+	189,
+	20,
+	110,
+	57,
+	119,
+	108,
+	26,
+	194,
+	188,
+	64,
+	15,
+	42,
+	229,
+	160,
+	164,
+	13,
+	0,
+	142,
+	160,
+	44,
+	144,
+	2,
+	1,
+	200,
+	3,
+	242,
+	96,
+	82,
+	45,
+	176,
+	31,
+	176,
+	161,
+	244,
+	60,
+	0,
+	0,
+	153,
+	81,
+	245,
+	235,
+	161,
+	142,
+	219,
+	222,
+	188,
+	254,
+	187,
+	128,
+	50,
+	224,
+	116,
+	181,
+	168,
+	205,
+	106,
+	134,
+	202,
+	113,
+	0,
+	0,
+	109,
+	150,
+	173,
+	101,
+	97,
+	0,
+	58,
+	239,
+	67,
+	4,
+	254,
+	29,
+	239,
+	83,
+	168,
+	232,
+	177,
+	51,
+	144,
+	176,
+	251,
+	80,
+	101,
+	209,
+	82,
+	80,
+	239,
+	0,
+	240,
+	85,
+	216,
+	15,
+	216,
+	15,
+	200,
+	131,
+	89,
+	197,
+	180,
+	1,
+	0,
+	255,
+	15,
+	86,
+	184,
+	5,
+	2,
+	228,
+	255,
+	207,
+	224,
+	4,
+	233,
+	243,
+	166,
+	219,
+	234,
+	149,
+	21,
+	116,
+	0,
+	0,
+	0,
+	0,
+	73,
+	69,
+	78,
+	68,
+	174,
+	66,
+	96,
+	130
+]);
+/**
+* Sentinel path written into a resource's `icon["en-us"]` field when
+* redaction substitutes the bedrock-supplied placeholder image. Callers
+* route this path through {@link withRedactedIcon} or through the
+* `readBytes` short-circuit; neither touches the filesystem.
+*/
+const REDACTED_ICON_PATH = "<bedrock:redacted-icon.png>";
+/**
+* `true` when `path` is the redacted-icon sentinel. `readBytes` and
+* {@link withRedactedIcon} both use this predicate to decide whether to
+* bypass the injected file reader.
+*
+* @param path - Icon path supplied by a flattened or normalized resource entry.
+* @returns `true` for {@link REDACTED_ICON_PATH}; otherwise `false`.
+*/
+function isRedactedIconPath(path) {
+	return path === REDACTED_ICON_PATH;
+}
+/**
+* Wrap a `readFile` so the sentinel resolves to {@link REDACTED_ICON_BYTES}
+* without touching the inner reader. Applied once at the shell deploy /
+* preview boundary; the wrapped reader flows to every consumer (normalize,
+* registry drivers) unchanged.
+*
+* @param readFile - Inner reader that handles every non-sentinel path.
+* @returns Sentinel-aware reader with the same callable shape as `readFile`.
+*/
+function withRedactedIcon(readFile) {
+	return async (path) => {
+		if (isRedactedIconPath(path)) return new Uint8Array(REDACTED_ICON_BYTES);
+		return readFile(path);
+	};
+}
+//#endregion
 //#region src/core/kinds/read-bytes.ts
 /**
 * Read file bytes via the injected reader, translating rejections into a
 * `fileReadFailed` `BuildDesiredError`. Shared by kind modules whose
-* pre-I/O normalization hashes a file the user declared by path.
+* pre-I/O normalization hashes a file the user declared by path. The
+* redacted-icon sentinel short-circuits to the embedded placeholder
+* bytes without invoking the injected reader, so a redaction-substituted
+* icon path produces a deterministic hash on every deploy.
 *
 * @param target - Path to read plus the resource key blamed on failure.
 * @param io - I/O surface carrying the injected `readFile` function.
 * @returns `Ok` with the bytes, or `Err` with a `fileReadFailed` error.
 */
 async function readBytes(target, io) {
+	if (isRedactedIconPath(target.filePath)) return {
+		data: new Uint8Array(REDACTED_ICON_BYTES),
+		success: true
+	};
 	try {
 		return {
 			data: await io.readFile(target.filePath),
@@ -696,12 +935,16 @@ function planFollowUpPatch(desired, createResponse) {
 * ```
 */
 function createDeveloperProductDriver(deps) {
+	const effective = {
+		...deps,
+		readFile: withRedactedIcon(deps.readFile)
+	};
 	return {
 		async create(desired) {
-			return createOne(deps, desired);
+			return createOne(effective, desired);
 		},
 		async update(current, desired) {
-			return updateOne(deps, {
+			return updateOne(effective, {
 				current,
 				desired
 			});
@@ -853,12 +1096,16 @@ async function updateOne(deps, { current, desired }) {
 * ```
 */
 function createGamePassDriver(deps) {
+	const effective = {
+		...deps,
+		readFile: withRedactedIcon(deps.readFile)
+	};
 	return {
 		async create(desired) {
-			return createGamePass(deps, desired);
+			return createGamePass(effective, desired);
 		},
 		async update(current, desired) {
-			return updateGamePass(deps, {
+			return updateGamePass(effective, {
 				current,
 				desired
 			});
@@ -1891,6 +2138,8 @@ function isGistStateConfig(config) {
 }
 const OPTIONAL_BOOLEAN$2 = "boolean | undefined";
 const OPTIONAL_STRING = "string | undefined";
+const REDACTED_KEY = "redacted?";
+const NON_EMPTY_OVERRIDE_MESSAGE = "a non-empty override object; use `redacted: true` for default placeholders";
 /**
 * Shared arktype constraint for any optional positive-integer field.
 * Reused by per-kind entry schemas so positive-integer fields validate
@@ -1907,11 +2156,35 @@ const OPTIONAL_POSITIVE_INTEGER = "(number.integer >= 1) | undefined";
 * identically.
 */
 const OPTIONAL_ROBUX_PRICE = "number.integer >= 0 | undefined";
+const gamePassRedacted = type({
+	"description?": "string",
+	"icon?": iconMap,
+	"name?": "string"
+}).onUndeclaredKey("reject").narrow((value, ctx) => {
+	if (Object.keys(value).length === 0) return ctx.mustBe(NON_EMPTY_OVERRIDE_MESSAGE);
+	return true;
+}).or(OPTIONAL_BOOLEAN$2);
+const placeRedacted = type({
+	"description?": "string",
+	"displayName?": "string"
+}).onUndeclaredKey("reject").narrow((value, ctx) => {
+	if (Object.keys(value).length === 0) return ctx.mustBe(NON_EMPTY_OVERRIDE_MESSAGE);
+	return true;
+}).or(OPTIONAL_BOOLEAN$2);
+const productRedacted = type({
+	"description?": "string",
+	"icon?": iconMap,
+	"name?": "string"
+}).onUndeclaredKey("reject").narrow((value, ctx) => {
+	if (Object.keys(value).length === 0) return ctx.mustBe(NON_EMPTY_OVERRIDE_MESSAGE);
+	return true;
+}).or(OPTIONAL_BOOLEAN$2);
 const gamePassEntry = type({
 	"name": "string",
 	"description": "string",
 	"icon": iconMap,
-	"price?": OPTIONAL_ROBUX_PRICE
+	"price?": OPTIONAL_ROBUX_PRICE,
+	[REDACTED_KEY]: gamePassRedacted
 });
 const passesCollection = type({ [`[/${RESOURCE_KEY_PATTERN_SOURCE}/]`]: gamePassEntry }).onUndeclaredKey("reject");
 const developerProductEntry = type({
@@ -1920,6 +2193,7 @@ const developerProductEntry = type({
 	"icon?": iconMap,
 	"isRegionalPricingEnabled?": OPTIONAL_BOOLEAN$2,
 	"price?": OPTIONAL_ROBUX_PRICE,
+	[REDACTED_KEY]: productRedacted,
 	"storePageEnabled?": OPTIONAL_BOOLEAN$2
 }).onUndeclaredKey("reject");
 const productsCollection = type({ [`[/${RESOURCE_KEY_PATTERN_SOURCE}/]`]: developerProductEntry }).onUndeclaredKey("reject");
@@ -1928,6 +2202,7 @@ const placeEntry = type({
 	"description?": OPTIONAL_STRING,
 	"displayName?": OPTIONAL_STRING,
 	"filePath": "string",
+	[REDACTED_KEY]: placeRedacted,
 	"serverSize?": OPTIONAL_POSITIVE_INTEGER
 }).onUndeclaredKey("reject");
 const placesCollection = type({ [`[/${RESOURCE_KEY_PATTERN_SOURCE}/]`]: placeEntry }).onUndeclaredKey("reject");
@@ -1961,7 +2236,8 @@ const gamePassOverlay = type({
 	"description?": "string",
 	"icon?": iconMap,
 	"name?": "string",
-	"price?": OPTIONAL_ROBUX_PRICE
+	"price?": OPTIONAL_ROBUX_PRICE,
+	[REDACTED_KEY]: OPTIONAL_BOOLEAN$2
 }).onUndeclaredKey("reject");
 const passesOverlayCollection = type({ [`[/${RESOURCE_KEY_PATTERN_SOURCE}/]`]: gamePassOverlay }).onUndeclaredKey("reject");
 const developerProductOverlay = type({
@@ -1970,6 +2246,7 @@ const developerProductOverlay = type({
 	"isRegionalPricingEnabled?": OPTIONAL_BOOLEAN$2,
 	"name?": "string",
 	"price?": OPTIONAL_ROBUX_PRICE,
+	[REDACTED_KEY]: OPTIONAL_BOOLEAN$2,
 	"storePageEnabled?": OPTIONAL_BOOLEAN$2
 }).onUndeclaredKey("reject");
 const productsOverlayCollection = type({ [`[/${RESOURCE_KEY_PATTERN_SOURCE}/]`]: developerProductOverlay }).onUndeclaredKey("reject");
@@ -1978,15 +2255,19 @@ const placeOverlay = type({
 	"displayName?": OPTIONAL_STRING,
 	"filePath?": "string",
 	"placeId": ROBLOX_ID_DIGITS,
+	[REDACTED_KEY]: OPTIONAL_BOOLEAN$2,
 	"serverSize?": OPTIONAL_POSITIVE_INTEGER
 }).onUndeclaredKey("reject");
+const placesOverlayCollection = type({ [`[/${RESOURCE_KEY_PATTERN_SOURCE}/]`]: placeOverlay }).onUndeclaredKey("reject");
+const universeOverlay = universeEntry;
 const environmentEntry = type({
 	"label?": OPTIONAL_STRING,
 	"passes?": passesOverlayCollection,
-	"places?": type({ [`[/${RESOURCE_KEY_PATTERN_SOURCE}/]`]: placeOverlay }).onUndeclaredKey("reject"),
+	"places?": placesOverlayCollection,
 	"products?": productsOverlayCollection,
+	[REDACTED_KEY]: OPTIONAL_BOOLEAN$2,
 	"state?": stateConfig,
-	"universe?": universeEntry
+	"universe?": universeOverlay
 }).onUndeclaredKey("reject");
 const rootSchema = type({
 	"displayNamePrefix?": type({
@@ -2083,6 +2364,7 @@ const entrySchema$3 = type({
 	"icon?": iconMap,
 	"isRegionalPricingEnabled?": OPTIONAL_BOOLEAN$1,
 	"price?": OPTIONAL_ROBUX_PRICE,
+	"redacted?": "boolean | undefined",
 	"storePageEnabled?": OPTIONAL_BOOLEAN$1
 });
 function flatten$3(config) {
@@ -2166,7 +2448,8 @@ const entrySchema$2 = type({
 	"name": "string",
 	"description": "string",
 	"icon": iconMap,
-	"price?": OPTIONAL_ROBUX_PRICE
+	"price?": OPTIONAL_ROBUX_PRICE,
+	"redacted?": "boolean | undefined"
 });
 function flatten$2(config) {
 	return Object.entries(config.passes ?? {}).map(([key, entry]) => {
@@ -2647,9 +2930,172 @@ function resolveStateConfig(config, environment) {
 		success: false
 	};
 }
+/**
+* Pure transform that substitutes bedrock-supplied placeholder content for
+* every resource whose effective `redacted` flag is truthy. The effective
+* flag is the per-resource `redacted` value when set, otherwise the
+* `environmentRedacted` fallback. A `redacted` object form replaces
+* matching fields with the supplied values and falls back to the bedrock
+* defaults for the rest. Runs between env-overlay merge and display-name
+* prefix render so the rest of the pipeline (flatten, normalize, diff,
+* apply) operates on already-redacted values and needs no special-case
+* redaction logic.
+*
+* @param config - Post-merge `ResolvedConfig` produced by `selectEnvironment`.
+* @param environmentRedacted - Environment-level redaction toggle. Resources
+*   that omit a per-resource `redacted` flag inherit this value.
+* @returns A `ResolvedConfig` whose redacted entries carry placeholder
+*   values; non-redacted entries pass through verbatim, and the input is
+*   not mutated.
+*/
+function applyRedaction(config, environmentRedacted = false) {
+	const passes = redactPasses(config.passes, environmentRedacted);
+	const places = redactPlaces(config.places, environmentRedacted);
+	const products = redactProducts(config.products, environmentRedacted);
+	if (passes === config.passes && places === config.places && products === config.products) return config;
+	return {
+		...config,
+		...passes === void 0 ? {} : { passes },
+		...places === void 0 ? {} : { places },
+		...products === void 0 ? {} : { products }
+	};
+}
+/**
+* Inspect the pre-redaction merged config and produce one annotation per
+* resource flagged `redacted: true`. Callers thread the result into plan
+* output so authors can see which resources are redacted in the active
+* environment and whether their real-value edits are being suppressed.
+*
+* Operates on the pre-redaction view because the post-redaction config no
+* longer carries the real `name`/`description`/`icon` values needed to
+* detect divergence from the placeholder defaults.
+*
+* @param merged - `ResolvedConfig` produced by environment overlay merge,
+*   before `applyRedaction` has substituted placeholders.
+* @returns Zero or more annotations, one per redacted resource. Empty when
+*   the config declares no redacted resources.
+*/
+function collectRedactionAnnotations(merged) {
+	const passes = Object.entries(merged.passes ?? {}).filter(([, entry]) => entry.redacted === true).map(([key, entry]) => {
+		return {
+			key: asResourceKey(key),
+			hasRealValueEdits: passHasRealValueEdits(entry),
+			kind: "gamePass"
+		};
+	});
+	const products = Object.entries(merged.products ?? {}).filter(([, entry]) => entry.redacted === true).map(([key, entry]) => {
+		return {
+			key: asResourceKey(key),
+			hasRealValueEdits: productHasRealValueEdits(entry),
+			kind: "developerProduct"
+		};
+	});
+	return [...passes, ...products];
+}
+function redactPass(entry, override) {
+	return {
+		...entry,
+		name: override.name ?? "Redacted Pass",
+		description: override.description ?? "",
+		icon: override.icon ?? { "en-us": "<bedrock:redacted-icon.png>" }
+	};
+}
+function redactPasses(passes, environmentRedacted) {
+	if (passes === void 0) return;
+	if (!Object.values(passes).some((entry) => (entry.redacted ?? environmentRedacted) !== false)) return passes;
+	return Object.fromEntries(Object.entries(passes).map(([key, entry]) => {
+		const effective = entry.redacted ?? environmentRedacted;
+		if (effective === false) return [key, entry];
+		return [key, redactPass(entry, typeof effective === "object" ? effective : {})];
+	}));
+}
+function redactPlace(entry, override) {
+	return {
+		...entry,
+		description: override.description ?? "",
+		displayName: override.displayName ?? entry.displayName
+	};
+}
+function redactPlaces(places, environmentRedacted) {
+	if (places === void 0) return;
+	if (!Object.values(places).some((entry) => (entry.redacted ?? environmentRedacted) !== false)) return places;
+	return Object.fromEntries(Object.entries(places).map(([key, entry]) => {
+		const effective = entry.redacted ?? environmentRedacted;
+		if (effective === false) return [key, entry];
+		return [key, redactPlace(entry, typeof effective === "object" ? effective : {})];
+	}));
+}
+function redactProduct(entry, override) {
+	return {
+		...entry,
+		name: override.name ?? "Redacted Product",
+		description: override.description ?? "",
+		icon: override.icon ?? { "en-us": "<bedrock:redacted-icon.png>" }
+	};
+}
+function redactProducts(products, environmentRedacted) {
+	if (products === void 0) return;
+	if (!Object.values(products).some((entry) => (entry.redacted ?? environmentRedacted) !== false)) return products;
+	return Object.fromEntries(Object.entries(products).map(([key, entry]) => {
+		const effective = entry.redacted ?? environmentRedacted;
+		if (effective === false) return [key, entry];
+		return [key, redactProduct(entry, typeof effective === "object" ? effective : {})];
+	}));
+}
+function passHasRealValueEdits(entry) {
+	return entry.name !== "Redacted Pass" || entry.description !== "" || entry.icon["en-us"] !== "<bedrock:redacted-icon.png>";
+}
+function productHasRealValueEdits(entry) {
+	return entry.name !== "Redacted Product" || entry.description !== "" || entry.icon !== void 0 && entry.icon["en-us"] !== "<bedrock:redacted-icon.png>";
+}
 //#endregion
 //#region src/core/select-environment.ts
 /**
+* Project a `Config` onto a single environment up to the pre-redaction
+* merge boundary. Looks up the env entry, deep-merges its resource overlay
+* over the root config, and runs the same pass, place, and universe
+* completeness checks {@link selectEnvironment} runs, so the returned
+* `merged` config honours the full `ResolvedConfig` contract. Real
+* `name`, `description`, and `icon` values on redacted resources stay
+* intact, letting callers inspect divergence from placeholder defaults
+* before {@link selectEnvironment} substitutes them.
+*
+* @param config - Validated project config.
+* @param environment - Environment name to project onto.
+* @returns The matched env entry plus the merged config, or any of the
+*   `SelectEnvironmentError` failure modes.
+*/
+function selectMergedEnvironment(config, environment) {
+	const entry = config.environments[environment];
+	if (entry === void 0) return {
+		err: unknownEnvironment(config, environment),
+		success: false
+	};
+	const merged = mergeOverlays(config, entry);
+	const incompletePass = findIncompletePass(merged, environment);
+	if (incompletePass !== void 0) return {
+		err: incompletePass,
+		success: false
+	};
+	const incompletePlace = findIncompletePlace(merged, environment);
+	if (incompletePlace !== void 0) return {
+		err: incompletePlace,
+		success: false
+	};
+	const incompleteUniverse = findIncompleteUniverse(merged, environment);
+	if (incompleteUniverse !== void 0) return {
+		err: incompleteUniverse,
+		success: false
+	};
+	return {
+		data: {
+			entry,
+			merged
+		},
+		success: true
+	};
+}
+/**
 * Project a validated `Config` onto a single environment. Looks up the
 * matching `environments[environment]` entry, deep-merges its resource
 * overlay (`passes`, `places`, `universe`) over the root config via defu,
@@ -2727,28 +3173,80 @@ function resolveStateConfig(config, environment) {
 * projection failed.
 */
 function selectEnvironment(config, environment) {
-	const entry = config.environments[environment];
-	if (entry === void 0) return {
-		err: unknownEnvironment(config, environment),
-		success: false
+	const mergedResult = selectMergedEnvironment(config, environment);
+	if (!mergedResult.success) return mergedResult;
+	const { entry, merged } = mergedResult.data;
+	return {
+		data: redactAndPrefix({
+			config,
+			entry,
+			merged
+		}),
+		success: true
 	};
-	const projected = projectConfig({
-		config,
-		entry
-	});
-	const incompletePlace = findIncompletePlace(projected, environment);
-	if (incompletePlace !== void 0) return {
-		err: incompletePlace,
-		success: false
+}
+function findIncompletePass(merged, environment) {
+	const { passes } = merged;
+	if (passes === void 0) return;
+	const candidates = passes;
+	for (const [key, entry] of Object.entries(candidates)) {
+		if (entry.name === void 0) return {
+			key,
+			environment,
+			kind: "incompletePassEntry",
+			missingField: "name"
+		};
+		if (entry.description === void 0) return {
+			key,
+			environment,
+			kind: "incompletePassEntry",
+			missingField: "description"
+		};
+		if (entry.icon === void 0) return {
+			key,
+			environment,
+			kind: "incompletePassEntry",
+			missingField: "icon"
+		};
+	}
+}
+function mergeEntry(overlay, base) {
+	return defu(overlay, base ?? {});
+}
+function mergeKeyedRecord(overlay, base) {
+	if (overlay === void 0) return base;
+	return {
+		...base ?? {},
+		...Object.fromEntries(Object.entries(overlay).map(([key, partial]) => {
+			return [key, mergeEntry(partial, base?.[key])];
+		}))
 	};
-	const incompleteUniverse = findIncompleteUniverse(projected, environment);
-	if (incompleteUniverse !== void 0) return {
-		err: incompleteUniverse,
-		success: false
+}
+function mergeUniverse(overlay, base) {
+	if (overlay === void 0 && base === void 0) return;
+	return defu(overlay ?? {}, base ?? {});
+}
+function mergeOverlays(config, entry) {
+	const passes = mergeKeyedRecord(entry.passes, config.passes);
+	const places = mergeKeyedRecord(entry.places, config.places);
+	const products = mergeKeyedRecord(entry.products, config.products);
+	const universe = mergeUniverse(entry.universe, config.universe);
+	const state = entry.state ?? config.state;
+	const { places: _placesRoot, products: _productsRoot, universe: _universeRoot, ...rest } = config;
+	return {
+		...rest,
+		...passes === void 0 ? {} : { passes },
+		...places === void 0 ? {} : { places },
+		...products === void 0 ? {} : { products },
+		...state === void 0 ? {} : { state },
+		...universe === void 0 ? {} : { universe }
 	};
+}
+function unknownEnvironment(config, environment) {
 	return {
-		data: projected,
-		success: true
+		declared: Object.keys(config.environments),
+		environment,
+		kind: "unknownEnvironment"
 	};
 }
 function findIncompleteUniverse(projected, environment) {
@@ -2779,22 +3277,6 @@ function findIncompletePlace(projected, environment) {
 		};
 	}
 }
-function mergeEntry(overlay, base) {
-	return defu(overlay, base ?? {});
-}
-function mergeKeyedRecord(overlay, base) {
-	if (overlay === void 0) return base;
-	return {
-		...base ?? {},
-		...Object.fromEntries(Object.entries(overlay).map(([key, partial]) => {
-			return [key, mergeEntry(partial, base?.[key])];
-		}))
-	};
-}
-function mergeUniverse(overlay, base) {
-	if (overlay === void 0 && base === void 0) return;
-	return defu(overlay ?? {}, base ?? {});
-}
 function resolvePrefix(config, entry) {
 	if (config.displayNamePrefix?.enabled === false) return;
 	const { label } = entry;
@@ -2818,33 +3300,18 @@ function applyPlacesPrefix(places, prefix) {
 		}];
 	}));
 }
-function projectConfig(inputs) {
-	const { config, entry } = inputs;
-	const passes = mergeKeyedRecord(entry.passes, config.passes);
-	const mergedPlaces = mergeKeyedRecord(entry.places, config.places);
-	const products = mergeKeyedRecord(entry.products, config.products);
-	const merged = mergeUniverse(entry.universe, config.universe);
+function redactAndPrefix(inputs) {
+	const { config, entry, merged } = inputs;
+	const redacted = applyRedaction(merged, entry.redacted);
 	const prefix = resolvePrefix(config, entry);
-	const universe = applyUniversePrefix(merged, prefix);
-	const places = applyPlacesPrefix(mergedPlaces, prefix);
-	const state = entry.state ?? config.state;
-	const { places: _placesRoot, products: _productsRoot, universe: _universeRoot, ...rest } = config;
+	const places = applyPlacesPrefix(redacted.places, prefix);
+	const universe = applyUniversePrefix(redacted.universe, prefix);
 	return {
-		...rest,
-		...passes === void 0 ? {} : { passes },
+		...redacted,
 		...places === void 0 ? {} : { places },
-		...products === void 0 ? {} : { products },
-		...state === void 0 ? {} : { state },
 		...universe === void 0 ? {} : { universe }
 	};
 }
-function unknownEnvironment(config, environment) {
-	return {
-		declared: Object.keys(config.environments),
-		environment,
-		kind: "unknownEnvironment"
-	};
-}
 //#endregion
 //#region src/core/validate-plan.ts
 /**
@@ -4462,6 +4929,14 @@ function buildRootPasses(primaryFold) {
 	if (primaryFold.passes.length === 0) return;
 	return Object.fromEntries(primaryFold.passes.map(({ key, entry }) => [key, entry]));
 }
+function buildFullPassOverlay(entry) {
+	return {
+		name: entry.name,
+		description: entry.description,
+		icon: entry.icon,
+		...entry.price !== void 0 && { price: entry.price }
+	};
+}
 function buildPassOverlayEntry(entry, primary) {
 	const overlay = {};
 	if (!Object.is(primary.name, entry.name)) overlay.name = entry.name;
@@ -4475,7 +4950,7 @@ function buildPassesOverlay(fold, primary) {
 	const overlay = {};
 	for (const { key, entry } of fold.passes) {
 		const primaryEntry = primaryByKey.get(key);
-		const passOverlay = primaryEntry === void 0 ? { ...entry } : buildPassOverlayEntry(entry, primaryEntry);
+		const passOverlay = primaryEntry === void 0 ? buildFullPassOverlay(entry) : buildPassOverlayEntry(entry, primaryEntry);
 		if (passOverlay !== void 0) overlay[key] = passOverlay;
 	}
 	return Object.keys(overlay).length === 0 ? void 0 : overlay;
@@ -6038,6 +6513,6 @@ function isFileMissing(err) {
 	return typeof err === "object" && err !== null && "code" in err && typeof err.code === "string" && FILE_MISSING_CODES.has(err.code);
 }
 //#endregion
-export { shouldReuploadIcon as A, renderDeployError as B, UNIVERSE_SINGLETON_KEY as C, validateEnvironmentName as D, serializeStateFile as E, isRobloxAssetId as F, renderStateWriteError as G, renderMigrateParseError as H, isSha256Hex as I, derivePriceFields as L, asRobloxAssetId as M, asSha256Hex as N, createGamePassDriver as O, isResourceKey as P, createClackProgressAdapter as R, SOCIAL_LINK_FIELDS as S, parseStateFile as T, renderMigrationSummary as U, renderMigrateError as V, renderParseError as W, isGistStateConfig as _, buildStatePort as a, createUniverseDriver as b, applyOps as c, resolveStateConfig as d, flattenConfig as f, defaultKindRegistry as g, diff as h, loadConfig$1 as i, asResourceKey as j, createDeveloperProductDriver as k, validatePlan as l, renderDisplayNamePrefix as m, serializeConfig as n, buildDesired as o, DEFAULT_PREFIX_FORMAT as p, deploy as r, buildDefaultRegistry as s, migrateMantleState as t, selectEnvironment as u, validateConfig as v, createGistStateAdapter as w, createPlaceDriver as x, createClackPort as y, renderBuildStatePortError as z };
+export { createGamePassDriver as A, createClackProgressAdapter as B, createPlaceDriver as C, parseStateFile as D, createGistStateAdapter as E, asSha256Hex as F, renderMigrationSummary as G, renderDeployError as H, isResourceKey as I, renderParseError as K, isRobloxAssetId as L, shouldReuploadIcon as M, asResourceKey as N, serializeStateFile as O, asRobloxAssetId as P, isSha256Hex as R, createUniverseDriver as S, UNIVERSE_SINGLETON_KEY as T, renderMigrateError as U, renderBuildStatePortError as V, renderMigrateParseError as W, diff as _, buildStatePort as a, validateConfig as b, applyOps as c, selectMergedEnvironment as d, collectRedactionAnnotations as f, renderDisplayNamePrefix as g, DEFAULT_PREFIX_FORMAT as h, loadConfig$1 as i, createDeveloperProductDriver as j, validateEnvironmentName as k, validatePlan as l, flattenConfig as m, serializeConfig as n, buildDesired as o, resolveStateConfig as p, renderStateWriteError as q, deploy as r, buildDefaultRegistry as s, migrateMantleState as t, selectEnvironment as u, defaultKindRegistry as v, SOCIAL_LINK_FIELDS as w, createClackPort as x, isGistStateConfig as y, derivePriceFields as z };
 
-//# sourceMappingURL=migrate-mantle-state-Dkk5zGHw.mjs.map
+//# sourceMappingURL=migrate-mantle-state-CQjWBZwT.mjs.map