@mysten-incubation/devstack 0.0.1 → 0.1.1

package/dist/substrate/runtime/port-broker/service.mjs

@@ -1,58 +1,34 @@
 import { RuntimeRoot } from "../paths.mjs";
-import { RosterHolderSchema } from "../../cross-process.mjs";
-import { checkHolderLiveness, ownHolder } from "../cross-process/liveness.mjs";
+import { versionedDocSchema } from "../../versioned-doc-schema.mjs";
+import { selfPid } from "../cross-process/self-pid.mjs";
 import { PortBrokerError } from "../errors.mjs";
+import { atomicWriteFileExclusiveSync } from "../atomic-write.mjs";
 import { decodeJsonTextSync } from "../runtime-decode.mjs";
+import { RosterHolderSchema } from "../../cross-process.mjs";
+import { checkHolderLiveness, ownHolder } from "../cross-process/liveness.mjs";
 import { Context, Effect, Layer, Ref, Schema } from "effect";
+import { readFileSync, unlinkSync } from "node:fs";
 import { randomUUID } from "node:crypto";
-import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
 import { createServer } from "node:net";
-import { dirname, join } from "node:path";
 //#region src/substrate/runtime/port-broker/service.ts
-/** Allocation kind — drives the search-window starting port. Plugins
-*  pass a literal so a `wallet` allocation and a `rpc` allocation
-*  never collide on the same starting point.
-*
-*  Extend `PORT_RANGES` below to add a new kind. The literal type is
-*  closed deliberately — agnostic-naming would invite plugins to
-*  freelance kinds (and overlap window starts unintentionally).
-*
-*  Today's windows are sized for "tens of plugins per stack" with
-*  parallel-stack overhead headroom. Each window is 1000 ports; that's
-*  more than enough for any realistic in-process devstack, and the
-*  forward-scan only ever crosses a window boundary if EVERY port in
-*  the window is taken (effectively never on dev machines). */
-const PORT_KINDS = [
-	"wallet",
-	"http",
-	"rpc",
-	"misc"
-];
-/** Sequential search window per kind. The broker tries `preferredPort`
-*  first (if given), then `[start, start + window)` in order. */
-const PORT_RANGES = {
-	wallet: {
-		start: 39200,
-		window: 1e3
-	},
-	http: {
-		start: 5e4,
-		window: 1e3
-	},
-	rpc: {
-		start: 51e3,
-		window: 1e3
-	},
-	misc: {
-		start: 52e3,
-		window: 1e3
-	}
+/** Default scan window. Sized for "tens of plugins per stack" with
+*  parallel-stack overhead headroom. 1000 ports is more than enough for
+*  any realistic in-process devstack; the forward-scan only ever
+*  reaches the end if EVERY port in the window is taken (effectively
+*  never on dev machines). Start chosen to land between common dev
+*  defaults (3000-5173, 8000-8080) and the ephemeral range so a
+*  sibling Vite/Next process doesn't accidentally collide on the
+*  first probe. */
+const DEFAULT_PORT_WINDOW = {
+	start: 39200,
+	size: 1e3
 };
+const DEFAULT_OWNER = "unknown";
 const PORT_RESERVATION_VERSION = 1;
-const PortReservationDocSchema = Schema.Struct({
-	version: Schema.Literal(PORT_RESERVATION_VERSION),
+const PortReservationDocSchema = versionedDocSchema(PORT_RESERVATION_VERSION, {
 	port: Schema.Number,
-	kind: Schema.Literals(PORT_KINDS),
+	owner: Schema.String,
 	ownerId: Schema.String,
 	holder: RosterHolderSchema
 });
@@ -69,29 +45,21 @@ const parseReservationDoc = (raw) => {
 };
 const tryWriteReservationSync = (path, doc) => {
 	try {
-		mkdirSync(dirname(path), { recursive: true });
-		writeFileSync(path, `${JSON.stringify(doc)}\n`, {
-			flag: "wx",
-			mode: 384
-		});
+		atomicWriteFileExclusiveSync(path, `${JSON.stringify(doc)}\n`, { mode: 384 });
 		return { _tag: "written" };
 	} catch (cause) {
-		if (cause.code !== "EEXIST") return {
-			_tag: "failed",
-			cause
-		};
-		if (!existsSync(path)) return { _tag: "race" };
-		try {
+		if (cause.code === "EEXIST") try {
 			return {
 				_tag: "exists",
 				doc: parseReservationDoc(readFileSync(path, "utf8"))
 			};
 		} catch {
-			return {
-				_tag: "exists",
-				doc: null
-			};
+			return { _tag: "race" };
 		}
+		return {
+			_tag: "failed",
+			cause
+		};
 	}
 };
 const unlinkReservationIfOwnerSync = (path, ownerId) => {
@@ -108,16 +76,35 @@ const reclaimReservationIfOwnerSync = (path, ownerId) => {
 		return false;
 	}
 };
-const acquirePortReservation = (root, port, kind) => Effect.gen(function* () {
+/** Best-effort removal of an EXISTING reservation file whose body
+*  cannot be decoded (a leftover from an incompatible-version
+*  supervisor, or a torn write). Such a file carries no readable
+*  `ownerId`/`holder`, so neither `reclaimReservationIfOwnerSync` nor
+*  liveness can ever clear it; without this it would skip that one
+*  port for every future process for the supervisor's lifetime. We
+*  treat an undecodable body as a stale artifact and unlink it so the
+*  next exclusive-create can win. Returns whether the unlink ran
+*  (false if the file vanished first, i.e. a peer already cleared it)
+*  so the caller can bound its retry. */
+const reclaimUndecodableReservationSync = (path) => {
+	try {
+		unlinkSync(path);
+		return true;
+	} catch {
+		return false;
+	}
+};
+const acquirePortReservation = (root, port, owner) => Effect.gen(function* () {
 	const path = portReservationPath(root, port);
-	const ownerId = `${process.pid}-${randomUUID().slice(0, 8)}`;
+	const ownerId = `${selfPid()}-${randomUUID().slice(0, 8)}`;
 	const doc = {
 		version: PORT_RESERVATION_VERSION,
 		port,
-		kind,
+		owner,
 		ownerId,
 		holder: ownHolder()
 	};
+	let reclaimedUndecodable = false;
 	while (true) {
 		const attempt = tryWriteReservationSync(path, doc);
 		if (attempt._tag === "written") return {
@@ -134,12 +121,18 @@ const acquirePortReservation = (root, port, kind) => Effect.gen(function* () {
 			detail: `port reservation ${path} could not be written`,
 			cause: attempt.cause
 		};
-		if (attempt.doc === null) return { _tag: "busy" };
+		if (attempt.doc === null) {
+			if (!reclaimedUndecodable && reclaimUndecodableReservationSync(path)) {
+				reclaimedUndecodable = true;
+				continue;
+			}
+			return { _tag: "busy" };
+		}
 		if ((yield* checkHolderLiveness(attempt.doc.holder).pipe(Effect.catch(() => Effect.succeed("alive")))) === "alive") return { _tag: "busy" };
 		if (!reclaimReservationIfOwnerSync(path, attempt.doc.ownerId)) return { _tag: "busy" };
 	}
 });
-var PortBrokerService = class extends Context.Service()("@devstack-rewrite/substrate/PortBroker") {};
+var PortBrokerService = class extends Context.Service()("@devstack/substrate/PortBroker") {};
 /**
 * Layer that materializes one `PortBroker` per stack scope.
 *
@@ -152,13 +145,10 @@ var PortBrokerService = class extends Context.Service()("@devstack-rewrite/subst
 const layerPortBroker = Layer.effect(PortBrokerService, Effect.gen(function* () {
 	const reservationRoot = (yield* RuntimeRoot).root;
 	const state = yield* Ref.make(/* @__PURE__ */ new Map());
-	const tryReserve = (port, kind, owner) => Ref.modify(state, (current) => {
+	const tryReserve = (port, owner) => Ref.modify(state, (current) => {
 		if (current.has(port)) return [false, current];
 		const next = new Map(current);
-		next.set(port, {
-			kind,
-			owner
-		});
+		next.set(port, { owner });
 		return [true, next];
 	});
 	const drop = (port) => Ref.update(state, (current) => {
@@ -167,81 +157,130 @@ const layerPortBroker = Layer.effect(PortBrokerService, Effect.gen(function* ()
 		next.delete(port);
 		return next;
 	});
-	const allocate = (opts) => Effect.gen(function* () {
-		const range = PORT_RANGES[opts.kind];
-		const owner = opts.kind;
+	/** Reserve `port` in the in-process Map, run the probe+reservation
+	*  chain through to either (a) `finishAllocation` arming its scope
+	*  finalizer or (b) a clean release of BOTH the in-process slot
+	*  AND the on-disk reservation file.
+	*
+	*  Interrupt safety: the critical region is wrapped in
+	*  `Effect.acquireUseRelease`, whose `release` step is
+	*  uninterruptible while its `use` step is NOT (Effect v4). The
+	*  acquired `PortReservation` is created INSIDE `use` (after the
+	*  on-disk file is written), so the `use` body stashes it in
+	*  `reservationCell`; the uninterruptible `release` reads that cell
+	*  and unlinks the reservation file on ANY non-`kept` exit —
+	*  interrupt, typed failure, or a non-`kept` success outcome.
+	*  Without this, an interrupt landing between the reservation write
+	*  (in `acquirePortReservation`) and the finalizer arm (in
+	*  `finishAllocation`) left the file on disk while the old release
+	*  only dropped the in-process slot — leaking
+	*  `port-locks/<port>.json`. Its `holder` is this still-alive
+	*  process, so every future `allocate` of that port then saw
+	*  `checkHolderLiveness` report `alive`, marking it busy for the
+	*  whole supervisor lifetime.
+	*
+	*  The only path that intentionally KEEPS both the slot and the
+	*  file is the `kept` outcome, where ownership transfers to the
+	*  scope finalizer (see `finishAllocation`); `reservationCell` is
+	*  cleared there so `release` is a no-op for it.
+	*  (`unlinkReservationIfOwnerSync` is owner-id-guarded and
+	*  idempotent, so a stray double-release is harmless — clearing
+	*  the cell just avoids the redundant stat.)
+	*/
+	const attemptSlot = (port, owner, probeHost) => {
+		let reservationCell = null;
+		return Effect.acquireUseRelease(tryReserve(port, owner), (reserved) => {
+			if (!reserved) return Effect.succeed(null);
+			return Effect.gen(function* () {
+				const reservation = yield* acquirePortReservation(reservationRoot, port, owner);
+				if (reservation._tag === "busy") return { _tag: "busy" };
+				if (reservation._tag === "failed") return {
+					_tag: "reservation-failed",
+					detail: reservation.detail,
+					cause: reservation.cause
+				};
+				reservationCell = reservation.reservation;
+				const ok = yield* probePort(port, probeHost);
+				if (ok._tag === "ok") {
+					const allocated = yield* finishAllocation(port, owner, drop, reservation.reservation);
+					reservationCell = null;
+					return {
+						_tag: "kept",
+						allocated
+					};
+				}
+				if (ok._tag === "probe-failed") return {
+					_tag: "probe-failed",
+					cause: ok.cause
+				};
+				return { _tag: "busy" };
+			});
+		}, (reserved, exit) => {
+			if (!reserved) return Effect.void;
+			if (exit._tag === "Success" && exit.value?._tag === "kept") return Effect.void;
+			const releaseReservation = reservationCell !== null ? reservationCell.release : Effect.void;
+			return Effect.all([drop(port), releaseReservation], { discard: true });
+		});
+	};
+	const allocate = (opts = {}) => Effect.gen(function* () {
+		const owner = opts.owner ?? DEFAULT_OWNER;
 		const probeHost = opts.probeHost ?? "127.0.0.1";
+		const windowStart = opts.windowHint?.start ?? DEFAULT_PORT_WINDOW.start;
+		const windowSize = opts.windowHint?.size ?? DEFAULT_PORT_WINDOW.size;
 		if (opts.preferredPort !== void 0) {
-			if (!(yield* tryReserve(opts.preferredPort, opts.kind, owner))) return yield* Effect.fail(new PortBrokerError({
+			const outcome = yield* attemptSlot(opts.preferredPort, owner, probeHost);
+			if (outcome === null) return yield* Effect.fail(new PortBrokerError({
 				reason: "preferred-busy",
-				detail: `preferred port ${opts.preferredPort} (${opts.kind}) is already held by another allocation in this stack`
+				detail: `preferred port ${opts.preferredPort} (owner=${owner}) is already held by another allocation in this stack`
+			}));
+			if (outcome._tag === "kept") return outcome.allocated;
+			if (outcome._tag === "reservation-failed") return yield* Effect.fail(new PortBrokerError({
+				reason: "reservation-failed",
+				detail: outcome.detail,
+				cause: outcome.cause
+			}));
+			if (outcome._tag === "probe-failed") return yield* Effect.fail(new PortBrokerError({
+				reason: "bind-probe-failed",
+				detail: `bind probe on preferred port ${opts.preferredPort} (owner=${owner}, host=${probeHost}) failed with non-EADDRINUSE error`,
+				cause: outcome.cause
 			}));
-			const reservation = yield* acquirePortReservation(reservationRoot, opts.preferredPort, opts.kind);
-			if (reservation._tag === "busy") yield* drop(opts.preferredPort);
-			else if (reservation._tag === "failed") {
-				yield* drop(opts.preferredPort);
-				return yield* Effect.fail(new PortBrokerError({
-					reason: "reservation-failed",
-					detail: reservation.detail,
-					cause: reservation.cause
-				}));
-			} else {
-				const ok = yield* probePort(opts.preferredPort, probeHost);
-				if (ok._tag === "ok") return yield* finishAllocation(opts.preferredPort, opts.kind, drop, reservation.reservation);
-				yield* reservation.reservation.release;
-				yield* drop(opts.preferredPort);
-				if (ok._tag === "probe-failed") return yield* Effect.fail(new PortBrokerError({
-					reason: "bind-probe-failed",
-					detail: `bind probe on preferred port ${opts.preferredPort} (${opts.kind}, host=${probeHost}) failed with non-EADDRINUSE error`,
-					cause: ok.cause
-				}));
-			}
 		}
-		for (let p = range.start; p < range.start + range.window; p++) {
-			if (!(yield* tryReserve(p, opts.kind, owner))) continue;
-			const reservation = yield* acquirePortReservation(reservationRoot, p, opts.kind);
-			if (reservation._tag === "busy") {
-				yield* drop(p);
-				continue;
-			}
-			if (reservation._tag === "failed") {
-				yield* drop(p);
-				return yield* Effect.fail(new PortBrokerError({
-					reason: "reservation-failed",
-					detail: reservation.detail,
-					cause: reservation.cause
-				}));
-			}
-			const ok = yield* probePort(p, probeHost);
-			if (ok._tag === "ok") return yield* finishAllocation(p, opts.kind, drop, reservation.reservation);
-			yield* reservation.reservation.release;
-			yield* drop(p);
-			if (ok._tag === "probe-failed") return yield* Effect.fail(new PortBrokerError({
+		for (let p = windowStart; p < windowStart + windowSize; p++) {
+			const outcome = yield* attemptSlot(p, owner, probeHost);
+			if (outcome === null) continue;
+			if (outcome._tag === "kept") return outcome.allocated;
+			if (outcome._tag === "reservation-failed") return yield* Effect.fail(new PortBrokerError({
+				reason: "reservation-failed",
+				detail: outcome.detail,
+				cause: outcome.cause
+			}));
+			if (outcome._tag === "probe-failed") return yield* Effect.fail(new PortBrokerError({
 				reason: "bind-probe-failed",
-				detail: `bind probe on port ${p} (${opts.kind}, host=${probeHost}) failed with non-EADDRINUSE error`,
-				cause: ok.cause
+				detail: `bind probe on port ${p} (owner=${owner}, host=${probeHost}) failed with non-EADDRINUSE error`,
+				cause: outcome.cause
 			}));
 		}
 		return yield* Effect.fail(new PortBrokerError({
 			reason: "no-free-port",
-			detail: `no free port found in [${range.start}, ${range.start + range.window}) for kind '${opts.kind}'`
+			detail: `no free port found in [${windowStart}, ${windowStart + windowSize}) for owner '${owner}'`
 		}));
 	}).pipe(Effect.withSpan("substrate.portBroker.allocate", { attributes: {
-		kind: opts.kind,
+		owner: opts.owner ?? DEFAULT_OWNER,
 		preferredPort: opts.preferredPort ?? -1,
-		probeHost: opts.probeHost ?? "127.0.0.1"
+		probeHost: opts.probeHost ?? "127.0.0.1",
+		windowStart: opts.windowHint?.start ?? DEFAULT_PORT_WINDOW.start,
+		windowSize: opts.windowHint?.size ?? DEFAULT_PORT_WINDOW.size
 	} }));
-	const finishAllocation = (port, kind, dropFn, reservation) => Effect.gen(function* () {
+	const finishAllocation = (port, owner, dropFn, reservation) => Effect.gen(function* () {
 		const release = Effect.all([dropFn(port), reservation.release], { discard: true });
 		yield* Effect.addFinalizer(() => release.pipe(Effect.uninterruptible));
 		yield* Effect.annotateCurrentSpan({
 			"portBroker.port": port,
-			"portBroker.kind": kind
+			"portBroker.owner": owner
 		});
-		yield* Effect.logDebug(`port-broker allocated ${port} (kind=${kind})`);
+		yield* Effect.logDebug(`port-broker allocated ${port} (owner=${owner})`);
 		return {
 			port,
-			kind,
 			release
 		};
 	});
@@ -252,7 +291,7 @@ const layerPortBroker = Layer.effect(PortBrokerService, Effect.gen(function* ()
 * The OS atomically rejects with `EADDRINUSE` if another process
 * already holds the port — that's our cross-process collision check.
 *
-* The default probe is loopback-only because the wallet binds
+* The default probe is loopback-only because most servers bind
 * loopback. Docker-backed callers pass `0.0.0.0`; on Docker Desktop,
 * binding a transient Node server on `0.0.0.0` does not always reject
 * ports already held on `127.0.0.1`, even though Docker's publish step
@@ -312,8 +351,13 @@ const probeSinglePort = (port, host) => Effect.callback((resume) => {
 			server?.close();
 		} catch {}
 	}
+	return Effect.sync(() => {
+		try {
+			server?.close();
+		} catch {}
+	});
 });
 //#endregion
-export { PortBrokerService, layerPortBroker };
+export { DEFAULT_PORT_WINDOW, PortBrokerService, layerPortBroker };
 
 //# sourceMappingURL=service.mjs.map

package/dist/substrate/runtime/port-broker/service.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"service.mjs","names":["createNetServer"],"sources":["../../../../src/substrate/runtime/port-broker/service.ts"],"sourcesContent":["// Port broker — substrate-level service.\n//\n// Architecture (`notes/redesign/architecture.md` § \"What's collapsed\"):\n// resource broker for host ports. Plugins that need to bind a host\n// HTTP server (wallet) or publish a container port on the host (Sui)\n// yield this service and call\n// `allocate({...})`. The broker:\n//\n//   1. Tracks in-process allocations in a `Ref<Map<port, Holder>>` so\n//      two sibling plugins in the same stack don't both pick the same\n//      port between bind-probe and `server.listen`.\n//   2. Claims a runtime-root scoped port reservation file before the\n//      bind probe. This closes the cross-process probe→listen race:\n//      two independent `devstack apply` processes sharing a state dir\n//      cannot both choose the same candidate while neither real server\n//      is listening yet.\n//   3. Verifies kernel-level availability by binding a transient\n//      `net.Server` on the candidate port and closing it.\n//      The OS's `EADDRINUSE` remains the final collision check for\n//      non-devstack processes and stale reservation gaps.\n//   4. Releases on scope close. The broker hands back a `release`\n//      Effect AND installs a scope finalizer; the architecture's\n//      \"scope-local, never module-level\" invariant is honoured by\n//      construction (the Layer is scope-local, the entries die with\n//      the scope).\n//\n// \"Kind-window\" sequential search: each `kind` has its own starting\n// port and window size (`PORT_RANGES`). The broker scans forward from\n// `start` up to `start + window` (and from `preferredPort` if\n// supplied) until a probe succeeds.\n//\n// Cross-process safety: the reservation file is scoped to the runtime\n// root, not the stack root, because host ports are machine-global. The\n// stack-scoped supervisor lock serializes acquires of the SAME stack;\n// these reservation files serialize host-port choices across DIFFERENT\n// stacks and apps that share a state dir.\n\nimport { randomUUID } from 'node:crypto';\nimport { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';\nimport {\n\tcreateServer as createNetServer,\n\ttype AddressInfo,\n\ttype Server as NetServer,\n} from 'node:net';\nimport { dirname, join } from 'node:path';\n\nimport { Context, Effect, Layer, Ref, Schema, Scope } from 'effect';\n\nimport { RosterHolderSchema, type RosterHolder } from '../../cross-process.ts';\nimport { checkHolderLiveness, ownHolder } from '../cross-process/liveness.ts';\nimport { PortBrokerError } from '../errors.ts';\nimport { RuntimeRoot } from '../paths.ts';\nimport { decodeJsonTextSync } from '../runtime-decode.ts';\n\n// ----------------------------------------------------------------------\n// Public shape\n// ----------------------------------------------------------------------\n\n/** Allocation kind — drives the search-window starting port. Plugins\n *  pass a literal so a `wallet` allocation and a `rpc` allocation\n *  never collide on the same starting point.\n *\n *  Extend `PORT_RANGES` below to add a new kind. The literal type is\n *  closed deliberately — agnostic-naming would invite plugins to\n *  freelance kinds (and overlap window starts unintentionally).\n *\n *  Today's windows are sized for \"tens of plugins per stack\" with\n *  parallel-stack overhead headroom. Each window is 1000 ports; that's\n *  more than enough for any realistic in-process devstack, and the\n *  forward-scan only ever crosses a window boundary if EVERY port in\n *  the window is taken (effectively never on dev machines). */\nconst PORT_KINDS = ['wallet', 'http', 'rpc', 'misc'] as const;\n\nexport type PortKind = (typeof PORT_KINDS)[number];\n\n/** Host interface used by the transient bind probe. Callers binding a\n *  real server on loopback should use the default. Callers that hand\n *  the port to Docker's all-interface publish path should pass\n *  `'0.0.0.0'` so the probe asks the same kernel question. */\nexport type PortProbeHost = '127.0.0.1' | '0.0.0.0';\n\n/** Sequential search window per kind. The broker tries `preferredPort`\n *  first (if given), then `[start, start + window)` in order. */\nconst PORT_RANGES: Readonly<Record<PortKind, { readonly start: number; readonly window: number }>> =\n\t{\n\t\t// 39200 — chosen to land between the wallet's legacy 39082 default\n\t\t// (still functional via `preferredPort`) and the high ephemeral\n\t\t// range. Stays clear of common dev-server defaults (3000-5173, 8000-\n\t\t// 8080) so a sibling Vite / Next.js process on the host doesn't\n\t\t// accidentally collide on the first probe.\n\t\twallet: { start: 39200, window: 1000 },\n\t\t// 50000 — well clear of postgres (5432), redis (6379), and the\n\t\t// Vite/Next dev-server cluster. Used by any plugin that just wants\n\t\t// \"a free HTTP port\".\n\t\thttp: { start: 50000, window: 1000 },\n\t\t// 51000 — reserved for RPC-shaped servers (graphql, custom RPC).\n\t\t// Kept distinct from `http` so the kind-window discrimination\n\t\t// surfaces in `ss -ltnp` listings during diagnosis.\n\t\trpc: { start: 51000, window: 1000 },\n\t\t// 52000 — escape hatch for plugins that don't fit the typed kinds.\n\t\tmisc: { start: 52000, window: 1000 },\n\t};\n\n/** Input to `allocate`. */\nexport interface AllocateOptions {\n\t/** Optional caller hint. The broker tries this FIRST; if the port is\n\t *  already held in-process the call FAILS with\n\t *  `reason: 'preferred-busy'` (the caller asked specifically for\n\t *  this port and got an obvious collision). If the bind-probe fails\n\t *  with EADDRINUSE the broker falls through to the kind-window\n\t *  scan — preferred is a HINT for the kernel-collision case, but a\n\t *  HARD CHOICE against in-process collision. */\n\treadonly preferredPort?: number;\n\t/** Interface to bind during the kernel probe. Defaults to\n\t *  `127.0.0.1`, matching host-loopback servers such as the wallet.\n\t *  Docker `-p host:container` publishes on all interfaces, so\n\t *  Docker-backed callers pass `0.0.0.0`. */\n\treadonly probeHost?: PortProbeHost;\n\t/** Allocation kind — drives the search window when no preferred is\n\t *  supplied (or when preferred is taken at the kernel level). */\n\treadonly kind: PortKind;\n}\n\n/** Successful allocation. `release` is provided in addition to the\n *  scope finalizer so tests / orchestrators can drive release\n *  explicitly without unwinding the whole scope. Calling `release`\n *  twice is a no-op. */\nexport interface AllocatedPort {\n\treadonly port: number;\n\treadonly kind: PortKind;\n\treadonly release: Effect.Effect<void>;\n}\n\n/** Service shape — what plugins yield from Context. */\nexport interface PortBroker {\n\t/**\n\t * Allocate a port for `kind`. The returned port is exclusive within\n\t * THIS process (the broker's `Ref` map) and best-effort-exclusive\n\t * across devstack processes that share a runtime root (port\n\t * reservation file), then verified against the kernel bind table\n\t * on `probeHost`.\n\t *\n\t * Scope-bound release: the broker installs a finalizer on the\n\t * surrounding scope; callers can additionally invoke\n\t * `result.release` explicitly.\n\t *\n\t * Failures (`PortBrokerError`):\n\t *   - `preferred-busy` — caller's `preferredPort` is held by another\n\t *     in-process allocation on the same stack.\n\t *   - `no-free-port` — the kind window was exhausted without a\n\t *     probe-pass candidate.\n\t *   - `bind-probe-failed` — non-EADDRINUSE error from the OS bind\n\t *     probe (EACCES on a privileged port etc.).\n\t *   - `reservation-failed` — port reservation file IO failed.\n\t */\n\treadonly allocate: (\n\t\topts: AllocateOptions,\n\t) => Effect.Effect<AllocatedPort, PortBrokerError, Scope.Scope>;\n}\n\n// ----------------------------------------------------------------------\n// Internal state\n// ----------------------------------------------------------------------\n\n/** In-process holder for a port. Carries the kind for diagnostics\n *  (e.g. surfaced in `no-free-port` errors). The `owner` is a\n *  free-form caller string used for log lines and the future cause\n *  walker; today every caller passes the literal `kind`. */\ninterface Holder {\n\treadonly kind: PortKind;\n\treadonly owner: string;\n}\n\ntype State = ReadonlyMap<number, Holder>;\n\nconst PORT_RESERVATION_VERSION = 1 as const;\n\nconst PortReservationDocSchema = Schema.Struct({\n\tversion: Schema.Literal(PORT_RESERVATION_VERSION),\n\tport: Schema.Number,\n\tkind: Schema.Literals(PORT_KINDS),\n\townerId: Schema.String,\n\tholder: RosterHolderSchema,\n});\n\ntype PortReservationDoc = Schema.Schema.Type<typeof PortReservationDocSchema>;\n\ninterface PortReservation {\n\treadonly path: string;\n\treadonly ownerId: string;\n\treadonly release: Effect.Effect<void>;\n}\n\ntype ReservationAttempt =\n\t| { readonly _tag: 'acquired'; readonly reservation: PortReservation }\n\t| { readonly _tag: 'busy' }\n\t| { readonly _tag: 'failed'; readonly detail: string; readonly cause: unknown };\n\ntype ReservationWriteAttempt =\n\t| { readonly _tag: 'written' }\n\t| { readonly _tag: 'race' }\n\t| { readonly _tag: 'exists'; readonly doc: PortReservationDoc | null }\n\t| { readonly _tag: 'failed'; readonly cause: unknown };\n\nconst portReservationPath = (root: string, port: number): string =>\n\tjoin(root, 'port-locks', `${port}.json`);\n\nconst parseReservationDoc = (raw: string): PortReservationDoc | null => {\n\ttry {\n\t\treturn decodeJsonTextSync(PortReservationDocSchema, raw, {\n\t\t\tsource: 'port reservation',\n\t\t\tmkError: (issue) => issue,\n\t\t});\n\t} catch {\n\t\treturn null;\n\t}\n};\n\nconst tryWriteReservationSync = (\n\tpath: string,\n\tdoc: PortReservationDoc,\n): ReservationWriteAttempt => {\n\ttry {\n\t\tmkdirSync(dirname(path), { recursive: true });\n\t\twriteFileSync(path, `${JSON.stringify(doc)}\\n`, { flag: 'wx', mode: 0o600 });\n\t\treturn { _tag: 'written' };\n\t} catch (cause) {\n\t\tconst code = (cause as NodeJS.ErrnoException).code;\n\t\tif (code !== 'EEXIST') return { _tag: 'failed', cause };\n\t\tif (!existsSync(path)) return { _tag: 'race' };\n\t\ttry {\n\t\t\treturn { _tag: 'exists', doc: parseReservationDoc(readFileSync(path, 'utf8')) };\n\t\t} catch {\n\t\t\treturn { _tag: 'exists', doc: null };\n\t\t}\n\t}\n};\n\nconst unlinkReservationIfOwnerSync = (path: string, ownerId: string): void => {\n\ttry {\n\t\tconst doc = parseReservationDoc(readFileSync(path, 'utf8'));\n\t\tif (doc?.ownerId === ownerId) {\n\t\t\tunlinkSync(path);\n\t\t}\n\t} catch {\n\t\t// Missing or unreadable: release is best-effort. A peer never\n\t\t// reclaims unreadable reservations; it simply skips that port.\n\t}\n};\n\nconst reclaimReservationIfOwnerSync = (path: string, ownerId: string): boolean => {\n\ttry {\n\t\tconst doc = parseReservationDoc(readFileSync(path, 'utf8'));\n\t\tif (doc?.ownerId !== ownerId) return false;\n\t\tunlinkSync(path);\n\t\treturn true;\n\t} catch {\n\t\treturn false;\n\t}\n};\n\nconst acquirePortReservation = (\n\troot: string,\n\tport: number,\n\tkind: PortKind,\n): Effect.Effect<ReservationAttempt> =>\n\tEffect.gen(function* () {\n\t\tconst path = portReservationPath(root, port);\n\t\tconst ownerId = `${process.pid}-${randomUUID().slice(0, 8)}`;\n\t\tconst holder: RosterHolder = ownHolder();\n\t\tconst doc: PortReservationDoc = {\n\t\t\tversion: PORT_RESERVATION_VERSION,\n\t\t\tport,\n\t\t\tkind,\n\t\t\townerId,\n\t\t\tholder,\n\t\t};\n\n\t\twhile (true) {\n\t\t\tconst attempt = tryWriteReservationSync(path, doc);\n\t\t\tif (attempt._tag === 'written') {\n\t\t\t\treturn {\n\t\t\t\t\t_tag: 'acquired',\n\t\t\t\t\treservation: {\n\t\t\t\t\t\tpath,\n\t\t\t\t\t\townerId,\n\t\t\t\t\t\trelease: Effect.sync(() => unlinkReservationIfOwnerSync(path, ownerId)),\n\t\t\t\t\t},\n\t\t\t\t} as const;\n\t\t\t}\n\t\t\tif (attempt._tag === 'race') continue;\n\t\t\tif (attempt._tag === 'failed') {\n\t\t\t\treturn {\n\t\t\t\t\t_tag: 'failed',\n\t\t\t\t\tdetail: `port reservation ${path} could not be written`,\n\t\t\t\t\tcause: attempt.cause,\n\t\t\t\t} as const;\n\t\t\t}\n\t\t\tif (attempt.doc === null) return { _tag: 'busy' } as const;\n\n\t\t\tconst liveness = yield* checkHolderLiveness(attempt.doc.holder).pipe(\n\t\t\t\tEffect.catch(() => Effect.succeed('alive' as const)),\n\t\t\t);\n\t\t\tif (liveness === 'alive') return { _tag: 'busy' } as const;\n\t\t\tif (!reclaimReservationIfOwnerSync(path, attempt.doc.ownerId)) {\n\t\t\t\treturn { _tag: 'busy' } as const;\n\t\t\t}\n\t\t}\n\t});\n\n// ----------------------------------------------------------------------\n// Service tag + Layer\n// ----------------------------------------------------------------------\n\nexport class PortBrokerService extends Context.Service<PortBrokerService, PortBroker>()(\n\t'@devstack-rewrite/substrate/PortBroker',\n) {}\n\n/**\n * Layer that materializes one `PortBroker` per stack scope.\n *\n * The broker's state lives in a `Ref` captured by the Layer's\n * `Effect.gen`; closing the Layer's scope drops every allocation.\n * Parallel stacks each get their own broker (Layer-driven), and they\n * coordinate cross-process via runtime-root reservation files plus the\n * kernel's bind table — never via shared in-process state.\n */\nexport const layerPortBroker: Layer.Layer<PortBrokerService, never, RuntimeRoot> = Layer.effect(\n\tPortBrokerService,\n\tEffect.gen(function* () {\n\t\tconst runtimeRoot = yield* RuntimeRoot;\n\t\tconst reservationRoot = runtimeRoot.root;\n\t\tconst state = yield* Ref.make<State>(new Map());\n\n\t\tconst tryReserve = (port: number, kind: PortKind, owner: string): Effect.Effect<boolean> =>\n\t\t\tRef.modify<State, boolean>(state, (current) => {\n\t\t\t\tif (current.has(port)) return [false, current];\n\t\t\t\tconst next = new Map(current);\n\t\t\t\tnext.set(port, { kind, owner });\n\t\t\t\treturn [true, next];\n\t\t\t});\n\n\t\tconst drop = (port: number): Effect.Effect<void> =>\n\t\t\tRef.update(state, (current) => {\n\t\t\t\tif (!current.has(port)) return current;\n\t\t\t\tconst next = new Map(current);\n\t\t\t\tnext.delete(port);\n\t\t\t\treturn next;\n\t\t\t});\n\n\t\tconst allocate: PortBroker['allocate'] = (opts) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst range = PORT_RANGES[opts.kind];\n\t\t\t\tconst owner = opts.kind;\n\t\t\t\tconst probeHost = opts.probeHost ?? '127.0.0.1';\n\n\t\t\t\t// 1. Preferred-port path. The broker honours `preferredPort`\n\t\t\t\t//    as a strong hint, but refuses in-process collisions\n\t\t\t\t//    (architecture §6: same-stack siblings MUST NOT trample).\n\t\t\t\tif (opts.preferredPort !== undefined) {\n\t\t\t\t\tconst reserved = yield* tryReserve(opts.preferredPort, opts.kind, owner);\n\t\t\t\t\tif (!reserved) {\n\t\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\t\tnew PortBrokerError({\n\t\t\t\t\t\t\t\treason: 'preferred-busy',\n\t\t\t\t\t\t\t\tdetail:\n\t\t\t\t\t\t\t\t\t`preferred port ${opts.preferredPort} (${opts.kind}) is ` +\n\t\t\t\t\t\t\t\t\t`already held by another allocation in this stack`,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t\t// Kernel-level probe. If a foreign process holds the\n\t\t\t\t\t// port, drop our reservation and FALL THROUGH to the\n\t\t\t\t\t// kind-window scan — the caller's preferred was a HINT\n\t\t\t\t\t// for cross-process collisions.\n\t\t\t\t\tconst reservation = yield* acquirePortReservation(\n\t\t\t\t\t\treservationRoot,\n\t\t\t\t\t\topts.preferredPort,\n\t\t\t\t\t\topts.kind,\n\t\t\t\t\t);\n\t\t\t\t\tif (reservation._tag === 'busy') {\n\t\t\t\t\t\tyield* drop(opts.preferredPort);\n\t\t\t\t\t} else if (reservation._tag === 'failed') {\n\t\t\t\t\t\tyield* drop(opts.preferredPort);\n\t\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\t\tnew PortBrokerError({\n\t\t\t\t\t\t\t\treason: 'reservation-failed',\n\t\t\t\t\t\t\t\tdetail: reservation.detail,\n\t\t\t\t\t\t\t\tcause: reservation.cause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t);\n\t\t\t\t\t} else {\n\t\t\t\t\t\tconst ok = yield* probePort(opts.preferredPort, probeHost);\n\t\t\t\t\t\tif (ok._tag === 'ok') {\n\t\t\t\t\t\t\treturn yield* finishAllocation(\n\t\t\t\t\t\t\t\topts.preferredPort,\n\t\t\t\t\t\t\t\topts.kind,\n\t\t\t\t\t\t\t\tdrop,\n\t\t\t\t\t\t\t\treservation.reservation,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\t\t\t\t\t\tyield* reservation.reservation.release;\n\t\t\t\t\t\tyield* drop(opts.preferredPort);\n\t\t\t\t\t\tif (ok._tag === 'probe-failed') {\n\t\t\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\t\t\tnew PortBrokerError({\n\t\t\t\t\t\t\t\t\treason: 'bind-probe-failed',\n\t\t\t\t\t\t\t\t\tdetail:\n\t\t\t\t\t\t\t\t\t\t`bind probe on preferred port ${opts.preferredPort} ` +\n\t\t\t\t\t\t\t\t\t\t`(${opts.kind}, host=${probeHost}) failed with non-EADDRINUSE error`,\n\t\t\t\t\t\t\t\t\tcause: ok.cause,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\t\t\t\t\t\t// `ok._tag === 'in-use'` — fall through to scan.\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// 2. Forward-scan the kind window.\n\t\t\t\tfor (let p = range.start; p < range.start + range.window; p++) {\n\t\t\t\t\tconst reserved = yield* tryReserve(p, opts.kind, owner);\n\t\t\t\t\tif (!reserved) continue;\n\t\t\t\t\tconst reservation = yield* acquirePortReservation(reservationRoot, p, opts.kind);\n\t\t\t\t\tif (reservation._tag === 'busy') {\n\t\t\t\t\t\tyield* drop(p);\n\t\t\t\t\t\tcontinue;\n\t\t\t\t\t}\n\t\t\t\t\tif (reservation._tag === 'failed') {\n\t\t\t\t\t\tyield* drop(p);\n\t\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\t\tnew PortBrokerError({\n\t\t\t\t\t\t\t\treason: 'reservation-failed',\n\t\t\t\t\t\t\t\tdetail: reservation.detail,\n\t\t\t\t\t\t\t\tcause: reservation.cause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t\tconst ok = yield* probePort(p, probeHost);\n\t\t\t\t\tif (ok._tag === 'ok') {\n\t\t\t\t\t\treturn yield* finishAllocation(p, opts.kind, drop, reservation.reservation);\n\t\t\t\t\t}\n\t\t\t\t\tyield* reservation.reservation.release;\n\t\t\t\t\tyield* drop(p);\n\t\t\t\t\tif (ok._tag === 'probe-failed') {\n\t\t\t\t\t\t// A privileged port (EACCES) in the middle of the\n\t\t\t\t\t\t// window is unrecoverable for this kind. Surface\n\t\t\t\t\t\t// immediately rather than thrash the whole window.\n\t\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\t\tnew PortBrokerError({\n\t\t\t\t\t\t\t\treason: 'bind-probe-failed',\n\t\t\t\t\t\t\t\tdetail:\n\t\t\t\t\t\t\t\t\t`bind probe on port ${p} (${opts.kind}, host=${probeHost}) failed ` +\n\t\t\t\t\t\t\t\t\t`with non-EADDRINUSE error`,\n\t\t\t\t\t\t\t\tcause: ok.cause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t\t// In-use → next candidate.\n\t\t\t\t}\n\n\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\tnew PortBrokerError({\n\t\t\t\t\t\treason: 'no-free-port',\n\t\t\t\t\t\tdetail:\n\t\t\t\t\t\t\t`no free port found in [${range.start}, ` +\n\t\t\t\t\t\t\t`${range.start + range.window}) for kind '${opts.kind}'`,\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}).pipe(\n\t\t\t\tEffect.withSpan('substrate.portBroker.allocate', {\n\t\t\t\t\tattributes: {\n\t\t\t\t\t\tkind: opts.kind,\n\t\t\t\t\t\tpreferredPort: opts.preferredPort ?? -1,\n\t\t\t\t\t\tprobeHost: opts.probeHost ?? '127.0.0.1',\n\t\t\t\t\t},\n\t\t\t\t}),\n\t\t\t);\n\n\t\tconst finishAllocation = (\n\t\t\tport: number,\n\t\t\tkind: PortKind,\n\t\t\tdropFn: (p: number) => Effect.Effect<void>,\n\t\t\treservation: PortReservation,\n\t\t): Effect.Effect<AllocatedPort, never, Scope.Scope> =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\t// Scope finalizer — drops the entry when the surrounding\n\t\t\t\t// scope closes. Uninterruptible so a Ctrl-C double-tap\n\t\t\t\t// doesn't leave the entry dangling in the broker's Ref.\n\t\t\t\tconst release = Effect.all([dropFn(port), reservation.release], {\n\t\t\t\t\tdiscard: true,\n\t\t\t\t});\n\t\t\t\tyield* Effect.addFinalizer(() => release.pipe(Effect.uninterruptible));\n\t\t\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t\t\t'portBroker.port': port,\n\t\t\t\t\t'portBroker.kind': kind,\n\t\t\t\t});\n\t\t\t\tyield* Effect.logDebug(`port-broker allocated ${port} (kind=${kind})`);\n\t\t\t\treturn {\n\t\t\t\t\tport,\n\t\t\t\t\tkind,\n\t\t\t\t\trelease,\n\t\t\t\t} satisfies AllocatedPort;\n\t\t\t});\n\n\t\treturn PortBrokerService.of({ allocate });\n\t}),\n);\n\n// ----------------------------------------------------------------------\n// Kernel-level bind probe\n// ----------------------------------------------------------------------\n\n/** Probe result. `'in-use'` is the recoverable case (try the next\n *  port); `'probe-failed'` is the unrecoverable case (caller's\n *  problem — surface). */\ntype ProbeResult =\n\t| { readonly _tag: 'ok' }\n\t| { readonly _tag: 'in-use' }\n\t| { readonly _tag: 'probe-failed'; readonly cause: unknown };\n\n/**\n * Bind a transient `net.Server` on `<host>:<port>` and close it.\n * The OS atomically rejects with `EADDRINUSE` if another process\n * already holds the port — that's our cross-process collision check.\n *\n * The default probe is loopback-only because the wallet binds\n * loopback. Docker-backed callers pass `0.0.0.0`; on Docker Desktop,\n * binding a transient Node server on `0.0.0.0` does not always reject\n * ports already held on `127.0.0.1`, even though Docker's publish step\n * will reject them. Wildcard probes therefore check loopback as well.\n *\n * Race window: between the probe-close and the caller's real `listen`,\n * a non-devstack process could still grab the port. Devstack peers are\n * blocked by the reservation file until the allocation scope releases.\n */\nconst probePort = (port: number, host: PortProbeHost): Effect.Effect<ProbeResult> =>\n\thost === '0.0.0.0'\n\t\t? Effect.gen(function* () {\n\t\t\t\tconst loopback = yield* probeSinglePort(port, '127.0.0.1');\n\t\t\t\tif (loopback._tag !== 'ok') return loopback;\n\t\t\t\treturn yield* probeSinglePort(port, host);\n\t\t\t}).pipe(Effect.withSpan('substrate.portBroker.probe', { attributes: { host, port } }))\n\t\t: probeSinglePort(port, host).pipe(\n\t\t\t\tEffect.withSpan('substrate.portBroker.probe', { attributes: { host, port } }),\n\t\t\t);\n\nconst probeSinglePort = (port: number, host: PortProbeHost): Effect.Effect<ProbeResult> =>\n\tEffect.callback<ProbeResult>((resume) => {\n\t\tlet settled = false;\n\t\tlet server: NetServer | null = null;\n\t\tconst settle = (r: ProbeResult): void => {\n\t\t\tif (settled) return;\n\t\t\tsettled = true;\n\t\t\tresume(Effect.succeed(r));\n\t\t};\n\t\ttry {\n\t\t\tserver = createNetServer();\n\t\t\tserver.unref();\n\t\t\tconst onError = (err: NodeJS.ErrnoException): void => {\n\t\t\t\tconst code = err.code ?? '';\n\t\t\t\tif (code === 'EADDRINUSE' || code === 'EACCES') {\n\t\t\t\t\t// EACCES on these hosts is exotic but treat as in-use\n\t\t\t\t\t// for non-privileged ports (our windows start at\n\t\t\t\t\t// 39200, well above 1024). Surfaces as probe-failed\n\t\t\t\t\t// only if it persists for every port in the window.\n\t\t\t\t\tsettle({ _tag: 'in-use' });\n\t\t\t\t} else {\n\t\t\t\t\tsettle({ _tag: 'probe-failed', cause: err });\n\t\t\t\t}\n\t\t\t\ttry {\n\t\t\t\t\tserver?.close();\n\t\t\t\t} catch {\n\t\t\t\t\t/* defensive */\n\t\t\t\t}\n\t\t\t};\n\t\t\tserver.once('error', onError);\n\t\t\tserver.listen(port, host, () => {\n\t\t\t\t// Verify the OS actually gave us THIS port (defensive —\n\t\t\t\t// asking for a specific port shouldn't ever surprise\n\t\t\t\t// us, but `address()` is the source of truth).\n\t\t\t\tconst addr = server?.address() as AddressInfo | null;\n\t\t\t\tconst ok = addr !== null && addr.port === port;\n\t\t\t\tserver?.close(() => {\n\t\t\t\t\tsettle(ok ? { _tag: 'ok' } : { _tag: 'in-use' });\n\t\t\t\t});\n\t\t\t});\n\t\t} catch (cause) {\n\t\t\tsettle({ _tag: 'probe-failed', cause });\n\t\t\ttry {\n\t\t\t\tserver?.close();\n\t\t\t} catch {\n\t\t\t\t/* defensive */\n\t\t\t}\n\t\t}\n\t});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAuEA,MAAM,aAAa;CAAC;CAAU;CAAQ;CAAO;CAAO;;;AAYpD,MAAM,cACL;CAMC,QAAQ;EAAE,OAAO;EAAO,QAAQ;EAAM;CAItC,MAAM;EAAE,OAAO;EAAO,QAAQ;EAAM;CAIpC,KAAK;EAAE,OAAO;EAAO,QAAQ;EAAM;CAEnC,MAAM;EAAE,OAAO;EAAO,QAAQ;EAAM;CACpC;AA0EF,MAAM,2BAA2B;AAEjC,MAAM,2BAA2B,OAAO,OAAO;CAC9C,SAAS,OAAO,QAAQ,yBAAyB;CACjD,MAAM,OAAO;CACb,MAAM,OAAO,SAAS,WAAW;CACjC,SAAS,OAAO;CAChB,QAAQ;CACR,CAAC;AAqBF,MAAM,uBAAuB,MAAc,SAC1C,KAAK,MAAM,cAAc,GAAG,KAAK,OAAO;AAEzC,MAAM,uBAAuB,QAA2C;AACvE,KAAI;AACH,SAAO,mBAAmB,0BAA0B,KAAK;GACxD,QAAQ;GACR,UAAU,UAAU;GACpB,CAAC;SACK;AACP,SAAO;;;AAIT,MAAM,2BACL,MACA,QAC6B;AAC7B,KAAI;AACH,YAAU,QAAQ,KAAK,EAAE,EAAE,WAAW,MAAM,CAAC;AAC7C,gBAAc,MAAM,GAAG,KAAK,UAAU,IAAI,CAAC,KAAK;GAAE,MAAM;GAAM,MAAM;GAAO,CAAC;AAC5E,SAAO,EAAE,MAAM,WAAW;UAClB,OAAO;AAEf,MADc,MAAgC,SACjC,SAAU,QAAO;GAAE,MAAM;GAAU;GAAO;AACvD,MAAI,CAAC,WAAW,KAAK,CAAE,QAAO,EAAE,MAAM,QAAQ;AAC9C,MAAI;AACH,UAAO;IAAE,MAAM;IAAU,KAAK,oBAAoB,aAAa,MAAM,OAAO,CAAC;IAAE;UACxE;AACP,UAAO;IAAE,MAAM;IAAU,KAAK;IAAM;;;;AAKvC,MAAM,gCAAgC,MAAc,YAA0B;AAC7E,KAAI;AAEH,MADY,oBAAoB,aAAa,MAAM,OAAO,CACnD,EAAE,YAAY,QACpB,YAAW,KAAK;SAEV;;AAMT,MAAM,iCAAiC,MAAc,YAA6B;AACjF,KAAI;AAEH,MADY,oBAAoB,aAAa,MAAM,OAAO,CACnD,EAAE,YAAY,QAAS,QAAO;AACrC,aAAW,KAAK;AAChB,SAAO;SACA;AACP,SAAO;;;AAIT,MAAM,0BACL,MACA,MACA,SAEA,OAAO,IAAI,aAAa;CACvB,MAAM,OAAO,oBAAoB,MAAM,KAAK;CAC5C,MAAM,UAAU,GAAG,QAAQ,IAAI,GAAG,YAAY,CAAC,MAAM,GAAG,EAAE;CAE1D,MAAM,MAA0B;EAC/B,SAAS;EACT;EACA;EACA;EACA,QAN4B,WAMtB;EACN;AAED,QAAO,MAAM;EACZ,MAAM,UAAU,wBAAwB,MAAM,IAAI;AAClD,MAAI,QAAQ,SAAS,UACpB,QAAO;GACN,MAAM;GACN,aAAa;IACZ;IACA;IACA,SAAS,OAAO,WAAW,6BAA6B,MAAM,QAAQ,CAAC;IACvE;GACD;AAEF,MAAI,QAAQ,SAAS,OAAQ;AAC7B,MAAI,QAAQ,SAAS,SACpB,QAAO;GACN,MAAM;GACN,QAAQ,oBAAoB,KAAK;GACjC,OAAO,QAAQ;GACf;AAEF,MAAI,QAAQ,QAAQ,KAAM,QAAO,EAAE,MAAM,QAAQ;AAKjD,OAAI,OAHoB,oBAAoB,QAAQ,IAAI,OAAO,CAAC,KAC/D,OAAO,YAAY,OAAO,QAAQ,QAAiB,CAAC,CACpD,MACgB,QAAS,QAAO,EAAE,MAAM,QAAQ;AACjD,MAAI,CAAC,8BAA8B,MAAM,QAAQ,IAAI,QAAQ,CAC5D,QAAO,EAAE,MAAM,QAAQ;;EAGxB;AAMH,IAAa,oBAAb,cAAuC,QAAQ,SAAwC,CACtF,yCACA,CAAC;;;;;;;;;;AAWF,MAAa,kBAAsE,MAAM,OACxF,mBACA,OAAO,IAAI,aAAa;CAEvB,MAAM,mBAAkB,OADG,aACS;CACpC,MAAM,QAAQ,OAAO,IAAI,qBAAY,IAAI,KAAK,CAAC;CAE/C,MAAM,cAAc,MAAc,MAAgB,UACjD,IAAI,OAAuB,QAAQ,YAAY;AAC9C,MAAI,QAAQ,IAAI,KAAK,CAAE,QAAO,CAAC,OAAO,QAAQ;EAC9C,MAAM,OAAO,IAAI,IAAI,QAAQ;AAC7B,OAAK,IAAI,MAAM;GAAE;GAAM;GAAO,CAAC;AAC/B,SAAO,CAAC,MAAM,KAAK;GAClB;CAEH,MAAM,QAAQ,SACb,IAAI,OAAO,QAAQ,YAAY;AAC9B,MAAI,CAAC,QAAQ,IAAI,KAAK,CAAE,QAAO;EAC/B,MAAM,OAAO,IAAI,IAAI,QAAQ;AAC7B,OAAK,OAAO,KAAK;AACjB,SAAO;GACN;CAEH,MAAM,YAAoC,SACzC,OAAO,IAAI,aAAa;EACvB,MAAM,QAAQ,YAAY,KAAK;EAC/B,MAAM,QAAQ,KAAK;EACnB,MAAM,YAAY,KAAK,aAAa;AAKpC,MAAI,KAAK,kBAAkB,KAAA,GAAW;AAErC,OAAI,EAAC,OADmB,WAAW,KAAK,eAAe,KAAK,MAAM,MAAM,EAEvE,QAAO,OAAO,OAAO,KACpB,IAAI,gBAAgB;IACnB,QAAQ;IACR,QACC,kBAAkB,KAAK,cAAc,IAAI,KAAK,KAAK;IAEpD,CAAC,CACF;GAMF,MAAM,cAAc,OAAO,uBAC1B,iBACA,KAAK,eACL,KAAK,KACL;AACD,OAAI,YAAY,SAAS,OACxB,QAAO,KAAK,KAAK,cAAc;YACrB,YAAY,SAAS,UAAU;AACzC,WAAO,KAAK,KAAK,cAAc;AAC/B,WAAO,OAAO,OAAO,KACpB,IAAI,gBAAgB;KACnB,QAAQ;KACR,QAAQ,YAAY;KACpB,OAAO,YAAY;KACnB,CAAC,CACF;UACK;IACN,MAAM,KAAK,OAAO,UAAU,KAAK,eAAe,UAAU;AAC1D,QAAI,GAAG,SAAS,KACf,QAAO,OAAO,iBACb,KAAK,eACL,KAAK,MACL,MACA,YAAY,YACZ;AAEF,WAAO,YAAY,YAAY;AAC/B,WAAO,KAAK,KAAK,cAAc;AAC/B,QAAI,GAAG,SAAS,eACf,QAAO,OAAO,OAAO,KACpB,IAAI,gBAAgB;KACnB,QAAQ;KACR,QACC,gCAAgC,KAAK,cAAc,IAC/C,KAAK,KAAK,SAAS,UAAU;KAClC,OAAO,GAAG;KACV,CAAC,CACF;;;AAOJ,OAAK,IAAI,IAAI,MAAM,OAAO,IAAI,MAAM,QAAQ,MAAM,QAAQ,KAAK;AAE9D,OAAI,EAAC,OADmB,WAAW,GAAG,KAAK,MAAM,MAAM,EACxC;GACf,MAAM,cAAc,OAAO,uBAAuB,iBAAiB,GAAG,KAAK,KAAK;AAChF,OAAI,YAAY,SAAS,QAAQ;AAChC,WAAO,KAAK,EAAE;AACd;;AAED,OAAI,YAAY,SAAS,UAAU;AAClC,WAAO,KAAK,EAAE;AACd,WAAO,OAAO,OAAO,KACpB,IAAI,gBAAgB;KACnB,QAAQ;KACR,QAAQ,YAAY;KACpB,OAAO,YAAY;KACnB,CAAC,CACF;;GAEF,MAAM,KAAK,OAAO,UAAU,GAAG,UAAU;AACzC,OAAI,GAAG,SAAS,KACf,QAAO,OAAO,iBAAiB,GAAG,KAAK,MAAM,MAAM,YAAY,YAAY;AAE5E,UAAO,YAAY,YAAY;AAC/B,UAAO,KAAK,EAAE;AACd,OAAI,GAAG,SAAS,eAIf,QAAO,OAAO,OAAO,KACpB,IAAI,gBAAgB;IACnB,QAAQ;IACR,QACC,sBAAsB,EAAE,IAAI,KAAK,KAAK,SAAS,UAAU;IAE1D,OAAO,GAAG;IACV,CAAC,CACF;;AAKH,SAAO,OAAO,OAAO,KACpB,IAAI,gBAAgB;GACnB,QAAQ;GACR,QACC,0BAA0B,MAAM,MAAM,IACnC,MAAM,QAAQ,MAAM,OAAO,cAAc,KAAK,KAAK;GACvD,CAAC,CACF;GACA,CAAC,KACF,OAAO,SAAS,iCAAiC,EAChD,YAAY;EACX,MAAM,KAAK;EACX,eAAe,KAAK,iBAAiB;EACrC,WAAW,KAAK,aAAa;EAC7B,EACD,CAAC,CACF;CAEF,MAAM,oBACL,MACA,MACA,QACA,gBAEA,OAAO,IAAI,aAAa;EAIvB,MAAM,UAAU,OAAO,IAAI,CAAC,OAAO,KAAK,EAAE,YAAY,QAAQ,EAAE,EAC/D,SAAS,MACT,CAAC;AACF,SAAO,OAAO,mBAAmB,QAAQ,KAAK,OAAO,gBAAgB,CAAC;AACtE,SAAO,OAAO,oBAAoB;GACjC,mBAAmB;GACnB,mBAAmB;GACnB,CAAC;AACF,SAAO,OAAO,SAAS,yBAAyB,KAAK,SAAS,KAAK,GAAG;AACtE,SAAO;GACN;GACA;GACA;GACA;GACA;AAEH,QAAO,kBAAkB,GAAG,EAAE,UAAU,CAAC;EACxC,CACF;;;;;;;;;;;;;;;;AA6BD,MAAM,aAAa,MAAc,SAChC,SAAS,YACN,OAAO,IAAI,aAAa;CACxB,MAAM,WAAW,OAAO,gBAAgB,MAAM,YAAY;AAC1D,KAAI,SAAS,SAAS,KAAM,QAAO;AACnC,QAAO,OAAO,gBAAgB,MAAM,KAAK;EACxC,CAAC,KAAK,OAAO,SAAS,8BAA8B,EAAE,YAAY;CAAE;CAAM;CAAM,EAAE,CAAC,CAAC,GACrF,gBAAgB,MAAM,KAAK,CAAC,KAC5B,OAAO,SAAS,8BAA8B,EAAE,YAAY;CAAE;CAAM;CAAM,EAAE,CAAC,CAC7E;AAEJ,MAAM,mBAAmB,MAAc,SACtC,OAAO,UAAuB,WAAW;CACxC,IAAI,UAAU;CACd,IAAI,SAA2B;CAC/B,MAAM,UAAU,MAAyB;AACxC,MAAI,QAAS;AACb,YAAU;AACV,SAAO,OAAO,QAAQ,EAAE,CAAC;;AAE1B,KAAI;AACH,WAASA,cAAiB;AAC1B,SAAO,OAAO;EACd,MAAM,WAAW,QAAqC;GACrD,MAAM,OAAO,IAAI,QAAQ;AACzB,OAAI,SAAS,gBAAgB,SAAS,SAKrC,QAAO,EAAE,MAAM,UAAU,CAAC;OAE1B,QAAO;IAAE,MAAM;IAAgB,OAAO;IAAK,CAAC;AAE7C,OAAI;AACH,YAAQ,OAAO;WACR;;AAIT,SAAO,KAAK,SAAS,QAAQ;AAC7B,SAAO,OAAO,MAAM,YAAY;GAI/B,MAAM,OAAO,QAAQ,SAAS;GAC9B,MAAM,KAAK,SAAS,QAAQ,KAAK,SAAS;AAC1C,WAAQ,YAAY;AACnB,WAAO,KAAK,EAAE,MAAM,MAAM,GAAG,EAAE,MAAM,UAAU,CAAC;KAC/C;IACD;UACM,OAAO;AACf,SAAO;GAAE,MAAM;GAAgB;GAAO,CAAC;AACvC,MAAI;AACH,WAAQ,OAAO;UACR;;EAIR"}
+{"version":3,"file":"service.mjs","names":["createNetServer"],"sources":["../../../../src/substrate/runtime/port-broker/service.ts"],"sourcesContent":["// Port broker — substrate-level service.\n//\n// Architecture (`notes/redesign/architecture.md` § \"What's collapsed\"):\n// resource broker for host ports. Plugins that need to bind a host\n// HTTP server or publish a container port on the host yield this\n// service and call `allocate({...})`. The broker:\n//\n//   1. Tracks in-process allocations in a `Ref<Map<port, Holder>>` so\n//      two sibling plugins in the same stack don't both pick the same\n//      port between bind-probe and `server.listen`.\n//   2. Claims a runtime-root scoped port reservation file before the\n//      bind probe. This closes the cross-process probe→listen race:\n//      two independent `devstack apply` processes sharing a state dir\n//      cannot both choose the same candidate while neither real server\n//      is listening yet.\n//   3. Verifies kernel-level availability by binding a transient\n//      `net.Server` on the candidate port and closing it.\n//      The OS's `EADDRINUSE` remains the final collision check for\n//      non-devstack processes and stale reservation gaps.\n//   4. Releases on scope close. The broker hands back a `release`\n//      Effect AND installs a scope finalizer; the architecture's\n//      \"scope-local, never module-level\" invariant is honoured by\n//      construction (the Layer is scope-local, the entries die with\n//      the scope).\n//\n// Sequential search: callers may pass `preferredPort` (tried first) and\n// an optional `windowHint: { start, size }` (the scan window if\n// preferred is busy or absent). The default window —\n// `DEFAULT_PORT_WINDOW` below — is intentionally wide enough for any\n// realistic in-process devstack; plugins do NOT freelance per-kind\n// window starts. The substrate stays name-blind: there is no `PortKind`\n// literal; plugins are opaque port-holders from the broker's view.\n//\n// Cross-process safety: the reservation file is scoped to the runtime\n// root, not the stack root, because host ports are machine-global. The\n// stack-scoped supervisor lock serializes acquires of the SAME stack;\n// these reservation files serialize host-port choices across DIFFERENT\n// stacks and apps that share a state dir.\n\nimport { randomUUID } from 'node:crypto';\nimport { readFileSync, unlinkSync } from 'node:fs';\nimport {\n\tcreateServer as createNetServer,\n\ttype AddressInfo,\n\ttype Server as NetServer,\n} from 'node:net';\nimport { join } from 'node:path';\n\nimport { Context, Effect, Layer, Ref, Schema, Scope } from 'effect';\n\nimport { RosterHolderSchema, type RosterHolder } from '../../cross-process.ts';\nimport { atomicWriteFileExclusiveSync } from '../atomic-write.ts';\nimport { checkHolderLiveness, ownHolder } from '../cross-process/liveness.ts';\nimport { selfPid } from '../cross-process/self-pid.ts';\nimport { PortBrokerError } from '../errors.ts';\nimport { RuntimeRoot } from '../paths.ts';\nimport { decodeJsonTextSync } from '../runtime-decode.ts';\nimport { versionedDocSchema } from '../../versioned-doc-schema.ts';\n\n// ----------------------------------------------------------------------\n// Public shape\n// ----------------------------------------------------------------------\n\n/** Host interface used by the transient bind probe. Callers binding a\n *  real server on loopback should use the default. Callers that hand\n *  the port to Docker's all-interface publish path should pass\n *  `'0.0.0.0'` so the probe asks the same kernel question. */\nexport type PortProbeHost = '127.0.0.1' | '0.0.0.0';\n\n/** Optional per-call window override. The broker scans\n *  `[start, start + size)` in order when `preferredPort` is busy or\n *  absent. Plugins with UX-pinned ports (e.g. a dev wallet whose\n *  legacy adapters auto-connect to a specific range) pass this so the\n *  fall-back range stays predictable; everyone else gets the default. */\nexport interface PortAllocationWindow {\n\treadonly start: number;\n\treadonly size?: number;\n}\n\n/** Default scan window. Sized for \"tens of plugins per stack\" with\n *  parallel-stack overhead headroom. 1000 ports is more than enough for\n *  any realistic in-process devstack; the forward-scan only ever\n *  reaches the end if EVERY port in the window is taken (effectively\n *  never on dev machines). Start chosen to land between common dev\n *  defaults (3000-5173, 8000-8080) and the ephemeral range so a\n *  sibling Vite/Next process doesn't accidentally collide on the\n *  first probe. */\nexport const DEFAULT_PORT_WINDOW: Required<PortAllocationWindow> = {\n\tstart: 39200,\n\tsize: 1000,\n};\n\n/** Input to `allocate`. */\nexport interface AllocateOptions {\n\t/** Optional caller hint. The broker tries this FIRST; if the port is\n\t *  already held in-process the call FAILS with\n\t *  `reason: 'preferred-busy'` (the caller asked specifically for\n\t *  this port and got an obvious collision). If the bind-probe fails\n\t *  with EADDRINUSE the broker falls through to the window scan —\n\t *  preferred is a HINT for the kernel-collision case, but a HARD\n\t *  CHOICE against in-process collision. */\n\treadonly preferredPort?: number;\n\t/** Interface to bind during the kernel probe. Defaults to\n\t *  `127.0.0.1`, matching host-loopback servers. Docker\n\t *  `-p host:container` publishes on all interfaces, so Docker-backed\n\t *  callers pass `0.0.0.0`. */\n\treadonly probeHost?: PortProbeHost;\n\t/** Optional per-call window override; defaults to\n\t *  `DEFAULT_PORT_WINDOW`. */\n\treadonly windowHint?: PortAllocationWindow;\n\t/** Optional free-form owner label for diagnostics (`no-free-port`\n\t *  error detail). The broker treats this as opaque; pass something\n\t *  short and human-readable like `'wallet'` or `'sui:rpc'`. */\n\treadonly owner?: string;\n}\n\n/** Successful allocation. `release` is provided in addition to the\n *  scope finalizer so tests / orchestrators can drive release\n *  explicitly without unwinding the whole scope. Calling `release`\n *  twice is a no-op. */\nexport interface AllocatedPort {\n\treadonly port: number;\n\treadonly release: Effect.Effect<void>;\n}\n\n/** Service shape — what plugins yield from Context. */\nexport interface PortBroker {\n\t/**\n\t * Allocate a port. The returned port is exclusive within THIS\n\t * process (the broker's `Ref` map) and best-effort-exclusive across\n\t * devstack processes that share a runtime root (port reservation\n\t * file), then verified against the kernel bind table on `probeHost`.\n\t *\n\t * Scope-bound release: the broker installs a finalizer on the\n\t * surrounding scope; callers can additionally invoke\n\t * `result.release` explicitly.\n\t *\n\t * Failures (`PortBrokerError`):\n\t *   - `preferred-busy` — caller's `preferredPort` is held by another\n\t *     in-process allocation on the same stack.\n\t *   - `no-free-port` — the scan window was exhausted without a\n\t *     probe-pass candidate.\n\t *   - `bind-probe-failed` — non-EADDRINUSE error from the OS bind\n\t *     probe (EACCES on a privileged port etc.).\n\t *   - `reservation-failed` — port reservation file IO failed.\n\t */\n\treadonly allocate: (\n\t\topts?: AllocateOptions,\n\t) => Effect.Effect<AllocatedPort, PortBrokerError, Scope.Scope>;\n}\n\n// ----------------------------------------------------------------------\n// Internal state\n// ----------------------------------------------------------------------\n\nconst DEFAULT_OWNER = 'unknown';\n\n/** In-process holder for a port. Carries the owner string for\n *  diagnostics (e.g. surfaced in `no-free-port` errors). */\ninterface Holder {\n\treadonly owner: string;\n}\n\ntype State = ReadonlyMap<number, Holder>;\n\n// Reservation-doc shape. NOTE: this changed incompatibly from an\n// earlier `{ version: 1, kind, ... }` to `{ version: 1, owner, ... }`\n// without bumping the version. A version bump alone would NOT recover\n// a SIGKILL'd prior-version leftover (an old body still fails decode\n// under any new schema and would block its port forever). Instead the\n// recovery is behavioural: `acquirePortReservation` treats an EEXIST\n// file it cannot decode as a stale artifact and self-heals it\n// (best-effort unlink + retry), so a leftover incompatible reservation\n// clears itself on the next allocate of that port.\nconst PORT_RESERVATION_VERSION = 1 as const;\n\nconst PortReservationDocSchema = versionedDocSchema(PORT_RESERVATION_VERSION, {\n\tport: Schema.Number,\n\towner: Schema.String,\n\townerId: Schema.String,\n\tholder: RosterHolderSchema,\n});\n\ntype PortReservationDoc = Schema.Schema.Type<typeof PortReservationDocSchema>;\n\ninterface PortReservation {\n\treadonly path: string;\n\treadonly ownerId: string;\n\treadonly release: Effect.Effect<void>;\n}\n\ntype ReservationAttempt =\n\t| { readonly _tag: 'acquired'; readonly reservation: PortReservation }\n\t| { readonly _tag: 'busy' }\n\t| { readonly _tag: 'failed'; readonly detail: string; readonly cause: unknown };\n\ntype ReservationWriteAttempt =\n\t| { readonly _tag: 'written' }\n\t| { readonly _tag: 'race' }\n\t| { readonly _tag: 'exists'; readonly doc: PortReservationDoc | null }\n\t| { readonly _tag: 'failed'; readonly cause: unknown };\n\nconst portReservationPath = (root: string, port: number): string =>\n\tjoin(root, 'port-locks', `${port}.json`);\n\nconst parseReservationDoc = (raw: string): PortReservationDoc | null => {\n\ttry {\n\t\treturn decodeJsonTextSync(PortReservationDocSchema, raw, {\n\t\t\tsource: 'port reservation',\n\t\t\tmkError: (issue) => issue,\n\t\t});\n\t} catch {\n\t\treturn null;\n\t}\n};\n\nconst tryWriteReservationSync = (\n\tpath: string,\n\tdoc: PortReservationDoc,\n): ReservationWriteAttempt => {\n\t// `atomicWriteFileExclusiveSync` writes a tempfile under O_EXCL +\n\t// fsync, then `linkSync`s it onto the final path. POSIX `link(2)`\n\t// is atomic AND fails with `EEXIST` if the target exists — that is\n\t// the exclusive-create primitive `rename` lacks (rename clobbers).\n\t// A sibling pid that wins the race becomes the canonical reservation\n\t// at `path`; we observe it via the EEXIST error and surface the\n\t// winner's doc to the caller (`acquirePortReservation`), which then\n\t// decides busy-vs-stale based on the holder's liveness.\n\ttry {\n\t\tatomicWriteFileExclusiveSync(path, `${JSON.stringify(doc)}\\n`, { mode: 0o600 });\n\t\treturn { _tag: 'written' };\n\t} catch (cause) {\n\t\tconst code = (cause as NodeJS.ErrnoException).code;\n\t\tif (code === 'EEXIST') {\n\t\t\ttry {\n\t\t\t\treturn { _tag: 'exists', doc: parseReservationDoc(readFileSync(path, 'utf8')) };\n\t\t\t} catch {\n\t\t\t\t// The winning reservation file was removed between our\n\t\t\t\t// link-EEXIST and our read (a peer raced release). Retry.\n\t\t\t\treturn { _tag: 'race' };\n\t\t\t}\n\t\t}\n\t\treturn { _tag: 'failed', cause };\n\t}\n};\n\nconst unlinkReservationIfOwnerSync = (path: string, ownerId: string): void => {\n\ttry {\n\t\tconst doc = parseReservationDoc(readFileSync(path, 'utf8'));\n\t\tif (doc?.ownerId === ownerId) {\n\t\t\tunlinkSync(path);\n\t\t}\n\t} catch {\n\t\t// Missing or unreadable: release is best-effort. A peer never\n\t\t// reclaims unreadable reservations; it simply skips that port.\n\t}\n};\n\nconst reclaimReservationIfOwnerSync = (path: string, ownerId: string): boolean => {\n\ttry {\n\t\tconst doc = parseReservationDoc(readFileSync(path, 'utf8'));\n\t\tif (doc?.ownerId !== ownerId) return false;\n\t\tunlinkSync(path);\n\t\treturn true;\n\t} catch {\n\t\treturn false;\n\t}\n};\n\n/** Best-effort removal of an EXISTING reservation file whose body\n *  cannot be decoded (a leftover from an incompatible-version\n *  supervisor, or a torn write). Such a file carries no readable\n *  `ownerId`/`holder`, so neither `reclaimReservationIfOwnerSync` nor\n *  liveness can ever clear it; without this it would skip that one\n *  port for every future process for the supervisor's lifetime. We\n *  treat an undecodable body as a stale artifact and unlink it so the\n *  next exclusive-create can win. Returns whether the unlink ran\n *  (false if the file vanished first, i.e. a peer already cleared it)\n *  so the caller can bound its retry. */\nconst reclaimUndecodableReservationSync = (path: string): boolean => {\n\ttry {\n\t\tunlinkSync(path);\n\t\treturn true;\n\t} catch {\n\t\t// Already gone (peer reclaimed it) or unremovable; either way\n\t\t// the next loop turn re-evaluates via exclusive-create.\n\t\treturn false;\n\t}\n};\n\nconst acquirePortReservation = (\n\troot: string,\n\tport: number,\n\towner: string,\n): Effect.Effect<ReservationAttempt> =>\n\tEffect.gen(function* () {\n\t\tconst path = portReservationPath(root, port);\n\t\tconst ownerId = `${selfPid()}-${randomUUID().slice(0, 8)}`;\n\t\tconst holder: RosterHolder = ownHolder();\n\t\tconst doc: PortReservationDoc = {\n\t\t\tversion: PORT_RESERVATION_VERSION,\n\t\t\tport,\n\t\t\towner,\n\t\t\townerId,\n\t\t\tholder,\n\t\t};\n\n\t\t// Bounds the self-heal: an undecodable EEXIST body is reclaimed at\n\t\t// most once. If we see another undecodable body after that (a peer\n\t\t// keeps rewriting garbage), give up with `busy` rather than spin.\n\t\tlet reclaimedUndecodable = false;\n\t\twhile (true) {\n\t\t\tconst attempt = tryWriteReservationSync(path, doc);\n\t\t\tif (attempt._tag === 'written') {\n\t\t\t\treturn {\n\t\t\t\t\t_tag: 'acquired',\n\t\t\t\t\treservation: {\n\t\t\t\t\t\tpath,\n\t\t\t\t\t\townerId,\n\t\t\t\t\t\trelease: Effect.sync(() => unlinkReservationIfOwnerSync(path, ownerId)),\n\t\t\t\t\t},\n\t\t\t\t} as const;\n\t\t\t}\n\t\t\tif (attempt._tag === 'race') continue;\n\t\t\tif (attempt._tag === 'failed') {\n\t\t\t\treturn {\n\t\t\t\t\t_tag: 'failed',\n\t\t\t\t\tdetail: `port reservation ${path} could not be written`,\n\t\t\t\t\tcause: attempt.cause,\n\t\t\t\t} as const;\n\t\t\t}\n\t\t\tif (attempt.doc === null) {\n\t\t\t\t// EEXIST file we cannot decode (stale incompatible-version\n\t\t\t\t// leftover or torn write). Self-heal once: unlink it and retry\n\t\t\t\t// the exclusive-create so a live port is not lost permanently.\n\t\t\t\tif (!reclaimedUndecodable && reclaimUndecodableReservationSync(path)) {\n\t\t\t\t\treclaimedUndecodable = true;\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\treturn { _tag: 'busy' } as const;\n\t\t\t}\n\n\t\t\tconst liveness = yield* checkHolderLiveness(attempt.doc.holder).pipe(\n\t\t\t\tEffect.catch(() => Effect.succeed('alive' as const)),\n\t\t\t);\n\t\t\tif (liveness === 'alive') return { _tag: 'busy' } as const;\n\t\t\tif (!reclaimReservationIfOwnerSync(path, attempt.doc.ownerId)) {\n\t\t\t\treturn { _tag: 'busy' } as const;\n\t\t\t}\n\t\t}\n\t});\n\n// ----------------------------------------------------------------------\n// Service tag + Layer\n// ----------------------------------------------------------------------\n\nexport class PortBrokerService extends Context.Service<PortBrokerService, PortBroker>()(\n\t'@devstack/substrate/PortBroker',\n) {}\n\n/**\n * Layer that materializes one `PortBroker` per stack scope.\n *\n * The broker's state lives in a `Ref` captured by the Layer's\n * `Effect.gen`; closing the Layer's scope drops every allocation.\n * Parallel stacks each get their own broker (Layer-driven), and they\n * coordinate cross-process via runtime-root reservation files plus the\n * kernel's bind table — never via shared in-process state.\n */\nexport const layerPortBroker: Layer.Layer<PortBrokerService, never, RuntimeRoot> = Layer.effect(\n\tPortBrokerService,\n\tEffect.gen(function* () {\n\t\tconst runtimeRoot = yield* RuntimeRoot;\n\t\tconst reservationRoot = runtimeRoot.root;\n\t\tconst state = yield* Ref.make<State>(new Map());\n\n\t\tconst tryReserve = (port: number, owner: string): Effect.Effect<boolean> =>\n\t\t\tRef.modify<State, boolean>(state, (current) => {\n\t\t\t\tif (current.has(port)) return [false, current];\n\t\t\t\tconst next = new Map(current);\n\t\t\t\tnext.set(port, { owner });\n\t\t\t\treturn [true, next];\n\t\t\t});\n\n\t\tconst drop = (port: number): Effect.Effect<void> =>\n\t\t\tRef.update(state, (current) => {\n\t\t\t\tif (!current.has(port)) return current;\n\t\t\t\tconst next = new Map(current);\n\t\t\t\tnext.delete(port);\n\t\t\t\treturn next;\n\t\t\t});\n\n\t\t/** Outcome of one candidate-port attempt.\n\t\t *\n\t\t *  `kept` means `finishAllocation` armed its scope finalizer; the\n\t\t *  in-process slot is now owned by that finalizer and we MUST\n\t\t *  NOT drop it on this critical region's exit. Any other outcome\n\t\t *  (busy / probe-in-use / probe-failed / reservation-failed)\n\t\t *  must release the slot before we hand control back to the\n\t\t *  caller. */\n\t\ttype SlotOutcome =\n\t\t\t| { readonly _tag: 'kept'; readonly allocated: AllocatedPort }\n\t\t\t| { readonly _tag: 'busy' }\n\t\t\t| {\n\t\t\t\t\treadonly _tag: 'reservation-failed';\n\t\t\t\t\treadonly detail: string;\n\t\t\t\t\treadonly cause: unknown;\n\t\t\t  }\n\t\t\t| { readonly _tag: 'probe-failed'; readonly cause: unknown };\n\n\t\t/** Reserve `port` in the in-process Map, run the probe+reservation\n\t\t *  chain through to either (a) `finishAllocation` arming its scope\n\t\t *  finalizer or (b) a clean release of BOTH the in-process slot\n\t\t *  AND the on-disk reservation file.\n\t\t *\n\t\t *  Interrupt safety: the critical region is wrapped in\n\t\t *  `Effect.acquireUseRelease`, whose `release` step is\n\t\t *  uninterruptible while its `use` step is NOT (Effect v4). The\n\t\t *  acquired `PortReservation` is created INSIDE `use` (after the\n\t\t *  on-disk file is written), so the `use` body stashes it in\n\t\t *  `reservationCell`; the uninterruptible `release` reads that cell\n\t\t *  and unlinks the reservation file on ANY non-`kept` exit —\n\t\t *  interrupt, typed failure, or a non-`kept` success outcome.\n\t\t *  Without this, an interrupt landing between the reservation write\n\t\t *  (in `acquirePortReservation`) and the finalizer arm (in\n\t\t *  `finishAllocation`) left the file on disk while the old release\n\t\t *  only dropped the in-process slot — leaking\n\t\t *  `port-locks/<port>.json`. Its `holder` is this still-alive\n\t\t *  process, so every future `allocate` of that port then saw\n\t\t *  `checkHolderLiveness` report `alive`, marking it busy for the\n\t\t *  whole supervisor lifetime.\n\t\t *\n\t\t *  The only path that intentionally KEEPS both the slot and the\n\t\t *  file is the `kept` outcome, where ownership transfers to the\n\t\t *  scope finalizer (see `finishAllocation`); `reservationCell` is\n\t\t *  cleared there so `release` is a no-op for it.\n\t\t *  (`unlinkReservationIfOwnerSync` is owner-id-guarded and\n\t\t *  idempotent, so a stray double-release is harmless — clearing\n\t\t *  the cell just avoids the redundant stat.)\n\t\t */\n\t\tconst attemptSlot = (\n\t\t\tport: number,\n\t\t\towner: string,\n\t\t\tprobeHost: PortProbeHost,\n\t\t): Effect.Effect<SlotOutcome | null, never, Scope.Scope> => {\n\t\t\t// Visible to BOTH the `use` body (fills it once the reservation\n\t\t\t// file exists) and the uninterruptible `release` callback\n\t\t\t// (unlinks it on any non-`kept` exit). On-disk analogue of the\n\t\t\t// in-process slot.\n\t\t\tlet reservationCell: PortReservation | null = null;\n\t\t\treturn Effect.acquireUseRelease(\n\t\t\t\ttryReserve(port, owner),\n\t\t\t\t(reserved): Effect.Effect<SlotOutcome | null, never, Scope.Scope> => {\n\t\t\t\t\tif (!reserved) return Effect.succeed(null);\n\t\t\t\t\treturn Effect.gen(function* () {\n\t\t\t\t\t\tconst reservation = yield* acquirePortReservation(reservationRoot, port, owner);\n\t\t\t\t\t\tif (reservation._tag === 'busy') return { _tag: 'busy' as const };\n\t\t\t\t\t\tif (reservation._tag === 'failed') {\n\t\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\t\t_tag: 'reservation-failed' as const,\n\t\t\t\t\t\t\t\tdetail: reservation.detail,\n\t\t\t\t\t\t\t\tcause: reservation.cause,\n\t\t\t\t\t\t\t};\n\t\t\t\t\t\t}\n\t\t\t\t\t\t// File is now on disk. Hand it to the uninterruptible\n\t\t\t\t\t\t// `release` step so an interrupt at the `probePort` /\n\t\t\t\t\t\t// `finishAllocation` boundary cannot leak it.\n\t\t\t\t\t\treservationCell = reservation.reservation;\n\t\t\t\t\t\tconst ok = yield* probePort(port, probeHost);\n\t\t\t\t\t\tif (ok._tag === 'ok') {\n\t\t\t\t\t\t\tconst allocated = yield* finishAllocation(port, owner, drop, reservation.reservation);\n\t\t\t\t\t\t\t// Ownership transferred to the scope finalizer; the\n\t\t\t\t\t\t\t// `release` step must NOT also unlink the file.\n\t\t\t\t\t\t\treservationCell = null;\n\t\t\t\t\t\t\treturn { _tag: 'kept' as const, allocated };\n\t\t\t\t\t\t}\n\t\t\t\t\t\t// Probe missed. The uninterruptible `release` step below\n\t\t\t\t\t\t// unlinks the reservation file (via `reservationCell`) and\n\t\t\t\t\t\t// drops the in-process slot, so a single owner cleans up\n\t\t\t\t\t\t// both even if an interrupt preempts us right here.\n\t\t\t\t\t\tif (ok._tag === 'probe-failed') {\n\t\t\t\t\t\t\treturn { _tag: 'probe-failed' as const, cause: ok.cause };\n\t\t\t\t\t\t}\n\t\t\t\t\t\treturn { _tag: 'busy' as const };\n\t\t\t\t\t});\n\t\t\t\t},\n\t\t\t\t(reserved, exit) => {\n\t\t\t\t\t// Slot + reservation release (uninterruptible). Drop the\n\t\t\t\t\t// in-process entry AND unlink the on-disk reservation\n\t\t\t\t\t// UNLESS we transferred ownership to a scope finalizer\n\t\t\t\t\t// (the `kept` outcome, which cleared `reservationCell`).\n\t\t\t\t\t// Interrupts, typed failures, and non-`kept` success\n\t\t\t\t\t// outcomes all flow through here, closing both the Map\n\t\t\t\t\t// leak and the port-locks/*.json leak (the latter\n\t\t\t\t\t// previously persisted until the supervisor exited).\n\t\t\t\t\tif (!reserved) return Effect.void;\n\t\t\t\t\tconst kept = exit._tag === 'Success' && exit.value?._tag === 'kept';\n\t\t\t\t\tif (kept) return Effect.void;\n\t\t\t\t\tconst releaseReservation =\n\t\t\t\t\t\treservationCell !== null ? reservationCell.release : Effect.void;\n\t\t\t\t\treturn Effect.all([drop(port), releaseReservation], { discard: true });\n\t\t\t\t},\n\t\t\t);\n\t\t};\n\n\t\tconst allocate: PortBroker['allocate'] = (opts = {}) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst owner = opts.owner ?? DEFAULT_OWNER;\n\t\t\t\tconst probeHost = opts.probeHost ?? '127.0.0.1';\n\t\t\t\tconst windowStart = opts.windowHint?.start ?? DEFAULT_PORT_WINDOW.start;\n\t\t\t\tconst windowSize = opts.windowHint?.size ?? DEFAULT_PORT_WINDOW.size;\n\n\t\t\t\t// 1. Preferred-port path. The broker honours `preferredPort`\n\t\t\t\t//    as a strong hint, but refuses in-process collisions\n\t\t\t\t//    (architecture §6: same-stack siblings MUST NOT trample).\n\t\t\t\tif (opts.preferredPort !== undefined) {\n\t\t\t\t\tconst outcome = yield* attemptSlot(opts.preferredPort, owner, probeHost);\n\t\t\t\t\tif (outcome === null) {\n\t\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\t\tnew PortBrokerError({\n\t\t\t\t\t\t\t\treason: 'preferred-busy',\n\t\t\t\t\t\t\t\tdetail:\n\t\t\t\t\t\t\t\t\t`preferred port ${opts.preferredPort} (owner=${owner}) is ` +\n\t\t\t\t\t\t\t\t\t`already held by another allocation in this stack`,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t\tif (outcome._tag === 'kept') return outcome.allocated;\n\t\t\t\t\tif (outcome._tag === 'reservation-failed') {\n\t\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\t\tnew PortBrokerError({\n\t\t\t\t\t\t\t\treason: 'reservation-failed',\n\t\t\t\t\t\t\t\tdetail: outcome.detail,\n\t\t\t\t\t\t\t\tcause: outcome.cause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t\tif (outcome._tag === 'probe-failed') {\n\t\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\t\tnew PortBrokerError({\n\t\t\t\t\t\t\t\treason: 'bind-probe-failed',\n\t\t\t\t\t\t\t\tdetail:\n\t\t\t\t\t\t\t\t\t`bind probe on preferred port ${opts.preferredPort} ` +\n\t\t\t\t\t\t\t\t\t`(owner=${owner}, host=${probeHost}) failed with non-EADDRINUSE error`,\n\t\t\t\t\t\t\t\tcause: outcome.cause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t\t// `busy` (either cross-process reservation held by a\n\t\t\t\t\t// live peer OR kernel-level in-use) — fall through to\n\t\t\t\t\t// the window scan; the caller's preferred was a HINT.\n\t\t\t\t}\n\n\t\t\t\t// 2. Forward-scan the window.\n\t\t\t\tfor (let p = windowStart; p < windowStart + windowSize; p++) {\n\t\t\t\t\tconst outcome = yield* attemptSlot(p, owner, probeHost);\n\t\t\t\t\tif (outcome === null) continue;\n\t\t\t\t\tif (outcome._tag === 'kept') return outcome.allocated;\n\t\t\t\t\tif (outcome._tag === 'reservation-failed') {\n\t\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\t\tnew PortBrokerError({\n\t\t\t\t\t\t\t\treason: 'reservation-failed',\n\t\t\t\t\t\t\t\tdetail: outcome.detail,\n\t\t\t\t\t\t\t\tcause: outcome.cause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t\tif (outcome._tag === 'probe-failed') {\n\t\t\t\t\t\t// A privileged port (EACCES) in the middle of the\n\t\t\t\t\t\t// window is unrecoverable for this scan. Surface\n\t\t\t\t\t\t// immediately rather than thrash the whole window.\n\t\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\t\tnew PortBrokerError({\n\t\t\t\t\t\t\t\treason: 'bind-probe-failed',\n\t\t\t\t\t\t\t\tdetail:\n\t\t\t\t\t\t\t\t\t`bind probe on port ${p} (owner=${owner}, host=${probeHost}) failed ` +\n\t\t\t\t\t\t\t\t\t`with non-EADDRINUSE error`,\n\t\t\t\t\t\t\t\tcause: outcome.cause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t\t// `busy` — next candidate.\n\t\t\t\t}\n\n\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\tnew PortBrokerError({\n\t\t\t\t\t\treason: 'no-free-port',\n\t\t\t\t\t\tdetail:\n\t\t\t\t\t\t\t`no free port found in [${windowStart}, ` +\n\t\t\t\t\t\t\t`${windowStart + windowSize}) for owner '${owner}'`,\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}).pipe(\n\t\t\t\tEffect.withSpan('substrate.portBroker.allocate', {\n\t\t\t\t\tattributes: {\n\t\t\t\t\t\towner: opts.owner ?? DEFAULT_OWNER,\n\t\t\t\t\t\tpreferredPort: opts.preferredPort ?? -1,\n\t\t\t\t\t\tprobeHost: opts.probeHost ?? '127.0.0.1',\n\t\t\t\t\t\twindowStart: opts.windowHint?.start ?? DEFAULT_PORT_WINDOW.start,\n\t\t\t\t\t\twindowSize: opts.windowHint?.size ?? DEFAULT_PORT_WINDOW.size,\n\t\t\t\t\t},\n\t\t\t\t}),\n\t\t\t);\n\n\t\tconst finishAllocation = (\n\t\t\tport: number,\n\t\t\towner: string,\n\t\t\tdropFn: (p: number) => Effect.Effect<void>,\n\t\t\treservation: PortReservation,\n\t\t): Effect.Effect<AllocatedPort, never, Scope.Scope> =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\t// Scope finalizer — drops the entry when the surrounding\n\t\t\t\t// scope closes. Uninterruptible so a Ctrl-C double-tap\n\t\t\t\t// doesn't leave the entry dangling in the broker's Ref.\n\t\t\t\tconst release = Effect.all([dropFn(port), reservation.release], {\n\t\t\t\t\tdiscard: true,\n\t\t\t\t});\n\t\t\t\tyield* Effect.addFinalizer(() => release.pipe(Effect.uninterruptible));\n\t\t\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t\t\t'portBroker.port': port,\n\t\t\t\t\t'portBroker.owner': owner,\n\t\t\t\t});\n\t\t\t\tyield* Effect.logDebug(`port-broker allocated ${port} (owner=${owner})`);\n\t\t\t\treturn {\n\t\t\t\t\tport,\n\t\t\t\t\trelease,\n\t\t\t\t} satisfies AllocatedPort;\n\t\t\t});\n\n\t\treturn PortBrokerService.of({ allocate });\n\t}),\n);\n\n// ----------------------------------------------------------------------\n// Kernel-level bind probe\n// ----------------------------------------------------------------------\n\n/** Probe result. `'in-use'` is the recoverable case (try the next\n *  port); `'probe-failed'` is the unrecoverable case (caller's\n *  problem — surface). */\ntype ProbeResult =\n\t| { readonly _tag: 'ok' }\n\t| { readonly _tag: 'in-use' }\n\t| { readonly _tag: 'probe-failed'; readonly cause: unknown };\n\n/**\n * Bind a transient `net.Server` on `<host>:<port>` and close it.\n * The OS atomically rejects with `EADDRINUSE` if another process\n * already holds the port — that's our cross-process collision check.\n *\n * The default probe is loopback-only because most servers bind\n * loopback. Docker-backed callers pass `0.0.0.0`; on Docker Desktop,\n * binding a transient Node server on `0.0.0.0` does not always reject\n * ports already held on `127.0.0.1`, even though Docker's publish step\n * will reject them. Wildcard probes therefore check loopback as well.\n *\n * Race window: between the probe-close and the caller's real `listen`,\n * a non-devstack process could still grab the port. Devstack peers are\n * blocked by the reservation file until the allocation scope releases.\n */\nconst probePort = (port: number, host: PortProbeHost): Effect.Effect<ProbeResult> =>\n\thost === '0.0.0.0'\n\t\t? Effect.gen(function* () {\n\t\t\t\tconst loopback = yield* probeSinglePort(port, '127.0.0.1');\n\t\t\t\tif (loopback._tag !== 'ok') return loopback;\n\t\t\t\treturn yield* probeSinglePort(port, host);\n\t\t\t}).pipe(Effect.withSpan('substrate.portBroker.probe', { attributes: { host, port } }))\n\t\t: probeSinglePort(port, host).pipe(\n\t\t\t\tEffect.withSpan('substrate.portBroker.probe', { attributes: { host, port } }),\n\t\t\t);\n\nconst probeSinglePort = (port: number, host: PortProbeHost): Effect.Effect<ProbeResult> =>\n\tEffect.callback<ProbeResult>((resume) => {\n\t\tlet settled = false;\n\t\tlet server: NetServer | null = null;\n\t\tconst settle = (r: ProbeResult): void => {\n\t\t\tif (settled) return;\n\t\t\tsettled = true;\n\t\t\tresume(Effect.succeed(r));\n\t\t};\n\t\ttry {\n\t\t\tserver = createNetServer();\n\t\t\tserver.unref();\n\t\t\tconst onError = (err: NodeJS.ErrnoException): void => {\n\t\t\t\tconst code = err.code ?? '';\n\t\t\t\tif (code === 'EADDRINUSE' || code === 'EACCES') {\n\t\t\t\t\t// EACCES on these hosts is exotic but treat as in-use\n\t\t\t\t\t// for non-privileged ports (our default window starts\n\t\t\t\t\t// at 39200, well above 1024). Surfaces as probe-failed\n\t\t\t\t\t// only if it persists for every port in the window.\n\t\t\t\t\tsettle({ _tag: 'in-use' });\n\t\t\t\t} else {\n\t\t\t\t\tsettle({ _tag: 'probe-failed', cause: err });\n\t\t\t\t}\n\t\t\t\ttry {\n\t\t\t\t\tserver?.close();\n\t\t\t\t} catch {\n\t\t\t\t\t/* defensive */\n\t\t\t\t}\n\t\t\t};\n\t\t\tserver.once('error', onError);\n\t\t\tserver.listen(port, host, () => {\n\t\t\t\t// Verify the OS actually gave us THIS port (defensive —\n\t\t\t\t// asking for a specific port shouldn't ever surprise\n\t\t\t\t// us, but `address()` is the source of truth).\n\t\t\t\tconst addr = server?.address() as AddressInfo | null;\n\t\t\t\tconst ok = addr !== null && addr.port === port;\n\t\t\t\tserver?.close(() => {\n\t\t\t\t\tsettle(ok ? { _tag: 'ok' } : { _tag: 'in-use' });\n\t\t\t\t});\n\t\t\t});\n\t\t} catch (cause) {\n\t\t\tsettle({ _tag: 'probe-failed', cause });\n\t\t\ttry {\n\t\t\t\tserver?.close();\n\t\t\t} catch {\n\t\t\t\t/* defensive */\n\t\t\t}\n\t\t}\n\t\t// Interrupt mid-`listen()` must close the transient server so the\n\t\t// probed port isn't held open by an orphaned handle.\n\t\treturn Effect.sync(() => {\n\t\t\ttry {\n\t\t\t\tserver?.close();\n\t\t\t} catch {\n\t\t\t\t/* defensive */\n\t\t\t}\n\t\t});\n\t});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAuFA,MAAa,sBAAsD;CAClE,OAAO;CACP,MAAM;CACN;AAiED,MAAM,gBAAgB;AAmBtB,MAAM,2BAA2B;AAEjC,MAAM,2BAA2B,mBAAmB,0BAA0B;CAC7E,MAAM,OAAO;CACb,OAAO,OAAO;CACd,SAAS,OAAO;CAChB,QAAQ;CACR,CAAC;AAqBF,MAAM,uBAAuB,MAAc,SAC1C,KAAK,MAAM,cAAc,GAAG,KAAK,OAAO;AAEzC,MAAM,uBAAuB,QAA2C;AACvE,KAAI;AACH,SAAO,mBAAmB,0BAA0B,KAAK;GACxD,QAAQ;GACR,UAAU,UAAU;GACpB,CAAC;SACK;AACP,SAAO;;;AAIT,MAAM,2BACL,MACA,QAC6B;AAS7B,KAAI;AACH,+BAA6B,MAAM,GAAG,KAAK,UAAU,IAAI,CAAC,KAAK,EAAE,MAAM,KAAO,CAAC;AAC/E,SAAO,EAAE,MAAM,WAAW;UAClB,OAAO;AAEf,MADc,MAAgC,SACjC,SACZ,KAAI;AACH,UAAO;IAAE,MAAM;IAAU,KAAK,oBAAoB,aAAa,MAAM,OAAO,CAAC;IAAE;UACxE;AAGP,UAAO,EAAE,MAAM,QAAQ;;AAGzB,SAAO;GAAE,MAAM;GAAU;GAAO;;;AAIlC,MAAM,gCAAgC,MAAc,YAA0B;AAC7E,KAAI;AAEH,MADY,oBAAoB,aAAa,MAAM,OAAO,CACnD,EAAE,YAAY,QACpB,YAAW,KAAK;SAEV;;AAMT,MAAM,iCAAiC,MAAc,YAA6B;AACjF,KAAI;AAEH,MADY,oBAAoB,aAAa,MAAM,OAAO,CACnD,EAAE,YAAY,QAAS,QAAO;AACrC,aAAW,KAAK;AAChB,SAAO;SACA;AACP,SAAO;;;;;;;;;;;;;AAcT,MAAM,qCAAqC,SAA0B;AACpE,KAAI;AACH,aAAW,KAAK;AAChB,SAAO;SACA;AAGP,SAAO;;;AAIT,MAAM,0BACL,MACA,MACA,UAEA,OAAO,IAAI,aAAa;CACvB,MAAM,OAAO,oBAAoB,MAAM,KAAK;CAC5C,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,YAAY,CAAC,MAAM,GAAG,EAAE;CAExD,MAAM,MAA0B;EAC/B,SAAS;EACT;EACA;EACA;EACA,QAN4B,WAMtB;EACN;CAKD,IAAI,uBAAuB;AAC3B,QAAO,MAAM;EACZ,MAAM,UAAU,wBAAwB,MAAM,IAAI;AAClD,MAAI,QAAQ,SAAS,UACpB,QAAO;GACN,MAAM;GACN,aAAa;IACZ;IACA;IACA,SAAS,OAAO,WAAW,6BAA6B,MAAM,QAAQ,CAAC;IACvE;GACD;AAEF,MAAI,QAAQ,SAAS,OAAQ;AAC7B,MAAI,QAAQ,SAAS,SACpB,QAAO;GACN,MAAM;GACN,QAAQ,oBAAoB,KAAK;GACjC,OAAO,QAAQ;GACf;AAEF,MAAI,QAAQ,QAAQ,MAAM;AAIzB,OAAI,CAAC,wBAAwB,kCAAkC,KAAK,EAAE;AACrE,2BAAuB;AACvB;;AAED,UAAO,EAAE,MAAM,QAAQ;;AAMxB,OAAI,OAHoB,oBAAoB,QAAQ,IAAI,OAAO,CAAC,KAC/D,OAAO,YAAY,OAAO,QAAQ,QAAiB,CAAC,CACpD,MACgB,QAAS,QAAO,EAAE,MAAM,QAAQ;AACjD,MAAI,CAAC,8BAA8B,MAAM,QAAQ,IAAI,QAAQ,CAC5D,QAAO,EAAE,MAAM,QAAQ;;EAGxB;AAMH,IAAa,oBAAb,cAAuC,QAAQ,SAAwC,CACtF,iCACA,CAAC;;;;;;;;;;AAWF,MAAa,kBAAsE,MAAM,OACxF,mBACA,OAAO,IAAI,aAAa;CAEvB,MAAM,mBAAkB,OADG,aACS;CACpC,MAAM,QAAQ,OAAO,IAAI,qBAAY,IAAI,KAAK,CAAC;CAE/C,MAAM,cAAc,MAAc,UACjC,IAAI,OAAuB,QAAQ,YAAY;AAC9C,MAAI,QAAQ,IAAI,KAAK,CAAE,QAAO,CAAC,OAAO,QAAQ;EAC9C,MAAM,OAAO,IAAI,IAAI,QAAQ;AAC7B,OAAK,IAAI,MAAM,EAAE,OAAO,CAAC;AACzB,SAAO,CAAC,MAAM,KAAK;GAClB;CAEH,MAAM,QAAQ,SACb,IAAI,OAAO,QAAQ,YAAY;AAC9B,MAAI,CAAC,QAAQ,IAAI,KAAK,CAAE,QAAO;EAC/B,MAAM,OAAO,IAAI,IAAI,QAAQ;AAC7B,OAAK,OAAO,KAAK;AACjB,SAAO;GACN;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkDH,MAAM,eACL,MACA,OACA,cAC2D;EAK3D,IAAI,kBAA0C;AAC9C,SAAO,OAAO,kBACb,WAAW,MAAM,MAAM,GACtB,aAAoE;AACpE,OAAI,CAAC,SAAU,QAAO,OAAO,QAAQ,KAAK;AAC1C,UAAO,OAAO,IAAI,aAAa;IAC9B,MAAM,cAAc,OAAO,uBAAuB,iBAAiB,MAAM,MAAM;AAC/E,QAAI,YAAY,SAAS,OAAQ,QAAO,EAAE,MAAM,QAAiB;AACjE,QAAI,YAAY,SAAS,SACxB,QAAO;KACN,MAAM;KACN,QAAQ,YAAY;KACpB,OAAO,YAAY;KACnB;AAKF,sBAAkB,YAAY;IAC9B,MAAM,KAAK,OAAO,UAAU,MAAM,UAAU;AAC5C,QAAI,GAAG,SAAS,MAAM;KACrB,MAAM,YAAY,OAAO,iBAAiB,MAAM,OAAO,MAAM,YAAY,YAAY;AAGrF,uBAAkB;AAClB,YAAO;MAAE,MAAM;MAAiB;MAAW;;AAM5C,QAAI,GAAG,SAAS,eACf,QAAO;KAAE,MAAM;KAAyB,OAAO,GAAG;KAAO;AAE1D,WAAO,EAAE,MAAM,QAAiB;KAC/B;MAEF,UAAU,SAAS;AASnB,OAAI,CAAC,SAAU,QAAO,OAAO;AAE7B,OADa,KAAK,SAAS,aAAa,KAAK,OAAO,SAAS,OACnD,QAAO,OAAO;GACxB,MAAM,qBACL,oBAAoB,OAAO,gBAAgB,UAAU,OAAO;AAC7D,UAAO,OAAO,IAAI,CAAC,KAAK,KAAK,EAAE,mBAAmB,EAAE,EAAE,SAAS,MAAM,CAAC;IAEvE;;CAGF,MAAM,YAAoC,OAAO,EAAE,KAClD,OAAO,IAAI,aAAa;EACvB,MAAM,QAAQ,KAAK,SAAS;EAC5B,MAAM,YAAY,KAAK,aAAa;EACpC,MAAM,cAAc,KAAK,YAAY,SAAS,oBAAoB;EAClE,MAAM,aAAa,KAAK,YAAY,QAAQ,oBAAoB;AAKhE,MAAI,KAAK,kBAAkB,KAAA,GAAW;GACrC,MAAM,UAAU,OAAO,YAAY,KAAK,eAAe,OAAO,UAAU;AACxE,OAAI,YAAY,KACf,QAAO,OAAO,OAAO,KACpB,IAAI,gBAAgB;IACnB,QAAQ;IACR,QACC,kBAAkB,KAAK,cAAc,UAAU,MAAM;IAEtD,CAAC,CACF;AAEF,OAAI,QAAQ,SAAS,OAAQ,QAAO,QAAQ;AAC5C,OAAI,QAAQ,SAAS,qBACpB,QAAO,OAAO,OAAO,KACpB,IAAI,gBAAgB;IACnB,QAAQ;IACR,QAAQ,QAAQ;IAChB,OAAO,QAAQ;IACf,CAAC,CACF;AAEF,OAAI,QAAQ,SAAS,eACpB,QAAO,OAAO,OAAO,KACpB,IAAI,gBAAgB;IACnB,QAAQ;IACR,QACC,gCAAgC,KAAK,cAAc,UACzC,MAAM,SAAS,UAAU;IACpC,OAAO,QAAQ;IACf,CAAC,CACF;;AAQH,OAAK,IAAI,IAAI,aAAa,IAAI,cAAc,YAAY,KAAK;GAC5D,MAAM,UAAU,OAAO,YAAY,GAAG,OAAO,UAAU;AACvD,OAAI,YAAY,KAAM;AACtB,OAAI,QAAQ,SAAS,OAAQ,QAAO,QAAQ;AAC5C,OAAI,QAAQ,SAAS,qBACpB,QAAO,OAAO,OAAO,KACpB,IAAI,gBAAgB;IACnB,QAAQ;IACR,QAAQ,QAAQ;IAChB,OAAO,QAAQ;IACf,CAAC,CACF;AAEF,OAAI,QAAQ,SAAS,eAIpB,QAAO,OAAO,OAAO,KACpB,IAAI,gBAAgB;IACnB,QAAQ;IACR,QACC,sBAAsB,EAAE,UAAU,MAAM,SAAS,UAAU;IAE5D,OAAO,QAAQ;IACf,CAAC,CACF;;AAKH,SAAO,OAAO,OAAO,KACpB,IAAI,gBAAgB;GACnB,QAAQ;GACR,QACC,0BAA0B,YAAY,IACnC,cAAc,WAAW,eAAe,MAAM;GAClD,CAAC,CACF;GACA,CAAC,KACF,OAAO,SAAS,iCAAiC,EAChD,YAAY;EACX,OAAO,KAAK,SAAS;EACrB,eAAe,KAAK,iBAAiB;EACrC,WAAW,KAAK,aAAa;EAC7B,aAAa,KAAK,YAAY,SAAS,oBAAoB;EAC3D,YAAY,KAAK,YAAY,QAAQ,oBAAoB;EACzD,EACD,CAAC,CACF;CAEF,MAAM,oBACL,MACA,OACA,QACA,gBAEA,OAAO,IAAI,aAAa;EAIvB,MAAM,UAAU,OAAO,IAAI,CAAC,OAAO,KAAK,EAAE,YAAY,QAAQ,EAAE,EAC/D,SAAS,MACT,CAAC;AACF,SAAO,OAAO,mBAAmB,QAAQ,KAAK,OAAO,gBAAgB,CAAC;AACtE,SAAO,OAAO,oBAAoB;GACjC,mBAAmB;GACnB,oBAAoB;GACpB,CAAC;AACF,SAAO,OAAO,SAAS,yBAAyB,KAAK,UAAU,MAAM,GAAG;AACxE,SAAO;GACN;GACA;GACA;GACA;AAEH,QAAO,kBAAkB,GAAG,EAAE,UAAU,CAAC;EACxC,CACF;;;;;;;;;;;;;;;;AA6BD,MAAM,aAAa,MAAc,SAChC,SAAS,YACN,OAAO,IAAI,aAAa;CACxB,MAAM,WAAW,OAAO,gBAAgB,MAAM,YAAY;AAC1D,KAAI,SAAS,SAAS,KAAM,QAAO;AACnC,QAAO,OAAO,gBAAgB,MAAM,KAAK;EACxC,CAAC,KAAK,OAAO,SAAS,8BAA8B,EAAE,YAAY;CAAE;CAAM;CAAM,EAAE,CAAC,CAAC,GACrF,gBAAgB,MAAM,KAAK,CAAC,KAC5B,OAAO,SAAS,8BAA8B,EAAE,YAAY;CAAE;CAAM;CAAM,EAAE,CAAC,CAC7E;AAEJ,MAAM,mBAAmB,MAAc,SACtC,OAAO,UAAuB,WAAW;CACxC,IAAI,UAAU;CACd,IAAI,SAA2B;CAC/B,MAAM,UAAU,MAAyB;AACxC,MAAI,QAAS;AACb,YAAU;AACV,SAAO,OAAO,QAAQ,EAAE,CAAC;;AAE1B,KAAI;AACH,WAASA,cAAiB;AAC1B,SAAO,OAAO;EACd,MAAM,WAAW,QAAqC;GACrD,MAAM,OAAO,IAAI,QAAQ;AACzB,OAAI,SAAS,gBAAgB,SAAS,SAKrC,QAAO,EAAE,MAAM,UAAU,CAAC;OAE1B,QAAO;IAAE,MAAM;IAAgB,OAAO;IAAK,CAAC;AAE7C,OAAI;AACH,YAAQ,OAAO;WACR;;AAIT,SAAO,KAAK,SAAS,QAAQ;AAC7B,SAAO,OAAO,MAAM,YAAY;GAI/B,MAAM,OAAO,QAAQ,SAAS;GAC9B,MAAM,KAAK,SAAS,QAAQ,KAAK,SAAS;AAC1C,WAAQ,YAAY;AACnB,WAAO,KAAK,EAAE,MAAM,MAAM,GAAG,EAAE,MAAM,UAAU,CAAC;KAC/C;IACD;UACM,OAAO;AACf,SAAO;GAAE,MAAM;GAAgB;GAAO,CAAC;AACvC,MAAI;AACH,WAAQ,OAAO;UACR;;AAMT,QAAO,OAAO,WAAW;AACxB,MAAI;AACH,WAAQ,OAAO;UACR;GAGP;EACD"}

package/dist/substrate/runtime/post-acquire-tasks.mjs

@@ -1,7 +1,7 @@
 import { Context, Data, Effect, Layer, Ref, Scope } from "effect";
 //#region src/substrate/runtime/post-acquire-tasks.ts
 var PostAcquireTaskFailed = class extends Data.TaggedError("PostAcquireTaskFailed") {};
-var PostAcquireTasksService = class extends Context.Service()("@devstack-rewrite/substrate/PostAcquireTasks") {};
+var PostAcquireTasksService = class extends Context.Service()("@devstack/substrate/PostAcquireTasks") {};
 const layerPostAcquireTasks = Layer.effect(PostAcquireTasksService, Effect.gen(function* () {
 	const tasksRef = yield* Ref.make([]);
 	const register = (task) => Effect.gen(function* () {

package/dist/substrate/runtime/post-acquire-tasks.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"post-acquire-tasks.mjs","names":[],"sources":["../../../src/substrate/runtime/post-acquire-tasks.ts"],"sourcesContent":["import { Context, Data, Effect, Layer, Ref, Scope } from 'effect';\n\nimport type { PluginKey } from '../brand.ts';\n\nexport interface PostAcquireTask {\n\treadonly pluginKey: PluginKey;\n\treadonly label: string;\n\treadonly run: Effect.Effect<void, unknown, Scope.Scope>;\n}\n\nexport class PostAcquireTaskFailed extends Data.TaggedError('PostAcquireTaskFailed')<{\n\treadonly pluginKey: PluginKey;\n\treadonly label: string;\n\treadonly cause: unknown;\n}> {}\n\nexport interface PostAcquireTasksShape {\n\treadonly register: (task: PostAcquireTask) => Effect.Effect<void, never, Scope.Scope>;\n\treadonly runAll: Effect.Effect<void, PostAcquireTaskFailed, never>;\n}\n\nexport class PostAcquireTasksService extends Context.Service<\n\tPostAcquireTasksService,\n\tPostAcquireTasksShape\n>()('@devstack-rewrite/substrate/PostAcquireTasks') {}\n\ninterface RegisteredPostAcquireTask extends PostAcquireTask {\n\treadonly id: symbol;\n\treadonly scope: Scope.Scope;\n}\n\nexport const layerPostAcquireTasks: Layer.Layer<PostAcquireTasksService> = Layer.effect(\n\tPostAcquireTasksService,\n\tEffect.gen(function* () {\n\t\tconst tasksRef = yield* Ref.make<ReadonlyArray<RegisteredPostAcquireTask>>([]);\n\n\t\tconst register = (task: PostAcquireTask): Effect.Effect<void, never, Scope.Scope> =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst scope = yield* Effect.scope;\n\t\t\t\tconst id = Symbol(task.label);\n\t\t\t\tconst registered: RegisteredPostAcquireTask = { ...task, id, scope };\n\t\t\t\tyield* Ref.update(tasksRef, (tasks) => [...tasks, registered]);\n\t\t\t\tyield* Effect.addFinalizer(() =>\n\t\t\t\t\tRef.update(tasksRef, (tasks) => tasks.filter((candidate) => candidate.id !== id)),\n\t\t\t\t);\n\t\t\t});\n\n\t\tconst runAll: Effect.Effect<void, PostAcquireTaskFailed, never> = Effect.gen(function* () {\n\t\t\tconst tasks = yield* Ref.get(tasksRef);\n\t\t\tfor (const task of tasks) {\n\t\t\t\tyield* Scope.provide(task.run, task.scope).pipe(\n\t\t\t\t\tEffect.mapError(\n\t\t\t\t\t\t(cause) =>\n\t\t\t\t\t\t\tnew PostAcquireTaskFailed({\n\t\t\t\t\t\t\t\tpluginKey: task.pluginKey,\n\t\t\t\t\t\t\t\tlabel: task.label,\n\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t}\n\t\t});\n\n\t\treturn PostAcquireTasksService.of({ register, runAll });\n\t}),\n);\n"],"mappings":";;AAUA,IAAa,wBAAb,cAA2C,KAAK,YAAY,wBAAwB,CAIjF;AAOH,IAAa,0BAAb,cAA6C,QAAQ,SAGlD,CAAC,+CAA+C,CAAC;AAOpD,MAAa,wBAA8D,MAAM,OAChF,yBACA,OAAO,IAAI,aAAa;CACvB,MAAM,WAAW,OAAO,IAAI,KAA+C,EAAE,CAAC;CAE9E,MAAM,YAAY,SACjB,OAAO,IAAI,aAAa;EACvB,MAAM,QAAQ,OAAO,OAAO;EAC5B,MAAM,KAAK,OAAO,KAAK,MAAM;EAC7B,MAAM,aAAwC;GAAE,GAAG;GAAM;GAAI;GAAO;AACpE,SAAO,IAAI,OAAO,WAAW,UAAU,CAAC,GAAG,OAAO,WAAW,CAAC;AAC9D,SAAO,OAAO,mBACb,IAAI,OAAO,WAAW,UAAU,MAAM,QAAQ,cAAc,UAAU,OAAO,GAAG,CAAC,CACjF;GACA;CAEH,MAAM,SAA4D,OAAO,IAAI,aAAa;EACzF,MAAM,QAAQ,OAAO,IAAI,IAAI,SAAS;AACtC,OAAK,MAAM,QAAQ,MAClB,QAAO,MAAM,QAAQ,KAAK,KAAK,KAAK,MAAM,CAAC,KAC1C,OAAO,UACL,UACA,IAAI,sBAAsB;GACzB,WAAW,KAAK;GAChB,OAAO,KAAK;GACZ;GACA,CAAC,CACH,CACD;GAED;AAEF,QAAO,wBAAwB,GAAG;EAAE;EAAU;EAAQ,CAAC;EACtD,CACF"}
+{"version":3,"file":"post-acquire-tasks.mjs","names":[],"sources":["../../../src/substrate/runtime/post-acquire-tasks.ts"],"sourcesContent":["import { Context, Data, Effect, Layer, Ref, Scope } from 'effect';\n\nimport type { PluginKey } from '../brand.ts';\n\nexport interface PostAcquireTask {\n\treadonly pluginKey: PluginKey;\n\treadonly label: string;\n\treadonly run: Effect.Effect<void, unknown, Scope.Scope>;\n}\n\nexport class PostAcquireTaskFailed extends Data.TaggedError('PostAcquireTaskFailed')<{\n\treadonly pluginKey: PluginKey;\n\treadonly label: string;\n\treadonly cause: unknown;\n}> {}\n\nexport interface PostAcquireTasksShape {\n\treadonly register: (task: PostAcquireTask) => Effect.Effect<void, never, Scope.Scope>;\n\treadonly runAll: Effect.Effect<void, PostAcquireTaskFailed, never>;\n}\n\nexport class PostAcquireTasksService extends Context.Service<\n\tPostAcquireTasksService,\n\tPostAcquireTasksShape\n>()('@devstack/substrate/PostAcquireTasks') {}\n\ninterface RegisteredPostAcquireTask extends PostAcquireTask {\n\treadonly id: symbol;\n\treadonly scope: Scope.Scope;\n}\n\nexport const layerPostAcquireTasks: Layer.Layer<PostAcquireTasksService> = Layer.effect(\n\tPostAcquireTasksService,\n\tEffect.gen(function* () {\n\t\tconst tasksRef = yield* Ref.make<ReadonlyArray<RegisteredPostAcquireTask>>([]);\n\n\t\tconst register = (task: PostAcquireTask): Effect.Effect<void, never, Scope.Scope> =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst scope = yield* Effect.scope;\n\t\t\t\tconst id = Symbol(task.label);\n\t\t\t\tconst registered: RegisteredPostAcquireTask = { ...task, id, scope };\n\t\t\t\tyield* Ref.update(tasksRef, (tasks) => [...tasks, registered]);\n\t\t\t\tyield* Effect.addFinalizer(() =>\n\t\t\t\t\tRef.update(tasksRef, (tasks) => tasks.filter((candidate) => candidate.id !== id)),\n\t\t\t\t);\n\t\t\t});\n\n\t\tconst runAll: Effect.Effect<void, PostAcquireTaskFailed, never> = Effect.gen(function* () {\n\t\t\tconst tasks = yield* Ref.get(tasksRef);\n\t\t\tfor (const task of tasks) {\n\t\t\t\tyield* Scope.provide(task.run, task.scope).pipe(\n\t\t\t\t\tEffect.mapError(\n\t\t\t\t\t\t(cause) =>\n\t\t\t\t\t\t\tnew PostAcquireTaskFailed({\n\t\t\t\t\t\t\t\tpluginKey: task.pluginKey,\n\t\t\t\t\t\t\t\tlabel: task.label,\n\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t}\n\t\t});\n\n\t\treturn PostAcquireTasksService.of({ register, runAll });\n\t}),\n);\n"],"mappings":";;AAUA,IAAa,wBAAb,cAA2C,KAAK,YAAY,wBAAwB,CAIjF;AAOH,IAAa,0BAAb,cAA6C,QAAQ,SAGlD,CAAC,uCAAuC,CAAC;AAO5C,MAAa,wBAA8D,MAAM,OAChF,yBACA,OAAO,IAAI,aAAa;CACvB,MAAM,WAAW,OAAO,IAAI,KAA+C,EAAE,CAAC;CAE9E,MAAM,YAAY,SACjB,OAAO,IAAI,aAAa;EACvB,MAAM,QAAQ,OAAO,OAAO;EAC5B,MAAM,KAAK,OAAO,KAAK,MAAM;EAC7B,MAAM,aAAwC;GAAE,GAAG;GAAM;GAAI;GAAO;AACpE,SAAO,IAAI,OAAO,WAAW,UAAU,CAAC,GAAG,OAAO,WAAW,CAAC;AAC9D,SAAO,OAAO,mBACb,IAAI,OAAO,WAAW,UAAU,MAAM,QAAQ,cAAc,UAAU,OAAO,GAAG,CAAC,CACjF;GACA;CAEH,MAAM,SAA4D,OAAO,IAAI,aAAa;EACzF,MAAM,QAAQ,OAAO,IAAI,IAAI,SAAS;AACtC,OAAK,MAAM,QAAQ,MAClB,QAAO,MAAM,QAAQ,KAAK,KAAK,KAAK,MAAM,CAAC,KAC1C,OAAO,UACL,UACA,IAAI,sBAAsB;GACzB,WAAW,KAAK;GAChB,OAAO,KAAK;GACZ;GACA,CAAC,CACH,CACD;GAED;AAEF,QAAO,wBAAwB,GAAG;EAAE;EAAU;EAAQ,CAAC;EACtD,CACF"}

package/dist/substrate/runtime/probes.d.mts

@@ -1,10 +1,9 @@
-import { Effect } from "effect";
-import * as _$effect_Types0 from "effect/Types";
+import { Effect, Types } from "effect";
 import * as _$effect_Cause0 from "effect/Cause";
 
 //#region src/substrate/runtime/probes.d.ts
 declare namespace probes_d_exports {
-  export { ExitCodeProbeResult, ProbeAttemptResult, ProbeAttemptTimeoutError, ProbeOptions, ProbeTimeoutError, exitCodeProbeResult, waitForProbe };
+  export { ExitCodeProbeResult, ProbeAttemptResult, ProbeAttemptTimeoutError, ProbeOptions, ProbeTimeoutError, exitCodeProbeResult, probeManyLenient, waitForProbe };
 }
 type ProbeAttemptResult = void | boolean | {
   readonly ready: boolean;
@@ -18,7 +17,7 @@ interface ProbeOptions<E = unknown, R = never> {
   readonly probe: () => Effect.Effect<ProbeAttemptResult, E, R>;
   readonly isRetryableError?: (error: E) => boolean;
 }
-declare const ProbeAttemptTimeoutError_base: new <A extends Record<string, any> = {}>(args: _$effect_Types0.VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P] }>) => _$effect_Cause0.YieldableError & {
+declare const ProbeAttemptTimeoutError_base: new <A extends Record<string, any> = {}>(args: Types.VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P] }>) => _$effect_Cause0.YieldableError & {
   readonly _tag: "ProbeAttemptTimeoutError";
 } & Readonly<A>;
 declare class ProbeAttemptTimeoutError extends ProbeAttemptTimeoutError_base<{
@@ -26,7 +25,7 @@ declare class ProbeAttemptTimeoutError extends ProbeAttemptTimeoutError_base<{
   readonly attemptTimeoutMs: number;
   readonly message: string;
 }> {}
-declare const ProbeTimeoutError_base: new <A extends Record<string, any> = {}>(args: _$effect_Types0.VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P] }>) => _$effect_Cause0.YieldableError & {
+declare const ProbeTimeoutError_base: new <A extends Record<string, any> = {}>(args: Types.VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P] }>) => _$effect_Cause0.YieldableError & {
   readonly _tag: "ProbeTimeoutError";
 } & Readonly<A>;
 declare class ProbeTimeoutError extends ProbeTimeoutError_base<{
@@ -46,6 +45,9 @@ interface ExitCodeProbeResult {
   readonly stderr?: string;
 }
 declare const exitCodeProbeResult: (result: ExitCodeProbeResult) => ProbeAttemptResult;
+declare const probeManyLenient: <T, E, R>(probes: ReadonlyArray<Effect.Effect<T | null, E, R>>, options?: {
+  readonly concurrency?: Types.Concurrency;
+}) => Effect.Effect<ReadonlyArray<T | null>, E, R>;
 //#endregion
 export { probes_d_exports };
 //# sourceMappingURL=probes.d.mts.map