@mysten-incubation/devstack 0.0.0

package/dist/orchestrators/snapshot/prune.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"prune.mjs","names":[],"sources":["../../../src/orchestrators/snapshot/prune.ts"],"sourcesContent":["// Prune — label-scoped orphan sweep.\n//\n// Architecture § 4 / Decision §10: plugins emit `LivenessClassifier`\n// decls; the L3 prune orchestrator dispatches to them with the\n// registry-persisted hints and reaps anything classified `abandoned`.\n//\n// This module is the snapshot-orchestrator-side of prune: sweeping\n// snapshot-byproduct images, snapshot-catalog directories that lost\n// their owning stack, and cache entries whose chainId is no longer\n// referenced anywhere.\n//\n// The substrate-wide registry prune (engine resources / stack\n// roster) is a sibling orchestrator and lives elsewhere; this file\n// is scoped to snapshot adjacent artifacts.\n\nimport { Effect, FileSystem, Schema } from 'effect';\n\nimport type {\n\tLivenessClassification,\n\tLivenessClassifierDecl,\n\tLivenessHints,\n} from '../../contracts/liveness-classifier.ts';\nimport type { ContainerRuntime } from '../../contracts/container-runtime.ts';\nimport { SnapshotMetadataSchema, type SnapshotMetadata } from './descriptor.ts';\nimport { SNAPSHOTS_DIR_NAME } from './wipe.ts';\n\n// -----------------------------------------------------------------------------\n// Errors\n// -----------------------------------------------------------------------------\n\nexport class PrunePhaseError extends Schema.TaggedErrorClass<PrunePhaseError>()(\n\t'SnapshotPrunePhaseError',\n\t{\n\t\tphase: Schema.Literals([\n\t\t\t'enumerate-catalog',\n\t\t\t'read-meta',\n\t\t\t'classify',\n\t\t\t'sweep-images',\n\t\t\t'sweep-directories',\n\t\t]),\n\t\tdetail: Schema.String,\n\t\tcause: Schema.optional(Schema.Defect),\n\t},\n) {}\n\nconst failPhase =\n\t(\n\t\tphase: PrunePhaseError['phase'],\n\t\tdetail: string,\n\t): ((cause: unknown) => Effect.Effect<never, PrunePhaseError>) =>\n\t(cause) =>\n\t\tEffect.fail(new PrunePhaseError({ phase, detail, cause }));\n\n// -----------------------------------------------------------------------------\n// Inputs\n// -----------------------------------------------------------------------------\n\n/** Per-classifier dispatch entry — the L3 prune orchestrator hands\n *  the classifier the persisted hints for one snapshot artifact /\n *  cache entry / etc., and the classifier returns `'alive' | 'dormant'\n *  | 'stale' | 'abandoned'`. */\nexport interface ClassifierDispatch {\n\treadonly plugin: string;\n\treadonly decl: LivenessClassifierDecl;\n}\n\nexport interface PruneInputs {\n\t/** Stack root containing the `snapshots/` catalog. */\n\treadonly stackRoot: string;\n\t/** Filter for managed image cleanup. */\n\treadonly imageLabelFilter: { readonly app: string; readonly stack: string };\n\t/** Classifiers contributed by plugins — same set the L3 prune\n\t *  orchestrator dispatches to. Iterated in declaration order; the\n\t *  first non-`alive` classification wins. */\n\treadonly classifiers: ReadonlyArray<ClassifierDispatch>;\n\treadonly runtime: ContainerRuntime;\n}\n\nexport interface PruneResult {\n\treadonly inspected: number;\n\treadonly reaped: ReadonlyArray<{\n\t\treadonly id: string;\n\t\treadonly classification: LivenessClassification;\n\t}>;\n\treadonly imagesSwept: number;\n}\n\n// -----------------------------------------------------------------------------\n// Helpers\n// -----------------------------------------------------------------------------\n\nconst readMetaOpt = (\n\tdir: string,\n): Effect.Effect<SnapshotMetadata | null, PrunePhaseError, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tconst path = `${dir}/meta.json`;\n\t\tconst exists = yield* fs.exists(path).pipe(Effect.catch(() => Effect.succeed(false)));\n\t\tif (!exists) return null;\n\t\tconst text = yield* fs\n\t\t\t.readFileString(path)\n\t\t\t.pipe(Effect.catch(failPhase('read-meta', `read ${path} failed`)));\n\t\tconst raw = yield* Effect.try({\n\t\t\ttry: () => JSON.parse(text) as unknown,\n\t\t\tcatch: () => null,\n\t\t}).pipe(Effect.catch(() => Effect.succeed(null)));\n\t\tif (raw === null) return null;\n\t\treturn yield* Schema.decodeUnknownEffect(SnapshotMetadataSchema)(raw).pipe(\n\t\t\tEffect.catch(() => Effect.succeed(null)),\n\t\t);\n\t});\n\n/** Build the hints document a classifier consumes. Snapshot prune is\n *  age- + identity-based by default; plugin-specific hints flow\n *  through `pluginHints`. */\nconst hintsFor = (meta: SnapshotMetadata): LivenessHints => ({\n\theartbeatAt: meta.createdAt,\n\tclaimPid: null,\n\tclaimStartTime: null,\n\tpluginHints: {\n\t\tsnapshotId: meta.id,\n\t\tidentity: meta.identity,\n\t\tparticipants: meta.participants,\n\t},\n});\n\n// -----------------------------------------------------------------------------\n// Top-level prune\n// -----------------------------------------------------------------------------\n\n/**\n * Walk the snapshot catalog, dispatch each artifact's hints through\n * the contributed classifiers, and reap anything classified\n * `abandoned`. Concurrent sweeps over the same catalog are not\n * supported (caller holds `snapshot.reservation` or `stack.lock`).\n *\n * Also removes managed images via the runtime adapter's label-filtered\n * image cleanup.\n */\nexport const runPrune = (\n\tinputs: PruneInputs,\n): Effect.Effect<PruneResult, PrunePhaseError, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t'devstack.snapshot.phase': 'prune',\n\t\t});\n\t\tconst catalogDir = `${inputs.stackRoot}/${SNAPSHOTS_DIR_NAME}`;\n\t\tconst catalogExists = yield* fs\n\t\t\t.exists(catalogDir)\n\t\t\t.pipe(Effect.catch(() => Effect.succeed(false)));\n\t\tif (!catalogExists) {\n\t\t\treturn { inspected: 0, reaped: [], imagesSwept: 0 } satisfies PruneResult;\n\t\t}\n\t\tconst ids = yield* fs\n\t\t\t.readDirectory(catalogDir)\n\t\t\t.pipe(Effect.catch(failPhase('enumerate-catalog', `readdir ${catalogDir} failed`)));\n\n\t\tconst reaped: Array<{ id: string; classification: LivenessClassification }> = [];\n\t\tfor (const id of ids) {\n\t\t\tconst dir = `${catalogDir}/${id}`;\n\t\t\tconst meta = yield* readMetaOpt(dir);\n\t\t\t// Partial artifacts (no meta) — classify as `abandoned` by\n\t\t\t// convention. The catalog list already hides them; reaping\n\t\t\t// is just freeing the disk slot.\n\t\t\tif (meta === null) {\n\t\t\t\tyield* fs\n\t\t\t\t\t.remove(dir, { recursive: true, force: true })\n\t\t\t\t\t.pipe(Effect.catch(failPhase('sweep-directories', `remove ${dir} failed`)));\n\t\t\t\treaped.push({ id, classification: 'abandoned' });\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst hints = hintsFor(meta);\n\t\t\tlet classification: LivenessClassification = 'alive';\n\t\t\tfor (const { decl } of inputs.classifiers) {\n\t\t\t\tconst c = yield* decl\n\t\t\t\t\t.classify(hints)\n\t\t\t\t\t.pipe(Effect.catch(() => Effect.succeed('alive' as LivenessClassification)));\n\t\t\t\tif (c !== 'alive') {\n\t\t\t\t\tclassification = c;\n\t\t\t\t\tbreak;\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (classification === 'abandoned') {\n\t\t\t\tyield* fs\n\t\t\t\t\t.remove(dir, { recursive: true, force: true })\n\t\t\t\t\t.pipe(Effect.catch(failPhase('sweep-directories', `remove ${dir} failed`)));\n\t\t\t\treaped.push({ id, classification });\n\t\t\t}\n\t\t}\n\n\t\t// Sweep snapshot-byproduct images via the runtime adapter's\n\t\t// label-scoped image cleanup. Architecture § Decision §8 —\n\t\t// committed snapshot images accumulate; the orchestrator GCs\n\t\t// alongside catalog prune.\n\t\tconst imagesSwept = yield* inputs.runtime\n\t\t\t.removeManagedImages(inputs.imageLabelFilter)\n\t\t\t.pipe(Effect.catch(failPhase('sweep-images', `image sweep failed`)));\n\n\t\treturn {\n\t\t\tinspected: ids.length,\n\t\t\treaped,\n\t\t\timagesSwept,\n\t\t} satisfies PruneResult;\n\t}).pipe(Effect.withSpan('orchestrator.snapshot.prune'));\n"],"mappings":";;;;AA8BA,IAAa,kBAAb,cAAqC,OAAO,kBAAmC,CAC9E,2BACA;CACC,OAAO,OAAO,SAAS;EACtB;EACA;EACA;EACA;EACA;EACA,CAAC;CACF,QAAQ,OAAO;CACf,OAAO,OAAO,SAAS,OAAO,OAAO;CACrC,CACD,CAAC;AAEF,MAAM,aAEJ,OACA,YAEA,UACA,OAAO,KAAK,IAAI,gBAAgB;CAAE;CAAO;CAAQ;CAAO,CAAC,CAAC;AAwC5D,MAAM,eACL,QAEA,OAAO,IAAI,aAAa;CACvB,MAAM,KAAK,OAAO,WAAW;CAC7B,MAAM,OAAO,GAAG,IAAI;AAEpB,KAAI,EAAC,OADiB,GAAG,OAAO,KAAK,CAAC,KAAK,OAAO,YAAY,OAAO,QAAQ,MAAM,CAAC,CAAC,EACxE,QAAO;CACpB,MAAM,OAAO,OAAO,GAClB,eAAe,KAAK,CACpB,KAAK,OAAO,MAAM,UAAU,aAAa,QAAQ,KAAK,SAAS,CAAC,CAAC;CACnE,MAAM,MAAM,OAAO,OAAO,IAAI;EAC7B,WAAW,KAAK,MAAM,KAAK;EAC3B,aAAa;EACb,CAAC,CAAC,KAAK,OAAO,YAAY,OAAO,QAAQ,KAAK,CAAC,CAAC;AACjD,KAAI,QAAQ,KAAM,QAAO;AACzB,QAAO,OAAO,OAAO,oBAAoB,uBAAuB,CAAC,IAAI,CAAC,KACrE,OAAO,YAAY,OAAO,QAAQ,KAAK,CAAC,CACxC;EACA;;;;AAKH,MAAM,YAAY,UAA2C;CAC5D,aAAa,KAAK;CAClB,UAAU;CACV,gBAAgB;CAChB,aAAa;EACZ,YAAY,KAAK;EACjB,UAAU,KAAK;EACf,cAAc,KAAK;EACnB;CACD;;;;;;;;;;AAeD,MAAa,YACZ,WAEA,OAAO,IAAI,aAAa;CACvB,MAAM,KAAK,OAAO,WAAW;AAC7B,QAAO,OAAO,oBAAoB,EACjC,2BAA2B,SAC3B,CAAC;CACF,MAAM,aAAa,GAAG,OAAO,UAAU,GAAG;AAI1C,KAAI,EAAC,OAHwB,GAC3B,OAAO,WAAW,CAClB,KAAK,OAAO,YAAY,OAAO,QAAQ,MAAM,CAAC,CAAC,EAEhD,QAAO;EAAE,WAAW;EAAG,QAAQ,EAAE;EAAE,aAAa;EAAG;CAEpD,MAAM,MAAM,OAAO,GACjB,cAAc,WAAW,CACzB,KAAK,OAAO,MAAM,UAAU,qBAAqB,WAAW,WAAW,SAAS,CAAC,CAAC;CAEpF,MAAM,SAAwE,EAAE;AAChF,MAAK,MAAM,MAAM,KAAK;EACrB,MAAM,MAAM,GAAG,WAAW,GAAG;EAC7B,MAAM,OAAO,OAAO,YAAY,IAAI;AAIpC,MAAI,SAAS,MAAM;AAClB,UAAO,GACL,OAAO,KAAK;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC,CAC7C,KAAK,OAAO,MAAM,UAAU,qBAAqB,UAAU,IAAI,SAAS,CAAC,CAAC;AAC5E,UAAO,KAAK;IAAE;IAAI,gBAAgB;IAAa,CAAC;AAChD;;EAED,MAAM,QAAQ,SAAS,KAAK;EAC5B,IAAI,iBAAyC;AAC7C,OAAK,MAAM,EAAE,UAAU,OAAO,aAAa;GAC1C,MAAM,IAAI,OAAO,KACf,SAAS,MAAM,CACf,KAAK,OAAO,YAAY,OAAO,QAAQ,QAAkC,CAAC,CAAC;AAC7E,OAAI,MAAM,SAAS;AAClB,qBAAiB;AACjB;;;AAGF,MAAI,mBAAmB,aAAa;AACnC,UAAO,GACL,OAAO,KAAK;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC,CAC7C,KAAK,OAAO,MAAM,UAAU,qBAAqB,UAAU,IAAI,SAAS,CAAC,CAAC;AAC5E,UAAO,KAAK;IAAE;IAAI;IAAgB,CAAC;;;CAQrC,MAAM,cAAc,OAAO,OAAO,QAChC,oBAAoB,OAAO,iBAAiB,CAC5C,KAAK,OAAO,MAAM,UAAU,gBAAgB,qBAAqB,CAAC,CAAC;AAErE,QAAO;EACN,WAAW,IAAI;EACf;EACA;EACA;EACA,CAAC,KAAK,OAAO,SAAS,8BAA8B,CAAC"}

package/dist/orchestrators/snapshot/restore.d.mts

@@ -0,0 +1 @@
+import { Effect, FileSystem, Schema } from "effect";

package/dist/orchestrators/snapshot/restore.mjs

@@ -0,0 +1,404 @@
+import { HostTreeTarError, untarHostTree, validateHostTreeTarEntries } from "../../substrate/runtime/host-tree-tar/index.mjs";
+import { ContributionDocSchema, SnapshotLayout, SnapshotMetadataSchema, containerImagesBundlePath, contributionPath, isRestorableContainerImageName, isSafeSnapshotPathSegment, isSafeSnapshotRelativePath, parseSnapshotId } from "./descriptor.mjs";
+import { readImageBundleTags, verifyImageBundleTags } from "./image-bundle-tags.mjs";
+import { verifyArtifactIntegrity } from "./integrity.mjs";
+import { mergeContributions, runIdentityGuard, runRuntimeIdentityGuard } from "./identity-guard.mjs";
+import { readSnapshotStateDocument, writeSnapshotStateDocument } from "./state-document.mjs";
+import { SNAPSHOTS_DIR_NAME } from "./wipe.mjs";
+import { stageAndSwap } from "../../substrate/runtime/stage-and-swap/index.mjs";
+import { runtimeControlLockPathForStackRoot } from "../../substrate/runtime/cross-process/command-channel/runtime-control-lock.mjs";
+import { COMMAND_CHANNEL_COMMANDS_FILE_NAME, COMMAND_CHANNEL_EVENTS_FILE_NAME } from "../../substrate/runtime/cross-process/command-channel/channel.mjs";
+import { Effect, Exit, FileSystem, Schema, Stream } from "effect";
+import { randomUUID } from "node:crypto";
+//#region src/orchestrators/snapshot/restore.ts
+/** Tagged failure during a restore step. Phase discriminates the
+*  failing step so the user-facing message can point at it. */
+var RestorePhaseError = class extends Schema.TaggedErrorClass()("SnapshotRestorePhaseError", {
+	phase: Schema.Literals([
+		"read-meta",
+		"meta-corrupt",
+		"meta-absent",
+		"read-state",
+		"read-contribution",
+		"read-integrity",
+		"verify-integrity",
+		"preflight",
+		"pre-restore-hook",
+		"untar-host-tree",
+		"load-image",
+		"retag-image",
+		"expand-state",
+		"post-restore-hook",
+		"pre-cleanup",
+		"write-restore-pending",
+		"clear-restore-pending",
+		"missing-subtree-fatal"
+	]),
+	plugin: Schema.optional(Schema.String),
+	detail: Schema.String,
+	cause: Schema.optional(Schema.Defect)
+}) {};
+const failPhase = (phase, detail, plugin) => (cause) => Effect.fail(new RestorePhaseError({
+	phase,
+	plugin,
+	detail,
+	cause
+}));
+const failRestore = (phase, detail, plugin) => Effect.fail(new RestorePhaseError({
+	phase,
+	plugin,
+	detail
+}));
+const failImageBundleTagScan = (phase, plugin) => (cause) => Effect.fail(new RestorePhaseError({
+	phase,
+	plugin,
+	detail: cause.detail,
+	cause
+}));
+const readMeta = (artifactDir, expectedId) => Effect.gen(function* () {
+	const fs = yield* FileSystem.FileSystem;
+	const path = `${artifactDir}/${SnapshotLayout.metaFile}`;
+	if (!(yield* fs.exists(path).pipe(Effect.catch(() => Effect.succeed(false))))) return yield* Effect.fail(new RestorePhaseError({
+		phase: "meta-absent",
+		detail: `snapshot meta.json not found at ${path}`
+	}));
+	const text = yield* fs.readFileString(path).pipe(Effect.catch(failPhase("read-meta", `read meta.json failed at ${path}`)));
+	const raw = yield* Effect.try({
+		try: () => JSON.parse(text),
+		catch: (cause) => new RestorePhaseError({
+			phase: "meta-corrupt",
+			detail: `meta.json is not valid JSON at ${path}`,
+			cause
+		})
+	});
+	const meta = yield* Schema.decodeUnknownEffect(SnapshotMetadataSchema)(raw).pipe(Effect.catch((cause) => Effect.fail(new RestorePhaseError({
+		phase: "meta-corrupt",
+		detail: `meta.json failed schema decode at ${path}`,
+		cause
+	}))));
+	const parsedId = parseSnapshotId(meta.id);
+	if (parsedId === null) return yield* failRestore("meta-corrupt", `meta.json contains an unsafe snapshot id: ${meta.id}`);
+	if (parsedId !== expectedId) return yield* failRestore("meta-corrupt", `meta.json id ${meta.id} does not match requested snapshot id ${expectedId}`);
+	return meta;
+}).pipe(Effect.withSpan("orchestrator.snapshot.restore.read-meta"));
+const verifyIntegrity = (artifactDir) => verifyArtifactIntegrity(artifactDir).pipe(Effect.catch((cause) => Effect.fail(new RestorePhaseError({
+	phase: cause instanceof Error && cause.message.includes(SnapshotLayout.integrityFile) ? "read-integrity" : "verify-integrity",
+	detail: cause instanceof Error ? cause.message : `snapshot integrity failed`,
+	cause
+}))));
+/** Restore must discard the current writable layer even when the live
+*  supervisor still holds a claim for the container. This is
+*  intentionally separate from orphan sweep, which skips claimed
+*  containers by design. */
+const removeCapturedContainers = (meta, runtime, runtimeIdentity) => Effect.gen(function* () {
+	for (const captured of meta.containers) yield* runtime.removeManagedContainers({
+		app: runtimeIdentity.app,
+		stack: runtimeIdentity.stack,
+		plugin: captured.plugin,
+		role: captured.role
+	}).pipe(Effect.catch(failPhase("pre-cleanup", `remove managed containers for ${captured.plugin}/${captured.role} failed`, captured.plugin)));
+}).pipe(Effect.withSpan("orchestrator.snapshot.restore.remove-containers"));
+const RESTORE_PENDING_FILE_NAME = "snapshot.restore-pending.json";
+Schema.Struct({
+	version: Schema.Literal(1),
+	snapshotId: Schema.String,
+	artifactDir: Schema.String,
+	app: Schema.String,
+	stack: Schema.String,
+	network: Schema.String,
+	containers: Schema.Array(Schema.Struct({
+		plugin: Schema.String,
+		role: Schema.String,
+		targetImageName: Schema.String,
+		stagedImageTag: Schema.String
+	}))
+});
+const loadedBundleTags = (bundle) => {
+	const tags = /* @__PURE__ */ new Set();
+	for (const ref of bundle.refs) if (ref.tag !== void 0) tags.add(ref.tag);
+	return tags;
+};
+const mintRestoreStagingTag = () => `devstack-snapshot:restore-${randomUUID().replaceAll("-", "").slice(0, 24)}`;
+const writeRestorePendingMarker = (args) => {
+	if (args.stagedImages.length === 0) return Effect.void;
+	const doc = {
+		version: 1,
+		snapshotId: args.meta.id,
+		artifactDir: args.artifactDir,
+		app: args.meta.app,
+		stack: args.meta.stack,
+		network: args.meta.network,
+		containers: args.stagedImages.map((image) => ({
+			plugin: image.captured.plugin,
+			role: image.captured.role,
+			targetImageName: image.captured.imageName,
+			stagedImageTag: image.stagedImageTag
+		}))
+	};
+	return Effect.gen(function* () {
+		yield* (yield* FileSystem.FileSystem).writeFileString(`${args.runtimeRoot}/${RESTORE_PENDING_FILE_NAME}`, `${JSON.stringify(doc, null, 2)}\n`).pipe(Effect.catch(failPhase("write-restore-pending", `write ${RESTORE_PENDING_FILE_NAME} failed`)));
+	});
+};
+const clearRestorePendingMarker = (runtimeRoot) => Effect.gen(function* () {
+	yield* (yield* FileSystem.FileSystem).remove(`${runtimeRoot}/${RESTORE_PENDING_FILE_NAME}`, { force: true }).pipe(Effect.catch(failPhase("clear-restore-pending", `remove ${RESTORE_PENDING_FILE_NAME} failed`)));
+});
+const requirePathSegment = (kind, value, plugin) => isSafeSnapshotPathSegment(value) ? Effect.void : failRestore("preflight", `unsafe snapshot ${kind} path segment: ${value}`, plugin);
+const requireReadableNonEmptyFile = (path, phase, detail, plugin) => Effect.gen(function* () {
+	const fs = yield* FileSystem.FileSystem;
+	if ((yield* fs.stat(path).pipe(Effect.catch(failPhase(phase, `${detail}: stat failed at ${path}`, plugin)))).size === 0n) return yield* failRestore(phase, `${detail}: empty file at ${path}`, plugin);
+	yield* Stream.runDrain(fs.stream(path).pipe(Stream.take(1))).pipe(Effect.catch(failPhase(phase, `${detail}: read failed at ${path}`, plugin)));
+});
+const preflightCapturedContainer = (captured, artifactDir) => Effect.gen(function* () {
+	yield* requirePathSegment("plugin", captured.plugin, captured.plugin);
+	yield* requirePathSegment("role", captured.role, captured.plugin);
+	if (!isSafeSnapshotRelativePath(captured.tarPath)) return yield* failRestore("preflight", `unsafe container image tar path: ${captured.tarPath}`, captured.plugin);
+	const expectedTarPath = containerImagesBundlePath();
+	if (captured.tarPath !== expectedTarPath) return yield* failRestore("preflight", `container image tar path ${captured.tarPath} does not match canonical bundle ${expectedTarPath}`, captured.plugin);
+	if (!isRestorableContainerImageName(captured.imageName)) return yield* failRestore("preflight", `container imageName is not a restorable Docker tag destination: ${captured.imageName}`, captured.plugin);
+	if (!isRestorableContainerImageName(captured.snapshotTag)) return yield* failRestore("preflight", `container snapshotTag is not a restorable Docker tag source: ${captured.snapshotTag}`, captured.plugin);
+	yield* requireReadableNonEmptyFile(`${artifactDir}/${captured.tarPath}`, "load-image", "container image tar is required", captured.plugin);
+});
+const preflightContributionDoc = (pluginKey, artifactDir) => Effect.gen(function* () {
+	const path = `${artifactDir}/${contributionPath(pluginKey)}`;
+	const text = yield* (yield* FileSystem.FileSystem).readFileString(path).pipe(Effect.catch(failPhase("read-contribution", `read contribution doc failed at ${path}`, pluginKey)));
+	const raw = yield* Effect.try({
+		try: () => JSON.parse(text),
+		catch: (cause) => new RestorePhaseError({
+			phase: "read-contribution",
+			plugin: pluginKey,
+			detail: `contribution doc is not valid JSON at ${path}`,
+			cause
+		})
+	});
+	const decoded = yield* Schema.decodeUnknownEffect(ContributionDocSchema)(raw).pipe(Effect.catch((cause) => Effect.fail(new RestorePhaseError({
+		phase: "read-contribution",
+		plugin: pluginKey,
+		detail: `contribution doc failed schema decode at ${path}`,
+		cause
+	}))));
+	if (decoded.plugin !== pluginKey) return yield* failRestore("read-contribution", `contribution doc plugin ${decoded.plugin} does not match ${pluginKey}`, pluginKey);
+});
+const preflightArtifact = (meta, artifactDir) => Effect.gen(function* () {
+	const fs = yield* FileSystem.FileSystem;
+	const seenSnapshotTags = /* @__PURE__ */ new Map();
+	for (const captured of meta.containers) {
+		yield* preflightCapturedContainer(captured, artifactDir);
+		const previous = seenSnapshotTags.get(captured.snapshotTag);
+		if (previous !== void 0) return yield* failRestore("preflight", `duplicate container snapshotTag ${captured.snapshotTag} for ${previous.plugin}/${previous.role} and ${captured.plugin}/${captured.role}`, captured.plugin);
+		seenSnapshotTags.set(captured.snapshotTag, captured);
+	}
+	for (const pluginKey of meta.participants) yield* preflightContributionDoc(pluginKey, artifactDir);
+	const statePath = `${artifactDir}/${SnapshotLayout.stateFile}`;
+	if (yield* fs.exists(statePath).pipe(Effect.catch(() => Effect.succeed(false)))) yield* readSnapshotStateDocument(statePath).pipe(Effect.catch(failPhase("read-state", `state.json failed schema validation`)));
+	if (meta.hostTreeIncluded) {
+		const tarPath = `${artifactDir}/${SnapshotLayout.hostTreeTar}`;
+		yield* requireReadableNonEmptyFile(tarPath, "untar-host-tree", "host-tree tar is required");
+		yield* validateHostTreeTarEntries(fs.stream(tarPath).pipe(Stream.mapError((cause) => new HostTreeTarError({
+			stage: "entry-validation",
+			operation: "untar",
+			detail: `read host-tree tar failed at ${tarPath}`,
+			cause
+		})))).pipe(Effect.catch(failPhase("untar-host-tree", `host-tree tar entry validation failed`)));
+	}
+}).pipe(Effect.withSpan("orchestrator.snapshot.restore.preflight"));
+const loadImageBundle = (tarPath, artifactDir, runtime, expectedSnapshotTags) => Effect.gen(function* () {
+	const fs = yield* FileSystem.FileSystem;
+	const fullTarPath = `${artifactDir}/${tarPath}`;
+	if (!(yield* fs.exists(fullTarPath).pipe(Effect.catch(() => Effect.succeed(false))))) return yield* Effect.fail(new RestorePhaseError({
+		phase: "load-image",
+		detail: `container image bundle absent at ${fullTarPath}`
+	}));
+	yield* verifyImageBundleTags(tarPath, yield* readImageBundleTags(fullTarPath, tarPath).pipe(Effect.catch(failImageBundleTagScan("load-image"))), expectedSnapshotTags).pipe(Effect.catch(failImageBundleTagScan("load-image")));
+	const loaded = yield* runtime.loadImage(fs.stream(fullTarPath)).pipe(Effect.catch(failPhase("load-image", `load container image bundle from ${fullTarPath} failed`)));
+	const loadedTags = loadedBundleTags(loaded);
+	const missing = expectedSnapshotTags.filter((tag) => !loadedTags.has(tag));
+	if (missing.length > 0) return yield* failRestore("load-image", `container image bundle ${tarPath} did not load expected snapshot tags: ${missing.join(", ")}`);
+	const refsByTag = /* @__PURE__ */ new Map();
+	for (const ref of loaded.refs) {
+		if (ref.tag === void 0 || !expectedSnapshotTags.includes(ref.tag)) continue;
+		if (refsByTag.has(ref.tag)) return yield* failRestore("load-image", `container image bundle ${tarPath} loaded duplicate snapshot tag ${ref.tag}`);
+		refsByTag.set(ref.tag, ref);
+	}
+	return refsByTag;
+}).pipe(Effect.withSpan("orchestrator.snapshot.restore.load-image-bundle"));
+const expectedSnapshotTagsByBundle = (containers) => {
+	const byBundle = /* @__PURE__ */ new Map();
+	for (const captured of containers) {
+		const tags = byBundle.get(captured.tarPath);
+		if (tags === void 0) byBundle.set(captured.tarPath, [captured.snapshotTag]);
+		else tags.push(captured.snapshotTag);
+	}
+	return byBundle;
+};
+const stageLoadedImage = (captured, loadedRef, runtime, registerStagedImage) => Effect.gen(function* () {
+	const stagedImageTag = mintRestoreStagingTag();
+	const stagedImage = {
+		captured,
+		stagedRef: {
+			digest: loadedRef.digest,
+			tag: stagedImageTag
+		},
+		stagedImageTag
+	};
+	yield* registerStagedImage(stagedImage);
+	yield* runtime.tagImage(loadedRef, stagedImageTag, { removeSourceAfterTag: true }).pipe(Effect.catch(failPhase("retag-image", `tag restored image ${captured.snapshotTag} as staging ref ${stagedImageTag} failed`, captured.plugin)));
+	return stagedImage;
+}).pipe(Effect.withSpan("orchestrator.snapshot.restore.stage-image"));
+const cleanupRestoreStagingImages = (runtime, images) => Effect.forEach(images, (image) => runtime.removeImage(image.stagedRef).pipe(Effect.catch((cause) => Effect.logWarning(`remove restore staging image ${image.stagedImageTag} failed during restore cleanup: ${String(cause)}`))), { concurrency: "unbounded" }).pipe(Effect.asVoid);
+const promoteStagedImages = (images, runtime) => Effect.gen(function* () {
+	for (const image of images) yield* runtime.tagImage(image.stagedRef, image.captured.imageName, { removeSourceAfterTag: true }).pipe(Effect.catch(failPhase("retag-image", `tag staged image ${image.stagedImageTag} as ${image.captured.imageName} failed`, image.captured.plugin)));
+}).pipe(Effect.withSpan("orchestrator.snapshot.restore.promote-images"));
+const restoreHostTree = (artifactDir, target) => Effect.gen(function* () {
+	const fs = yield* FileSystem.FileSystem;
+	const tarPath = `${artifactDir}/${SnapshotLayout.hostTreeTar}`;
+	if (!(yield* fs.exists(tarPath).pipe(Effect.catch(() => Effect.succeed(false))))) return yield* Effect.fail(new RestorePhaseError({
+		phase: "untar-host-tree",
+		detail: `host-tree tar absent at ${tarPath}`
+	}));
+	const tarStream = fs.stream(tarPath).pipe(Stream.mapError((cause) => new HostTreeTarError({
+		stage: "stream-stdin",
+		operation: "untar",
+		detail: `read host-tree tar failed at ${tarPath}`,
+		cause
+	})));
+	yield* Effect.scoped(untarHostTree(tarStream, { target })).pipe(Effect.catch(failPhase("untar-host-tree", `untar ${tarPath} to ${target} failed`)));
+}).pipe(Effect.withSpan("orchestrator.snapshot.restore.host-tree"));
+const LIVE_RESTORE_PRESERVED_PATHS = [
+	{
+		relativePath: SNAPSHOTS_DIR_NAME,
+		kind: "directory"
+	},
+	{
+		relativePath: COMMAND_CHANNEL_COMMANDS_FILE_NAME,
+		kind: "file"
+	},
+	{
+		relativePath: COMMAND_CHANNEL_EVENTS_FILE_NAME,
+		kind: "file"
+	},
+	{
+		relativePath: "roster.json",
+		kind: "file"
+	},
+	{
+		relativePath: "container-claims.json",
+		kind: "file"
+	},
+	{
+		relativePath: "snapshot.reservation",
+		kind: "file"
+	}
+];
+/**
+* Run the full restore. Bracketed-atomic via `stageAndSwap` at the
+* runtime-root level — external watchers never observe a half-restored
+* tree.
+*
+* Order:
+*   1. Read meta.json (refuse if absent / corrupt — no mutation).
+*   2. Run identity-guard against runtime metadata and merged plugin
+*      contributions (refuse on any disagreement — no mutation).
+*   3. Pre-restore hooks (per-plugin validation; soft errors).
+*   4. Stage:
+*      - Untar host-tree into staging.
+*      - Copy state.json into staging.
+*      - Re-read contribution docs.
+*      - Load image bundles and stage verified snapshot tags.
+*      - Write a restore-pending marker into the staged root.
+*   5. Atomic swap staging → runtime root, preserving live command /
+*      event channel files and other explicit runtime-control files.
+*   6. Promote staged images to recorded refs, then remove captured
+*      managed containers by label. If this fails, the pending marker
+*      remains in the restored root for diagnosis/recovery.
+*   7. Post-restore hooks.
+*
+* The caller is responsible for `acquireReservation`; restore supplies
+* the runtime-control publish lock to `stageAndSwap`.
+*/
+const runRestore = (inputs) => Effect.gen(function* () {
+	yield* Effect.annotateCurrentSpan({
+		"devstack.snapshot.phase": "restore",
+		"devstack.snapshot.artifact": inputs.artifactDir
+	});
+	const meta = yield* readMeta(inputs.artifactDir, inputs.snapshotId);
+	yield* verifyIntegrity(inputs.artifactDir);
+	yield* runRuntimeIdentityGuard({
+		app: meta.app,
+		stack: meta.stack,
+		network: meta.network
+	}, inputs.runtimeIdentity);
+	const liveContributions = [];
+	for (const participant of inputs.participants) {
+		const slice = yield* participant.liveIdentity;
+		liveContributions.push({
+			plugin: participant.plugin,
+			slice
+		});
+	}
+	const live = yield* mergeContributions(liveContributions);
+	yield* runIdentityGuard(meta.identity, live);
+	for (const participant of inputs.participants) if (participant.preRestore) yield* participant.preRestore.pipe(Effect.catch(failPhase("pre-restore-hook", `preRestore failed`, participant.plugin)));
+	yield* preflightArtifact(meta, inputs.artifactDir);
+	const stagedImages = yield* Effect.scoped(Effect.gen(function* () {
+		const stagedImages = [];
+		let recoveryHandoffComplete = false;
+		yield* Effect.addFinalizer((exit) => Exit.isFailure(exit) && !recoveryHandoffComplete ? cleanupRestoreStagingImages(inputs.runtime, stagedImages) : Effect.void);
+		const swappedImages = yield* stageAndSwap({
+			targetPath: inputs.runtimeStackRoot,
+			stagingPath: inputs.runtimeStagingPath,
+			backupPath: inputs.runtimeBackupPath,
+			preserveFromTarget: LIVE_RESTORE_PRESERVED_PATHS,
+			publishLockPath: runtimeControlLockPathForStackRoot(inputs.runtimeStackRoot),
+			build: Effect.gen(function* () {
+				if (meta.hostTreeIncluded) yield* restoreHostTree(inputs.artifactDir, inputs.runtimeStagingPath);
+				const fs = yield* FileSystem.FileSystem;
+				const srcState = `${inputs.artifactDir}/${SnapshotLayout.stateFile}`;
+				if (yield* fs.exists(srcState).pipe(Effect.catch(() => Effect.succeed(false)))) {
+					const stateDoc = yield* readSnapshotStateDocument(srcState).pipe(Effect.catch(failPhase("read-state", `state.json failed schema validation`)));
+					yield* writeSnapshotStateDocument(`${inputs.runtimeStagingPath}/${SnapshotLayout.stateFile}`, stateDoc).pipe(Effect.catch(failPhase("expand-state", `write state.json failed`)));
+				}
+				for (const pluginKey of meta.participants) {
+					const path = `${inputs.artifactDir}/${contributionPath(pluginKey)}`;
+					if (!(yield* fs.exists(path).pipe(Effect.catch(() => Effect.succeed(false))))) return yield* Effect.fail(new RestorePhaseError({
+						phase: "read-contribution",
+						plugin: pluginKey,
+						detail: `contribution doc absent at ${path}`
+					}));
+				}
+				const expectedTagsByBundle = expectedSnapshotTagsByBundle(meta.containers);
+				const loadedRefsBySnapshotTag = /* @__PURE__ */ new Map();
+				for (const [tarPath, expectedTags] of expectedTagsByBundle) {
+					const loadedRefs = yield* loadImageBundle(tarPath, inputs.artifactDir, inputs.runtime, expectedTags);
+					for (const [tag, ref] of loadedRefs) loadedRefsBySnapshotTag.set(tag, ref);
+				}
+				for (const captured of meta.containers) {
+					const loadedRef = loadedRefsBySnapshotTag.get(captured.snapshotTag);
+					if (loadedRef === void 0) return yield* failRestore("load-image", `container image bundle did not return loaded ref for ${captured.snapshotTag}`, captured.plugin);
+					yield* stageLoadedImage(captured, loadedRef, inputs.runtime, (image) => Effect.sync(() => {
+						stagedImages.push(image);
+					}));
+				}
+				yield* writeRestorePendingMarker({
+					runtimeRoot: inputs.runtimeStagingPath,
+					meta,
+					artifactDir: inputs.artifactDir,
+					stagedImages
+				});
+				return stagedImages;
+			})
+		});
+		recoveryHandoffComplete = true;
+		return swappedImages;
+	}));
+	if (stagedImages.length > 0) {
+		yield* promoteStagedImages(stagedImages, inputs.runtime);
+		yield* removeCapturedContainers(meta, inputs.runtime, inputs.runtimeIdentity);
+		yield* clearRestorePendingMarker(inputs.runtimeStackRoot);
+	}
+	for (const participant of inputs.participants) if (participant.postRestore) yield* participant.postRestore.pipe(Effect.catch(failPhase("post-restore-hook", `postRestore failed`, participant.plugin)));
+	return meta;
+}).pipe(Effect.withSpan("orchestrator.snapshot.restore"));
+//#endregion
+export { runRestore };
+
+//# sourceMappingURL=restore.mjs.map

package/dist/orchestrators/snapshot/restore.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore.mjs","names":[],"sources":["../../../src/orchestrators/snapshot/restore.ts"],"sourcesContent":["// Restore pipeline.\n//\n// Architecture § Snapshot lifecycle (restore half):\n//\n//   Identity guard (chain identity + plugin contributions)\n//       │   (refuse and stop if mismatch — nothing touched)\n//       ▼\n//   Stage atomic restore in tempdir\n//       │\n//       ▼\n//   Per plugin: expand tar to staging, load committed images\n//       │\n//       ▼\n//   Atomic swap into runtime dir, preserving live control files\n//       │\n//       ▼\n//   snapshot.restored event → next stack acquire picks it up\n//\n// Bracketed-atomic — Tension 9 decision: one outer atomic swap, not\n// per-phase idempotency.\n\nimport { randomUUID } from 'node:crypto';\n\nimport { Effect, Exit, FileSystem, Schema, Stream } from 'effect';\n\nimport type { ContainerRuntime, ImageRef } from '../../contracts/container-runtime.ts';\nimport {\n\tHostTreeTarError,\n\tuntarHostTree,\n\tvalidateHostTreeTarEntries,\n} from '../../substrate/runtime/host-tree-tar/index.ts';\nimport {\n\tContributionDocSchema,\n\tcontainerImagesBundlePath,\n\tcontributionPath,\n\tSnapshotLayout,\n\tSnapshotMetadataSchema,\n\ttype SnapshotId,\n\ttype CapturedContainer,\n\ttype IdentitySlice,\n\ttype SnapshotMetadata,\n\tisRestorableContainerImageName,\n\tisSafeSnapshotPathSegment,\n\tisSafeSnapshotRelativePath,\n\tparseSnapshotId,\n} from './descriptor.ts';\nimport { verifyArtifactIntegrity } from './integrity.ts';\nimport { readSnapshotStateDocument, writeSnapshotStateDocument } from './state-document.ts';\nimport {\n\tmergeContributions,\n\trunIdentityGuard,\n\trunRuntimeIdentityGuard,\n\ttype IdentityContribution,\n\ttype IdentityContributionConflictError,\n\ttype IdentityGuardError,\n\ttype SnapshotRuntimeIdentity,\n} from './identity-guard.ts';\nimport {\n\tstageAndSwap,\n\ttype StageAndSwapError,\n\ttype StageAndSwapPreservedPath,\n} from '../../substrate/runtime/stage-and-swap/index.ts';\nimport {\n\tCOMMAND_CHANNEL_COMMANDS_FILE_NAME,\n\tCOMMAND_CHANNEL_EVENTS_FILE_NAME,\n\truntimeControlLockPathForStackRoot,\n} from '../../substrate/runtime/cross-process/command-channel/index.ts';\nimport {\n\tImageBundleTagScanError,\n\treadImageBundleTags,\n\tverifyImageBundleTags,\n} from './image-bundle-tags.ts';\nimport { SNAPSHOTS_DIR_NAME } from './wipe.ts';\n\n// -----------------------------------------------------------------------------\n// Errors\n// -----------------------------------------------------------------------------\n\n/** Tagged failure during a restore step. Phase discriminates the\n *  failing step so the user-facing message can point at it. */\nexport class RestorePhaseError extends Schema.TaggedErrorClass<RestorePhaseError>()(\n\t'SnapshotRestorePhaseError',\n\t{\n\t\tphase: Schema.Literals([\n\t\t\t'read-meta',\n\t\t\t'meta-corrupt',\n\t\t\t'meta-absent',\n\t\t\t'read-state',\n\t\t\t'read-contribution',\n\t\t\t'read-integrity',\n\t\t\t'verify-integrity',\n\t\t\t'preflight',\n\t\t\t'pre-restore-hook',\n\t\t\t'untar-host-tree',\n\t\t\t'load-image',\n\t\t\t'retag-image',\n\t\t\t'expand-state',\n\t\t\t'post-restore-hook',\n\t\t\t'pre-cleanup',\n\t\t\t'write-restore-pending',\n\t\t\t'clear-restore-pending',\n\t\t\t'missing-subtree-fatal',\n\t\t]),\n\t\tplugin: Schema.optional(Schema.String),\n\t\tdetail: Schema.String,\n\t\tcause: Schema.optional(Schema.Defect),\n\t},\n) {}\n\nconst failPhase =\n\t(\n\t\tphase: RestorePhaseError['phase'],\n\t\tdetail: string,\n\t\tplugin?: string,\n\t): ((cause: unknown) => Effect.Effect<never, RestorePhaseError>) =>\n\t(cause) =>\n\t\tEffect.fail(new RestorePhaseError({ phase, plugin, detail, cause }));\n\nconst failRestore = (\n\tphase: RestorePhaseError['phase'],\n\tdetail: string,\n\tplugin?: string,\n): Effect.Effect<never, RestorePhaseError> =>\n\tEffect.fail(new RestorePhaseError({ phase, plugin, detail }));\n\nconst failImageBundleTagScan =\n\t(phase: RestorePhaseError['phase'], plugin?: string) =>\n\t(cause: ImageBundleTagScanError): Effect.Effect<never, RestorePhaseError> =>\n\t\tEffect.fail(new RestorePhaseError({ phase, plugin, detail: cause.detail, cause }));\n\n// -----------------------------------------------------------------------------\n// Participants — what restore needs from each plugin\n// -----------------------------------------------------------------------------\n\n/** One plugin's restore-side contributions: a live identity probe\n *  (read fresh from the live stack), an opaque pre-restore validation\n *  hook, and a post-restore hook. Mirrors `SnapshotableDecl`'s\n *  pre/post hook surface but closed over the plugin's key. */\nexport interface RestoreParticipant {\n\treadonly plugin: string;\n\treadonly liveIdentity: Effect.Effect<IdentitySlice>;\n\t/** Pre-restore application-level validation (version compat,\n\t *  side-state). Identity-guard runs FIRST and unilaterally; this\n\t *  is the plugin's extra hook. */\n\treadonly preRestore?: Effect.Effect<void>;\n\t/** Post-restore hook: re-validate, warm caches, etc. */\n\treadonly postRestore?: Effect.Effect<void>;\n}\n\n// -----------------------------------------------------------------------------\n// Metadata read — authoritative; absent / unparseable refuses restore.\n// -----------------------------------------------------------------------------\n\nconst readMeta = (\n\tartifactDir: string,\n\texpectedId: SnapshotId,\n): Effect.Effect<SnapshotMetadata, RestorePhaseError, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tconst path = `${artifactDir}/${SnapshotLayout.metaFile}`;\n\t\tconst exists = yield* fs.exists(path).pipe(Effect.catch(() => Effect.succeed(false)));\n\t\tif (!exists) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\tnew RestorePhaseError({\n\t\t\t\t\tphase: 'meta-absent',\n\t\t\t\t\tdetail: `snapshot meta.json not found at ${path}`,\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\t\tconst text = yield* fs\n\t\t\t.readFileString(path)\n\t\t\t.pipe(Effect.catch(failPhase('read-meta', `read meta.json failed at ${path}`)));\n\t\tconst raw = yield* Effect.try({\n\t\t\ttry: () => JSON.parse(text) as unknown,\n\t\t\tcatch: (cause) =>\n\t\t\t\tnew RestorePhaseError({\n\t\t\t\t\tphase: 'meta-corrupt',\n\t\t\t\t\tdetail: `meta.json is not valid JSON at ${path}`,\n\t\t\t\t\tcause,\n\t\t\t\t}),\n\t\t});\n\t\tconst meta = yield* Schema.decodeUnknownEffect(SnapshotMetadataSchema)(raw).pipe(\n\t\t\tEffect.catch((cause) =>\n\t\t\t\tEffect.fail(\n\t\t\t\t\tnew RestorePhaseError({\n\t\t\t\t\t\tphase: 'meta-corrupt',\n\t\t\t\t\t\tdetail: `meta.json failed schema decode at ${path}`,\n\t\t\t\t\t\tcause,\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t\t),\n\t\t);\n\t\tconst parsedId = parseSnapshotId(meta.id);\n\t\tif (parsedId === null) {\n\t\t\treturn yield* failRestore(\n\t\t\t\t'meta-corrupt',\n\t\t\t\t`meta.json contains an unsafe snapshot id: ${meta.id}`,\n\t\t\t);\n\t\t}\n\t\tif (parsedId !== expectedId) {\n\t\t\treturn yield* failRestore(\n\t\t\t\t'meta-corrupt',\n\t\t\t\t`meta.json id ${meta.id} does not match requested snapshot id ${expectedId}`,\n\t\t\t);\n\t\t}\n\t\treturn meta;\n\t}).pipe(Effect.withSpan('orchestrator.snapshot.restore.read-meta'));\n\nconst verifyIntegrity = (\n\tartifactDir: string,\n): Effect.Effect<void, RestorePhaseError, FileSystem.FileSystem> =>\n\tverifyArtifactIntegrity(artifactDir).pipe(\n\t\tEffect.catch((cause) =>\n\t\t\tEffect.fail(\n\t\t\t\tnew RestorePhaseError({\n\t\t\t\t\tphase:\n\t\t\t\t\t\tcause instanceof Error && cause.message.includes(SnapshotLayout.integrityFile)\n\t\t\t\t\t\t\t? 'read-integrity'\n\t\t\t\t\t\t\t: 'verify-integrity',\n\t\t\t\t\tdetail: cause instanceof Error ? cause.message : `snapshot integrity failed`,\n\t\t\t\t\tcause,\n\t\t\t\t}),\n\t\t\t),\n\t\t),\n\t);\n\n// -----------------------------------------------------------------------------\n// Managed-container removal by label.\n// -----------------------------------------------------------------------------\n\n/** Restore must discard the current writable layer even when the live\n *  supervisor still holds a claim for the container. This is\n *  intentionally separate from orphan sweep, which skips claimed\n *  containers by design. */\nconst removeCapturedContainers = (\n\tmeta: SnapshotMetadata,\n\truntime: ContainerRuntime,\n\truntimeIdentity: SnapshotRuntimeIdentity,\n): Effect.Effect<void, RestorePhaseError> =>\n\tEffect.gen(function* () {\n\t\tfor (const captured of meta.containers) {\n\t\t\tyield* runtime\n\t\t\t\t.removeManagedContainers({\n\t\t\t\t\tapp: runtimeIdentity.app,\n\t\t\t\t\tstack: runtimeIdentity.stack,\n\t\t\t\t\tplugin: captured.plugin,\n\t\t\t\t\trole: captured.role,\n\t\t\t\t})\n\t\t\t\t.pipe(\n\t\t\t\t\tEffect.catch(\n\t\t\t\t\t\tfailPhase(\n\t\t\t\t\t\t\t'pre-cleanup',\n\t\t\t\t\t\t\t`remove managed containers for ${captured.plugin}/${captured.role} failed`,\n\t\t\t\t\t\t\tcaptured.plugin,\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t}\n\t}).pipe(Effect.withSpan('orchestrator.snapshot.restore.remove-containers'));\n\n// -----------------------------------------------------------------------------\n// Post-publish Docker finalization recovery marker.\n// -----------------------------------------------------------------------------\n\nexport const SNAPSHOT_RESTORE_PENDING_VERSION = 1 as const;\nexport const RESTORE_PENDING_FILE_NAME = 'snapshot.restore-pending.json' as const;\n\nexport const RestorePendingDocumentSchema = Schema.Struct({\n\tversion: Schema.Literal(SNAPSHOT_RESTORE_PENDING_VERSION),\n\tsnapshotId: Schema.String,\n\tartifactDir: Schema.String,\n\tapp: Schema.String,\n\tstack: Schema.String,\n\tnetwork: Schema.String,\n\tcontainers: Schema.Array(\n\t\tSchema.Struct({\n\t\t\tplugin: Schema.String,\n\t\t\trole: Schema.String,\n\t\t\ttargetImageName: Schema.String,\n\t\t\tstagedImageTag: Schema.String,\n\t\t}),\n\t),\n});\nexport type RestorePendingDocument = Schema.Schema.Type<typeof RestorePendingDocumentSchema>;\n\ninterface StagedContainerImage {\n\treadonly captured: CapturedContainer;\n\treadonly stagedRef: ImageRef;\n\treadonly stagedImageTag: string;\n}\n\nconst loadedBundleTags = (bundle: { readonly refs: ReadonlyArray<ImageRef> }): Set<string> => {\n\tconst tags = new Set<string>();\n\tfor (const ref of bundle.refs) {\n\t\tif (ref.tag !== undefined) tags.add(ref.tag);\n\t}\n\treturn tags;\n};\n\nconst mintRestoreStagingTag = (): string =>\n\t`devstack-snapshot:restore-${randomUUID().replaceAll('-', '').slice(0, 24)}`;\n\nconst writeRestorePendingMarker = (args: {\n\treadonly runtimeRoot: string;\n\treadonly meta: SnapshotMetadata;\n\treadonly artifactDir: string;\n\treadonly stagedImages: ReadonlyArray<StagedContainerImage>;\n}): Effect.Effect<void, RestorePhaseError, FileSystem.FileSystem> => {\n\tif (args.stagedImages.length === 0) return Effect.void;\n\tconst doc: RestorePendingDocument = {\n\t\tversion: SNAPSHOT_RESTORE_PENDING_VERSION,\n\t\tsnapshotId: args.meta.id,\n\t\tartifactDir: args.artifactDir,\n\t\tapp: args.meta.app,\n\t\tstack: args.meta.stack,\n\t\tnetwork: args.meta.network,\n\t\tcontainers: args.stagedImages.map((image) => ({\n\t\t\tplugin: image.captured.plugin,\n\t\t\trole: image.captured.role,\n\t\t\ttargetImageName: image.captured.imageName,\n\t\t\tstagedImageTag: image.stagedImageTag,\n\t\t})),\n\t};\n\treturn Effect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tyield* fs\n\t\t\t.writeFileString(\n\t\t\t\t`${args.runtimeRoot}/${RESTORE_PENDING_FILE_NAME}`,\n\t\t\t\t`${JSON.stringify(doc, null, 2)}\\n`,\n\t\t\t)\n\t\t\t.pipe(\n\t\t\t\tEffect.catch(\n\t\t\t\t\tfailPhase('write-restore-pending', `write ${RESTORE_PENDING_FILE_NAME} failed`),\n\t\t\t\t),\n\t\t\t);\n\t});\n};\n\nconst clearRestorePendingMarker = (\n\truntimeRoot: string,\n): Effect.Effect<void, RestorePhaseError, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tyield* fs\n\t\t\t.remove(`${runtimeRoot}/${RESTORE_PENDING_FILE_NAME}`, { force: true })\n\t\t\t.pipe(\n\t\t\t\tEffect.catch(\n\t\t\t\t\tfailPhase('clear-restore-pending', `remove ${RESTORE_PENDING_FILE_NAME} failed`),\n\t\t\t\t),\n\t\t\t);\n\t});\n\n// -----------------------------------------------------------------------------\n// Artifact preflight — no destructive cleanup until required files are present.\n// -----------------------------------------------------------------------------\n\nconst requirePathSegment = (\n\tkind: string,\n\tvalue: string,\n\tplugin?: string,\n): Effect.Effect<void, RestorePhaseError> =>\n\tisSafeSnapshotPathSegment(value)\n\t\t? Effect.void\n\t\t: failRestore('preflight', `unsafe snapshot ${kind} path segment: ${value}`, plugin);\n\nconst requireReadableNonEmptyFile = (\n\tpath: string,\n\tphase: RestorePhaseError['phase'],\n\tdetail: string,\n\tplugin?: string,\n): Effect.Effect<void, RestorePhaseError, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tconst stat = yield* fs\n\t\t\t.stat(path)\n\t\t\t.pipe(Effect.catch(failPhase(phase, `${detail}: stat failed at ${path}`, plugin)));\n\t\tif (stat.size === 0n) {\n\t\t\treturn yield* failRestore(phase, `${detail}: empty file at ${path}`, plugin);\n\t\t}\n\t\tyield* Stream.runDrain(fs.stream(path).pipe(Stream.take(1))).pipe(\n\t\t\tEffect.catch(failPhase(phase, `${detail}: read failed at ${path}`, plugin)),\n\t\t);\n\t});\n\nconst preflightCapturedContainer = (\n\tcaptured: CapturedContainer,\n\tartifactDir: string,\n): Effect.Effect<void, RestorePhaseError, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tyield* requirePathSegment('plugin', captured.plugin, captured.plugin);\n\t\tyield* requirePathSegment('role', captured.role, captured.plugin);\n\t\tif (!isSafeSnapshotRelativePath(captured.tarPath)) {\n\t\t\treturn yield* failRestore(\n\t\t\t\t'preflight',\n\t\t\t\t`unsafe container image tar path: ${captured.tarPath}`,\n\t\t\t\tcaptured.plugin,\n\t\t\t);\n\t\t}\n\t\tconst expectedTarPath = containerImagesBundlePath();\n\t\tif (captured.tarPath !== expectedTarPath) {\n\t\t\treturn yield* failRestore(\n\t\t\t\t'preflight',\n\t\t\t\t`container image tar path ${captured.tarPath} does not match canonical bundle ${expectedTarPath}`,\n\t\t\t\tcaptured.plugin,\n\t\t\t);\n\t\t}\n\t\tif (!isRestorableContainerImageName(captured.imageName)) {\n\t\t\treturn yield* failRestore(\n\t\t\t\t'preflight',\n\t\t\t\t`container imageName is not a restorable Docker tag destination: ${captured.imageName}`,\n\t\t\t\tcaptured.plugin,\n\t\t\t);\n\t\t}\n\t\tif (!isRestorableContainerImageName(captured.snapshotTag)) {\n\t\t\treturn yield* failRestore(\n\t\t\t\t'preflight',\n\t\t\t\t`container snapshotTag is not a restorable Docker tag source: ${captured.snapshotTag}`,\n\t\t\t\tcaptured.plugin,\n\t\t\t);\n\t\t}\n\t\tyield* requireReadableNonEmptyFile(\n\t\t\t`${artifactDir}/${captured.tarPath}`,\n\t\t\t'load-image',\n\t\t\t'container image tar is required',\n\t\t\tcaptured.plugin,\n\t\t);\n\t});\n\nconst preflightContributionDoc = (\n\tpluginKey: string,\n\tartifactDir: string,\n): Effect.Effect<void, RestorePhaseError, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst path = `${artifactDir}/${contributionPath(pluginKey)}`;\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tconst text = yield* fs\n\t\t\t.readFileString(path)\n\t\t\t.pipe(\n\t\t\t\tEffect.catch(\n\t\t\t\t\tfailPhase('read-contribution', `read contribution doc failed at ${path}`, pluginKey),\n\t\t\t\t),\n\t\t\t);\n\t\tconst raw = yield* Effect.try({\n\t\t\ttry: () => JSON.parse(text) as unknown,\n\t\t\tcatch: (cause) =>\n\t\t\t\tnew RestorePhaseError({\n\t\t\t\t\tphase: 'read-contribution',\n\t\t\t\t\tplugin: pluginKey,\n\t\t\t\t\tdetail: `contribution doc is not valid JSON at ${path}`,\n\t\t\t\t\tcause,\n\t\t\t\t}),\n\t\t});\n\t\tconst decoded = yield* Schema.decodeUnknownEffect(ContributionDocSchema)(raw).pipe(\n\t\t\tEffect.catch((cause) =>\n\t\t\t\tEffect.fail(\n\t\t\t\t\tnew RestorePhaseError({\n\t\t\t\t\t\tphase: 'read-contribution',\n\t\t\t\t\t\tplugin: pluginKey,\n\t\t\t\t\t\tdetail: `contribution doc failed schema decode at ${path}`,\n\t\t\t\t\t\tcause,\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t\t),\n\t\t);\n\t\tif (decoded.plugin !== pluginKey) {\n\t\t\treturn yield* failRestore(\n\t\t\t\t'read-contribution',\n\t\t\t\t`contribution doc plugin ${decoded.plugin} does not match ${pluginKey}`,\n\t\t\t\tpluginKey,\n\t\t\t);\n\t\t}\n\t});\n\nconst preflightArtifact = (\n\tmeta: SnapshotMetadata,\n\tartifactDir: string,\n): Effect.Effect<void, RestorePhaseError, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tconst seenSnapshotTags = new Map<string, CapturedContainer>();\n\t\tfor (const captured of meta.containers) {\n\t\t\tyield* preflightCapturedContainer(captured, artifactDir);\n\t\t\tconst previous = seenSnapshotTags.get(captured.snapshotTag);\n\t\t\tif (previous !== undefined) {\n\t\t\t\treturn yield* failRestore(\n\t\t\t\t\t'preflight',\n\t\t\t\t\t`duplicate container snapshotTag ${captured.snapshotTag} for ${previous.plugin}/${previous.role} and ${captured.plugin}/${captured.role}`,\n\t\t\t\t\tcaptured.plugin,\n\t\t\t\t);\n\t\t\t}\n\t\t\tseenSnapshotTags.set(captured.snapshotTag, captured);\n\t\t}\n\t\tfor (const pluginKey of meta.participants) {\n\t\t\tyield* preflightContributionDoc(pluginKey, artifactDir);\n\t\t}\n\t\tconst statePath = `${artifactDir}/${SnapshotLayout.stateFile}`;\n\t\tconst stateExists = yield* fs.exists(statePath).pipe(Effect.catch(() => Effect.succeed(false)));\n\t\tif (stateExists) {\n\t\t\tyield* readSnapshotStateDocument(statePath).pipe(\n\t\t\t\tEffect.catch(failPhase('read-state', `state.json failed schema validation`)),\n\t\t\t);\n\t\t}\n\t\tif (meta.hostTreeIncluded) {\n\t\t\tconst tarPath = `${artifactDir}/${SnapshotLayout.hostTreeTar}`;\n\t\t\tyield* requireReadableNonEmptyFile(tarPath, 'untar-host-tree', 'host-tree tar is required');\n\t\t\tconst tarStream = fs.stream(tarPath).pipe(\n\t\t\t\tStream.mapError(\n\t\t\t\t\t(cause) =>\n\t\t\t\t\t\tnew HostTreeTarError({\n\t\t\t\t\t\t\tstage: 'entry-validation',\n\t\t\t\t\t\t\toperation: 'untar',\n\t\t\t\t\t\t\tdetail: `read host-tree tar failed at ${tarPath}`,\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t}),\n\t\t\t\t),\n\t\t\t);\n\t\t\tyield* validateHostTreeTarEntries(tarStream).pipe(\n\t\t\t\tEffect.catch(failPhase('untar-host-tree', `host-tree tar entry validation failed`)),\n\t\t\t);\n\t\t}\n\t}).pipe(Effect.withSpan('orchestrator.snapshot.restore.preflight'));\n\n// -----------------------------------------------------------------------------\n// Image load + staged re-tag.\n// -----------------------------------------------------------------------------\n\nconst loadImageBundle = (\n\ttarPath: string,\n\tartifactDir: string,\n\truntime: ContainerRuntime,\n\texpectedSnapshotTags: ReadonlyArray<string>,\n): Effect.Effect<ReadonlyMap<string, ImageRef>, RestorePhaseError, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tconst fullTarPath = `${artifactDir}/${tarPath}`;\n\t\tconst exists = yield* fs.exists(fullTarPath).pipe(Effect.catch(() => Effect.succeed(false)));\n\t\tif (!exists) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\tnew RestorePhaseError({\n\t\t\t\t\tphase: 'load-image',\n\t\t\t\t\tdetail: `container image bundle absent at ${fullTarPath}`,\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\t\tconst bundleTags = yield* readImageBundleTags(fullTarPath, tarPath).pipe(\n\t\t\tEffect.catch(failImageBundleTagScan('load-image')),\n\t\t);\n\t\tyield* verifyImageBundleTags(tarPath, bundleTags, expectedSnapshotTags).pipe(\n\t\t\tEffect.catch(failImageBundleTagScan('load-image')),\n\t\t);\n\t\tconst loaded = yield* runtime\n\t\t\t.loadImage(fs.stream(fullTarPath))\n\t\t\t.pipe(\n\t\t\t\tEffect.catch(\n\t\t\t\t\tfailPhase('load-image', `load container image bundle from ${fullTarPath} failed`),\n\t\t\t\t),\n\t\t\t);\n\t\tconst loadedTags = loadedBundleTags(loaded);\n\t\tconst missing = expectedSnapshotTags.filter((tag) => !loadedTags.has(tag));\n\t\tif (missing.length > 0) {\n\t\t\treturn yield* failRestore(\n\t\t\t\t'load-image',\n\t\t\t\t`container image bundle ${tarPath} did not load expected snapshot tags: ${missing.join(', ')}`,\n\t\t\t);\n\t\t}\n\t\tconst refsByTag = new Map<string, ImageRef>();\n\t\tfor (const ref of loaded.refs) {\n\t\t\tif (ref.tag === undefined || !expectedSnapshotTags.includes(ref.tag)) continue;\n\t\t\tif (refsByTag.has(ref.tag)) {\n\t\t\t\treturn yield* failRestore(\n\t\t\t\t\t'load-image',\n\t\t\t\t\t`container image bundle ${tarPath} loaded duplicate snapshot tag ${ref.tag}`,\n\t\t\t\t);\n\t\t\t}\n\t\t\trefsByTag.set(ref.tag, ref);\n\t\t}\n\t\treturn refsByTag;\n\t}).pipe(Effect.withSpan('orchestrator.snapshot.restore.load-image-bundle'));\n\nconst expectedSnapshotTagsByBundle = (\n\tcontainers: ReadonlyArray<CapturedContainer>,\n): ReadonlyMap<string, ReadonlyArray<string>> => {\n\tconst byBundle = new Map<string, string[]>();\n\tfor (const captured of containers) {\n\t\tconst tags = byBundle.get(captured.tarPath);\n\t\tif (tags === undefined) {\n\t\t\tbyBundle.set(captured.tarPath, [captured.snapshotTag]);\n\t\t} else {\n\t\t\ttags.push(captured.snapshotTag);\n\t\t}\n\t}\n\treturn byBundle;\n};\n\nconst stageLoadedImage = (\n\tcaptured: CapturedContainer,\n\tloadedRef: ImageRef,\n\truntime: ContainerRuntime,\n\tregisterStagedImage: (image: StagedContainerImage) => Effect.Effect<void>,\n): Effect.Effect<StagedContainerImage, RestorePhaseError> =>\n\tEffect.gen(function* () {\n\t\tconst stagedImageTag = mintRestoreStagingTag();\n\t\tconst stagedImage: StagedContainerImage = {\n\t\t\tcaptured,\n\t\t\tstagedRef: { digest: loadedRef.digest, tag: stagedImageTag },\n\t\t\tstagedImageTag,\n\t\t};\n\t\tyield* registerStagedImage(stagedImage);\n\t\tyield* runtime\n\t\t\t.tagImage(loadedRef, stagedImageTag, { removeSourceAfterTag: true })\n\t\t\t.pipe(\n\t\t\t\tEffect.catch(\n\t\t\t\t\tfailPhase(\n\t\t\t\t\t\t'retag-image',\n\t\t\t\t\t\t`tag restored image ${captured.snapshotTag} as staging ref ${stagedImageTag} failed`,\n\t\t\t\t\t\tcaptured.plugin,\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t);\n\t\treturn stagedImage;\n\t}).pipe(Effect.withSpan('orchestrator.snapshot.restore.stage-image'));\n\nconst cleanupRestoreStagingImages = (\n\truntime: ContainerRuntime,\n\timages: ReadonlyArray<StagedContainerImage>,\n): Effect.Effect<void> =>\n\tEffect.forEach(\n\t\timages,\n\t\t(image) =>\n\t\t\truntime\n\t\t\t\t.removeImage(image.stagedRef)\n\t\t\t\t.pipe(\n\t\t\t\t\tEffect.catch((cause) =>\n\t\t\t\t\t\tEffect.logWarning(\n\t\t\t\t\t\t\t`remove restore staging image ${image.stagedImageTag} failed during restore cleanup: ${String(\n\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t)}`,\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t{ concurrency: 'unbounded' },\n\t).pipe(Effect.asVoid);\n\nconst promoteStagedImages = (\n\timages: ReadonlyArray<StagedContainerImage>,\n\truntime: ContainerRuntime,\n): Effect.Effect<void, RestorePhaseError> =>\n\tEffect.gen(function* () {\n\t\tfor (const image of images) {\n\t\t\tyield* runtime\n\t\t\t\t.tagImage(image.stagedRef, image.captured.imageName, {\n\t\t\t\t\tremoveSourceAfterTag: true,\n\t\t\t\t})\n\t\t\t\t.pipe(\n\t\t\t\t\tEffect.catch(\n\t\t\t\t\t\tfailPhase(\n\t\t\t\t\t\t\t'retag-image',\n\t\t\t\t\t\t\t`tag staged image ${image.stagedImageTag} as ${image.captured.imageName} failed`,\n\t\t\t\t\t\t\timage.captured.plugin,\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t}\n\t}).pipe(Effect.withSpan('orchestrator.snapshot.restore.promote-images'));\n\nconst restoreHostTree = (\n\tartifactDir: string,\n\ttarget: string,\n): Effect.Effect<void, RestorePhaseError, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tconst tarPath = `${artifactDir}/${SnapshotLayout.hostTreeTar}`;\n\t\tconst exists = yield* fs.exists(tarPath).pipe(Effect.catch(() => Effect.succeed(false)));\n\t\tif (!exists) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\tnew RestorePhaseError({\n\t\t\t\t\tphase: 'untar-host-tree',\n\t\t\t\t\tdetail: `host-tree tar absent at ${tarPath}`,\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\t\tconst tarStream = fs.stream(tarPath).pipe(\n\t\t\tStream.mapError(\n\t\t\t\t(cause) =>\n\t\t\t\t\tnew HostTreeTarError({\n\t\t\t\t\t\tstage: 'stream-stdin',\n\t\t\t\t\t\toperation: 'untar',\n\t\t\t\t\t\tdetail: `read host-tree tar failed at ${tarPath}`,\n\t\t\t\t\t\tcause,\n\t\t\t\t\t}),\n\t\t\t),\n\t\t);\n\t\tyield* Effect.scoped(untarHostTree(tarStream, { target })).pipe(\n\t\t\tEffect.catch(failPhase('untar-host-tree', `untar ${tarPath} to ${target} failed`)),\n\t\t);\n\t}).pipe(Effect.withSpan('orchestrator.snapshot.restore.host-tree'));\n\nconst LIVE_RESTORE_PRESERVED_PATHS: ReadonlyArray<StageAndSwapPreservedPath> = [\n\t{ relativePath: SNAPSHOTS_DIR_NAME, kind: 'directory' },\n\t{ relativePath: COMMAND_CHANNEL_COMMANDS_FILE_NAME, kind: 'file' },\n\t{ relativePath: COMMAND_CHANNEL_EVENTS_FILE_NAME, kind: 'file' },\n\t{ relativePath: 'roster.json', kind: 'file' },\n\t{ relativePath: 'container-claims.json', kind: 'file' },\n\t{ relativePath: 'snapshot.reservation', kind: 'file' },\n];\n\n// -----------------------------------------------------------------------------\n// Top-level restore — bracketed-atomic via stage-and-swap.\n// -----------------------------------------------------------------------------\n\nexport interface RestoreInputs {\n\treadonly snapshotId: SnapshotId;\n\treadonly artifactDir: string;\n\treadonly runtimeStackRoot: string;\n\treadonly runtimeStagingPath: string;\n\treadonly runtimeBackupPath: string;\n\treadonly participants: ReadonlyArray<RestoreParticipant>;\n\treadonly runtime: ContainerRuntime;\n\treadonly runtimeIdentity: SnapshotRuntimeIdentity;\n}\n\n/**\n * Run the full restore. Bracketed-atomic via `stageAndSwap` at the\n * runtime-root level — external watchers never observe a half-restored\n * tree.\n *\n * Order:\n *   1. Read meta.json (refuse if absent / corrupt — no mutation).\n *   2. Run identity-guard against runtime metadata and merged plugin\n *      contributions (refuse on any disagreement — no mutation).\n *   3. Pre-restore hooks (per-plugin validation; soft errors).\n *   4. Stage:\n *      - Untar host-tree into staging.\n *      - Copy state.json into staging.\n *      - Re-read contribution docs.\n *      - Load image bundles and stage verified snapshot tags.\n *      - Write a restore-pending marker into the staged root.\n *   5. Atomic swap staging → runtime root, preserving live command /\n *      event channel files and other explicit runtime-control files.\n *   6. Promote staged images to recorded refs, then remove captured\n *      managed containers by label. If this fails, the pending marker\n *      remains in the restored root for diagnosis/recovery.\n *   7. Post-restore hooks.\n *\n * The caller is responsible for `acquireReservation`; restore supplies\n * the runtime-control publish lock to `stageAndSwap`.\n */\nexport const runRestore = (\n\tinputs: RestoreInputs,\n): Effect.Effect<\n\tSnapshotMetadata,\n\tRestorePhaseError | IdentityGuardError | IdentityContributionConflictError | StageAndSwapError,\n\tFileSystem.FileSystem\n> =>\n\tEffect.gen(function* () {\n\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t'devstack.snapshot.phase': 'restore',\n\t\t\t'devstack.snapshot.artifact': inputs.artifactDir,\n\t\t});\n\n\t\t// 1. Authoritative meta read.\n\t\tconst meta = yield* readMeta(inputs.artifactDir, inputs.snapshotId);\n\t\tyield* verifyIntegrity(inputs.artifactDir);\n\n\t\t// 2. Identity guard — compare the metadata's runtime identity\n\t\t//    and plugin-contributed identity. FAIL-CLOSED before any mutation.\n\t\tyield* runRuntimeIdentityGuard(\n\t\t\t{ app: meta.app, stack: meta.stack, network: meta.network },\n\t\t\tinputs.runtimeIdentity,\n\t\t);\n\t\tconst liveContributions: IdentityContribution[] = [];\n\t\tfor (const participant of inputs.participants) {\n\t\t\tconst slice = yield* participant.liveIdentity;\n\t\t\tliveContributions.push({ plugin: participant.plugin, slice });\n\t\t}\n\t\tconst live = yield* mergeContributions(liveContributions);\n\t\tyield* runIdentityGuard(meta.identity, live);\n\n\t\t// 3. Plugin-level preRestore hooks (run AFTER identity-guard so\n\t\t//    a mismatch refuses without ever calling them).\n\t\tfor (const participant of inputs.participants) {\n\t\t\tif (participant.preRestore) {\n\t\t\t\tyield* participant.preRestore.pipe(\n\t\t\t\t\tEffect.catch(failPhase('pre-restore-hook', `preRestore failed`, participant.plugin)),\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\tyield* preflightArtifact(meta, inputs.artifactDir);\n\n\t\t// 4. Stage filesystem content and non-destructive Docker image\n\t\t//    refs; atomic swap on success. Until `stageAndSwap`\n\t\t//    succeeds, the restore-pending marker is only in staging, so\n\t\t//    restore owns cleanup for any Docker staging refs it minted.\n\t\tconst stagedImages = yield* Effect.scoped(\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst stagedImages: StagedContainerImage[] = [];\n\t\t\t\tlet recoveryHandoffComplete = false;\n\t\t\t\tyield* Effect.addFinalizer((exit) =>\n\t\t\t\t\tExit.isFailure(exit) && !recoveryHandoffComplete\n\t\t\t\t\t\t? cleanupRestoreStagingImages(inputs.runtime, stagedImages)\n\t\t\t\t\t\t: Effect.void,\n\t\t\t\t);\n\t\t\t\tconst swappedImages = yield* stageAndSwap({\n\t\t\t\t\ttargetPath: inputs.runtimeStackRoot,\n\t\t\t\t\tstagingPath: inputs.runtimeStagingPath,\n\t\t\t\t\tbackupPath: inputs.runtimeBackupPath,\n\t\t\t\t\tpreserveFromTarget: LIVE_RESTORE_PRESERVED_PATHS,\n\t\t\t\t\tpublishLockPath: runtimeControlLockPathForStackRoot(inputs.runtimeStackRoot),\n\t\t\t\t\tbuild: Effect.gen(function* () {\n\t\t\t\t\t\t// 4a. Untar host-tree into staging.\n\t\t\t\t\t\tif (meta.hostTreeIncluded) {\n\t\t\t\t\t\t\tyield* restoreHostTree(inputs.artifactDir, inputs.runtimeStagingPath);\n\t\t\t\t\t\t}\n\t\t\t\t\t\t// 4b. Copy state.json into staging.\n\t\t\t\t\t\tconst fs = yield* FileSystem.FileSystem;\n\t\t\t\t\t\tconst srcState = `${inputs.artifactDir}/${SnapshotLayout.stateFile}`;\n\t\t\t\t\t\tconst stateExists = yield* fs\n\t\t\t\t\t\t\t.exists(srcState)\n\t\t\t\t\t\t\t.pipe(Effect.catch(() => Effect.succeed(false)));\n\t\t\t\t\t\tif (stateExists) {\n\t\t\t\t\t\t\tconst stateDoc = yield* readSnapshotStateDocument(srcState).pipe(\n\t\t\t\t\t\t\t\tEffect.catch(failPhase('read-state', `state.json failed schema validation`)),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tyield* writeSnapshotStateDocument(\n\t\t\t\t\t\t\t\t`${inputs.runtimeStagingPath}/${SnapshotLayout.stateFile}`,\n\t\t\t\t\t\t\t\tstateDoc,\n\t\t\t\t\t\t\t).pipe(Effect.catch(failPhase('expand-state', `write state.json failed`)));\n\t\t\t\t\t\t}\n\t\t\t\t\t\t// 4c. Read each contribution doc — the participants'\n\t\t\t\t\t\t//      post-restore hooks may want this; we surface it\n\t\t\t\t\t\t//      via the participant's own state-store reads after\n\t\t\t\t\t\t//      the swap lands.\n\t\t\t\t\t\tfor (const pluginKey of meta.participants) {\n\t\t\t\t\t\t\tconst path = `${inputs.artifactDir}/${contributionPath(pluginKey)}`;\n\t\t\t\t\t\t\tconst exists = yield* fs.exists(path).pipe(Effect.catch(() => Effect.succeed(false)));\n\t\t\t\t\t\t\tif (!exists) {\n\t\t\t\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\t\t\t\tnew RestorePhaseError({\n\t\t\t\t\t\t\t\t\t\tphase: 'read-contribution',\n\t\t\t\t\t\t\t\t\t\tplugin: pluginKey,\n\t\t\t\t\t\t\t\t\t\tdetail: `contribution doc absent at ${path}`,\n\t\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t// 4d. Load + tag committed images under restore-staging\n\t\t\t\t\t\t//     refs only after all artifact expansion/copy work\n\t\t\t\t\t\t//     has succeeded. The Docker save manifest must match\n\t\t\t\t\t\t//     snapshot metadata exactly before docker load mutates\n\t\t\t\t\t\t//     the daemon; loaded refs then supply the real digest\n\t\t\t\t\t\t//     used for staging tags.\n\t\t\t\t\t\tconst expectedTagsByBundle = expectedSnapshotTagsByBundle(meta.containers);\n\t\t\t\t\t\tconst loadedRefsBySnapshotTag = new Map<string, ImageRef>();\n\t\t\t\t\t\tfor (const [tarPath, expectedTags] of expectedTagsByBundle) {\n\t\t\t\t\t\t\tconst loadedRefs = yield* loadImageBundle(\n\t\t\t\t\t\t\t\ttarPath,\n\t\t\t\t\t\t\t\tinputs.artifactDir,\n\t\t\t\t\t\t\t\tinputs.runtime,\n\t\t\t\t\t\t\t\texpectedTags,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tfor (const [tag, ref] of loadedRefs) {\n\t\t\t\t\t\t\t\tloadedRefsBySnapshotTag.set(tag, ref);\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\tfor (const captured of meta.containers) {\n\t\t\t\t\t\t\tconst loadedRef = loadedRefsBySnapshotTag.get(captured.snapshotTag);\n\t\t\t\t\t\t\tif (loadedRef === undefined) {\n\t\t\t\t\t\t\t\treturn yield* failRestore(\n\t\t\t\t\t\t\t\t\t'load-image',\n\t\t\t\t\t\t\t\t\t`container image bundle did not return loaded ref for ${captured.snapshotTag}`,\n\t\t\t\t\t\t\t\t\tcaptured.plugin,\n\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tyield* stageLoadedImage(captured, loadedRef, inputs.runtime, (image) =>\n\t\t\t\t\t\t\t\tEffect.sync(() => {\n\t\t\t\t\t\t\t\t\tstagedImages.push(image);\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\t\t\t\t\t\tyield* writeRestorePendingMarker({\n\t\t\t\t\t\t\truntimeRoot: inputs.runtimeStagingPath,\n\t\t\t\t\t\t\tmeta,\n\t\t\t\t\t\t\tartifactDir: inputs.artifactDir,\n\t\t\t\t\t\t\tstagedImages,\n\t\t\t\t\t\t});\n\t\t\t\t\t\treturn stagedImages;\n\t\t\t\t\t}),\n\t\t\t\t});\n\t\t\t\trecoveryHandoffComplete = true;\n\t\t\t\treturn swappedImages;\n\t\t\t}),\n\t\t);\n\n\t\t// 5. Docker finalization happens after filesystem publish. If\n\t\t//    promotion or removal fails, the restored root still carries\n\t\t//    snapshot.restore-pending.json with the staged image refs.\n\t\tif (stagedImages.length > 0) {\n\t\t\tyield* promoteStagedImages(stagedImages, inputs.runtime);\n\t\t\tyield* removeCapturedContainers(meta, inputs.runtime, inputs.runtimeIdentity);\n\t\t\tyield* clearRestorePendingMarker(inputs.runtimeStackRoot);\n\t\t}\n\n\t\t// 6. Post-restore hooks (after the swap lands so plugins read\n\t\t//    fresh state from the runtime root).\n\t\tfor (const participant of inputs.participants) {\n\t\t\tif (participant.postRestore) {\n\t\t\t\tyield* participant.postRestore.pipe(\n\t\t\t\t\tEffect.catch(failPhase('post-restore-hook', `postRestore failed`, participant.plugin)),\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\treturn meta;\n\t}).pipe(Effect.withSpan('orchestrator.snapshot.restore'));\n"],"mappings":";;;;;;;;;;;;;;;AAgFA,IAAa,oBAAb,cAAuC,OAAO,kBAAqC,CAClF,6BACA;CACC,OAAO,OAAO,SAAS;EACtB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,CAAC;CACF,QAAQ,OAAO,SAAS,OAAO,OAAO;CACtC,QAAQ,OAAO;CACf,OAAO,OAAO,SAAS,OAAO,OAAO;CACrC,CACD,CAAC;AAEF,MAAM,aAEJ,OACA,QACA,YAEA,UACA,OAAO,KAAK,IAAI,kBAAkB;CAAE;CAAO;CAAQ;CAAQ;CAAO,CAAC,CAAC;AAEtE,MAAM,eACL,OACA,QACA,WAEA,OAAO,KAAK,IAAI,kBAAkB;CAAE;CAAO;CAAQ;CAAQ,CAAC,CAAC;AAE9D,MAAM,0BACJ,OAAmC,YACnC,UACA,OAAO,KAAK,IAAI,kBAAkB;CAAE;CAAO;CAAQ,QAAQ,MAAM;CAAQ;CAAO,CAAC,CAAC;AAyBpF,MAAM,YACL,aACA,eAEA,OAAO,IAAI,aAAa;CACvB,MAAM,KAAK,OAAO,WAAW;CAC7B,MAAM,OAAO,GAAG,YAAY,GAAG,eAAe;AAE9C,KAAI,EAAC,OADiB,GAAG,OAAO,KAAK,CAAC,KAAK,OAAO,YAAY,OAAO,QAAQ,MAAM,CAAC,CAAC,EAEpF,QAAO,OAAO,OAAO,KACpB,IAAI,kBAAkB;EACrB,OAAO;EACP,QAAQ,mCAAmC;EAC3C,CAAC,CACF;CAEF,MAAM,OAAO,OAAO,GAClB,eAAe,KAAK,CACpB,KAAK,OAAO,MAAM,UAAU,aAAa,4BAA4B,OAAO,CAAC,CAAC;CAChF,MAAM,MAAM,OAAO,OAAO,IAAI;EAC7B,WAAW,KAAK,MAAM,KAAK;EAC3B,QAAQ,UACP,IAAI,kBAAkB;GACrB,OAAO;GACP,QAAQ,kCAAkC;GAC1C;GACA,CAAC;EACH,CAAC;CACF,MAAM,OAAO,OAAO,OAAO,oBAAoB,uBAAuB,CAAC,IAAI,CAAC,KAC3E,OAAO,OAAO,UACb,OAAO,KACN,IAAI,kBAAkB;EACrB,OAAO;EACP,QAAQ,qCAAqC;EAC7C;EACA,CAAC,CACF,CACD,CACD;CACD,MAAM,WAAW,gBAAgB,KAAK,GAAG;AACzC,KAAI,aAAa,KAChB,QAAO,OAAO,YACb,gBACA,6CAA6C,KAAK,KAClD;AAEF,KAAI,aAAa,WAChB,QAAO,OAAO,YACb,gBACA,gBAAgB,KAAK,GAAG,wCAAwC,aAChE;AAEF,QAAO;EACN,CAAC,KAAK,OAAO,SAAS,0CAA0C,CAAC;AAEpE,MAAM,mBACL,gBAEA,wBAAwB,YAAY,CAAC,KACpC,OAAO,OAAO,UACb,OAAO,KACN,IAAI,kBAAkB;CACrB,OACC,iBAAiB,SAAS,MAAM,QAAQ,SAAS,eAAe,cAAc,GAC3E,mBACA;CACJ,QAAQ,iBAAiB,QAAQ,MAAM,UAAU;CACjD;CACA,CAAC,CACF,CACD,CACD;;;;;AAUF,MAAM,4BACL,MACA,SACA,oBAEA,OAAO,IAAI,aAAa;AACvB,MAAK,MAAM,YAAY,KAAK,WAC3B,QAAO,QACL,wBAAwB;EACxB,KAAK,gBAAgB;EACrB,OAAO,gBAAgB;EACvB,QAAQ,SAAS;EACjB,MAAM,SAAS;EACf,CAAC,CACD,KACA,OAAO,MACN,UACC,eACA,iCAAiC,SAAS,OAAO,GAAG,SAAS,KAAK,UAClE,SAAS,OACT,CACD,CACD;EAEF,CAAC,KAAK,OAAO,SAAS,kDAAkD,CAAC;AAO5E,MAAa,4BAA4B;AAEG,OAAO,OAAO;CACzD,SAAS,OAAO,QAAA,EAAyC;CACzD,YAAY,OAAO;CACnB,aAAa,OAAO;CACpB,KAAK,OAAO;CACZ,OAAO,OAAO;CACd,SAAS,OAAO;CAChB,YAAY,OAAO,MAClB,OAAO,OAAO;EACb,QAAQ,OAAO;EACf,MAAM,OAAO;EACb,iBAAiB,OAAO;EACxB,gBAAgB,OAAO;EACvB,CAAC,CACF;CACD,CAAC;AASF,MAAM,oBAAoB,WAAoE;CAC7F,MAAM,uBAAO,IAAI,KAAa;AAC9B,MAAK,MAAM,OAAO,OAAO,KACxB,KAAI,IAAI,QAAQ,KAAA,EAAW,MAAK,IAAI,IAAI,IAAI;AAE7C,QAAO;;AAGR,MAAM,8BACL,6BAA6B,YAAY,CAAC,WAAW,KAAK,GAAG,CAAC,MAAM,GAAG,GAAG;AAE3E,MAAM,6BAA6B,SAKkC;AACpE,KAAI,KAAK,aAAa,WAAW,EAAG,QAAO,OAAO;CAClD,MAAM,MAA8B;EACnC,SAAA;EACA,YAAY,KAAK,KAAK;EACtB,aAAa,KAAK;EAClB,KAAK,KAAK,KAAK;EACf,OAAO,KAAK,KAAK;EACjB,SAAS,KAAK,KAAK;EACnB,YAAY,KAAK,aAAa,KAAK,WAAW;GAC7C,QAAQ,MAAM,SAAS;GACvB,MAAM,MAAM,SAAS;GACrB,iBAAiB,MAAM,SAAS;GAChC,gBAAgB,MAAM;GACtB,EAAE;EACH;AACD,QAAO,OAAO,IAAI,aAAa;AAE9B,UAAO,OADW,WAAW,YAE3B,gBACA,GAAG,KAAK,YAAY,GAAG,6BACvB,GAAG,KAAK,UAAU,KAAK,MAAM,EAAE,CAAC,IAChC,CACA,KACA,OAAO,MACN,UAAU,yBAAyB,SAAS,0BAA0B,SAAS,CAC/E,CACD;GACD;;AAGH,MAAM,6BACL,gBAEA,OAAO,IAAI,aAAa;AAEvB,SAAO,OADW,WAAW,YAE3B,OAAO,GAAG,YAAY,GAAG,6BAA6B,EAAE,OAAO,MAAM,CAAC,CACtE,KACA,OAAO,MACN,UAAU,yBAAyB,UAAU,0BAA0B,SAAS,CAChF,CACD;EACD;AAMH,MAAM,sBACL,MACA,OACA,WAEA,0BAA0B,MAAM,GAC7B,OAAO,OACP,YAAY,aAAa,mBAAmB,KAAK,iBAAiB,SAAS,OAAO;AAEtF,MAAM,+BACL,MACA,OACA,QACA,WAEA,OAAO,IAAI,aAAa;CACvB,MAAM,KAAK,OAAO,WAAW;AAI7B,MAAI,OAHgB,GAClB,KAAK,KAAK,CACV,KAAK,OAAO,MAAM,UAAU,OAAO,GAAG,OAAO,mBAAmB,QAAQ,OAAO,CAAC,CAAC,EAC1E,SAAS,GACjB,QAAO,OAAO,YAAY,OAAO,GAAG,OAAO,kBAAkB,QAAQ,OAAO;AAE7E,QAAO,OAAO,SAAS,GAAG,OAAO,KAAK,CAAC,KAAK,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,KAC5D,OAAO,MAAM,UAAU,OAAO,GAAG,OAAO,mBAAmB,QAAQ,OAAO,CAAC,CAC3E;EACA;AAEH,MAAM,8BACL,UACA,gBAEA,OAAO,IAAI,aAAa;AACvB,QAAO,mBAAmB,UAAU,SAAS,QAAQ,SAAS,OAAO;AACrE,QAAO,mBAAmB,QAAQ,SAAS,MAAM,SAAS,OAAO;AACjE,KAAI,CAAC,2BAA2B,SAAS,QAAQ,CAChD,QAAO,OAAO,YACb,aACA,oCAAoC,SAAS,WAC7C,SAAS,OACT;CAEF,MAAM,kBAAkB,2BAA2B;AACnD,KAAI,SAAS,YAAY,gBACxB,QAAO,OAAO,YACb,aACA,4BAA4B,SAAS,QAAQ,mCAAmC,mBAChF,SAAS,OACT;AAEF,KAAI,CAAC,+BAA+B,SAAS,UAAU,CACtD,QAAO,OAAO,YACb,aACA,mEAAmE,SAAS,aAC5E,SAAS,OACT;AAEF,KAAI,CAAC,+BAA+B,SAAS,YAAY,CACxD,QAAO,OAAO,YACb,aACA,gEAAgE,SAAS,eACzE,SAAS,OACT;AAEF,QAAO,4BACN,GAAG,YAAY,GAAG,SAAS,WAC3B,cACA,mCACA,SAAS,OACT;EACA;AAEH,MAAM,4BACL,WACA,gBAEA,OAAO,IAAI,aAAa;CACvB,MAAM,OAAO,GAAG,YAAY,GAAG,iBAAiB,UAAU;CAE1D,MAAM,OAAO,QAAO,OADF,WAAW,YAE3B,eAAe,KAAK,CACpB,KACA,OAAO,MACN,UAAU,qBAAqB,mCAAmC,QAAQ,UAAU,CACpF,CACD;CACF,MAAM,MAAM,OAAO,OAAO,IAAI;EAC7B,WAAW,KAAK,MAAM,KAAK;EAC3B,QAAQ,UACP,IAAI,kBAAkB;GACrB,OAAO;GACP,QAAQ;GACR,QAAQ,yCAAyC;GACjD;GACA,CAAC;EACH,CAAC;CACF,MAAM,UAAU,OAAO,OAAO,oBAAoB,sBAAsB,CAAC,IAAI,CAAC,KAC7E,OAAO,OAAO,UACb,OAAO,KACN,IAAI,kBAAkB;EACrB,OAAO;EACP,QAAQ;EACR,QAAQ,4CAA4C;EACpD;EACA,CAAC,CACF,CACD,CACD;AACD,KAAI,QAAQ,WAAW,UACtB,QAAO,OAAO,YACb,qBACA,2BAA2B,QAAQ,OAAO,kBAAkB,aAC5D,UACA;EAED;AAEH,MAAM,qBACL,MACA,gBAEA,OAAO,IAAI,aAAa;CACvB,MAAM,KAAK,OAAO,WAAW;CAC7B,MAAM,mCAAmB,IAAI,KAAgC;AAC7D,MAAK,MAAM,YAAY,KAAK,YAAY;AACvC,SAAO,2BAA2B,UAAU,YAAY;EACxD,MAAM,WAAW,iBAAiB,IAAI,SAAS,YAAY;AAC3D,MAAI,aAAa,KAAA,EAChB,QAAO,OAAO,YACb,aACA,mCAAmC,SAAS,YAAY,OAAO,SAAS,OAAO,GAAG,SAAS,KAAK,OAAO,SAAS,OAAO,GAAG,SAAS,QACnI,SAAS,OACT;AAEF,mBAAiB,IAAI,SAAS,aAAa,SAAS;;AAErD,MAAK,MAAM,aAAa,KAAK,aAC5B,QAAO,yBAAyB,WAAW,YAAY;CAExD,MAAM,YAAY,GAAG,YAAY,GAAG,eAAe;AAEnD,KAAI,OADuB,GAAG,OAAO,UAAU,CAAC,KAAK,OAAO,YAAY,OAAO,QAAQ,MAAM,CAAC,CAAC,CAE9F,QAAO,0BAA0B,UAAU,CAAC,KAC3C,OAAO,MAAM,UAAU,cAAc,sCAAsC,CAAC,CAC5E;AAEF,KAAI,KAAK,kBAAkB;EAC1B,MAAM,UAAU,GAAG,YAAY,GAAG,eAAe;AACjD,SAAO,4BAA4B,SAAS,mBAAmB,4BAA4B;AAY3F,SAAO,2BAXW,GAAG,OAAO,QAAQ,CAAC,KACpC,OAAO,UACL,UACA,IAAI,iBAAiB;GACpB,OAAO;GACP,WAAW;GACX,QAAQ,gCAAgC;GACxC;GACA,CAAC,CACH,CAEyC,CAAC,CAAC,KAC5C,OAAO,MAAM,UAAU,mBAAmB,wCAAwC,CAAC,CACnF;;EAED,CAAC,KAAK,OAAO,SAAS,0CAA0C,CAAC;AAMpE,MAAM,mBACL,SACA,aACA,SACA,yBAEA,OAAO,IAAI,aAAa;CACvB,MAAM,KAAK,OAAO,WAAW;CAC7B,MAAM,cAAc,GAAG,YAAY,GAAG;AAEtC,KAAI,EAAC,OADiB,GAAG,OAAO,YAAY,CAAC,KAAK,OAAO,YAAY,OAAO,QAAQ,MAAM,CAAC,CAAC,EAE3F,QAAO,OAAO,OAAO,KACpB,IAAI,kBAAkB;EACrB,OAAO;EACP,QAAQ,oCAAoC;EAC5C,CAAC,CACF;AAKF,QAAO,sBAAsB,SAAS,OAHZ,oBAAoB,aAAa,QAAQ,CAAC,KACnE,OAAO,MAAM,uBAAuB,aAAa,CAAC,CAClD,EACiD,qBAAqB,CAAC,KACvE,OAAO,MAAM,uBAAuB,aAAa,CAAC,CAClD;CACD,MAAM,SAAS,OAAO,QACpB,UAAU,GAAG,OAAO,YAAY,CAAC,CACjC,KACA,OAAO,MACN,UAAU,cAAc,oCAAoC,YAAY,SAAS,CACjF,CACD;CACF,MAAM,aAAa,iBAAiB,OAAO;CAC3C,MAAM,UAAU,qBAAqB,QAAQ,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC;AAC1E,KAAI,QAAQ,SAAS,EACpB,QAAO,OAAO,YACb,cACA,0BAA0B,QAAQ,wCAAwC,QAAQ,KAAK,KAAK,GAC5F;CAEF,MAAM,4BAAY,IAAI,KAAuB;AAC7C,MAAK,MAAM,OAAO,OAAO,MAAM;AAC9B,MAAI,IAAI,QAAQ,KAAA,KAAa,CAAC,qBAAqB,SAAS,IAAI,IAAI,CAAE;AACtE,MAAI,UAAU,IAAI,IAAI,IAAI,CACzB,QAAO,OAAO,YACb,cACA,0BAA0B,QAAQ,iCAAiC,IAAI,MACvE;AAEF,YAAU,IAAI,IAAI,KAAK,IAAI;;AAE5B,QAAO;EACN,CAAC,KAAK,OAAO,SAAS,kDAAkD,CAAC;AAE5E,MAAM,gCACL,eACgD;CAChD,MAAM,2BAAW,IAAI,KAAuB;AAC5C,MAAK,MAAM,YAAY,YAAY;EAClC,MAAM,OAAO,SAAS,IAAI,SAAS,QAAQ;AAC3C,MAAI,SAAS,KAAA,EACZ,UAAS,IAAI,SAAS,SAAS,CAAC,SAAS,YAAY,CAAC;MAEtD,MAAK,KAAK,SAAS,YAAY;;AAGjC,QAAO;;AAGR,MAAM,oBACL,UACA,WACA,SACA,wBAEA,OAAO,IAAI,aAAa;CACvB,MAAM,iBAAiB,uBAAuB;CAC9C,MAAM,cAAoC;EACzC;EACA,WAAW;GAAE,QAAQ,UAAU;GAAQ,KAAK;GAAgB;EAC5D;EACA;AACD,QAAO,oBAAoB,YAAY;AACvC,QAAO,QACL,SAAS,WAAW,gBAAgB,EAAE,sBAAsB,MAAM,CAAC,CACnE,KACA,OAAO,MACN,UACC,eACA,sBAAsB,SAAS,YAAY,kBAAkB,eAAe,UAC5E,SAAS,OACT,CACD,CACD;AACF,QAAO;EACN,CAAC,KAAK,OAAO,SAAS,4CAA4C,CAAC;AAEtE,MAAM,+BACL,SACA,WAEA,OAAO,QACN,SACC,UACA,QACE,YAAY,MAAM,UAAU,CAC5B,KACA,OAAO,OAAO,UACb,OAAO,WACN,gCAAgC,MAAM,eAAe,kCAAkC,OACtF,MACA,GACD,CACD,CACD,EACH,EAAE,aAAa,aAAa,CAC5B,CAAC,KAAK,OAAO,OAAO;AAEtB,MAAM,uBACL,QACA,YAEA,OAAO,IAAI,aAAa;AACvB,MAAK,MAAM,SAAS,OACnB,QAAO,QACL,SAAS,MAAM,WAAW,MAAM,SAAS,WAAW,EACpD,sBAAsB,MACtB,CAAC,CACD,KACA,OAAO,MACN,UACC,eACA,oBAAoB,MAAM,eAAe,MAAM,MAAM,SAAS,UAAU,UACxE,MAAM,SAAS,OACf,CACD,CACD;EAEF,CAAC,KAAK,OAAO,SAAS,+CAA+C,CAAC;AAEzE,MAAM,mBACL,aACA,WAEA,OAAO,IAAI,aAAa;CACvB,MAAM,KAAK,OAAO,WAAW;CAC7B,MAAM,UAAU,GAAG,YAAY,GAAG,eAAe;AAEjD,KAAI,EAAC,OADiB,GAAG,OAAO,QAAQ,CAAC,KAAK,OAAO,YAAY,OAAO,QAAQ,MAAM,CAAC,CAAC,EAEvF,QAAO,OAAO,OAAO,KACpB,IAAI,kBAAkB;EACrB,OAAO;EACP,QAAQ,2BAA2B;EACnC,CAAC,CACF;CAEF,MAAM,YAAY,GAAG,OAAO,QAAQ,CAAC,KACpC,OAAO,UACL,UACA,IAAI,iBAAiB;EACpB,OAAO;EACP,WAAW;EACX,QAAQ,gCAAgC;EACxC;EACA,CAAC,CACH,CACD;AACD,QAAO,OAAO,OAAO,cAAc,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,KAC1D,OAAO,MAAM,UAAU,mBAAmB,SAAS,QAAQ,MAAM,OAAO,SAAS,CAAC,CAClF;EACA,CAAC,KAAK,OAAO,SAAS,0CAA0C,CAAC;AAEpE,MAAM,+BAAyE;CAC9E;EAAE,cAAc;EAAoB,MAAM;EAAa;CACvD;EAAE,cAAc;EAAoC,MAAM;EAAQ;CAClE;EAAE,cAAc;EAAkC,MAAM;EAAQ;CAChE;EAAE,cAAc;EAAe,MAAM;EAAQ;CAC7C;EAAE,cAAc;EAAyB,MAAM;EAAQ;CACvD;EAAE,cAAc;EAAwB,MAAM;EAAQ;CACtD;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2CD,MAAa,cACZ,WAMA,OAAO,IAAI,aAAa;AACvB,QAAO,OAAO,oBAAoB;EACjC,2BAA2B;EAC3B,8BAA8B,OAAO;EACrC,CAAC;CAGF,MAAM,OAAO,OAAO,SAAS,OAAO,aAAa,OAAO,WAAW;AACnE,QAAO,gBAAgB,OAAO,YAAY;AAI1C,QAAO,wBACN;EAAE,KAAK,KAAK;EAAK,OAAO,KAAK;EAAO,SAAS,KAAK;EAAS,EAC3D,OAAO,gBACP;CACD,MAAM,oBAA4C,EAAE;AACpD,MAAK,MAAM,eAAe,OAAO,cAAc;EAC9C,MAAM,QAAQ,OAAO,YAAY;AACjC,oBAAkB,KAAK;GAAE,QAAQ,YAAY;GAAQ;GAAO,CAAC;;CAE9D,MAAM,OAAO,OAAO,mBAAmB,kBAAkB;AACzD,QAAO,iBAAiB,KAAK,UAAU,KAAK;AAI5C,MAAK,MAAM,eAAe,OAAO,aAChC,KAAI,YAAY,WACf,QAAO,YAAY,WAAW,KAC7B,OAAO,MAAM,UAAU,oBAAoB,qBAAqB,YAAY,OAAO,CAAC,CACpF;AAIH,QAAO,kBAAkB,MAAM,OAAO,YAAY;CAMlD,MAAM,eAAe,OAAO,OAAO,OAClC,OAAO,IAAI,aAAa;EACvB,MAAM,eAAuC,EAAE;EAC/C,IAAI,0BAA0B;AAC9B,SAAO,OAAO,cAAc,SAC3B,KAAK,UAAU,KAAK,IAAI,CAAC,0BACtB,4BAA4B,OAAO,SAAS,aAAa,GACzD,OAAO,KACV;EACD,MAAM,gBAAgB,OAAO,aAAa;GACzC,YAAY,OAAO;GACnB,aAAa,OAAO;GACpB,YAAY,OAAO;GACnB,oBAAoB;GACpB,iBAAiB,mCAAmC,OAAO,iBAAiB;GAC5E,OAAO,OAAO,IAAI,aAAa;AAE9B,QAAI,KAAK,iBACR,QAAO,gBAAgB,OAAO,aAAa,OAAO,mBAAmB;IAGtE,MAAM,KAAK,OAAO,WAAW;IAC7B,MAAM,WAAW,GAAG,OAAO,YAAY,GAAG,eAAe;AAIzD,QAAI,OAHuB,GACzB,OAAO,SAAS,CAChB,KAAK,OAAO,YAAY,OAAO,QAAQ,MAAM,CAAC,CAAC,EAChC;KAChB,MAAM,WAAW,OAAO,0BAA0B,SAAS,CAAC,KAC3D,OAAO,MAAM,UAAU,cAAc,sCAAsC,CAAC,CAC5E;AACD,YAAO,2BACN,GAAG,OAAO,mBAAmB,GAAG,eAAe,aAC/C,SACA,CAAC,KAAK,OAAO,MAAM,UAAU,gBAAgB,0BAA0B,CAAC,CAAC;;AAM3E,SAAK,MAAM,aAAa,KAAK,cAAc;KAC1C,MAAM,OAAO,GAAG,OAAO,YAAY,GAAG,iBAAiB,UAAU;AAEjE,SAAI,EAAC,OADiB,GAAG,OAAO,KAAK,CAAC,KAAK,OAAO,YAAY,OAAO,QAAQ,MAAM,CAAC,CAAC,EAEpF,QAAO,OAAO,OAAO,KACpB,IAAI,kBAAkB;MACrB,OAAO;MACP,QAAQ;MACR,QAAQ,8BAA8B;MACtC,CAAC,CACF;;IASH,MAAM,uBAAuB,6BAA6B,KAAK,WAAW;IAC1E,MAAM,0CAA0B,IAAI,KAAuB;AAC3D,SAAK,MAAM,CAAC,SAAS,iBAAiB,sBAAsB;KAC3D,MAAM,aAAa,OAAO,gBACzB,SACA,OAAO,aACP,OAAO,SACP,aACA;AACD,UAAK,MAAM,CAAC,KAAK,QAAQ,WACxB,yBAAwB,IAAI,KAAK,IAAI;;AAGvC,SAAK,MAAM,YAAY,KAAK,YAAY;KACvC,MAAM,YAAY,wBAAwB,IAAI,SAAS,YAAY;AACnE,SAAI,cAAc,KAAA,EACjB,QAAO,OAAO,YACb,cACA,wDAAwD,SAAS,eACjE,SAAS,OACT;AAEF,YAAO,iBAAiB,UAAU,WAAW,OAAO,UAAU,UAC7D,OAAO,WAAW;AACjB,mBAAa,KAAK,MAAM;OACvB,CACF;;AAEF,WAAO,0BAA0B;KAChC,aAAa,OAAO;KACpB;KACA,aAAa,OAAO;KACpB;KACA,CAAC;AACF,WAAO;KACN;GACF,CAAC;AACF,4BAA0B;AAC1B,SAAO;GACN,CACF;AAKD,KAAI,aAAa,SAAS,GAAG;AAC5B,SAAO,oBAAoB,cAAc,OAAO,QAAQ;AACxD,SAAO,yBAAyB,MAAM,OAAO,SAAS,OAAO,gBAAgB;AAC7E,SAAO,0BAA0B,OAAO,iBAAiB;;AAK1D,MAAK,MAAM,eAAe,OAAO,aAChC,KAAI,YAAY,YACf,QAAO,YAAY,YAAY,KAC9B,OAAO,MAAM,UAAU,qBAAqB,sBAAsB,YAAY,OAAO,CAAC,CACtF;AAIH,QAAO;EACN,CAAC,KAAK,OAAO,SAAS,gCAAgC,CAAC"}

package/dist/orchestrators/snapshot/service.d.mts

@@ -0,0 +1 @@
+import { Context, Effect, FileSystem, Layer, Schema, Scope } from "effect";