@knpkv/alchemy-console 0.0.0-stage → 0.2.0

package/dist/s3-reader.js

@@ -0,0 +1,10 @@
+import { Context, Schema } from "effect";
+/** No raw provider error, credentials or locator is retained. */
+export class S3ReadError extends Schema.TaggedError()("S3ReadError", {
+    reason: Schema.Literals(["authentication", "denied", "not-found", "provider", "invalid-response", "limit"])
+}) {
+}
+/** Bound to one explicit SSO profile. No writes, Alchemy runtime, credential chain or implicit login. */
+export class S3Reader extends Context.Service()("@knpkv/alchemy-console/S3Reader") {
+}
+//# sourceMappingURL=s3-reader.js.map

package/dist/s3-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-reader.js","sourceRoot":"","sources":["../src/s3-reader.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAmCxC,iEAAiE;AACjE,MAAM,OAAO,WAAY,SAAQ,MAAM,CAAC,WAAW,EAAe,CAAC,aAAa,EAAE;IAChF,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,gBAAgB,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC;CAC5G,CAAC;CAAG;AAEL,yGAAyG;AACzG,MAAM,OAAO,QAAS,SAAQ,OAAO,CAAC,OAAO,EAWzC,CAAC,iCAAiC,CAAC;CAAG"}

package/dist/s3-state.d.ts

@@ -0,0 +1,21 @@
+import { Effect } from "effect";
+import { type S3Bucket, S3Reader, S3ReadError, type S3Version } from "./s3-reader.js";
+import { type StackState, StateReadError } from "./schema.js";
+/** Server-private persisted bucket/prefix coordinates. Keep in server memory, never HTTP, browser storage, logs or telemetry. */
+export interface S3StackLocator {
+    readonly bucket: S3Bucket;
+    readonly prefix: string;
+    readonly app: string;
+    readonly stage: string;
+}
+/** Discover owned candidate buckets; caller may supply a different naming predicate or explicit bucket locators. */
+export declare const discoverS3Buckets: (matches?: ((name: string) => boolean) | undefined) => Effect.Effect<S3Bucket[], S3ReadError, S3Reader>;
+/** List version IDs and deletion markers without reading any payload. Both continuation markers are retained. */
+export declare const listS3Versions: (bucket: S3Bucket, prefix?: any) => Effect.Effect<S3Version[], S3ReadError, S3Reader>;
+/** Infer optional state prefixes from the last three key components. Latest delete markers never resurrect old stacks. */
+export declare const discoverS3Stacks: (bucket: S3Bucket) => Effect.Effect<S3StackLocator[], S3ReadError, S3Reader>;
+/** Read one exact persisted version. Keys must be direct JSON children of the server-selected stack. */
+export declare const readS3Resource: (stack: S3StackLocator, key: string, versionId: string) => Effect.Effect<import("./schema.js").ResourceSummary | null, S3ReadError | StateReadError, S3Reader>;
+/** Pin each latest object to its listed version ID. S3 is not a transactional snapshot across resources. */
+export declare const readS3State: (stack: S3StackLocator, alchemyVersion?: string | null | undefined) => Effect.Effect<StackState, S3ReadError | StateReadError, S3Reader>;
+//# sourceMappingURL=s3-state.d.ts.map

package/dist/s3-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-state.d.ts","sourceRoot":"","sources":["../src/s3-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,EACL,KAAK,QAAQ,EAEb,QAAQ,EACR,WAAW,EACX,KAAK,SAAS,EAGf,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,KAAK,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAE7D,iIAAiI;AACjI,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,oHAAoH;AACpH,eAAO,MAAM,iBAAiB,qBACZ,MAAM,KAAK,OAAO,kEAqBlC,CAAA;AAEF,iHAAiH;AACjH,eAAO,MAAM,cAAc,uFAsBzB,CAAA;AAYF,0HAA0H;AAC1H,eAAO,MAAM,gBAAgB,8EAoB3B,CAAA;AAIF,wGAAwG;AACxG,eAAO,MAAM,cAAc,gKAmBzB,CAAA;AAEF,4GAA4G;AAC5G,eAAO,MAAM,WAAW,0IAwBtB,CAAA"}

package/dist/s3-state.js

@@ -0,0 +1,129 @@
+import { Effect } from "effect";
+import { S3Reader, S3ReadError } from "./s3-reader.js";
+import { StateReadError } from "./schema.js";
+/** Discover owned candidate buckets; caller may supply a different naming predicate or explicit bucket locators. */
+export const discoverS3Buckets = Effect.fn("AlchemyConsole.discoverS3Buckets")(function* (matches = (name) => name.includes("alchemy-state")) {
+    const reader = yield* S3Reader;
+    const buckets = new Map();
+    const seen = new Set();
+    let cursor = null;
+    let count = 0;
+    let pages = 0;
+    do {
+        if (++pages > 100)
+            return yield* new S3ReadError({ reason: "limit" });
+        const page = yield* reader.buckets(cursor);
+        count += page.buckets.length;
+        if (count > 50_000)
+            return yield* new S3ReadError({ reason: "limit" });
+        for (const bucket of page.buckets)
+            if (matches(bucket.name))
+                buckets.set(bucket.name, bucket);
+        cursor = page.next;
+        if (cursor !== null) {
+            if (seen.has(cursor))
+                return yield* new S3ReadError({ reason: "invalid-response" });
+            seen.add(cursor);
+        }
+    } while (cursor !== null);
+    return [...buckets.values()].sort((a, b) => a.name.localeCompare(b.name));
+});
+/** List version IDs and deletion markers without reading any payload. Both continuation markers are retained. */
+export const listS3Versions = Effect.fn("AlchemyConsole.listS3Versions")(function* (bucket, prefix = "") {
+    const reader = yield* S3Reader;
+    const versions = [];
+    const seen = new Set();
+    let cursor = null;
+    let pages = 0;
+    do {
+        if (++pages > 100)
+            return yield* new S3ReadError({ reason: "limit" });
+        const page = yield* reader.versions(bucket, prefix, cursor);
+        if (versions.length + page.versions.length > 50_000)
+            return yield* new S3ReadError({ reason: "limit" });
+        for (const version of page.versions)
+            versions.push(version);
+        if (page.versions.some((version) => !version.key.startsWith(prefix))) {
+            return yield* new S3ReadError({ reason: "invalid-response" });
+        }
+        cursor = page.next;
+        if (cursor !== null) {
+            const identity = JSON.stringify([cursor.key, cursor.versionId]);
+            if (seen.has(identity))
+                return yield* new S3ReadError({ reason: "invalid-response" });
+            seen.add(identity);
+        }
+    } while (cursor !== null);
+    return versions;
+});
+const latestVersions = Effect.fn("AlchemyConsole.latestS3Versions")(function* (versions) {
+    const latest = new Map();
+    for (const version of versions) {
+        if (!version.latest)
+            continue;
+        if (latest.has(version.key))
+            return yield* new S3ReadError({ reason: "invalid-response" });
+        latest.set(version.key, version);
+    }
+    return [...latest.values()].filter((version) => !version.deleted);
+});
+/** Infer optional state prefixes from the last three key components. Latest delete markers never resurrect old stacks. */
+export const discoverS3Stacks = Effect.fn("AlchemyConsole.discoverS3Stacks")(function* (bucket) {
+    const versions = yield* latestVersions(yield* listS3Versions(bucket));
+    const stacks = new Map();
+    for (const { key } of versions) {
+        const parts = key.split("/");
+        const name = parts.at(-1);
+        const stage = parts.at(-2);
+        const app = parts.at(-3);
+        if (name?.endsWith(".json") !== true || app === undefined || app.length === 0 || stage === undefined ||
+            stage.length === 0 || parts.some((part) => part.length === 0 || part === "." || part === "..")) {
+            continue;
+        }
+        const prefix = parts.length === 3 ? "" : `${parts.slice(0, -3).join("/")}/`;
+        stacks.set(JSON.stringify([prefix, app, stage]), { bucket, prefix, app, stage });
+    }
+    return [...stacks.values()].sort((a, b) => a.prefix.localeCompare(b.prefix) || a.app.localeCompare(b.app) || a.stage.localeCompare(b.stage));
+});
+const stagePrefix = (stack) => `${stack.prefix}${stack.app}/${stack.stage}/`;
+/** Read one exact persisted version. Keys must be direct JSON children of the server-selected stack. */
+export const readS3Resource = Effect.fn("AlchemyConsole.readS3Resource")(function* (stack, key, versionId) {
+    const prefix = stagePrefix(stack);
+    const name = key.slice(prefix.length);
+    if (!key.startsWith(prefix) || name.includes("/") || !name.endsWith(".json") || name === "__stack_output__.json" ||
+        versionId.length === 0) {
+        return yield* new StateReadError({ reason: "invalid-state" });
+    }
+    const reader = yield* S3Reader;
+    const resource = yield* reader.resource(stack.bucket, key, versionId);
+    if (resource !== null && name !== `${resource.fqn.replaceAll("/", "__")}.json`) {
+        return yield* new StateReadError({ reason: "invalid-state" });
+    }
+    return resource;
+});
+/** Pin each latest object to its listed version ID. S3 is not a transactional snapshot across resources. */
+export const readS3State = Effect.fn("AlchemyConsole.readS3State")(function* (stack, alchemyVersion = null) {
+    if (alchemyVersion !== null && alchemyVersion !== "2.0.0-beta.74" && alchemyVersion !== "2.0.0-beta.77") {
+        return yield* new StateReadError({ reason: "unsupported-version" });
+    }
+    const prefix = stagePrefix(stack);
+    const versions = yield* latestVersions(yield* listS3Versions(stack.bucket, prefix));
+    const resources = [];
+    for (const version of versions) {
+        if (!version.key.endsWith(".json") || version.key === `${prefix}__stack_output__.json`)
+            continue;
+        const resource = yield* readS3Resource(stack, version.key, version.versionId);
+        if (resource !== null)
+            resources.push(resource);
+    }
+    const state = {
+        app: stack.app,
+        stage: stack.stage,
+        backend: "s3",
+        alchemyVersion,
+        lastDeploy: null,
+        resources: resources.sort((a, b) => a.fqn.localeCompare(b.fqn))
+    };
+    return state;
+});
+//# sourceMappingURL=s3-state.js.map

package/dist/s3-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-state.js","sourceRoot":"","sources":["../src/s3-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,EAGL,QAAQ,EACR,WAAW,EAIZ,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAmB,cAAc,EAAE,MAAM,aAAa,CAAA;AAU7D,oHAAoH;AACpH,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,kCAAkC,CAAC,CAAC,QAAQ,CAAC,EACtF,OAAO,GAA8B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;IAE7E,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAA;IAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAA;IAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,IAAI,MAAM,GAAkB,IAAI,CAAA;IAChC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,GAAG,CAAC;QACF,IAAI,EAAE,KAAK,GAAG,GAAG;YAAE,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;QACrE,MAAM,IAAI,GAAiB,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACxD,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAA;QAC5B,IAAI,KAAK,GAAG,MAAM;YAAE,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;QACtE,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC7F,MAAM,GAAG,IAAI,CAAC,IAAI,CAAA;QAClB,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAA;YACnF,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAClB,CAAC;IACH,CAAC,QAAQ,MAAM,KAAK,IAAI,EAAC;IACzB,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;AAC3E,CAAC,CAAC,CAAA;AAEF,iHAAiH;AACjH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,EAAC,MAAgB,EAAE,MAAM,GAAG,EAAE;IAC9G,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAA;IAC9B,MAAM,QAAQ,GAAqB,EAAE,CAAA;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,IAAI,MAAM,GAAyB,IAAI,CAAA;IACvC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,GAAG,CAAC;QACF,IAAI,EAAE,KAAK,GAAG,GAAG;YAAE,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;QACrE,MAAM,IAAI,GAAkB,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;QAC1E,IAAI,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM;YAAE,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;QACvG,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC3D,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACrE,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAC/D,CAAC;QACD,MAAM,GAAG,IAAI,CAAC,IAAI,CAAA;QAClB,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;YAC/D,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAA;YACrF,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACpB,CAAC;IACH,CAAC,QAAQ,MAAM,KAAK,IAAI,EAAC;IACzB,OAAO,QAAQ,CAAA;AACjB,CAAC,CAAC,CAAA;AAEF,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAC,QAAQ,CAAC,EAAC,QAAkC;IAC9G,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAA;IAC3C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,SAAQ;QAC7B,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAC1F,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IAClC,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;AACnE,CAAC,CAAC,CAAA;AAEF,0HAA0H;AAC1H,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAC,QAAQ,CAAC,EAAC,MAAgB;IACrG,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAA;IACrE,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAA;IAChD,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QACxB,IACE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,SAAS;YAChG,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAC9F,CAAC;YACD,SAAQ;QACV,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;QAC3E,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;IAClF,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACxC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CACjG,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,MAAM,WAAW,GAAG,CAAC,KAAqB,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,GAAG,CAAA;AAE5F,wGAAwG;AACxG,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,EAChF,KAAqB,EACrB,GAAW,EACX,SAAiB;IAEjB,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;IACjC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACrC,IACE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,uBAAuB;QAC5G,SAAS,CAAC,MAAM,KAAK,CAAC,EACtB,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAA;IAC/D,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAA;IAC9B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;IACrE,IAAI,QAAQ,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAA;IAC/D,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC,CAAC,CAAA;AAEF,4GAA4G;AAC5G,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EAC1E,KAAqB,EACrB,cAAc,GAAkB,IAAI;IAEpC,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,KAAK,eAAe,IAAI,cAAc,KAAK,eAAe,EAAE,CAAC;QACxG,OAAO,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAA;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACnF,MAAM,SAAS,GAAG,EAAE,CAAA;IACpB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,GAAG,KAAK,GAAG,MAAM,uBAAuB;YAAE,SAAQ;QAChG,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;QAC7E,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACjD,CAAC;IACD,MAAM,KAAK,GAAe;QACxB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,IAAI;QACb,cAAc;QACd,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;KAChE,CAAA;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAC,CAAA"}

package/dist/schema.d.ts

@@ -0,0 +1,43 @@
+import { Schema } from "effect";
+export declare const ResourceSummary: Schema.Struct<{
+    readonly fqn: Schema.NonEmptyString;
+    readonly logicalId: Schema.NonEmptyString;
+    readonly resourceType: Schema.NonEmptyString;
+    readonly status: Schema.Literals<readonly ["creating", "created", "updating", "updated", "deleting", "replacing", "replaced"]>;
+    readonly parent: Schema.NullOr<Schema.String>;
+    readonly providerId: Schema.NullOr<Schema.String>;
+    readonly account: Schema.NullOr<Schema.String>;
+    readonly region: Schema.NullOr<Schema.String>;
+    readonly consoleUrl: Schema.NullOr<Schema.String>;
+}>;
+export interface ResourceSummary extends Schema.Schema.Type<typeof ResourceSummary> {
+}
+/** Safe metadata for an authenticated owner. Never includes state paths, props, outputs, or credentials. */
+export declare const StackState: Schema.Struct<{
+    readonly app: Schema.NonEmptyString;
+    readonly stage: Schema.NonEmptyString;
+    readonly backend: Schema.Literals<readonly ["local", "s3"]>;
+    readonly alchemyVersion: Schema.NullOr<Schema.String>;
+    readonly lastDeploy: Schema.NullOr<Schema.String>;
+    readonly resources: Schema.$Array<Schema.Struct<{
+        readonly fqn: Schema.NonEmptyString;
+        readonly logicalId: Schema.NonEmptyString;
+        readonly resourceType: Schema.NonEmptyString;
+        readonly status: Schema.Literals<readonly ["creating", "created", "updating", "updated", "deleting", "replacing", "replaced"]>;
+        readonly parent: Schema.NullOr<Schema.String>;
+        readonly providerId: Schema.NullOr<Schema.String>;
+        readonly account: Schema.NullOr<Schema.String>;
+        readonly region: Schema.NullOr<Schema.String>;
+        readonly consoleUrl: Schema.NullOr<Schema.String>;
+    }>>;
+}>;
+export interface StackState extends Schema.Schema.Type<typeof StackState> {
+}
+declare const StateReadError_base: Schema.Class<StateReadError, Schema.TaggedStruct<"StateReadError", {
+    readonly reason: Schema.Literals<readonly ["io", "invalid-state", "invalid-lockfile", "unsupported-version", "limit", "outside-root"]>;
+}>, import("effect/Cause").YieldableError>;
+/** Contains no source input, parser diagnostics, provider locators, or underlying filesystem errors. */
+export declare class StateReadError extends StateReadError_base {
+}
+export {};
+//# sourceMappingURL=schema.d.ts.map

package/dist/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,eAAO,MAAM,eAAe;;;;;;;;;;EAU1B,CAAA;AACF,MAAM,WAAW,eAAgB,SAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,eAAe,CAAC;CAAG;AAEtF,4GAA4G;AAC5G,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;EAOrB,CAAA;AACF,MAAM,WAAW,UAAW,SAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,UAAU,CAAC;CAAG;;;;AAE5E,wGAAwG;AACxG,qBAAa,cAAe,SAAQ,mBAElC;CAAG"}

package/dist/schema.js

@@ -0,0 +1,27 @@
+import { Schema } from "effect";
+export const ResourceSummary = Schema.Struct({
+    fqn: Schema.NonEmptyString,
+    logicalId: Schema.NonEmptyString,
+    resourceType: Schema.NonEmptyString,
+    status: Schema.Literals(["creating", "created", "updating", "updated", "deleting", "replacing", "replaced"]),
+    parent: Schema.NullOr(Schema.String),
+    providerId: Schema.NullOr(Schema.String),
+    account: Schema.NullOr(Schema.String),
+    region: Schema.NullOr(Schema.String),
+    consoleUrl: Schema.NullOr(Schema.String)
+});
+/** Safe metadata for an authenticated owner. Never includes state paths, props, outputs, or credentials. */
+export const StackState = Schema.Struct({
+    app: Schema.NonEmptyString,
+    stage: Schema.NonEmptyString,
+    backend: Schema.Literals(["local", "s3"]),
+    alchemyVersion: Schema.NullOr(Schema.String),
+    lastDeploy: Schema.NullOr(Schema.String),
+    resources: Schema.Array(ResourceSummary)
+});
+/** Contains no source input, parser diagnostics, provider locators, or underlying filesystem errors. */
+export class StateReadError extends Schema.TaggedError()("StateReadError", {
+    reason: Schema.Literals(["io", "invalid-state", "invalid-lockfile", "unsupported-version", "limit", "outside-root"])
+}) {
+}
+//# sourceMappingURL=schema.js.map

package/dist/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,GAAG,EAAE,MAAM,CAAC,cAAc;IAC1B,SAAS,EAAE,MAAM,CAAC,cAAc;IAChC,YAAY,EAAE,MAAM,CAAC,cAAc;IACnC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAC5G,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACrC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;CACzC,CAAC,CAAA;AAGF,4GAA4G;AAC5G,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;IACtC,GAAG,EAAE,MAAM,CAAC,cAAc;IAC1B,KAAK,EAAE,MAAM,CAAC,cAAc;IAC5B,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACzC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5C,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC;CACzC,CAAC,CAAA;AAGF,wGAAwG;AACxG,MAAM,OAAO,cAAe,SAAQ,MAAM,CAAC,WAAW,EAAkB,CAAC,gBAAgB,EAAE;IACzF,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,eAAe,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;CACrH,CAAC;CAAG"}

package/dist/server/Bootstrap.d.ts

@@ -0,0 +1,4 @@
+import { Layer, Path } from "effect";
+import { HttpRouter } from "effect/http";
+export declare const BootstrapRoutes: Layer.Layer<never, import("effect/PlatformError").BadArgument | import("effect/PlatformError").PlatformError, import("effect/FileSystem").FileSystem | import("effect/http/HttpPlatform").HttpPlatform | HttpRouter.HttpRouter | Path.Path>;
+//# sourceMappingURL=Bootstrap.d.ts.map

package/dist/server/Bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Bootstrap.d.ts","sourceRoot":"","sources":["../../src/server/Bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAwC,MAAM,aAAa,CAAA;AAM9E,eAAO,MAAM,eAAe,6OAU3B,CAAA"}

package/dist/server/Bootstrap.js

@@ -0,0 +1,12 @@
+import { Effect, Layer, Path } from "effect";
+import { HttpRouter, HttpServerResponse, HttpStaticServer } from "effect/http";
+/** Auth handoff only. The design-backed stack UI will replace the JSON navigation in a later PR. */
+const document = `<!doctype html><html lang="en"><meta charset="utf-8"><meta name="viewport" content="width=device-width"><title>Alchemy console</title><body><main><p id="status">Signing in…</p><noscript>Enable JavaScript to sign in.</noscript></main><script type="module" src="/bootstrap.js"></script></body></html>`;
+export const BootstrapRoutes = Layer.mergeAll(HttpRouter.add("GET", "/", HttpServerResponse.html(document)), HttpRouter.add("GET", "/favicon.ico", HttpServerResponse.empty({ status: 204 })), Layer.unwrap(Effect.gen(function* () {
+    const path = yield* Path.Path;
+    return HttpStaticServer.layer({
+        root: yield* path.fromFileUrl(new URL("../../dist/client", import.meta.url)),
+        cacheControl: "no-store"
+    });
+})));
+//# sourceMappingURL=Bootstrap.js.map

package/dist/server/Bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Bootstrap.js","sourceRoot":"","sources":["../../src/server/Bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE9E,oGAAoG;AACpG,MAAM,QAAQ,GACZ,4SAA4S,CAAA;AAE9S,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAAC,QAAQ,CAC3C,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAC7D,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,EAAE,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAChF,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;IAC7B,OAAO,gBAAgB,CAAC,KAAK,CAAC;QAC5B,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,mBAAmB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5E,YAAY,EAAE,UAAU;KACzB,CAAC,CAAA;AACJ,CAAC,CAAC,CAAC,CACJ,CAAA"}

package/dist/server/Catalog.d.ts

@@ -0,0 +1,27 @@
+import { Context, Crypto, Effect, Layer } from "effect";
+import { CatalogReadError, StackNotFound, StackSummary } from "../api.js";
+import type { DiscoveryIssue, StackDetail, StackId, StackList } from "../api.js";
+import { type StackState } from "../schema.js";
+/** Server-private locator identity and read closure. Never serialize or retain in logs or browser storage. */
+export interface DiscoveredStack {
+    readonly key: string;
+    readonly summary: Omit<StackSummary, "id">;
+    readonly read: Effect.Effect<StackState, CatalogReadError>;
+}
+declare const StackSource_base: Context.ServiceClass<StackSource, "@knpkv/alchemy-console/StackSource", {
+    readonly discover: Effect.Effect<{
+        readonly stacks: ReadonlyArray<DiscoveredStack>;
+        readonly issues: ReadonlyArray<DiscoveryIssue>;
+    }, CatalogReadError>;
+}>;
+export declare class StackSource extends StackSource_base {
+}
+declare const Catalog_base: Context.ServiceClass<Catalog, "@knpkv/alchemy-console/Catalog", {
+    readonly list: Effect.Effect<StackList, CatalogReadError>;
+    readonly get: (id: StackId) => Effect.Effect<StackDetail, StackNotFound | CatalogReadError>;
+}>;
+export declare class Catalog extends Catalog_base {
+    static readonly layer: Layer.Layer<Catalog, never, Crypto.Crypto | StackSource>;
+}
+export {};
+//# sourceMappingURL=Catalog.d.ts.map

package/dist/server/Catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Catalog.d.ts","sourceRoot":"","sources":["../../src/server/Catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAA0B,MAAM,QAAQ,CAAA;AAC/E,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAChF,OAAO,EAAwB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAA;AAEpE,8GAA8G;AAC9G,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAA;CAC3D;;uBAGoB,MAAM,CAAC,MAAM,CAAC;QAC/B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC,CAAA;QAC/C,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,cAAc,CAAC,CAAA;KAC/C,EAAE,gBAAgB,CAAC;;AAJtB,qBAAa,WAAY,SAAQ,gBAKS;CAAG;;mBAG5B,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,gBAAgB,CAAC;kBAC3C,CAAC,EAAE,EAAE,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,GAAG,gBAAgB,CAAC;;AAF7F,qBAAa,OAAQ,SAAQ,YAGS;IACpC,MAAM,CAAC,QAAQ,CAAC,KAAK,2DAqEpB;CACF"}

package/dist/server/Catalog.js

@@ -0,0 +1,83 @@
+import { Context, Crypto, Effect, Layer, Ref, Schema, Semaphore } from "effect";
+import { CatalogReadError, StackNotFound, StackSummary } from "../api.js";
+import {} from "../schema.js";
+export class StackSource extends Context.Service()("@knpkv/alchemy-console/StackSource") {
+}
+export class Catalog extends Context.Service()("@knpkv/alchemy-console/Catalog") {
+    static layer = Layer.effect(Catalog, Effect.gen(function* () {
+        const source = yield* StackSource;
+        const cryptoService = yield* Crypto.Crypto;
+        const entries = yield* Ref.make(new Map());
+        const lock = yield* Semaphore.make(1);
+        const list = Effect.fn("AlchemyConsole.catalogList")(function* () {
+            const discovered = yield* source.discover;
+            if (discovered.stacks.length > 1000 || discovered.issues.length > 1000) {
+                return yield* new CatalogReadError({ reason: "limit" });
+            }
+            const current = yield* Ref.get(entries);
+            const previous = new Map([...current].map(([id, entry]) => [entry.key, id]));
+            const next = new Map();
+            const keys = new Set();
+            const summaries = [];
+            for (const entry of discovered.stacks) {
+                if (keys.has(entry.key))
+                    return yield* new CatalogReadError({ reason: "invalid-source" });
+                keys.add(entry.key);
+                const id = previous.get(entry.key) ?? (yield* cryptoService.randomUUIDv4.pipe(Effect.mapError(() => new CatalogReadError({ reason: "io" }))));
+                const summary = yield* Schema.decodeUnknownEffect(StackSummary)({
+                    id,
+                    app: entry.summary.app,
+                    stage: entry.summary.stage,
+                    backend: entry.summary.backend,
+                    alchemyVersion: entry.summary.alchemyVersion,
+                    lastDeploy: entry.summary.lastDeploy,
+                    resourceCount: entry.summary.resourceCount
+                }).pipe(Effect.mapError(() => new CatalogReadError({ reason: "invalid-source" })));
+                next.set(id, entry);
+                summaries.push(summary);
+            }
+            const issues = discovered.issues.map((issue) => ({ source: issue.source, reason: issue.reason }));
+            yield* Ref.set(entries, next);
+            return { stacks: summaries, issues };
+        }, lock.withPermit, Effect.timeoutOrElse({
+            duration: "2 minutes",
+            orElse: () => Effect.fail(new CatalogReadError({ reason: "limit" }))
+        }));
+        const get = Effect.fn("AlchemyConsole.catalogGet")(function* (id) {
+            const entry = (yield* Ref.get(entries)).get(id);
+            if (entry === undefined)
+                return yield* new StackNotFound({});
+            const state = yield* entry.read;
+            if (state.app !== entry.summary.app || state.stage !== entry.summary.stage ||
+                state.backend !== entry.summary.backend)
+                return yield* new CatalogReadError({ reason: "invalid-source" });
+            if (state.resources.length > 50_000)
+                return yield* new CatalogReadError({ reason: "limit" });
+            return {
+                id,
+                state: {
+                    app: state.app,
+                    stage: state.stage,
+                    backend: state.backend,
+                    alchemyVersion: state.alchemyVersion,
+                    lastDeploy: state.lastDeploy,
+                    resources: state.resources.map(publicResource)
+                }
+            };
+        });
+        return Catalog.of({ list: list(), get });
+    }));
+}
+/** Explicit projection prevents a private reader's extra fields from reaching a transport encoder. */
+const publicResource = (resource) => ({
+    fqn: resource.fqn,
+    logicalId: resource.logicalId,
+    resourceType: resource.resourceType,
+    status: resource.status,
+    parent: resource.parent,
+    providerId: resource.providerId,
+    account: resource.account,
+    region: resource.region,
+    consoleUrl: resource.consoleUrl
+});
+//# sourceMappingURL=Catalog.js.map

package/dist/server/Catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Catalog.js","sourceRoot":"","sources":["../../src/server/Catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAC/E,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAEzE,OAAO,EAAyC,MAAM,cAAc,CAAA;AASpE,MAAM,OAAO,WAAY,SAAQ,OAAO,CAAC,OAAO,EAK5C,CAAC,oCAAoC,CAAC;CAAG;AAE7C,MAAM,OAAO,OAAQ,SAAQ,OAAO,CAAC,OAAO,EAGxC,CAAC,gCAAgC,CAAC;IACpC,MAAM,CAAU,KAAK,GAAG,KAAK,CAAC,MAAM,CAClC,OAAO,EACP,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,WAAW,CAAA;QACjC,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAA;QAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAwC,IAAI,GAAG,EAAE,CAAC,CAAA;QACjF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACrC,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAClD,QAAQ,CAAC;YACP,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAA;YACzC,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;gBACvE,OAAO,KAAK,CAAC,CAAC,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;YACzD,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACvC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;YAC5E,MAAM,IAAI,GAAG,IAAI,GAAG,EAA4B,CAAA;YAChD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;YAC9B,MAAM,SAAS,GAAwB,EAAE,CAAA;YACzC,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;gBACtC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;oBAAE,OAAO,KAAK,CAAC,CAAC,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAA;gBACzF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;gBACnB,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,CAC3E,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAC9D,CAAC,CAAA;gBACF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;oBAC9D,EAAE;oBACF,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG;oBACtB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK;oBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO;oBAC9B,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc;oBAC5C,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;oBACpC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa;iBAC3C,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAA;gBAClF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;gBACnB,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACzB,CAAC;YACD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;YACjG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAC7B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAA;QACtC,CAAC,EACD,IAAI,CAAC,UAAU,EACf,MAAM,CAAC,aAAa,CAAC;YACnB,QAAQ,EAAE,WAAW;YACrB,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;SACrE,CAAC,CACH,CAAA;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EAAC,EAAW;YACtE,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAC/C,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC,CAAC,IAAI,aAAa,CAAC,EAAE,CAAC,CAAA;YAC5D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA;YAC/B,IACE,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,OAAO,CAAC,KAAK;gBACtE,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,OAAO;gBACvC,OAAO,KAAK,CAAC,CAAC,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAA;YAClE,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,MAAM;gBAAE,OAAO,KAAK,CAAC,CAAC,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;YAC5F,OAAO;gBACL,EAAE;gBACF,KAAK,EAAE;oBACL,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC;iBAC/C;aACF,CAAA;QACH,CAAC,CAAC,CAAA;QACF,OAAO,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;IAC1C,CAAC,CAAC,CACH,CAAA;CACF;AAED,sGAAsG;AACtG,MAAM,cAAc,GAAG,CAAC,QAAyB,EAAmB,EAAE,CAAC,CAAC;IACtE,GAAG,EAAE,QAAQ,CAAC,GAAG;IACjB,SAAS,EAAE,QAAQ,CAAC,SAAS;IAC7B,YAAY,EAAE,QAAQ,CAAC,YAAY;IACnC,MAAM,EAAE,QAAQ,CAAC,MAAM;IACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;IACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;IAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;IACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;IACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;CAChC,CAAC,CAAA"}

package/dist/server/Config.d.ts

@@ -0,0 +1,17 @@
+import { Config, Effect, Path, Schema } from "effect";
+export declare const Port: Schema.Int;
+declare const StartupError_base: Schema.Class<StartupError, Schema.TaggedStruct<"StartupError", {
+    readonly reason: Schema.Literals<readonly ["config", "invalid-port", "package"]>;
+}>, import("effect/Cause").YieldableError>;
+export declare class StartupError extends StartupError_base {
+}
+/** Resolve the manifest beside the built executable; release version edits need no source change. */
+export declare const readPackageVersion: () => Effect.Effect<string, StartupError, import("effect/FileSystem").FileSystem | Path.Path>;
+/** Read paths once at executable startup. None of this configuration crosses HTTP or browser storage. */
+export declare const loadConfig: (home: string) => Effect.Effect<{
+    root: string;
+    awsConfigFile: string;
+    directory: string;
+}, Config.ConfigError, Path.Path>;
+export {};
+//# sourceMappingURL=Config.d.ts.map

package/dist/server/Config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Config.d.ts","sourceRoot":"","sources":["../../src/server/Config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAGrD,eAAO,MAAM,IAAI,YAAwE,CAAA;;;;AAEzF,qBAAa,YAAa,SAAQ,iBAEhC;CAAG;AAEL,qGAAqG;AACrG,eAAO,MAAM,kBAAkB,+FAY7B,CAAA;AAEF,yGAAyG;AACzG,eAAO,MAAM,UAAU;;;;iCASrB,CAAA"}

package/dist/server/Config.js

@@ -0,0 +1,23 @@
+import { Config, Effect, Path, Schema } from "effect";
+import { readText } from "../internal/files.js";
+export const Port = Schema.Int.check(Schema.isBetween({ minimum: 1024, maximum: 65535 }));
+export class StartupError extends Schema.TaggedError()("StartupError", {
+    reason: Schema.Literals(["config", "invalid-port", "package"])
+}) {
+}
+/** Resolve the manifest beside the built executable; release version edits need no source change. */
+export const readPackageVersion = Effect.fn("AlchemyConsole.readPackageVersion")(function* () {
+    const path = yield* Path.Path;
+    const file = yield* path.fromFileUrl(new URL("../../package.json", import.meta.url)).pipe(Effect.mapError(() => new StartupError({ reason: "package" })));
+    return yield* readText(file).pipe(Effect.flatMap(Schema.decodeUnknownEffect(Schema.fromJsonString(Schema.Struct({ version: Schema.NonEmptyString })))), Effect.map(({ version }) => version), Effect.mapError(() => new StartupError({ reason: "package" })));
+});
+/** Read paths once at executable startup. None of this configuration crosses HTTP or browser storage. */
+export const loadConfig = Effect.fn("AlchemyConsole.loadConfig")(function* (home) {
+    const path = yield* Path.Path;
+    return {
+        root: yield* Config.String("ALCHEMY_CONSOLE_ROOT").pipe(Config.withDefault(path.join(home, "Work", "dev"))),
+        awsConfigFile: yield* Config.String("AWS_CONFIG_FILE").pipe(Config.withDefault(path.join(home, ".aws", "config"))),
+        directory: yield* Config.String("ALCHEMY_CONSOLE_HOME").pipe(Config.withDefault(path.join(home, ".cache", "alchemy-console")))
+    };
+});
+//# sourceMappingURL=Config.js.map

package/dist/server/Config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Config.js","sourceRoot":"","sources":["../../src/server/Config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAE/C,MAAM,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;AAEzF,MAAM,OAAO,YAAa,SAAQ,MAAM,CAAC,WAAW,EAAgB,CAAC,cAAc,EAAE;IACnF,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;CAC/D,CAAC;CAAG;AAEL,qGAAqG;AACrG,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,mCAAmC,CAAC,CAAC,QAAQ,CAAC;IACxF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;IAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CACvF,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAC/D,CAAA;IACD,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAC/B,MAAM,CAAC,OAAO,CACZ,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CACrG,EACD,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EACpC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAC/D,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,yGAAyG;AACzG,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EAAC,IAAY;IACrF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;IAC7B,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAC3G,aAAa,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QAClH,SAAS,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAC1D,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CACjE;KACF,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/server/ControlSocket.d.ts

@@ -0,0 +1,19 @@
+import type { OwnerSessionService } from "@knpkv/browser-pairing/owner-session";
+import { Effect, FileSystem, Option, Path, Schema } from "effect";
+declare const ControlError_base: Schema.Class<ControlError, Schema.TaggedStruct<"ControlError", {
+    readonly reason: Schema.Literals<readonly ["unsafe", "io", "occupied", "path-limit", "invalid-reply", "timeout", "unsupported-platform"]>;
+}>, import("effect/Cause").YieldableError>;
+export declare class ControlError extends ControlError_base {
+}
+/** Paths are server-private. The effective UID is read once at the executable boundary. */
+export interface ControlOptions {
+    readonly directory: string;
+    readonly port: number;
+    readonly uid: number;
+}
+/** Bind atomically; refuse all pre-existing entries. Never unlink a possibly live server during startup. */
+export declare const controlSocket: (options: ControlOptions, session: OwnerSessionService, listening: Effect.Effect<void, never, never>) => Effect.Effect<undefined, ControlError, FileSystem.FileSystem | Path.Path | import("effect/Scope").Scope>;
+/** None means no socket exists. Unsafe paths, stale sockets and bad replies propagate without starting another server. */
+export declare const requestLoginUrl: (options: ControlOptions) => Effect.Effect<Option.Option<string>, ControlError, FileSystem.FileSystem | Path.Path>;
+export {};
+//# sourceMappingURL=ControlSocket.d.ts.map

package/dist/server/ControlSocket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ControlSocket.d.ts","sourceRoot":"","sources":["../../src/server/ControlSocket.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAA;AAC/E,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAkB,MAAM,EAAE,MAAM,QAAQ,CAAA;;;;AAKjF,qBAAa,YAAa,SAAQ,iBAUhC;CAAG;AAEL,2FAA2F;AAC3F,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AA6ED,4GAA4G;AAC5G,eAAO,MAAM,aAAa,mNA4CxB,CAAA;AAMF,0HAA0H;AAC1H,eAAO,MAAM,eAAe,oHA0B1B,CAAA"}