@knpkv/alchemy-console 0.0.0-stage → 0.1.0

package/dist/s3-live.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-live.js","sourceRoot":"","sources":["../src/s3-live.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAA;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AACpD,OAAO,EAEL,SAAS,EAET,WAAW,EAGX,kBAAkB,EAGnB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACjD,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAA;AAEpD,OAAO,EAAiB,QAAQ,EAAE,WAAW,EAAsC,MAAM,gBAAgB,CAAA;AACzG,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAI3C,MAAM,aAAa,GAAG,CAAC,KAAsB,EAAe,EAAE;IAC5D,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,KAAK,CAAA;IAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA;IAC1E,IAAI,GAAG,KAAK,cAAc,IAAI,GAAG,KAAK,uBAAuB,EAAE,CAAC;QAC9D,OAAO,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC9C,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;IACjH,IACE,CAAC,cAAc,EAAE,uBAAuB,EAAE,cAAc,EAAE,oBAAoB,EAAE,uBAAuB,CAAC,CAAC,QAAQ,CAC/G,GAAG,CACJ,EACD,CAAC;QACD,OAAO,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAA;IACtD,CAAC;IACD,OAAO,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;AAChD,CAAC,CAAA;AAED,qGAAqG;AACrG,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAmB,EAAE,EAAE,CACnD,KAAK,CAAC,MAAM,CACV,QAAQ,EACR,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,cAAc,CAAA;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,EACvD,MAAgE,EAChE,MAAc;QAEd,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAC/C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CAAC,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,EAC/D,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EACrD,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC;QACpD,2EAA2E;QAC3E,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,EAChE,MAAM,CAAC,aAAa,CAAC;YACnB,QAAQ,EAAE,YAAY;YACtB,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;SACnE,CAAC,EACF,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAC/B,CAAA;IACH,CAAC,CAAC,CAAA;IACF,OAAO,QAAQ,CAAC,EAAE,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC,QAAQ,CAAC,EAAC,MAAqB;YAChF,MAAM,OAAO,GAAuB,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;YACxD,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,CAAC,iBAAiB,GAAG,MAAM,CAAA;YACvD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;YAC9D,MAAM,OAAO,GAAoB,EAAE,CAAA;YACnC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;gBACxC,IACE,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;oBAC1F,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;oBAChC,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAA;gBAC/D,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAA;YAClE,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,iBAAiB,IAAI,IAAI,EAAE,CAAA;QAC1D,CAAC,CAAC;QACF,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,EAC5D,MAAgB,EAChB,MAAc,EACd,MAA4B;YAE5B,MAAM,OAAO,GAA8B;gBACzC,MAAM,EAAE,MAAM,CAAC,IAAI;gBACnB,mBAAmB,EAAE,OAAO,CAAC,OAAO;gBACpC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,IAAI;aACd,CAAA;YACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,GAAG,CAAA;gBAC9B,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;oBAAE,OAAO,CAAC,eAAe,GAAG,MAAM,CAAC,SAAS,CAAA;YAC3E,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;YACpE,MAAM,QAAQ,GAAqB,EAAE,CAAA;YACrC,MAAM,MAAM,GAAgF;gBAC1F,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC7C,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;aAClD,CAAA;YACD,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,CAAC;gBACvC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,IACE,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;wBAC5E,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EACxD,CAAC;wBACD,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAA;oBAC/D,CAAC;oBACD,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;gBAC1F,CAAC;YACH,CAAC;YACD,IACE,IAAI,CAAC,WAAW,KAAK,SAAS;gBAC9B,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,EAC3F,CAAC;gBACD,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAC/D,CAAC;YACD,OAAO;gBACL,QAAQ;gBACR,IAAI,EAAE,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC;oBAC/B;wBACE,GAAG,EAAE,IAAI,CAAC,aAAa,IAAI,EAAE;wBAC7B,SAAS,EAAE,IAAI,CAAC,mBAAmB,IAAI,IAAI;qBAC5C,CAAC,CAAC;oBACH,IAAI;aACP,CAAA;QACH,CAAC,CAAC;QACF,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,8BAA8B,CAAC,CACjD,QAAQ,CAAC,EAAC,MAAgB,EAAE,GAAW,EAAE,SAAiB;YACxD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAI,CACxB,SAAS,CAAC;gBACR,MAAM,EAAE,MAAM,CAAC,IAAI;gBACnB,mBAAmB,EAAE,OAAO,CAAC,OAAO;gBACpC,GAAG,EAAE,GAAG;gBACR,SAAS,EAAE,SAAS;aACrB,CAAC,EACF,MAAM,CAAC,MAAM,CACd,CAAA;YACD,IACE,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EACvG,CAAC;gBACD,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAC/D,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,IAAI,CACvE,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CACnG,EACD,MAAM,CAAC,aAAa,CAAC;gBACnB,QAAQ,EAAE,YAAY;gBACtB,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;aACnE,CAAC,CACH,CAAA;YACD,OAAO,KAAK,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;QACpC,CAAC,CACF;KACF,CAAC,CAAA;AACJ,CAAC,CAAC,CACH,CAAA"}

package/dist/s3-reader.d.ts

@@ -0,0 +1,46 @@
+import type { Effect } from "effect";
+import { Context, Schema } from "effect";
+import type { ResourceSummary, StateReadError } from "./schema.js";
+/** Server-private bucket name and routing region; memory only, never HTTP, browser storage, logs or telemetry. */
+export interface S3Bucket {
+    readonly name: string;
+    readonly region: string;
+}
+/** Server-private S3 pagination coordinates with the same boundary as bucket/key/version locators. */
+export interface VersionCursor {
+    readonly key: string;
+    readonly versionId: string | null;
+}
+/** Server-private persisted S3 key/version coordinates. Only normalized resource metadata may leave the server. */
+export interface S3Version {
+    readonly key: string;
+    readonly versionId: string;
+    readonly latest: boolean;
+    readonly deleted: boolean;
+}
+/** Server-private bucket listing and opaque continuation token. */
+export interface S3BucketPage {
+    readonly buckets: ReadonlyArray<S3Bucket>;
+    readonly next: string | null;
+}
+/** Server-private version listing and continuation coordinates. */
+export interface S3VersionPage {
+    readonly versions: ReadonlyArray<S3Version>;
+    readonly next: VersionCursor | null;
+}
+declare const S3ReadError_base: Schema.Class<S3ReadError, Schema.TaggedStruct<"S3ReadError", {
+    readonly reason: Schema.Literals<readonly ["authentication", "denied", "not-found", "provider", "invalid-response", "limit"]>;
+}>, import("effect/Cause").YieldableError>;
+/** No raw provider error, credentials or locator is retained. */
+export declare class S3ReadError extends S3ReadError_base {
+}
+declare const S3Reader_base: Context.ServiceClass<S3Reader, "@knpkv/alchemy-console/S3Reader", {
+    readonly buckets: (cursor: string | null) => Effect.Effect<S3BucketPage, S3ReadError>;
+    readonly versions: (bucket: S3Bucket, prefix: string, cursor: VersionCursor | null) => Effect.Effect<S3VersionPage, S3ReadError>;
+    readonly resource: (bucket: S3Bucket, key: string, versionId: string) => Effect.Effect<ResourceSummary | null, S3ReadError | StateReadError>;
+}>;
+/** Bound to one explicit SSO profile. No writes, Alchemy runtime, credential chain or implicit login. */
+export declare class S3Reader extends S3Reader_base {
+}
+export {};
+//# sourceMappingURL=s3-reader.d.ts.map

package/dist/s3-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-reader.d.ts","sourceRoot":"","sources":["../src/s3-reader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACxC,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAElE,kHAAkH;AAClH,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED,sGAAsG;AACtG,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAClC;AAED,mHAAmH;AACnH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B;AAED,mEAAmE;AACnE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAA;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,mEAAmE;AACnE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,SAAS,CAAC,CAAA;IAC3C,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,CAAA;CACpC;;;;AAED,iEAAiE;AACjE,qBAAa,WAAY,SAAQ,gBAE/B;CAAG;;sBAIe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC;uBAClE,CACjB,MAAM,EAAE,QAAQ,EAChB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,aAAa,GAAG,IAAI,KACzB,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC;uBAC3B,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CACpF,eAAe,GAAG,IAAI,EACtB,WAAW,GAAG,cAAc,CAC7B;;AAXH,yGAAyG;AACzG,qBAAa,QAAS,SAAQ,aAWS;CAAG"}

package/dist/s3-reader.js

@@ -0,0 +1,10 @@
+import { Context, Schema } from "effect";
+/** No raw provider error, credentials or locator is retained. */
+export class S3ReadError extends Schema.TaggedError()("S3ReadError", {
+    reason: Schema.Literals(["authentication", "denied", "not-found", "provider", "invalid-response", "limit"])
+}) {
+}
+/** Bound to one explicit SSO profile. No writes, Alchemy runtime, credential chain or implicit login. */
+export class S3Reader extends Context.Service()("@knpkv/alchemy-console/S3Reader") {
+}
+//# sourceMappingURL=s3-reader.js.map

package/dist/s3-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-reader.js","sourceRoot":"","sources":["../src/s3-reader.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAmCxC,iEAAiE;AACjE,MAAM,OAAO,WAAY,SAAQ,MAAM,CAAC,WAAW,EAAe,CAAC,aAAa,EAAE;IAChF,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,gBAAgB,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC;CAC5G,CAAC;CAAG;AAEL,yGAAyG;AACzG,MAAM,OAAO,QAAS,SAAQ,OAAO,CAAC,OAAO,EAWzC,CAAC,iCAAiC,CAAC;CAAG"}

package/dist/s3-state.d.ts

@@ -0,0 +1,21 @@
+import { Effect } from "effect";
+import { type S3Bucket, S3Reader, S3ReadError, type S3Version } from "./s3-reader.js";
+import { type StackState, StateReadError } from "./schema.js";
+/** Server-private persisted bucket/prefix coordinates. Keep in server memory, never HTTP, browser storage, logs or telemetry. */
+export interface S3StackLocator {
+    readonly bucket: S3Bucket;
+    readonly prefix: string;
+    readonly app: string;
+    readonly stage: string;
+}
+/** Discover owned candidate buckets; caller may supply a different naming predicate or explicit bucket locators. */
+export declare const discoverS3Buckets: (matches?: ((name: string) => boolean) | undefined) => Effect.Effect<S3Bucket[], S3ReadError, S3Reader>;
+/** List version IDs and deletion markers without reading any payload. Both continuation markers are retained. */
+export declare const listS3Versions: (bucket: S3Bucket, prefix?: any) => Effect.Effect<S3Version[], S3ReadError, S3Reader>;
+/** Infer optional state prefixes from the last three key components. Latest delete markers never resurrect old stacks. */
+export declare const discoverS3Stacks: (bucket: S3Bucket) => Effect.Effect<S3StackLocator[], S3ReadError, S3Reader>;
+/** Read one exact persisted version. Keys must be direct JSON children of the server-selected stack. */
+export declare const readS3Resource: (stack: S3StackLocator, key: string, versionId: string) => Effect.Effect<import("./schema.js").ResourceSummary | null, S3ReadError | StateReadError, S3Reader>;
+/** Pin each latest object to its listed version ID. S3 is not a transactional snapshot across resources. */
+export declare const readS3State: (stack: S3StackLocator, alchemyVersion?: string | null | undefined) => Effect.Effect<StackState, S3ReadError | StateReadError, S3Reader>;
+//# sourceMappingURL=s3-state.d.ts.map

package/dist/s3-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-state.d.ts","sourceRoot":"","sources":["../src/s3-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,EACL,KAAK,QAAQ,EAEb,QAAQ,EACR,WAAW,EACX,KAAK,SAAS,EAGf,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,KAAK,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAE7D,iIAAiI;AACjI,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,oHAAoH;AACpH,eAAO,MAAM,iBAAiB,qBACZ,MAAM,KAAK,OAAO,kEAqBlC,CAAA;AAEF,iHAAiH;AACjH,eAAO,MAAM,cAAc,uFAsBzB,CAAA;AAYF,0HAA0H;AAC1H,eAAO,MAAM,gBAAgB,8EAoB3B,CAAA;AAIF,wGAAwG;AACxG,eAAO,MAAM,cAAc,gKAmBzB,CAAA;AAEF,4GAA4G;AAC5G,eAAO,MAAM,WAAW,0IAwBtB,CAAA"}

package/dist/s3-state.js

@@ -0,0 +1,129 @@
+import { Effect } from "effect";
+import { S3Reader, S3ReadError } from "./s3-reader.js";
+import { StateReadError } from "./schema.js";
+/** Discover owned candidate buckets; caller may supply a different naming predicate or explicit bucket locators. */
+export const discoverS3Buckets = Effect.fn("AlchemyConsole.discoverS3Buckets")(function* (matches = (name) => name.includes("alchemy-state")) {
+    const reader = yield* S3Reader;
+    const buckets = new Map();
+    const seen = new Set();
+    let cursor = null;
+    let count = 0;
+    let pages = 0;
+    do {
+        if (++pages > 100)
+            return yield* new S3ReadError({ reason: "limit" });
+        const page = yield* reader.buckets(cursor);
+        count += page.buckets.length;
+        if (count > 50_000)
+            return yield* new S3ReadError({ reason: "limit" });
+        for (const bucket of page.buckets)
+            if (matches(bucket.name))
+                buckets.set(bucket.name, bucket);
+        cursor = page.next;
+        if (cursor !== null) {
+            if (seen.has(cursor))
+                return yield* new S3ReadError({ reason: "invalid-response" });
+            seen.add(cursor);
+        }
+    } while (cursor !== null);
+    return [...buckets.values()].sort((a, b) => a.name.localeCompare(b.name));
+});
+/** List version IDs and deletion markers without reading any payload. Both continuation markers are retained. */
+export const listS3Versions = Effect.fn("AlchemyConsole.listS3Versions")(function* (bucket, prefix = "") {
+    const reader = yield* S3Reader;
+    const versions = [];
+    const seen = new Set();
+    let cursor = null;
+    let pages = 0;
+    do {
+        if (++pages > 100)
+            return yield* new S3ReadError({ reason: "limit" });
+        const page = yield* reader.versions(bucket, prefix, cursor);
+        if (versions.length + page.versions.length > 50_000)
+            return yield* new S3ReadError({ reason: "limit" });
+        for (const version of page.versions)
+            versions.push(version);
+        if (page.versions.some((version) => !version.key.startsWith(prefix))) {
+            return yield* new S3ReadError({ reason: "invalid-response" });
+        }
+        cursor = page.next;
+        if (cursor !== null) {
+            const identity = JSON.stringify([cursor.key, cursor.versionId]);
+            if (seen.has(identity))
+                return yield* new S3ReadError({ reason: "invalid-response" });
+            seen.add(identity);
+        }
+    } while (cursor !== null);
+    return versions;
+});
+const latestVersions = Effect.fn("AlchemyConsole.latestS3Versions")(function* (versions) {
+    const latest = new Map();
+    for (const version of versions) {
+        if (!version.latest)
+            continue;
+        if (latest.has(version.key))
+            return yield* new S3ReadError({ reason: "invalid-response" });
+        latest.set(version.key, version);
+    }
+    return [...latest.values()].filter((version) => !version.deleted);
+});
+/** Infer optional state prefixes from the last three key components. Latest delete markers never resurrect old stacks. */
+export const discoverS3Stacks = Effect.fn("AlchemyConsole.discoverS3Stacks")(function* (bucket) {
+    const versions = yield* latestVersions(yield* listS3Versions(bucket));
+    const stacks = new Map();
+    for (const { key } of versions) {
+        const parts = key.split("/");
+        const name = parts.at(-1);
+        const stage = parts.at(-2);
+        const app = parts.at(-3);
+        if (name?.endsWith(".json") !== true || app === undefined || app.length === 0 || stage === undefined ||
+            stage.length === 0 || parts.some((part) => part.length === 0 || part === "." || part === "..")) {
+            continue;
+        }
+        const prefix = parts.length === 3 ? "" : `${parts.slice(0, -3).join("/")}/`;
+        stacks.set(JSON.stringify([prefix, app, stage]), { bucket, prefix, app, stage });
+    }
+    return [...stacks.values()].sort((a, b) => a.prefix.localeCompare(b.prefix) || a.app.localeCompare(b.app) || a.stage.localeCompare(b.stage));
+});
+const stagePrefix = (stack) => `${stack.prefix}${stack.app}/${stack.stage}/`;
+/** Read one exact persisted version. Keys must be direct JSON children of the server-selected stack. */
+export const readS3Resource = Effect.fn("AlchemyConsole.readS3Resource")(function* (stack, key, versionId) {
+    const prefix = stagePrefix(stack);
+    const name = key.slice(prefix.length);
+    if (!key.startsWith(prefix) || name.includes("/") || !name.endsWith(".json") || name === "__stack_output__.json" ||
+        versionId.length === 0) {
+        return yield* new StateReadError({ reason: "invalid-state" });
+    }
+    const reader = yield* S3Reader;
+    const resource = yield* reader.resource(stack.bucket, key, versionId);
+    if (resource !== null && name !== `${resource.fqn.replaceAll("/", "__")}.json`) {
+        return yield* new StateReadError({ reason: "invalid-state" });
+    }
+    return resource;
+});
+/** Pin each latest object to its listed version ID. S3 is not a transactional snapshot across resources. */
+export const readS3State = Effect.fn("AlchemyConsole.readS3State")(function* (stack, alchemyVersion = null) {
+    if (alchemyVersion !== null && alchemyVersion !== "2.0.0-beta.74" && alchemyVersion !== "2.0.0-beta.77") {
+        return yield* new StateReadError({ reason: "unsupported-version" });
+    }
+    const prefix = stagePrefix(stack);
+    const versions = yield* latestVersions(yield* listS3Versions(stack.bucket, prefix));
+    const resources = [];
+    for (const version of versions) {
+        if (!version.key.endsWith(".json") || version.key === `${prefix}__stack_output__.json`)
+            continue;
+        const resource = yield* readS3Resource(stack, version.key, version.versionId);
+        if (resource !== null)
+            resources.push(resource);
+    }
+    const state = {
+        app: stack.app,
+        stage: stack.stage,
+        backend: "s3",
+        alchemyVersion,
+        lastDeploy: null,
+        resources: resources.sort((a, b) => a.fqn.localeCompare(b.fqn))
+    };
+    return state;
+});
+//# sourceMappingURL=s3-state.js.map

package/dist/s3-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-state.js","sourceRoot":"","sources":["../src/s3-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,EAGL,QAAQ,EACR,WAAW,EAIZ,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAmB,cAAc,EAAE,MAAM,aAAa,CAAA;AAU7D,oHAAoH;AACpH,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,kCAAkC,CAAC,CAAC,QAAQ,CAAC,EACtF,OAAO,GAA8B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;IAE7E,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAA;IAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAA;IAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,IAAI,MAAM,GAAkB,IAAI,CAAA;IAChC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,GAAG,CAAC;QACF,IAAI,EAAE,KAAK,GAAG,GAAG;YAAE,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;QACrE,MAAM,IAAI,GAAiB,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACxD,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAA;QAC5B,IAAI,KAAK,GAAG,MAAM;YAAE,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;QACtE,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC7F,MAAM,GAAG,IAAI,CAAC,IAAI,CAAA;QAClB,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAA;YACnF,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAClB,CAAC;IACH,CAAC,QAAQ,MAAM,KAAK,IAAI,EAAC;IACzB,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;AAC3E,CAAC,CAAC,CAAA;AAEF,iHAAiH;AACjH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,EAAC,MAAgB,EAAE,MAAM,GAAG,EAAE;IAC9G,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAA;IAC9B,MAAM,QAAQ,GAAqB,EAAE,CAAA;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,IAAI,MAAM,GAAyB,IAAI,CAAA;IACvC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,GAAG,CAAC;QACF,IAAI,EAAE,KAAK,GAAG,GAAG;YAAE,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;QACrE,MAAM,IAAI,GAAkB,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;QAC1E,IAAI,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM;YAAE,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;QACvG,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC3D,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACrE,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAC/D,CAAC;QACD,MAAM,GAAG,IAAI,CAAC,IAAI,CAAA;QAClB,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;YAC/D,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAA;YACrF,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACpB,CAAC;IACH,CAAC,QAAQ,MAAM,KAAK,IAAI,EAAC;IACzB,OAAO,QAAQ,CAAA;AACjB,CAAC,CAAC,CAAA;AAEF,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAC,QAAQ,CAAC,EAAC,QAAkC;IAC9G,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAA;IAC3C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,SAAQ;QAC7B,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAC1F,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IAClC,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;AACnE,CAAC,CAAC,CAAA;AAEF,0HAA0H;AAC1H,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAC,QAAQ,CAAC,EAAC,MAAgB;IACrG,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAA;IACrE,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAA;IAChD,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QACxB,IACE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,SAAS;YAChG,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAC9F,CAAC;YACD,SAAQ;QACV,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;QAC3E,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;IAClF,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACxC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CACjG,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,MAAM,WAAW,GAAG,CAAC,KAAqB,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,GAAG,CAAA;AAE5F,wGAAwG;AACxG,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,EAChF,KAAqB,EACrB,GAAW,EACX,SAAiB;IAEjB,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;IACjC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACrC,IACE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,uBAAuB;QAC5G,SAAS,CAAC,MAAM,KAAK,CAAC,EACtB,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAA;IAC/D,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAA;IAC9B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;IACrE,IAAI,QAAQ,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAA;IAC/D,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC,CAAC,CAAA;AAEF,4GAA4G;AAC5G,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EAC1E,KAAqB,EACrB,cAAc,GAAkB,IAAI;IAEpC,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,KAAK,eAAe,IAAI,cAAc,KAAK,eAAe,EAAE,CAAC;QACxG,OAAO,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAA;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACnF,MAAM,SAAS,GAAG,EAAE,CAAA;IACpB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,GAAG,KAAK,GAAG,MAAM,uBAAuB;YAAE,SAAQ;QAChG,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;QAC7E,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACjD,CAAC;IACD,MAAM,KAAK,GAAe;QACxB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,IAAI;QACb,cAAc;QACd,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;KAChE,CAAA;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAC,CAAA"}

package/dist/schema.d.ts

@@ -0,0 +1,43 @@
+import { Schema } from "effect";
+export declare const ResourceSummary: Schema.Struct<{
+    readonly fqn: Schema.NonEmptyString;
+    readonly logicalId: Schema.NonEmptyString;
+    readonly resourceType: Schema.NonEmptyString;
+    readonly status: Schema.Literals<readonly ["creating", "created", "updating", "updated", "deleting", "replacing", "replaced"]>;
+    readonly parent: Schema.NullOr<Schema.String>;
+    readonly providerId: Schema.NullOr<Schema.String>;
+    readonly account: Schema.NullOr<Schema.String>;
+    readonly region: Schema.NullOr<Schema.String>;
+    readonly consoleUrl: Schema.NullOr<Schema.String>;
+}>;
+export interface ResourceSummary extends Schema.Schema.Type<typeof ResourceSummary> {
+}
+/** Safe metadata for an authenticated owner. Never includes state paths, props, outputs, or credentials. */
+export declare const StackState: Schema.Struct<{
+    readonly app: Schema.NonEmptyString;
+    readonly stage: Schema.NonEmptyString;
+    readonly backend: Schema.Literals<readonly ["local", "s3"]>;
+    readonly alchemyVersion: Schema.NullOr<Schema.String>;
+    readonly lastDeploy: Schema.NullOr<Schema.String>;
+    readonly resources: Schema.$Array<Schema.Struct<{
+        readonly fqn: Schema.NonEmptyString;
+        readonly logicalId: Schema.NonEmptyString;
+        readonly resourceType: Schema.NonEmptyString;
+        readonly status: Schema.Literals<readonly ["creating", "created", "updating", "updated", "deleting", "replacing", "replaced"]>;
+        readonly parent: Schema.NullOr<Schema.String>;
+        readonly providerId: Schema.NullOr<Schema.String>;
+        readonly account: Schema.NullOr<Schema.String>;
+        readonly region: Schema.NullOr<Schema.String>;
+        readonly consoleUrl: Schema.NullOr<Schema.String>;
+    }>>;
+}>;
+export interface StackState extends Schema.Schema.Type<typeof StackState> {
+}
+declare const StateReadError_base: Schema.Class<StateReadError, Schema.TaggedStruct<"StateReadError", {
+    readonly reason: Schema.Literals<readonly ["io", "invalid-state", "invalid-lockfile", "unsupported-version", "limit", "outside-root"]>;
+}>, import("effect/Cause").YieldableError>;
+/** Contains no source input, parser diagnostics, provider locators, or underlying filesystem errors. */
+export declare class StateReadError extends StateReadError_base {
+}
+export {};
+//# sourceMappingURL=schema.d.ts.map

package/dist/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,eAAO,MAAM,eAAe;;;;;;;;;;EAU1B,CAAA;AACF,MAAM,WAAW,eAAgB,SAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,eAAe,CAAC;CAAG;AAEtF,4GAA4G;AAC5G,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;EAOrB,CAAA;AACF,MAAM,WAAW,UAAW,SAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,UAAU,CAAC;CAAG;;;;AAE5E,wGAAwG;AACxG,qBAAa,cAAe,SAAQ,mBAElC;CAAG"}

package/dist/schema.js

@@ -0,0 +1,27 @@
+import { Schema } from "effect";
+export const ResourceSummary = Schema.Struct({
+    fqn: Schema.NonEmptyString,
+    logicalId: Schema.NonEmptyString,
+    resourceType: Schema.NonEmptyString,
+    status: Schema.Literals(["creating", "created", "updating", "updated", "deleting", "replacing", "replaced"]),
+    parent: Schema.NullOr(Schema.String),
+    providerId: Schema.NullOr(Schema.String),
+    account: Schema.NullOr(Schema.String),
+    region: Schema.NullOr(Schema.String),
+    consoleUrl: Schema.NullOr(Schema.String)
+});
+/** Safe metadata for an authenticated owner. Never includes state paths, props, outputs, or credentials. */
+export const StackState = Schema.Struct({
+    app: Schema.NonEmptyString,
+    stage: Schema.NonEmptyString,
+    backend: Schema.Literals(["local", "s3"]),
+    alchemyVersion: Schema.NullOr(Schema.String),
+    lastDeploy: Schema.NullOr(Schema.String),
+    resources: Schema.Array(ResourceSummary)
+});
+/** Contains no source input, parser diagnostics, provider locators, or underlying filesystem errors. */
+export class StateReadError extends Schema.TaggedError()("StateReadError", {
+    reason: Schema.Literals(["io", "invalid-state", "invalid-lockfile", "unsupported-version", "limit", "outside-root"])
+}) {
+}
+//# sourceMappingURL=schema.js.map

package/dist/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,GAAG,EAAE,MAAM,CAAC,cAAc;IAC1B,SAAS,EAAE,MAAM,CAAC,cAAc;IAChC,YAAY,EAAE,MAAM,CAAC,cAAc;IACnC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAC5G,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACrC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;CACzC,CAAC,CAAA;AAGF,4GAA4G;AAC5G,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;IACtC,GAAG,EAAE,MAAM,CAAC,cAAc;IAC1B,KAAK,EAAE,MAAM,CAAC,cAAc;IAC5B,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACzC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5C,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC;CACzC,CAAC,CAAA;AAGF,wGAAwG;AACxG,MAAM,OAAO,cAAe,SAAQ,MAAM,CAAC,WAAW,EAAkB,CAAC,gBAAgB,EAAE;IACzF,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,eAAe,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;CACrH,CAAC;CAAG"}

package/dist/sso-credentials.d.ts

@@ -0,0 +1,17 @@
+import { fromSSO } from "@aws-sdk/credential-provider-sso";
+import type { ResolvedCredentials } from "@distilled.cloud/aws/Credentials";
+import { Context, Effect, Layer } from "effect";
+import type { SsoProfile } from "./profiles.js";
+import { S3ReadError } from "./s3-reader.js";
+declare const SsoCredentials_base: Context.ServiceClass<SsoCredentials, "@knpkv/alchemy-console/SsoCredentials", {
+    readonly resolve: (profile: SsoProfile) => Effect.Effect<ResolvedCredentials, S3ReadError>;
+}>;
+/** Credential-bearing service; results go only to server-side signing and never to persistence, HTTP or logs. */
+export declare class SsoCredentials extends SsoCredentials_base {
+}
+/** SDK factory returns credential-bearing material; inject it at this signing boundary for tests. */
+export type SsoCredentialProviderFactory = typeof fromSSO;
+/** Use only an explicit SSO provider; never a default credential chain. */
+export declare const ssoCredentialsLayer: (provider?: SsoCredentialProviderFactory) => Layer.Layer<SsoCredentials, never, never>;
+export {};
+//# sourceMappingURL=sso-credentials.d.ts.map

package/dist/sso-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sso-credentials.d.ts","sourceRoot":"","sources":["../src/sso-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAmD,MAAM,kCAAkC,CAAA;AAC3G,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAA;AAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAoB,MAAM,QAAQ,CAAA;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;;sBAUxB,CAAC,OAAO,EAAE,UAAU,KAAK,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,WAAW,CAAC;;AAF5F,iHAAiH;AACjH,qBAAa,cAAe,SAAQ,mBAES;CAAG;AAEhD,qGAAqG;AACrG,MAAM,MAAM,4BAA4B,GAAG,OAAO,OAAO,CAAA;AAEzD,2EAA2E;AAC3E,eAAO,MAAM,mBAAmB,cAAc,4BAA4B,8CA+BtE,CAAA"}

package/dist/sso-credentials.js

@@ -0,0 +1,43 @@
+import { fromSSO } from "@aws-sdk/credential-provider-sso";
+import { Context, Effect, Layer, Redacted, Schema } from "effect";
+import { S3ReadError } from "./s3-reader.js";
+const CredentialIdentity = Schema.Struct({
+    accessKeyId: Schema.NonEmptyString,
+    secretAccessKey: Schema.NonEmptyString,
+    sessionToken: Schema.NonEmptyString
+});
+/** Credential-bearing service; results go only to server-side signing and never to persistence, HTTP or logs. */
+export class SsoCredentials extends Context.Service()("@knpkv/alchemy-console/SsoCredentials") {
+}
+/** Use only an explicit SSO provider; never a default credential chain. */
+export const ssoCredentialsLayer = (provider = fromSSO) => Layer.succeed(SsoCredentials, {
+    resolve: Effect.fn("AlchemyConsole.resolveSsoCredentials")(function* (profile) {
+        const request = {
+            profile: profile.name,
+            configFilepath: profile.configFile,
+            ssoAccountId: profile.account,
+            ssoRoleName: profile.role,
+            ssoRegion: profile.ssoRegion,
+            ssoStartUrl: profile.startUrl,
+            clientConfig: { region: profile.ssoRegion },
+            ignoreCache: true
+        };
+        if (profile.session !== null)
+            request.ssoSession = profile.session;
+        const raw = yield* Effect.tryPromise({
+            try: () => provider(request)(),
+            catch: () => new S3ReadError({ reason: "authentication" })
+        }).pipe(Effect.timeoutOrElse({
+            duration: "15 seconds",
+            orElse: () => Effect.fail(new S3ReadError({ reason: "authentication" }))
+        }));
+        const identity = yield* Schema.decodeUnknownEffect(CredentialIdentity)(raw).pipe(Effect.mapError(() => new S3ReadError({ reason: "authentication" })));
+        return {
+            accessKeyId: Redacted.make(identity.accessKeyId),
+            secretAccessKey: Redacted.make(identity.secretAccessKey),
+            sessionToken: Redacted.make(identity.sessionToken),
+            region: profile.region
+        };
+    })
+});
+//# sourceMappingURL=sso-credentials.js.map

package/dist/sso-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sso-credentials.js","sourceRoot":"","sources":["../src/sso-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAmD,MAAM,kCAAkC,CAAA;AAE3G,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAEjE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAE5C,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,WAAW,EAAE,MAAM,CAAC,cAAc;IAClC,eAAe,EAAE,MAAM,CAAC,cAAc;IACtC,YAAY,EAAE,MAAM,CAAC,cAAc;CACpC,CAAC,CAAA;AAEF,iHAAiH;AACjH,MAAM,OAAO,cAAe,SAAQ,OAAO,CAAC,OAAO,EAE/C,CAAC,uCAAuC,CAAC;CAAG;AAKhD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAAQ,GAAiC,OAAO,EAAE,EAAE,CACtF,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE;IAC5B,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,sCAAsC,CAAC,CAAC,QAAQ,CAAC,EAAC,OAAmB;QACtF,MAAM,OAAO,GAA2C;YACtD,OAAO,EAAE,OAAO,CAAC,IAAI;YACrB,cAAc,EAAE,OAAO,CAAC,UAAU;YAClC,YAAY,EAAE,OAAO,CAAC,OAAO;YAC7B,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,OAAO,CAAC,QAAQ;YAC7B,YAAY,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE;YAC3C,WAAW,EAAE,IAAI;SAClB,CAAA;QACD,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,OAAO,CAAA;QAClE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;YACnC,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE;YAC9B,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;SAC3D,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;YAC3B,QAAQ,EAAE,YAAY;YACtB,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;SACzE,CAAC,CAAC,CAAA;QACH,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAC9E,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC,CACrE,CAAA;QACD,OAAO;YACL,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAChD,eAAe,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;YACxD,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;YAClD,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAA;IACH,CAAC,CAAC;CACH,CAAC,CAAA"}

package/dist/state.d.ts

@@ -0,0 +1,15 @@
+import { Effect } from "effect";
+import { StateReadError } from "./schema.js";
+/** Decode persisted beta.74/beta.77 JSON into metadata; action rows are validated and excluded. */
+export declare const decodeResource: (text: string) => Effect.Effect<{
+    readonly fqn: string;
+    readonly logicalId: string;
+    readonly resourceType: string;
+    readonly status: "created" | "creating" | "deleting" | "replaced" | "replacing" | "updated" | "updating";
+    readonly parent: string | null;
+    readonly providerId: string | null;
+    readonly account: string | null;
+    readonly region: string | null;
+    readonly consoleUrl: string | null;
+} | null, StateReadError, never>;
+//# sourceMappingURL=state.d.ts.map

package/dist/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../src/state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAqB,MAAM,QAAQ,CAAA;AAClD,OAAO,EAAmB,cAAc,EAAE,MAAM,aAAa,CAAA;AA6B7D,mGAAmG;AACnG,eAAO,MAAM,cAAc;;;;;;;;;;gCAoBzB,CAAA"}

package/dist/state.js

@@ -0,0 +1,45 @@
+import { Effect, Predicate, Schema } from "effect";
+import { ResourceSummary, StateReadError } from "./schema.js";
+const ResourceRow = Schema.Struct({
+    kind: Schema.optionalKey(Schema.Literal("resource")),
+    fqn: Schema.NonEmptyString,
+    logicalId: Schema.NonEmptyString,
+    resourceType: Schema.NonEmptyString,
+    status: ResourceSummary.fields.status
+});
+const ActionRow = Schema.Struct({
+    kind: Schema.Literal("action"),
+    fqn: Schema.NonEmptyString,
+    logicalId: Schema.NonEmptyString,
+    actionType: Schema.NonEmptyString,
+    status: Schema.Literals(["running", "ran"])
+});
+const metadataKeys = ["kind", "fqn", "logicalId", "resourceType", "actionType", "status"];
+/** Discard properties and outputs entirely. Mask marker objects in metadata, including their siblings. */
+const metadata = (value) => {
+    if (Object.hasOwn(value, "__redacted__"))
+        return null;
+    return Object.fromEntries(Object.entries(value).filter(([key]) => metadataKeys.includes(key)).map(([key, field]) => {
+        return [key, Predicate.isObject(field) && Object.hasOwn(field, "__redacted__") ? "<redacted>" : field];
+    }));
+};
+/** Decode persisted beta.74/beta.77 JSON into metadata; action rows are validated and excluded. */
+export const decodeResource = Effect.fn("AlchemyConsole.decodeResource")(function* (text) {
+    const json = yield* Schema.decodeUnknownEffect(Schema.fromJsonString(Schema.JsonObject))(text).pipe(Effect.mapError(() => new StateReadError({ reason: "invalid-state" })));
+    const row = yield* Schema.decodeUnknownEffect(Schema.Union([ResourceRow, ActionRow]))(metadata(json)).pipe(Effect.mapError(() => new StateReadError({ reason: "invalid-state" })));
+    if (row.kind === "action")
+        return null;
+    const slash = row.fqn.lastIndexOf("/");
+    return ResourceSummary.make({
+        fqn: row.fqn,
+        logicalId: row.logicalId,
+        resourceType: row.resourceType,
+        status: row.status,
+        parent: slash === -1 ? null : row.fqn.slice(0, slash),
+        providerId: null,
+        account: null,
+        region: null,
+        consoleUrl: null
+    });
+});
+//# sourceMappingURL=state.js.map

package/dist/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../src/state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAClD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAE7D,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACpD,GAAG,EAAE,MAAM,CAAC,cAAc;IAC1B,SAAS,EAAE,MAAM,CAAC,cAAc;IAChC,YAAY,EAAE,MAAM,CAAC,cAAc;IACnC,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,MAAM;CACtC,CAAC,CAAA;AACF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC9B,GAAG,EAAE,MAAM,CAAC,cAAc;IAC1B,SAAS,EAAE,MAAM,CAAC,cAAc;IAChC,UAAU,EAAE,MAAM,CAAC,cAAc;IACjC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;CAC5C,CAAC,CAAA;AAEF,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAA;AAEzF,0GAA0G;AAC1G,MAAM,QAAQ,GAAG,CAAC,KAAwB,EAA4B,EAAE;IACtE,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC;QAAE,OAAO,IAAI,CAAA;IACrD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QACvF,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IACxG,CAAC,CAAC,CACH,CAAA;AACH,CAAC,CAAA;AAED,mGAAmG;AACnG,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,EAAC,IAAY;IAC7F,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CACjG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CACvE,CAAA;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CACxG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CACvE,CAAA;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACtC,OAAO,eAAe,CAAC,IAAI,CAAC;QAC1B,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;QACrD,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,IAAI;KACjB,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/version.d.ts

@@ -0,0 +1,5 @@
+import { Effect, FileSystem, Path } from "effect";
+import { StateReadError } from "./schema.js";
+/** Read the nearest pnpm or Bun text lockfile within an explicit server-private search root. */
+export declare const readAlchemyVersion: (projectDirectory: string, searchRoot: string) => Effect.Effect<string | null, StateReadError, FileSystem.FileSystem | Path.Path>;
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAU,MAAM,QAAQ,CAAA;AAIzD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AA4C5C,gGAAgG;AAChG,eAAO,MAAM,kBAAkB,mIAqB7B,CAAA"}

package/dist/version.js

@@ -0,0 +1,61 @@
+import { Effect, FileSystem, Path, Schema } from "effect";
+import { parse as parseJsonc } from "jsonc-parser";
+import { parse as parseYaml } from "yaml";
+import { exists, readText, withinRoot } from "./internal/files.js";
+import { StateReadError } from "./schema.js";
+const Dependency = Schema.Struct({ version: Schema.String });
+const Importer = Schema.Struct({
+    dependencies: Schema.optionalKey(Schema.Record(Schema.String, Dependency)),
+    devDependencies: Schema.optionalKey(Schema.Record(Schema.String, Dependency))
+});
+const PnpmLock = Schema.Struct({ importers: Schema.Record(Schema.String, Importer) });
+const BunLock = Schema.Struct({ packages: Schema.Record(Schema.String, Schema.Array(Schema.Unknown)) });
+const exactVersion = /^(?:alchemy@)?(\d+\.\d+\.\d+(?:-[\w.-]+)?)(?:\(.*\))?$/u;
+const decodeVersion = (resolved) => resolved === undefined ? null : exactVersion.exec(resolved)?.[1] ?? null;
+const pnpmVersion = Effect.fn("AlchemyConsole.pnpmVersion")(function* (text, importer) {
+    const raw = yield* Effect.try({
+        try: () => parseYaml(text, { maxAliasCount: 0 }),
+        catch: () => new StateReadError({ reason: "invalid-lockfile" })
+    });
+    const lock = yield* Schema.decodeUnknownEffect(PnpmLock)(raw).pipe(Effect.mapError(() => new StateReadError({ reason: "invalid-lockfile" })));
+    const entry = lock.importers[importer];
+    return decodeVersion(entry?.dependencies?.alchemy?.version ?? entry?.devDependencies?.alchemy?.version);
+});
+const bunVersion = Effect.fn("AlchemyConsole.bunVersion")(function* (text) {
+    const errors = [];
+    const raw = yield* Effect.try({
+        try: () => parseJsonc(text, errors, { allowTrailingComma: true }),
+        catch: () => new StateReadError({ reason: "invalid-lockfile" })
+    });
+    if (errors.length > 0)
+        return yield* new StateReadError({ reason: "invalid-lockfile" });
+    const lock = yield* Schema.decodeUnknownEffect(BunLock)(raw).pipe(Effect.mapError(() => new StateReadError({ reason: "invalid-lockfile" })));
+    const resolved = lock.packages.alchemy?.[0];
+    if (resolved === undefined)
+        return null;
+    const version = yield* Schema.decodeUnknownEffect(Schema.String)(resolved).pipe(Effect.mapError(() => new StateReadError({ reason: "invalid-lockfile" })));
+    return decodeVersion(version);
+});
+/** Read the nearest pnpm or Bun text lockfile within an explicit server-private search root. */
+export const readAlchemyVersion = Effect.fn("AlchemyConsole.readAlchemyVersion")(function* (projectDirectory, searchRoot) {
+    const fs = yield* FileSystem.FileSystem;
+    const path = yield* Path.Path;
+    const root = yield* fs.realPath(searchRoot).pipe(Effect.mapError(() => new StateReadError({ reason: "io" })));
+    const project = yield* withinRoot(root, projectDirectory);
+    let directory = project;
+    while (true) {
+        for (const name of ["pnpm-lock.yaml", "bun.lock"]) {
+            const candidate = path.join(directory, name);
+            if (!(yield* exists(candidate)))
+                continue;
+            const file = yield* withinRoot(root, candidate);
+            const text = yield* readText(file);
+            const importer = path.relative(directory, project).split(path.sep).join("/") || ".";
+            return yield* name === "bun.lock" ? bunVersion(text) : pnpmVersion(text, importer);
+        }
+        if (directory === root)
+            return null;
+        directory = path.dirname(directory);
+    }
+});
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACzD,OAAO,EAAE,KAAK,IAAI,UAAU,EAAmB,MAAM,cAAc,CAAA;AACnE,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAE5C,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;AAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC1E,eAAe,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;CAC9E,CAAC,CAAA;AACF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAA;AACrF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAA;AACvG,MAAM,YAAY,GAAG,yDAAyD,CAAA;AAE9E,MAAM,aAAa,GAAG,CAAC,QAA4B,EAAiB,EAAE,CACpE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;AAE1E,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EAAC,IAAY,EAAE,QAAgB;IAClG,MAAM,GAAG,GAAY,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QACrC,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;QAChD,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;KAChE,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAChE,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAC1E,CAAA;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IACtC,OAAO,aAAa,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,IAAI,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;AACzG,CAAC,CAAC,CAAA;AAEF,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EAAC,IAAY;IAC9E,MAAM,MAAM,GAAsB,EAAE,CAAA;IACpC,MAAM,GAAG,GAAY,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QACrC,GAAG,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;QACjE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;KAChE,CAAC,CAAA;IACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAA;IACvF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAC/D,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAC1E,CAAA;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAA;IAC3C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC7E,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAC1E,CAAA;IACD,OAAO,aAAa,CAAC,OAAO,CAAC,CAAA;AAC/B,CAAC,CAAC,CAAA;AAEF,gGAAgG;AAChG,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,mCAAmC,CAAC,CAAC,QAAQ,CAAC,EACxF,gBAAwB,EACxB,UAAkB;IAElB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IACvC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;IAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;IAC7G,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAA;IACzD,IAAI,SAAS,GAAG,OAAO,CAAA;IACvB,OAAO,IAAI,EAAE,CAAC;QACZ,KAAK,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,EAAE,CAAC;YAClD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;YAC5C,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAAE,SAAQ;YACzC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;YAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAA;YACnF,OAAO,KAAK,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QACpF,CAAC;QACD,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QACnC,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACrC,CAAC;AACH,CAAC,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,52 @@
 {
   "name": "@knpkv/alchemy-console",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.0",
+  "description": "Read-only discovery and state readers for local Alchemy stacks",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/knpkv/npm.git",
+    "directory": "packages/alchemy-console"
+  },
+  "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "peerDependencies": {
+    "effect": "4.0.0"
+  },
+  "devDependencies": {
+    "@effect/platform-node": "4.0.0",
+    "@effect/vitest": "4.0.0",
+    "@types/node": "^26.6.4",
+    "effect": "4.0.0",
+    "typescript": "npm:@typescript/typescript6@^6.0.2",
+    "vitest": "^5.0.3"
+  },
+  "dependencies": {
+    "@aws-sdk/credential-provider-sso": "^3.973.16",
+    "@distilled.cloud/aws": "^1.0.0-rc.13",
+    "jsonc-parser": "^3.3.1",
+    "yaml": "^2.9.1",
+    "@knpkv/bounded-io": "^0.2.0"
+  },
+  "scripts": {
+    "build": "tsc -b tsconfig.build.json --force",
+    "check": "tsc -b tsconfig.json && tsc -p test/tsconfig.json --noEmit",
+    "lint": "eslint src test",
+    "test": "vitest run"
+  }
 }