@mysten-incubation/devstack 0.0.0

package/dist/orchestrators/router/traefik-container.mjs

@@ -0,0 +1,229 @@
+import { RouterBootFailed } from "./errors.mjs";
+import { DockerHost, DockerSpawner, dockerRun, dockerRunOk } from "../../runtime/docker/client.mjs";
+import { ComposeLabelKey, LabelKey } from "../../runtime/docker/labels.mjs";
+import { isNoSuchContainerStderr } from "../../runtime/docker/wrap.mjs";
+import { ensureNetwork } from "../../runtime/docker/network.mjs";
+import { inspectContainer } from "../../runtime/docker/container.mjs";
+import { Context, Effect, Layer } from "effect";
+import * as path from "node:path";
+//#region src/orchestrators/router/traefik-container.ts
+const TRAEFIK_DISPATCH_MOUNT_TARGET = "/etc/traefik/dispatch";
+const ROUTER_PROFILE_LABEL = LabelKey.routerProfile;
+const HOST_GATEWAY_ALIAS = "host.docker.internal:host-gateway";
+/** Default Traefik image. Tag, not digest — distilled-doc open
+*  question #9 (digest-pin is a follow-up). */
+const DEFAULT_TRAEFIK_IMAGE = "traefik:v3.5";
+var TraefikContainerOpsService = class extends Context.Service()("@devstack-rewrite/orchestrators/router/TraefikContainerOps") {};
+const sameHostPath = (left, right) => path.resolve(left) === path.resolve(right);
+const uniqueSortedEntrypointPorts = (entrypoints) => [...new Set(entrypoints.map((entrypoint) => entrypoint.port))].sort((a, b) => a - b);
+const traefikListenerEntrypoints = (entrypoints) => {
+	const byPort = /* @__PURE__ */ new Map();
+	for (const entrypoint of entrypoints) if (!byPort.has(entrypoint.port)) byPort.set(entrypoint.port, entrypoint);
+	return Array.from(byPort.values());
+};
+const traefikExpectedPortPairs = (entrypoints) => uniqueSortedEntrypointPorts(entrypoints).map((port) => `${port}=127.0.0.1:${port}`);
+const traefikExpectedCommand = (entrypoints) => [
+	`--providers.file.directory=${TRAEFIK_DISPATCH_MOUNT_TARGET}`,
+	"--providers.file.watch=true",
+	"--api.dashboard=false",
+	"--log.level=INFO",
+	...traefikListenerEntrypoints(entrypoints).map((entrypoint) => `--entrypoints.${entrypoint.name}.address=:${entrypoint.port}`)
+];
+const mountedDispatchDirMatches = (existing, expected) => existing.dispatchMount !== null && existing.dispatchMount.target === "/etc/traefik/dispatch" && existing.dispatchMount.readOnly && sameHostPath(existing.dispatchMount.source, expected);
+const sameStrings = (left, right) => left.length === right.length && left.every((value, index) => value === right[index]);
+const sameStringSet = (left, right) => sameStrings([...new Set(left)].sort(), [...new Set(right)].sort());
+const portBindingPair = (binding) => {
+	const [container, host] = binding.split("=");
+	const containerPort = container?.split("/")[0];
+	const hostPort = host?.slice(host.lastIndexOf(":") + 1);
+	const hostIp = host?.slice(0, host.lastIndexOf(":"));
+	if (containerPort === void 0 || hostPort === void 0 || hostIp === void 0) return null;
+	if (!/^\d+$/.test(containerPort) || !/^\d+$/.test(hostPort)) return null;
+	return `${containerPort}=${hostIp}:${hostPort}`;
+};
+const portBindingsMatch = (existing, entrypoints) => sameStringSet(existing.flatMap((binding) => {
+	const pair = portBindingPair(binding);
+	return pair === null ? [] : [pair];
+}), traefikExpectedPortPairs(entrypoints));
+const routerProfileLabelsMatch = (labels, profile) => {
+	if (labels[LabelKey.managed] !== "true") return false;
+	if (labels[LabelKey.routerMarker] !== "true") return false;
+	if (labels[ROUTER_PROFILE_LABEL] !== profile.id) return false;
+	if (labels[LabelKey.routerSpecVersion] !== "3") return false;
+	for (const forbidden of [
+		LabelKey.app,
+		LabelKey.stack,
+		LabelKey.plugin,
+		LabelKey.role,
+		LabelKey.cycle,
+		ComposeLabelKey.project,
+		ComposeLabelKey.service,
+		ComposeLabelKey.containerNumber,
+		ComposeLabelKey.version,
+		ComposeLabelKey.oneoff,
+		ComposeLabelKey.network,
+		ComposeLabelKey.volume
+	]) if (labels[forbidden] !== void 0) return false;
+	return true;
+};
+const routerSpecMatches = (existing, inputs) => existing.image === inputs.image && mountedDispatchDirMatches(existing, inputs.profile.dispatchDir) && portBindingsMatch(existing.portBindings, inputs.entrypoints) && sameStringSet(existing.command, traefikExpectedCommand(inputs.entrypoints)) && existing.networks.includes(inputs.profile.networkName) && routerProfileLabelsMatch(existing.labels, inputs.profile);
+/** Adopt-or-create per the architecture's 4-way decision table.
+*  Idempotent: callers may invoke this once per supervisor lifetime,
+*  and a follow-up call returns `decision: 'adopt'` if nothing has
+*  changed. */
+const bootstrap = (inputs) => Effect.gen(function* () {
+	const ops = yield* TraefikContainerOpsService;
+	const network = yield* ops.ensureNetwork(inputs.profile.networkName);
+	const existing = yield* ops.inspectContainer(inputs.profile.containerName);
+	if (existing === null) return {
+		decision: "recreate-fresh",
+		containerId: (yield* ops.createFresh({
+			name: inputs.profile.containerName,
+			image: inputs.image,
+			network: inputs.profile.networkName,
+			routerProfileId: inputs.profile.id,
+			entrypoints: inputs.entrypoints,
+			dispatchDirHostPath: inputs.profile.dispatchDir
+		})).id,
+		networkId: network.id,
+		imageMatches: true
+	};
+	const configMatches = routerSpecMatches(existing, inputs);
+	if (existing.running === true && configMatches) return {
+		decision: "adopt",
+		containerId: existing.id,
+		networkId: network.id,
+		imageMatches: true
+	};
+	if (existing.running === "unknown" && configMatches) {
+		if (inputs.protectedRouteLeaseIds.length > 0) return yield* Effect.fail(new RouterBootFailed({
+			stage: "ensure-container",
+			detail: `router profile '${inputs.profile.id}' container '${inputs.profile.containerName}' has unknown lifecycle state, and live or unknown route leases exist: ` + inputs.protectedRouteLeaseIds.join(", ")
+		}));
+		yield* ops.forceRemove(inputs.profile.containerName);
+		return {
+			decision: "recreate-fresh",
+			containerId: (yield* ops.createFresh({
+				name: inputs.profile.containerName,
+				image: inputs.image,
+				network: inputs.profile.networkName,
+				routerProfileId: inputs.profile.id,
+				entrypoints: inputs.entrypoints,
+				dispatchDirHostPath: inputs.profile.dispatchDir
+			})).id,
+			networkId: network.id,
+			imageMatches: true
+		};
+	}
+	if (!configMatches) {
+		if (inputs.protectedRouteLeaseIds.length > 0) return yield* Effect.fail(new RouterBootFailed({
+			stage: "ensure-container",
+			detail: `router profile '${inputs.profile.id}' container '${inputs.profile.containerName}' does not match the requested spec, but live or unknown route leases exist: ` + inputs.protectedRouteLeaseIds.join(", ")
+		}));
+		yield* ops.forceRemove(inputs.profile.containerName);
+		return {
+			decision: "recreate-fresh",
+			containerId: (yield* ops.createFresh({
+				name: inputs.profile.containerName,
+				image: inputs.image,
+				network: inputs.profile.networkName,
+				routerProfileId: inputs.profile.id,
+				entrypoints: inputs.entrypoints,
+				dispatchDirHostPath: inputs.profile.dispatchDir
+			})).id,
+			networkId: network.id,
+			imageMatches: true
+		};
+	}
+	return {
+		decision: "resume",
+		containerId: (yield* ops.resume(inputs.profile.containerName).pipe(Effect.catchTag("RouterBootFailed", (cause) => inputs.protectedRouteLeaseIds.length > 0 ? Effect.fail(new RouterBootFailed({
+			stage: "ensure-container",
+			detail: `router profile '${inputs.profile.id}' container '${inputs.profile.containerName}' could not be resumed, and live or unknown route leases exist: ` + inputs.protectedRouteLeaseIds.join(", "),
+			cause
+		})) : ops.forceRemove(inputs.profile.containerName).pipe(Effect.andThen(ops.createFresh({
+			name: inputs.profile.containerName,
+			image: inputs.image,
+			network: inputs.profile.networkName,
+			routerProfileId: inputs.profile.id,
+			entrypoints: inputs.entrypoints,
+			dispatchDirHostPath: inputs.profile.dispatchDir
+		})))))).id,
+		networkId: network.id,
+		imageMatches: true
+	};
+}).pipe(Effect.withSpan("orchestrator.router.bootstrap"));
+const routerBootFailed = (stage, detail, cause) => new RouterBootFailed({
+	stage,
+	detail,
+	...cause === void 0 ? {} : { cause }
+});
+const traefikRunArgs = (args) => {
+	const ports = uniqueSortedEntrypointPorts(args.entrypoints);
+	const dockerArgs = [
+		"-d",
+		"--name",
+		args.name,
+		"--network",
+		args.network,
+		"--label",
+		`${LabelKey.managed}=true`,
+		"--label",
+		`${LabelKey.routerMarker}=true`,
+		"--label",
+		`${ROUTER_PROFILE_LABEL}=${args.routerProfileId}`,
+		"--label",
+		`${LabelKey.routerSpecVersion}=3`,
+		"--add-host",
+		HOST_GATEWAY_ALIAS
+	];
+	for (const port of ports) dockerArgs.push("-p", `127.0.0.1:${port}:${port}`);
+	dockerArgs.push("--mount", `type=bind,source=${args.dispatchDirHostPath},target=${TRAEFIK_DISPATCH_MOUNT_TARGET},readonly`, args.image, ...traefikExpectedCommand(args.entrypoints));
+	return dockerArgs;
+};
+const layerTraefikContainerOpsDocker = Layer.effect(TraefikContainerOpsService, Effect.gen(function* () {
+	const dockerHost = yield* DockerHost;
+	const dockerSpawner = yield* DockerSpawner;
+	const provideDocker = (effect) => effect.pipe(Effect.provideService(DockerHost, dockerHost), Effect.provideService(DockerSpawner, dockerSpawner));
+	return TraefikContainerOpsService.of({
+		ensureNetwork: (name) => provideDocker(ensureNetwork(name, {
+			app: "devstack-router",
+			stack: name,
+			composeUi: false
+		})).pipe(Effect.map((id) => ({ id })), Effect.mapError((cause) => routerBootFailed("ensure-network", `failed to ensure shared router network '${name}'`, cause))),
+		inspectContainer: (name) => provideDocker(inspectContainer(name)).pipe(Effect.mapError((cause) => routerBootFailed("inspect", `failed to inspect router container '${name}'`, cause)), Effect.map((facts) => facts === null ? null : {
+			id: facts.id,
+			running: facts.lifecycle.kind === "unknown" ? "unknown" : facts.running,
+			image: facts.image,
+			dispatchMount: (() => {
+				const mount = facts.mounts?.find((m) => m.target === TRAEFIK_DISPATCH_MOUNT_TARGET);
+				return mount === void 0 ? null : {
+					source: mount.source,
+					target: mount.target,
+					readOnly: mount.readOnly === true
+				};
+			})(),
+			portBindings: facts.portBindings ?? [],
+			command: facts.command ?? [],
+			networks: facts.networks ?? [],
+			labels: facts.labels ?? {}
+		})),
+		createFresh: (args) => provideDocker(dockerRun("run", traefikRunArgs(args))).pipe(Effect.map((result) => ({ id: result.stdout.trim() })), Effect.mapError((cause) => routerBootFailed("ensure-container", `failed to create router container '${args.name}'`, cause))),
+		resume: (name) => provideDocker(dockerRun("start", [name])).pipe(Effect.flatMap(() => provideDocker(inspectContainer(name))), Effect.flatMap((facts) => facts === null ? Effect.fail(routerBootFailed("inspect", `router container '${name}' started but could not be inspected`)) : Effect.succeed({ id: facts.id })), Effect.mapError((cause) => cause instanceof RouterBootFailed ? cause : routerBootFailed("ensure-container", `failed to resume router container '${name}'`, cause))),
+		forceRemove: (name) => provideDocker(dockerRunOk("rm", ["-f", name])).pipe(Effect.flatMap((result) => {
+			if (result.exitCode === 0 || isNoSuchContainerStderr(result.stderr)) return Effect.void;
+			return Effect.fail(routerBootFailed("ensure-container", `failed to remove router container '${name}': ${result.stderr}`));
+		}), Effect.mapError((cause) => cause instanceof RouterBootFailed ? cause : routerBootFailed("ensure-container", `failed to remove router container '${name}'`, cause)))
+	});
+}));
+Layer.succeed(TraefikContainerOpsService)({
+	ensureNetwork: (_name) => Effect.succeed({ id: "stub-network" }),
+	inspectContainer: (_name) => Effect.succeed(null),
+	createFresh: (_args) => Effect.succeed({ id: "stub-container" }),
+	resume: (_name) => Effect.succeed({ id: "stub-container" }),
+	forceRemove: (_name) => Effect.succeed(void 0)
+});
+//#endregion
+export { DEFAULT_TRAEFIK_IMAGE, TraefikContainerOpsService, bootstrap, layerTraefikContainerOpsDocker, routerProfileLabelsMatch, uniqueSortedEntrypointPorts };
+
+//# sourceMappingURL=traefik-container.mjs.map

package/dist/orchestrators/router/traefik-container.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"traefik-container.mjs","names":[],"sources":["../../../src/orchestrators/router/traefik-container.ts"],"sourcesContent":["// Traefik container lifecycle — router-profile singleton.\n//\n// Architecture distilled-doc §\"Lifecycle states\":\n//   | Found state                | Image matches | Action                       |\n//   |----------------------------|---------------|------------------------------|\n//   | Container absent           | n/a           | Ensure network + create fresh|\n//   | Container running          | yes           | Adopt (no-op)                |\n//   | Container running          | no            | Force-remove + create fresh  |\n//   | Container stopped          | yes           | Resume; on fail recreate fresh|\n//   | Container stopped          | no            | Force-remove + create fresh  |\n//   | Network absent             | n/a           | Create network first         |\n//\n// Key invariants:\n//   - One container per router profile. NOT per-stack — the router\n//     outlives any one `pnpm dev`.\n//   - The container does NOT take the stack identity label set;\n//     instead a singleton router label distinguishes it from per-stack\n//     resources (so per-stack `wipe` doesn't touch it).\n//   - Bootstrap runs ONCE per supervisor lifetime (architecture\n//     invariant #11). Hot-reload cycles do NOT re-pay docker inspect.\n//\n// This file is INTENTIONALLY a thin orchestration shell. Real container\n// I/O lives in `runtime/docker/*`; the effectful operations are\n// abstracted behind a `TraefikContainerOps` service so tests can inject\n// a no-op implementation without changing route delivery.\n\nimport { Context, Effect, Layer } from 'effect';\nimport * as path from 'node:path';\n\nimport { RouterBootFailed } from './errors.ts';\nimport type { Entrypoint } from './entrypoints.ts';\nimport {\n\tDockerHost,\n\tDockerSpawner,\n\tComposeLabelKey,\n\tensureNetwork,\n\tinspectContainer,\n\tisNoSuchContainerStderr,\n\tLabelKey,\n} from '../../runtime/docker/index.ts';\nimport { dockerRun, dockerRunOk } from '../../runtime/docker/client.ts';\nimport type { RouterProfile } from './profile.ts';\n\nexport const TRAEFIK_DISPATCH_MOUNT_TARGET = '/etc/traefik/dispatch';\nexport const ROUTER_PROFILE_LABEL = LabelKey.routerProfile;\nexport const ROUTER_CONTAINER_SPEC_VERSION = '3';\nexport const HOST_GATEWAY_ALIAS = 'host.docker.internal:host-gateway';\n\n/** Default Traefik image. Tag, not digest — distilled-doc open\n *  question #9 (digest-pin is a follow-up). */\nexport const DEFAULT_TRAEFIK_IMAGE = 'traefik:v3.5';\n\n// ---------------------------------------------------------------------------\n// BootDecision — observability shape\n// ---------------------------------------------------------------------------\n\n/** What the lifecycle decision was. Emitted as a span attribute and\n *  threaded into the inventory row (architecture distilled-doc\n *  §\"Outputs / capabilities provided\" — \"A boot-decision report\"). */\nexport type BootDecision = 'adopt' | 'resume' | 'recreate-fresh' | 'opt-out';\n\nexport interface BootReport {\n\treadonly decision: BootDecision;\n\treadonly containerId: string | null;\n\treadonly networkId: string | null;\n\t/** Whether the observed or freshly-created container is the right image. */\n\treadonly imageMatches: boolean;\n}\n\n// ---------------------------------------------------------------------------\n// TraefikContainerOps — the I/O seam\n// ---------------------------------------------------------------------------\n\nexport interface InspectedTraefikContainer {\n\treadonly id: string;\n\treadonly running: boolean | 'unknown';\n\treadonly image: string;\n\treadonly dispatchMount: {\n\t\treadonly source: string;\n\t\treadonly target: string;\n\t\treadonly readOnly: boolean;\n\t} | null;\n\treadonly portBindings: ReadonlyArray<string>;\n\treadonly command: ReadonlyArray<string>;\n\treadonly networks: ReadonlyArray<string>;\n\treadonly labels: Readonly<Record<string, string>>;\n}\n\n/** The orchestrator does NOT talk to docker directly. It yields these\n *  operations through a service tag whose layer can be wired to\n *  `runtime/docker/*` in production or to a no-op stub in tests. This\n *  is the load-bearing decoupling that lets the orchestrator stay at\n *  \"walk decls + write files\" complexity without growing a docker\n *  dependency.\n *\n *  Architecture: orchestrator depends on L0+L1 contracts, never on\n *  concrete L1 implementations. */\nexport interface TraefikContainerOps {\n\t/** Idempotent network ensure. Returns the network id. */\n\treadonly ensureNetwork: (\n\t\tname: string,\n\t) => Effect.Effect<{ readonly id: string }, RouterBootFailed>;\n\n\t/** Inspect the singleton router container. Returns `null` when\n\t *  absent. */\n\treadonly inspectContainer: (\n\t\tname: string,\n\t) => Effect.Effect<InspectedTraefikContainer | null, RouterBootFailed>;\n\n\t/** Create the container fresh (after force-remove if necessary).\n\t *  The container is started with file-provider configured against\n\t *  `dispatchDirHostPath` (bind-mounted read-only to `/etc/traefik/dispatch`)\n\t *  and one `--entrypoints.<name>.address=:<port>` flag per registered\n\t *  entrypoint. The shared network is attached at create time. */\n\treadonly createFresh: (args: {\n\t\treadonly name: string;\n\t\treadonly image: string;\n\t\treadonly network: string;\n\t\treadonly routerProfileId: string;\n\t\treadonly entrypoints: ReadonlyArray<Entrypoint>;\n\t\treadonly dispatchDirHostPath: string;\n\t}) => Effect.Effect<{ readonly id: string }, RouterBootFailed>;\n\n\t/** Start an already-existing stopped container. May fail (port\n\t *  conflict, daemon flake); caller's contract is to fall back to\n\t *  fresh-recreate on failure. */\n\treadonly resume: (name: string) => Effect.Effect<{ readonly id: string }, RouterBootFailed>;\n\n\t/** Force-remove a container (running or stopped). Idempotent on\n\t *  \"no such container\". */\n\treadonly forceRemove: (name: string) => Effect.Effect<void, RouterBootFailed>;\n}\n\nexport class TraefikContainerOpsService extends Context.Service<\n\tTraefikContainerOpsService,\n\tTraefikContainerOps\n>()('@devstack-rewrite/orchestrators/router/TraefikContainerOps') {}\n\n// ---------------------------------------------------------------------------\n// Bootstrap — decides + executes\n// ---------------------------------------------------------------------------\n\nexport interface BootstrapInputs {\n\treadonly image: string;\n\treadonly entrypoints: ReadonlyArray<Entrypoint>;\n\treadonly profile: RouterProfile;\n\treadonly protectedRouteLeaseIds: ReadonlyArray<string>;\n}\n\nconst sameHostPath = (left: string, right: string): boolean =>\n\tpath.resolve(left) === path.resolve(right);\n\nexport const uniqueSortedEntrypointPorts = (\n\tentrypoints: ReadonlyArray<Entrypoint>,\n): ReadonlyArray<number> =>\n\t[...new Set(entrypoints.map((entrypoint) => entrypoint.port))].sort((a, b) => a - b);\n\nconst traefikListenerEntrypoints = (\n\tentrypoints: ReadonlyArray<Entrypoint>,\n): ReadonlyArray<Entrypoint> => {\n\tconst byPort = new Map<number, Entrypoint>();\n\tfor (const entrypoint of entrypoints) {\n\t\tif (!byPort.has(entrypoint.port)) byPort.set(entrypoint.port, entrypoint);\n\t}\n\treturn Array.from(byPort.values());\n};\n\nexport const traefikExpectedPortBindings = (\n\tentrypoints: ReadonlyArray<Entrypoint>,\n): ReadonlyArray<string> =>\n\tuniqueSortedEntrypointPorts(entrypoints).map((port) => `${port}/tcp=127.0.0.1:${port}`);\n\nconst traefikExpectedPortPairs = (entrypoints: ReadonlyArray<Entrypoint>): ReadonlyArray<string> =>\n\tuniqueSortedEntrypointPorts(entrypoints).map((port) => `${port}=127.0.0.1:${port}`);\n\nexport const traefikExpectedCommand = (\n\tentrypoints: ReadonlyArray<Entrypoint>,\n): ReadonlyArray<string> => [\n\t`--providers.file.directory=${TRAEFIK_DISPATCH_MOUNT_TARGET}`,\n\t'--providers.file.watch=true',\n\t'--api.dashboard=false',\n\t'--log.level=INFO',\n\t...traefikListenerEntrypoints(entrypoints).map(\n\t\t(entrypoint) => `--entrypoints.${entrypoint.name}.address=:${entrypoint.port}`,\n\t),\n];\n\nconst mountedDispatchDirMatches = (\n\texisting: {\n\t\treadonly dispatchMount: {\n\t\t\treadonly source: string;\n\t\t\treadonly target: string;\n\t\t\treadonly readOnly: boolean;\n\t\t} | null;\n\t},\n\texpected: string,\n): boolean =>\n\texisting.dispatchMount !== null &&\n\texisting.dispatchMount.target === TRAEFIK_DISPATCH_MOUNT_TARGET &&\n\texisting.dispatchMount.readOnly &&\n\tsameHostPath(existing.dispatchMount.source, expected);\n\nconst sameStrings = (left: ReadonlyArray<string>, right: ReadonlyArray<string>): boolean =>\n\tleft.length === right.length && left.every((value, index) => value === right[index]);\n\nconst sameStringSet = (left: ReadonlyArray<string>, right: ReadonlyArray<string>): boolean =>\n\tsameStrings([...new Set(left)].sort(), [...new Set(right)].sort());\n\nconst portBindingPair = (binding: string): string | null => {\n\tconst [container, host] = binding.split('=');\n\tconst containerPort = container?.split('/')[0];\n\tconst hostPort = host?.slice(host.lastIndexOf(':') + 1);\n\tconst hostIp = host?.slice(0, host.lastIndexOf(':'));\n\tif (containerPort === undefined || hostPort === undefined || hostIp === undefined) return null;\n\tif (!/^\\d+$/.test(containerPort) || !/^\\d+$/.test(hostPort)) return null;\n\treturn `${containerPort}=${hostIp}:${hostPort}`;\n};\n\nconst portBindingsMatch = (\n\texisting: ReadonlyArray<string>,\n\tentrypoints: ReadonlyArray<Entrypoint>,\n): boolean =>\n\tsameStringSet(\n\t\texisting.flatMap((binding) => {\n\t\t\tconst pair = portBindingPair(binding);\n\t\t\treturn pair === null ? [] : [pair];\n\t\t}),\n\t\ttraefikExpectedPortPairs(entrypoints),\n\t);\n\nexport const routerProfileLabelsMatch = (\n\tlabels: Readonly<Record<string, string>>,\n\tprofile: RouterProfile,\n): boolean => {\n\tif (labels[LabelKey.managed] !== 'true') return false;\n\tif (labels[LabelKey.routerMarker] !== 'true') return false;\n\tif (labels[ROUTER_PROFILE_LABEL] !== profile.id) return false;\n\tif (labels[LabelKey.routerSpecVersion] !== ROUTER_CONTAINER_SPEC_VERSION) return false;\n\tfor (const forbidden of [\n\t\tLabelKey.app,\n\t\tLabelKey.stack,\n\t\tLabelKey.plugin,\n\t\tLabelKey.role,\n\t\tLabelKey.cycle,\n\t\tComposeLabelKey.project,\n\t\tComposeLabelKey.service,\n\t\tComposeLabelKey.containerNumber,\n\t\tComposeLabelKey.version,\n\t\tComposeLabelKey.oneoff,\n\t\tComposeLabelKey.network,\n\t\tComposeLabelKey.volume,\n\t]) {\n\t\tif (labels[forbidden] !== undefined) return false;\n\t}\n\treturn true;\n};\n\nconst routerSpecMatches = (existing: InspectedTraefikContainer, inputs: BootstrapInputs): boolean =>\n\texisting.image === inputs.image &&\n\tmountedDispatchDirMatches(existing, inputs.profile.dispatchDir) &&\n\tportBindingsMatch(existing.portBindings, inputs.entrypoints) &&\n\tsameStringSet(existing.command, traefikExpectedCommand(inputs.entrypoints)) &&\n\texisting.networks.includes(inputs.profile.networkName) &&\n\trouterProfileLabelsMatch(existing.labels, inputs.profile);\n\n/** Adopt-or-create per the architecture's 4-way decision table.\n *  Idempotent: callers may invoke this once per supervisor lifetime,\n *  and a follow-up call returns `decision: 'adopt'` if nothing has\n *  changed. */\nexport const bootstrap = (\n\tinputs: BootstrapInputs,\n): Effect.Effect<BootReport, RouterBootFailed, TraefikContainerOpsService> =>\n\tEffect.gen(function* () {\n\t\tconst ops = yield* TraefikContainerOpsService;\n\t\tconst network = yield* ops.ensureNetwork(inputs.profile.networkName);\n\t\tconst existing = yield* ops.inspectContainer(inputs.profile.containerName);\n\n\t\t// Decision table.\n\t\tif (existing === null) {\n\t\t\tconst created = yield* ops.createFresh({\n\t\t\t\tname: inputs.profile.containerName,\n\t\t\t\timage: inputs.image,\n\t\t\t\tnetwork: inputs.profile.networkName,\n\t\t\t\trouterProfileId: inputs.profile.id,\n\t\t\t\tentrypoints: inputs.entrypoints,\n\t\t\t\tdispatchDirHostPath: inputs.profile.dispatchDir,\n\t\t\t});\n\t\t\treturn {\n\t\t\t\tdecision: 'recreate-fresh' as const,\n\t\t\t\tcontainerId: created.id,\n\t\t\t\tnetworkId: network.id,\n\t\t\t\timageMatches: true,\n\t\t\t};\n\t\t}\n\n\t\tconst configMatches = routerSpecMatches(existing, inputs);\n\n\t\tif (existing.running === true && configMatches) {\n\t\t\treturn {\n\t\t\t\tdecision: 'adopt' as const,\n\t\t\t\tcontainerId: existing.id,\n\t\t\t\tnetworkId: network.id,\n\t\t\t\timageMatches: true,\n\t\t\t};\n\t\t}\n\n\t\tif (existing.running === 'unknown' && configMatches) {\n\t\t\tif (inputs.protectedRouteLeaseIds.length > 0) {\n\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\tnew RouterBootFailed({\n\t\t\t\t\t\tstage: 'ensure-container',\n\t\t\t\t\t\tdetail:\n\t\t\t\t\t\t\t`router profile '${inputs.profile.id}' container '${inputs.profile.containerName}' ` +\n\t\t\t\t\t\t\t`has unknown lifecycle state, and live or unknown route leases exist: ` +\n\t\t\t\t\t\t\tinputs.protectedRouteLeaseIds.join(', '),\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}\n\t\t\tyield* ops.forceRemove(inputs.profile.containerName);\n\t\t\tconst created = yield* ops.createFresh({\n\t\t\t\tname: inputs.profile.containerName,\n\t\t\t\timage: inputs.image,\n\t\t\t\tnetwork: inputs.profile.networkName,\n\t\t\t\trouterProfileId: inputs.profile.id,\n\t\t\t\tentrypoints: inputs.entrypoints,\n\t\t\t\tdispatchDirHostPath: inputs.profile.dispatchDir,\n\t\t\t});\n\t\t\treturn {\n\t\t\t\tdecision: 'recreate-fresh' as const,\n\t\t\t\tcontainerId: created.id,\n\t\t\t\tnetworkId: network.id,\n\t\t\t\timageMatches: true,\n\t\t\t};\n\t\t}\n\n\t\tif (!configMatches) {\n\t\t\tif (inputs.protectedRouteLeaseIds.length > 0) {\n\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\tnew RouterBootFailed({\n\t\t\t\t\t\tstage: 'ensure-container',\n\t\t\t\t\t\tdetail:\n\t\t\t\t\t\t\t`router profile '${inputs.profile.id}' container '${inputs.profile.containerName}' ` +\n\t\t\t\t\t\t\t`does not match the requested spec, but live or unknown route leases exist: ` +\n\t\t\t\t\t\t\tinputs.protectedRouteLeaseIds.join(', '),\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}\n\t\t\t// Running or stopped with stale image, bind mount, entrypoints,\n\t\t\t// provider args, network, labels, or mount mode — force-remove\n\t\t\t// + recreate. A profile singleton can only serve the spec it\n\t\t\t// was created with.\n\t\t\tyield* ops.forceRemove(inputs.profile.containerName);\n\t\t\tconst created = yield* ops.createFresh({\n\t\t\t\tname: inputs.profile.containerName,\n\t\t\t\timage: inputs.image,\n\t\t\t\tnetwork: inputs.profile.networkName,\n\t\t\t\trouterProfileId: inputs.profile.id,\n\t\t\t\tentrypoints: inputs.entrypoints,\n\t\t\t\tdispatchDirHostPath: inputs.profile.dispatchDir,\n\t\t\t});\n\t\t\treturn {\n\t\t\t\tdecision: 'recreate-fresh' as const,\n\t\t\t\tcontainerId: created.id,\n\t\t\t\tnetworkId: network.id,\n\t\t\t\timageMatches: true,\n\t\t\t};\n\t\t}\n\n\t\t// Stopped + image matches → resume; on failure recreate fresh.\n\t\tconst resumed = yield* ops.resume(inputs.profile.containerName).pipe(\n\t\t\tEffect.catchTag('RouterBootFailed', (cause) =>\n\t\t\t\tinputs.protectedRouteLeaseIds.length > 0\n\t\t\t\t\t? Effect.fail(\n\t\t\t\t\t\t\tnew RouterBootFailed({\n\t\t\t\t\t\t\t\tstage: 'ensure-container',\n\t\t\t\t\t\t\t\tdetail:\n\t\t\t\t\t\t\t\t\t`router profile '${inputs.profile.id}' container '${inputs.profile.containerName}' ` +\n\t\t\t\t\t\t\t\t\t`could not be resumed, and live or unknown route leases exist: ` +\n\t\t\t\t\t\t\t\t\tinputs.protectedRouteLeaseIds.join(', '),\n\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t)\n\t\t\t\t\t: ops.forceRemove(inputs.profile.containerName).pipe(\n\t\t\t\t\t\t\tEffect.andThen(\n\t\t\t\t\t\t\t\tops.createFresh({\n\t\t\t\t\t\t\t\t\tname: inputs.profile.containerName,\n\t\t\t\t\t\t\t\t\timage: inputs.image,\n\t\t\t\t\t\t\t\t\tnetwork: inputs.profile.networkName,\n\t\t\t\t\t\t\t\t\trouterProfileId: inputs.profile.id,\n\t\t\t\t\t\t\t\t\tentrypoints: inputs.entrypoints,\n\t\t\t\t\t\t\t\t\tdispatchDirHostPath: inputs.profile.dispatchDir,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t),\n\t\t\t),\n\t\t);\n\t\treturn {\n\t\t\tdecision: 'resume' as const,\n\t\t\tcontainerId: resumed.id,\n\t\t\tnetworkId: network.id,\n\t\t\timageMatches: true,\n\t\t};\n\t}).pipe(Effect.withSpan('orchestrator.router.bootstrap'));\n\n// ---------------------------------------------------------------------------\n// Docker-backed layer\n// ---------------------------------------------------------------------------\n\nconst routerBootFailed = (\n\tstage: RouterBootFailed['stage'],\n\tdetail: string,\n\tcause?: unknown,\n): RouterBootFailed =>\n\tnew RouterBootFailed({\n\t\tstage,\n\t\tdetail,\n\t\t...(cause === undefined ? {} : { cause }),\n\t});\n\nconst traefikRunArgs = (args: {\n\treadonly name: string;\n\treadonly image: string;\n\treadonly network: string;\n\treadonly routerProfileId: string;\n\treadonly entrypoints: ReadonlyArray<Entrypoint>;\n\treadonly dispatchDirHostPath: string;\n}): ReadonlyArray<string> => {\n\tconst ports = uniqueSortedEntrypointPorts(args.entrypoints);\n\tconst dockerArgs: Array<string> = [\n\t\t'-d',\n\t\t'--name',\n\t\targs.name,\n\t\t'--network',\n\t\targs.network,\n\t\t'--label',\n\t\t`${LabelKey.managed}=true`,\n\t\t'--label',\n\t\t`${LabelKey.routerMarker}=true`,\n\t\t'--label',\n\t\t`${ROUTER_PROFILE_LABEL}=${args.routerProfileId}`,\n\t\t'--label',\n\t\t`${LabelKey.routerSpecVersion}=${ROUTER_CONTAINER_SPEC_VERSION}`,\n\t\t'--add-host',\n\t\tHOST_GATEWAY_ALIAS,\n\t];\n\tfor (const port of ports) {\n\t\tdockerArgs.push('-p', `127.0.0.1:${port}:${port}`);\n\t}\n\tdockerArgs.push(\n\t\t'--mount',\n\t\t`type=bind,source=${args.dispatchDirHostPath},target=${TRAEFIK_DISPATCH_MOUNT_TARGET},readonly`,\n\t\targs.image,\n\t\t...traefikExpectedCommand(args.entrypoints),\n\t);\n\treturn dockerArgs;\n};\n\nexport const layerTraefikContainerOpsDocker: Layer.Layer<\n\tTraefikContainerOpsService,\n\tnever,\n\tDockerHost | DockerSpawner\n> = Layer.effect(\n\tTraefikContainerOpsService,\n\tEffect.gen(function* () {\n\t\tconst dockerHost = yield* DockerHost;\n\t\tconst dockerSpawner = yield* DockerSpawner;\n\t\tconst provideDocker = <A, E>(\n\t\t\teffect: Effect.Effect<A, E, DockerHost | DockerSpawner>,\n\t\t): Effect.Effect<A, E, never> =>\n\t\t\teffect.pipe(\n\t\t\t\tEffect.provideService(DockerHost, dockerHost),\n\t\t\t\tEffect.provideService(DockerSpawner, dockerSpawner),\n\t\t\t);\n\n\t\tconst ops: TraefikContainerOps = {\n\t\t\tensureNetwork: (name) =>\n\t\t\t\tprovideDocker(\n\t\t\t\t\tensureNetwork(name, { app: 'devstack-router', stack: name, composeUi: false }),\n\t\t\t\t).pipe(\n\t\t\t\t\tEffect.map((id) => ({ id })),\n\t\t\t\t\tEffect.mapError((cause) =>\n\t\t\t\t\t\trouterBootFailed(\n\t\t\t\t\t\t\t'ensure-network',\n\t\t\t\t\t\t\t`failed to ensure shared router network '${name}'`,\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\tinspectContainer: (name) =>\n\t\t\t\tprovideDocker(inspectContainer(name)).pipe(\n\t\t\t\t\tEffect.mapError((cause) =>\n\t\t\t\t\t\trouterBootFailed('inspect', `failed to inspect router container '${name}'`, cause),\n\t\t\t\t\t),\n\t\t\t\t\tEffect.map((facts) =>\n\t\t\t\t\t\tfacts === null\n\t\t\t\t\t\t\t? null\n\t\t\t\t\t\t\t: {\n\t\t\t\t\t\t\t\t\tid: facts.id,\n\t\t\t\t\t\t\t\t\trunning: facts.lifecycle.kind === 'unknown' ? 'unknown' : facts.running,\n\t\t\t\t\t\t\t\t\timage: facts.image,\n\t\t\t\t\t\t\t\t\tdispatchMount: (() => {\n\t\t\t\t\t\t\t\t\t\tconst mount = facts.mounts?.find(\n\t\t\t\t\t\t\t\t\t\t\t(m) => m.target === TRAEFIK_DISPATCH_MOUNT_TARGET,\n\t\t\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t\t\t\treturn mount === undefined\n\t\t\t\t\t\t\t\t\t\t\t? null\n\t\t\t\t\t\t\t\t\t\t\t: {\n\t\t\t\t\t\t\t\t\t\t\t\t\tsource: mount.source,\n\t\t\t\t\t\t\t\t\t\t\t\t\ttarget: mount.target,\n\t\t\t\t\t\t\t\t\t\t\t\t\treadOnly: mount.readOnly === true,\n\t\t\t\t\t\t\t\t\t\t\t\t};\n\t\t\t\t\t\t\t\t\t})(),\n\t\t\t\t\t\t\t\t\tportBindings: facts.portBindings ?? [],\n\t\t\t\t\t\t\t\t\tcommand: facts.command ?? [],\n\t\t\t\t\t\t\t\t\tnetworks: facts.networks ?? [],\n\t\t\t\t\t\t\t\t\tlabels: facts.labels ?? {},\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\tcreateFresh: (args) =>\n\t\t\t\tprovideDocker(dockerRun('run', traefikRunArgs(args))).pipe(\n\t\t\t\t\tEffect.map((result) => ({ id: result.stdout.trim() })),\n\t\t\t\t\tEffect.mapError((cause) =>\n\t\t\t\t\t\trouterBootFailed(\n\t\t\t\t\t\t\t'ensure-container',\n\t\t\t\t\t\t\t`failed to create router container '${args.name}'`,\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\tresume: (name) =>\n\t\t\t\tprovideDocker(dockerRun('start', [name])).pipe(\n\t\t\t\t\tEffect.flatMap(() => provideDocker(inspectContainer(name))),\n\t\t\t\t\tEffect.flatMap((facts) =>\n\t\t\t\t\t\tfacts === null\n\t\t\t\t\t\t\t? Effect.fail(\n\t\t\t\t\t\t\t\t\trouterBootFailed(\n\t\t\t\t\t\t\t\t\t\t'inspect',\n\t\t\t\t\t\t\t\t\t\t`router container '${name}' started but could not be inspected`,\n\t\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t: Effect.succeed({ id: facts.id }),\n\t\t\t\t\t),\n\t\t\t\t\tEffect.mapError((cause) =>\n\t\t\t\t\t\tcause instanceof RouterBootFailed\n\t\t\t\t\t\t\t? cause\n\t\t\t\t\t\t\t: routerBootFailed(\n\t\t\t\t\t\t\t\t\t'ensure-container',\n\t\t\t\t\t\t\t\t\t`failed to resume router container '${name}'`,\n\t\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\tforceRemove: (name) =>\n\t\t\t\tprovideDocker(dockerRunOk('rm', ['-f', name])).pipe(\n\t\t\t\t\tEffect.flatMap((result) => {\n\t\t\t\t\t\tif (result.exitCode === 0 || isNoSuchContainerStderr(result.stderr)) {\n\t\t\t\t\t\t\treturn Effect.void;\n\t\t\t\t\t\t}\n\t\t\t\t\t\treturn Effect.fail(\n\t\t\t\t\t\t\trouterBootFailed(\n\t\t\t\t\t\t\t\t'ensure-container',\n\t\t\t\t\t\t\t\t`failed to remove router container '${name}': ${result.stderr}`,\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t);\n\t\t\t\t\t}),\n\t\t\t\t\tEffect.mapError((cause) =>\n\t\t\t\t\t\tcause instanceof RouterBootFailed\n\t\t\t\t\t\t\t? cause\n\t\t\t\t\t\t\t: routerBootFailed(\n\t\t\t\t\t\t\t\t\t'ensure-container',\n\t\t\t\t\t\t\t\t\t`failed to remove router container '${name}'`,\n\t\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t};\n\n\t\treturn TraefikContainerOpsService.of(ops);\n\t}),\n);\n\n// ---------------------------------------------------------------------------\n// Stub layer — injected by tests\n// ---------------------------------------------------------------------------\n\n/** No-op implementation for tests that assert file-provider delivery\n *  without managing a real Traefik container. Production composition\n *  uses `layerTraefikContainerOpsDocker`. */\nexport const layerTraefikContainerOpsStub: Layer.Layer<TraefikContainerOpsService> = Layer.succeed(\n\tTraefikContainerOpsService,\n)({\n\tensureNetwork: (_name) => Effect.succeed({ id: 'stub-network' }),\n\tinspectContainer: (_name) => Effect.succeed(null),\n\tcreateFresh: (_args) => Effect.succeed({ id: 'stub-container' }),\n\tresume: (_name) => Effect.succeed({ id: 'stub-container' }),\n\tforceRemove: (_name) => Effect.succeed(undefined),\n});\n"],"mappings":";;;;;;;;;AA2CA,MAAa,gCAAgC;AAC7C,MAAa,uBAAuB,SAAS;AAE7C,MAAa,qBAAqB;;;AAIlC,MAAa,wBAAwB;AAmFrC,IAAa,6BAAb,cAAgD,QAAQ,SAGrD,CAAC,6DAA6D,CAAC;AAalE,MAAM,gBAAgB,MAAc,UACnC,KAAK,QAAQ,KAAK,KAAK,KAAK,QAAQ,MAAM;AAE3C,MAAa,+BACZ,gBAEA,CAAC,GAAG,IAAI,IAAI,YAAY,KAAK,eAAe,WAAW,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,MAAM,IAAI,EAAE;AAErF,MAAM,8BACL,gBAC+B;CAC/B,MAAM,yBAAS,IAAI,KAAyB;AAC5C,MAAK,MAAM,cAAc,YACxB,KAAI,CAAC,OAAO,IAAI,WAAW,KAAK,CAAE,QAAO,IAAI,WAAW,MAAM,WAAW;AAE1E,QAAO,MAAM,KAAK,OAAO,QAAQ,CAAC;;AAQnC,MAAM,4BAA4B,gBACjC,4BAA4B,YAAY,CAAC,KAAK,SAAS,GAAG,KAAK,aAAa,OAAO;AAEpF,MAAa,0BACZ,gBAC2B;CAC3B,8BAA8B;CAC9B;CACA;CACA;CACA,GAAG,2BAA2B,YAAY,CAAC,KACzC,eAAe,iBAAiB,WAAW,KAAK,YAAY,WAAW,OACxE;CACD;AAED,MAAM,6BACL,UAOA,aAEA,SAAS,kBAAkB,QAC3B,SAAS,cAAc,WAAA,2BACvB,SAAS,cAAc,YACvB,aAAa,SAAS,cAAc,QAAQ,SAAS;AAEtD,MAAM,eAAe,MAA6B,UACjD,KAAK,WAAW,MAAM,UAAU,KAAK,OAAO,OAAO,UAAU,UAAU,MAAM,OAAO;AAErF,MAAM,iBAAiB,MAA6B,UACnD,YAAY,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,CAAC,MAAM,CAAC;AAEnE,MAAM,mBAAmB,YAAmC;CAC3D,MAAM,CAAC,WAAW,QAAQ,QAAQ,MAAM,IAAI;CAC5C,MAAM,gBAAgB,WAAW,MAAM,IAAI,CAAC;CAC5C,MAAM,WAAW,MAAM,MAAM,KAAK,YAAY,IAAI,GAAG,EAAE;CACvD,MAAM,SAAS,MAAM,MAAM,GAAG,KAAK,YAAY,IAAI,CAAC;AACpD,KAAI,kBAAkB,KAAA,KAAa,aAAa,KAAA,KAAa,WAAW,KAAA,EAAW,QAAO;AAC1F,KAAI,CAAC,QAAQ,KAAK,cAAc,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAE,QAAO;AACpE,QAAO,GAAG,cAAc,GAAG,OAAO,GAAG;;AAGtC,MAAM,qBACL,UACA,gBAEA,cACC,SAAS,SAAS,YAAY;CAC7B,MAAM,OAAO,gBAAgB,QAAQ;AACrC,QAAO,SAAS,OAAO,EAAE,GAAG,CAAC,KAAK;EACjC,EACF,yBAAyB,YAAY,CACrC;AAEF,MAAa,4BACZ,QACA,YACa;AACb,KAAI,OAAO,SAAS,aAAa,OAAQ,QAAO;AAChD,KAAI,OAAO,SAAS,kBAAkB,OAAQ,QAAO;AACrD,KAAI,OAAO,0BAA0B,QAAQ,GAAI,QAAO;AACxD,KAAI,OAAO,SAAS,uBAAA,IAAsD,QAAO;AACjF,MAAK,MAAM,aAAa;EACvB,SAAS;EACT,SAAS;EACT,SAAS;EACT,SAAS;EACT,SAAS;EACT,gBAAgB;EAChB,gBAAgB;EAChB,gBAAgB;EAChB,gBAAgB;EAChB,gBAAgB;EAChB,gBAAgB;EAChB,gBAAgB;EAChB,CACA,KAAI,OAAO,eAAe,KAAA,EAAW,QAAO;AAE7C,QAAO;;AAGR,MAAM,qBAAqB,UAAqC,WAC/D,SAAS,UAAU,OAAO,SAC1B,0BAA0B,UAAU,OAAO,QAAQ,YAAY,IAC/D,kBAAkB,SAAS,cAAc,OAAO,YAAY,IAC5D,cAAc,SAAS,SAAS,uBAAuB,OAAO,YAAY,CAAC,IAC3E,SAAS,SAAS,SAAS,OAAO,QAAQ,YAAY,IACtD,yBAAyB,SAAS,QAAQ,OAAO,QAAQ;;;;;AAM1D,MAAa,aACZ,WAEA,OAAO,IAAI,aAAa;CACvB,MAAM,MAAM,OAAO;CACnB,MAAM,UAAU,OAAO,IAAI,cAAc,OAAO,QAAQ,YAAY;CACpE,MAAM,WAAW,OAAO,IAAI,iBAAiB,OAAO,QAAQ,cAAc;AAG1E,KAAI,aAAa,KAShB,QAAO;EACN,UAAU;EACV,cAAa,OAVS,IAAI,YAAY;GACtC,MAAM,OAAO,QAAQ;GACrB,OAAO,OAAO;GACd,SAAS,OAAO,QAAQ;GACxB,iBAAiB,OAAO,QAAQ;GAChC,aAAa,OAAO;GACpB,qBAAqB,OAAO,QAAQ;GACpC,CAAC,EAGoB;EACrB,WAAW,QAAQ;EACnB,cAAc;EACd;CAGF,MAAM,gBAAgB,kBAAkB,UAAU,OAAO;AAEzD,KAAI,SAAS,YAAY,QAAQ,cAChC,QAAO;EACN,UAAU;EACV,aAAa,SAAS;EACtB,WAAW,QAAQ;EACnB,cAAc;EACd;AAGF,KAAI,SAAS,YAAY,aAAa,eAAe;AACpD,MAAI,OAAO,uBAAuB,SAAS,EAC1C,QAAO,OAAO,OAAO,KACpB,IAAI,iBAAiB;GACpB,OAAO;GACP,QACC,mBAAmB,OAAO,QAAQ,GAAG,eAAe,OAAO,QAAQ,cAAc,2EAEjF,OAAO,uBAAuB,KAAK,KAAK;GACzC,CAAC,CACF;AAEF,SAAO,IAAI,YAAY,OAAO,QAAQ,cAAc;AASpD,SAAO;GACN,UAAU;GACV,cAAa,OAVS,IAAI,YAAY;IACtC,MAAM,OAAO,QAAQ;IACrB,OAAO,OAAO;IACd,SAAS,OAAO,QAAQ;IACxB,iBAAiB,OAAO,QAAQ;IAChC,aAAa,OAAO;IACpB,qBAAqB,OAAO,QAAQ;IACpC,CAAC,EAGoB;GACrB,WAAW,QAAQ;GACnB,cAAc;GACd;;AAGF,KAAI,CAAC,eAAe;AACnB,MAAI,OAAO,uBAAuB,SAAS,EAC1C,QAAO,OAAO,OAAO,KACpB,IAAI,iBAAiB;GACpB,OAAO;GACP,QACC,mBAAmB,OAAO,QAAQ,GAAG,eAAe,OAAO,QAAQ,cAAc,iFAEjF,OAAO,uBAAuB,KAAK,KAAK;GACzC,CAAC,CACF;AAMF,SAAO,IAAI,YAAY,OAAO,QAAQ,cAAc;AASpD,SAAO;GACN,UAAU;GACV,cAAa,OAVS,IAAI,YAAY;IACtC,MAAM,OAAO,QAAQ;IACrB,OAAO,OAAO;IACd,SAAS,OAAO,QAAQ;IACxB,iBAAiB,OAAO,QAAQ;IAChC,aAAa,OAAO;IACpB,qBAAqB,OAAO,QAAQ;IACpC,CAAC,EAGoB;GACrB,WAAW,QAAQ;GACnB,cAAc;GACd;;AA+BF,QAAO;EACN,UAAU;EACV,cAAa,OA7BS,IAAI,OAAO,OAAO,QAAQ,cAAc,CAAC,KAC/D,OAAO,SAAS,qBAAqB,UACpC,OAAO,uBAAuB,SAAS,IACpC,OAAO,KACP,IAAI,iBAAiB;GACpB,OAAO;GACP,QACC,mBAAmB,OAAO,QAAQ,GAAG,eAAe,OAAO,QAAQ,cAAc,oEAEjF,OAAO,uBAAuB,KAAK,KAAK;GACzC;GACA,CAAC,CACF,GACA,IAAI,YAAY,OAAO,QAAQ,cAAc,CAAC,KAC9C,OAAO,QACN,IAAI,YAAY;GACf,MAAM,OAAO,QAAQ;GACrB,OAAO,OAAO;GACd,SAAS,OAAO,QAAQ;GACxB,iBAAiB,OAAO,QAAQ;GAChC,aAAa,OAAO;GACpB,qBAAqB,OAAO,QAAQ;GACpC,CAAC,CACF,CACD,CACH,CACD,EAGqB;EACrB,WAAW,QAAQ;EACnB,cAAc;EACd;EACA,CAAC,KAAK,OAAO,SAAS,gCAAgC,CAAC;AAM1D,MAAM,oBACL,OACA,QACA,UAEA,IAAI,iBAAiB;CACpB;CACA;CACA,GAAI,UAAU,KAAA,IAAY,EAAE,GAAG,EAAE,OAAO;CACxC,CAAC;AAEH,MAAM,kBAAkB,SAOK;CAC5B,MAAM,QAAQ,4BAA4B,KAAK,YAAY;CAC3D,MAAM,aAA4B;EACjC;EACA;EACA,KAAK;EACL;EACA,KAAK;EACL;EACA,GAAG,SAAS,QAAQ;EACpB;EACA,GAAG,SAAS,aAAa;EACzB;EACA,GAAG,qBAAqB,GAAG,KAAK;EAChC;EACA,GAAG,SAAS,kBAAkB;EAC9B;EACA;EACA;AACD,MAAK,MAAM,QAAQ,MAClB,YAAW,KAAK,MAAM,aAAa,KAAK,GAAG,OAAO;AAEnD,YAAW,KACV,WACA,oBAAoB,KAAK,oBAAoB,UAAU,8BAA8B,YACrF,KAAK,OACL,GAAG,uBAAuB,KAAK,YAAY,CAC3C;AACD,QAAO;;AAGR,MAAa,iCAIT,MAAM,OACT,4BACA,OAAO,IAAI,aAAa;CACvB,MAAM,aAAa,OAAO;CAC1B,MAAM,gBAAgB,OAAO;CAC7B,MAAM,iBACL,WAEA,OAAO,KACN,OAAO,eAAe,YAAY,WAAW,EAC7C,OAAO,eAAe,eAAe,cAAc,CACnD;AA0GF,QAAO,2BAA2B,GAAG;EAvGpC,gBAAgB,SACf,cACC,cAAc,MAAM;GAAE,KAAK;GAAmB,OAAO;GAAM,WAAW;GAAO,CAAC,CAC9E,CAAC,KACD,OAAO,KAAK,QAAQ,EAAE,IAAI,EAAE,EAC5B,OAAO,UAAU,UAChB,iBACC,kBACA,2CAA2C,KAAK,IAChD,MACA,CACD,CACD;EACF,mBAAmB,SAClB,cAAc,iBAAiB,KAAK,CAAC,CAAC,KACrC,OAAO,UAAU,UAChB,iBAAiB,WAAW,uCAAuC,KAAK,IAAI,MAAM,CAClF,EACD,OAAO,KAAK,UACX,UAAU,OACP,OACA;GACA,IAAI,MAAM;GACV,SAAS,MAAM,UAAU,SAAS,YAAY,YAAY,MAAM;GAChE,OAAO,MAAM;GACb,sBAAsB;IACrB,MAAM,QAAQ,MAAM,QAAQ,MAC1B,MAAM,EAAE,WAAW,8BACpB;AACD,WAAO,UAAU,KAAA,IACd,OACA;KACA,QAAQ,MAAM;KACd,QAAQ,MAAM;KACd,UAAU,MAAM,aAAa;KAC7B;OACA;GACJ,cAAc,MAAM,gBAAgB,EAAE;GACtC,SAAS,MAAM,WAAW,EAAE;GAC5B,UAAU,MAAM,YAAY,EAAE;GAC9B,QAAQ,MAAM,UAAU,EAAE;GAC1B,CACH,CACD;EACF,cAAc,SACb,cAAc,UAAU,OAAO,eAAe,KAAK,CAAC,CAAC,CAAC,KACrD,OAAO,KAAK,YAAY,EAAE,IAAI,OAAO,OAAO,MAAM,EAAE,EAAE,EACtD,OAAO,UAAU,UAChB,iBACC,oBACA,sCAAsC,KAAK,KAAK,IAChD,MACA,CACD,CACD;EACF,SAAS,SACR,cAAc,UAAU,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,KACzC,OAAO,cAAc,cAAc,iBAAiB,KAAK,CAAC,CAAC,EAC3D,OAAO,SAAS,UACf,UAAU,OACP,OAAO,KACP,iBACC,WACA,qBAAqB,KAAK,sCAC1B,CACD,GACA,OAAO,QAAQ,EAAE,IAAI,MAAM,IAAI,CAAC,CACnC,EACD,OAAO,UAAU,UAChB,iBAAiB,mBACd,QACA,iBACA,oBACA,sCAAsC,KAAK,IAC3C,MACA,CACH,CACD;EACF,cAAc,SACb,cAAc,YAAY,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,KAC9C,OAAO,SAAS,WAAW;AAC1B,OAAI,OAAO,aAAa,KAAK,wBAAwB,OAAO,OAAO,CAClE,QAAO,OAAO;AAEf,UAAO,OAAO,KACb,iBACC,oBACA,sCAAsC,KAAK,KAAK,OAAO,SACvD,CACD;IACA,EACF,OAAO,UAAU,UAChB,iBAAiB,mBACd,QACA,iBACA,oBACA,sCAAsC,KAAK,IAC3C,MACA,CACH,CACD;EAGqC,CAAC;EACxC,CACF;AASoF,MAAM,QAC1F,2BACA,CAAC;CACD,gBAAgB,UAAU,OAAO,QAAQ,EAAE,IAAI,gBAAgB,CAAC;CAChE,mBAAmB,UAAU,OAAO,QAAQ,KAAK;CACjD,cAAc,UAAU,OAAO,QAAQ,EAAE,IAAI,kBAAkB,CAAC;CAChE,SAAS,UAAU,OAAO,QAAQ,EAAE,IAAI,kBAAkB,CAAC;CAC3D,cAAc,UAAU,OAAO,QAAQ,KAAA,EAAU;CACjD,CAAC"}

package/dist/orchestrators/runtime-composition.d.mts

@@ -0,0 +1,10 @@
+import { Effect, FileSystem, Layer, Scope } from "effect";
+//#region src/orchestrators/runtime-composition.d.ts
+interface ProductionCodegenOptions {
+  readonly appRoot?: string;
+  readonly outputDir?: string;
+  readonly stackSubdir?: string | null;
+}
+//#endregion
+export { ProductionCodegenOptions };
+//# sourceMappingURL=runtime-composition.d.mts.map

package/dist/orchestrators/runtime-composition.mjs

@@ -0,0 +1,168 @@
+import { StackPathsService } from "../substrate/runtime/paths.mjs";
+import { endpointKey } from "../substrate/brand.mjs";
+import { readResolvedSync } from "../substrate/runtime/lifecycle/plugin-registry.mjs";
+import { PostAcquireTasksService } from "../substrate/runtime/post-acquire-tasks.mjs";
+import { MoveCodegenService, MoveSummaryRunnerService, layerDockerMoveSummaryRunner, layerMystenMoveCodegen } from "./codegen/bindings.mjs";
+import { CodegenPathsService, layerCodegenPaths, layerCodegenRoot } from "./codegen/paths.mjs";
+import { CodegenOrchestratorService, layerCodegenOrchestrator } from "./codegen/service.mjs";
+import { makeExtrasCodegenable } from "./codegen/extras.mjs";
+import { layerTraefikContainerOpsDocker } from "./router/traefik-container.mjs";
+import { makeDefaultRouterProfile } from "./router/profile.mjs";
+import { layerEntrypointRegistry } from "./router/entrypoints.mjs";
+import { RouterService, layerDockerUpstreamResolver, layerRouterConfigLiteral, layerRouterService } from "./router/service.mjs";
+import { BUILT_IN_ENTRYPOINTS } from "../plugins/router-entrypoints.mjs";
+import { SnapshotOrchestratorService, layerSnapshotOrchestrator } from "./snapshot/service.mjs";
+import { resolveManifestExtras } from "../substrate/manifest.mjs";
+import { buildEnvelope, writeManifest } from "../substrate/runtime/manifest/manifest.mjs";
+import { Effect, FileSystem, Layer } from "effect";
+import { isAbsolute, join, resolve } from "node:path";
+//#region src/orchestrators/runtime-composition.ts
+const productionRouterProfile = (options = {}) => makeDefaultRouterProfile(options);
+const productionCodegenOutputDir = (appRoot, outputDir) => {
+	const target = outputDir ?? "src/generated";
+	return isAbsolute(target) ? target : resolve(appRoot, target);
+};
+const layerProductionOrchestrators = (router = {}) => {
+	const profile = router.profile ?? productionRouterProfile();
+	return Layer.mergeAll(layerSnapshotOrchestrator, layerRouterService.pipe(Layer.provideMerge(Layer.mergeAll(layerEntrypointRegistry(BUILT_IN_ENTRYPOINTS), layerTraefikContainerOpsDocker, layerDockerUpstreamResolver(profile), layerRouterConfigLiteral({
+		disabled: router.disabled ?? false,
+		profile,
+		image: router.image ?? "traefik:v3.5",
+		routeReadinessProbe: { enabled: router.disabled !== true }
+	})))), layerCodegenOrchestrator, layerCodegenPaths.pipe(Layer.provideMerge(layerCodegenRoot({
+		outputDir: productionCodegenOutputDir(router.codegen?.appRoot ?? process.cwd(), router.codegen?.outputDir),
+		stackSubdir: router.codegen?.stackSubdir ?? null
+	}))), layerDockerMoveSummaryRunner, layerMystenMoveCodegen);
+};
+Effect.gen(function* () {
+	yield* (yield* RouterService).boot().pipe(Effect.orDie);
+});
+const endpointEventFromRoutable = (pluginKey, endpoint, registeredAt = Date.now()) => ({
+	tag: "endpoint.registered",
+	endpoint: {
+		endpointKey: endpointKey(`${pluginKey}:${endpoint.endpointName}`),
+		name: endpoint.endpointName,
+		url: endpoint.url,
+		displayUrl: null,
+		wireProtocol: endpoint.wireProtocol,
+		registeredAt
+	}
+});
+const orchestratorSink = (sink) => sink;
+const makeProjectionCapabilitySink = () => orchestratorSink({
+	kind: "projection",
+	accept: (decl, ctx) => Effect.gen(function* () {
+		const event = decl.event.tag === "account.updated" ? {
+			...decl.event,
+			account: {
+				...decl.event.account,
+				rowKey: decl.event.account.rowKey ?? ctx.pluginKey
+			}
+		} : {
+			...decl.event,
+			package: {
+				...decl.event.package,
+				rowKey: decl.event.package.rowKey ?? ctx.pluginKey
+			}
+		};
+		yield* ctx.publish(event);
+	})
+});
+const makeStrategyContributorCapabilitySink = () => orchestratorSink({
+	kind: "strategy-contributor",
+	accept: (decl, ctx) => Effect.gen(function* () {
+		yield* ctx.registerStrategy(decl);
+		const at = Date.now();
+		yield* ctx.publish({
+			tag: "strategy.registered",
+			capabilityKey: decl.capabilityKey,
+			autoMounted: decl.autoMounted,
+			at
+		});
+		yield* Effect.addFinalizer(() => ctx.publish({
+			tag: "strategy.unregistered",
+			capabilityKey: decl.capabilityKey,
+			at: Date.now()
+		}));
+	})
+});
+const buildProductionOrchestratorSinks = (observers = {}) => Effect.gen(function* () {
+	const snapshot = yield* SnapshotOrchestratorService;
+	const router = yield* RouterService;
+	const codegen = yield* CodegenOrchestratorService;
+	return [
+		orchestratorSink({
+			kind: "snapshotable",
+			accept: (decl, ctx) => snapshot.registerParticipant(ctx.pluginKey, decl)
+		}),
+		orchestratorSink({
+			kind: "liveness-classifier",
+			accept: (decl, ctx) => snapshot.registerClassifier(ctx.pluginKey, decl)
+		}),
+		orchestratorSink({
+			kind: "routable",
+			accept: (decl, ctx) => router.boot().pipe(Effect.andThen(router.contributeRoute(decl)), Effect.flatMap((endpoint) => {
+				const event = endpointEventFromRoutable(ctx.pluginKey, endpoint);
+				return ctx.publish(event).pipe(Effect.andThen(observers.routable ? observers.routable(ctx.pluginKey, endpoint, event) : Effect.void));
+			}))
+		}),
+		orchestratorSink({
+			kind: "codegenable",
+			accept: (decl, ctx) => codegen.registerContribution(ctx.pluginKey, decl).pipe(Effect.flatMap(() => observers.codegenable ? observers.codegenable(ctx.pluginKey, decl) : Effect.void))
+		}),
+		makeProjectionCapabilitySink(),
+		makeStrategyContributorCapabilitySink()
+	];
+});
+const makeManifestExtrasContext = (ctx) => {
+	const resourceIdToKey = /* @__PURE__ */ new Map();
+	for (const [key, node] of ctx.graph.nodes) resourceIdToKey.set(node.member.id, key);
+	const lookup = (resourceId) => {
+		const key = resourceIdToKey.get(resourceId);
+		if (key === void 0) throw new Error(`manifest extras requested unknown resource '${resourceId}'`);
+		const resolved = readResolvedSync(ctx.registry, key);
+		if (resolved === void 0) throw new Error(`manifest extras requested unresolved resource '${resourceId}'`);
+		return resolved;
+	};
+	return { value: (resource) => lookup(resource.id) };
+};
+const buildProductionPostAcquireHook = (options = {}) => Effect.gen(function* () {
+	const codegen = yield* CodegenOrchestratorService;
+	const paths = yield* CodegenPathsService;
+	const summaryRunner = yield* MoveSummaryRunnerService;
+	const moveCodegen = yield* MoveCodegenService;
+	const fs = yield* FileSystem.FileSystem;
+	const stackPaths = yield* StackPathsService;
+	const postAcquireTasks = yield* PostAcquireTasksService;
+	return (ctx) => Effect.gen(function* () {
+		const extras = yield* resolveManifestExtras(options.extras, makeManifestExtrasContext(ctx));
+		yield* writeManifest(yield* buildEnvelope({
+			identity: {
+				app: ctx.identity.app,
+				stack: ctx.identity.stack,
+				chain: ctx.identity.chain
+			},
+			contributions: [],
+			extras
+		}), join(stackPaths.stackRoot, "manifest.json")).pipe(Effect.provideService(FileSystem.FileSystem, fs));
+		const result = yield* codegen.runCycle({ extraContributions: [makeExtrasCodegenable(extras)] }).pipe(Effect.provideService(CodegenPathsService, paths), Effect.provideService(MoveSummaryRunnerService, summaryRunner), Effect.provideService(MoveCodegenService, moveCodegen), Effect.provideService(FileSystem.FileSystem, fs));
+		yield* postAcquireTasks.runAll;
+		return [{
+			tag: "manifest.flushed",
+			manifestVersion: 1,
+			at: Date.now()
+		}, {
+			tag: "codegen.emitted",
+			files: [
+				...result.filesWritten,
+				...result.filesChmod,
+				...result.bindings?.filesWritten ?? []
+			],
+			at: Date.now()
+		}];
+	});
+});
+//#endregion
+export { buildProductionOrchestratorSinks, buildProductionPostAcquireHook, layerProductionOrchestrators };
+
+//# sourceMappingURL=runtime-composition.mjs.map

package/dist/orchestrators/runtime-composition.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-composition.mjs","names":[],"sources":["../../src/orchestrators/runtime-composition.ts"],"sourcesContent":["// Shared production orchestrator composition.\n//\n// CLI, programmatic runStack, and the e2e boot harness all use this\n// module for capability delivery. Tests may swap service\n// implementations (Traefik ops, upstream resolver, codegen paths), but\n// the sink registrations and router boot step stay shared.\n\nimport { Effect, FileSystem, Layer, Scope } from 'effect';\nimport { isAbsolute, join, resolve } from 'node:path';\n\nimport {\n\tlayerDockerMoveSummaryRunner,\n\tlayerMystenMoveCodegen,\n\tMoveCodegenService,\n\tMoveSummaryRunnerService,\n} from './codegen/bindings.ts';\nimport { CodegenPathsService, layerCodegenPaths, layerCodegenRoot } from './codegen/paths.ts';\nimport {\n\tCodegenOrchestratorService,\n\tlayerCodegenOrchestrator,\n\ttype Codegenable,\n} from './codegen/service.ts';\nimport { makeExtrasCodegenable } from './codegen/extras.ts';\nimport {\n\tDEFAULT_TRAEFIK_IMAGE,\n\tlayerDockerUpstreamResolver,\n\tlayerEntrypointRegistry,\n\tlayerRouterConfigLiteral,\n\tlayerRouterService,\n\tlayerTraefikContainerOpsDocker,\n\tRouterService,\n\ttype EndpointUrl,\n\ttype ResolvedRoute,\n} from './router/index.ts';\nimport { BUILT_IN_ENTRYPOINTS } from '../plugins/router-entrypoints.ts';\nimport {\n\tmakeDefaultRouterProfile,\n\ttype DefaultRouterProfileOptions,\n\ttype RouterProfile,\n} from './router/profile.ts';\nimport { layerSnapshotOrchestrator, SnapshotOrchestratorService } from './snapshot/index.ts';\nimport type { LivenessClassifierDecl } from '../contracts/liveness-classifier.ts';\nimport type { ProjectionDecl } from '../contracts/projection.ts';\nimport type { RoutableDecl } from '../contracts/routable.ts';\nimport type { SnapshotableDecl } from '../contracts/snapshotable.ts';\nimport type { StrategyContributorDecl } from '../contracts/strategy-contributor.ts';\nimport { endpointKey, type PluginKey } from '../substrate/brand.ts';\nimport type { EngineEvent } from '../substrate/events.ts';\nimport {\n\tbuildEnvelope,\n\tCURRENT_MANIFEST_VERSION,\n\twriteManifest,\n} from '../substrate/runtime/manifest/index.ts';\nimport { readResolvedSync } from '../substrate/runtime/lifecycle/index.ts';\nimport { resolveManifestExtras, type ManifestExtrasInput } from '../substrate/manifest.ts';\nimport { StackPathsService } from '../substrate/runtime/paths.ts';\nimport { PostAcquireTasksService } from '../substrate/runtime/post-acquire-tasks.ts';\nimport type {\n\tCapabilitySink,\n\tContributionKind,\n\tHarvestContext,\n\tOrchestratorSinks,\n} from '../substrate/runtime/capability-sinks/index.ts';\nimport type {\n\tSupervisorPostAcquireContext,\n\tSupervisorPostAcquireHook,\n} from '../substrate/runtime/supervisor.ts';\n\nexport interface ProductionCodegenOptions {\n\treadonly appRoot?: string;\n\treadonly outputDir?: string;\n\treadonly stackSubdir?: string | null;\n}\n\nexport interface ProductionRouterOptions {\n\treadonly codegen?: ProductionCodegenOptions;\n\treadonly disabled?: boolean;\n\treadonly image?: string;\n\treadonly profile?: RouterProfile;\n}\n\nexport interface ProductionPostAcquireOptions {\n\treadonly extras?: ManifestExtrasInput;\n}\n\nexport interface CapabilityDeliveryObservers {\n\treadonly routable?: (\n\t\tpluginKey: PluginKey,\n\t\tendpoint: EndpointUrl,\n\t\tevent: Extract<EngineEvent, { readonly tag: 'endpoint.registered' }>,\n\t) => Effect.Effect<void, never, Scope.Scope>;\n\treadonly codegenable?: (\n\t\tpluginKey: PluginKey,\n\t\tdecl: Codegenable,\n\t) => Effect.Effect<void, never, Scope.Scope>;\n}\n\nexport const productionRouterProfile = (options: DefaultRouterProfileOptions = {}): RouterProfile =>\n\tmakeDefaultRouterProfile(options);\n\nconst productionCodegenOutputDir = (appRoot: string, outputDir: string | undefined): string => {\n\tconst target = outputDir ?? 'src/generated';\n\treturn isAbsolute(target) ? target : resolve(appRoot, target);\n};\n\nexport const layerProductionOrchestrators = (router: ProductionRouterOptions = {}) => {\n\tconst profile = router.profile ?? productionRouterProfile();\n\treturn Layer.mergeAll(\n\t\tlayerSnapshotOrchestrator,\n\t\tlayerRouterService.pipe(\n\t\t\tLayer.provideMerge(\n\t\t\t\tLayer.mergeAll(\n\t\t\t\t\tlayerEntrypointRegistry(BUILT_IN_ENTRYPOINTS),\n\t\t\t\t\tlayerTraefikContainerOpsDocker,\n\t\t\t\t\tlayerDockerUpstreamResolver(profile),\n\t\t\t\t\tlayerRouterConfigLiteral({\n\t\t\t\t\t\tdisabled: router.disabled ?? false,\n\t\t\t\t\t\tprofile,\n\t\t\t\t\t\timage: router.image ?? DEFAULT_TRAEFIK_IMAGE,\n\t\t\t\t\t\trouteReadinessProbe: {\n\t\t\t\t\t\t\tenabled: router.disabled !== true,\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t\t),\n\t\t),\n\t\tlayerCodegenOrchestrator,\n\t\tlayerCodegenPaths.pipe(\n\t\t\tLayer.provideMerge(\n\t\t\t\tlayerCodegenRoot({\n\t\t\t\t\toutputDir: productionCodegenOutputDir(\n\t\t\t\t\t\trouter.codegen?.appRoot ?? process.cwd(),\n\t\t\t\t\t\trouter.codegen?.outputDir,\n\t\t\t\t\t),\n\t\t\t\t\tstackSubdir: router.codegen?.stackSubdir ?? null,\n\t\t\t\t}),\n\t\t\t),\n\t\t),\n\t\tlayerDockerMoveSummaryRunner,\n\t\tlayerMystenMoveCodegen,\n\t);\n};\n\nexport const bootRouterOrchestrator: Effect.Effect<void, never, RouterService> = Effect.gen(\n\tfunction* () {\n\t\tconst router = yield* RouterService;\n\t\tyield* router.boot().pipe(Effect.orDie);\n\t},\n);\n\nexport const endpointEventFromRoutable = (\n\tpluginKey: PluginKey,\n\tendpoint: EndpointUrl,\n\tregisteredAt = Date.now(),\n): Extract<EngineEvent, { readonly tag: 'endpoint.registered' }> => ({\n\ttag: 'endpoint.registered',\n\tendpoint: {\n\t\tendpointKey: endpointKey(`${pluginKey}:${endpoint.endpointName}`),\n\t\tname: endpoint.endpointName,\n\t\turl: endpoint.url,\n\t\tdisplayUrl: null,\n\t\twireProtocol: endpoint.wireProtocol,\n\t\tregisteredAt,\n\t},\n});\n\nconst orchestratorSink = <K extends ContributionKind, TDecl>(\n\tsink: CapabilitySink<K, TDecl>,\n): OrchestratorSinks[number] => sink as OrchestratorSinks[number];\n\nexport const makeProjectionCapabilitySink = (): OrchestratorSinks[number] =>\n\torchestratorSink<'projection', ProjectionDecl>({\n\t\tkind: 'projection',\n\t\taccept: (decl, ctx) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst event =\n\t\t\t\t\tdecl.event.tag === 'account.updated'\n\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\t...decl.event,\n\t\t\t\t\t\t\t\taccount: {\n\t\t\t\t\t\t\t\t\t...decl.event.account,\n\t\t\t\t\t\t\t\t\trowKey: decl.event.account.rowKey ?? ctx.pluginKey,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t: {\n\t\t\t\t\t\t\t\t...decl.event,\n\t\t\t\t\t\t\t\tpackage: {\n\t\t\t\t\t\t\t\t\t...decl.event.package,\n\t\t\t\t\t\t\t\t\trowKey: decl.event.package.rowKey ?? ctx.pluginKey,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t};\n\t\t\t\tyield* ctx.publish(event);\n\t\t\t}),\n\t});\n\nexport const makeStrategyContributorCapabilitySink = (): OrchestratorSinks[number] =>\n\torchestratorSink<'strategy-contributor', StrategyContributorDecl<string, unknown>>({\n\t\tkind: 'strategy-contributor',\n\t\taccept: (decl, ctx) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tyield* ctx.registerStrategy(decl);\n\t\t\t\tconst at = Date.now();\n\t\t\t\tyield* ctx.publish({\n\t\t\t\t\ttag: 'strategy.registered',\n\t\t\t\t\tcapabilityKey: decl.capabilityKey,\n\t\t\t\t\tautoMounted: decl.autoMounted,\n\t\t\t\t\tat,\n\t\t\t\t});\n\t\t\t\tyield* Effect.addFinalizer(() =>\n\t\t\t\t\tctx.publish({\n\t\t\t\t\t\ttag: 'strategy.unregistered',\n\t\t\t\t\t\tcapabilityKey: decl.capabilityKey,\n\t\t\t\t\t\tat: Date.now(),\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}),\n\t});\n\nexport const buildProductionOrchestratorSinks = (\n\tobservers: CapabilityDeliveryObservers = {},\n): Effect.Effect<\n\tOrchestratorSinks,\n\tnever,\n\tSnapshotOrchestratorService | RouterService | CodegenOrchestratorService\n> =>\n\tEffect.gen(function* () {\n\t\tconst snapshot = yield* SnapshotOrchestratorService;\n\t\tconst router = yield* RouterService;\n\t\tconst codegen = yield* CodegenOrchestratorService;\n\t\treturn [\n\t\t\torchestratorSink<'snapshotable', SnapshotableDecl>({\n\t\t\t\tkind: 'snapshotable',\n\t\t\t\taccept: (decl, ctx) => snapshot.registerParticipant(ctx.pluginKey, decl),\n\t\t\t}),\n\t\t\torchestratorSink<'liveness-classifier', LivenessClassifierDecl>({\n\t\t\t\tkind: 'liveness-classifier',\n\t\t\t\taccept: (decl, ctx) => snapshot.registerClassifier(ctx.pluginKey, decl),\n\t\t\t}),\n\t\t\torchestratorSink<'routable', RoutableDecl>({\n\t\t\t\tkind: 'routable',\n\t\t\t\taccept: (decl, ctx: HarvestContext) =>\n\t\t\t\t\trouter.boot().pipe(\n\t\t\t\t\t\tEffect.andThen(router.contributeRoute(decl)),\n\t\t\t\t\t\tEffect.flatMap((endpoint) => {\n\t\t\t\t\t\t\tconst event = endpointEventFromRoutable(ctx.pluginKey, endpoint);\n\t\t\t\t\t\t\treturn ctx\n\t\t\t\t\t\t\t\t.publish(event)\n\t\t\t\t\t\t\t\t.pipe(\n\t\t\t\t\t\t\t\t\tEffect.andThen(\n\t\t\t\t\t\t\t\t\t\tobservers.routable\n\t\t\t\t\t\t\t\t\t\t\t? observers.routable(ctx.pluginKey, endpoint, event)\n\t\t\t\t\t\t\t\t\t\t\t: Effect.void,\n\t\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t}),\n\t\t\torchestratorSink<'codegenable', Codegenable>({\n\t\t\t\tkind: 'codegenable',\n\t\t\t\taccept: (decl, ctx) =>\n\t\t\t\t\tcodegen\n\t\t\t\t\t\t.registerContribution(ctx.pluginKey, decl)\n\t\t\t\t\t\t.pipe(\n\t\t\t\t\t\t\tEffect.flatMap(() =>\n\t\t\t\t\t\t\t\tobservers.codegenable ? observers.codegenable(ctx.pluginKey, decl) : Effect.void,\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t),\n\t\t\t}),\n\t\t\tmakeProjectionCapabilitySink(),\n\t\t\tmakeStrategyContributorCapabilitySink(),\n\t\t];\n\t});\n\nconst makeManifestExtrasContext = (ctx: SupervisorPostAcquireContext) => {\n\tconst resourceIdToKey = new Map<string, PluginKey>();\n\tfor (const [key, node] of ctx.graph.nodes) {\n\t\tresourceIdToKey.set(node.member.id, key);\n\t}\n\tconst lookup = (resourceId: string): unknown => {\n\t\tconst key = resourceIdToKey.get(resourceId);\n\t\tif (key === undefined) {\n\t\t\tthrow new Error(`manifest extras requested unknown resource '${resourceId}'`);\n\t\t}\n\t\tconst resolved = readResolvedSync(ctx.registry, key);\n\t\tif (resolved === undefined) {\n\t\t\tthrow new Error(`manifest extras requested unresolved resource '${resourceId}'`);\n\t\t}\n\t\treturn resolved;\n\t};\n\treturn {\n\t\tvalue: (resource: { readonly id: string }) => lookup(resource.id),\n\t};\n};\n\nexport const buildProductionPostAcquireHook = (\n\toptions: ProductionPostAcquireOptions = {},\n): Effect.Effect<\n\tSupervisorPostAcquireHook,\n\tnever,\n\t| CodegenOrchestratorService\n\t| CodegenPathsService\n\t| MoveSummaryRunnerService\n\t| MoveCodegenService\n\t| FileSystem.FileSystem\n\t| StackPathsService\n\t| PostAcquireTasksService\n> =>\n\tEffect.gen(function* () {\n\t\tconst codegen = yield* CodegenOrchestratorService;\n\t\tconst paths = yield* CodegenPathsService;\n\t\tconst summaryRunner = yield* MoveSummaryRunnerService;\n\t\tconst moveCodegen = yield* MoveCodegenService;\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tconst stackPaths = yield* StackPathsService;\n\t\tconst postAcquireTasks = yield* PostAcquireTasksService;\n\t\treturn (ctx) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst extras = yield* resolveManifestExtras(options.extras, makeManifestExtrasContext(ctx));\n\t\t\t\tconst envelope = yield* buildEnvelope({\n\t\t\t\t\tidentity: {\n\t\t\t\t\t\tapp: ctx.identity.app,\n\t\t\t\t\t\tstack: ctx.identity.stack,\n\t\t\t\t\t\tchain: ctx.identity.chain,\n\t\t\t\t\t},\n\t\t\t\t\tcontributions: [],\n\t\t\t\t\textras,\n\t\t\t\t});\n\t\t\t\tconst manifestPath = join(stackPaths.stackRoot, 'manifest.json');\n\t\t\t\tyield* writeManifest(envelope, manifestPath).pipe(\n\t\t\t\t\tEffect.provideService(FileSystem.FileSystem, fs),\n\t\t\t\t);\n\t\t\t\tconst result = yield* codegen\n\t\t\t\t\t.runCycle({ extraContributions: [makeExtrasCodegenable(extras)] })\n\t\t\t\t\t.pipe(\n\t\t\t\t\t\tEffect.provideService(CodegenPathsService, paths),\n\t\t\t\t\t\tEffect.provideService(MoveSummaryRunnerService, summaryRunner),\n\t\t\t\t\t\tEffect.provideService(MoveCodegenService, moveCodegen),\n\t\t\t\t\t\tEffect.provideService(FileSystem.FileSystem, fs),\n\t\t\t\t\t);\n\t\t\t\tyield* postAcquireTasks.runAll;\n\t\t\t\treturn [\n\t\t\t\t\t{\n\t\t\t\t\t\ttag: 'manifest.flushed' as const,\n\t\t\t\t\t\tmanifestVersion: CURRENT_MANIFEST_VERSION,\n\t\t\t\t\t\tat: Date.now(),\n\t\t\t\t\t},\n\t\t\t\t\t{\n\t\t\t\t\t\ttag: 'codegen.emitted' as const,\n\t\t\t\t\t\tfiles: [\n\t\t\t\t\t\t\t...result.filesWritten,\n\t\t\t\t\t\t\t...result.filesChmod,\n\t\t\t\t\t\t\t...(result.bindings?.filesWritten ?? []),\n\t\t\t\t\t\t],\n\t\t\t\t\t\tat: Date.now(),\n\t\t\t\t\t},\n\t\t\t\t];\n\t\t\t});\n\t});\n\nexport type { EndpointUrl, ResolvedRoute };\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAiGA,MAAa,2BAA2B,UAAuC,EAAE,KAChF,yBAAyB,QAAQ;AAElC,MAAM,8BAA8B,SAAiB,cAA0C;CAC9F,MAAM,SAAS,aAAa;AAC5B,QAAO,WAAW,OAAO,GAAG,SAAS,QAAQ,SAAS,OAAO;;AAG9D,MAAa,gCAAgC,SAAkC,EAAE,KAAK;CACrF,MAAM,UAAU,OAAO,WAAW,yBAAyB;AAC3D,QAAO,MAAM,SACZ,2BACA,mBAAmB,KAClB,MAAM,aACL,MAAM,SACL,wBAAwB,qBAAqB,EAC7C,gCACA,4BAA4B,QAAQ,EACpC,yBAAyB;EACxB,UAAU,OAAO,YAAY;EAC7B;EACA,OAAO,OAAO,SAAA;EACd,qBAAqB,EACpB,SAAS,OAAO,aAAa,MAC7B;EACD,CAAC,CACF,CACD,CACD,EACD,0BACA,kBAAkB,KACjB,MAAM,aACL,iBAAiB;EAChB,WAAW,2BACV,OAAO,SAAS,WAAW,QAAQ,KAAK,EACxC,OAAO,SAAS,UAChB;EACD,aAAa,OAAO,SAAS,eAAe;EAC5C,CAAC,CACF,CACD,EACD,8BACA,uBACA;;AAG+E,OAAO,IACvF,aAAa;AAEZ,SAAO,OADe,eACR,MAAM,CAAC,KAAK,OAAO,MAAM;EAExC;AAED,MAAa,6BACZ,WACA,UACA,eAAe,KAAK,KAAK,MAC2C;CACpE,KAAK;CACL,UAAU;EACT,aAAa,YAAY,GAAG,UAAU,GAAG,SAAS,eAAe;EACjE,MAAM,SAAS;EACf,KAAK,SAAS;EACd,YAAY;EACZ,cAAc,SAAS;EACvB;EACA;CACD;AAED,MAAM,oBACL,SAC+B;AAEhC,MAAa,qCACZ,iBAA+C;CAC9C,MAAM;CACN,SAAS,MAAM,QACd,OAAO,IAAI,aAAa;EACvB,MAAM,QACL,KAAK,MAAM,QAAQ,oBAChB;GACA,GAAG,KAAK;GACR,SAAS;IACR,GAAG,KAAK,MAAM;IACd,QAAQ,KAAK,MAAM,QAAQ,UAAU,IAAI;IACzC;GACD,GACA;GACA,GAAG,KAAK;GACR,SAAS;IACR,GAAG,KAAK,MAAM;IACd,QAAQ,KAAK,MAAM,QAAQ,UAAU,IAAI;IACzC;GACD;AACJ,SAAO,IAAI,QAAQ,MAAM;GACxB;CACH,CAAC;AAEH,MAAa,8CACZ,iBAAmF;CAClF,MAAM;CACN,SAAS,MAAM,QACd,OAAO,IAAI,aAAa;AACvB,SAAO,IAAI,iBAAiB,KAAK;EACjC,MAAM,KAAK,KAAK,KAAK;AACrB,SAAO,IAAI,QAAQ;GAClB,KAAK;GACL,eAAe,KAAK;GACpB,aAAa,KAAK;GAClB;GACA,CAAC;AACF,SAAO,OAAO,mBACb,IAAI,QAAQ;GACX,KAAK;GACL,eAAe,KAAK;GACpB,IAAI,KAAK,KAAK;GACd,CAAC,CACF;GACA;CACH,CAAC;AAEH,MAAa,oCACZ,YAAyC,EAAE,KAM3C,OAAO,IAAI,aAAa;CACvB,MAAM,WAAW,OAAO;CACxB,MAAM,SAAS,OAAO;CACtB,MAAM,UAAU,OAAO;AACvB,QAAO;EACN,iBAAmD;GAClD,MAAM;GACN,SAAS,MAAM,QAAQ,SAAS,oBAAoB,IAAI,WAAW,KAAK;GACxE,CAAC;EACF,iBAAgE;GAC/D,MAAM;GACN,SAAS,MAAM,QAAQ,SAAS,mBAAmB,IAAI,WAAW,KAAK;GACvE,CAAC;EACF,iBAA2C;GAC1C,MAAM;GACN,SAAS,MAAM,QACd,OAAO,MAAM,CAAC,KACb,OAAO,QAAQ,OAAO,gBAAgB,KAAK,CAAC,EAC5C,OAAO,SAAS,aAAa;IAC5B,MAAM,QAAQ,0BAA0B,IAAI,WAAW,SAAS;AAChE,WAAO,IACL,QAAQ,MAAM,CACd,KACA,OAAO,QACN,UAAU,WACP,UAAU,SAAS,IAAI,WAAW,UAAU,MAAM,GAClD,OAAO,KACV,CACD;KACD,CACF;GACF,CAAC;EACF,iBAA6C;GAC5C,MAAM;GACN,SAAS,MAAM,QACd,QACE,qBAAqB,IAAI,WAAW,KAAK,CACzC,KACA,OAAO,cACN,UAAU,cAAc,UAAU,YAAY,IAAI,WAAW,KAAK,GAAG,OAAO,KAC5E,CACD;GACH,CAAC;EACF,8BAA8B;EAC9B,uCAAuC;EACvC;EACA;AAEH,MAAM,6BAA6B,QAAsC;CACxE,MAAM,kCAAkB,IAAI,KAAwB;AACpD,MAAK,MAAM,CAAC,KAAK,SAAS,IAAI,MAAM,MACnC,iBAAgB,IAAI,KAAK,OAAO,IAAI,IAAI;CAEzC,MAAM,UAAU,eAAgC;EAC/C,MAAM,MAAM,gBAAgB,IAAI,WAAW;AAC3C,MAAI,QAAQ,KAAA,EACX,OAAM,IAAI,MAAM,+CAA+C,WAAW,GAAG;EAE9E,MAAM,WAAW,iBAAiB,IAAI,UAAU,IAAI;AACpD,MAAI,aAAa,KAAA,EAChB,OAAM,IAAI,MAAM,kDAAkD,WAAW,GAAG;AAEjF,SAAO;;AAER,QAAO,EACN,QAAQ,aAAsC,OAAO,SAAS,GAAG,EACjE;;AAGF,MAAa,kCACZ,UAAwC,EAAE,KAY1C,OAAO,IAAI,aAAa;CACvB,MAAM,UAAU,OAAO;CACvB,MAAM,QAAQ,OAAO;CACrB,MAAM,gBAAgB,OAAO;CAC7B,MAAM,cAAc,OAAO;CAC3B,MAAM,KAAK,OAAO,WAAW;CAC7B,MAAM,aAAa,OAAO;CAC1B,MAAM,mBAAmB,OAAO;AAChC,SAAQ,QACP,OAAO,IAAI,aAAa;EACvB,MAAM,SAAS,OAAO,sBAAsB,QAAQ,QAAQ,0BAA0B,IAAI,CAAC;AAW3F,SAAO,cAAc,OAVG,cAAc;GACrC,UAAU;IACT,KAAK,IAAI,SAAS;IAClB,OAAO,IAAI,SAAS;IACpB,OAAO,IAAI,SAAS;IACpB;GACD,eAAe,EAAE;GACjB;GACA,CAAC,EACmB,KAAK,WAAW,WAAW,gBACL,CAAC,CAAC,KAC5C,OAAO,eAAe,WAAW,YAAY,GAAG,CAChD;EACD,MAAM,SAAS,OAAO,QACpB,SAAS,EAAE,oBAAoB,CAAC,sBAAsB,OAAO,CAAC,EAAE,CAAC,CACjE,KACA,OAAO,eAAe,qBAAqB,MAAM,EACjD,OAAO,eAAe,0BAA0B,cAAc,EAC9D,OAAO,eAAe,oBAAoB,YAAY,EACtD,OAAO,eAAe,WAAW,YAAY,GAAG,CAChD;AACF,SAAO,iBAAiB;AACxB,SAAO,CACN;GACC,KAAK;GACL,iBAAA;GACA,IAAI,KAAK,KAAK;GACd,EACD;GACC,KAAK;GACL,OAAO;IACN,GAAG,OAAO;IACV,GAAG,OAAO;IACV,GAAI,OAAO,UAAU,gBAAgB,EAAE;IACvC;GACD,IAAI,KAAK,KAAK;GACd,CACD;GACA;EACF"}

package/dist/orchestrators/snapshot/capture.d.mts

@@ -0,0 +1 @@
+import { Effect, FileSystem, Schema } from "effect";