@mysten-incubation/devstack 0.0.1 → 0.1.1

package/dist/substrate/runtime/capability-sinks/service.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"service.mjs","names":[],"sources":["../../../../src/substrate/runtime/capability-sinks/service.ts"],"sourcesContent":["// CapabilitySinks — kind→sink registry.\n//\n// Architecture § Substrate name-blindness (STYLE_GUIDE Open slot O6):\n// the supervisor used to import a hardcoded list of capability-decl\n// modules and dispatch by name on a switch. This module inverts that:\n// the substrate exposes an Effect.Service the supervisor consults\n// once per harvested contribution; plugin-authored kinds can be\n// registered via the same surface that ships the built-ins. Adding a\n// new capability contract is `registerSink({ kind, accept })` — no\n// supervisor edit required.\n//\n// The dispatch is structural on the `kind` literal of the contribution.\n// The substrate never inspects the contribution's payload; the sink's\n// `accept` body owns interpretation. The substrate never imports a\n// concrete plugin module.\n\nimport { Context, Data, Effect, Layer, Ref, Scope } from 'effect';\n\nimport type { CapabilityDecl } from '../../../contracts/capability-decl.ts';\nimport type { StrategyContributorDecl } from '../../../contracts/strategy-contributor.ts';\nimport type { PluginKey } from '../../brand.ts';\nimport type { EngineEvent } from '../../events.ts';\nimport type { Identity } from '../../identity.ts';\nimport type { PluginErrorContribution } from '../../plugin.ts';\n\n// -----------------------------------------------------------------------------\n// Contribution surface\n// -----------------------------------------------------------------------------\n\n/** A single harvested item — either a capability decl OR an error\n *  contribution. Discriminated by the literal `kind`. The supervisor\n *  produces one of these for each item it pulls off a plugin during\n *  the harvest loop. */\nexport type AnyContribution =\n\t| { readonly source: 'capability'; readonly decl: CapabilityDecl }\n\t| { readonly source: 'error'; readonly contribution: PluginErrorContribution };\n\n/** The discriminator the sinks register against. Substrate-owned\n *  literal vocabulary — plugins authoring a custom contract add a new\n *  literal and a sink. */\nexport type ContributionKind =\n\t| 'snapshotable'\n\t| 'routable'\n\t| 'codegenable'\n\t| 'projection'\n\t| 'strategy-contributor'\n\t| 'liveness-classifier'\n\t| 'error-contribution'\n\t| (string & { readonly __extensionKind?: never });\n\n// -----------------------------------------------------------------------------\n// Harvest context\n// -----------------------------------------------------------------------------\n\n/** Context the harvest loop supplies to each sink invocation. Carries\n *  the plugin's key + identity so sinks can attribute their work\n *  without naming the plugin. `publish` is the supervisor-owned event\n *  path, so sink-emitted events keep the same ordering/projection\n *  semantics as lifecycle/log/error events. The plugin scope is\n *  exposed via `Scope.Scope` in the sink's R-channel — sinks\n *  `addFinalizer` lands on the plugin's scope so registrations reap\n *  on plugin teardown. */\nexport interface HarvestContext {\n\treadonly pluginKey: PluginKey;\n\treadonly identity: Identity;\n\treadonly publish: (event: EngineEvent) => Effect.Effect<void, never, never>;\n\treadonly registerStrategy: (\n\t\tdecl: StrategyContributorDecl<string, unknown>,\n\t) => Effect.Effect<void, never, Scope.Scope>;\n}\n\n// -----------------------------------------------------------------------------\n// Sink shape\n// -----------------------------------------------------------------------------\n\n/** A sink for a specific contribution kind. `accept` is the\n *  registration body — runs on the plugin's scope so its finalizers\n *  reap on plugin teardown. */\nexport interface CapabilitySink<K extends ContributionKind, TDecl> {\n\treadonly kind: K;\n\treadonly accept: (decl: TDecl, ctx: HarvestContext) => Effect.Effect<void, unknown, Scope.Scope>;\n}\n\n// -----------------------------------------------------------------------------\n// Dispatch errors\n// -----------------------------------------------------------------------------\n\n/** Surfaced when `dispatch` receives a kind no sink is registered for.\n *  Substrate stays open by default — unknown kinds are no-ops at the\n *  supervisor's call site (see `dispatchOrIgnore`); but tests + custom\n *  callers can drive the strict surface via `dispatch`. */\nexport class UnknownContributionKind extends Data.TaggedError('UnknownContributionKind')<{\n\treadonly kind: string;\n\treadonly known: ReadonlyArray<string>;\n}> {}\n\n/** Surfaced when a registered sink rejects while handling a known\n *  contribution kind. The original failure stays attached as `cause`\n *  so the supervisor's structured error renderer shows the domain\n *  error, such as `RouteCollision`, underneath the dispatch wrapper. */\nexport class ContributionSinkFailed extends Data.TaggedError('ContributionSinkFailed')<{\n\treadonly kind: string;\n\treadonly message: string;\n\treadonly cause: unknown;\n}> {}\n\n// -----------------------------------------------------------------------------\n// Public service shape\n// -----------------------------------------------------------------------------\n\nexport interface CapabilitySinksShape {\n\t/** Register a sink for a contribution kind. Last-write-wins on\n\t *  duplicate kinds: a plugin-author overlay replaces the built-in.\n\t *  Scope-bound: registering inside a `Layer` and providing the\n\t *  layer to the supervisor's scope reaps the sink on shutdown. */\n\treadonly registerSink: <K extends ContributionKind, TDecl>(\n\t\tsink: CapabilitySink<K, TDecl>,\n\t) => Effect.Effect<void, never, Scope.Scope>;\n\t/** Dispatch a contribution to its registered sink. Errors with\n\t *  `UnknownContributionKind` when no sink matches; the supervisor's\n\t *  loop catches and downgrades to a no-op (per the\n\t *  substrate-open-by-default rule). */\n\treadonly dispatch: (\n\t\tcontribution: AnyContribution,\n\t\tctx: HarvestContext,\n\t) => Effect.Effect<void, UnknownContributionKind | ContributionSinkFailed, Scope.Scope>;\n\t/** Snapshot the kinds the registry currently knows. Diagnostic. */\n\treadonly knownKinds: Effect.Effect<ReadonlyArray<string>>;\n}\n\nexport class CapabilitySinksService extends Context.Service<\n\tCapabilitySinksService,\n\tCapabilitySinksShape\n>()('@devstack-rewrite/substrate/CapabilitySinks') {}\n\n// -----------------------------------------------------------------------------\n// Implementation helper — kind extraction\n// -----------------------------------------------------------------------------\n\n/** Derive the discriminator literal from a harvested contribution.\n *  Substrate name-blindness: this is the ONE place the substrate\n *  reads a `kind` off a decl — every other site routes through the\n *  registered sink, which interprets the payload. */\nexport const kindOf = (contribution: AnyContribution): ContributionKind => {\n\tif (contribution.source === 'error') return 'error-contribution';\n\t// `decl.kind` is a literal on every CapabilityDecl variant; we\n\t// trust the substrate-owned contract here.\n\treturn contribution.decl.kind;\n};\n\n// -----------------------------------------------------------------------------\n// Layer\n// -----------------------------------------------------------------------------\n\ntype SinkAccept = (decl: unknown, ctx: HarvestContext) => Effect.Effect<void, unknown, Scope.Scope>;\n\n/** Layer constructing an empty registry. Built-in sinks ship via the\n *  composed `layerCapabilitySinksDefault` (see `layer.ts`); plugin-\n *  authored sinks compose by providing a Layer that yields the\n *  service and calls `registerSink`. */\nexport const layerCapabilitySinks: Layer.Layer<CapabilitySinksService> = Layer.effect(\n\tCapabilitySinksService,\n\tEffect.gen(function* () {\n\t\tconst sinksRef = yield* Ref.make<ReadonlyMap<string, SinkAccept>>(new Map());\n\n\t\tconst registerSink = <K extends ContributionKind, TDecl>(\n\t\t\tsink: CapabilitySink<K, TDecl>,\n\t\t): Effect.Effect<void, never, Scope.Scope> =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst accept = sink.accept as SinkAccept;\n\t\t\t\tconst prior = yield* Ref.modify(sinksRef, (current) => {\n\t\t\t\t\tconst next = new Map(current);\n\t\t\t\t\tconst had = next.get(sink.kind) ?? null;\n\t\t\t\t\tnext.set(sink.kind, accept);\n\t\t\t\t\treturn [had, next];\n\t\t\t\t});\n\t\t\t\t// Scope finalizer: restore the prior sink (or remove\n\t\t\t\t// entirely) on scope close. Symmetric semantics — a\n\t\t\t\t// plugin-author overlay's scope close restores the\n\t\t\t\t// built-in.\n\t\t\t\tyield* Effect.addFinalizer((_exit) =>\n\t\t\t\t\tRef.update(sinksRef, (current) => {\n\t\t\t\t\t\tconst next = new Map(current);\n\t\t\t\t\t\tif (prior === null) next.delete(sink.kind);\n\t\t\t\t\t\telse next.set(sink.kind, prior);\n\t\t\t\t\t\treturn next;\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t\t\t'capability-sinks.kind': sink.kind,\n\t\t\t\t});\n\t\t\t}).pipe(Effect.withSpan('substrate.capabilitySinks.registerSink'));\n\n\t\tconst dispatch = (\n\t\t\tcontribution: AnyContribution,\n\t\t\tctx: HarvestContext,\n\t\t): Effect.Effect<void, UnknownContributionKind | ContributionSinkFailed, Scope.Scope> =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst kind = kindOf(contribution);\n\t\t\t\tconst sinks = yield* Ref.get(sinksRef);\n\t\t\t\tconst accept = sinks.get(kind);\n\t\t\t\tif (accept === undefined) {\n\t\t\t\t\treturn yield* new UnknownContributionKind({\n\t\t\t\t\t\tkind,\n\t\t\t\t\t\tknown: [...sinks.keys()],\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t\tconst payload: unknown =\n\t\t\t\t\tcontribution.source === 'error' ? contribution.contribution : contribution.decl;\n\t\t\t\tyield* accept(payload, ctx).pipe(\n\t\t\t\t\tEffect.mapError(\n\t\t\t\t\t\t(cause) =>\n\t\t\t\t\t\t\tnew ContributionSinkFailed({\n\t\t\t\t\t\t\t\tkind,\n\t\t\t\t\t\t\t\tmessage: `capability sink '${kind}' failed`,\n\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t\t\t'capability-sinks.kind': kind,\n\t\t\t\t\t'devstack.plugin': ctx.pluginKey,\n\t\t\t\t});\n\t\t\t}).pipe(Effect.withSpan('substrate.capabilitySinks.dispatch'));\n\n\t\tconst knownKinds: Effect.Effect<ReadonlyArray<string>> = Effect.gen(function* () {\n\t\t\tconst sinks = yield* Ref.get(sinksRef);\n\t\t\treturn [...sinks.keys()];\n\t\t});\n\n\t\treturn CapabilitySinksService.of({ registerSink, dispatch, knownKinds });\n\t}),\n);\n"],"mappings":";;;;;;AA2FA,IAAa,0BAAb,cAA6C,KAAK,YAAY,0BAA0B,CAGrF;;;;;AAMH,IAAa,yBAAb,cAA4C,KAAK,YAAY,yBAAyB,CAInF;AA0BH,IAAa,yBAAb,cAA4C,QAAQ,SAGjD,CAAC,8CAA8C,CAAC;;;;;AAUnD,MAAa,UAAU,iBAAoD;AAC1E,KAAI,aAAa,WAAW,QAAS,QAAO;AAG5C,QAAO,aAAa,KAAK;;;;;;AAa1B,MAAa,uBAA4D,MAAM,OAC9E,wBACA,OAAO,IAAI,aAAa;CACvB,MAAM,WAAW,OAAO,IAAI,qBAAsC,IAAI,KAAK,CAAC;CAE5E,MAAM,gBACL,SAEA,OAAO,IAAI,aAAa;EACvB,MAAM,SAAS,KAAK;EACpB,MAAM,QAAQ,OAAO,IAAI,OAAO,WAAW,YAAY;GACtD,MAAM,OAAO,IAAI,IAAI,QAAQ;GAC7B,MAAM,MAAM,KAAK,IAAI,KAAK,KAAK,IAAI;AACnC,QAAK,IAAI,KAAK,MAAM,OAAO;AAC3B,UAAO,CAAC,KAAK,KAAK;IACjB;AAKF,SAAO,OAAO,cAAc,UAC3B,IAAI,OAAO,WAAW,YAAY;GACjC,MAAM,OAAO,IAAI,IAAI,QAAQ;AAC7B,OAAI,UAAU,KAAM,MAAK,OAAO,KAAK,KAAK;OACrC,MAAK,IAAI,KAAK,MAAM,MAAM;AAC/B,UAAO;IACN,CACF;AACD,SAAO,OAAO,oBAAoB,EACjC,yBAAyB,KAAK,MAC9B,CAAC;GACD,CAAC,KAAK,OAAO,SAAS,yCAAyC,CAAC;CAEnE,MAAM,YACL,cACA,QAEA,OAAO,IAAI,aAAa;EACvB,MAAM,OAAO,OAAO,aAAa;EACjC,MAAM,QAAQ,OAAO,IAAI,IAAI,SAAS;EACtC,MAAM,SAAS,MAAM,IAAI,KAAK;AAC9B,MAAI,WAAW,KAAA,EACd,QAAO,OAAO,IAAI,wBAAwB;GACzC;GACA,OAAO,CAAC,GAAG,MAAM,MAAM,CAAC;GACxB,CAAC;AAIH,SAAO,OADN,aAAa,WAAW,UAAU,aAAa,eAAe,aAAa,MACrD,IAAI,CAAC,KAC3B,OAAO,UACL,UACA,IAAI,uBAAuB;GAC1B;GACA,SAAS,oBAAoB,KAAK;GAClC;GACA,CAAC,CACH,CACD;AACD,SAAO,OAAO,oBAAoB;GACjC,yBAAyB;GACzB,mBAAmB,IAAI;GACvB,CAAC;GACD,CAAC,KAAK,OAAO,SAAS,qCAAqC,CAAC;CAE/D,MAAM,aAAmD,OAAO,IAAI,aAAa;AAEhF,SAAO,CAAC,IAAG,OADU,IAAI,IAAI,SAAS,EACrB,MAAM,CAAC;GACvB;AAEF,QAAO,uBAAuB,GAAG;EAAE;EAAc;EAAU;EAAY,CAAC;EACvE,CACF"}
+{"version":3,"file":"service.mjs","names":[],"sources":["../../../../src/substrate/runtime/capability-sinks/service.ts"],"sourcesContent":["// CapabilitySinks — kind→sink registry.\n//\n// Architecture § Substrate name-blindness (STYLE_GUIDE Open slot O6):\n// the supervisor used to import a hardcoded list of capability-decl\n// modules and dispatch by name on a switch. This module inverts that:\n// the substrate exposes an Effect.Service the supervisor consults\n// once per harvested contribution; plugin-authored kinds can be\n// registered via the same surface that ships the built-ins. Adding a\n// new capability contract is `registerSink({ kind, accept })` — no\n// supervisor edit required.\n//\n// The dispatch is structural on the `kind` literal of the contribution.\n// The substrate never inspects the contribution's payload; the sink's\n// `accept` body owns interpretation. The substrate never imports a\n// concrete plugin module.\n\nimport { Context, Data, Effect, Layer, Scope } from 'effect';\n\nimport type { CapabilityDecl } from '../../../contracts/capability-decl.ts';\nimport type { StrategyContributorDecl } from '../../../contracts/strategy-contributor.ts';\nimport type { PluginKey } from '../../brand.ts';\nimport type { EngineEvent } from '../../events.ts';\nimport type { Identity } from '../../identity.ts';\nimport type { PluginErrorContribution } from '../../plugin.ts';\nimport { SpanAttr } from '../observability/spans.ts';\nimport { makeScopedMultimap } from '../scoped-multimap/index.ts';\n\n// -----------------------------------------------------------------------------\n// Contribution surface\n// -----------------------------------------------------------------------------\n\n/** A single harvested item — either a capability decl OR an error\n *  contribution. Discriminated by the literal `kind`. The supervisor\n *  produces one of these for each item it pulls off a plugin during\n *  the harvest loop. */\nexport type AnyContribution =\n\t| { readonly source: 'capability'; readonly decl: CapabilityDecl }\n\t| { readonly source: 'error'; readonly contribution: PluginErrorContribution };\n\n/** The discriminator the sinks register against. Substrate-owned\n *  literal vocabulary — plugins authoring a custom contract add a new\n *  literal and a sink. */\nexport type ContributionKind =\n\t| 'snapshotable'\n\t| 'routable'\n\t| 'codegenable'\n\t| 'projection'\n\t| 'strategy-contributor'\n\t| 'error-contribution'\n\t| (string & { readonly __extensionKind?: never });\n\n// -----------------------------------------------------------------------------\n// Harvest context\n// -----------------------------------------------------------------------------\n\n/** Context the harvest loop supplies to each sink invocation. Carries\n *  the plugin's key + identity so sinks can attribute their work\n *  without naming the plugin. `publish` is the supervisor-owned event\n *  path, so sink-emitted events keep the same ordering/projection\n *  semantics as lifecycle/log/error events. The plugin scope is\n *  exposed via `Scope.Scope` in the sink's R-channel — sinks\n *  `addFinalizer` lands on the plugin's scope so registrations reap\n *  on plugin teardown. */\nexport interface HarvestContext {\n\treadonly pluginKey: PluginKey;\n\treadonly identity: Identity;\n\treadonly publish: (event: EngineEvent) => Effect.Effect<void, never, never>;\n\treadonly registerStrategy: (\n\t\tdecl: StrategyContributorDecl<string, unknown>,\n\t) => Effect.Effect<void, never, Scope.Scope>;\n}\n\n// -----------------------------------------------------------------------------\n// Sink shape\n// -----------------------------------------------------------------------------\n\n/** A sink for a specific contribution kind. `accept` is the\n *  registration body — runs on the plugin's scope so its finalizers\n *  reap on plugin teardown. */\nexport interface CapabilitySink<K extends ContributionKind, TDecl> {\n\treadonly kind: K;\n\treadonly accept: (decl: TDecl, ctx: HarvestContext) => Effect.Effect<void, unknown, Scope.Scope>;\n}\n\n// -----------------------------------------------------------------------------\n// Dispatch errors\n// -----------------------------------------------------------------------------\n\n/** Surfaced when `dispatch` receives a kind no sink is registered for.\n *  Substrate stays open by default — unknown kinds are no-ops at the\n *  supervisor's call site (see `dispatchOrIgnore`); but tests + custom\n *  callers can drive the strict surface via `dispatch`. */\nexport class UnknownContributionKind extends Data.TaggedError('UnknownContributionKind')<{\n\treadonly kind: string;\n\treadonly known: ReadonlyArray<string>;\n}> {}\n\n/** Surfaced when a registered sink rejects while handling a known\n *  contribution kind. The original failure stays attached as `cause`\n *  so the supervisor's structured error renderer shows the domain\n *  error, such as `RouteCollision`, underneath the dispatch wrapper. */\nexport class ContributionSinkFailed extends Data.TaggedError('ContributionSinkFailed')<{\n\treadonly kind: string;\n\treadonly message: string;\n\treadonly cause: unknown;\n}> {}\n\n// -----------------------------------------------------------------------------\n// Public service shape\n// -----------------------------------------------------------------------------\n\nexport interface CapabilitySinksShape {\n\t/** Register a sink for a contribution kind. Last-write-wins on\n\t *  duplicate kinds: a plugin-author overlay shadows the built-in\n\t *  (the highest-seq surviving registration wins at `dispatch`).\n\t *  Scope-bound: registering inside a `Layer` and providing the\n\t *  layer to the supervisor's scope reaps the sink on shutdown.\n\t *  Closing an overlay's scope un-shadows the built-in WITHOUT\n\t *  clobbering any newer sibling registration for the same kind —\n\t *  the scoped-multimap drops only this registration's own entry. */\n\treadonly registerSink: <K extends ContributionKind, TDecl>(\n\t\tsink: CapabilitySink<K, TDecl>,\n\t) => Effect.Effect<void, never, Scope.Scope>;\n\t/** Dispatch a contribution to its registered sink. Errors with\n\t *  `UnknownContributionKind` when no sink matches; the supervisor's\n\t *  loop catches and downgrades to a no-op (per the\n\t *  substrate-open-by-default rule). */\n\treadonly dispatch: (\n\t\tcontribution: AnyContribution,\n\t\tctx: HarvestContext,\n\t) => Effect.Effect<void, UnknownContributionKind | ContributionSinkFailed, Scope.Scope>;\n\t/** Snapshot the kinds the registry currently knows. Diagnostic. */\n\treadonly knownKinds: Effect.Effect<ReadonlyArray<string>>;\n}\n\nexport class CapabilitySinksService extends Context.Service<\n\tCapabilitySinksService,\n\tCapabilitySinksShape\n>()('@devstack/substrate/CapabilitySinks') {}\n\n// -----------------------------------------------------------------------------\n// Implementation helper — kind extraction\n// -----------------------------------------------------------------------------\n\n/** Derive the discriminator literal from a harvested contribution.\n *  Substrate name-blindness: this is the ONE place the substrate\n *  reads a `kind` off a decl — every other site routes through the\n *  registered sink, which interprets the payload. */\nexport const kindOf = (contribution: AnyContribution): ContributionKind => {\n\tif (contribution.source === 'error') return 'error-contribution';\n\t// `decl.kind` is a literal on every CapabilityDecl variant; we\n\t// trust the substrate-owned contract here.\n\treturn contribution.decl.kind;\n};\n\n// -----------------------------------------------------------------------------\n// Layer\n// -----------------------------------------------------------------------------\n\ntype SinkAccept = (decl: unknown, ctx: HarvestContext) => Effect.Effect<void, unknown, Scope.Scope>;\n\n/** Layer constructing an empty registry. Built-in sinks ship via the\n *  composed `layerCapabilitySinksDefault` (see `layer.ts`); plugin-\n *  authored sinks compose by providing a Layer that yields the\n *  service and calls `registerSink`. */\nexport const layerCapabilitySinks: Layer.Layer<CapabilitySinksService> = Layer.effect(\n\tCapabilitySinksService,\n\tEffect.gen(function* () {\n\t\t// Seq-tagged multimap, NOT a single-value-per-kind map. The old\n\t\t// shape stored one accept per kind and restored a captured\n\t\t// `prior` on scope close — correct only under strict LIFO. With\n\t\t// sibling scopes (an overlay registered while another overlay for\n\t\t// the same kind is still live) the first to close would restore\n\t\t// ITS stale `prior` and clobber the live sibling. The multimap's\n\t\t// drop-by-seq finalizer removes only this registration's entry,\n\t\t// so the surviving highest-seq sink keeps winning regardless of\n\t\t// close order.\n\t\tconst store = yield* makeScopedMultimap<string, SinkAccept>();\n\n\t\tconst registerSink = <K extends ContributionKind, TDecl>(\n\t\t\tsink: CapabilitySink<K, TDecl>,\n\t\t): Effect.Effect<void, never, Scope.Scope> =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst accept = sink.accept as SinkAccept;\n\t\t\t\t// The multimap's register is already uninterruptible and\n\t\t\t\t// wires the drop-by-seq finalizer atomically with the\n\t\t\t\t// append (mirrors `leaseBroker.tryAcquire`).\n\t\t\t\tyield* store.register([{ key: sink.kind, value: accept }]);\n\t\t\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t\t\t[SpanAttr.capabilitySinksKind]: sink.kind,\n\t\t\t\t});\n\t\t\t}).pipe(Effect.withSpan('substrate.capabilitySinks.registerSink'));\n\n\t\tconst dispatch = (\n\t\t\tcontribution: AnyContribution,\n\t\t\tctx: HarvestContext,\n\t\t): Effect.Effect<void, UnknownContributionKind | ContributionSinkFailed, Scope.Scope> =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst kind = kindOf(contribution);\n\t\t\t\tconst entries = yield* store.entriesFor(kind);\n\t\t\t\tif (entries.length === 0) {\n\t\t\t\t\tconst known = yield* store.keys;\n\t\t\t\t\treturn yield* new UnknownContributionKind({ kind, known });\n\t\t\t\t}\n\t\t\t\t// Last-write-wins: the highest-seq surviving registration\n\t\t\t\t// is the active sink for this kind.\n\t\t\t\tlet chosen = entries[0]!;\n\t\t\t\tfor (let i = 1; i < entries.length; i++) {\n\t\t\t\t\tif (entries[i]!.seq > chosen.seq) chosen = entries[i]!;\n\t\t\t\t}\n\t\t\t\tconst accept = chosen.value;\n\t\t\t\tconst payload: unknown =\n\t\t\t\t\tcontribution.source === 'error' ? contribution.contribution : contribution.decl;\n\t\t\t\tyield* accept(payload, ctx).pipe(\n\t\t\t\t\tEffect.mapError(\n\t\t\t\t\t\t(cause) =>\n\t\t\t\t\t\t\tnew ContributionSinkFailed({\n\t\t\t\t\t\t\t\tkind,\n\t\t\t\t\t\t\t\tmessage: `capability sink '${kind}' failed`,\n\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t\t\t[SpanAttr.capabilitySinksKind]: kind,\n\t\t\t\t\t[SpanAttr.plugin]: ctx.pluginKey,\n\t\t\t\t});\n\t\t\t}).pipe(Effect.withSpan('substrate.capabilitySinks.dispatch'));\n\n\t\tconst knownKinds: Effect.Effect<ReadonlyArray<string>> = store.keys;\n\n\t\treturn CapabilitySinksService.of({ registerSink, dispatch, knownKinds });\n\t}),\n);\n"],"mappings":";;;;;;;;;AA4FA,IAAa,0BAAb,cAA6C,KAAK,YAAY,0BAA0B,CAGrF;;;;;AAMH,IAAa,yBAAb,cAA4C,KAAK,YAAY,yBAAyB,CAInF;AA8BH,IAAa,yBAAb,cAA4C,QAAQ,SAGjD,CAAC,sCAAsC,CAAC;;;;;AAU3C,MAAa,UAAU,iBAAoD;AAC1E,KAAI,aAAa,WAAW,QAAS,QAAO;AAG5C,QAAO,aAAa,KAAK;;;;;;AAa1B,MAAa,uBAA4D,MAAM,OAC9E,wBACA,OAAO,IAAI,aAAa;CAUvB,MAAM,QAAQ,OAAO,oBAAwC;CAE7D,MAAM,gBACL,SAEA,OAAO,IAAI,aAAa;EACvB,MAAM,SAAS,KAAK;AAIpB,SAAO,MAAM,SAAS,CAAC;GAAE,KAAK,KAAK;GAAM,OAAO;GAAQ,CAAC,CAAC;AAC1D,SAAO,OAAO,oBAAoB,GAChC,SAAS,sBAAsB,KAAK,MACrC,CAAC;GACD,CAAC,KAAK,OAAO,SAAS,yCAAyC,CAAC;CAEnE,MAAM,YACL,cACA,QAEA,OAAO,IAAI,aAAa;EACvB,MAAM,OAAO,OAAO,aAAa;EACjC,MAAM,UAAU,OAAO,MAAM,WAAW,KAAK;AAC7C,MAAI,QAAQ,WAAW,EAEtB,QAAO,OAAO,IAAI,wBAAwB;GAAE;GAAM,OAAA,OAD7B,MAAM;GAC8B,CAAC;EAI3D,IAAI,SAAS,QAAQ;AACrB,OAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,IACnC,KAAI,QAAQ,GAAI,MAAM,OAAO,IAAK,UAAS,QAAQ;EAEpD,MAAM,SAAS,OAAO;AAGtB,SAAO,OADN,aAAa,WAAW,UAAU,aAAa,eAAe,aAAa,MACrD,IAAI,CAAC,KAC3B,OAAO,UACL,UACA,IAAI,uBAAuB;GAC1B;GACA,SAAS,oBAAoB,KAAK;GAClC;GACA,CAAC,CACH,CACD;AACD,SAAO,OAAO,oBAAoB;IAChC,SAAS,sBAAsB;IAC/B,SAAS,SAAS,IAAI;GACvB,CAAC;GACD,CAAC,KAAK,OAAO,SAAS,qCAAqC,CAAC;CAE/D,MAAM,aAAmD,MAAM;AAE/D,QAAO,uBAAuB,GAAG;EAAE;EAAc;EAAU;EAAY,CAAC;EACvE,CACF"}

package/dist/substrate/runtime/config-validation.d.mts

@@ -1,8 +1,5 @@
-import { Effect, Schema } from "effect";
-
-//#region src/substrate/runtime/config-validation.d.ts
 declare namespace config_validation_d_exports {
-  export { ConfigErrorFactory, ConfigIssue, decodeConfig, decodeConfigSync, defineConfigError, expectNonEmptyArray, expectNonEmptyString, expectOneOf, expectOptionalNonEmptyString, expectOptionalPort, expectOptionalPositiveInteger, expectPattern, expectPort, expectPositiveFiniteNumber, expectPositiveInteger, expectStringRecord };
+  export { ConfigErrorFactory, ConfigIssue, defineConfigError, expectNonEmptyString, expectOptionalPositiveInteger, expectPort, expectPositiveInteger };
 }
 interface ConfigIssue {
   readonly field: string;
@@ -21,18 +18,9 @@ interface ValidatorOptions<E> {
   readonly hint?: string;
 }
 declare const expectNonEmptyString: <E>(value: unknown, options: ValidatorOptions<E>) => string;
-declare const expectOptionalNonEmptyString: <E>(value: unknown, options: ValidatorOptions<E>) => string | undefined;
 declare const expectPositiveInteger: <E>(value: unknown, options: ValidatorOptions<E>) => number;
 declare const expectOptionalPositiveInteger: <E>(value: unknown, options: ValidatorOptions<E>) => number | undefined;
-declare const expectPositiveFiniteNumber: <E>(value: unknown, options: ValidatorOptions<E>) => number;
 declare const expectPort: <E>(value: unknown, options: ValidatorOptions<E>) => number;
-declare const expectOptionalPort: <E>(value: unknown, options: ValidatorOptions<E>) => number | undefined;
-declare const expectStringRecord: <E>(value: unknown, options: ValidatorOptions<E>) => Readonly<Record<string, string>>;
-declare const expectOneOf: <const Values extends ReadonlyArray<string>, E>(value: unknown, values: Values, options: ValidatorOptions<E>) => Values[number];
-declare const expectNonEmptyArray: <T, E>(value: ReadonlyArray<T> | undefined, options: ValidatorOptions<E>) => ReadonlyArray<T>;
-declare const expectPattern: <E>(value: string, pattern: RegExp, options: ValidatorOptions<E>) => string;
-declare const decodeConfig: <S extends Schema.Decoder<unknown>, E>(schema: S, value: unknown, options: ValidatorOptions<E>) => Effect.Effect<S["Type"], E>;
-declare const decodeConfigSync: <S extends Schema.Decoder<unknown>, E>(schema: S, value: unknown, options: ValidatorOptions<E>) => S["Type"];
 //#endregion
 export { ConfigIssue, config_validation_d_exports };
 //# sourceMappingURL=config-validation.d.mts.map

package/dist/substrate/runtime/config-validation.mjs

@@ -1,21 +1,11 @@
 import { __exportAll } from "../../_virtual/_rolldown/runtime.mjs";
-import { Effect, Schema } from "effect";
 //#region src/substrate/runtime/config-validation.ts
 var config_validation_exports = /* @__PURE__ */ __exportAll({
-	decodeConfig: () => decodeConfig,
-	decodeConfigSync: () => decodeConfigSync,
 	defineConfigError: () => defineConfigError,
-	expectNonEmptyArray: () => expectNonEmptyArray,
 	expectNonEmptyString: () => expectNonEmptyString,
-	expectOneOf: () => expectOneOf,
-	expectOptionalNonEmptyString: () => expectOptionalNonEmptyString,
-	expectOptionalPort: () => expectOptionalPort,
 	expectOptionalPositiveInteger: () => expectOptionalPositiveInteger,
-	expectPattern: () => expectPattern,
 	expectPort: () => expectPort,
-	expectPositiveFiniteNumber: () => expectPositiveFiniteNumber,
-	expectPositiveInteger: () => expectPositiveInteger,
-	expectStringRecord: () => expectStringRecord
+	expectPositiveInteger: () => expectPositiveInteger
 });
 const defineConfigError = (tag) => (issue) => ({
 	_tag: tag,
@@ -32,10 +22,6 @@ const expectNonEmptyString = (value, options) => {
 		...options.hint === void 0 ? {} : { hint: options.hint }
 	});
 };
-const expectOptionalNonEmptyString = (value, options) => {
-	if (value === void 0) return void 0;
-	return expectNonEmptyString(value, options);
-};
 const expectPositiveInteger = (value, options) => {
 	if (typeof value === "number" && Number.isInteger(value) && value > 0) return value;
 	return fail(options.mkError, {
@@ -48,14 +34,6 @@ const expectOptionalPositiveInteger = (value, options) => {
 	if (value === void 0) return void 0;
 	return expectPositiveInteger(value, options);
 };
-const expectPositiveFiniteNumber = (value, options) => {
-	if (typeof value === "number" && Number.isFinite(value) && value > 0) return value;
-	return fail(options.mkError, {
-		field: options.field,
-		message: options.message ?? "must be a positive finite number",
-		...options.hint === void 0 ? {} : { hint: options.hint }
-	});
-};
 const expectPort = (value, options) => {
 	if (typeof value === "number" && Number.isInteger(value) && value > 0 && value <= 65535) return value;
 	return fail(options.mkError, {
@@ -64,74 +42,7 @@ const expectPort = (value, options) => {
 		...options.hint === void 0 ? {} : { hint: options.hint }
 	});
 };
-const expectOptionalPort = (value, options) => {
-	if (value === void 0) return void 0;
-	return expectPort(value, options);
-};
-const expectStringRecord = (value, options) => {
-	if (value === void 0) return {};
-	if (typeof value !== "object" || value === null || Array.isArray(value)) return fail(options.mkError, {
-		field: options.field,
-		message: options.message ?? "must be an object of string values",
-		...options.hint === void 0 ? {} : { hint: options.hint }
-	});
-	for (const [key, entry] of Object.entries(value)) {
-		if (key.length === 0) return fail(options.mkError, {
-			field: options.field,
-			message: "environment variable names must be non-empty",
-			...options.hint === void 0 ? {} : { hint: options.hint }
-		});
-		if (typeof entry !== "string") return fail(options.mkError, {
-			field: `${options.field}.${key}`,
-			message: "must be a string",
-			...options.hint === void 0 ? {} : { hint: options.hint }
-		});
-	}
-	return value;
-};
-const expectOneOf = (value, values, options) => {
-	if (typeof value === "string" && values.includes(value)) return value;
-	return fail(options.mkError, {
-		field: options.field,
-		message: options.message ?? `must be one of ${values.map((v) => `'${v}'`).join(", ")}`,
-		...options.hint === void 0 ? {} : { hint: options.hint }
-	});
-};
-const expectNonEmptyArray = (value, options) => {
-	if (Array.isArray(value) && value.length > 0) return value;
-	return fail(options.mkError, {
-		field: options.field,
-		message: options.message ?? "must be a non-empty array",
-		...options.hint === void 0 ? {} : { hint: options.hint }
-	});
-};
-const expectPattern = (value, pattern, options) => {
-	if (pattern.test(value)) return value;
-	return fail(options.mkError, {
-		field: options.field,
-		message: options.message ?? `must match ${pattern.source}`,
-		...options.hint === void 0 ? {} : { hint: options.hint }
-	});
-};
-const decodeConfig = (schema, value, options) => Schema.decodeUnknownEffect(schema)(value).pipe(Effect.mapError((cause) => options.mkError({
-	field: options.field,
-	message: options.message ?? "failed to decode config value",
-	...options.hint === void 0 ? {} : { hint: options.hint },
-	cause
-})));
-const decodeConfigSync = (schema, value, options) => {
-	try {
-		return Schema.decodeUnknownSync(schema)(value);
-	} catch (cause) {
-		return fail(options.mkError, {
-			field: options.field,
-			message: options.message ?? "failed to decode config value",
-			...options.hint === void 0 ? {} : { hint: options.hint },
-			cause
-		});
-	}
-};
 //#endregion
-export { config_validation_exports, defineConfigError, expectNonEmptyArray, expectNonEmptyString, expectOneOf, expectOptionalNonEmptyString, expectOptionalPort, expectOptionalPositiveInteger, expectPositiveFiniteNumber, expectPositiveInteger, expectStringRecord };
+export { config_validation_exports, defineConfigError, expectNonEmptyString, expectOptionalPositiveInteger, expectPositiveInteger };
 
 //# sourceMappingURL=config-validation.mjs.map

package/dist/substrate/runtime/config-validation.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"config-validation.mjs","names":[],"sources":["../../../src/substrate/runtime/config-validation.ts"],"sourcesContent":["import { Effect, Schema } from 'effect';\n\nexport interface ConfigIssue {\n\treadonly field: string;\n\treadonly message: string;\n\treadonly hint?: string;\n\treadonly cause?: unknown;\n}\n\nexport type ConfigErrorFactory<E> = (issue: ConfigIssue) => E;\n\nexport const defineConfigError =\n\t<const Tag extends string>(tag: Tag) =>\n\t(issue: ConfigIssue): ConfigIssue & { readonly _tag: Tag } => ({\n\t\t_tag: tag,\n\t\t...issue,\n\t});\n\ninterface ValidatorOptions<E> {\n\treadonly field: string;\n\treadonly mkError: ConfigErrorFactory<E>;\n\treadonly message?: string;\n\treadonly hint?: string;\n}\n\nconst fail = <E>(mkError: ConfigErrorFactory<E>, issue: ConfigIssue): never => {\n\tthrow mkError(issue);\n};\n\nexport const expectNonEmptyString = <E>(value: unknown, options: ValidatorOptions<E>): string => {\n\tif (typeof value === 'string' && value.length > 0) return value;\n\treturn fail(options.mkError, {\n\t\tfield: options.field,\n\t\tmessage: options.message ?? 'must be a non-empty string',\n\t\t...(options.hint === undefined ? {} : { hint: options.hint }),\n\t});\n};\n\nexport const expectOptionalNonEmptyString = <E>(\n\tvalue: unknown,\n\toptions: ValidatorOptions<E>,\n): string | undefined => {\n\tif (value === undefined) return undefined;\n\treturn expectNonEmptyString(value, options);\n};\n\nexport const expectPositiveInteger = <E>(value: unknown, options: ValidatorOptions<E>): number => {\n\tif (typeof value === 'number' && Number.isInteger(value) && value > 0) return value;\n\treturn fail(options.mkError, {\n\t\tfield: options.field,\n\t\tmessage: options.message ?? 'must be a positive integer',\n\t\t...(options.hint === undefined ? {} : { hint: options.hint }),\n\t});\n};\n\nexport const expectOptionalPositiveInteger = <E>(\n\tvalue: unknown,\n\toptions: ValidatorOptions<E>,\n): number | undefined => {\n\tif (value === undefined) return undefined;\n\treturn expectPositiveInteger(value, options);\n};\n\nexport const expectPositiveFiniteNumber = <E>(\n\tvalue: unknown,\n\toptions: ValidatorOptions<E>,\n): number => {\n\tif (typeof value === 'number' && Number.isFinite(value) && value > 0) return value;\n\treturn fail(options.mkError, {\n\t\tfield: options.field,\n\t\tmessage: options.message ?? 'must be a positive finite number',\n\t\t...(options.hint === undefined ? {} : { hint: options.hint }),\n\t});\n};\n\nexport const expectPort = <E>(value: unknown, options: ValidatorOptions<E>): number => {\n\tif (typeof value === 'number' && Number.isInteger(value) && value > 0 && value <= 65_535) {\n\t\treturn value;\n\t}\n\treturn fail(options.mkError, {\n\t\tfield: options.field,\n\t\tmessage: options.message ?? 'must be an integer between 1 and 65535',\n\t\t...(options.hint === undefined ? {} : { hint: options.hint }),\n\t});\n};\n\nexport const expectOptionalPort = <E>(\n\tvalue: unknown,\n\toptions: ValidatorOptions<E>,\n): number | undefined => {\n\tif (value === undefined) return undefined;\n\treturn expectPort(value, options);\n};\n\nexport const expectStringRecord = <E>(\n\tvalue: unknown,\n\toptions: ValidatorOptions<E>,\n): Readonly<Record<string, string>> => {\n\tif (value === undefined) return {};\n\tif (typeof value !== 'object' || value === null || Array.isArray(value)) {\n\t\treturn fail(options.mkError, {\n\t\t\tfield: options.field,\n\t\t\tmessage: options.message ?? 'must be an object of string values',\n\t\t\t...(options.hint === undefined ? {} : { hint: options.hint }),\n\t\t});\n\t}\n\tfor (const [key, entry] of Object.entries(value)) {\n\t\tif (key.length === 0) {\n\t\t\treturn fail(options.mkError, {\n\t\t\t\tfield: options.field,\n\t\t\t\tmessage: 'environment variable names must be non-empty',\n\t\t\t\t...(options.hint === undefined ? {} : { hint: options.hint }),\n\t\t\t});\n\t\t}\n\t\tif (typeof entry !== 'string') {\n\t\t\treturn fail(options.mkError, {\n\t\t\t\tfield: `${options.field}.${key}`,\n\t\t\t\tmessage: 'must be a string',\n\t\t\t\t...(options.hint === undefined ? {} : { hint: options.hint }),\n\t\t\t});\n\t\t}\n\t}\n\treturn value as Readonly<Record<string, string>>;\n};\n\nexport const expectOneOf = <const Values extends ReadonlyArray<string>, E>(\n\tvalue: unknown,\n\tvalues: Values,\n\toptions: ValidatorOptions<E>,\n): Values[number] => {\n\tif (typeof value === 'string' && (values as ReadonlyArray<string>).includes(value)) {\n\t\treturn value as Values[number];\n\t}\n\treturn fail(options.mkError, {\n\t\tfield: options.field,\n\t\tmessage: options.message ?? `must be one of ${values.map((v) => `'${v}'`).join(', ')}`,\n\t\t...(options.hint === undefined ? {} : { hint: options.hint }),\n\t});\n};\n\nexport const expectNonEmptyArray = <T, E>(\n\tvalue: ReadonlyArray<T> | undefined,\n\toptions: ValidatorOptions<E>,\n): ReadonlyArray<T> => {\n\tif (Array.isArray(value) && value.length > 0) return value;\n\treturn fail(options.mkError, {\n\t\tfield: options.field,\n\t\tmessage: options.message ?? 'must be a non-empty array',\n\t\t...(options.hint === undefined ? {} : { hint: options.hint }),\n\t});\n};\n\nexport const expectPattern = <E>(\n\tvalue: string,\n\tpattern: RegExp,\n\toptions: ValidatorOptions<E>,\n): string => {\n\tif (pattern.test(value)) return value;\n\treturn fail(options.mkError, {\n\t\tfield: options.field,\n\t\tmessage: options.message ?? `must match ${pattern.source}`,\n\t\t...(options.hint === undefined ? {} : { hint: options.hint }),\n\t});\n};\n\nexport const decodeConfig = <S extends Schema.Decoder<unknown>, E>(\n\tschema: S,\n\tvalue: unknown,\n\toptions: ValidatorOptions<E>,\n): Effect.Effect<S['Type'], E> =>\n\tSchema.decodeUnknownEffect(schema)(value).pipe(\n\t\tEffect.mapError((cause) =>\n\t\t\toptions.mkError({\n\t\t\t\tfield: options.field,\n\t\t\t\tmessage: options.message ?? 'failed to decode config value',\n\t\t\t\t...(options.hint === undefined ? {} : { hint: options.hint }),\n\t\t\t\tcause,\n\t\t\t}),\n\t\t),\n\t);\n\nexport const decodeConfigSync = <S extends Schema.Decoder<unknown>, E>(\n\tschema: S,\n\tvalue: unknown,\n\toptions: ValidatorOptions<E>,\n): S['Type'] => {\n\ttry {\n\t\treturn Schema.decodeUnknownSync(schema)(value);\n\t} catch (cause) {\n\t\treturn fail(options.mkError, {\n\t\t\tfield: options.field,\n\t\t\tmessage: options.message ?? 'failed to decode config value',\n\t\t\t...(options.hint === undefined ? {} : { hint: options.hint }),\n\t\t\tcause,\n\t\t});\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAWA,MAAa,qBACe,SAC1B,WAA8D;CAC9D,MAAM;CACN,GAAG;CACH;AASF,MAAM,QAAW,SAAgC,UAA8B;AAC9E,OAAM,QAAQ,MAAM;;AAGrB,MAAa,wBAA2B,OAAgB,YAAyC;AAChG,KAAI,OAAO,UAAU,YAAY,MAAM,SAAS,EAAG,QAAO;AAC1D,QAAO,KAAK,QAAQ,SAAS;EAC5B,OAAO,QAAQ;EACf,SAAS,QAAQ,WAAW;EAC5B,GAAI,QAAQ,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,QAAQ,MAAM;EAC5D,CAAC;;AAGH,MAAa,gCACZ,OACA,YACwB;AACxB,KAAI,UAAU,KAAA,EAAW,QAAO,KAAA;AAChC,QAAO,qBAAqB,OAAO,QAAQ;;AAG5C,MAAa,yBAA4B,OAAgB,YAAyC;AACjG,KAAI,OAAO,UAAU,YAAY,OAAO,UAAU,MAAM,IAAI,QAAQ,EAAG,QAAO;AAC9E,QAAO,KAAK,QAAQ,SAAS;EAC5B,OAAO,QAAQ;EACf,SAAS,QAAQ,WAAW;EAC5B,GAAI,QAAQ,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,QAAQ,MAAM;EAC5D,CAAC;;AAGH,MAAa,iCACZ,OACA,YACwB;AACxB,KAAI,UAAU,KAAA,EAAW,QAAO,KAAA;AAChC,QAAO,sBAAsB,OAAO,QAAQ;;AAG7C,MAAa,8BACZ,OACA,YACY;AACZ,KAAI,OAAO,UAAU,YAAY,OAAO,SAAS,MAAM,IAAI,QAAQ,EAAG,QAAO;AAC7E,QAAO,KAAK,QAAQ,SAAS;EAC5B,OAAO,QAAQ;EACf,SAAS,QAAQ,WAAW;EAC5B,GAAI,QAAQ,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,QAAQ,MAAM;EAC5D,CAAC;;AAGH,MAAa,cAAiB,OAAgB,YAAyC;AACtF,KAAI,OAAO,UAAU,YAAY,OAAO,UAAU,MAAM,IAAI,QAAQ,KAAK,SAAS,MACjF,QAAO;AAER,QAAO,KAAK,QAAQ,SAAS;EAC5B,OAAO,QAAQ;EACf,SAAS,QAAQ,WAAW;EAC5B,GAAI,QAAQ,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,QAAQ,MAAM;EAC5D,CAAC;;AAGH,MAAa,sBACZ,OACA,YACwB;AACxB,KAAI,UAAU,KAAA,EAAW,QAAO,KAAA;AAChC,QAAO,WAAW,OAAO,QAAQ;;AAGlC,MAAa,sBACZ,OACA,YACsC;AACtC,KAAI,UAAU,KAAA,EAAW,QAAO,EAAE;AAClC,KAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,MAAM,CACtE,QAAO,KAAK,QAAQ,SAAS;EAC5B,OAAO,QAAQ;EACf,SAAS,QAAQ,WAAW;EAC5B,GAAI,QAAQ,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,QAAQ,MAAM;EAC5D,CAAC;AAEH,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,MAAM,EAAE;AACjD,MAAI,IAAI,WAAW,EAClB,QAAO,KAAK,QAAQ,SAAS;GAC5B,OAAO,QAAQ;GACf,SAAS;GACT,GAAI,QAAQ,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,QAAQ,MAAM;GAC5D,CAAC;AAEH,MAAI,OAAO,UAAU,SACpB,QAAO,KAAK,QAAQ,SAAS;GAC5B,OAAO,GAAG,QAAQ,MAAM,GAAG;GAC3B,SAAS;GACT,GAAI,QAAQ,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,QAAQ,MAAM;GAC5D,CAAC;;AAGJ,QAAO;;AAGR,MAAa,eACZ,OACA,QACA,YACoB;AACpB,KAAI,OAAO,UAAU,YAAa,OAAiC,SAAS,MAAM,CACjF,QAAO;AAER,QAAO,KAAK,QAAQ,SAAS;EAC5B,OAAO,QAAQ;EACf,SAAS,QAAQ,WAAW,kBAAkB,OAAO,KAAK,MAAM,IAAI,EAAE,GAAG,CAAC,KAAK,KAAK;EACpF,GAAI,QAAQ,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,QAAQ,MAAM;EAC5D,CAAC;;AAGH,MAAa,uBACZ,OACA,YACsB;AACtB,KAAI,MAAM,QAAQ,MAAM,IAAI,MAAM,SAAS,EAAG,QAAO;AACrD,QAAO,KAAK,QAAQ,SAAS;EAC5B,OAAO,QAAQ;EACf,SAAS,QAAQ,WAAW;EAC5B,GAAI,QAAQ,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,QAAQ,MAAM;EAC5D,CAAC;;AAGH,MAAa,iBACZ,OACA,SACA,YACY;AACZ,KAAI,QAAQ,KAAK,MAAM,CAAE,QAAO;AAChC,QAAO,KAAK,QAAQ,SAAS;EAC5B,OAAO,QAAQ;EACf,SAAS,QAAQ,WAAW,cAAc,QAAQ;EAClD,GAAI,QAAQ,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,QAAQ,MAAM;EAC5D,CAAC;;AAGH,MAAa,gBACZ,QACA,OACA,YAEA,OAAO,oBAAoB,OAAO,CAAC,MAAM,CAAC,KACzC,OAAO,UAAU,UAChB,QAAQ,QAAQ;CACf,OAAO,QAAQ;CACf,SAAS,QAAQ,WAAW;CAC5B,GAAI,QAAQ,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,QAAQ,MAAM;CAC5D;CACA,CAAC,CACF,CACD;AAEF,MAAa,oBACZ,QACA,OACA,YACe;AACf,KAAI;AACH,SAAO,OAAO,kBAAkB,OAAO,CAAC,MAAM;UACtC,OAAO;AACf,SAAO,KAAK,QAAQ,SAAS;GAC5B,OAAO,QAAQ;GACf,SAAS,QAAQ,WAAW;GAC5B,GAAI,QAAQ,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,QAAQ,MAAM;GAC5D;GACA,CAAC"}
+{"version":3,"file":"config-validation.mjs","names":[],"sources":["../../../src/substrate/runtime/config-validation.ts"],"sourcesContent":["// Plain shape-check helpers — sync-throw discipline.\n//\n// Reach for these when you want to assert a single field's shape\n// (\"port must be a positive integer\", \"name must be a non-empty\n// string\") and throw a plugin-tagged `ConfigIssue` if it isn't.\n// Each helper takes one value + a `{ field, mkError }` and either\n// returns the value or throws. Authors compose them at factory /\n// boundary sites.\n//\n// For compound Schema decode (multi-field shapes, refinements,\n// transforms), reach for `decodeUnknownSync(schema, value,\n// { source, mkError })` from `runtime-decode.ts` instead.\n\nexport interface ConfigIssue {\n\treadonly field: string;\n\treadonly message: string;\n\treadonly hint?: string;\n\treadonly cause?: unknown;\n}\n\nexport type ConfigErrorFactory<E> = (issue: ConfigIssue) => E;\n\nexport const defineConfigError =\n\t<const Tag extends string>(tag: Tag) =>\n\t(issue: ConfigIssue): ConfigIssue & { readonly _tag: Tag } => ({\n\t\t_tag: tag,\n\t\t...issue,\n\t});\n\ninterface ValidatorOptions<E> {\n\treadonly field: string;\n\treadonly mkError: ConfigErrorFactory<E>;\n\treadonly message?: string;\n\treadonly hint?: string;\n}\n\nconst fail = <E>(mkError: ConfigErrorFactory<E>, issue: ConfigIssue): never => {\n\tthrow mkError(issue);\n};\n\nexport const expectNonEmptyString = <E>(value: unknown, options: ValidatorOptions<E>): string => {\n\tif (typeof value === 'string' && value.length > 0) return value;\n\treturn fail(options.mkError, {\n\t\tfield: options.field,\n\t\tmessage: options.message ?? 'must be a non-empty string',\n\t\t...(options.hint === undefined ? {} : { hint: options.hint }),\n\t});\n};\n\nexport const expectPositiveInteger = <E>(value: unknown, options: ValidatorOptions<E>): number => {\n\tif (typeof value === 'number' && Number.isInteger(value) && value > 0) return value;\n\treturn fail(options.mkError, {\n\t\tfield: options.field,\n\t\tmessage: options.message ?? 'must be a positive integer',\n\t\t...(options.hint === undefined ? {} : { hint: options.hint }),\n\t});\n};\n\nexport const expectOptionalPositiveInteger = <E>(\n\tvalue: unknown,\n\toptions: ValidatorOptions<E>,\n): number | undefined => {\n\tif (value === undefined) return undefined;\n\treturn expectPositiveInteger(value, options);\n};\n\nexport const expectPort = <E>(value: unknown, options: ValidatorOptions<E>): number => {\n\tif (typeof value === 'number' && Number.isInteger(value) && value > 0 && value <= 65_535) {\n\t\treturn value;\n\t}\n\treturn fail(options.mkError, {\n\t\tfield: options.field,\n\t\tmessage: options.message ?? 'must be an integer between 1 and 65535',\n\t\t...(options.hint === undefined ? {} : { hint: options.hint }),\n\t});\n};\n"],"mappings":";;;;;;;;;AAsBA,MAAa,qBACe,SAC1B,WAA8D;CAC9D,MAAM;CACN,GAAG;CACH;AASF,MAAM,QAAW,SAAgC,UAA8B;AAC9E,OAAM,QAAQ,MAAM;;AAGrB,MAAa,wBAA2B,OAAgB,YAAyC;AAChG,KAAI,OAAO,UAAU,YAAY,MAAM,SAAS,EAAG,QAAO;AAC1D,QAAO,KAAK,QAAQ,SAAS;EAC5B,OAAO,QAAQ;EACf,SAAS,QAAQ,WAAW;EAC5B,GAAI,QAAQ,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,QAAQ,MAAM;EAC5D,CAAC;;AAGH,MAAa,yBAA4B,OAAgB,YAAyC;AACjG,KAAI,OAAO,UAAU,YAAY,OAAO,UAAU,MAAM,IAAI,QAAQ,EAAG,QAAO;AAC9E,QAAO,KAAK,QAAQ,SAAS;EAC5B,OAAO,QAAQ;EACf,SAAS,QAAQ,WAAW;EAC5B,GAAI,QAAQ,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,QAAQ,MAAM;EAC5D,CAAC;;AAGH,MAAa,iCACZ,OACA,YACwB;AACxB,KAAI,UAAU,KAAA,EAAW,QAAO,KAAA;AAChC,QAAO,sBAAsB,OAAO,QAAQ;;AAG7C,MAAa,cAAiB,OAAgB,YAAyC;AACtF,KAAI,OAAO,UAAU,YAAY,OAAO,UAAU,MAAM,IAAI,QAAQ,KAAK,SAAS,MACjF,QAAO;AAER,QAAO,KAAK,QAAQ,SAAS;EAC5B,OAAO,QAAQ;EACf,SAAS,QAAQ,WAAW;EAC5B,GAAI,QAAQ,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,QAAQ,MAAM;EAC5D,CAAC"}

package/dist/substrate/runtime/container-runtime.d.mts

@@ -0,0 +1 @@
+import { ContainerRuntimeService } from "../../runtime/docker/service.mjs";

package/dist/substrate/runtime/container-runtime.mjs

@@ -0,0 +1,2 @@
+import "../../runtime/docker/service.mjs";
+export {};

package/dist/substrate/runtime/control-plane/domain.mjs

@@ -0,0 +1,101 @@
+import { readResolvedSync } from "../lifecycle/plugin-registry.mjs";
+import { SnapshotOrchestratorService } from "../../../orchestrators/snapshot/service.mjs";
+import { Context, Effect, FileSystem } from "effect";
+//#region src/substrate/runtime/control-plane/domain.ts
+/** Enumerate every resolved plugin value, in graph order, as
+*  `{ pluginKey, id, value }` triples. Skips nodes with no resolved value.
+*  The substrate never inspects `id` or `value` — they pass through
+*  uninterpreted. */
+const enumerateResolvedValues = (graph, registry) => {
+	const out = [];
+	for (const [key, node] of graph.nodes) {
+		const value = readResolvedSync(registry, key);
+		if (value === void 0 || value === null) continue;
+		out.push({
+			pluginKey: String(key),
+			id: node.member.id,
+			value
+		});
+	}
+	return out;
+};
+const snapshotEntryFrom = (entry) => {
+	const m = entry.metadata;
+	return {
+		id: entry.id,
+		label: m?.label ?? null,
+		createdAt: m?.createdAt ?? null,
+		app: m?.app ?? null,
+		stack: m?.stack ?? null,
+		network: m?.network ?? null,
+		participants: m?.participants ?? [],
+		containerCount: m?.containers?.length ?? 0,
+		subtreeCount: m?.subtrees?.length ?? 0,
+		corrupt: m === null
+	};
+};
+const buildControlPlaneDomain = (deps) => {
+	const { graph, registry, snapshotOrchestrator, fileSystem, logStore, spanStore } = deps;
+	const provideFs = (eff) => fileSystem === null ? Effect.die("control-plane: FileSystem unavailable") : Effect.provideService(eff, FileSystem.FileSystem, fileSystem);
+	const snapshots = snapshotOrchestrator === null ? Effect.succeed([]) : provideFs(snapshotOrchestrator.list).pipe(Effect.map((entries) => entries.map(snapshotEntryFrom)), Effect.catchCause(() => Effect.succeed([])));
+	const restoreSnapshot = (id) => snapshotOrchestrator === null ? Effect.succeed({
+		ok: false,
+		detail: "snapshot orchestrator unavailable"
+	}) : provideFs(snapshotOrchestrator.restore({ id })).pipe(Effect.map(() => ({
+		ok: true,
+		detail: null
+	})), Effect.catchCause((cause) => Effect.succeed({
+		ok: false,
+		detail: String(cause)
+	})));
+	const deleteSnapshot = (id) => snapshotOrchestrator === null ? Effect.succeed({
+		ok: false,
+		detail: "snapshot orchestrator unavailable"
+	}) : provideFs(snapshotOrchestrator.delete(id)).pipe(Effect.map(() => ({
+		ok: true,
+		detail: null
+	})), Effect.catchCause((cause) => Effect.succeed({
+		ok: false,
+		detail: String(cause)
+	})));
+	const resolvedValues = Effect.sync(() => enumerateResolvedValues(graph, registry));
+	const logs = (filter) => logStore === null ? Effect.succeed([]) : logStore.query(filter);
+	const logServices = logStore === null ? Effect.succeed([]) : logStore.services;
+	const spans = (filter) => spanStore === null ? Effect.succeed([]) : spanStore.query(filter);
+	return {
+		snapshots,
+		restoreSnapshot,
+		deleteSnapshot,
+		resolvedValues,
+		logs,
+		logServices,
+		spans,
+		spanServices: spanStore === null ? Effect.succeed([]) : spanStore.services
+	};
+};
+Effect.succeed([]), Effect.succeed([]), Effect.succeed([]), Effect.succeed([]);
+/** Read an optional service value out of a `Context.Context<never>`,
+*  returning `null` when absent. */
+const readOptional = (ctx, tag) => {
+	const opt = Context.getOption(ctx, tag);
+	return opt._tag === "Some" ? opt.value : null;
+};
+/** Build the control-plane domain by reading the optional snapshot
+*  orchestrator / filesystem services out of the supervisor's
+*  `pluginContext`. The supervisor calls THIS (not `buildControlPlaneDomain`
+*  directly) so the L3 service tag stays imported only inside the
+*  control-plane seam, never in the supervisor core. Each is optional: bare
+*  smoke-test `supervise()` paths don't layer them, so the corresponding
+*  accessors degrade to empty. */
+const controlPlaneDomainFromContext = (args) => buildControlPlaneDomain({
+	graph: args.graph,
+	registry: args.registry,
+	snapshotOrchestrator: readOptional(args.pluginContext, SnapshotOrchestratorService),
+	fileSystem: readOptional(args.pluginContext, FileSystem.FileSystem),
+	logStore: args.logStore ?? null,
+	spanStore: args.spanStore ?? null
+});
+//#endregion
+export { controlPlaneDomainFromContext };
+
+//# sourceMappingURL=domain.mjs.map

package/dist/substrate/runtime/control-plane/domain.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain.mjs","names":[],"sources":["../../../../src/substrate/runtime/control-plane/domain.ts"],"sourcesContent":["// Control-plane domain builder.\n//\n// Assembles the generic, name-blind `ControlPlaneDomain` accessor surface\n// from the data the supervisor holds at wiring time: the resolved plugin\n// registry + graph, the (optional) snapshot orchestrator + filesystem (for\n// snapshot catalog reads), and the cross-service observability stores.\n//\n// Design discipline:\n//   - The projection (`SubscribableState`) is CLOSED — none of this data\n//     touches it. We read resolved plugin VALUES via `readResolvedSync`,\n//     the same name-blind seam `runtime-composition.ts` uses for the\n//     manifest-extras lookup, and hand them out UNINTERPRETED via\n//     `resolvedValues`. The substrate never pattern-matches plugin\n//     names — plugin-name-aware shaping lives in the dashboard plugin\n//     (allowed to name plugins), one layer up.\n//   - Every accessor degrades to empty/`null` rather than failing, so a\n//     single missing/uninitialised plugin can't take down a dashboard\n//     query (`E = never` on the public surface).\n\nimport { Context, Effect, FileSystem } from 'effect';\n\nimport type { ResolvedGraph } from '../lifecycle/index.ts';\nimport { readResolvedSync, type PluginRegistry } from '../lifecycle/plugin-registry.ts';\n// Cross-layer seam (intentional): the control-plane domain is the single\n// place the substrate reads the L3 snapshot orchestrator, so the\n// supervisor core stays free of that import. This is a runtime VALUE import\n// (the `Context.Key` tag) — confined here.\nimport {\n\tSnapshotOrchestratorService,\n\ttype SnapshotOrchestrator,\n} from '../../../orchestrators/snapshot/service.ts';\nimport type {\n\tControlPlaneDomain,\n\tControlPlaneResolvedValue,\n\tControlPlaneSnapshotEntry,\n} from './service.ts';\nimport type { LogStoreShape, SpanStoreShape } from '../observability/index.ts';\n\n// -----------------------------------------------------------------------------\n// Generic resolved-value enumeration\n//\n// We import NO plugin types — the plugins live above the substrate in the\n// layering. We hand out the opaque `unknown` resolved value alongside its\n// registry key + resource id; the consumer (the dashboard plugin) does any\n// narrowing/shaping by resource-id prefix itself.\n// -----------------------------------------------------------------------------\n\n/** Enumerate every resolved plugin value, in graph order, as\n *  `{ pluginKey, id, value }` triples. Skips nodes with no resolved value.\n *  The substrate never inspects `id` or `value` — they pass through\n *  uninterpreted. */\nconst enumerateResolvedValues = (\n\tgraph: ResolvedGraph,\n\tregistry: PluginRegistry,\n): ReadonlyArray<ControlPlaneResolvedValue> => {\n\tconst out: Array<ControlPlaneResolvedValue> = [];\n\tfor (const [key, node] of graph.nodes) {\n\t\tconst value = readResolvedSync(registry, key);\n\t\tif (value === undefined || value === null) continue;\n\t\tout.push({ pluginKey: String(key), id: node.member.id, value });\n\t}\n\treturn out;\n};\n\n// -----------------------------------------------------------------------------\n// Snapshot catalog projection\n// -----------------------------------------------------------------------------\n\nconst snapshotEntryFrom = (entry: {\n\treadonly id: string;\n\treadonly metadata: {\n\t\treadonly label?: string | null;\n\t\treadonly createdAt?: number;\n\t\treadonly app?: string;\n\t\treadonly stack?: string;\n\t\treadonly network?: string;\n\t\treadonly participants?: ReadonlyArray<string>;\n\t\treadonly containers?: ReadonlyArray<unknown>;\n\t\treadonly subtrees?: ReadonlyArray<unknown>;\n\t} | null;\n}): ControlPlaneSnapshotEntry => {\n\tconst m = entry.metadata;\n\treturn {\n\t\tid: entry.id,\n\t\tlabel: m?.label ?? null,\n\t\tcreatedAt: m?.createdAt ?? null,\n\t\tapp: m?.app ?? null,\n\t\tstack: m?.stack ?? null,\n\t\tnetwork: m?.network ?? null,\n\t\tparticipants: m?.participants ?? [],\n\t\tcontainerCount: m?.containers?.length ?? 0,\n\t\tsubtreeCount: m?.subtrees?.length ?? 0,\n\t\tcorrupt: m === null,\n\t};\n};\n\n// -----------------------------------------------------------------------------\n// Builder\n// -----------------------------------------------------------------------------\n\nexport interface ControlPlaneDomainDeps {\n\treadonly graph: ResolvedGraph;\n\treadonly registry: PluginRegistry;\n\t/** Optional — present in production wiring (CLI / runStack), absent in\n\t *  bare smoke tests. Snapshot accessors degrade to empty when missing. */\n\treadonly snapshotOrchestrator: SnapshotOrchestrator | null;\n\t/** Optional filesystem (snapshot orchestrator effects require it). */\n\treadonly fileSystem: FileSystem.FileSystem | null;\n\t/** Optional cross-service log store. Absent in bare smoke-test paths;\n\t *  the `logs`/`logServices` accessors degrade to empty when null. */\n\treadonly logStore: LogStoreShape | null;\n\t/** Optional completed-span store. Absent in bare smoke-test paths; the\n\t *  `spans`/`spanServices` accessors degrade to empty when null. */\n\treadonly spanStore: SpanStoreShape | null;\n}\n\nexport const buildControlPlaneDomain = (deps: ControlPlaneDomainDeps): ControlPlaneDomain => {\n\tconst { graph, registry, snapshotOrchestrator, fileSystem, logStore, spanStore } = deps;\n\n\tconst provideFs = <A, E>(eff: Effect.Effect<A, E, FileSystem.FileSystem>): Effect.Effect<A, E> =>\n\t\tfileSystem === null\n\t\t\t? (Effect.die('control-plane: FileSystem unavailable') as Effect.Effect<A, E>)\n\t\t\t: Effect.provideService(eff, FileSystem.FileSystem, fileSystem);\n\n\tconst snapshots: ControlPlaneDomain['snapshots'] =\n\t\tsnapshotOrchestrator === null\n\t\t\t? Effect.succeed([])\n\t\t\t: provideFs(snapshotOrchestrator.list).pipe(\n\t\t\t\t\tEffect.map((entries) => entries.map(snapshotEntryFrom)),\n\t\t\t\t\tEffect.catchCause(() => Effect.succeed([] as ReadonlyArray<ControlPlaneSnapshotEntry>)),\n\t\t\t\t);\n\n\tconst restoreSnapshot: ControlPlaneDomain['restoreSnapshot'] = (id) =>\n\t\tsnapshotOrchestrator === null\n\t\t\t? Effect.succeed({ ok: false, detail: 'snapshot orchestrator unavailable' as string | null })\n\t\t\t: provideFs(snapshotOrchestrator.restore({ id })).pipe(\n\t\t\t\t\tEffect.map(() => ({ ok: true, detail: null as string | null })),\n\t\t\t\t\tEffect.catchCause((cause) =>\n\t\t\t\t\t\tEffect.succeed({ ok: false, detail: String(cause) as string | null }),\n\t\t\t\t\t),\n\t\t\t\t);\n\n\tconst deleteSnapshot: ControlPlaneDomain['deleteSnapshot'] = (id) =>\n\t\tsnapshotOrchestrator === null\n\t\t\t? Effect.succeed({ ok: false, detail: 'snapshot orchestrator unavailable' as string | null })\n\t\t\t: provideFs(snapshotOrchestrator.delete(id)).pipe(\n\t\t\t\t\tEffect.map(() => ({ ok: true, detail: null as string | null })),\n\t\t\t\t\tEffect.catchCause((cause) =>\n\t\t\t\t\t\tEffect.succeed({ ok: false, detail: String(cause) as string | null }),\n\t\t\t\t\t),\n\t\t\t\t);\n\n\t// Generic, name-blind resolved-value enumeration. The seam the\n\t// dashboard plugin uses to find + shape plugin-domain values itself.\n\tconst resolvedValues: ControlPlaneDomain['resolvedValues'] = Effect.sync(() =>\n\t\tenumerateResolvedValues(graph, registry),\n\t);\n\n\t// Observability accessors. These read the process-scoped stores the\n\t// supervisor created (fed off the same Logger path as the projection\n\t// tail / the recording Tracer). Filtering happens server-side in the\n\t// store; the dashboard never pulls the whole ring across the wire.\n\t// Each degrades to empty when the corresponding store is absent.\n\tconst logs: ControlPlaneDomain['logs'] = (filter) =>\n\t\tlogStore === null ? Effect.succeed([]) : logStore.query(filter);\n\n\tconst logServices: ControlPlaneDomain['logServices'] =\n\t\tlogStore === null ? Effect.succeed([]) : logStore.services;\n\n\tconst spans: ControlPlaneDomain['spans'] = (filter) =>\n\t\tspanStore === null ? Effect.succeed([]) : spanStore.query(filter);\n\n\tconst spanServices: ControlPlaneDomain['spanServices'] =\n\t\tspanStore === null ? Effect.succeed([]) : spanStore.services;\n\n\treturn {\n\t\tsnapshots,\n\t\trestoreSnapshot,\n\t\tdeleteSnapshot,\n\t\tresolvedValues,\n\t\tlogs,\n\t\tlogServices,\n\t\tspans,\n\t\tspanServices,\n\t};\n};\n\n/** An all-empty domain surface. Used by bare smoke-test paths and the\n *  dashboard server tests that exercise the projection/command plane\n *  without a live registry. Every accessor resolves to empty/`null`. */\nexport const emptyControlPlaneDomain: ControlPlaneDomain = {\n\tsnapshots: Effect.succeed([]),\n\trestoreSnapshot: () => Effect.succeed({ ok: false, detail: 'unavailable' }),\n\tdeleteSnapshot: () => Effect.succeed({ ok: false, detail: 'unavailable' }),\n\tresolvedValues: Effect.succeed([]),\n\tlogs: () => Effect.succeed([]),\n\tlogServices: Effect.succeed([]),\n\tspans: () => Effect.succeed([]),\n\tspanServices: Effect.succeed([]),\n};\n\n/** Read an optional service value out of a `Context.Context<never>`,\n *  returning `null` when absent. */\nconst readOptional = <S, I>(ctx: Context.Context<never>, tag: Context.Key<I, S>): S | null => {\n\tconst opt = Context.getOption(ctx as Context.Context<I>, tag);\n\treturn opt._tag === 'Some' ? opt.value : null;\n};\n\n/** Build the control-plane domain by reading the optional snapshot\n *  orchestrator / filesystem services out of the supervisor's\n *  `pluginContext`. The supervisor calls THIS (not `buildControlPlaneDomain`\n *  directly) so the L3 service tag stays imported only inside the\n *  control-plane seam, never in the supervisor core. Each is optional: bare\n *  smoke-test `supervise()` paths don't layer them, so the corresponding\n *  accessors degrade to empty. */\nexport const controlPlaneDomainFromContext = (args: {\n\treadonly pluginContext: Context.Context<never>;\n\treadonly graph: ResolvedGraph;\n\treadonly registry: PluginRegistry;\n\t/** The supervisor's process-scoped log store, passed directly (it is\n\t *  created in the supervisor closure, not layered into `pluginContext`).\n\t *  `null` in bare smoke-test paths that don't build one. */\n\treadonly logStore?: LogStoreShape | null;\n\t/** The supervisor's process-scoped span store, passed directly. `null`\n\t *  in bare smoke-test paths. */\n\treadonly spanStore?: SpanStoreShape | null;\n}): ControlPlaneDomain =>\n\tbuildControlPlaneDomain({\n\t\tgraph: args.graph,\n\t\tregistry: args.registry,\n\t\tsnapshotOrchestrator: readOptional(args.pluginContext, SnapshotOrchestratorService),\n\t\tfileSystem: readOptional(args.pluginContext, FileSystem.FileSystem),\n\t\tlogStore: args.logStore ?? null,\n\t\tspanStore: args.spanStore ?? null,\n\t});\n"],"mappings":";;;;;;;;AAmDA,MAAM,2BACL,OACA,aAC8C;CAC9C,MAAM,MAAwC,EAAE;AAChD,MAAK,MAAM,CAAC,KAAK,SAAS,MAAM,OAAO;EACtC,MAAM,QAAQ,iBAAiB,UAAU,IAAI;AAC7C,MAAI,UAAU,KAAA,KAAa,UAAU,KAAM;AAC3C,MAAI,KAAK;GAAE,WAAW,OAAO,IAAI;GAAE,IAAI,KAAK,OAAO;GAAI;GAAO,CAAC;;AAEhE,QAAO;;AAOR,MAAM,qBAAqB,UAYM;CAChC,MAAM,IAAI,MAAM;AAChB,QAAO;EACN,IAAI,MAAM;EACV,OAAO,GAAG,SAAS;EACnB,WAAW,GAAG,aAAa;EAC3B,KAAK,GAAG,OAAO;EACf,OAAO,GAAG,SAAS;EACnB,SAAS,GAAG,WAAW;EACvB,cAAc,GAAG,gBAAgB,EAAE;EACnC,gBAAgB,GAAG,YAAY,UAAU;EACzC,cAAc,GAAG,UAAU,UAAU;EACrC,SAAS,MAAM;EACf;;AAuBF,MAAa,2BAA2B,SAAqD;CAC5F,MAAM,EAAE,OAAO,UAAU,sBAAsB,YAAY,UAAU,cAAc;CAEnF,MAAM,aAAmB,QACxB,eAAe,OACX,OAAO,IAAI,wCAAwC,GACpD,OAAO,eAAe,KAAK,WAAW,YAAY,WAAW;CAEjE,MAAM,YACL,yBAAyB,OACtB,OAAO,QAAQ,EAAE,CAAC,GAClB,UAAU,qBAAqB,KAAK,CAAC,KACrC,OAAO,KAAK,YAAY,QAAQ,IAAI,kBAAkB,CAAC,EACvD,OAAO,iBAAiB,OAAO,QAAQ,EAAE,CAA6C,CAAC,CACvF;CAEJ,MAAM,mBAA0D,OAC/D,yBAAyB,OACtB,OAAO,QAAQ;EAAE,IAAI;EAAO,QAAQ;EAAsD,CAAC,GAC3F,UAAU,qBAAqB,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,KAChD,OAAO,WAAW;EAAE,IAAI;EAAM,QAAQ;EAAuB,EAAE,EAC/D,OAAO,YAAY,UAClB,OAAO,QAAQ;EAAE,IAAI;EAAO,QAAQ,OAAO,MAAM;EAAmB,CAAC,CACrE,CACD;CAEJ,MAAM,kBAAwD,OAC7D,yBAAyB,OACtB,OAAO,QAAQ;EAAE,IAAI;EAAO,QAAQ;EAAsD,CAAC,GAC3F,UAAU,qBAAqB,OAAO,GAAG,CAAC,CAAC,KAC3C,OAAO,WAAW;EAAE,IAAI;EAAM,QAAQ;EAAuB,EAAE,EAC/D,OAAO,YAAY,UAClB,OAAO,QAAQ;EAAE,IAAI;EAAO,QAAQ,OAAO,MAAM;EAAmB,CAAC,CACrE,CACD;CAIJ,MAAM,iBAAuD,OAAO,WACnE,wBAAwB,OAAO,SAAS,CACxC;CAOD,MAAM,QAAoC,WACzC,aAAa,OAAO,OAAO,QAAQ,EAAE,CAAC,GAAG,SAAS,MAAM,OAAO;CAEhE,MAAM,cACL,aAAa,OAAO,OAAO,QAAQ,EAAE,CAAC,GAAG,SAAS;CAEnD,MAAM,SAAsC,WAC3C,cAAc,OAAO,OAAO,QAAQ,EAAE,CAAC,GAAG,UAAU,MAAM,OAAO;AAKlE,QAAO;EACN;EACA;EACA;EACA;EACA;EACA;EACA;EACA,cAVA,cAAc,OAAO,OAAO,QAAQ,EAAE,CAAC,GAAG,UAAU;EAWpD;;AAOU,OAAO,QAAQ,EAAE,CAAC,EAGb,OAAO,QAAQ,EAAE,CAAC,EAErB,OAAO,QAAQ,EAAE,CAAC,EAEjB,OAAO,QAAQ,EAAE,CAAC;;;AAKjC,MAAM,gBAAsB,KAA6B,QAAqC;CAC7F,MAAM,MAAM,QAAQ,UAAU,KAA2B,IAAI;AAC7D,QAAO,IAAI,SAAS,SAAS,IAAI,QAAQ;;;;;;;;;AAU1C,MAAa,iCAAiC,SAY7C,wBAAwB;CACvB,OAAO,KAAK;CACZ,UAAU,KAAK;CACf,sBAAsB,aAAa,KAAK,eAAe,4BAA4B;CACnF,YAAY,aAAa,KAAK,eAAe,WAAW,WAAW;CACnE,UAAU,KAAK,YAAY;CAC3B,WAAW,KAAK,aAAa;CAC7B,CAAC"}

package/dist/substrate/runtime/control-plane/service.mjs

@@ -0,0 +1,7 @@
+import { Context } from "effect";
+//#region src/substrate/runtime/control-plane/service.ts
+var ControlPlaneService = class extends Context.Service()("@devstack/substrate/ControlPlane") {};
+//#endregion
+export { ControlPlaneService };
+
+//# sourceMappingURL=service.mjs.map

package/dist/substrate/runtime/control-plane/service.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.mjs","names":[],"sources":["../../../../src/substrate/runtime/control-plane/service.ts"],"sourcesContent":["// Control-plane seam exposed to in-process surfaces (the dashboard plugin).\n//\n// Plugins don't normally receive the supervisor's projection ref, event\n// hub, or command channel — those live in `SupervisorState`. This service\n// hands an in-process surface (the dashboard) a read view of the live\n// projection plus a fire-and-forget command publisher, so it can render\n// state and issue controls without reaching into supervisor internals.\n//\n// The projection ref is process-scoped and survives engine cycles, so a\n// subscriber stays valid across `stack.restart` (only `cycle.id` bumps).\n// Command dispatch mirrors the queue publisher the TUI uses: offer onto\n// the supervisor's command queue and observe the effect via `state`.\n//\n// The `domain` surface is GENERIC and name-blind: it exposes the snapshot\n// catalog + restore/delete (which never round-trip through the void\n// `publishCommand`), the cross-service observability rings, and a single\n// generic `resolvedValues` accessor that hands out resolved plugin VALUES\n// WITHOUT interpreting them. Plugin-name-aware shaping (deepbook/seal/coin/\n// postgres/mode/mint) lives ABOVE the substrate in the dashboard plugin,\n// which is allowed to name plugins. The projection (`SubscribableState`)\n// stays CLOSED — none of this leaks into it. Each accessor is a\n// self-contained `Effect` the supervisor populates from the resolved\n// registry / snapshot orchestrator it holds at wiring time.\n\nimport { Context, type Effect, type SubscriptionRef } from 'effect';\nimport type { EngineCommand } from '../../events.ts';\nimport type { SubscribableState } from '../../projection.ts';\nimport type {\n\tLogFilter,\n\tLogRecord,\n\tSpanFilter,\n\tSpanRecord,\n} from '../observability/index.ts';\n\n// -----------------------------------------------------------------------------\n// Domain data shapes — app-agnostic projections of plugin-resolved values.\n// These intentionally stay generic so the control-plane surface and the\n// dashboard schema stay decoupled from plugin internals.\n// -----------------------------------------------------------------------------\n\n/** One catalog entry the snapshot orchestrator's `list` produced. */\nexport interface ControlPlaneSnapshotEntry {\n\treadonly id: string;\n\treadonly label: string | null;\n\treadonly createdAt: number | null;\n\treadonly app: string | null;\n\treadonly stack: string | null;\n\treadonly network: string | null;\n\treadonly participants: ReadonlyArray<string>;\n\treadonly containerCount: number;\n\treadonly subtreeCount: number;\n\t/** `true` when the metadata file was absent/corrupt (do-not-trust). */\n\treadonly corrupt: boolean;\n}\n\n/** One resolved plugin value, handed out GENERICALLY (uninterpreted) so an\n *  in-process surface above the substrate (the dashboard plugin) can match\n *  + shape it by resource-id prefix itself. `id` is the resource id the\n *  plugin factory minted (an opaque string here — the substrate never\n *  pattern-matches it); `pluginKey` is the registry key for the node. The\n *  substrate imports NO plugin types — `value` is genuinely `unknown`. */\nexport interface ControlPlaneResolvedValue {\n\t/** The registry key for the resolved node. */\n\treadonly pluginKey: string;\n\t/** The resource id the plugin factory minted (opaque to the substrate). */\n\treadonly id: string;\n\t/** The resolved plugin value, uninterpreted. */\n\treadonly value: unknown;\n}\n\n/** The plugin-domain accessor surface. GENERIC + name-blind: it exposes\n *  the snapshot catalog, the observability rings, and a single generic\n *  `resolvedValues` accessor. Each member is a self-contained Effect the\n *  supervisor wires from the data it holds at boot. The Effects never fail\n *  (`E = never`); they degrade to empty/`null` so a single missing plugin\n *  can't take down the dashboard query. */\nexport interface ControlPlaneDomain {\n\t/** Snapshot catalog (id/label/created/participants/containers). */\n\treadonly snapshots: Effect.Effect<ReadonlyArray<ControlPlaneSnapshotEntry>>;\n\t/** Restore a snapshot by id. Mirrors the orchestrator surface so the\n\t *  dashboard gets a real result the void `publishCommand` can't carry. */\n\treadonly restoreSnapshot: (id: string) => Effect.Effect<{ readonly ok: boolean; readonly detail: string | null }>;\n\t/** Delete a snapshot by id. */\n\treadonly deleteSnapshot: (id: string) => Effect.Effect<{ readonly ok: boolean; readonly detail: string | null }>;\n\t/** ALL resolved plugin values, in graph order, handed out\n\t *  uninterpreted. The seam an in-process surface above the substrate\n\t *  (the dashboard plugin) uses to find + shape plugin-domain values\n\t *  itself — the substrate stays name-blind. */\n\treadonly resolvedValues: Effect.Effect<ReadonlyArray<ControlPlaneResolvedValue>>;\n\t/** Cross-service queryable log history (the dashboard Console \"Logs\"\n\t *  tab). Filterable by service / level / substring / time window; the\n\t *  per-row projection tail is a separate, row-scoped surface. Degrades\n\t *  to empty when no log store is wired. */\n\treadonly logs: (filter?: LogFilter) => Effect.Effect<ReadonlyArray<LogRecord>>;\n\t/** Distinct services currently present in the log ring (filter UI). */\n\treadonly logServices: Effect.Effect<ReadonlyArray<string>>;\n\t/** Completed-span ring (the dashboard Console \"Traces\" tab). Filterable\n\t *  by service / status / substring / time window. Degrades to empty when\n\t *  no span store is wired. */\n\treadonly spans: (filter?: SpanFilter) => Effect.Effect<ReadonlyArray<SpanRecord>>;\n\t/** Distinct services currently present in the span ring (filter UI). */\n\treadonly spanServices: Effect.Effect<ReadonlyArray<string>>;\n}\n\nexport interface ControlPlane {\n\t/** Live projection ref. Read a snapshot with `SubscriptionRef.get`,\n\t *  subscribe to updates with `SubscriptionRef.changes`. */\n\treadonly state: SubscriptionRef.SubscriptionRef<SubscribableState>;\n\t/** Publish a command to the supervisor (fire-and-forget). Observe the\n\t *  resulting effect via the projection `state`. */\n\treadonly publishCommand: (command: EngineCommand) => Effect.Effect<void>;\n\t/** Generic, name-blind plugin-domain accessors (snapshot catalog,\n\t *  observability rings, resolved plugin values). See\n\t *  `ControlPlaneDomain`. */\n\treadonly domain: ControlPlaneDomain;\n}\n\nexport class ControlPlaneService extends Context.Service<ControlPlaneService, ControlPlane>()(\n\t'@devstack/substrate/ControlPlane',\n) {}\n"],"mappings":";;AAqHA,IAAa,sBAAb,cAAyC,QAAQ,SAA4C,CAC5F,mCACA,CAAC"}

package/dist/substrate/runtime/cross-process/command-channel/channel.mjs

@@ -1,7 +1,9 @@
+import { selfPid } from "../self-pid.mjs";
 import { decodeUnknownSync } from "../../runtime-decode.mjs";
 import { CommandRecordSchema, EventRecordSchema } from "./protocol.mjs";
-import { appendRecord, ensureFile, tailRecords } from "./file-channel.mjs";
+import { CommandChannelIoError, appendRecord, ensureFile, tailRecords } from "./file-channel.mjs";
 import { Effect, Option, Ref, Stream } from "effect";
+import { existsSync, statSync } from "node:fs";
 import { randomUUID } from "node:crypto";
 import { hostname } from "node:os";
 //#region src/substrate/runtime/cross-process/command-channel/channel.ts
@@ -13,6 +15,11 @@ const commandChannelPaths = (stackRoot) => ({
 	commandsFile: `${stackRoot}/${COMMAND_CHANNEL_COMMANDS_FILE_NAME}`,
 	eventsFile: `${stackRoot}/${COMMAND_CHANNEL_EVENTS_FILE_NAME}`
 });
+/** Default bound for `awaitCompletion` when the caller passes no
+*  `timeoutMillis`. A correlated ack/error normally lands within tens of
+*  ms; an absent reply (supervisor died mid-handle, dropped record) must
+*  NOT park the await fiber forever, so the wait is always bounded. */
+const DEFAULT_AWAIT_COMPLETION_MILLIS = 3e4;
 const nextSeq = (state) => Ref.modify(state.seq, (n) => [n + 1, n + 1]);
 /**
 * Build the publisher half. The events Stream is scope-bound:
@@ -23,11 +30,19 @@ const makeCommandChannelPublisher = (paths) => Effect.gen(function* () {
 	yield* ensureFile(paths.commandsFile);
 	yield* ensureFile(paths.eventsFile);
 	const state = { seq: yield* Ref.make(0) };
-	const pid = process.pid;
+	const pid = selfPid();
 	const host = hostname();
 	const publish = (command) => Effect.gen(function* () {
 		const seq = yield* nextSeq(state);
 		const id = `${pid}-${seq}-${randomUUID().slice(0, 8)}`;
+		const fromOffset = yield* Effect.try({
+			try: () => existsSync(paths.eventsFile) ? statSync(paths.eventsFile).size : 0,
+			catch: (cause) => new CommandChannelIoError({
+				path: paths.eventsFile,
+				stage: "stat",
+				cause
+			})
+		});
 		const record = {
 			protocol: 1,
 			seq,
@@ -38,29 +53,39 @@ const makeCommandChannelPublisher = (paths) => Effect.gen(function* () {
 			command
 		};
 		yield* appendRecord(paths.commandsFile, record);
-		return { id };
+		return {
+			id,
+			fromOffset
+		};
 	});
 	const decodeEvent = (raw) => decodeUnknownSync(EventRecordSchema, raw, {
 		source: "command-channel event",
 		mkError: (issue) => issue
 	});
-	const events = tailRecords(paths.eventsFile, (raw) => decodeEvent(raw), { fromOffset: "current" });
-	const findReply = (id) => Stream.runHead(tailRecords(paths.eventsFile, (raw) => decodeEvent(raw), { fromOffset: "start" }).pipe(Stream.filter((rec) => (rec.kind === "ack" || rec.kind === "error") && rec.correlatesTo === id), Stream.take(1)));
-	const awaitCompletion = (id, options = {}) => {
-		const withScope = Effect.scoped(findReply(id));
-		return (options.timeoutMillis !== void 0 ? withScope.pipe(Effect.timeoutOption(`${options.timeoutMillis} millis`), Effect.map((outer) => Option.flatten(outer))) : withScope).pipe(Effect.map((reply) => {
+	const events = tailRecords(paths.eventsFile, (raw) => decodeEvent(raw), {
+		fromOffset: "current",
+		onDecodeError: "skip"
+	});
+	const findReply = (id, fromOffset) => Stream.runHead(tailRecords(paths.eventsFile, (raw) => decodeEvent(raw), {
+		fromOffset,
+		onDecodeError: "skip"
+	}).pipe(Stream.filter((rec) => (rec.kind === "ack" || rec.kind === "error") && rec.correlatesTo === id), Stream.take(1)));
+	const awaitCompletion = (published, options = {}) => {
+		const timeoutMillis = options.timeoutMillis ?? 3e4;
+		return Effect.scoped(findReply(published.id, published.fromOffset)).pipe(Effect.timeoutOption(`${timeoutMillis} millis`), Effect.map((outer) => Option.flatten(outer))).pipe(Effect.map((reply) => {
 			const inner = Option.getOrNull(reply);
-			if (inner === null) return options.timeoutMillis !== void 0 ? {
+			if (inner === null) return {
 				ok: false,
 				message: "timed out waiting for ack"
-			} : {
-				ok: false,
-				message: "no reply"
 			};
-			if (inner.kind === "ack") return { ok: true };
+			if (inner.kind === "ack") return inner.payload !== void 0 ? {
+				ok: true,
+				payload: inner.payload
+			} : { ok: true };
 			return {
 				ok: false,
-				message: inner.detail ? `${inner.message}: ${inner.detail}` : inner.message
+				message: inner.detail ? `${inner.message}: ${inner.detail}` : inner.message,
+				...inner.payload !== void 0 ? { payload: inner.payload } : {}
 			};
 		}));
 	};
@@ -94,17 +119,18 @@ const makeCommandChannelSubscriber = (paths, options = {}) => Effect.gen(functio
 			event
 		});
 	});
-	const ack = (correlatesTo, detail) => Effect.gen(function* () {
+	const ack = (correlatesTo, detail, payload) => Effect.gen(function* () {
 		yield* writeEvent({
 			protocol: 1,
 			seq: yield* nextSubSeq(state),
 			at: Date.now(),
 			kind: "ack",
 			correlatesTo,
-			...detail !== void 0 ? { detail } : {}
+			...detail !== void 0 ? { detail } : {},
+			...payload !== void 0 ? { payload } : {}
 		});
 	});
-	const fail = (correlatesTo, message, detail) => Effect.gen(function* () {
+	const fail = (correlatesTo, message, detail, payload) => Effect.gen(function* () {
 		yield* writeEvent({
 			protocol: 1,
 			seq: yield* nextSubSeq(state),
@@ -112,7 +138,8 @@ const makeCommandChannelSubscriber = (paths, options = {}) => Effect.gen(functio
 			kind: "error",
 			correlatesTo,
 			message,
-			...detail !== void 0 ? { detail } : {}
+			...detail !== void 0 ? { detail } : {},
+			...payload !== void 0 ? { payload } : {}
 		});
 	});
 	return {
@@ -123,6 +150,6 @@ const makeCommandChannelSubscriber = (paths, options = {}) => Effect.gen(functio
 	};
 });
 //#endregion
-export { COMMAND_CHANNEL_COMMANDS_FILE_NAME, COMMAND_CHANNEL_EVENTS_FILE_NAME, commandChannelPaths, makeCommandChannelPublisher, makeCommandChannelSubscriber };
+export { COMMAND_CHANNEL_COMMANDS_FILE_NAME, COMMAND_CHANNEL_EVENTS_FILE_NAME, DEFAULT_AWAIT_COMPLETION_MILLIS, commandChannelPaths, makeCommandChannelPublisher, makeCommandChannelSubscriber };
 
 //# sourceMappingURL=channel.mjs.map