@mysten-incubation/devstack 0.0.1 → 0.1.1

package/dist/orchestrators/snapshot/service.mjs

@@ -1,17 +1,21 @@
 import { IdentityContext, StackPathsService } from "../../substrate/runtime/paths.mjs";
+import { decodeJsonText } from "../../substrate/runtime/runtime-decode.mjs";
 import { ownHolder } from "../../substrate/runtime/cross-process/liveness.mjs";
 import { acquireStackLock } from "../../substrate/runtime/cross-process/stack-lock.mjs";
+import { mintRandomSuffix } from "../../substrate/runtime/random-suffix.mjs";
 import { ContainerRuntimeService } from "../../runtime/docker/service.mjs";
+import "../../runtime/docker/index.mjs";
 import { acquireReservation } from "../../substrate/runtime/cross-process/snapshot-reservation.mjs";
-import { SNAPSHOT_ID_RULE, SnapshotLayout, SnapshotMetadataSchema, parseSnapshotId } from "./descriptor.mjs";
+import { SNAPSHOT_ID_RULE, SnapshotDescriptorError, SnapshotLayout, SnapshotMetadataSchema, parseSnapshotId } from "./descriptor.mjs";
+import { planWipe, runWipe } from "./wipe.mjs";
+import "./identity-guard.mjs";
 import { runCapture } from "./capture.mjs";
-import { runWipe } from "./wipe.mjs";
 import { runPrune } from "./prune.mjs";
+import { recoverPendingRestore } from "./recover-pending.mjs";
 import { stageAndSwap } from "../../substrate/runtime/stage-and-swap/index.mjs";
 import { runRestore } from "./restore.mjs";
 import { Context, Effect, FileSystem, Layer, Ref, Schema } from "effect";
-import { randomUUID } from "node:crypto";
-Schema.TaggedErrorClass()("SnapshotBootError", { detail: Schema.String });
+//#region src/orchestrators/snapshot/service.ts
 var SnapshotIdError = class extends Schema.TaggedErrorClass()("SnapshotIdError", {
 	operation: Schema.Literals([
 		"capture",
@@ -22,18 +26,22 @@ var SnapshotIdError = class extends Schema.TaggedErrorClass()("SnapshotIdError",
 	value: Schema.String,
 	detail: Schema.String
 }) {};
-var SnapshotOrchestratorService = class extends Context.Service()("@devstack-rewrite/orchestrators/Snapshot") {};
+var SnapshotOrchestratorService = class extends Context.Service()("@devstack/orchestrators/Snapshot") {};
 /** Mint a snapshot id when the caller didn't pass one. Carries an
 *  8-hex random suffix from `crypto.randomUUID()` (STYLE_GUIDE §17) so
 *  concurrent saves don't silently overwrite. */
-const mintId = (prefix = "snap") => `${prefix}-${Date.now()}-${randomUUID().replace(/-/g, "").slice(0, 8)}`;
+const mintId = (prefix = "snap") => `${prefix}-${Date.now()}-${mintRandomSuffix(8)}`;
 const mintSnapshotId = () => {
-	const id = parseSnapshotId(mintId());
-	if (id === null) throw new Error("internal snapshot id minting produced an invalid id");
-	return id;
+	const raw = mintId();
+	const id = parseSnapshotId(raw);
+	return id === null ? Effect.fail(new SnapshotDescriptorError({
+		kind: "invalid-id",
+		detail: "internal snapshot id minting produced an invalid id",
+		value: raw
+	})) : Effect.succeed(id);
 };
 const mintSnapshotName = () => {
-	return `manual-${(/* @__PURE__ */ new Date()).toISOString().replaceAll("-", "").replaceAll(":", "").slice(0, 15)}-${randomUUID().replace(/-/g, "").slice(0, 4)}`;
+	return `manual-${(/* @__PURE__ */ new Date()).toISOString().replaceAll("-", "").replaceAll(":", "").slice(0, 15)}-${mintRandomSuffix(8)}`;
 };
 const validateSnapshotId = (operation, value) => {
 	const id = parseSnapshotId(value);
@@ -56,7 +64,10 @@ const normalizeSnapshotName = (operation, name) => {
 	return Effect.succeed(normalized);
 };
 /** Read this process's canonical startTime stamp for the snapshot
-*  reservation liveness check. */
+*  reservation liveness check. Returns `null` when the kernel-probe
+*  couldn't determine startTime — matches `RosterHolderSchema.startTime`
+*  semantics and is honored by the sweep's `checkHolderLiveness`
+*  null-conservative short-circuit. */
 const ownStartTime = () => ownHolder("snapshot").startTime;
 const normalizeIdentityValue = (value) => {
 	if (Array.isArray(value)) return value.map(normalizeIdentityValue);
@@ -72,7 +83,6 @@ const layerSnapshotOrchestrator = Layer.effect(SnapshotOrchestratorService, Effe
 	const identity = yield* IdentityContext;
 	const runtime = yield* ContainerRuntimeService;
 	const participantsRef = yield* Ref.make([]);
-	const classifiersRef = yield* Ref.make([]);
 	const seqRef = yield* Ref.make(0);
 	const registerParticipant = (pluginKey, decl, hooks) => Effect.gen(function* () {
 		const seq = yield* Ref.updateAndGet(seqRef, (n) => n + 1);
@@ -99,21 +109,8 @@ const layerSnapshotOrchestrator = Layer.effect(SnapshotOrchestratorService, Effe
 			"snapshot.participant.subtrees": decl.subtrees.length
 		});
 	}).pipe(Effect.withSpan("orchestrator.snapshot.registerParticipant"));
-	const registerClassifier = (pluginKey, decl) => Effect.gen(function* () {
-		const seq = yield* Ref.updateAndGet(seqRef, (n) => n + 1);
-		const entry = {
-			dispatch: {
-				plugin: pluginKey,
-				decl
-			},
-			seq
-		};
-		yield* Ref.update(classifiersRef, (xs) => [...xs, entry]);
-		yield* Effect.addFinalizer(() => Ref.update(classifiersRef, (xs) => xs.filter((e) => e.seq !== seq)));
-		yield* Effect.annotateCurrentSpan({ "snapshot.classifier.plugin": pluginKey });
-	}).pipe(Effect.withSpan("orchestrator.snapshot.registerClassifier"));
 	const capture = ({ id, label, participants, onProgress }) => Effect.gen(function* () {
-		const snapshotId = id === void 0 ? mintSnapshotId() : yield* validateSnapshotId("capture", id);
+		const snapshotId = id === void 0 ? yield* mintSnapshotId() : yield* validateSnapshotId("capture", id);
 		const snapshotName = yield* normalizeSnapshotName("capture", label);
 		const effectiveParticipants = participants ?? (yield* Ref.get(participantsRef)).map((e) => e.capture);
 		const artifactDir = `${paths.snapshotDir}/${snapshotId}`;
@@ -206,19 +203,10 @@ const layerSnapshotOrchestrator = Layer.effect(SnapshotOrchestratorService, Effe
 				});
 				continue;
 			}
-			const raw = yield* Effect.try({
-				try: () => JSON.parse(text),
-				catch: () => null
+			const decoded = yield* decodeJsonText(SnapshotMetadataSchema, text, {
+				source: metaPath,
+				mkError: () => null
 			}).pipe(Effect.catch(() => Effect.succeed(null)));
-			if (raw === null) {
-				entries.push({
-					id,
-					directory: dir,
-					metadata: null
-				});
-				continue;
-			}
-			const decoded = yield* Schema.decodeUnknownEffect(SnapshotMetadataSchema)(raw).pipe(Effect.catch(() => Effect.succeed(null)));
 			if (decoded !== null && parseSnapshotId(decoded.id) === null) {
 				yield* Effect.logWarning(`ignoring snapshot metadata with unsafe id: ${decoded.id}`);
 				entries.push({
@@ -264,33 +252,42 @@ const layerSnapshotOrchestrator = Layer.effect(SnapshotOrchestratorService, Effe
 			});
 		}));
 	}).pipe(Effect.withSpan("orchestrator.snapshot.wipe.entry"));
-	const prune = ({ classifiers }) => Effect.gen(function* () {
-		const effectiveClassifiers = classifiers ?? (yield* Ref.get(classifiersRef)).map((e) => e.dispatch);
-		return yield* Effect.scoped(Effect.gen(function* () {
-			yield* acquireReservation(paths.snapshotReservationFile, ownStartTime());
-			return yield* runPrune({
-				stackRoot: paths.stackRoot,
-				imageLabelFilter: {
-					app: identity.app,
-					stack: identity.stack
-				},
-				classifiers: effectiveClassifiers,
-				runtime
-			});
-		}));
-	}).pipe(Effect.withSpan("orchestrator.snapshot.prune.entry"));
+	const wipePlan = (args) => planWipe({
+		labelMatch: {
+			app: identity.app,
+			stack: identity.stack
+		},
+		stackRoot: paths.stackRoot,
+		stateFilePath: paths.stateFile,
+		runtime,
+		keepSnapshots: args.keepSnapshots,
+		keepCache: args.keepCache
+	}).pipe(Effect.withSpan("orchestrator.snapshot.wipe.plan.entry"));
+	const prune = () => Effect.scoped(Effect.gen(function* () {
+		yield* acquireReservation(paths.snapshotReservationFile, ownStartTime());
+		return yield* runPrune({
+			stackRoot: paths.stackRoot,
+			imageLabelFilter: {
+				app: identity.app,
+				stack: identity.stack
+			},
+			runtime
+		});
+	})).pipe(Effect.withSpan("orchestrator.snapshot.prune.entry"));
+	const recoverPendingRestoreImpl = recoverPendingRestore(paths.stackRoot, runtime).pipe(Effect.withSpan("orchestrator.snapshot.recover-pending.entry"));
 	return SnapshotOrchestratorService.of({
 		registerParticipant,
-		registerClassifier,
 		capture,
 		restore,
 		list,
 		delete: del,
 		wipe,
-		prune
+		wipePlan,
+		prune,
+		recoverPendingRestore: recoverPendingRestoreImpl
 	});
 }));
 //#endregion
-export { SnapshotOrchestratorService, layerSnapshotOrchestrator };
+export { SnapshotIdError, SnapshotOrchestratorService, layerSnapshotOrchestrator };
 
 //# sourceMappingURL=service.mjs.map

package/dist/orchestrators/snapshot/service.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"service.mjs","names":[],"sources":["../../../src/orchestrators/snapshot/service.ts"],"sourcesContent":["// Snapshot orchestrator service.\n//\n// Architecture § L3 § Snapshot orchestrator:\n//   \"Collects all `Snapshotable` decls, applies one capture-wide\n//   pause window for managed containers, tars host subtrees with mode\n//   round-trip, commits container writable layers, threads a typed metadata record\n//   (identity guard + per-participant slice), atomic stage-and-swap\n//   for restore, identity-guard fires before any destructive mutation.\"\n//\n// This file is the orchestrator's typed entry point — `capture`,\n// `restore`, `list`, `delete`, `wipe`, `prune` — wired to the\n// cross-process safety primitives (`snapshot.reservation`,\n// `stack.lock`) and the substrate path resolver.\n//\n// The service surface is name-blind. The two participant lists\n// (capture and restore) are populated by the substrate at boot from\n// the `Snapshotable` decls of registered plugins; service-specific\n// behavior never reaches this file. Registration is scope-bound: the\n// supervisor calls `registerParticipant(pluginKey, decl)` from inside\n// each plugin's scope so the registry entry is reaped on plugin\n// teardown.\n\nimport { randomUUID } from 'node:crypto';\n\nimport { Context, Effect, FileSystem, Layer, Ref, Schema, Scope } from 'effect';\n\nimport type { LivenessClassifierDecl } from '../../contracts/liveness-classifier.ts';\nimport type { SnapshotableDecl } from '../../contracts/snapshotable.ts';\nimport type { ContainerRuntime } from '../../contracts/container-runtime.ts';\nimport { ContainerRuntimeService } from '../../runtime/docker/index.ts';\nimport { ownHolder } from '../../substrate/runtime/cross-process/liveness.ts';\nimport {\n\tacquireReservation,\n\ttype SnapshotReservationError,\n} from '../../substrate/runtime/cross-process/snapshot-reservation.ts';\nimport {\n\tacquireStackLock,\n\ttype StackLockError,\n} from '../../substrate/runtime/cross-process/stack-lock.ts';\nimport { IdentityContext, StackPathsService } from '../../substrate/runtime/paths.ts';\nimport {\n\trunCapture,\n\ttype CapturePhaseError,\n\ttype SnapshotParticipant,\n\ttype SnapshotProgressReporter,\n} from './capture.ts';\nimport {\n\tSnapshotLayout,\n\tSnapshotMetadataSchema,\n\tSNAPSHOT_ID_RULE,\n\tparseSnapshotId,\n\ttype SnapshotId,\n\ttype SnapshotCatalogEntry,\n\ttype SnapshotMetadata,\n} from './descriptor.ts';\nimport {\n\ttype IdentityContributionConflictError,\n\ttype IdentityGuardError,\n} from './identity-guard.ts';\nimport {\n\trunPrune,\n\ttype ClassifierDispatch,\n\ttype PruneResult,\n\ttype PrunePhaseError,\n} from './prune.ts';\nimport { runRestore, type RestoreParticipant, type RestorePhaseError } from './restore.ts';\nimport {\n\tstageAndSwap,\n\ttype StageAndSwapError,\n} from '../../substrate/runtime/stage-and-swap/index.ts';\nimport { runWipe, type WipePhaseError } from './wipe.ts';\n\n// -----------------------------------------------------------------------------\n// The service shape\n// -----------------------------------------------------------------------------\n\n/** Tagged union of every error the orchestrator surface can surface.\n *  Callers `catchTags` on the precise tags they care about. */\nexport type SnapshotOrchestratorError =\n\t| CapturePhaseError\n\t| RestorePhaseError\n\t| WipePhaseError\n\t| PrunePhaseError\n\t| IdentityGuardError\n\t| IdentityContributionConflictError\n\t| StageAndSwapError\n\t| SnapshotReservationError\n\t| StackLockError\n\t| SnapshotIdError;\n\n/** Tagged failure when the substrate's startTime probe could not be\n *  reduced to a number. */\nexport class SnapshotBootError extends Schema.TaggedErrorClass<SnapshotBootError>()(\n\t'SnapshotBootError',\n\t{\n\t\tdetail: Schema.String,\n\t},\n) {}\n\nexport class SnapshotIdError extends Schema.TaggedErrorClass<SnapshotIdError>()('SnapshotIdError', {\n\toperation: Schema.Literals(['capture', 'restore', 'delete']),\n\tfield: Schema.Literals(['id', 'name']),\n\tvalue: Schema.String,\n\tdetail: Schema.String,\n}) {}\n\nexport interface SnapshotOrchestrator {\n\t/** Register a `SnapshotableDecl` from a plugin. Scope-bound — when\n\t *  the caller's scope (the plugin's acquire scope) closes, the\n\t *  registration is reaped. The supervisor calls this once per\n\t *  `SnapshotableDecl` on each plugin's `capabilities` tuple.\n\t *\n\t *  `captureIdentity` / `captureContribution` are separately wired\n\t *  hooks (not on `SnapshotableDecl` itself) — they plumb through\n\t *  the plugin's resolved value. Identity is validated by the\n\t *  orchestrator; contribution payloads are persisted as opaque JSON\n\t *  that plugins must validate at their own boundary if they read it. */\n\treadonly registerParticipant: (\n\t\tpluginKey: string,\n\t\tdecl: SnapshotableDecl,\n\t\thooks?: {\n\t\t\treadonly captureIdentity?: Effect.Effect<Readonly<Record<string, string>>>;\n\t\t\treadonly captureContribution?: Effect.Effect<unknown>;\n\t\t\treadonly liveIdentity?: Effect.Effect<Readonly<Record<string, string>>>;\n\t\t},\n\t) => Effect.Effect<void, never, Scope.Scope>;\n\n\t/** Register a plugin-emitted `LivenessClassifier`. The decl is\n\t *  consumed by `prune()`. Scope-bound. */\n\treadonly registerClassifier: (\n\t\tpluginKey: string,\n\t\tdecl: LivenessClassifierDecl,\n\t) => Effect.Effect<void, never, Scope.Scope>;\n\n\t/** Capture a new snapshot. The id MAY be caller-supplied; if\n\t *  omitted, the substrate mints a random suffix to sidestep the\n\t *  concurrent-saves-against-same-id silent overwrite.\n\t *\n\t *  `participants` overrides the registered set — primarily for\n\t *  tests. Production callers omit it; the orchestrator reads the\n\t *  registered list. */\n\treadonly capture: (args: {\n\t\treadonly id?: string;\n\t\treadonly label?: string;\n\t\treadonly participants?: ReadonlyArray<SnapshotParticipant>;\n\t\treadonly onProgress?: SnapshotProgressReporter;\n\t}) => Effect.Effect<SnapshotMetadata, SnapshotOrchestratorError, FileSystem.FileSystem>;\n\n\t/** Restore from a previously-captured artifact id. Refuses on\n\t *  identity mismatch BEFORE any destructive mutation. */\n\treadonly restore: (args: {\n\t\treadonly id: string;\n\t\treadonly participants?: ReadonlyArray<RestoreParticipant>;\n\t}) => Effect.Effect<SnapshotMetadata, SnapshotOrchestratorError, FileSystem.FileSystem>;\n\n\t/** Catalog list — tolerates partial / corrupt entries (they appear\n\t *  with `metadata: null`). */\n\treadonly list: Effect.Effect<\n\t\tReadonlyArray<SnapshotCatalogEntry>,\n\t\tSnapshotOrchestratorError,\n\t\tFileSystem.FileSystem\n\t>;\n\n\t/** Delete one artifact by id. Idempotent — missing id is a no-op. */\n\treadonly delete: (\n\t\tid: string,\n\t) => Effect.Effect<void, SnapshotOrchestratorError, FileSystem.FileSystem>;\n\n\t/** Wipe the live (`app`, `stack`) footprint; preserves the\n\t *  snapshot catalog by default. Stack-local artifact cache is\n\t *  removed unless `keepCache` is explicitly true. */\n\treadonly wipe: (args: {\n\t\treadonly keepSnapshots?: boolean;\n\t\treadonly keepCache?: boolean;\n\t}) => Effect.Effect<void, SnapshotOrchestratorError, FileSystem.FileSystem>;\n\n\t/** Prune the snapshot catalog + byproduct images via plugin-\n\t *  contributed classifiers. `classifiers` overrides the registered\n\t *  set; omit to consume registered classifiers. */\n\treadonly prune: (args: {\n\t\treadonly classifiers?: ReadonlyArray<ClassifierDispatch>;\n\t}) => Effect.Effect<PruneResult, SnapshotOrchestratorError, FileSystem.FileSystem>;\n}\n\nexport class SnapshotOrchestratorService extends Context.Service<\n\tSnapshotOrchestratorService,\n\tSnapshotOrchestrator\n>()('@devstack-rewrite/orchestrators/Snapshot') {}\n\n// -----------------------------------------------------------------------------\n// Helpers\n// -----------------------------------------------------------------------------\n\n/** Mint a snapshot id when the caller didn't pass one. Carries an\n *  8-hex random suffix from `crypto.randomUUID()` (STYLE_GUIDE §17) so\n *  concurrent saves don't silently overwrite. */\nconst mintId = (prefix = 'snap'): string =>\n\t`${prefix}-${Date.now()}-${randomUUID().replace(/-/g, '').slice(0, 8)}`;\n\nconst mintSnapshotId = (): SnapshotId => {\n\tconst id = parseSnapshotId(mintId());\n\tif (id === null) {\n\t\tthrow new Error('internal snapshot id minting produced an invalid id');\n\t}\n\treturn id;\n};\n\nconst mintSnapshotName = (): string => {\n\tconst stamp = new Date().toISOString().replaceAll('-', '').replaceAll(':', '').slice(0, 15);\n\treturn `manual-${stamp}-${randomUUID().replace(/-/g, '').slice(0, 4)}`;\n};\n\nconst validateSnapshotId = (\n\toperation: SnapshotIdError['operation'],\n\tvalue: string,\n): Effect.Effect<SnapshotId, SnapshotIdError> => {\n\tconst id = parseSnapshotId(value);\n\treturn id === null\n\t\t? Effect.fail(\n\t\t\t\tnew SnapshotIdError({\n\t\t\t\t\toperation,\n\t\t\t\t\tfield: 'id',\n\t\t\t\t\tvalue,\n\t\t\t\t\tdetail: SNAPSHOT_ID_RULE,\n\t\t\t\t}),\n\t\t\t)\n\t\t: Effect.succeed(id);\n};\n\nconst normalizeSnapshotName = (\n\toperation: SnapshotIdError['operation'],\n\tname: string | undefined,\n): Effect.Effect<string, SnapshotIdError> => {\n\tif (name === undefined) return Effect.succeed(mintSnapshotName());\n\tconst normalized = name.trim();\n\tif (normalized.length === 0 || normalized.includes('\\0') || normalized.length > 128) {\n\t\treturn Effect.fail(\n\t\t\tnew SnapshotIdError({\n\t\t\t\toperation,\n\t\t\t\tfield: 'name',\n\t\t\t\tvalue: name,\n\t\t\t\tdetail:\n\t\t\t\t\t'snapshot names must be 1-128 characters after trimming and cannot contain NUL bytes',\n\t\t\t}),\n\t\t);\n\t}\n\treturn Effect.succeed(normalized);\n};\n\n/** Read this process's canonical startTime stamp for the snapshot\n *  reservation liveness check. */\nconst ownStartTime = (): number => ownHolder('snapshot').startTime;\n\nconst normalizeIdentityValue = (value: unknown): unknown => {\n\tif (Array.isArray(value)) return value.map(normalizeIdentityValue);\n\tif (value !== null && typeof value === 'object') {\n\t\treturn Object.fromEntries(\n\t\t\tObject.entries(value)\n\t\t\t\t.sort(([a], [b]) => a.localeCompare(b))\n\t\t\t\t.map(([key, nested]) => [key, normalizeIdentityValue(nested)]),\n\t\t);\n\t}\n\treturn value;\n};\n\nconst stableIdentityString = (value: unknown): string => {\n\tconst encoded = JSON.stringify(normalizeIdentityValue(value));\n\treturn encoded ?? String(value);\n};\n\nconst identityHookFromDecl = (\n\tpluginKey: string,\n\tdecl: SnapshotableDecl,\n): Effect.Effect<Readonly<Record<string, string>>> =>\n\tdecl.preRestore === undefined\n\t\t? Effect.succeed({})\n\t\t: decl.preRestore.pipe(Effect.map((value) => ({ [pluginKey]: stableIdentityString(value) })));\n\n// -----------------------------------------------------------------------------\n// Layer\n// -----------------------------------------------------------------------------\n\n/**\n * Wire the orchestrator from the substrate's path resolver + the\n * runtime container adapter.\n *\n * Discipline:\n *   - Capture/restore acquire `snapshot.reservation` (O_EXCL,\n *     no retry) — concurrent capture is structurally refused.\n *   - List/delete/wipe acquire `stack.lock` briefly (no reservation\n *     needed; they don't pause containers).\n *   - Prune acquires both — it walks the catalog AND sweeps images.\n */\n/** Per-plugin participant registration entry kept on the orchestrator's\n *  inner ref. Sequence number lets parallel registrations under the\n *  same key be reaped independently when their owning scopes close. */\ninterface RegisteredParticipantEntry {\n\treadonly pluginKey: string;\n\treadonly capture: SnapshotParticipant;\n\treadonly restore: RestoreParticipant;\n\treadonly seq: number;\n}\n\ninterface RegisteredClassifierEntry {\n\treadonly dispatch: ClassifierDispatch;\n\treadonly seq: number;\n}\n\nexport const layerSnapshotOrchestrator: Layer.Layer<\n\tSnapshotOrchestratorService,\n\tnever,\n\tStackPathsService | IdentityContext | ContainerRuntimeService\n> = Layer.effect(\n\tSnapshotOrchestratorService,\n\tEffect.gen(function* () {\n\t\tconst paths = yield* StackPathsService;\n\t\tconst identity = yield* IdentityContext;\n\t\tconst runtime: ContainerRuntime = yield* ContainerRuntimeService;\n\n\t\t// Scope-local participant + classifier registries. The supervisor\n\t\t// adds entries from each plugin's acquire scope; finalizers\n\t\t// remove them on scope close. Sequence number protects against\n\t\t// the parallel-registration-same-key race when two stack\n\t\t// instances register concurrently.\n\t\tconst participantsRef = yield* Ref.make<ReadonlyArray<RegisteredParticipantEntry>>([]);\n\t\tconst classifiersRef = yield* Ref.make<ReadonlyArray<RegisteredClassifierEntry>>([]);\n\t\tconst seqRef = yield* Ref.make(0);\n\n\t\tconst registerParticipant: SnapshotOrchestrator['registerParticipant'] = (\n\t\t\tpluginKey,\n\t\t\tdecl,\n\t\t\thooks,\n\t\t) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst seq = yield* Ref.updateAndGet(seqRef, (n) => n + 1);\n\t\t\t\tconst declIdentity = identityHookFromDecl(pluginKey, decl);\n\t\t\t\tconst capture: SnapshotParticipant = {\n\t\t\t\t\tplugin: pluginKey,\n\t\t\t\t\tdecl,\n\t\t\t\t\tcaptureIdentity: hooks?.captureIdentity ?? declIdentity,\n\t\t\t\t\tcaptureContribution: hooks?.captureContribution ?? Effect.succeed<unknown>(undefined),\n\t\t\t\t};\n\t\t\t\tconst restore: RestoreParticipant = {\n\t\t\t\t\tplugin: pluginKey,\n\t\t\t\t\tliveIdentity: hooks?.liveIdentity ?? declIdentity,\n\t\t\t\t\tpostRestore: decl.postRestore as Effect.Effect<void> | undefined,\n\t\t\t\t};\n\t\t\t\tconst entry: RegisteredParticipantEntry = { pluginKey, capture, restore, seq };\n\t\t\t\tyield* Ref.update(participantsRef, (xs) => [...xs, entry]);\n\t\t\t\tyield* Effect.addFinalizer(() =>\n\t\t\t\t\tRef.update(participantsRef, (xs) => xs.filter((e) => e.seq !== seq)),\n\t\t\t\t);\n\t\t\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t\t\t'snapshot.participant.plugin': pluginKey,\n\t\t\t\t\t'snapshot.participant.subtrees': decl.subtrees.length,\n\t\t\t\t});\n\t\t\t}).pipe(Effect.withSpan('orchestrator.snapshot.registerParticipant')) as Effect.Effect<\n\t\t\t\tvoid,\n\t\t\t\tnever,\n\t\t\t\tScope.Scope\n\t\t\t>;\n\n\t\tconst registerClassifier: SnapshotOrchestrator['registerClassifier'] = (pluginKey, decl) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst seq = yield* Ref.updateAndGet(seqRef, (n) => n + 1);\n\t\t\t\tconst dispatch: ClassifierDispatch = { plugin: pluginKey, decl };\n\t\t\t\tconst entry: RegisteredClassifierEntry = { dispatch, seq };\n\t\t\t\tyield* Ref.update(classifiersRef, (xs) => [...xs, entry]);\n\t\t\t\tyield* Effect.addFinalizer(() =>\n\t\t\t\t\tRef.update(classifiersRef, (xs) => xs.filter((e) => e.seq !== seq)),\n\t\t\t\t);\n\t\t\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t\t\t'snapshot.classifier.plugin': pluginKey,\n\t\t\t\t});\n\t\t\t}).pipe(Effect.withSpan('orchestrator.snapshot.registerClassifier')) as Effect.Effect<\n\t\t\t\tvoid,\n\t\t\t\tnever,\n\t\t\t\tScope.Scope\n\t\t\t>;\n\n\t\tconst capture: SnapshotOrchestrator['capture'] = ({ id, label, participants, onProgress }) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst snapshotId =\n\t\t\t\t\tid === undefined ? mintSnapshotId() : yield* validateSnapshotId('capture', id);\n\t\t\t\tconst snapshotName = yield* normalizeSnapshotName('capture', label);\n\t\t\t\tconst effectiveParticipants =\n\t\t\t\t\tparticipants ?? (yield* Ref.get(participantsRef)).map((e) => e.capture);\n\t\t\t\tconst artifactDir = `${paths.snapshotDir}/${snapshotId}`;\n\t\t\t\tconst stagingDir = `${paths.snapshotDir}/.staging.${snapshotId}`;\n\t\t\t\tconst backupDir = `${paths.snapshotDir}/.bak.${snapshotId}`;\n\n\t\t\t\t// Acquire `snapshot.reservation` (O_EXCL, no retry) for the\n\t\t\t\t// duration of the capture. The stack.lock is acquired\n\t\t\t\t// briefly inside `stageAndSwap` for the rename publish.\n\t\t\t\treturn yield* Effect.scoped(\n\t\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\t\tyield* acquireReservation(paths.snapshotReservationFile, ownStartTime());\n\t\t\t\t\t\tconst fs = yield* FileSystem.FileSystem;\n\t\t\t\t\t\tconst targetExists = yield* fs\n\t\t\t\t\t\t\t.exists(artifactDir)\n\t\t\t\t\t\t\t.pipe(Effect.catch(() => Effect.succeed(false)));\n\t\t\t\t\t\tif (targetExists) {\n\t\t\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\t\t\tnew SnapshotIdError({\n\t\t\t\t\t\t\t\t\toperation: 'capture',\n\t\t\t\t\t\t\t\t\tfield: 'id',\n\t\t\t\t\t\t\t\t\tvalue: snapshotId,\n\t\t\t\t\t\t\t\t\tdetail: 'snapshot id already exists',\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\t\t\t\t\t\tconst existing = yield* list;\n\t\t\t\t\t\tif (existing.some((entry) => entry.metadata?.label === snapshotName)) {\n\t\t\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\t\t\tnew SnapshotIdError({\n\t\t\t\t\t\t\t\t\toperation: 'capture',\n\t\t\t\t\t\t\t\t\tfield: 'name',\n\t\t\t\t\t\t\t\t\tvalue: snapshotName,\n\t\t\t\t\t\t\t\t\tdetail: 'snapshot name already exists',\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\t// Stage-and-swap publishes the artifact directory\n\t\t\t\t\t\t// atomically — external watchers (and `list`)\n\t\t\t\t\t\t// never observe a half-written tree.\n\t\t\t\t\t\tconst meta = yield* stageAndSwap({\n\t\t\t\t\t\t\ttargetPath: artifactDir,\n\t\t\t\t\t\t\tstagingPath: stagingDir,\n\t\t\t\t\t\t\tbackupPath: backupDir,\n\t\t\t\t\t\t\tbuild: runCapture({\n\t\t\t\t\t\t\t\tstagingDir,\n\t\t\t\t\t\t\t\tsnapshotId,\n\t\t\t\t\t\t\t\tlabel: snapshotName,\n\t\t\t\t\t\t\t\tapp: identity.app,\n\t\t\t\t\t\t\t\tstack: identity.stack,\n\t\t\t\t\t\t\t\tnetwork: identity.chain,\n\t\t\t\t\t\t\t\truntimeStackRoot: paths.stackRoot,\n\t\t\t\t\t\t\t\tstateFilePath: paths.stateFile,\n\t\t\t\t\t\t\t\tparticipants: effectiveParticipants,\n\t\t\t\t\t\t\t\truntime,\n\t\t\t\t\t\t\t\tonProgress,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t});\n\t\t\t\t\t\treturn meta;\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}).pipe(Effect.withSpan('orchestrator.snapshot.capture.entry'));\n\n\t\tconst restore: SnapshotOrchestrator['restore'] = ({ id, participants }) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst snapshotId = yield* validateSnapshotId('restore', id);\n\t\t\t\tconst artifactDir = `${paths.snapshotDir}/${snapshotId}`;\n\t\t\t\tconst effectiveParticipants =\n\t\t\t\t\tparticipants ?? (yield* Ref.get(participantsRef)).map((e) => e.restore);\n\t\t\t\treturn yield* Effect.scoped(\n\t\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\t\tyield* acquireReservation(paths.snapshotReservationFile, ownStartTime());\n\t\t\t\t\t\treturn yield* runRestore({\n\t\t\t\t\t\t\tsnapshotId,\n\t\t\t\t\t\t\tartifactDir,\n\t\t\t\t\t\t\truntimeStackRoot: paths.stackRoot,\n\t\t\t\t\t\t\truntimeStagingPath: `${paths.stackRoot}.staging.${snapshotId}`,\n\t\t\t\t\t\t\truntimeBackupPath: `${paths.stackRoot}.bak.${snapshotId}`,\n\t\t\t\t\t\t\tparticipants: effectiveParticipants,\n\t\t\t\t\t\t\truntime,\n\t\t\t\t\t\t\truntimeIdentity: {\n\t\t\t\t\t\t\t\tapp: identity.app,\n\t\t\t\t\t\t\t\tstack: identity.stack,\n\t\t\t\t\t\t\t\tnetwork: identity.chain,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t});\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}).pipe(Effect.withSpan('orchestrator.snapshot.restore.entry'));\n\n\t\tconst list: SnapshotOrchestrator['list'] = Effect.gen(function* () {\n\t\t\tconst fs = yield* FileSystem.FileSystem;\n\t\t\tconst exists = yield* fs\n\t\t\t\t.exists(paths.snapshotDir)\n\t\t\t\t.pipe(Effect.catch(() => Effect.succeed(false)));\n\t\t\tif (!exists) return [];\n\t\t\tconst ids = yield* fs\n\t\t\t\t.readDirectory(paths.snapshotDir)\n\t\t\t\t.pipe(Effect.catch(() => Effect.succeed([] as ReadonlyArray<string>)));\n\t\t\tconst entries: SnapshotCatalogEntry[] = [];\n\t\t\tfor (const id of ids) {\n\t\t\t\t// Skip transient staging/backup directories — they're\n\t\t\t\t// invisible to the catalog by construction (the\n\t\t\t\t// `.staging.<id>` / `.bak.<id>` naming).\n\t\t\t\tif (id.startsWith('.staging.') || id.startsWith('.bak.')) continue;\n\t\t\t\tconst parsedId = parseSnapshotId(id);\n\t\t\t\tif (parsedId === null) {\n\t\t\t\t\tyield* Effect.logWarning(`ignoring unsafe snapshot catalog entry: ${id}`);\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tconst dir = `${paths.snapshotDir}/${id}`;\n\t\t\t\tconst metaPath = `${dir}/${SnapshotLayout.metaFile}`;\n\t\t\t\tconst metaExists = yield* fs\n\t\t\t\t\t.exists(metaPath)\n\t\t\t\t\t.pipe(Effect.catch(() => Effect.succeed(false)));\n\t\t\t\tif (!metaExists) {\n\t\t\t\t\tentries.push({ id, directory: dir, metadata: null });\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tconst text = yield* fs\n\t\t\t\t\t.readFileString(metaPath)\n\t\t\t\t\t.pipe(Effect.catch(() => Effect.succeed('')));\n\t\t\t\tif (text === '') {\n\t\t\t\t\tentries.push({ id, directory: dir, metadata: null });\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tconst raw = yield* Effect.try({\n\t\t\t\t\ttry: () => JSON.parse(text) as unknown,\n\t\t\t\t\tcatch: () => null,\n\t\t\t\t}).pipe(Effect.catch(() => Effect.succeed(null)));\n\t\t\t\tif (raw === null) {\n\t\t\t\t\tentries.push({ id, directory: dir, metadata: null });\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tconst decoded = yield* Schema.decodeUnknownEffect(SnapshotMetadataSchema)(raw).pipe(\n\t\t\t\t\tEffect.catch(() => Effect.succeed(null)),\n\t\t\t\t);\n\t\t\t\tif (decoded !== null && parseSnapshotId(decoded.id) === null) {\n\t\t\t\t\tyield* Effect.logWarning(`ignoring snapshot metadata with unsafe id: ${decoded.id}`);\n\t\t\t\t\tentries.push({ id, directory: dir, metadata: null });\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tentries.push({ id: parsedId, directory: dir, metadata: decoded });\n\t\t\t}\n\t\t\treturn entries;\n\t\t}).pipe(Effect.withSpan('orchestrator.snapshot.list'));\n\n\t\tconst del: SnapshotOrchestrator['delete'] = (id) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst snapshotId = yield* validateSnapshotId('delete', id);\n\t\t\t\tconst fs = yield* FileSystem.FileSystem;\n\t\t\t\tconst dir = `${paths.snapshotDir}/${snapshotId}`;\n\t\t\t\tyield* Effect.scoped(\n\t\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\t\tyield* acquireStackLock(paths.stackLockFile);\n\t\t\t\t\t\tyield* fs.remove(dir, { recursive: true, force: true }).pipe(Effect.ignore);\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}).pipe(Effect.withSpan('orchestrator.snapshot.delete'));\n\n\t\tconst wipe: SnapshotOrchestrator['wipe'] = (args) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tyield* Effect.scoped(\n\t\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\t\tyield* acquireStackLock(paths.stackLockFile);\n\t\t\t\t\t\tyield* runWipe({\n\t\t\t\t\t\t\tlabelMatch: { app: identity.app, stack: identity.stack },\n\t\t\t\t\t\t\tstackRoot: paths.stackRoot,\n\t\t\t\t\t\t\tstateFilePath: paths.stateFile,\n\t\t\t\t\t\t\truntime,\n\t\t\t\t\t\t\tkeepSnapshots: args.keepSnapshots,\n\t\t\t\t\t\t\tkeepCache: args.keepCache,\n\t\t\t\t\t\t});\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}).pipe(Effect.withSpan('orchestrator.snapshot.wipe.entry'));\n\n\t\tconst prune: SnapshotOrchestrator['prune'] = ({ classifiers }) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst effectiveClassifiers =\n\t\t\t\t\tclassifiers ?? (yield* Ref.get(classifiersRef)).map((e) => e.dispatch);\n\t\t\t\treturn yield* Effect.scoped(\n\t\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\t\tyield* acquireReservation(paths.snapshotReservationFile, ownStartTime());\n\t\t\t\t\t\treturn yield* runPrune({\n\t\t\t\t\t\t\tstackRoot: paths.stackRoot,\n\t\t\t\t\t\t\timageLabelFilter: { app: identity.app, stack: identity.stack },\n\t\t\t\t\t\t\tclassifiers: effectiveClassifiers,\n\t\t\t\t\t\t\truntime,\n\t\t\t\t\t\t});\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}).pipe(Effect.withSpan('orchestrator.snapshot.prune.entry'));\n\n\t\treturn SnapshotOrchestratorService.of({\n\t\t\tregisterParticipant,\n\t\t\tregisterClassifier,\n\t\t\tcapture,\n\t\t\trestore,\n\t\t\tlist,\n\t\t\tdelete: del,\n\t\t\twipe,\n\t\t\tprune,\n\t\t});\n\t}),\n);\n"],"mappings":";;;;;;;;;;;;;AA4FuC,OAAO,kBAAqC,CAClF,qBACA,EACC,QAAQ,OAAO,QACf,CACD;AAED,IAAa,kBAAb,cAAqC,OAAO,kBAAmC,CAAC,mBAAmB;CAClG,WAAW,OAAO,SAAS;EAAC;EAAW;EAAW;EAAS,CAAC;CAC5D,OAAO,OAAO,SAAS,CAAC,MAAM,OAAO,CAAC;CACtC,OAAO,OAAO;CACd,QAAQ,OAAO;CACf,CAAC,CAAC;AAgFH,IAAa,8BAAb,cAAiD,QAAQ,SAGtD,CAAC,2CAA2C,CAAC;;;;AAShD,MAAM,UAAU,SAAS,WACxB,GAAG,OAAO,GAAG,KAAK,KAAK,CAAC,GAAG,YAAY,CAAC,QAAQ,MAAM,GAAG,CAAC,MAAM,GAAG,EAAE;AAEtE,MAAM,uBAAmC;CACxC,MAAM,KAAK,gBAAgB,QAAQ,CAAC;AACpC,KAAI,OAAO,KACV,OAAM,IAAI,MAAM,sDAAsD;AAEvE,QAAO;;AAGR,MAAM,yBAAiC;AAEtC,QAAO,2BADO,IAAI,MAAM,EAAC,aAAa,CAAC,WAAW,KAAK,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC,MAAM,GAAG,GAClE,CAAC,GAAG,YAAY,CAAC,QAAQ,MAAM,GAAG,CAAC,MAAM,GAAG,EAAE;;AAGrE,MAAM,sBACL,WACA,UACgD;CAChD,MAAM,KAAK,gBAAgB,MAAM;AACjC,QAAO,OAAO,OACX,OAAO,KACP,IAAI,gBAAgB;EACnB;EACA,OAAO;EACP;EACA,QAAQ;EACR,CAAC,CACF,GACA,OAAO,QAAQ,GAAG;;AAGtB,MAAM,yBACL,WACA,SAC4C;AAC5C,KAAI,SAAS,KAAA,EAAW,QAAO,OAAO,QAAQ,kBAAkB,CAAC;CACjE,MAAM,aAAa,KAAK,MAAM;AAC9B,KAAI,WAAW,WAAW,KAAK,WAAW,SAAS,KAAK,IAAI,WAAW,SAAS,IAC/E,QAAO,OAAO,KACb,IAAI,gBAAgB;EACnB;EACA,OAAO;EACP,OAAO;EACP,QACC;EACD,CAAC,CACF;AAEF,QAAO,OAAO,QAAQ,WAAW;;;;AAKlC,MAAM,qBAA6B,UAAU,WAAW,CAAC;AAEzD,MAAM,0BAA0B,UAA4B;AAC3D,KAAI,MAAM,QAAQ,MAAM,CAAE,QAAO,MAAM,IAAI,uBAAuB;AAClE,KAAI,UAAU,QAAQ,OAAO,UAAU,SACtC,QAAO,OAAO,YACb,OAAO,QAAQ,MAAM,CACnB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC,CACtC,KAAK,CAAC,KAAK,YAAY,CAAC,KAAK,uBAAuB,OAAO,CAAC,CAAC,CAC/D;AAEF,QAAO;;AAGR,MAAM,wBAAwB,UAA2B;AAExD,QADgB,KAAK,UAAU,uBAAuB,MAAM,CAC9C,IAAI,OAAO,MAAM;;AAGhC,MAAM,wBACL,WACA,SAEA,KAAK,eAAe,KAAA,IACjB,OAAO,QAAQ,EAAE,CAAC,GAClB,KAAK,WAAW,KAAK,OAAO,KAAK,WAAW,GAAG,YAAY,qBAAqB,MAAM,EAAE,EAAE,CAAC;AAgC/F,MAAa,4BAIT,MAAM,OACT,6BACA,OAAO,IAAI,aAAa;CACvB,MAAM,QAAQ,OAAO;CACrB,MAAM,WAAW,OAAO;CACxB,MAAM,UAA4B,OAAO;CAOzC,MAAM,kBAAkB,OAAO,IAAI,KAAgD,EAAE,CAAC;CACtF,MAAM,iBAAiB,OAAO,IAAI,KAA+C,EAAE,CAAC;CACpF,MAAM,SAAS,OAAO,IAAI,KAAK,EAAE;CAEjC,MAAM,uBACL,WACA,MACA,UAEA,OAAO,IAAI,aAAa;EACvB,MAAM,MAAM,OAAO,IAAI,aAAa,SAAS,MAAM,IAAI,EAAE;EACzD,MAAM,eAAe,qBAAqB,WAAW,KAAK;EAY1D,MAAM,QAAoC;GAAE;GAAW,SAAA;IAVtD,QAAQ;IACR;IACA,iBAAiB,OAAO,mBAAmB;IAC3C,qBAAqB,OAAO,uBAAuB,OAAO,QAAiB,KAAA,EAAU;IAOxB;GAAE,SAAA;IAJ/D,QAAQ;IACR,cAAc,OAAO,gBAAgB;IACrC,aAAa,KAAK;IAEoD;GAAE;GAAK;AAC9E,SAAO,IAAI,OAAO,kBAAkB,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC;AAC1D,SAAO,OAAO,mBACb,IAAI,OAAO,kBAAkB,OAAO,GAAG,QAAQ,MAAM,EAAE,QAAQ,IAAI,CAAC,CACpE;AACD,SAAO,OAAO,oBAAoB;GACjC,+BAA+B;GAC/B,iCAAiC,KAAK,SAAS;GAC/C,CAAC;GACD,CAAC,KAAK,OAAO,SAAS,4CAA4C,CAAC;CAMtE,MAAM,sBAAkE,WAAW,SAClF,OAAO,IAAI,aAAa;EACvB,MAAM,MAAM,OAAO,IAAI,aAAa,SAAS,MAAM,IAAI,EAAE;EAEzD,MAAM,QAAmC;GAAE,UAAA;IADJ,QAAQ;IAAW;IACP;GAAE;GAAK;AAC1D,SAAO,IAAI,OAAO,iBAAiB,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC;AACzD,SAAO,OAAO,mBACb,IAAI,OAAO,iBAAiB,OAAO,GAAG,QAAQ,MAAM,EAAE,QAAQ,IAAI,CAAC,CACnE;AACD,SAAO,OAAO,oBAAoB,EACjC,8BAA8B,WAC9B,CAAC;GACD,CAAC,KAAK,OAAO,SAAS,2CAA2C,CAAC;CAMrE,MAAM,WAA4C,EAAE,IAAI,OAAO,cAAc,iBAC5E,OAAO,IAAI,aAAa;EACvB,MAAM,aACL,OAAO,KAAA,IAAY,gBAAgB,GAAG,OAAO,mBAAmB,WAAW,GAAG;EAC/E,MAAM,eAAe,OAAO,sBAAsB,WAAW,MAAM;EACnE,MAAM,wBACL,iBAAiB,OAAO,IAAI,IAAI,gBAAgB,EAAE,KAAK,MAAM,EAAE,QAAQ;EACxE,MAAM,cAAc,GAAG,MAAM,YAAY,GAAG;EAC5C,MAAM,aAAa,GAAG,MAAM,YAAY,YAAY;EACpD,MAAM,YAAY,GAAG,MAAM,YAAY,QAAQ;AAK/C,SAAO,OAAO,OAAO,OACpB,OAAO,IAAI,aAAa;AACvB,UAAO,mBAAmB,MAAM,yBAAyB,cAAc,CAAC;AAKxE,OAAI,QAHwB,OADV,WAAW,YAE3B,OAAO,YAAY,CACnB,KAAK,OAAO,YAAY,OAAO,QAAQ,MAAM,CAAC,CAAC,CAEhD,QAAO,OAAO,OAAO,KACpB,IAAI,gBAAgB;IACnB,WAAW;IACX,OAAO;IACP,OAAO;IACP,QAAQ;IACR,CAAC,CACF;AAGF,QAAI,OADoB,MACX,MAAM,UAAU,MAAM,UAAU,UAAU,aAAa,CACnE,QAAO,OAAO,OAAO,KACpB,IAAI,gBAAgB;IACnB,WAAW;IACX,OAAO;IACP,OAAO;IACP,QAAQ;IACR,CAAC,CACF;AAwBF,UAAO,OAlBa,aAAa;IAChC,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,OAAO,WAAW;KACjB;KACA;KACA,OAAO;KACP,KAAK,SAAS;KACd,OAAO,SAAS;KAChB,SAAS,SAAS;KAClB,kBAAkB,MAAM;KACxB,eAAe,MAAM;KACrB,cAAc;KACd;KACA;KACA,CAAC;IACF,CAAC;IAED,CACF;GACA,CAAC,KAAK,OAAO,SAAS,sCAAsC,CAAC;CAEhE,MAAM,WAA4C,EAAE,IAAI,mBACvD,OAAO,IAAI,aAAa;EACvB,MAAM,aAAa,OAAO,mBAAmB,WAAW,GAAG;EAC3D,MAAM,cAAc,GAAG,MAAM,YAAY,GAAG;EAC5C,MAAM,wBACL,iBAAiB,OAAO,IAAI,IAAI,gBAAgB,EAAE,KAAK,MAAM,EAAE,QAAQ;AACxE,SAAO,OAAO,OAAO,OACpB,OAAO,IAAI,aAAa;AACvB,UAAO,mBAAmB,MAAM,yBAAyB,cAAc,CAAC;AACxE,UAAO,OAAO,WAAW;IACxB;IACA;IACA,kBAAkB,MAAM;IACxB,oBAAoB,GAAG,MAAM,UAAU,WAAW;IAClD,mBAAmB,GAAG,MAAM,UAAU,OAAO;IAC7C,cAAc;IACd;IACA,iBAAiB;KAChB,KAAK,SAAS;KACd,OAAO,SAAS;KAChB,SAAS,SAAS;KAClB;IACD,CAAC;IACD,CACF;GACA,CAAC,KAAK,OAAO,SAAS,sCAAsC,CAAC;CAEhE,MAAM,OAAqC,OAAO,IAAI,aAAa;EAClE,MAAM,KAAK,OAAO,WAAW;AAI7B,MAAI,EAAC,OAHiB,GACpB,OAAO,MAAM,YAAY,CACzB,KAAK,OAAO,YAAY,OAAO,QAAQ,MAAM,CAAC,CAAC,EACpC,QAAO,EAAE;EACtB,MAAM,MAAM,OAAO,GACjB,cAAc,MAAM,YAAY,CAChC,KAAK,OAAO,YAAY,OAAO,QAAQ,EAAE,CAA0B,CAAC,CAAC;EACvE,MAAM,UAAkC,EAAE;AAC1C,OAAK,MAAM,MAAM,KAAK;AAIrB,OAAI,GAAG,WAAW,YAAY,IAAI,GAAG,WAAW,QAAQ,CAAE;GAC1D,MAAM,WAAW,gBAAgB,GAAG;AACpC,OAAI,aAAa,MAAM;AACtB,WAAO,OAAO,WAAW,2CAA2C,KAAK;AACzE;;GAED,MAAM,MAAM,GAAG,MAAM,YAAY,GAAG;GACpC,MAAM,WAAW,GAAG,IAAI,GAAG,eAAe;AAI1C,OAAI,EAAC,OAHqB,GACxB,OAAO,SAAS,CAChB,KAAK,OAAO,YAAY,OAAO,QAAQ,MAAM,CAAC,CAAC,GAChC;AAChB,YAAQ,KAAK;KAAE;KAAI,WAAW;KAAK,UAAU;KAAM,CAAC;AACpD;;GAED,MAAM,OAAO,OAAO,GAClB,eAAe,SAAS,CACxB,KAAK,OAAO,YAAY,OAAO,QAAQ,GAAG,CAAC,CAAC;AAC9C,OAAI,SAAS,IAAI;AAChB,YAAQ,KAAK;KAAE;KAAI,WAAW;KAAK,UAAU;KAAM,CAAC;AACpD;;GAED,MAAM,MAAM,OAAO,OAAO,IAAI;IAC7B,WAAW,KAAK,MAAM,KAAK;IAC3B,aAAa;IACb,CAAC,CAAC,KAAK,OAAO,YAAY,OAAO,QAAQ,KAAK,CAAC,CAAC;AACjD,OAAI,QAAQ,MAAM;AACjB,YAAQ,KAAK;KAAE;KAAI,WAAW;KAAK,UAAU;KAAM,CAAC;AACpD;;GAED,MAAM,UAAU,OAAO,OAAO,oBAAoB,uBAAuB,CAAC,IAAI,CAAC,KAC9E,OAAO,YAAY,OAAO,QAAQ,KAAK,CAAC,CACxC;AACD,OAAI,YAAY,QAAQ,gBAAgB,QAAQ,GAAG,KAAK,MAAM;AAC7D,WAAO,OAAO,WAAW,8CAA8C,QAAQ,KAAK;AACpF,YAAQ,KAAK;KAAE;KAAI,WAAW;KAAK,UAAU;KAAM,CAAC;AACpD;;AAED,WAAQ,KAAK;IAAE,IAAI;IAAU,WAAW;IAAK,UAAU;IAAS,CAAC;;AAElE,SAAO;GACN,CAAC,KAAK,OAAO,SAAS,6BAA6B,CAAC;CAEtD,MAAM,OAAuC,OAC5C,OAAO,IAAI,aAAa;EACvB,MAAM,aAAa,OAAO,mBAAmB,UAAU,GAAG;EAC1D,MAAM,KAAK,OAAO,WAAW;EAC7B,MAAM,MAAM,GAAG,MAAM,YAAY,GAAG;AACpC,SAAO,OAAO,OACb,OAAO,IAAI,aAAa;AACvB,UAAO,iBAAiB,MAAM,cAAc;AAC5C,UAAO,GAAG,OAAO,KAAK;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC,CAAC,KAAK,OAAO,OAAO;IAC1E,CACF;GACA,CAAC,KAAK,OAAO,SAAS,+BAA+B,CAAC;CAEzD,MAAM,QAAsC,SAC3C,OAAO,IAAI,aAAa;AACvB,SAAO,OAAO,OACb,OAAO,IAAI,aAAa;AACvB,UAAO,iBAAiB,MAAM,cAAc;AAC5C,UAAO,QAAQ;IACd,YAAY;KAAE,KAAK,SAAS;KAAK,OAAO,SAAS;KAAO;IACxD,WAAW,MAAM;IACjB,eAAe,MAAM;IACrB;IACA,eAAe,KAAK;IACpB,WAAW,KAAK;IAChB,CAAC;IACD,CACF;GACA,CAAC,KAAK,OAAO,SAAS,mCAAmC,CAAC;CAE7D,MAAM,SAAwC,EAAE,kBAC/C,OAAO,IAAI,aAAa;EACvB,MAAM,uBACL,gBAAgB,OAAO,IAAI,IAAI,eAAe,EAAE,KAAK,MAAM,EAAE,SAAS;AACvE,SAAO,OAAO,OAAO,OACpB,OAAO,IAAI,aAAa;AACvB,UAAO,mBAAmB,MAAM,yBAAyB,cAAc,CAAC;AACxE,UAAO,OAAO,SAAS;IACtB,WAAW,MAAM;IACjB,kBAAkB;KAAE,KAAK,SAAS;KAAK,OAAO,SAAS;KAAO;IAC9D,aAAa;IACb;IACA,CAAC;IACD,CACF;GACA,CAAC,KAAK,OAAO,SAAS,oCAAoC,CAAC;AAE9D,QAAO,4BAA4B,GAAG;EACrC;EACA;EACA;EACA;EACA;EACA,QAAQ;EACR;EACA;EACA,CAAC;EACD,CACF"}
+{"version":3,"file":"service.mjs","names":[],"sources":["../../../src/orchestrators/snapshot/service.ts"],"sourcesContent":["// Snapshot orchestrator service.\n//\n// Architecture § L3 § Snapshot orchestrator:\n//   \"Collects all `Snapshotable` decls, applies one capture-wide\n//   pause window for managed containers, tars host subtrees with mode\n//   round-trip, commits container writable layers, threads a typed metadata record\n//   (identity guard + per-participant slice), atomic stage-and-swap\n//   for restore, identity-guard fires before any destructive mutation.\"\n//\n// This file is the orchestrator's typed entry point — `capture`,\n// `restore`, `list`, `delete`, `wipe`, `prune` — wired to the\n// cross-process safety primitives (`snapshot.reservation`,\n// `stack.lock`) and the substrate path resolver.\n//\n// The service surface is name-blind. The two participant lists\n// (capture and restore) are populated by the substrate at boot from\n// the `Snapshotable` decls of registered plugins; service-specific\n// behavior never reaches this file. Registration is scope-bound: the\n// supervisor calls `registerParticipant(pluginKey, decl)` from inside\n// each plugin's scope so the registry entry is reaped on plugin\n// teardown.\n\nimport { mintRandomSuffix } from '../../substrate/runtime/random-suffix.ts';\n\nimport { Context, Effect, FileSystem, Layer, Ref, Schema, Scope } from 'effect';\n\nimport type { SnapshotableDecl } from '../../contracts/snapshotable.ts';\nimport type { ContainerRuntime } from '../../contracts/container-runtime.ts';\nimport { ContainerRuntimeService } from '../../runtime/docker/index.ts';\nimport { decodeJsonText } from '../../substrate/runtime/runtime-decode.ts';\nimport { ownHolder } from '../../substrate/runtime/cross-process/liveness.ts';\nimport {\n\tacquireReservation,\n\ttype SnapshotReservationError,\n} from '../../substrate/runtime/cross-process/snapshot-reservation.ts';\nimport {\n\tacquireStackLock,\n\ttype StackLockError,\n} from '../../substrate/runtime/cross-process/stack-lock.ts';\nimport { IdentityContext, StackPathsService } from '../../substrate/runtime/paths.ts';\nimport {\n\trunCapture,\n\ttype CapturePhaseError,\n\ttype SnapshotParticipant,\n\ttype SnapshotProgressReporter,\n} from './capture.ts';\nimport {\n\tSnapshotDescriptorError,\n\tSnapshotLayout,\n\tSnapshotMetadataSchema,\n\tSNAPSHOT_ID_RULE,\n\tparseSnapshotId,\n\ttype SnapshotId,\n\ttype SnapshotCatalogEntry,\n\ttype SnapshotMetadata,\n} from './descriptor.ts';\nimport {\n\ttype IdentityContributionConflictError,\n\ttype IdentityGuardError,\n} from './identity-guard.ts';\nimport { runPrune, type PruneResult, type PrunePhaseError } from './prune.ts';\nimport {\n\trecoverPendingRestore,\n\ttype RestorePendingRecoveryError,\n\ttype RestorePendingRecoverySummary,\n} from './recover-pending.ts';\nimport { runRestore, type RestoreParticipant, type RestorePhaseError } from './restore.ts';\nimport {\n\tstageAndSwap,\n\ttype StageAndSwapError,\n} from '../../substrate/runtime/stage-and-swap/index.ts';\nimport { planWipe, runWipe, type WipePhaseError, type WipeTargets } from './wipe.ts';\n\n// -----------------------------------------------------------------------------\n// The service shape\n// -----------------------------------------------------------------------------\n\n/** Tagged union of every error the orchestrator surface can surface.\n *  Callers `catchTags` on the precise tags they care about. */\nexport type SnapshotOrchestratorError =\n\t| CapturePhaseError\n\t| RestorePhaseError\n\t| RestorePendingRecoveryError\n\t| WipePhaseError\n\t| PrunePhaseError\n\t| IdentityGuardError\n\t| IdentityContributionConflictError\n\t| StageAndSwapError\n\t| SnapshotReservationError\n\t| StackLockError\n\t| SnapshotIdError\n\t| SnapshotDescriptorError;\n\nexport class SnapshotIdError extends Schema.TaggedErrorClass<SnapshotIdError>()('SnapshotIdError', {\n\toperation: Schema.Literals(['capture', 'restore', 'delete']),\n\tfield: Schema.Literals(['id', 'name']),\n\tvalue: Schema.String,\n\tdetail: Schema.String,\n}) {}\n\nexport interface SnapshotOrchestrator {\n\t/** Register a `SnapshotableDecl` from a plugin. Scope-bound — when\n\t *  the caller's scope (the plugin's acquire scope) closes, the\n\t *  registration is reaped. The supervisor calls this once per\n\t *  `SnapshotableDecl` on each plugin's `capabilities` tuple.\n\t *\n\t *  `captureIdentity` / `captureContribution` are separately wired\n\t *  hooks (not on `SnapshotableDecl` itself) — they plumb through\n\t *  the plugin's resolved value. Identity is validated by the\n\t *  orchestrator; contribution payloads are persisted as opaque JSON\n\t *  that plugins must validate at their own boundary if they read it. */\n\treadonly registerParticipant: (\n\t\tpluginKey: string,\n\t\tdecl: SnapshotableDecl,\n\t\thooks?: {\n\t\t\treadonly captureIdentity?: Effect.Effect<Readonly<Record<string, string>>>;\n\t\t\treadonly captureContribution?: Effect.Effect<unknown>;\n\t\t\treadonly liveIdentity?: Effect.Effect<Readonly<Record<string, string>>>;\n\t\t},\n\t) => Effect.Effect<void, never, Scope.Scope>;\n\n\t/** Capture a new snapshot. The id MAY be caller-supplied; if\n\t *  omitted, the substrate mints a random suffix to sidestep the\n\t *  concurrent-saves-against-same-id silent overwrite.\n\t *\n\t *  `participants` overrides the registered set — primarily for\n\t *  tests. Production callers omit it; the orchestrator reads the\n\t *  registered list. */\n\treadonly capture: (args: {\n\t\treadonly id?: string;\n\t\treadonly label?: string;\n\t\treadonly participants?: ReadonlyArray<SnapshotParticipant>;\n\t\treadonly onProgress?: SnapshotProgressReporter;\n\t}) => Effect.Effect<SnapshotMetadata, SnapshotOrchestratorError, FileSystem.FileSystem>;\n\n\t/** Restore from a previously-captured artifact id. Refuses on\n\t *  identity mismatch BEFORE any destructive mutation. */\n\treadonly restore: (args: {\n\t\treadonly id: string;\n\t\treadonly participants?: ReadonlyArray<RestoreParticipant>;\n\t}) => Effect.Effect<SnapshotMetadata, SnapshotOrchestratorError, FileSystem.FileSystem>;\n\n\t/** Catalog list — tolerates partial / corrupt entries (they appear\n\t *  with `metadata: null`). */\n\treadonly list: Effect.Effect<\n\t\tReadonlyArray<SnapshotCatalogEntry>,\n\t\tSnapshotOrchestratorError,\n\t\tFileSystem.FileSystem\n\t>;\n\n\t/** Delete one artifact by id. Idempotent — missing id is a no-op. */\n\treadonly delete: (\n\t\tid: string,\n\t) => Effect.Effect<void, SnapshotOrchestratorError, FileSystem.FileSystem>;\n\n\t/** Wipe the live (`app`, `stack`) footprint; preserves the\n\t *  snapshot catalog by default. Stack-local artifact cache is\n\t *  removed unless `keepCache` is explicitly true. */\n\treadonly wipe: (args: {\n\t\treadonly keepSnapshots?: boolean;\n\t\treadonly keepCache?: boolean;\n\t}) => Effect.Effect<void, SnapshotOrchestratorError, FileSystem.FileSystem>;\n\n\t/** Enumerate the concrete teardown targets a `wipe` of the same\n\t *  `(app, stack)` would remove WITHOUT removing anything — the\n\t *  read-only preview behind `devstack wipe --dry-run`. Same args as\n\t *  `wipe` so the preview honors the same `keepSnapshots`/`keepCache`\n\t *  preservation policy the real wipe applies. */\n\treadonly wipePlan: (args: {\n\t\treadonly keepSnapshots?: boolean;\n\t\treadonly keepCache?: boolean;\n\t}) => Effect.Effect<WipeTargets, SnapshotOrchestratorError, FileSystem.FileSystem>;\n\n\t/** Prune the snapshot catalog (reaps partial artifacts) and sweeps\n\t *  byproduct images via the runtime adapter's label-scoped cleanup. */\n\treadonly prune: () => Effect.Effect<\n\t\tPruneResult,\n\t\tSnapshotOrchestratorError,\n\t\tFileSystem.FileSystem\n\t>;\n\n\t/** Recover from a snapshot-restore that crashed mid-way through the\n\t *  post-publish Docker handoff. Reads the on-disk pending marker,\n\t *  retries each outstanding image promote, and clears the marker.\n\t *  Idempotent — safe to call on every supervise startup; a no-op\n\t *  when no marker is present. */\n\treadonly recoverPendingRestore: Effect.Effect<\n\t\tRestorePendingRecoverySummary,\n\t\tSnapshotOrchestratorError,\n\t\tFileSystem.FileSystem\n\t>;\n}\n\nexport class SnapshotOrchestratorService extends Context.Service<\n\tSnapshotOrchestratorService,\n\tSnapshotOrchestrator\n>()('@devstack/orchestrators/Snapshot') {}\n\n// -----------------------------------------------------------------------------\n// Helpers\n// -----------------------------------------------------------------------------\n\n/** Mint a snapshot id when the caller didn't pass one. Carries an\n *  8-hex random suffix from `crypto.randomUUID()` (STYLE_GUIDE §17) so\n *  concurrent saves don't silently overwrite. */\nconst mintId = (prefix = 'snap'): string => `${prefix}-${Date.now()}-${mintRandomSuffix(8)}`;\n\nconst mintSnapshotId = (): Effect.Effect<SnapshotId, SnapshotDescriptorError> => {\n\tconst raw = mintId();\n\tconst id = parseSnapshotId(raw);\n\treturn id === null\n\t\t? Effect.fail(\n\t\t\t\tnew SnapshotDescriptorError({\n\t\t\t\t\tkind: 'invalid-id',\n\t\t\t\t\tdetail: 'internal snapshot id minting produced an invalid id',\n\t\t\t\t\tvalue: raw,\n\t\t\t\t}),\n\t\t\t)\n\t\t: Effect.succeed(id);\n};\n\nconst mintSnapshotName = (): string => {\n\tconst stamp = new Date().toISOString().replaceAll('-', '').replaceAll(':', '').slice(0, 15);\n\treturn `manual-${stamp}-${mintRandomSuffix(8)}`;\n};\n\nconst validateSnapshotId = (\n\toperation: SnapshotIdError['operation'],\n\tvalue: string,\n): Effect.Effect<SnapshotId, SnapshotIdError> => {\n\tconst id = parseSnapshotId(value);\n\treturn id === null\n\t\t? Effect.fail(\n\t\t\t\tnew SnapshotIdError({\n\t\t\t\t\toperation,\n\t\t\t\t\tfield: 'id',\n\t\t\t\t\tvalue,\n\t\t\t\t\tdetail: SNAPSHOT_ID_RULE,\n\t\t\t\t}),\n\t\t\t)\n\t\t: Effect.succeed(id);\n};\n\nconst normalizeSnapshotName = (\n\toperation: SnapshotIdError['operation'],\n\tname: string | undefined,\n): Effect.Effect<string, SnapshotIdError> => {\n\tif (name === undefined) return Effect.succeed(mintSnapshotName());\n\tconst normalized = name.trim();\n\tif (normalized.length === 0 || normalized.includes('\\0') || normalized.length > 128) {\n\t\treturn Effect.fail(\n\t\t\tnew SnapshotIdError({\n\t\t\t\toperation,\n\t\t\t\tfield: 'name',\n\t\t\t\tvalue: name,\n\t\t\t\tdetail:\n\t\t\t\t\t'snapshot names must be 1-128 characters after trimming and cannot contain NUL bytes',\n\t\t\t}),\n\t\t);\n\t}\n\treturn Effect.succeed(normalized);\n};\n\n/** Read this process's canonical startTime stamp for the snapshot\n *  reservation liveness check. Returns `null` when the kernel-probe\n *  couldn't determine startTime — matches `RosterHolderSchema.startTime`\n *  semantics and is honored by the sweep's `checkHolderLiveness`\n *  null-conservative short-circuit. */\nconst ownStartTime = (): number | null => ownHolder('snapshot').startTime;\n\nconst normalizeIdentityValue = (value: unknown): unknown => {\n\tif (Array.isArray(value)) return value.map(normalizeIdentityValue);\n\tif (value !== null && typeof value === 'object') {\n\t\treturn Object.fromEntries(\n\t\t\tObject.entries(value)\n\t\t\t\t.sort(([a], [b]) => a.localeCompare(b))\n\t\t\t\t.map(([key, nested]) => [key, normalizeIdentityValue(nested)]),\n\t\t);\n\t}\n\treturn value;\n};\n\nconst stableIdentityString = (value: unknown): string => {\n\tconst encoded = JSON.stringify(normalizeIdentityValue(value));\n\treturn encoded ?? String(value);\n};\n\nconst identityHookFromDecl = (\n\tpluginKey: string,\n\tdecl: SnapshotableDecl,\n): Effect.Effect<Readonly<Record<string, string>>> =>\n\tdecl.preRestore === undefined\n\t\t? Effect.succeed({})\n\t\t: decl.preRestore.pipe(Effect.map((value) => ({ [pluginKey]: stableIdentityString(value) })));\n\n// -----------------------------------------------------------------------------\n// Layer\n// -----------------------------------------------------------------------------\n\n/**\n * Wire the orchestrator from the substrate's path resolver + the\n * runtime container adapter.\n *\n * Discipline:\n *   - Capture/restore acquire `snapshot.reservation` (O_EXCL,\n *     no retry) — concurrent capture is structurally refused.\n *   - List/delete/wipe acquire `stack.lock` briefly (no reservation\n *     needed; they don't pause containers).\n *   - Prune acquires both — it walks the catalog AND sweeps images.\n */\n/** Per-plugin participant registration entry kept on the orchestrator's\n *  inner ref. Sequence number lets parallel registrations under the\n *  same key be reaped independently when their owning scopes close. */\ninterface RegisteredParticipantEntry {\n\treadonly pluginKey: string;\n\treadonly capture: SnapshotParticipant;\n\treadonly restore: RestoreParticipant;\n\treadonly seq: number;\n}\n\nexport const layerSnapshotOrchestrator: Layer.Layer<\n\tSnapshotOrchestratorService,\n\tnever,\n\tStackPathsService | IdentityContext | ContainerRuntimeService\n> = Layer.effect(\n\tSnapshotOrchestratorService,\n\tEffect.gen(function* () {\n\t\tconst paths = yield* StackPathsService;\n\t\tconst identity = yield* IdentityContext;\n\t\tconst runtime: ContainerRuntime = yield* ContainerRuntimeService;\n\n\t\t// Scope-local participant registry. The supervisor adds entries\n\t\t// from each plugin's acquire scope; finalizers remove them on\n\t\t// scope close. Sequence number protects against the parallel-\n\t\t// registration-same-key race when two stack instances register\n\t\t// concurrently.\n\t\tconst participantsRef = yield* Ref.make<ReadonlyArray<RegisteredParticipantEntry>>([]);\n\t\tconst seqRef = yield* Ref.make(0);\n\n\t\tconst registerParticipant: SnapshotOrchestrator['registerParticipant'] = (\n\t\t\tpluginKey,\n\t\t\tdecl,\n\t\t\thooks,\n\t\t) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst seq = yield* Ref.updateAndGet(seqRef, (n) => n + 1);\n\t\t\t\tconst declIdentity = identityHookFromDecl(pluginKey, decl);\n\t\t\t\tconst capture: SnapshotParticipant = {\n\t\t\t\t\tplugin: pluginKey,\n\t\t\t\t\tdecl,\n\t\t\t\t\tcaptureIdentity: hooks?.captureIdentity ?? declIdentity,\n\t\t\t\t\tcaptureContribution: hooks?.captureContribution ?? Effect.succeed<unknown>(undefined),\n\t\t\t\t};\n\t\t\t\tconst restore: RestoreParticipant = {\n\t\t\t\t\tplugin: pluginKey,\n\t\t\t\t\tliveIdentity: hooks?.liveIdentity ?? declIdentity,\n\t\t\t\t\tpostRestore: decl.postRestore as Effect.Effect<void> | undefined,\n\t\t\t\t};\n\t\t\t\tconst entry: RegisteredParticipantEntry = { pluginKey, capture, restore, seq };\n\t\t\t\tyield* Ref.update(participantsRef, (xs) => [...xs, entry]);\n\t\t\t\tyield* Effect.addFinalizer(() =>\n\t\t\t\t\tRef.update(participantsRef, (xs) => xs.filter((e) => e.seq !== seq)),\n\t\t\t\t);\n\t\t\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t\t\t'snapshot.participant.plugin': pluginKey,\n\t\t\t\t\t'snapshot.participant.subtrees': decl.subtrees.length,\n\t\t\t\t});\n\t\t\t}).pipe(Effect.withSpan('orchestrator.snapshot.registerParticipant')) as Effect.Effect<\n\t\t\t\tvoid,\n\t\t\t\tnever,\n\t\t\t\tScope.Scope\n\t\t\t>;\n\n\t\tconst capture: SnapshotOrchestrator['capture'] = ({ id, label, participants, onProgress }) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst snapshotId =\n\t\t\t\t\tid === undefined ? yield* mintSnapshotId() : yield* validateSnapshotId('capture', id);\n\t\t\t\tconst snapshotName = yield* normalizeSnapshotName('capture', label);\n\t\t\t\tconst effectiveParticipants =\n\t\t\t\t\tparticipants ?? (yield* Ref.get(participantsRef)).map((e) => e.capture);\n\t\t\t\tconst artifactDir = `${paths.snapshotDir}/${snapshotId}`;\n\t\t\t\t// Snapshot stages at the SNAPSHOT-DIR level (siblings of\n\t\t\t\t// other artifact dirs, NOT siblings of `artifactDir`) so\n\t\t\t\t// the `list` walker's `.staging.` / `.bak.` prefix skip\n\t\t\t\t// at line 517 keeps transient dirs invisible without\n\t\t\t\t// having to descend a level. This layout is structurally\n\t\t\t\t// distinct from `${target}.staging.<id>` so we pass\n\t\t\t\t// explicit `stagingPath`/`backupPath` instead of\n\t\t\t\t// `idSuffix` (the substrate primitive supports both\n\t\t\t\t// shapes — see `stageAndSwap`'s union arg).\n\t\t\t\tconst stagingDir = `${paths.snapshotDir}/.staging.${snapshotId}`;\n\t\t\t\tconst backupDir = `${paths.snapshotDir}/.bak.${snapshotId}`;\n\n\t\t\t\t// Acquire `snapshot.reservation` (O_EXCL, no retry) for the\n\t\t\t\t// duration of the capture. The stack.lock is acquired\n\t\t\t\t// briefly inside `stageAndSwap` for the rename publish.\n\t\t\t\treturn yield* Effect.scoped(\n\t\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\t\tyield* acquireReservation(paths.snapshotReservationFile, ownStartTime());\n\t\t\t\t\t\tconst fs = yield* FileSystem.FileSystem;\n\t\t\t\t\t\tconst targetExists = yield* fs\n\t\t\t\t\t\t\t.exists(artifactDir)\n\t\t\t\t\t\t\t.pipe(Effect.catch(() => Effect.succeed(false)));\n\t\t\t\t\t\tif (targetExists) {\n\t\t\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\t\t\tnew SnapshotIdError({\n\t\t\t\t\t\t\t\t\toperation: 'capture',\n\t\t\t\t\t\t\t\t\tfield: 'id',\n\t\t\t\t\t\t\t\t\tvalue: snapshotId,\n\t\t\t\t\t\t\t\t\tdetail: 'snapshot id already exists',\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\t\t\t\t\t\t// O(N) catalog scan for label uniqueness — acceptable\n\t\t\t\t\t\t// because N (snapshot count per stack) is small in\n\t\t\t\t\t\t// practice and capture is a rare, human-paced verb. A\n\t\t\t\t\t\t// future optimization could maintain a sibling name-\n\t\t\t\t\t\t// index (e.g. `${snapshotDir}/.names/${label}` empty\n\t\t\t\t\t\t// marker files) that lets uniqueness collapse to a\n\t\t\t\t\t\t// single `fs.exists`, but that would need a paired\n\t\t\t\t\t\t// cleanup-on-delete pathway + a corruption-tolerance\n\t\t\t\t\t\t// story for the sidecar, which is outside this scope.\n\t\t\t\t\t\t//\n\t\t\t\t\t\t// Forward-reference safety: `list` is declared LATER\n\t\t\t\t\t\t// in this outer `Effect.gen` body. No TDZ fires\n\t\t\t\t\t\t// because `capture` is an arrow function returned\n\t\t\t\t\t\t// from the gen — by the time any caller invokes it,\n\t\t\t\t\t\t// the outer gen has fully resolved and all `const`\n\t\t\t\t\t\t// bindings (including `list`) are bound. The\n\t\t\t\t\t\t// regression guard at\n\t\t\t\t\t\t// test/orchestrators/snapshot/capture-collision-tdz.test.ts\n\t\t\t\t\t\t// pins this; if a future refactor wraps `list` in\n\t\t\t\t\t\t// an `Effect.fn` decorator or extracts it through a\n\t\t\t\t\t\t// hoisting-sensitive path, the guard will fail.\n\t\t\t\t\t\tconst existing = yield* list;\n\t\t\t\t\t\tif (existing.some((entry) => entry.metadata?.label === snapshotName)) {\n\t\t\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\t\t\tnew SnapshotIdError({\n\t\t\t\t\t\t\t\t\toperation: 'capture',\n\t\t\t\t\t\t\t\t\tfield: 'name',\n\t\t\t\t\t\t\t\t\tvalue: snapshotName,\n\t\t\t\t\t\t\t\t\tdetail: 'snapshot name already exists',\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\t// Stage-and-swap publishes the artifact directory\n\t\t\t\t\t\t// atomically — external watchers (and `list`)\n\t\t\t\t\t\t// never observe a half-written tree.\n\t\t\t\t\t\tconst meta = yield* stageAndSwap({\n\t\t\t\t\t\t\ttargetPath: artifactDir,\n\t\t\t\t\t\t\tstagingPath: stagingDir,\n\t\t\t\t\t\t\tbackupPath: backupDir,\n\t\t\t\t\t\t\tbuild: runCapture({\n\t\t\t\t\t\t\t\tstagingDir,\n\t\t\t\t\t\t\t\tsnapshotId,\n\t\t\t\t\t\t\t\tlabel: snapshotName,\n\t\t\t\t\t\t\t\tapp: identity.app,\n\t\t\t\t\t\t\t\tstack: identity.stack,\n\t\t\t\t\t\t\t\tnetwork: identity.chain,\n\t\t\t\t\t\t\t\truntimeStackRoot: paths.stackRoot,\n\t\t\t\t\t\t\t\tstateFilePath: paths.stateFile,\n\t\t\t\t\t\t\t\tparticipants: effectiveParticipants,\n\t\t\t\t\t\t\t\truntime,\n\t\t\t\t\t\t\t\tonProgress,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t});\n\t\t\t\t\t\treturn meta;\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}).pipe(Effect.withSpan('orchestrator.snapshot.capture.entry'));\n\n\t\tconst restore: SnapshotOrchestrator['restore'] = ({ id, participants }) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst snapshotId = yield* validateSnapshotId('restore', id);\n\t\t\t\tconst artifactDir = `${paths.snapshotDir}/${snapshotId}`;\n\t\t\t\tconst effectiveParticipants =\n\t\t\t\t\tparticipants ?? (yield* Ref.get(participantsRef)).map((e) => e.restore);\n\t\t\t\treturn yield* Effect.scoped(\n\t\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\t\tyield* acquireReservation(paths.snapshotReservationFile, ownStartTime());\n\t\t\t\t\t\treturn yield* runRestore({\n\t\t\t\t\t\t\tsnapshotId,\n\t\t\t\t\t\t\tartifactDir,\n\t\t\t\t\t\t\truntimeStackRoot: paths.stackRoot,\n\t\t\t\t\t\t\truntimeStagingPath: `${paths.stackRoot}.staging.${snapshotId}`,\n\t\t\t\t\t\t\truntimeBackupPath: `${paths.stackRoot}.bak.${snapshotId}`,\n\t\t\t\t\t\t\tparticipants: effectiveParticipants,\n\t\t\t\t\t\t\truntime,\n\t\t\t\t\t\t\truntimeIdentity: {\n\t\t\t\t\t\t\t\tapp: identity.app,\n\t\t\t\t\t\t\t\tstack: identity.stack,\n\t\t\t\t\t\t\t\tnetwork: identity.chain,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t});\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}).pipe(Effect.withSpan('orchestrator.snapshot.restore.entry'));\n\n\t\tconst list: SnapshotOrchestrator['list'] = Effect.gen(function* () {\n\t\t\tconst fs = yield* FileSystem.FileSystem;\n\t\t\tconst exists = yield* fs\n\t\t\t\t.exists(paths.snapshotDir)\n\t\t\t\t.pipe(Effect.catch(() => Effect.succeed(false)));\n\t\t\tif (!exists) return [];\n\t\t\tconst ids = yield* fs\n\t\t\t\t.readDirectory(paths.snapshotDir)\n\t\t\t\t.pipe(Effect.catch(() => Effect.succeed([] as ReadonlyArray<string>)));\n\t\t\tconst entries: SnapshotCatalogEntry[] = [];\n\t\t\tfor (const id of ids) {\n\t\t\t\t// Skip transient staging/backup directories — they're\n\t\t\t\t// invisible to the catalog by construction (the\n\t\t\t\t// `.staging.<id>` / `.bak.<id>` naming).\n\t\t\t\tif (id.startsWith('.staging.') || id.startsWith('.bak.')) continue;\n\t\t\t\tconst parsedId = parseSnapshotId(id);\n\t\t\t\tif (parsedId === null) {\n\t\t\t\t\tyield* Effect.logWarning(`ignoring unsafe snapshot catalog entry: ${id}`);\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tconst dir = `${paths.snapshotDir}/${id}`;\n\t\t\t\tconst metaPath = `${dir}/${SnapshotLayout.metaFile}`;\n\t\t\t\tconst metaExists = yield* fs\n\t\t\t\t\t.exists(metaPath)\n\t\t\t\t\t.pipe(Effect.catch(() => Effect.succeed(false)));\n\t\t\t\tif (!metaExists) {\n\t\t\t\t\tentries.push({ id, directory: dir, metadata: null });\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tconst text = yield* fs\n\t\t\t\t\t.readFileString(metaPath)\n\t\t\t\t\t.pipe(Effect.catch(() => Effect.succeed('')));\n\t\t\t\tif (text === '') {\n\t\t\t\t\tentries.push({ id, directory: dir, metadata: null });\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tconst decoded = yield* decodeJsonText(SnapshotMetadataSchema, text, {\n\t\t\t\t\tsource: metaPath,\n\t\t\t\t\tmkError: () => null,\n\t\t\t\t}).pipe(Effect.catch(() => Effect.succeed(null)));\n\t\t\t\tif (decoded !== null && parseSnapshotId(decoded.id) === null) {\n\t\t\t\t\tyield* Effect.logWarning(`ignoring snapshot metadata with unsafe id: ${decoded.id}`);\n\t\t\t\t\tentries.push({ id, directory: dir, metadata: null });\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tentries.push({ id: parsedId, directory: dir, metadata: decoded });\n\t\t\t}\n\t\t\treturn entries;\n\t\t}).pipe(Effect.withSpan('orchestrator.snapshot.list'));\n\n\t\tconst del: SnapshotOrchestrator['delete'] = (id) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst snapshotId = yield* validateSnapshotId('delete', id);\n\t\t\t\tconst fs = yield* FileSystem.FileSystem;\n\t\t\t\tconst dir = `${paths.snapshotDir}/${snapshotId}`;\n\t\t\t\tyield* Effect.scoped(\n\t\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\t\tyield* acquireStackLock(paths.stackLockFile);\n\t\t\t\t\t\tyield* fs.remove(dir, { recursive: true, force: true }).pipe(Effect.ignore);\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}).pipe(Effect.withSpan('orchestrator.snapshot.delete'));\n\n\t\tconst wipe: SnapshotOrchestrator['wipe'] = (args) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tyield* Effect.scoped(\n\t\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\t\tyield* acquireStackLock(paths.stackLockFile);\n\t\t\t\t\t\tyield* runWipe({\n\t\t\t\t\t\t\tlabelMatch: { app: identity.app, stack: identity.stack },\n\t\t\t\t\t\t\tstackRoot: paths.stackRoot,\n\t\t\t\t\t\t\tstateFilePath: paths.stateFile,\n\t\t\t\t\t\t\truntime,\n\t\t\t\t\t\t\tkeepSnapshots: args.keepSnapshots,\n\t\t\t\t\t\t\tkeepCache: args.keepCache,\n\t\t\t\t\t\t});\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}).pipe(Effect.withSpan('orchestrator.snapshot.wipe.entry'));\n\n\t\tconst wipePlan: SnapshotOrchestrator['wipePlan'] = (args) =>\n\t\t\t// Read-only: no stack-lock / reservation. `planWipe` only lists\n\t\t\t// matching containers and reads the stack-root directory, so it\n\t\t\t// is safe to run without serializing against peers (a concurrent\n\t\t\t// mutation just makes the preview slightly stale — acceptable for\n\t\t\t// a dry-run estimate).\n\t\t\tplanWipe({\n\t\t\t\tlabelMatch: { app: identity.app, stack: identity.stack },\n\t\t\t\tstackRoot: paths.stackRoot,\n\t\t\t\tstateFilePath: paths.stateFile,\n\t\t\t\truntime,\n\t\t\t\tkeepSnapshots: args.keepSnapshots,\n\t\t\t\tkeepCache: args.keepCache,\n\t\t\t}).pipe(Effect.withSpan('orchestrator.snapshot.wipe.plan.entry'));\n\n\t\tconst prune: SnapshotOrchestrator['prune'] = () =>\n\t\t\tEffect.scoped(\n\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\tyield* acquireReservation(paths.snapshotReservationFile, ownStartTime());\n\t\t\t\t\treturn yield* runPrune({\n\t\t\t\t\t\tstackRoot: paths.stackRoot,\n\t\t\t\t\t\timageLabelFilter: { app: identity.app, stack: identity.stack },\n\t\t\t\t\t\truntime,\n\t\t\t\t\t});\n\t\t\t\t}),\n\t\t\t).pipe(Effect.withSpan('orchestrator.snapshot.prune.entry'));\n\n\t\tconst recoverPendingRestoreImpl: SnapshotOrchestrator['recoverPendingRestore'] =\n\t\t\trecoverPendingRestore(paths.stackRoot, runtime).pipe(\n\t\t\t\tEffect.withSpan('orchestrator.snapshot.recover-pending.entry'),\n\t\t\t);\n\n\t\treturn SnapshotOrchestratorService.of({\n\t\t\tregisterParticipant,\n\t\t\tcapture,\n\t\t\trestore,\n\t\t\tlist,\n\t\t\tdelete: del,\n\t\t\twipe,\n\t\t\twipePlan,\n\t\t\tprune,\n\t\t\trecoverPendingRestore: recoverPendingRestoreImpl,\n\t\t});\n\t}),\n);\n"],"mappings":";;;;;;;;;;;;;;;;;;AA6FA,IAAa,kBAAb,cAAqC,OAAO,kBAAmC,CAAC,mBAAmB;CAClG,WAAW,OAAO,SAAS;EAAC;EAAW;EAAW;EAAS,CAAC;CAC5D,OAAO,OAAO,SAAS,CAAC,MAAM,OAAO,CAAC;CACtC,OAAO,OAAO;CACd,QAAQ,OAAO;CACf,CAAC,CAAC;AA+FH,IAAa,8BAAb,cAAiD,QAAQ,SAGtD,CAAC,mCAAmC,CAAC;;;;AASxC,MAAM,UAAU,SAAS,WAAmB,GAAG,OAAO,GAAG,KAAK,KAAK,CAAC,GAAG,iBAAiB,EAAE;AAE1F,MAAM,uBAA2E;CAChF,MAAM,MAAM,QAAQ;CACpB,MAAM,KAAK,gBAAgB,IAAI;AAC/B,QAAO,OAAO,OACX,OAAO,KACP,IAAI,wBAAwB;EAC3B,MAAM;EACN,QAAQ;EACR,OAAO;EACP,CAAC,CACF,GACA,OAAO,QAAQ,GAAG;;AAGtB,MAAM,yBAAiC;AAEtC,QAAO,2BADO,IAAI,MAAM,EAAC,aAAa,CAAC,WAAW,KAAK,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC,MAAM,GAAG,GAClE,CAAC,GAAG,iBAAiB,EAAE;;AAG9C,MAAM,sBACL,WACA,UACgD;CAChD,MAAM,KAAK,gBAAgB,MAAM;AACjC,QAAO,OAAO,OACX,OAAO,KACP,IAAI,gBAAgB;EACnB;EACA,OAAO;EACP;EACA,QAAQ;EACR,CAAC,CACF,GACA,OAAO,QAAQ,GAAG;;AAGtB,MAAM,yBACL,WACA,SAC4C;AAC5C,KAAI,SAAS,KAAA,EAAW,QAAO,OAAO,QAAQ,kBAAkB,CAAC;CACjE,MAAM,aAAa,KAAK,MAAM;AAC9B,KAAI,WAAW,WAAW,KAAK,WAAW,SAAS,KAAK,IAAI,WAAW,SAAS,IAC/E,QAAO,OAAO,KACb,IAAI,gBAAgB;EACnB;EACA,OAAO;EACP,OAAO;EACP,QACC;EACD,CAAC,CACF;AAEF,QAAO,OAAO,QAAQ,WAAW;;;;;;;AAQlC,MAAM,qBAAoC,UAAU,WAAW,CAAC;AAEhE,MAAM,0BAA0B,UAA4B;AAC3D,KAAI,MAAM,QAAQ,MAAM,CAAE,QAAO,MAAM,IAAI,uBAAuB;AAClE,KAAI,UAAU,QAAQ,OAAO,UAAU,SACtC,QAAO,OAAO,YACb,OAAO,QAAQ,MAAM,CACnB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC,CACtC,KAAK,CAAC,KAAK,YAAY,CAAC,KAAK,uBAAuB,OAAO,CAAC,CAAC,CAC/D;AAEF,QAAO;;AAGR,MAAM,wBAAwB,UAA2B;AAExD,QADgB,KAAK,UAAU,uBAAuB,MAAM,CAC9C,IAAI,OAAO,MAAM;;AAGhC,MAAM,wBACL,WACA,SAEA,KAAK,eAAe,KAAA,IACjB,OAAO,QAAQ,EAAE,CAAC,GAClB,KAAK,WAAW,KAAK,OAAO,KAAK,WAAW,GAAG,YAAY,qBAAqB,MAAM,EAAE,EAAE,CAAC;AA2B/F,MAAa,4BAIT,MAAM,OACT,6BACA,OAAO,IAAI,aAAa;CACvB,MAAM,QAAQ,OAAO;CACrB,MAAM,WAAW,OAAO;CACxB,MAAM,UAA4B,OAAO;CAOzC,MAAM,kBAAkB,OAAO,IAAI,KAAgD,EAAE,CAAC;CACtF,MAAM,SAAS,OAAO,IAAI,KAAK,EAAE;CAEjC,MAAM,uBACL,WACA,MACA,UAEA,OAAO,IAAI,aAAa;EACvB,MAAM,MAAM,OAAO,IAAI,aAAa,SAAS,MAAM,IAAI,EAAE;EACzD,MAAM,eAAe,qBAAqB,WAAW,KAAK;EAY1D,MAAM,QAAoC;GAAE;GAAW,SAAA;IAVtD,QAAQ;IACR;IACA,iBAAiB,OAAO,mBAAmB;IAC3C,qBAAqB,OAAO,uBAAuB,OAAO,QAAiB,KAAA,EAAU;IAOxB;GAAE,SAAA;IAJ/D,QAAQ;IACR,cAAc,OAAO,gBAAgB;IACrC,aAAa,KAAK;IAEoD;GAAE;GAAK;AAC9E,SAAO,IAAI,OAAO,kBAAkB,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC;AAC1D,SAAO,OAAO,mBACb,IAAI,OAAO,kBAAkB,OAAO,GAAG,QAAQ,MAAM,EAAE,QAAQ,IAAI,CAAC,CACpE;AACD,SAAO,OAAO,oBAAoB;GACjC,+BAA+B;GAC/B,iCAAiC,KAAK,SAAS;GAC/C,CAAC;GACD,CAAC,KAAK,OAAO,SAAS,4CAA4C,CAAC;CAMtE,MAAM,WAA4C,EAAE,IAAI,OAAO,cAAc,iBAC5E,OAAO,IAAI,aAAa;EACvB,MAAM,aACL,OAAO,KAAA,IAAY,OAAO,gBAAgB,GAAG,OAAO,mBAAmB,WAAW,GAAG;EACtF,MAAM,eAAe,OAAO,sBAAsB,WAAW,MAAM;EACnE,MAAM,wBACL,iBAAiB,OAAO,IAAI,IAAI,gBAAgB,EAAE,KAAK,MAAM,EAAE,QAAQ;EACxE,MAAM,cAAc,GAAG,MAAM,YAAY,GAAG;EAU5C,MAAM,aAAa,GAAG,MAAM,YAAY,YAAY;EACpD,MAAM,YAAY,GAAG,MAAM,YAAY,QAAQ;AAK/C,SAAO,OAAO,OAAO,OACpB,OAAO,IAAI,aAAa;AACvB,UAAO,mBAAmB,MAAM,yBAAyB,cAAc,CAAC;AAKxE,OAAI,QAHwB,OADV,WAAW,YAE3B,OAAO,YAAY,CACnB,KAAK,OAAO,YAAY,OAAO,QAAQ,MAAM,CAAC,CAAC,CAEhD,QAAO,OAAO,OAAO,KACpB,IAAI,gBAAgB;IACnB,WAAW;IACX,OAAO;IACP,OAAO;IACP,QAAQ;IACR,CAAC,CACF;AAwBF,QAAI,OADoB,MACX,MAAM,UAAU,MAAM,UAAU,UAAU,aAAa,CACnE,QAAO,OAAO,OAAO,KACpB,IAAI,gBAAgB;IACnB,WAAW;IACX,OAAO;IACP,OAAO;IACP,QAAQ;IACR,CAAC,CACF;AAwBF,UAAO,OAlBa,aAAa;IAChC,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,OAAO,WAAW;KACjB;KACA;KACA,OAAO;KACP,KAAK,SAAS;KACd,OAAO,SAAS;KAChB,SAAS,SAAS;KAClB,kBAAkB,MAAM;KACxB,eAAe,MAAM;KACrB,cAAc;KACd;KACA;KACA,CAAC;IACF,CAAC;IAED,CACF;GACA,CAAC,KAAK,OAAO,SAAS,sCAAsC,CAAC;CAEhE,MAAM,WAA4C,EAAE,IAAI,mBACvD,OAAO,IAAI,aAAa;EACvB,MAAM,aAAa,OAAO,mBAAmB,WAAW,GAAG;EAC3D,MAAM,cAAc,GAAG,MAAM,YAAY,GAAG;EAC5C,MAAM,wBACL,iBAAiB,OAAO,IAAI,IAAI,gBAAgB,EAAE,KAAK,MAAM,EAAE,QAAQ;AACxE,SAAO,OAAO,OAAO,OACpB,OAAO,IAAI,aAAa;AACvB,UAAO,mBAAmB,MAAM,yBAAyB,cAAc,CAAC;AACxE,UAAO,OAAO,WAAW;IACxB;IACA;IACA,kBAAkB,MAAM;IACxB,oBAAoB,GAAG,MAAM,UAAU,WAAW;IAClD,mBAAmB,GAAG,MAAM,UAAU,OAAO;IAC7C,cAAc;IACd;IACA,iBAAiB;KAChB,KAAK,SAAS;KACd,OAAO,SAAS;KAChB,SAAS,SAAS;KAClB;IACD,CAAC;IACD,CACF;GACA,CAAC,KAAK,OAAO,SAAS,sCAAsC,CAAC;CAEhE,MAAM,OAAqC,OAAO,IAAI,aAAa;EAClE,MAAM,KAAK,OAAO,WAAW;AAI7B,MAAI,EAAC,OAHiB,GACpB,OAAO,MAAM,YAAY,CACzB,KAAK,OAAO,YAAY,OAAO,QAAQ,MAAM,CAAC,CAAC,EACpC,QAAO,EAAE;EACtB,MAAM,MAAM,OAAO,GACjB,cAAc,MAAM,YAAY,CAChC,KAAK,OAAO,YAAY,OAAO,QAAQ,EAAE,CAA0B,CAAC,CAAC;EACvE,MAAM,UAAkC,EAAE;AAC1C,OAAK,MAAM,MAAM,KAAK;AAIrB,OAAI,GAAG,WAAW,YAAY,IAAI,GAAG,WAAW,QAAQ,CAAE;GAC1D,MAAM,WAAW,gBAAgB,GAAG;AACpC,OAAI,aAAa,MAAM;AACtB,WAAO,OAAO,WAAW,2CAA2C,KAAK;AACzE;;GAED,MAAM,MAAM,GAAG,MAAM,YAAY,GAAG;GACpC,MAAM,WAAW,GAAG,IAAI,GAAG,eAAe;AAI1C,OAAI,EAAC,OAHqB,GACxB,OAAO,SAAS,CAChB,KAAK,OAAO,YAAY,OAAO,QAAQ,MAAM,CAAC,CAAC,GAChC;AAChB,YAAQ,KAAK;KAAE;KAAI,WAAW;KAAK,UAAU;KAAM,CAAC;AACpD;;GAED,MAAM,OAAO,OAAO,GAClB,eAAe,SAAS,CACxB,KAAK,OAAO,YAAY,OAAO,QAAQ,GAAG,CAAC,CAAC;AAC9C,OAAI,SAAS,IAAI;AAChB,YAAQ,KAAK;KAAE;KAAI,WAAW;KAAK,UAAU;KAAM,CAAC;AACpD;;GAED,MAAM,UAAU,OAAO,eAAe,wBAAwB,MAAM;IACnE,QAAQ;IACR,eAAe;IACf,CAAC,CAAC,KAAK,OAAO,YAAY,OAAO,QAAQ,KAAK,CAAC,CAAC;AACjD,OAAI,YAAY,QAAQ,gBAAgB,QAAQ,GAAG,KAAK,MAAM;AAC7D,WAAO,OAAO,WAAW,8CAA8C,QAAQ,KAAK;AACpF,YAAQ,KAAK;KAAE;KAAI,WAAW;KAAK,UAAU;KAAM,CAAC;AACpD;;AAED,WAAQ,KAAK;IAAE,IAAI;IAAU,WAAW;IAAK,UAAU;IAAS,CAAC;;AAElE,SAAO;GACN,CAAC,KAAK,OAAO,SAAS,6BAA6B,CAAC;CAEtD,MAAM,OAAuC,OAC5C,OAAO,IAAI,aAAa;EACvB,MAAM,aAAa,OAAO,mBAAmB,UAAU,GAAG;EAC1D,MAAM,KAAK,OAAO,WAAW;EAC7B,MAAM,MAAM,GAAG,MAAM,YAAY,GAAG;AACpC,SAAO,OAAO,OACb,OAAO,IAAI,aAAa;AACvB,UAAO,iBAAiB,MAAM,cAAc;AAC5C,UAAO,GAAG,OAAO,KAAK;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC,CAAC,KAAK,OAAO,OAAO;IAC1E,CACF;GACA,CAAC,KAAK,OAAO,SAAS,+BAA+B,CAAC;CAEzD,MAAM,QAAsC,SAC3C,OAAO,IAAI,aAAa;AACvB,SAAO,OAAO,OACb,OAAO,IAAI,aAAa;AACvB,UAAO,iBAAiB,MAAM,cAAc;AAC5C,UAAO,QAAQ;IACd,YAAY;KAAE,KAAK,SAAS;KAAK,OAAO,SAAS;KAAO;IACxD,WAAW,MAAM;IACjB,eAAe,MAAM;IACrB;IACA,eAAe,KAAK;IACpB,WAAW,KAAK;IAChB,CAAC;IACD,CACF;GACA,CAAC,KAAK,OAAO,SAAS,mCAAmC,CAAC;CAE7D,MAAM,YAA8C,SAMnD,SAAS;EACR,YAAY;GAAE,KAAK,SAAS;GAAK,OAAO,SAAS;GAAO;EACxD,WAAW,MAAM;EACjB,eAAe,MAAM;EACrB;EACA,eAAe,KAAK;EACpB,WAAW,KAAK;EAChB,CAAC,CAAC,KAAK,OAAO,SAAS,wCAAwC,CAAC;CAElE,MAAM,cACL,OAAO,OACN,OAAO,IAAI,aAAa;AACvB,SAAO,mBAAmB,MAAM,yBAAyB,cAAc,CAAC;AACxE,SAAO,OAAO,SAAS;GACtB,WAAW,MAAM;GACjB,kBAAkB;IAAE,KAAK,SAAS;IAAK,OAAO,SAAS;IAAO;GAC9D;GACA,CAAC;GACD,CACF,CAAC,KAAK,OAAO,SAAS,oCAAoC,CAAC;CAE7D,MAAM,4BACL,sBAAsB,MAAM,WAAW,QAAQ,CAAC,KAC/C,OAAO,SAAS,8CAA8C,CAC9D;AAEF,QAAO,4BAA4B,GAAG;EACrC;EACA;EACA;EACA;EACA,QAAQ;EACR;EACA;EACA;EACA,uBAAuB;EACvB,CAAC;EACD,CACF"}

package/dist/orchestrators/snapshot/state-document.d.mts

@@ -0,0 +1 @@
+import { Effect, FileSystem, Schema } from "effect";

package/dist/orchestrators/snapshot/state-document.mjs

@@ -1,18 +1,58 @@
+import { decodeUnknown, parseJsonText } from "../../substrate/runtime/runtime-decode.mjs";
 import { StateDocument } from "../../substrate/runtime/state-store/schema.mjs";
+import "../../substrate/runtime/state-store/index.mjs";
 import { Effect, FileSystem, Schema } from "effect";
 //#region src/orchestrators/snapshot/state-document.ts
+/** Tagged failure raised by snapshot state-document helpers. `kind`
+*  discriminates the failure class so downstream phase classifiers can
+*  branch by tag, not by message substring. */
+var SnapshotStateDocumentError = class extends Schema.TaggedErrorClass()("SnapshotStateDocumentError", {
+	/**
+	* - `'read'` — filesystem read of the state document file failed.
+	* - `'parse'` — file contents are not valid JSON.
+	* - `'decode'` — JSON parses but does not match `StateDocument`
+	*   schema.
+	* - `'write'` — filesystem write of the state document file failed.
+	*/
+	kind: Schema.Literals([
+		"read",
+		"parse",
+		"decode",
+		"write"
+	]),
+	detail: Schema.String,
+	path: Schema.String,
+	cause: Schema.optional(Schema.Defect)
+}) {};
+const fail = (kind, detail, path, cause) => Effect.fail(new SnapshotStateDocumentError({
+	kind,
+	detail,
+	path,
+	cause
+}));
 const readSnapshotStateDocument = (path) => Effect.gen(function* () {
-	const text = yield* (yield* FileSystem.FileSystem).readFileString(path).pipe(Effect.catch((cause) => Effect.fail(new Error(`read ${path} failed`, { cause }))));
-	const raw = yield* Effect.try({
-		try: () => JSON.parse(text),
-		catch: (cause) => new Error(`${path} is not valid JSON`, { cause })
+	return yield* decodeUnknown(StateDocument, yield* parseJsonText(yield* (yield* FileSystem.FileSystem).readFileString(path).pipe(Effect.catch((cause) => fail("read", `read ${path} failed`, path, cause))), {
+		source: path,
+		mkError: (issue) => new SnapshotStateDocumentError({
+			kind: "parse",
+			detail: `${path} is not valid JSON`,
+			path,
+			cause: issue.cause
+		})
+	}), {
+		source: path,
+		mkError: (issue) => new SnapshotStateDocumentError({
+			kind: "decode",
+			detail: `${path} failed StateDocument schema decode`,
+			path,
+			cause: issue.cause
+		})
 	});
-	return yield* Schema.decodeUnknownEffect(StateDocument)(raw).pipe(Effect.catch((cause) => Effect.fail(new Error(`${path} failed StateDocument schema decode`, { cause }))));
 });
 const writeSnapshotStateDocument = (path, doc) => Effect.gen(function* () {
-	yield* (yield* FileSystem.FileSystem).writeFileString(path, `${JSON.stringify(doc, null, 2)}\n`).pipe(Effect.catch((cause) => Effect.fail(new Error(`write ${path} failed`, { cause }))));
+	yield* (yield* FileSystem.FileSystem).writeFileString(path, `${JSON.stringify(doc, null, 2)}\n`).pipe(Effect.catch((cause) => fail("write", `write ${path} failed`, path, cause)));
 });
 //#endregion
-export { readSnapshotStateDocument, writeSnapshotStateDocument };
+export { SnapshotStateDocumentError, readSnapshotStateDocument, writeSnapshotStateDocument };
 
 //# sourceMappingURL=state-document.mjs.map

package/dist/orchestrators/snapshot/state-document.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"state-document.mjs","names":["StateDocumentSchema"],"sources":["../../../src/orchestrators/snapshot/state-document.ts"],"sourcesContent":["import { Effect, FileSystem, Schema } from 'effect';\n\nimport {\n\tStateDocument as StateDocumentSchema,\n\ttype StateDocument,\n} from '../../substrate/runtime/state-store/index.ts';\n\nexport const readSnapshotStateDocument = (\n\tpath: string,\n): Effect.Effect<StateDocument, Error, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tconst text = yield* fs\n\t\t\t.readFileString(path)\n\t\t\t.pipe(Effect.catch((cause) => Effect.fail(new Error(`read ${path} failed`, { cause }))));\n\t\tconst raw = yield* Effect.try({\n\t\t\ttry: () => JSON.parse(text) as unknown,\n\t\t\tcatch: (cause) => new Error(`${path} is not valid JSON`, { cause }),\n\t\t});\n\t\treturn yield* Schema.decodeUnknownEffect(StateDocumentSchema)(raw).pipe(\n\t\t\tEffect.catch((cause) =>\n\t\t\t\tEffect.fail(new Error(`${path} failed StateDocument schema decode`, { cause })),\n\t\t\t),\n\t\t);\n\t});\n\nexport const writeSnapshotStateDocument = (\n\tpath: string,\n\tdoc: StateDocument,\n): Effect.Effect<void, Error, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tyield* fs\n\t\t\t.writeFileString(path, `${JSON.stringify(doc, null, 2)}\\n`)\n\t\t\t.pipe(Effect.catch((cause) => Effect.fail(new Error(`write ${path} failed`, { cause }))));\n\t});\n"],"mappings":";;;AAOA,MAAa,6BACZ,SAEA,OAAO,IAAI,aAAa;CAEvB,MAAM,OAAO,QAAO,OADF,WAAW,YAE3B,eAAe,KAAK,CACpB,KAAK,OAAO,OAAO,UAAU,OAAO,KAAK,IAAI,MAAM,QAAQ,KAAK,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;CACzF,MAAM,MAAM,OAAO,OAAO,IAAI;EAC7B,WAAW,KAAK,MAAM,KAAK;EAC3B,QAAQ,UAAU,IAAI,MAAM,GAAG,KAAK,qBAAqB,EAAE,OAAO,CAAC;EACnE,CAAC;AACF,QAAO,OAAO,OAAO,oBAAoBA,cAAoB,CAAC,IAAI,CAAC,KAClE,OAAO,OAAO,UACb,OAAO,KAAK,IAAI,MAAM,GAAG,KAAK,sCAAsC,EAAE,OAAO,CAAC,CAAC,CAC/E,CACD;EACA;AAEH,MAAa,8BACZ,MACA,QAEA,OAAO,IAAI,aAAa;AAEvB,SAAO,OADW,WAAW,YAE3B,gBAAgB,MAAM,GAAG,KAAK,UAAU,KAAK,MAAM,EAAE,CAAC,IAAI,CAC1D,KAAK,OAAO,OAAO,UAAU,OAAO,KAAK,IAAI,MAAM,SAAS,KAAK,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;EACzF"}
+{"version":3,"file":"state-document.mjs","names":["StateDocumentSchema"],"sources":["../../../src/orchestrators/snapshot/state-document.ts"],"sourcesContent":["import { Effect, FileSystem, Schema } from 'effect';\n\nimport { decodeUnknown, parseJsonText } from '../../substrate/runtime/runtime-decode.ts';\nimport {\n\tStateDocument as StateDocumentSchema,\n\ttype StateDocument,\n} from '../../substrate/runtime/state-store/index.ts';\n\n/** Tagged failure raised by snapshot state-document helpers. `kind`\n *  discriminates the failure class so downstream phase classifiers can\n *  branch by tag, not by message substring. */\nexport class SnapshotStateDocumentError extends Schema.TaggedErrorClass<SnapshotStateDocumentError>()(\n\t'SnapshotStateDocumentError',\n\t{\n\t\t/**\n\t\t * - `'read'` — filesystem read of the state document file failed.\n\t\t * - `'parse'` — file contents are not valid JSON.\n\t\t * - `'decode'` — JSON parses but does not match `StateDocument`\n\t\t *   schema.\n\t\t * - `'write'` — filesystem write of the state document file failed.\n\t\t */\n\t\tkind: Schema.Literals(['read', 'parse', 'decode', 'write']),\n\t\tdetail: Schema.String,\n\t\tpath: Schema.String,\n\t\tcause: Schema.optional(Schema.Defect),\n\t},\n) {}\n\nconst fail = (\n\tkind: SnapshotStateDocumentError['kind'],\n\tdetail: string,\n\tpath: string,\n\tcause?: unknown,\n): Effect.Effect<never, SnapshotStateDocumentError> =>\n\tEffect.fail(new SnapshotStateDocumentError({ kind, detail, path, cause }));\n\nexport const readSnapshotStateDocument = (\n\tpath: string,\n): Effect.Effect<StateDocument, SnapshotStateDocumentError, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tconst text = yield* fs\n\t\t\t.readFileString(path)\n\t\t\t.pipe(Effect.catch((cause) => fail('read', `read ${path} failed`, path, cause)));\n\t\tconst raw = yield* parseJsonText(text, {\n\t\t\tsource: path,\n\t\t\tmkError: (issue) =>\n\t\t\t\tnew SnapshotStateDocumentError({\n\t\t\t\t\tkind: 'parse',\n\t\t\t\t\tdetail: `${path} is not valid JSON`,\n\t\t\t\t\tpath,\n\t\t\t\t\tcause: issue.cause,\n\t\t\t\t}),\n\t\t});\n\t\treturn yield* decodeUnknown(StateDocumentSchema, raw, {\n\t\t\tsource: path,\n\t\t\tmkError: (issue) =>\n\t\t\t\tnew SnapshotStateDocumentError({\n\t\t\t\t\tkind: 'decode',\n\t\t\t\t\tdetail: `${path} failed StateDocument schema decode`,\n\t\t\t\t\tpath,\n\t\t\t\t\tcause: issue.cause,\n\t\t\t\t}),\n\t\t});\n\t});\n\nexport const writeSnapshotStateDocument = (\n\tpath: string,\n\tdoc: StateDocument,\n): Effect.Effect<void, SnapshotStateDocumentError, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tyield* fs\n\t\t\t.writeFileString(path, `${JSON.stringify(doc, null, 2)}\\n`)\n\t\t\t.pipe(Effect.catch((cause) => fail('write', `write ${path} failed`, path, cause)));\n\t});\n"],"mappings":";;;;;;;;AAWA,IAAa,6BAAb,cAAgD,OAAO,kBAA8C,CACpG,8BACA;;;;;;;;CAQC,MAAM,OAAO,SAAS;EAAC;EAAQ;EAAS;EAAU;EAAQ,CAAC;CAC3D,QAAQ,OAAO;CACf,MAAM,OAAO;CACb,OAAO,OAAO,SAAS,OAAO,OAAO;CACrC,CACD,CAAC;AAEF,MAAM,QACL,MACA,QACA,MACA,UAEA,OAAO,KAAK,IAAI,2BAA2B;CAAE;CAAM;CAAQ;CAAM;CAAO,CAAC,CAAC;AAE3E,MAAa,6BACZ,SAEA,OAAO,IAAI,aAAa;AAevB,QAAO,OAAO,cAAcA,eAAqB,OAV9B,cAAc,QAHb,OADF,WAAW,YAE3B,eAAe,KAAK,CACpB,KAAK,OAAO,OAAO,UAAU,KAAK,QAAQ,QAAQ,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC,EAC1C;EACtC,QAAQ;EACR,UAAU,UACT,IAAI,2BAA2B;GAC9B,MAAM;GACN,QAAQ,GAAG,KAAK;GAChB;GACA,OAAO,MAAM;GACb,CAAC;EACH,CAAC,EACoD;EACrD,QAAQ;EACR,UAAU,UACT,IAAI,2BAA2B;GAC9B,MAAM;GACN,QAAQ,GAAG,KAAK;GAChB;GACA,OAAO,MAAM;GACb,CAAC;EACH,CAAC;EACD;AAEH,MAAa,8BACZ,MACA,QAEA,OAAO,IAAI,aAAa;AAEvB,SAAO,OADW,WAAW,YAE3B,gBAAgB,MAAM,GAAG,KAAK,UAAU,KAAK,MAAM,EAAE,CAAC,IAAI,CAC1D,KAAK,OAAO,OAAO,UAAU,KAAK,SAAS,SAAS,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;EAClF"}

package/dist/orchestrators/snapshot/wipe.mjs

@@ -1,3 +1,4 @@
+import { makePhaseFailer } from "./phase-error.mjs";
 import { Effect, FileSystem, Schema } from "effect";
 //#region src/orchestrators/snapshot/wipe.ts
 var WipePhaseError = class extends Schema.TaggedErrorClass()("SnapshotWipePhaseError", {
@@ -10,11 +11,54 @@ var WipePhaseError = class extends Schema.TaggedErrorClass()("SnapshotWipePhaseE
 	detail: Schema.String,
 	cause: Schema.optional(Schema.Defect)
 }) {};
-const failPhase = (phase, detail) => (cause) => Effect.fail(new WipePhaseError({
-	phase,
-	detail,
-	cause
-}));
+const failPhase = makePhaseFailer(WipePhaseError);
+const resolvePreservePolicy = (inputs) => ({
+	keepSnapshots: inputs.keepSnapshots ?? true,
+	keepCache: inputs.keepCache ?? false
+});
+/** True when a direct child of `stackRoot` is PRESERVED (not removed)
+*  by a wipe under `policy`. `snapshots/` survives by default; `cache/`
+*  survives only when explicitly requested. Every other child — state,
+*  cross-process artifacts, per-plugin runtime trees — is removed. */
+const isPreservedChild = (name, policy) => policy.keepSnapshots && name === "snapshots" || policy.keepCache && name === "cache";
+/**
+* Enumerate the concrete targets a wipe of `inputs.labelMatch` would
+* remove, WITHOUT removing anything. Read-only: lists matching
+* containers via the runtime adapter and reads the stack-root directory
+* to classify each child against the SAME preserve predicate `runWipe`
+* uses. Backs `devstack wipe --dry-run`.
+*/
+const planWipe = (inputs) => Effect.gen(function* () {
+	const fs = yield* FileSystem.FileSystem;
+	yield* Effect.annotateCurrentSpan({
+		"devstack.snapshot.phase": "wipe-plan",
+		"devstack.app": inputs.labelMatch.app,
+		"devstack.stack": inputs.labelMatch.stack
+	});
+	const containers = (yield* inputs.runtime.inspectByLabels(inputs.labelMatch).pipe(Effect.catch(failPhase("sweep-containers", `container inspect failed`)))).map((h) => h.name).sort();
+	const policy = resolvePreservePolicy(inputs);
+	const children = yield* fs.readDirectory(inputs.stackRoot).pipe(Effect.catch(() => Effect.succeed([])));
+	const onDiskPaths = [];
+	const preserved = [];
+	for (const name of [...children].sort()) {
+		if (isPreservedChild(name, policy)) {
+			preserved.push(name);
+			continue;
+		}
+		onDiskPaths.push(`${inputs.stackRoot}/${name}`);
+	}
+	return {
+		app: inputs.labelMatch.app,
+		stack: inputs.labelMatch.stack,
+		containers,
+		networkLabelMatch: inputs.labelMatch,
+		volumeLabelMatch: inputs.labelMatch,
+		stateFile: inputs.stateFilePath,
+		stackRoot: inputs.stackRoot,
+		onDiskPaths,
+		preserved
+	};
+}).pipe(Effect.withSpan("orchestrator.snapshot.wipe.plan"));
 /**
 * Tear down a stack's live footprint. Snapshots survive by default
 * (architecture § wipe).
@@ -24,6 +68,9 @@ const failPhase = (phase, detail) => (cause) => Effect.fail(new WipePhaseError({
 *   2. Remove managed networks and volumes by the same label filter.
 *   3. Remove state.json.
 *   4. Remove the runtime tree EXCEPT the snapshot catalog by default.
+*   5. Remove the now-empty stack root when nothing survived (no
+*      preserved child remains) so wipe doesn't leak an empty
+*      `stacks/<stack>/` directory.
 */
 const runWipe = (inputs) => Effect.gen(function* () {
 	const fs = yield* FileSystem.FileSystem;
@@ -36,24 +83,34 @@ const runWipe = (inputs) => Effect.gen(function* () {
 	yield* inputs.runtime.removeManagedNetworks(inputs.labelMatch).pipe(Effect.catch(failPhase("sweep-networks-volumes", `network sweep failed`)));
 	yield* inputs.runtime.removeManagedVolumes(inputs.labelMatch).pipe(Effect.catch(failPhase("sweep-networks-volumes", `volume sweep failed`)));
 	yield* fs.remove(inputs.stateFilePath, { force: true }).pipe(Effect.catch(failPhase("remove-state", `remove state.json failed`)));
+	const policy = resolvePreservePolicy(inputs);
 	const children = yield* fs.readDirectory(inputs.stackRoot).pipe(Effect.catch(() => Effect.succeed([])));
-	const keepSnapshots = inputs.keepSnapshots ?? true;
-	const keepCache = inputs.keepCache ?? false;
+	let preservedCount = 0;
 	for (const name of children) {
-		if (keepSnapshots && name === "snapshots") continue;
-		if (keepCache && name === "cache") continue;
+		if (isPreservedChild(name, policy)) {
+			preservedCount += 1;
+			continue;
+		}
 		yield* fs.remove(`${inputs.stackRoot}/${name}`, {
 			recursive: true,
 			force: true
 		}).pipe(Effect.catch(failPhase("remove-runtime-tree", `remove ${name} failed`)));
 	}
+	if (preservedCount === 0 && children.length > 0) yield* fs.remove(inputs.stackRoot, {
+		recursive: true,
+		force: true
+	}).pipe(Effect.ignore);
 }).pipe(Effect.withSpan("orchestrator.snapshot.wipe"));
 /** Centralized constant — the canonical snapshot-catalog directory
 *  name. Used by both `runWipe` (to preserve) and the substrate's
 *  path resolver (to compose `snapshotDir`). Distilled §17 calls out
 *  the "centralize the snapshots-dir-name constant" opportunity. */
 const SNAPSHOTS_DIR_NAME = "snapshots";
+/** Canonical stack-local artifact-cache directory name. `runWipe`
+*  preserves it only under `keepCache`; otherwise it is removed so a
+*  reset re-proves on-chain artifacts against the next chain. */
+const CACHE_DIR_NAME = "cache";
 //#endregion
-export { SNAPSHOTS_DIR_NAME, runWipe };
+export { CACHE_DIR_NAME, SNAPSHOTS_DIR_NAME, WipePhaseError, planWipe, runWipe };
 
 //# sourceMappingURL=wipe.mjs.map

package/dist/orchestrators/snapshot/wipe.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"wipe.mjs","names":[],"sources":["../../../src/orchestrators/snapshot/wipe.ts"],"sourcesContent":["// Wipe — label-scoped teardown.\n//\n// Architecture § Snapshot responsibilities:\n//   \"Provide a wipe operation scoped to one `(app, stack)` that tears\n//   down containers, networks, volumes, and per-stack on-disk state,\n//   with snapshots surviving by default.\"\n//\n// Label-scoped: enumeration uses partial `ContainerLabelTuple` filters\n// (just `{ app, stack }`); the orchestrator does NOT reach for plugin\n// names. The runtime adapter sweeps containers/networks/volumes\n// matching the label set.\n\nimport { Effect, FileSystem, Schema } from 'effect';\n\nimport type { ContainerLabelTuple } from '../../contracts/snapshotable.ts';\nimport type { ContainerRuntime } from '../../contracts/container-runtime.ts';\n\n// -----------------------------------------------------------------------------\n// Errors\n// -----------------------------------------------------------------------------\n\nexport class WipePhaseError extends Schema.TaggedErrorClass<WipePhaseError>()(\n\t'SnapshotWipePhaseError',\n\t{\n\t\tphase: Schema.Literals([\n\t\t\t'sweep-containers',\n\t\t\t'sweep-networks-volumes',\n\t\t\t'remove-state',\n\t\t\t'remove-runtime-tree',\n\t\t]),\n\t\tdetail: Schema.String,\n\t\tcause: Schema.optional(Schema.Defect),\n\t},\n) {}\n\nconst failPhase =\n\t(\n\t\tphase: WipePhaseError['phase'],\n\t\tdetail: string,\n\t): ((cause: unknown) => Effect.Effect<never, WipePhaseError>) =>\n\t(cause) =>\n\t\tEffect.fail(new WipePhaseError({ phase, detail, cause }));\n\n// -----------------------------------------------------------------------------\n// Inputs\n// -----------------------------------------------------------------------------\n\nexport interface WipeInputs {\n\treadonly labelMatch: Pick<ContainerLabelTuple, 'app' | 'stack'>;\n\treadonly stackRoot: string;\n\treadonly stateFilePath: string;\n\treadonly runtime: ContainerRuntime;\n\t/** Preserve the snapshot catalog (default behavior). When false,\n\t *  the catalog is removed alongside the runtime tree. */\n\treadonly keepSnapshots?: boolean;\n\t/** Preserve stack-local artifact caches. Defaults to false; wipe\n\t *  should force on-chain artifacts to re-prove against the next\n\t *  chain instead of carrying local ids across a reset. */\n\treadonly keepCache?: boolean;\n}\n\n// -----------------------------------------------------------------------------\n// Wipe\n// -----------------------------------------------------------------------------\n\n/**\n * Tear down a stack's live footprint. Snapshots survive by default\n * (architecture § wipe).\n *\n * Order:\n *   1. Force-remove managed containers by `{ app, stack }` labels.\n *   2. Remove managed networks and volumes by the same label filter.\n *   3. Remove state.json.\n *   4. Remove the runtime tree EXCEPT the snapshot catalog by default.\n */\nexport const runWipe = (\n\tinputs: WipeInputs,\n): Effect.Effect<void, WipePhaseError, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t'devstack.snapshot.phase': 'wipe',\n\t\t\t'devstack.app': inputs.labelMatch.app,\n\t\t\t'devstack.stack': inputs.labelMatch.stack,\n\t\t});\n\n\t\t// 1. Containers.\n\t\tyield* inputs.runtime\n\t\t\t.removeManagedContainers(inputs.labelMatch)\n\t\t\t.pipe(Effect.catch(failPhase('sweep-containers', `container sweep failed`)));\n\n\t\t// 2. Networks + volumes.\n\t\tyield* inputs.runtime\n\t\t\t.removeManagedNetworks(inputs.labelMatch)\n\t\t\t.pipe(Effect.catch(failPhase('sweep-networks-volumes', `network sweep failed`)));\n\t\tyield* inputs.runtime\n\t\t\t.removeManagedVolumes(inputs.labelMatch)\n\t\t\t.pipe(Effect.catch(failPhase('sweep-networks-volumes', `volume sweep failed`)));\n\n\t\t// 3. Remove state.json.\n\t\tyield* fs\n\t\t\t.remove(inputs.stateFilePath, { force: true })\n\t\t\t.pipe(Effect.catch(failPhase('remove-state', `remove state.json failed`)));\n\n\t\t// 4. Remove the runtime tree — but PRESERVE snapshots by default.\n\t\t//    Strategy: enumerate the stack root and remove each child\n\t\t//    whose name is not `snapshots/` (when preserved). Stack-local\n\t\t//    artifact caches are state and are removed unless explicitly\n\t\t//    requested otherwise.\n\t\tconst children = yield* fs\n\t\t\t.readDirectory(inputs.stackRoot)\n\t\t\t.pipe(Effect.catch(() => Effect.succeed([] as ReadonlyArray<string>)));\n\t\tconst keepSnapshots = inputs.keepSnapshots ?? true;\n\t\tconst keepCache = inputs.keepCache ?? false;\n\t\tfor (const name of children) {\n\t\t\tif (keepSnapshots && name === 'snapshots') continue;\n\t\t\tif (keepCache && name === 'cache') continue;\n\t\t\tyield* fs\n\t\t\t\t.remove(`${inputs.stackRoot}/${name}`, { recursive: true, force: true })\n\t\t\t\t.pipe(Effect.catch(failPhase('remove-runtime-tree', `remove ${name} failed`)));\n\t\t}\n\t}).pipe(Effect.withSpan('orchestrator.snapshot.wipe'));\n\n/** Centralized constant — the canonical snapshot-catalog directory\n *  name. Used by both `runWipe` (to preserve) and the substrate's\n *  path resolver (to compose `snapshotDir`). Distilled §17 calls out\n *  the \"centralize the snapshots-dir-name constant\" opportunity. */\nexport const SNAPSHOTS_DIR_NAME = 'snapshots';\n"],"mappings":";;AAqBA,IAAa,iBAAb,cAAoC,OAAO,kBAAkC,CAC5E,0BACA;CACC,OAAO,OAAO,SAAS;EACtB;EACA;EACA;EACA;EACA,CAAC;CACF,QAAQ,OAAO;CACf,OAAO,OAAO,SAAS,OAAO,OAAO;CACrC,CACD,CAAC;AAEF,MAAM,aAEJ,OACA,YAEA,UACA,OAAO,KAAK,IAAI,eAAe;CAAE;CAAO;CAAQ;CAAO,CAAC,CAAC;;;;;;;;;;;AAkC3D,MAAa,WACZ,WAEA,OAAO,IAAI,aAAa;CACvB,MAAM,KAAK,OAAO,WAAW;AAC7B,QAAO,OAAO,oBAAoB;EACjC,2BAA2B;EAC3B,gBAAgB,OAAO,WAAW;EAClC,kBAAkB,OAAO,WAAW;EACpC,CAAC;AAGF,QAAO,OAAO,QACZ,wBAAwB,OAAO,WAAW,CAC1C,KAAK,OAAO,MAAM,UAAU,oBAAoB,yBAAyB,CAAC,CAAC;AAG7E,QAAO,OAAO,QACZ,sBAAsB,OAAO,WAAW,CACxC,KAAK,OAAO,MAAM,UAAU,0BAA0B,uBAAuB,CAAC,CAAC;AACjF,QAAO,OAAO,QACZ,qBAAqB,OAAO,WAAW,CACvC,KAAK,OAAO,MAAM,UAAU,0BAA0B,sBAAsB,CAAC,CAAC;AAGhF,QAAO,GACL,OAAO,OAAO,eAAe,EAAE,OAAO,MAAM,CAAC,CAC7C,KAAK,OAAO,MAAM,UAAU,gBAAgB,2BAA2B,CAAC,CAAC;CAO3E,MAAM,WAAW,OAAO,GACtB,cAAc,OAAO,UAAU,CAC/B,KAAK,OAAO,YAAY,OAAO,QAAQ,EAAE,CAA0B,CAAC,CAAC;CACvE,MAAM,gBAAgB,OAAO,iBAAiB;CAC9C,MAAM,YAAY,OAAO,aAAa;AACtC,MAAK,MAAM,QAAQ,UAAU;AAC5B,MAAI,iBAAiB,SAAS,YAAa;AAC3C,MAAI,aAAa,SAAS,QAAS;AACnC,SAAO,GACL,OAAO,GAAG,OAAO,UAAU,GAAG,QAAQ;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC,CACvE,KAAK,OAAO,MAAM,UAAU,uBAAuB,UAAU,KAAK,SAAS,CAAC,CAAC;;EAE/E,CAAC,KAAK,OAAO,SAAS,6BAA6B,CAAC;;;;;AAMvD,MAAa,qBAAqB"}
+{"version":3,"file":"wipe.mjs","names":[],"sources":["../../../src/orchestrators/snapshot/wipe.ts"],"sourcesContent":["// Wipe — label-scoped teardown.\n//\n// Architecture § Snapshot responsibilities:\n//   \"Provide a wipe operation scoped to one `(app, stack)` that tears\n//   down containers, networks, volumes, and per-stack on-disk state,\n//   with snapshots surviving by default.\"\n//\n// Label-scoped: enumeration uses partial `ContainerLabelTuple` filters\n// (just `{ app, stack }`); the orchestrator does NOT reach for plugin\n// names. The runtime adapter sweeps containers/networks/volumes\n// matching the label set.\n\nimport { Effect, FileSystem, Schema } from 'effect';\n\nimport type { ContainerLabelTuple } from '../../contracts/snapshotable.ts';\nimport type { ContainerRuntime } from '../../contracts/container-runtime.ts';\nimport { makePhaseFailer } from './phase-error.ts';\n\n// -----------------------------------------------------------------------------\n// Errors\n// -----------------------------------------------------------------------------\n\nexport class WipePhaseError extends Schema.TaggedErrorClass<WipePhaseError>()(\n\t'SnapshotWipePhaseError',\n\t{\n\t\tphase: Schema.Literals([\n\t\t\t'sweep-containers',\n\t\t\t'sweep-networks-volumes',\n\t\t\t'remove-state',\n\t\t\t'remove-runtime-tree',\n\t\t]),\n\t\tdetail: Schema.String,\n\t\tcause: Schema.optional(Schema.Defect),\n\t},\n) {}\n\nconst failPhase = makePhaseFailer(WipePhaseError);\n\n// -----------------------------------------------------------------------------\n// Inputs\n// -----------------------------------------------------------------------------\n\nexport interface WipeInputs {\n\treadonly labelMatch: Pick<ContainerLabelTuple, 'app' | 'stack'>;\n\treadonly stackRoot: string;\n\treadonly stateFilePath: string;\n\treadonly runtime: ContainerRuntime;\n\t/** Preserve the snapshot catalog (default behavior). When false,\n\t *  the catalog is removed alongside the runtime tree. */\n\treadonly keepSnapshots?: boolean;\n\t/** Preserve stack-local artifact caches. Defaults to false; wipe\n\t *  should force on-chain artifacts to re-prove against the next\n\t *  chain instead of carrying local ids across a reset. */\n\treadonly keepCache?: boolean;\n}\n\n// -----------------------------------------------------------------------------\n// Preserve predicate — the single source of truth for \"what survives a\n// wipe on disk\". Both `runWipe` (the destructive pass) and `planWipe`\n// (the dry-run enumeration) consult this so the preview can never drift\n// from what the real wipe removes.\n// -----------------------------------------------------------------------------\n\ninterface PreservePolicy {\n\treadonly keepSnapshots: boolean;\n\treadonly keepCache: boolean;\n}\n\nconst resolvePreservePolicy = (inputs: WipeInputs): PreservePolicy => ({\n\tkeepSnapshots: inputs.keepSnapshots ?? true,\n\tkeepCache: inputs.keepCache ?? false,\n});\n\n/** True when a direct child of `stackRoot` is PRESERVED (not removed)\n *  by a wipe under `policy`. `snapshots/` survives by default; `cache/`\n *  survives only when explicitly requested. Every other child — state,\n *  cross-process artifacts, per-plugin runtime trees — is removed. */\nconst isPreservedChild = (name: string, policy: PreservePolicy): boolean =>\n\t(policy.keepSnapshots && name === SNAPSHOTS_DIR_NAME) ||\n\t(policy.keepCache && name === CACHE_DIR_NAME);\n\n// -----------------------------------------------------------------------------\n// Dry-run enumeration\n// -----------------------------------------------------------------------------\n\n/** Concrete teardown targets a wipe of one `(app, stack)` would remove.\n *  Produced by `planWipe` WITHOUT mutating anything so `devstack wipe\n *  --dry-run` can show the operator exactly what a real wipe deletes. */\nexport interface WipeTargets {\n\treadonly app: string;\n\treadonly stack: string;\n\t/** Managed container NAMES that match the `{ app, stack }` label\n\t *  filter — enumerated via the runtime adapter so the preview lists\n\t *  the exact containers a real wipe force-removes. */\n\treadonly containers: ReadonlyArray<string>;\n\t/** Networks/volumes are removed by the SAME `{ app, stack }` label\n\t *  filter the runtime adapter sweeps on. The contract exposes no\n\t *  by-label LIST for these, so the plan reports the selector that\n\t *  scopes the removal rather than a (daemon-round-trip) name list. */\n\treadonly networkLabelMatch: Pick<ContainerLabelTuple, 'app' | 'stack'>;\n\treadonly volumeLabelMatch: Pick<ContainerLabelTuple, 'app' | 'stack'>;\n\t/** Absolute path of the per-stack `state.json` that is removed. */\n\treadonly stateFile: string;\n\t/** Absolute path of the per-stack runtime root. Its non-preserved\n\t *  children (see `onDiskPaths`) are removed; the directory itself is\n\t *  reaped too when nothing survives. */\n\treadonly stackRoot: string;\n\t/** Absolute paths of the `stackRoot` children a real wipe removes —\n\t *  everything except the preserved `snapshots/` (and `cache/` unless\n\t *  `keepCache`). Empty when the stack root does not exist yet. */\n\treadonly onDiskPaths: ReadonlyArray<string>;\n\t/** Direct children PRESERVED on disk (`snapshots/`, optionally\n\t *  `cache/`) — surfaced so the preview is explicit about survivors. */\n\treadonly preserved: ReadonlyArray<string>;\n}\n\n/**\n * Enumerate the concrete targets a wipe of `inputs.labelMatch` would\n * remove, WITHOUT removing anything. Read-only: lists matching\n * containers via the runtime adapter and reads the stack-root directory\n * to classify each child against the SAME preserve predicate `runWipe`\n * uses. Backs `devstack wipe --dry-run`.\n */\nexport const planWipe = (\n\tinputs: WipeInputs,\n): Effect.Effect<WipeTargets, WipePhaseError, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t'devstack.snapshot.phase': 'wipe-plan',\n\t\t\t'devstack.app': inputs.labelMatch.app,\n\t\t\t'devstack.stack': inputs.labelMatch.stack,\n\t\t});\n\n\t\tconst handles = yield* inputs.runtime\n\t\t\t.inspectByLabels(inputs.labelMatch as ContainerLabelTuple)\n\t\t\t.pipe(Effect.catch(failPhase('sweep-containers', `container inspect failed`)));\n\t\tconst containers = handles.map((h) => h.name).sort();\n\n\t\tconst policy = resolvePreservePolicy(inputs);\n\t\tconst children = yield* fs\n\t\t\t.readDirectory(inputs.stackRoot)\n\t\t\t.pipe(Effect.catch(() => Effect.succeed([] as ReadonlyArray<string>)));\n\t\tconst onDiskPaths: Array<string> = [];\n\t\tconst preserved: Array<string> = [];\n\t\tfor (const name of [...children].sort()) {\n\t\t\tif (isPreservedChild(name, policy)) {\n\t\t\t\tpreserved.push(name);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tonDiskPaths.push(`${inputs.stackRoot}/${name}`);\n\t\t}\n\n\t\treturn {\n\t\t\tapp: inputs.labelMatch.app,\n\t\t\tstack: inputs.labelMatch.stack,\n\t\t\tcontainers,\n\t\t\tnetworkLabelMatch: inputs.labelMatch,\n\t\t\tvolumeLabelMatch: inputs.labelMatch,\n\t\t\tstateFile: inputs.stateFilePath,\n\t\t\tstackRoot: inputs.stackRoot,\n\t\t\tonDiskPaths,\n\t\t\tpreserved,\n\t\t} satisfies WipeTargets;\n\t}).pipe(Effect.withSpan('orchestrator.snapshot.wipe.plan'));\n\n// -----------------------------------------------------------------------------\n// Wipe\n// -----------------------------------------------------------------------------\n\n/**\n * Tear down a stack's live footprint. Snapshots survive by default\n * (architecture § wipe).\n *\n * Order:\n *   1. Force-remove managed containers by `{ app, stack }` labels.\n *   2. Remove managed networks and volumes by the same label filter.\n *   3. Remove state.json.\n *   4. Remove the runtime tree EXCEPT the snapshot catalog by default.\n *   5. Remove the now-empty stack root when nothing survived (no\n *      preserved child remains) so wipe doesn't leak an empty\n *      `stacks/<stack>/` directory.\n */\nexport const runWipe = (\n\tinputs: WipeInputs,\n): Effect.Effect<void, WipePhaseError, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t'devstack.snapshot.phase': 'wipe',\n\t\t\t'devstack.app': inputs.labelMatch.app,\n\t\t\t'devstack.stack': inputs.labelMatch.stack,\n\t\t});\n\n\t\t// 1. Containers.\n\t\tyield* inputs.runtime\n\t\t\t.removeManagedContainers(inputs.labelMatch)\n\t\t\t.pipe(Effect.catch(failPhase('sweep-containers', `container sweep failed`)));\n\n\t\t// 2. Networks + volumes.\n\t\tyield* inputs.runtime\n\t\t\t.removeManagedNetworks(inputs.labelMatch)\n\t\t\t.pipe(Effect.catch(failPhase('sweep-networks-volumes', `network sweep failed`)));\n\t\tyield* inputs.runtime\n\t\t\t.removeManagedVolumes(inputs.labelMatch)\n\t\t\t.pipe(Effect.catch(failPhase('sweep-networks-volumes', `volume sweep failed`)));\n\n\t\t// 3. Remove state.json.\n\t\tyield* fs\n\t\t\t.remove(inputs.stateFilePath, { force: true })\n\t\t\t.pipe(Effect.catch(failPhase('remove-state', `remove state.json failed`)));\n\n\t\t// 4. Remove the runtime tree — but PRESERVE snapshots by default.\n\t\t//    Strategy: enumerate the stack root and remove each child the\n\t\t//    preserve predicate does NOT keep (`snapshots/` by default;\n\t\t//    `cache/` only when `keepCache`). Stack-local artifact caches\n\t\t//    are state and are removed unless explicitly requested.\n\t\tconst policy = resolvePreservePolicy(inputs);\n\t\tconst children = yield* fs\n\t\t\t.readDirectory(inputs.stackRoot)\n\t\t\t.pipe(Effect.catch(() => Effect.succeed([] as ReadonlyArray<string>)));\n\t\tlet preservedCount = 0;\n\t\tfor (const name of children) {\n\t\t\tif (isPreservedChild(name, policy)) {\n\t\t\t\tpreservedCount += 1;\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tyield* fs\n\t\t\t\t.remove(`${inputs.stackRoot}/${name}`, { recursive: true, force: true })\n\t\t\t\t.pipe(Effect.catch(failPhase('remove-runtime-tree', `remove ${name} failed`)));\n\t\t}\n\n\t\t// 5. Reap the now-empty stack root. When NOTHING was preserved\n\t\t//    (no `snapshots/`/`cache/` survivor) every child was removed in\n\t\t//    step 4 — any child whose removal FAILED would have raised a\n\t\t//    `remove-runtime-tree` error and aborted before here — so the\n\t\t//    directory is empty at this point. Leaving it behind leaks an\n\t\t//    empty `stacks/<stack>/` shell that `prune --list` would show as\n\t\t//    a bare group. `recursive` is required to remove a directory at\n\t\t//    all (a plain `remove` raises EISDIR even for an empty dir); it\n\t\t//    is safe here precisely BECAUSE the `preservedCount === 0` guard\n\t\t//    means no preserved subtree exists to be recursively swept.\n\t\t//    Best-effort: a (racing) re-created child just leaves the dir.\n\t\tif (preservedCount === 0 && children.length > 0) {\n\t\t\tyield* fs.remove(inputs.stackRoot, { recursive: true, force: true }).pipe(Effect.ignore);\n\t\t}\n\t}).pipe(Effect.withSpan('orchestrator.snapshot.wipe'));\n\n/** Centralized constant — the canonical snapshot-catalog directory\n *  name. Used by both `runWipe` (to preserve) and the substrate's\n *  path resolver (to compose `snapshotDir`). Distilled §17 calls out\n *  the \"centralize the snapshots-dir-name constant\" opportunity. */\nexport const SNAPSHOTS_DIR_NAME = 'snapshots';\n\n/** Canonical stack-local artifact-cache directory name. `runWipe`\n *  preserves it only under `keepCache`; otherwise it is removed so a\n *  reset re-proves on-chain artifacts against the next chain. */\nexport const CACHE_DIR_NAME = 'cache';\n"],"mappings":";;;AAsBA,IAAa,iBAAb,cAAoC,OAAO,kBAAkC,CAC5E,0BACA;CACC,OAAO,OAAO,SAAS;EACtB;EACA;EACA;EACA;EACA,CAAC;CACF,QAAQ,OAAO;CACf,OAAO,OAAO,SAAS,OAAO,OAAO;CACrC,CACD,CAAC;AAEF,MAAM,YAAY,gBAAgB,eAAe;AAgCjD,MAAM,yBAAyB,YAAwC;CACtE,eAAe,OAAO,iBAAiB;CACvC,WAAW,OAAO,aAAa;CAC/B;;;;;AAMD,MAAM,oBAAoB,MAAc,WACtC,OAAO,iBAAiB,SAAA,eACxB,OAAO,aAAa,SAAA;;;;;;;;AA4CtB,MAAa,YACZ,WAEA,OAAO,IAAI,aAAa;CACvB,MAAM,KAAK,OAAO,WAAW;AAC7B,QAAO,OAAO,oBAAoB;EACjC,2BAA2B;EAC3B,gBAAgB,OAAO,WAAW;EAClC,kBAAkB,OAAO,WAAW;EACpC,CAAC;CAKF,MAAM,cAAa,OAHI,OAAO,QAC5B,gBAAgB,OAAO,WAAkC,CACzD,KAAK,OAAO,MAAM,UAAU,oBAAoB,2BAA2B,CAAC,CAAC,EACpD,KAAK,MAAM,EAAE,KAAK,CAAC,MAAM;CAEpD,MAAM,SAAS,sBAAsB,OAAO;CAC5C,MAAM,WAAW,OAAO,GACtB,cAAc,OAAO,UAAU,CAC/B,KAAK,OAAO,YAAY,OAAO,QAAQ,EAAE,CAA0B,CAAC,CAAC;CACvE,MAAM,cAA6B,EAAE;CACrC,MAAM,YAA2B,EAAE;AACnC,MAAK,MAAM,QAAQ,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE;AACxC,MAAI,iBAAiB,MAAM,OAAO,EAAE;AACnC,aAAU,KAAK,KAAK;AACpB;;AAED,cAAY,KAAK,GAAG,OAAO,UAAU,GAAG,OAAO;;AAGhD,QAAO;EACN,KAAK,OAAO,WAAW;EACvB,OAAO,OAAO,WAAW;EACzB;EACA,mBAAmB,OAAO;EAC1B,kBAAkB,OAAO;EACzB,WAAW,OAAO;EAClB,WAAW,OAAO;EAClB;EACA;EACA;EACA,CAAC,KAAK,OAAO,SAAS,kCAAkC,CAAC;;;;;;;;;;;;;;AAmB5D,MAAa,WACZ,WAEA,OAAO,IAAI,aAAa;CACvB,MAAM,KAAK,OAAO,WAAW;AAC7B,QAAO,OAAO,oBAAoB;EACjC,2BAA2B;EAC3B,gBAAgB,OAAO,WAAW;EAClC,kBAAkB,OAAO,WAAW;EACpC,CAAC;AAGF,QAAO,OAAO,QACZ,wBAAwB,OAAO,WAAW,CAC1C,KAAK,OAAO,MAAM,UAAU,oBAAoB,yBAAyB,CAAC,CAAC;AAG7E,QAAO,OAAO,QACZ,sBAAsB,OAAO,WAAW,CACxC,KAAK,OAAO,MAAM,UAAU,0BAA0B,uBAAuB,CAAC,CAAC;AACjF,QAAO,OAAO,QACZ,qBAAqB,OAAO,WAAW,CACvC,KAAK,OAAO,MAAM,UAAU,0BAA0B,sBAAsB,CAAC,CAAC;AAGhF,QAAO,GACL,OAAO,OAAO,eAAe,EAAE,OAAO,MAAM,CAAC,CAC7C,KAAK,OAAO,MAAM,UAAU,gBAAgB,2BAA2B,CAAC,CAAC;CAO3E,MAAM,SAAS,sBAAsB,OAAO;CAC5C,MAAM,WAAW,OAAO,GACtB,cAAc,OAAO,UAAU,CAC/B,KAAK,OAAO,YAAY,OAAO,QAAQ,EAAE,CAA0B,CAAC,CAAC;CACvE,IAAI,iBAAiB;AACrB,MAAK,MAAM,QAAQ,UAAU;AAC5B,MAAI,iBAAiB,MAAM,OAAO,EAAE;AACnC,qBAAkB;AAClB;;AAED,SAAO,GACL,OAAO,GAAG,OAAO,UAAU,GAAG,QAAQ;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC,CACvE,KAAK,OAAO,MAAM,UAAU,uBAAuB,UAAU,KAAK,SAAS,CAAC,CAAC;;AAchF,KAAI,mBAAmB,KAAK,SAAS,SAAS,EAC7C,QAAO,GAAG,OAAO,OAAO,WAAW;EAAE,WAAW;EAAM,OAAO;EAAM,CAAC,CAAC,KAAK,OAAO,OAAO;EAExF,CAAC,KAAK,OAAO,SAAS,6BAA6B,CAAC;;;;;AAMvD,MAAa,qBAAqB;;;;AAKlC,MAAa,iBAAiB"}

package/dist/plugins/account/codegen.mjs

@@ -1,4 +1,4 @@
-import { Effect } from "effect";
+import { defineSimpleConstExport } from "../internal/codegen-helpers.mjs";
 //#region src/plugins/account/codegen.ts
 /** Construct the Codegenable contribution. One emit per account.
 *
@@ -6,15 +6,16 @@ import { Effect } from "effect";
 *  accounts in a single stack get co-located but typed-distinct
 *  emissions; the codegen orchestrator can fold them into a single
 *  `accounts` namespace at staging time. */
-const makeAccountCodegen = (parts) => ({
-	kind: "codegenable",
+const makeAccountCodegen = (parts) => defineSimpleConstExport({
 	emitterName: `account/${parts.name}`,
 	outputPath: `accounts/${parts.name}.ts`,
-	sensitive: false,
-	emit: (ctx) => Effect.sync(() => {
-		ctx.exportConst(parts.name, parts.resolved);
-		return ctx.done();
-	})
+	exportName: parts.name,
+	value: parts.resolved,
+	aggregate: {
+		kind: "account",
+		bucket: "accounts.ts",
+		project: (exported) => exported
+	}
 });
 //#endregion
 export { makeAccountCodegen };