@mysten-incubation/devstack 0.1.0 → 0.2.0

package/dist/orchestrators/snapshot/recover-pending.mjs

@@ -1,223 +0,0 @@
-import { decodeUnknown, parseJsonText } from "../../substrate/runtime/runtime-decode.mjs";
-import { RestorePendingDocumentSchema, pendingMarkerPath, removePendingMarker, rewritePendingMarkerContainers, writePendingMarker } from "./pending-marker.mjs";
-import { Effect, FileSystem, Schema } from "effect";
-//#region src/orchestrators/snapshot/recover-pending.ts
-/** Tagged failure surfaced by the recovery scanner. The `kind`
-*  discriminator lets the supervisor decide how to react: a corrupt
-*  marker is investigable but not fatal (the operator can repair the
-*  Docker side manually); a Docker daemon outage is transient. */
-var RestorePendingRecoveryError = class extends Schema.TaggedErrorClass()("SnapshotRestorePendingRecoveryError", {
-	kind: Schema.Literals([
-		"marker-io",
-		"marker-decode",
-		"retag",
-		"rewrite"
-	]),
-	detail: Schema.String,
-	path: Schema.optional(Schema.String),
-	entry: Schema.optional(Schema.Struct({
-		plugin: Schema.String,
-		role: Schema.String,
-		targetImageName: Schema.String,
-		stagedImageTag: Schema.String,
-		digest: Schema.String
-	})),
-	cause: Schema.optional(Schema.Defect)
-}) {};
-const readMarker = (stackRoot) => Effect.gen(function* () {
-	const fs = yield* FileSystem.FileSystem;
-	const path = pendingMarkerPath(stackRoot);
-	if (!(yield* fs.exists(path).pipe(Effect.catch(() => Effect.succeed(false))))) return { kind: "absent" };
-	const raw = yield* parseJsonText(yield* fs.readFileString(path).pipe(Effect.catch((cause) => Effect.fail(new RestorePendingRecoveryError({
-		kind: "marker-io",
-		path,
-		detail: `read pending marker failed`,
-		cause
-	})))), {
-		source: path,
-		mkError: (issue) => new RestorePendingRecoveryError({
-			kind: "marker-decode",
-			path,
-			detail: `pending marker is not valid JSON`,
-			cause: issue.cause
-		})
-	});
-	const peekedVersion = typeof raw === "object" && raw !== null && "version" in raw ? raw.version : void 0;
-	if (!SUPPORTED_MARKER_VERSIONS.has(peekedVersion)) return {
-		kind: "unsupported-version",
-		version: peekedVersion,
-		path
-	};
-	const decoded = yield* decodeUnknown(RestorePendingDocumentSchema, raw, {
-		source: path,
-		mkError: (issue) => new RestorePendingRecoveryError({
-			kind: "marker-decode",
-			path,
-			detail: `pending marker failed schema decode`,
-			cause: issue.cause
-		})
-	});
-	switch (decoded.version) {
-		case 2: return {
-			kind: "present",
-			doc: decoded
-		};
-	}
-});
-/** Set of versions the Union decoder above accepts. Keep in sync with
-*  the arms of `RestorePendingDocumentSchema` in `pending-marker.ts` —
-*  the peek uses this to distinguish "stale/future marker version" from
-*  "blob shape mismatch within a known version". */
-const SUPPORTED_MARKER_VERSIONS = new Set([2]);
-const rewriteMarker = (stackRoot, doc, stillPending) => writePendingMarker(stackRoot, rewritePendingMarkerContainers(doc, stillPending)).pipe(Effect.catchTag("SnapshotRestorePendingMarkerIoError", (err) => Effect.fail(new RestorePendingRecoveryError({
-	kind: "rewrite",
-	path: err.path,
-	detail: err.detail,
-	cause: err.cause
-}))));
-/** Probe whether the snapshot's EXPECTED image (addressed by its
-*  content digest) is resolvable on the host, and if so (re)point
-*  `targetImageName` at it.
-*
-*  We deliberately do NOT self-tag the target NAME here. A self-tag of
-*  `targetImageName` onto itself succeeds for ANY image that happens to
-*  sit at that name — including a wholly unrelated managed/base/pulled
-*  image that merely collides with the recorded name. In the prune
-*  scenario (source pruned out-of-band) that name-existence check would
-*  false-positive: it drops the marker as "recovered" while the
-*  snapshot's committed image was never promoted, booting the container
-*  from the WRONG image with the marker silently cleared.
-*
-*  Instead we address the marker's `digest` (the loaded image's
-*  content-addressed `{{.Id}}`, written by the restore promote loop).
-*  The contract resolves `tag ?? digest`, so `tagImage({ digest }, …)`
-*  tags the EXPECTED image onto `targetImageName`:
-*
-*    - expected image still resident by digest (a prior recovery
-*      promoted it; the digest survives `docker system prune` while any
-*      pinned layer keeps it accessible) → tag succeeds, the name is
-*      (idempotently) repaired to point at exactly the snapshot image →
-*      genuinely recovered, drop the marker entry;
-*    - expected image genuinely gone (digest absent) → tag fails →
-*      keep the entry pending.
-*
-*  This is strictly stronger than the old name-existence probe: a
-*  colliding unrelated image at `targetImageName` can no longer trigger
-*  a false drop, because the probe never addresses the name as a source
-*  — only the expected content digest can satisfy it. It also closes
-*  the silent-wrong-image hole by leaving `targetImageName` pointing at
-*  the right image when it does succeed.
-*
-*  `true` → expected image promoted/confirmed at the target name;
-*  `false` → expected image absent OR the probe hit a transient daemon
-*  error. The caller treats `false` as still-pending, so a transient
-*  probe failure errs on the safe side (keep the marker, retry next
-*  supervise) rather than dropping it. */
-const targetImageResolves = (entry, runtime) => runtime.tagImage({ digest: entry.digest }, entry.targetImageName).pipe(Effect.as(true), Effect.catch(() => Effect.succeed(false)));
-/** Attempt to re-tag the target image from each known identity in
-*  decreasing-likelihood-of-success order:
-*
-*    1. `stagedImageTag` — what the original promote loop was retagging
-*       from. Survives the simplest crash (no Docker mutation between
-*       crash and restart).
-*    2. `digest` — the loaded image's content-addressed identity.
-*       Survives `docker system prune` because the digest IS the image:
-*       any pinned layer keeps the image accessible by digest even
-*       after every tag pointing at it has been removed.
-*
-*  When BOTH source attempts fail we must NOT blindly report the entry
-*  as still-pending: a fully missing source (both staged tag and digest
-*  gone as *named/tagged* refs) can mean a *previous* recovery already
-*  promoted this entry to `targetImageName` and a stale marker simply
-*  hasn't been rewritten. Collapsing that case into "still pending"
-*  retags forever and never makes progress. So after both attempts fail
-*  we PROBE whether the EXPECTED image is still resolvable BY ITS
-*  CONTENT DIGEST (see `targetImageResolves`) — not by the target name:
-*
-*    - expected image resolves → (re)point `targetImageName` at it and
-*      treat the entry as recovered (drop the marker entry);
-*    - expected image absent    → the snapshot image genuinely vanished
-*      without a completed promote (e.g. a transient daemon error on
-*      both tag attempts, or operator prune of source AND target), so
-*      keep the entry pending for the next supervise.
-*
-*  Probing the digest rather than the name is what makes this safe: it
-*  stops conflating "absent source because already recovered" with
-*  "transient daemon error", AND prevents an unrelated image that
-*  happens to occupy `targetImageName` from masquerading as a completed
-*  recovery (the wrong-image hole a bare name-existence check left open). */
-const tryRecoverEntry = (entry, runtime) => Effect.gen(function* () {
-	if (yield* runtime.tagImage({
-		digest: entry.digest,
-		tag: entry.stagedImageTag
-	}, entry.targetImageName, { removeSourceAfterTag: true }).pipe(Effect.as(true), Effect.catch(() => Effect.succeed(false)))) return true;
-	if (yield* runtime.tagImage({ digest: entry.digest }, entry.targetImageName, { removeSourceAfterTag: true }).pipe(Effect.as(true), Effect.catch(() => Effect.succeed(false)))) return true;
-	return yield* targetImageResolves(entry, runtime);
-});
-/** Read the restore-pending marker for this stack root and retry any
-*  outstanding image promotions. Idempotent. The supervisor calls this
-*  BEFORE any plugin acquire, so a half-promoted snapshot restore is
-*  reconciled before L2 lookups observe the runtime tree.
-*
-*  Returns a typed summary instead of failing on partial recovery —
-*  the supervisor surfaces "marker remains, N entries outstanding"
-*  via the cascade-formatter so the operator can decide whether to
-*  re-restore or repair Docker out of band. Only marker IO/decode
-*  failures escape as `RestorePendingRecoveryError`. */
-const recoverPendingRestore = (stackRoot, runtime) => Effect.gen(function* () {
-	const result = yield* readMarker(stackRoot);
-	if (result.kind === "absent") return {
-		noMarker: true,
-		snapshotId: null,
-		inspected: 0,
-		recovered: 0,
-		stillPending: [],
-		markerCleared: false
-	};
-	if (result.kind === "unsupported-version") {
-		yield* Effect.logWarning(`snapshot restore-pending marker at ${result.path} has unsupported version ${String(result.version)} (expected 2); leaving on disk for operator review`);
-		return {
-			noMarker: true,
-			snapshotId: null,
-			inspected: 0,
-			recovered: 0,
-			stillPending: [],
-			markerCleared: false
-		};
-	}
-	const doc = result.doc;
-	yield* Effect.annotateCurrentSpan({
-		"devstack.snapshot.recovery.snapshotId": doc.snapshotId,
-		"devstack.snapshot.recovery.pending": doc.containers.length
-	});
-	const stillPending = [];
-	let recovered = 0;
-	for (let i = 0; i < doc.containers.length; i += 1) {
-		const entry = doc.containers[i];
-		if (yield* tryRecoverEntry(entry, runtime)) recovered += 1;
-		else stillPending.push(entry);
-		yield* rewriteMarker(stackRoot, doc, [...stillPending, ...doc.containers.slice(i + 1)]);
-	}
-	let markerCleared = false;
-	if (stillPending.length === 0) {
-		yield* removePendingMarker(stackRoot).pipe(Effect.catchTag("SnapshotRestorePendingMarkerIoError", (err) => Effect.fail(new RestorePendingRecoveryError({
-			kind: "marker-io",
-			path: err.path,
-			detail: err.detail,
-			cause: err.cause
-		}))));
-		markerCleared = true;
-	} else yield* rewriteMarker(stackRoot, doc, stillPending);
-	return {
-		noMarker: false,
-		snapshotId: doc.snapshotId,
-		inspected: doc.containers.length,
-		recovered,
-		stillPending,
-		markerCleared
-	};
-}).pipe(Effect.withSpan("orchestrator.snapshot.recover-pending"));
-//#endregion
-export { RestorePendingRecoveryError, recoverPendingRestore };
-
-//# sourceMappingURL=recover-pending.mjs.map

package/dist/orchestrators/snapshot/recover-pending.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"recover-pending.mjs","names":[],"sources":["../../../src/orchestrators/snapshot/recover-pending.ts"],"sourcesContent":["// Restore-pending recovery scanner.\n//\n// Recovery contract (mirrors the writer in `pending-marker.ts`):\n//\n//   1. The supervise startup hook calls `recoverPendingRestore` before\n//      any plugin acquire fires, so a half-promoted set of images is\n//      reconciled before any L2 lookup observes the runtime root.\n//   2. The scanner reads `${stackRoot}/snapshot.restore-pending.json`.\n//      Absent marker → no recovery needed, return immediately.\n//   3. For each outstanding entry it asks the runtime to tag the\n//      source onto the target name (`removeSourceAfterTag: true`).\n//      The source is resolved by trying, in order: (a) the staging\n//      tag, (b) the digest. The digest fallback covers the case\n//      where Docker has dropped the staging tag too (e.g. operator\n//      `docker system prune` between crash and restart) — the digest\n//      is the image's content-addressed identity and survives prune.\n//      Successful tag → entry recovered; rewrite the marker with the\n//      entry removed. When BOTH source attempts fail the scanner\n//      probes whether the EXPECTED image (addressed by its content\n//      digest) is still resolvable — a prior recovery may have promoted\n//      it and left the digest resident; if so it (re)points\n//      `targetImageName` at that image and treats the entry as\n//      recovered, otherwise it stays pending. The probe addresses the\n//      digest, NOT the target name, so a colliding unrelated image at\n//      `targetImageName` cannot false-positive a drop.\n//   4. When the outstanding list reaches zero, remove the marker.\n//   5. On a genuine per-entry failure (both sources gone AND the\n//      target not yet visible — e.g. a transient daemon error): keep\n//      the entry in the marker so the next supervise retries. The\n//      scanner returns a typed summary so the supervisor can surface\n//      the partial-recovery state without crashing the boot path.\n//\n// Idempotency: a marker with `containers: []` is treated as\n// already-recovered and removed in one call. Re-running the scanner\n// against a marker for an image that has already been tagged by an\n// out-of-band operator is also safe — `tagImage` is idempotent on the\n// happy path and the failure on a missing staged source is treated\n// as \"entry already recovered\" if the target image is now visible.\n//\n// The scanner sits next to `restore.ts` and shares the marker\n// schema/IO with it via `pending-marker.ts`. The supervisor calls in\n// via `SnapshotOrchestratorService.recoverPendingRestore`, so the L1\n// docker layer requirement is satisfied through the existing service\n// composition — no new substrate plumbing.\n\nimport { Effect, FileSystem, Schema } from 'effect';\n\nimport type { ContainerRuntime } from '../../contracts/container-runtime.ts';\nimport { decodeUnknown, parseJsonText } from '../../substrate/runtime/runtime-decode.ts';\nimport {\n\tpendingMarkerPath,\n\tremovePendingMarker,\n\tRestorePendingMarkerIoError,\n\tRestorePendingDocumentSchema,\n\trewritePendingMarkerContainers,\n\tSNAPSHOT_RESTORE_PENDING_VERSION,\n\twritePendingMarker,\n\ttype RestorePendingContainer,\n\ttype RestorePendingDocument,\n} from './pending-marker.ts';\n\n// -----------------------------------------------------------------------------\n// Errors\n// -----------------------------------------------------------------------------\n\n/** Tagged failure surfaced by the recovery scanner. The `kind`\n *  discriminator lets the supervisor decide how to react: a corrupt\n *  marker is investigable but not fatal (the operator can repair the\n *  Docker side manually); a Docker daemon outage is transient. */\nexport class RestorePendingRecoveryError extends Schema.TaggedErrorClass<RestorePendingRecoveryError>()(\n\t'SnapshotRestorePendingRecoveryError',\n\t{\n\t\tkind: Schema.Literals(['marker-io', 'marker-decode', 'retag', 'rewrite']),\n\t\tdetail: Schema.String,\n\t\tpath: Schema.optional(Schema.String),\n\t\tentry: Schema.optional(\n\t\t\tSchema.Struct({\n\t\t\t\tplugin: Schema.String,\n\t\t\t\trole: Schema.String,\n\t\t\t\ttargetImageName: Schema.String,\n\t\t\t\tstagedImageTag: Schema.String,\n\t\t\t\tdigest: Schema.String,\n\t\t\t}),\n\t\t),\n\t\tcause: Schema.optional(Schema.Defect),\n\t},\n) {}\n\n// -----------------------------------------------------------------------------\n// Summary surface\n// -----------------------------------------------------------------------------\n\nexport interface RestorePendingRecoverySummary {\n\t/** True when no marker was present at the runtime root. */\n\treadonly noMarker: boolean;\n\t/** Snapshot id whose restore was interrupted; null when noMarker. */\n\treadonly snapshotId: string | null;\n\t/** Number of pending entries the scanner observed. */\n\treadonly inspected: number;\n\t/** Number of entries successfully retagged. */\n\treadonly recovered: number;\n\t/** Entries still pending after the scanner finished. Empty in the\n\t *  happy path; populated when one or more retags failed. */\n\treadonly stillPending: ReadonlyArray<RestorePendingContainer>;\n\t/** True when the marker was removed (every entry recovered or\n\t *  marker started empty). */\n\treadonly markerCleared: boolean;\n}\n\n// -----------------------------------------------------------------------------\n// Internal helpers\n// -----------------------------------------------------------------------------\n\n/** Result of reading a marker on disk. `unsupported-version` covers\n *  stale pre-v2 markers whose schema can't safely be recovered (the\n *  v1 shape had no `digest` per entry, and digest is the only identity\n *  that survives `docker system prune`); the Union decode fails them\n *  cleanly and the scanner surfaces them as \"leave on disk for\n *  operator review\" rather than as a fatal decode error. */\ntype ReadMarkerResult =\n\t| { readonly kind: 'absent' }\n\t| { readonly kind: 'unsupported-version'; readonly version: unknown; readonly path: string }\n\t| { readonly kind: 'present'; readonly doc: RestorePendingDocument };\n\nconst readMarker = (\n\tstackRoot: string,\n): Effect.Effect<ReadMarkerResult, RestorePendingRecoveryError, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tconst path = pendingMarkerPath(stackRoot);\n\t\tconst exists = yield* fs.exists(path).pipe(Effect.catch(() => Effect.succeed(false)));\n\t\tif (!exists) return { kind: 'absent' } as const;\n\t\tconst text = yield* fs.readFileString(path).pipe(\n\t\t\tEffect.catch(\n\t\t\t\t(cause): Effect.Effect<never, RestorePendingRecoveryError> =>\n\t\t\t\t\tEffect.fail(\n\t\t\t\t\t\tnew RestorePendingRecoveryError({\n\t\t\t\t\t\t\tkind: 'marker-io',\n\t\t\t\t\t\t\tpath,\n\t\t\t\t\t\t\tdetail: `read pending marker failed`,\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t),\n\t\t);\n\t\tconst raw = yield* parseJsonText(text, {\n\t\t\tsource: path,\n\t\t\tmkError: (issue) =>\n\t\t\t\tnew RestorePendingRecoveryError({\n\t\t\t\t\tkind: 'marker-decode',\n\t\t\t\t\tpath,\n\t\t\t\t\tdetail: `pending marker is not valid JSON`,\n\t\t\t\t\tcause: issue.cause,\n\t\t\t\t}),\n\t\t});\n\t\t// The schema is a `Schema.Union` of every supported marker\n\t\t// version (currently just v2). We peek the discriminant before\n\t\t// the full Union decode so a stale pre-v2 (or future-v3)\n\t\t// marker is reported as `unsupported-version` rather than as a\n\t\t// schema-decode failure — the supervisor surfaces them\n\t\t// differently (operator-review vs corrupt-JSON). A blob whose\n\t\t// `version` matches a known arm but whose inner shape is\n\t\t// malformed still surfaces as `marker-decode`. Future v3\n\t\t// migration appends an arm to the Union in `pending-marker.ts`,\n\t\t// adds the literal to `SUPPORTED_MARKER_VERSIONS`, and adds a\n\t\t// matching `case` in the switch below.\n\t\tconst peekedVersion =\n\t\t\ttypeof raw === 'object' && raw !== null && 'version' in raw\n\t\t\t\t? (raw as { readonly version: unknown }).version\n\t\t\t\t: undefined;\n\t\tif (!SUPPORTED_MARKER_VERSIONS.has(peekedVersion as number)) {\n\t\t\treturn {\n\t\t\t\tkind: 'unsupported-version',\n\t\t\t\tversion: peekedVersion,\n\t\t\t\tpath,\n\t\t\t} as const;\n\t\t}\n\t\tconst decoded: RestorePendingDocument = yield* decodeUnknown(\n\t\t\tRestorePendingDocumentSchema,\n\t\t\traw,\n\t\t\t{\n\t\t\t\tsource: path,\n\t\t\t\tmkError: (issue) =>\n\t\t\t\t\tnew RestorePendingRecoveryError({\n\t\t\t\t\t\tkind: 'marker-decode',\n\t\t\t\t\t\tpath,\n\t\t\t\t\t\tdetail: `pending marker failed schema decode`,\n\t\t\t\t\t\tcause: issue.cause,\n\t\t\t\t\t}),\n\t\t\t},\n\t\t);\n\t\t// Today the Union has one arm (v2). A future v3 migration adds a\n\t\t// `case 3:` arm here AND extends `SUPPORTED_MARKER_VERSIONS`; the\n\t\t// unsupported-version branch becomes reachable once the Union\n\t\t// grows. With a single-arm Union, TypeScript narrows `decoded`\n\t\t// to `never` after `case 2`, so this single return is exhaustive.\n\t\tswitch (decoded.version) {\n\t\t\tcase 2:\n\t\t\t\treturn { kind: 'present', doc: decoded } as const;\n\t\t}\n\t});\n\n/** Set of versions the Union decoder above accepts. Keep in sync with\n *  the arms of `RestorePendingDocumentSchema` in `pending-marker.ts` —\n *  the peek uses this to distinguish \"stale/future marker version\" from\n *  \"blob shape mismatch within a known version\". */\nconst SUPPORTED_MARKER_VERSIONS = new Set<number>([SNAPSHOT_RESTORE_PENDING_VERSION]);\n\nconst rewriteMarker = (\n\tstackRoot: string,\n\tdoc: RestorePendingDocument,\n\tstillPending: ReadonlyArray<RestorePendingContainer>,\n): Effect.Effect<void, RestorePendingRecoveryError, FileSystem.FileSystem> =>\n\twritePendingMarker(stackRoot, rewritePendingMarkerContainers(doc, stillPending)).pipe(\n\t\tEffect.catchTag('SnapshotRestorePendingMarkerIoError', (err: RestorePendingMarkerIoError) =>\n\t\t\tEffect.fail(\n\t\t\t\tnew RestorePendingRecoveryError({\n\t\t\t\t\tkind: 'rewrite',\n\t\t\t\t\tpath: err.path,\n\t\t\t\t\tdetail: err.detail,\n\t\t\t\t\tcause: err.cause,\n\t\t\t\t}),\n\t\t\t),\n\t\t),\n\t);\n\n/** Probe whether the snapshot's EXPECTED image (addressed by its\n *  content digest) is resolvable on the host, and if so (re)point\n *  `targetImageName` at it.\n *\n *  We deliberately do NOT self-tag the target NAME here. A self-tag of\n *  `targetImageName` onto itself succeeds for ANY image that happens to\n *  sit at that name — including a wholly unrelated managed/base/pulled\n *  image that merely collides with the recorded name. In the prune\n *  scenario (source pruned out-of-band) that name-existence check would\n *  false-positive: it drops the marker as \"recovered\" while the\n *  snapshot's committed image was never promoted, booting the container\n *  from the WRONG image with the marker silently cleared.\n *\n *  Instead we address the marker's `digest` (the loaded image's\n *  content-addressed `{{.Id}}`, written by the restore promote loop).\n *  The contract resolves `tag ?? digest`, so `tagImage({ digest }, …)`\n *  tags the EXPECTED image onto `targetImageName`:\n *\n *    - expected image still resident by digest (a prior recovery\n *      promoted it; the digest survives `docker system prune` while any\n *      pinned layer keeps it accessible) → tag succeeds, the name is\n *      (idempotently) repaired to point at exactly the snapshot image →\n *      genuinely recovered, drop the marker entry;\n *    - expected image genuinely gone (digest absent) → tag fails →\n *      keep the entry pending.\n *\n *  This is strictly stronger than the old name-existence probe: a\n *  colliding unrelated image at `targetImageName` can no longer trigger\n *  a false drop, because the probe never addresses the name as a source\n *  — only the expected content digest can satisfy it. It also closes\n *  the silent-wrong-image hole by leaving `targetImageName` pointing at\n *  the right image when it does succeed.\n *\n *  `true` → expected image promoted/confirmed at the target name;\n *  `false` → expected image absent OR the probe hit a transient daemon\n *  error. The caller treats `false` as still-pending, so a transient\n *  probe failure errs on the safe side (keep the marker, retry next\n *  supervise) rather than dropping it. */\nconst targetImageResolves = (\n\tentry: RestorePendingContainer,\n\truntime: ContainerRuntime,\n): Effect.Effect<boolean> =>\n\truntime\n\t\t// Address the EXPECTED image by its content digest (NOT the target\n\t\t// name). `{ digest }` with `tag` omitted forces the contract's\n\t\t// `tag ?? digest` resolution onto the digest, so only the snapshot's\n\t\t// committed image can satisfy this — a name collision cannot.\n\t\t.tagImage({ digest: entry.digest }, entry.targetImageName)\n\t\t.pipe(\n\t\t\tEffect.as(true as const),\n\t\t\tEffect.catch(() => Effect.succeed(false as const)),\n\t\t);\n\n/** Attempt to re-tag the target image from each known identity in\n *  decreasing-likelihood-of-success order:\n *\n *    1. `stagedImageTag` — what the original promote loop was retagging\n *       from. Survives the simplest crash (no Docker mutation between\n *       crash and restart).\n *    2. `digest` — the loaded image's content-addressed identity.\n *       Survives `docker system prune` because the digest IS the image:\n *       any pinned layer keeps the image accessible by digest even\n *       after every tag pointing at it has been removed.\n *\n *  When BOTH source attempts fail we must NOT blindly report the entry\n *  as still-pending: a fully missing source (both staged tag and digest\n *  gone as *named/tagged* refs) can mean a *previous* recovery already\n *  promoted this entry to `targetImageName` and a stale marker simply\n *  hasn't been rewritten. Collapsing that case into \"still pending\"\n *  retags forever and never makes progress. So after both attempts fail\n *  we PROBE whether the EXPECTED image is still resolvable BY ITS\n *  CONTENT DIGEST (see `targetImageResolves`) — not by the target name:\n *\n *    - expected image resolves → (re)point `targetImageName` at it and\n *      treat the entry as recovered (drop the marker entry);\n *    - expected image absent    → the snapshot image genuinely vanished\n *      without a completed promote (e.g. a transient daemon error on\n *      both tag attempts, or operator prune of source AND target), so\n *      keep the entry pending for the next supervise.\n *\n *  Probing the digest rather than the name is what makes this safe: it\n *  stops conflating \"absent source because already recovered\" with\n *  \"transient daemon error\", AND prevents an unrelated image that\n *  happens to occupy `targetImageName` from masquerading as a completed\n *  recovery (the wrong-image hole a bare name-existence check left open). */\nconst tryRecoverEntry = (\n\tentry: RestorePendingContainer,\n\truntime: ContainerRuntime,\n): Effect.Effect<boolean> =>\n\tEffect.gen(function* () {\n\t\t// The contract's docker impl resolves `tag ?? digest`, so when\n\t\t// we want to address by digest we MUST pass `tag: undefined`\n\t\t// (omitting the field) — otherwise the staged tag would still\n\t\t// win the resolution race and we'd be re-running attempt #1.\n\t\tconst stagedFirst = yield* runtime\n\t\t\t.tagImage({ digest: entry.digest, tag: entry.stagedImageTag }, entry.targetImageName, {\n\t\t\t\tremoveSourceAfterTag: true,\n\t\t\t})\n\t\t\t.pipe(\n\t\t\t\tEffect.as(true as const),\n\t\t\t\tEffect.catch(() => Effect.succeed(false as const)),\n\t\t\t);\n\t\tif (stagedFirst) return true;\n\t\tconst digestFallback = yield* runtime\n\t\t\t.tagImage({ digest: entry.digest }, entry.targetImageName, { removeSourceAfterTag: true })\n\t\t\t.pipe(\n\t\t\t\tEffect.as(true as const),\n\t\t\t\tEffect.catch(() => Effect.succeed(false as const)),\n\t\t\t);\n\t\tif (digestFallback) return true;\n\t\t// Both source identities failed. Distinguish \"already promoted by\n\t\t// a prior recovery\" (target now visible → recovered) from a\n\t\t// genuine transient/missing-both failure (target absent → keep\n\t\t// pending). See the doc comment above.\n\t\treturn yield* targetImageResolves(entry, runtime);\n\t});\n\n// -----------------------------------------------------------------------------\n// Public entry point\n// -----------------------------------------------------------------------------\n\n/** Read the restore-pending marker for this stack root and retry any\n *  outstanding image promotions. Idempotent. The supervisor calls this\n *  BEFORE any plugin acquire, so a half-promoted snapshot restore is\n *  reconciled before L2 lookups observe the runtime tree.\n *\n *  Returns a typed summary instead of failing on partial recovery —\n *  the supervisor surfaces \"marker remains, N entries outstanding\"\n *  via the cascade-formatter so the operator can decide whether to\n *  re-restore or repair Docker out of band. Only marker IO/decode\n *  failures escape as `RestorePendingRecoveryError`. */\nexport const recoverPendingRestore = (\n\tstackRoot: string,\n\truntime: ContainerRuntime,\n): Effect.Effect<\n\tRestorePendingRecoverySummary,\n\tRestorePendingRecoveryError,\n\tFileSystem.FileSystem\n> =>\n\tEffect.gen(function* () {\n\t\tconst result = yield* readMarker(stackRoot);\n\t\tif (result.kind === 'absent') {\n\t\t\treturn {\n\t\t\t\tnoMarker: true,\n\t\t\t\tsnapshotId: null,\n\t\t\t\tinspected: 0,\n\t\t\t\trecovered: 0,\n\t\t\t\tstillPending: [],\n\t\t\t\tmarkerCleared: false,\n\t\t\t} as const;\n\t\t}\n\t\tif (result.kind === 'unsupported-version') {\n\t\t\t// Pre-upgrade marker — the schema bumped to v2 to add the\n\t\t\t// `digest` field per entry, and a v1 marker without\n\t\t\t// digests can't be safely recovered (digest is the only\n\t\t\t// identity that survives `docker system prune`). Log a\n\t\t\t// warning and leave the marker alone so the operator can\n\t\t\t// inspect / manually clean up. We treat this as\n\t\t\t// \"no recovery needed\" from the supervisor's perspective.\n\t\t\tyield* Effect.logWarning(\n\t\t\t\t`snapshot restore-pending marker at ${result.path} has unsupported version ${String(\n\t\t\t\t\tresult.version,\n\t\t\t\t)} (expected ${SNAPSHOT_RESTORE_PENDING_VERSION}); leaving on disk for operator review`,\n\t\t\t);\n\t\t\treturn {\n\t\t\t\tnoMarker: true,\n\t\t\t\tsnapshotId: null,\n\t\t\t\tinspected: 0,\n\t\t\t\trecovered: 0,\n\t\t\t\tstillPending: [],\n\t\t\t\tmarkerCleared: false,\n\t\t\t} as const;\n\t\t}\n\t\tconst doc = result.doc;\n\n\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t'devstack.snapshot.recovery.snapshotId': doc.snapshotId,\n\t\t\t'devstack.snapshot.recovery.pending': doc.containers.length,\n\t\t});\n\n\t\tconst stillPending: RestorePendingContainer[] = [];\n\t\tlet recovered = 0;\n\t\tfor (let i = 0; i < doc.containers.length; i += 1) {\n\t\t\tconst entry = doc.containers[i]!;\n\t\t\tconst ok = yield* tryRecoverEntry(entry, runtime);\n\t\t\tif (ok) {\n\t\t\t\trecovered += 1;\n\t\t\t} else {\n\t\t\t\tstillPending.push(entry);\n\t\t\t}\n\t\t\t// Rewrite-after-each so a crash mid-recovery doesn't lose\n\t\t\t// the work-so-far. The new marker carries the still-pending\n\t\t\t// entries plus everything we haven't tried yet. Cheap (one\n\t\t\t// write per image, rare path). Unconditional — the rewrite\n\t\t\t// is idempotent and the final-rewrite below (or\n\t\t\t// `removePendingMarker` when nothing remains) covers steady\n\t\t\t// state.\n\t\t\tconst remaining: RestorePendingContainer[] = [\n\t\t\t\t...stillPending,\n\t\t\t\t...doc.containers.slice(i + 1),\n\t\t\t];\n\t\t\tyield* rewriteMarker(stackRoot, doc, remaining);\n\t\t}\n\n\t\tlet markerCleared = false;\n\t\tif (stillPending.length === 0) {\n\t\t\tyield* removePendingMarker(stackRoot).pipe(\n\t\t\t\tEffect.catchTag('SnapshotRestorePendingMarkerIoError', (err: RestorePendingMarkerIoError) =>\n\t\t\t\t\tEffect.fail(\n\t\t\t\t\t\tnew RestorePendingRecoveryError({\n\t\t\t\t\t\t\tkind: 'marker-io',\n\t\t\t\t\t\t\tpath: err.path,\n\t\t\t\t\t\t\tdetail: err.detail,\n\t\t\t\t\t\t\tcause: err.cause,\n\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t);\n\t\t\tmarkerCleared = true;\n\t\t} else {\n\t\t\t// Final rewrite — the per-loop rewrite covers crash-during-\n\t\t\t// recovery, this one covers the steady-state \"we finished\n\t\t\t// the loop and some entries are still pending\".\n\t\t\tyield* rewriteMarker(stackRoot, doc, stillPending);\n\t\t}\n\n\t\treturn {\n\t\t\tnoMarker: false,\n\t\t\tsnapshotId: doc.snapshotId,\n\t\t\tinspected: doc.containers.length,\n\t\t\trecovered,\n\t\t\tstillPending,\n\t\t\tmarkerCleared,\n\t\t} as const;\n\t}).pipe(Effect.withSpan('orchestrator.snapshot.recover-pending'));\n"],"mappings":";;;;;;;;AAqEA,IAAa,8BAAb,cAAiD,OAAO,kBAA+C,CACtG,uCACA;CACC,MAAM,OAAO,SAAS;EAAC;EAAa;EAAiB;EAAS;EAAU,CAAC;CACzE,QAAQ,OAAO;CACf,MAAM,OAAO,SAAS,OAAO,OAAO;CACpC,OAAO,OAAO,SACb,OAAO,OAAO;EACb,QAAQ,OAAO;EACf,MAAM,OAAO;EACb,iBAAiB,OAAO;EACxB,gBAAgB,OAAO;EACvB,QAAQ,OAAO;EACf,CAAC,CACF;CACD,OAAO,OAAO,SAAS,OAAO,OAAO;CACrC,CACD,CAAC;AAsCF,MAAM,cACL,cAEA,OAAO,IAAI,aAAa;CACvB,MAAM,KAAK,OAAO,WAAW;CAC7B,MAAM,OAAO,kBAAkB,UAAU;AAEzC,KAAI,EAAC,OADiB,GAAG,OAAO,KAAK,CAAC,KAAK,OAAO,YAAY,OAAO,QAAQ,MAAM,CAAC,CAAC,EACxE,QAAO,EAAE,MAAM,UAAU;CActC,MAAM,MAAM,OAAO,cAAc,OAbb,GAAG,eAAe,KAAK,CAAC,KAC3C,OAAO,OACL,UACA,OAAO,KACN,IAAI,4BAA4B;EAC/B,MAAM;EACN;EACA,QAAQ;EACR;EACA,CAAC,CACF,CACF,CACD,EACsC;EACtC,QAAQ;EACR,UAAU,UACT,IAAI,4BAA4B;GAC/B,MAAM;GACN;GACA,QAAQ;GACR,OAAO,MAAM;GACb,CAAC;EACH,CAAC;CAYF,MAAM,gBACL,OAAO,QAAQ,YAAY,QAAQ,QAAQ,aAAa,MACpD,IAAsC,UACvC,KAAA;AACJ,KAAI,CAAC,0BAA0B,IAAI,cAAwB,CAC1D,QAAO;EACN,MAAM;EACN,SAAS;EACT;EACA;CAEF,MAAM,UAAkC,OAAO,cAC9C,8BACA,KACA;EACC,QAAQ;EACR,UAAU,UACT,IAAI,4BAA4B;GAC/B,MAAM;GACN;GACA,QAAQ;GACR,OAAO,MAAM;GACb,CAAC;EACH,CACD;AAMD,SAAQ,QAAQ,SAAhB;EACC,KAAK,EACJ,QAAO;GAAE,MAAM;GAAW,KAAK;GAAS;;EAEzC;;;;;AAMH,MAAM,4BAA4B,IAAI,IAAY,CAAA,EAAkC,CAAC;AAErF,MAAM,iBACL,WACA,KACA,iBAEA,mBAAmB,WAAW,+BAA+B,KAAK,aAAa,CAAC,CAAC,KAChF,OAAO,SAAS,wCAAwC,QACvD,OAAO,KACN,IAAI,4BAA4B;CAC/B,MAAM;CACN,MAAM,IAAI;CACV,QAAQ,IAAI;CACZ,OAAO,IAAI;CACX,CAAC,CACF,CACD,CACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCF,MAAM,uBACL,OACA,YAEA,QAKE,SAAS,EAAE,QAAQ,MAAM,QAAQ,EAAE,MAAM,gBAAgB,CACzD,KACA,OAAO,GAAG,KAAc,EACxB,OAAO,YAAY,OAAO,QAAQ,MAAe,CAAC,CAClD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCH,MAAM,mBACL,OACA,YAEA,OAAO,IAAI,aAAa;AAavB,KAAI,OARuB,QACzB,SAAS;EAAE,QAAQ,MAAM;EAAQ,KAAK,MAAM;EAAgB,EAAE,MAAM,iBAAiB,EACrF,sBAAsB,MACtB,CAAC,CACD,KACA,OAAO,GAAG,KAAc,EACxB,OAAO,YAAY,OAAO,QAAQ,MAAe,CAAC,CAClD,CACe,QAAO;AAOxB,KAAI,OAN0B,QAC5B,SAAS,EAAE,QAAQ,MAAM,QAAQ,EAAE,MAAM,iBAAiB,EAAE,sBAAsB,MAAM,CAAC,CACzF,KACA,OAAO,GAAG,KAAc,EACxB,OAAO,YAAY,OAAO,QAAQ,MAAe,CAAC,CAClD,CACkB,QAAO;AAK3B,QAAO,OAAO,oBAAoB,OAAO,QAAQ;EAChD;;;;;;;;;;;AAgBH,MAAa,yBACZ,WACA,YAMA,OAAO,IAAI,aAAa;CACvB,MAAM,SAAS,OAAO,WAAW,UAAU;AAC3C,KAAI,OAAO,SAAS,SACnB,QAAO;EACN,UAAU;EACV,YAAY;EACZ,WAAW;EACX,WAAW;EACX,cAAc,EAAE;EAChB,eAAe;EACf;AAEF,KAAI,OAAO,SAAS,uBAAuB;AAQ1C,SAAO,OAAO,WACb,sCAAsC,OAAO,KAAK,2BAA2B,OAC5E,OAAO,QACP,CAAC,oDACF;AACD,SAAO;GACN,UAAU;GACV,YAAY;GACZ,WAAW;GACX,WAAW;GACX,cAAc,EAAE;GAChB,eAAe;GACf;;CAEF,MAAM,MAAM,OAAO;AAEnB,QAAO,OAAO,oBAAoB;EACjC,yCAAyC,IAAI;EAC7C,sCAAsC,IAAI,WAAW;EACrD,CAAC;CAEF,MAAM,eAA0C,EAAE;CAClD,IAAI,YAAY;AAChB,MAAK,IAAI,IAAI,GAAG,IAAI,IAAI,WAAW,QAAQ,KAAK,GAAG;EAClD,MAAM,QAAQ,IAAI,WAAW;AAE7B,MAAI,OADc,gBAAgB,OAAO,QAAQ,CAEhD,cAAa;MAEb,cAAa,KAAK,MAAM;AAazB,SAAO,cAAc,WAAW,KAAK,CAHpC,GAAG,cACH,GAAG,IAAI,WAAW,MAAM,IAAI,EAAE,CAEe,CAAC;;CAGhD,IAAI,gBAAgB;AACpB,KAAI,aAAa,WAAW,GAAG;AAC9B,SAAO,oBAAoB,UAAU,CAAC,KACrC,OAAO,SAAS,wCAAwC,QACvD,OAAO,KACN,IAAI,4BAA4B;GAC/B,MAAM;GACN,MAAM,IAAI;GACV,QAAQ,IAAI;GACZ,OAAO,IAAI;GACX,CAAC,CACF,CACD,CACD;AACD,kBAAgB;OAKhB,QAAO,cAAc,WAAW,KAAK,aAAa;AAGnD,QAAO;EACN,UAAU;EACV,YAAY,IAAI;EAChB,WAAW,IAAI,WAAW;EAC1B;EACA;EACA;EACA;EACA,CAAC,KAAK,OAAO,SAAS,wCAAwC,CAAC"}

package/dist/orchestrators/snapshot/state-document.d.mts

@@ -1 +0,0 @@
-import { Effect, FileSystem, Schema } from "effect";

package/dist/orchestrators/snapshot/state-document.mjs

@@ -1,58 +0,0 @@
-import { decodeUnknown, parseJsonText } from "../../substrate/runtime/runtime-decode.mjs";
-import { StateDocument } from "../../substrate/runtime/state-store/schema.mjs";
-import "../../substrate/runtime/state-store/index.mjs";
-import { Effect, FileSystem, Schema } from "effect";
-//#region src/orchestrators/snapshot/state-document.ts
-/** Tagged failure raised by snapshot state-document helpers. `kind`
-*  discriminates the failure class so downstream phase classifiers can
-*  branch by tag, not by message substring. */
-var SnapshotStateDocumentError = class extends Schema.TaggedErrorClass()("SnapshotStateDocumentError", {
-	/**
-	* - `'read'` — filesystem read of the state document file failed.
-	* - `'parse'` — file contents are not valid JSON.
-	* - `'decode'` — JSON parses but does not match `StateDocument`
-	*   schema.
-	* - `'write'` — filesystem write of the state document file failed.
-	*/
-	kind: Schema.Literals([
-		"read",
-		"parse",
-		"decode",
-		"write"
-	]),
-	detail: Schema.String,
-	path: Schema.String,
-	cause: Schema.optional(Schema.Defect)
-}) {};
-const fail = (kind, detail, path, cause) => Effect.fail(new SnapshotStateDocumentError({
-	kind,
-	detail,
-	path,
-	cause
-}));
-const readSnapshotStateDocument = (path) => Effect.gen(function* () {
-	return yield* decodeUnknown(StateDocument, yield* parseJsonText(yield* (yield* FileSystem.FileSystem).readFileString(path).pipe(Effect.catch((cause) => fail("read", `read ${path} failed`, path, cause))), {
-		source: path,
-		mkError: (issue) => new SnapshotStateDocumentError({
-			kind: "parse",
-			detail: `${path} is not valid JSON`,
-			path,
-			cause: issue.cause
-		})
-	}), {
-		source: path,
-		mkError: (issue) => new SnapshotStateDocumentError({
-			kind: "decode",
-			detail: `${path} failed StateDocument schema decode`,
-			path,
-			cause: issue.cause
-		})
-	});
-});
-const writeSnapshotStateDocument = (path, doc) => Effect.gen(function* () {
-	yield* (yield* FileSystem.FileSystem).writeFileString(path, `${JSON.stringify(doc, null, 2)}\n`).pipe(Effect.catch((cause) => fail("write", `write ${path} failed`, path, cause)));
-});
-//#endregion
-export { SnapshotStateDocumentError, readSnapshotStateDocument, writeSnapshotStateDocument };
-
-//# sourceMappingURL=state-document.mjs.map

package/dist/orchestrators/snapshot/state-document.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"state-document.mjs","names":["StateDocumentSchema"],"sources":["../../../src/orchestrators/snapshot/state-document.ts"],"sourcesContent":["import { Effect, FileSystem, Schema } from 'effect';\n\nimport { decodeUnknown, parseJsonText } from '../../substrate/runtime/runtime-decode.ts';\nimport {\n\tStateDocument as StateDocumentSchema,\n\ttype StateDocument,\n} from '../../substrate/runtime/state-store/index.ts';\n\n/** Tagged failure raised by snapshot state-document helpers. `kind`\n *  discriminates the failure class so downstream phase classifiers can\n *  branch by tag, not by message substring. */\nexport class SnapshotStateDocumentError extends Schema.TaggedErrorClass<SnapshotStateDocumentError>()(\n\t'SnapshotStateDocumentError',\n\t{\n\t\t/**\n\t\t * - `'read'` — filesystem read of the state document file failed.\n\t\t * - `'parse'` — file contents are not valid JSON.\n\t\t * - `'decode'` — JSON parses but does not match `StateDocument`\n\t\t *   schema.\n\t\t * - `'write'` — filesystem write of the state document file failed.\n\t\t */\n\t\tkind: Schema.Literals(['read', 'parse', 'decode', 'write']),\n\t\tdetail: Schema.String,\n\t\tpath: Schema.String,\n\t\tcause: Schema.optional(Schema.Defect),\n\t},\n) {}\n\nconst fail = (\n\tkind: SnapshotStateDocumentError['kind'],\n\tdetail: string,\n\tpath: string,\n\tcause?: unknown,\n): Effect.Effect<never, SnapshotStateDocumentError> =>\n\tEffect.fail(new SnapshotStateDocumentError({ kind, detail, path, cause }));\n\nexport const readSnapshotStateDocument = (\n\tpath: string,\n): Effect.Effect<StateDocument, SnapshotStateDocumentError, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tconst text = yield* fs\n\t\t\t.readFileString(path)\n\t\t\t.pipe(Effect.catch((cause) => fail('read', `read ${path} failed`, path, cause)));\n\t\tconst raw = yield* parseJsonText(text, {\n\t\t\tsource: path,\n\t\t\tmkError: (issue) =>\n\t\t\t\tnew SnapshotStateDocumentError({\n\t\t\t\t\tkind: 'parse',\n\t\t\t\t\tdetail: `${path} is not valid JSON`,\n\t\t\t\t\tpath,\n\t\t\t\t\tcause: issue.cause,\n\t\t\t\t}),\n\t\t});\n\t\treturn yield* decodeUnknown(StateDocumentSchema, raw, {\n\t\t\tsource: path,\n\t\t\tmkError: (issue) =>\n\t\t\t\tnew SnapshotStateDocumentError({\n\t\t\t\t\tkind: 'decode',\n\t\t\t\t\tdetail: `${path} failed StateDocument schema decode`,\n\t\t\t\t\tpath,\n\t\t\t\t\tcause: issue.cause,\n\t\t\t\t}),\n\t\t});\n\t});\n\nexport const writeSnapshotStateDocument = (\n\tpath: string,\n\tdoc: StateDocument,\n): Effect.Effect<void, SnapshotStateDocumentError, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tyield* fs\n\t\t\t.writeFileString(path, `${JSON.stringify(doc, null, 2)}\\n`)\n\t\t\t.pipe(Effect.catch((cause) => fail('write', `write ${path} failed`, path, cause)));\n\t});\n"],"mappings":";;;;;;;;AAWA,IAAa,6BAAb,cAAgD,OAAO,kBAA8C,CACpG,8BACA;;;;;;;;CAQC,MAAM,OAAO,SAAS;EAAC;EAAQ;EAAS;EAAU;EAAQ,CAAC;CAC3D,QAAQ,OAAO;CACf,MAAM,OAAO;CACb,OAAO,OAAO,SAAS,OAAO,OAAO;CACrC,CACD,CAAC;AAEF,MAAM,QACL,MACA,QACA,MACA,UAEA,OAAO,KAAK,IAAI,2BAA2B;CAAE;CAAM;CAAQ;CAAM;CAAO,CAAC,CAAC;AAE3E,MAAa,6BACZ,SAEA,OAAO,IAAI,aAAa;AAevB,QAAO,OAAO,cAAcA,eAAqB,OAV9B,cAAc,QAHb,OADF,WAAW,YAE3B,eAAe,KAAK,CACpB,KAAK,OAAO,OAAO,UAAU,KAAK,QAAQ,QAAQ,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC,EAC1C;EACtC,QAAQ;EACR,UAAU,UACT,IAAI,2BAA2B;GAC9B,MAAM;GACN,QAAQ,GAAG,KAAK;GAChB;GACA,OAAO,MAAM;GACb,CAAC;EACH,CAAC,EACoD;EACrD,QAAQ;EACR,UAAU,UACT,IAAI,2BAA2B;GAC9B,MAAM;GACN,QAAQ,GAAG,KAAK;GAChB;GACA,OAAO,MAAM;GACb,CAAC;EACH,CAAC;EACD;AAEH,MAAa,8BACZ,MACA,QAEA,OAAO,IAAI,aAAa;AAEvB,SAAO,OADW,WAAW,YAE3B,gBAAgB,MAAM,GAAG,KAAK,UAAU,KAAK,MAAM,EAAE,CAAC,IAAI,CAC1D,KAAK,OAAO,OAAO,UAAU,KAAK,SAAS,SAAS,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;EAClF"}

package/dist/plugins/account/spans.mjs

@@ -1,16 +0,0 @@
-//#region src/plugins/account/spans.ts
-const AccountSpans = {
-	address: "account.address",
-	fundAmountMist: "fund.amount.mist",
-	fundCrossCuttingCount: "fund.cross-cutting.count",
-	fundCrossCuttingEntries: "fund.cross-cutting.entries",
-	fundingFrom: "account.funding.from",
-	fundingTo: "account.funding.to",
-	name: "account.name",
-	scheme: "account.scheme",
-	variant: "account.variant"
-};
-//#endregion
-export { AccountSpans };
-
-//# sourceMappingURL=spans.mjs.map

package/dist/plugins/account/spans.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"spans.mjs","names":[],"sources":["../../../src/plugins/account/spans.ts"],"sourcesContent":["// Account plugin span-attribute vocabulary. Plugin-local — substrate's\n// `SpanAttr` carries only engine-dimensional + http/process generic\n// keys; plugin-domain keys live next to the plugin that owns them.\n//\n// Callsite pattern: `Effect.annotateCurrentSpan({ [AccountSpans.name]:\n// value })`. Free-form string literals are a STYLE_GUIDE §16 violation.\n\nexport const AccountSpans = {\n\taddress: 'account.address',\n\tfundAmountMist: 'fund.amount.mist',\n\tfundCrossCuttingCount: 'fund.cross-cutting.count',\n\tfundCrossCuttingEntries: 'fund.cross-cutting.entries',\n\tfundingFrom: 'account.funding.from',\n\tfundingTo: 'account.funding.to',\n\tname: 'account.name',\n\tscheme: 'account.scheme',\n\tvariant: 'account.variant',\n} as const;\n"],"mappings":";AAOA,MAAa,eAAe;CAC3B,SAAS;CACT,gBAAgB;CAChB,uBAAuB;CACvB,yBAAyB;CACzB,aAAa;CACb,WAAW;CACX,MAAM;CACN,QAAQ;CACR,SAAS;CACT"}

package/dist/plugins/account/variants/env.mjs

@@ -1,24 +0,0 @@
-import { accountAcquireError } from "../errors.mjs";
-import { decodeBech32Secret } from "../keypair.mjs";
-import { Effect } from "effect";
-//#region src/plugins/account/variants/env.ts
-/** Resolve the env variant.
-*
-*  Stub: the actual env-read happens inside `Effect.sync` against
-*  the resolved-once process env. The decode path then funnels into
-*  `decodeBech32Secret`. */
-const resolveEnvVariant = (args) => Effect.gen(function* () {
-	return yield* decodeBech32Secret(yield* Effect.sync(() => {
-		return globalThis.process?.env?.[args.varName];
-	}).pipe(Effect.flatMap((v) => v === void 0 || v === "" ? Effect.fail(accountAcquireError({
-		phase: "read-env",
-		accountName: args.name,
-		variant: "env",
-		message: `Account '${args.name}': env var '${args.varName}' is missing or empty.`,
-		hint: `Set ${args.varName}=suiprivkey1... in the process environment.`
-	})) : Effect.succeed(v))), args.name, "env");
-});
-//#endregion
-export { resolveEnvVariant };
-
-//# sourceMappingURL=env.mjs.map

package/dist/plugins/account/variants/env.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"env.mjs","names":[],"sources":["../../../../src/plugins/account/variants/env.ts"],"sourcesContent":["// Account variant — env (read bech32 secret from a process env var).\n//\n// Distilled-doc surface: scoped to CI / vault-injected configurations.\n// The env-var NAME is taken verbatim from the user's options — the\n// VALUE is never logged, spanned, or surfaced in error messages\n// (security invariant: only the variable name is referenced).\n\nimport { Effect } from 'effect';\n\nimport { accountAcquireError, type AccountAcquireError } from '../errors.ts';\nimport { decodeBech32Secret, type ResolvedKeypair } from '../keypair.ts';\n\nexport interface EnvVariantArgs {\n\treadonly name: string;\n\t/** The `process.env` variable name holding the bech32 secret. */\n\treadonly varName: string;\n}\n\n/** Resolve the env variant.\n *\n *  Stub: the actual env-read happens inside `Effect.sync` against\n *  the resolved-once process env. The decode path then funnels into\n *  `decodeBech32Secret`. */\nexport const resolveEnvVariant = (\n\targs: EnvVariantArgs,\n): Effect.Effect<ResolvedKeypair, AccountAcquireError> =>\n\tEffect.gen(function* () {\n\t\t// Stub: read env, refuse empty / missing.\n\t\tconst bech32 = yield* Effect.sync((): string | undefined => {\n\t\t\tconst proc = (globalThis as { process?: { env?: Record<string, string | undefined> } })\n\t\t\t\t.process;\n\t\t\treturn proc?.env?.[args.varName];\n\t\t}).pipe(\n\t\t\tEffect.flatMap((v) =>\n\t\t\t\tv === undefined || v === ''\n\t\t\t\t\t? Effect.fail(\n\t\t\t\t\t\t\taccountAcquireError({\n\t\t\t\t\t\t\t\tphase: 'read-env',\n\t\t\t\t\t\t\t\taccountName: args.name,\n\t\t\t\t\t\t\t\tvariant: 'env',\n\t\t\t\t\t\t\t\t// Reference the variable's NAME only — never the value.\n\t\t\t\t\t\t\t\tmessage: `Account '${args.name}': env var '${args.varName}' is missing or empty.`,\n\t\t\t\t\t\t\t\thint: `Set ${args.varName}=suiprivkey1... in the process environment.`,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t)\n\t\t\t\t\t: Effect.succeed(v),\n\t\t\t),\n\t\t);\n\t\treturn yield* decodeBech32Secret(bech32, args.name, 'env');\n\t});\n"],"mappings":";;;;;;;;;AAuBA,MAAa,qBACZ,SAEA,OAAO,IAAI,aAAa;AAsBvB,QAAO,OAAO,mBAAmB,OApBX,OAAO,WAA+B;AAG3D,SAFc,WACZ,SACW,MAAM,KAAK;GACvB,CAAC,KACF,OAAO,SAAS,MACf,MAAM,KAAA,KAAa,MAAM,KACtB,OAAO,KACP,oBAAoB;EACnB,OAAO;EACP,aAAa,KAAK;EAClB,SAAS;EAET,SAAS,YAAY,KAAK,KAAK,cAAc,KAAK,QAAQ;EAC1D,MAAM,OAAO,KAAK,QAAQ;EAC1B,CAAC,CACF,GACA,OAAO,QAAQ,EAAE,CACpB,CACD,EACwC,KAAK,MAAM,MAAM;EACzD"}

package/dist/plugins/account/variants/inline.mjs

@@ -1,13 +0,0 @@
-import { decodeBech32Secret, resolvedKeypairFromEd25519Bytes } from "../keypair.mjs";
-import "effect";
-//#region src/plugins/account/variants/inline.ts
-/** Resolve the inline variant. String input takes the bech32 decode
-*  path; Uint8Array input takes the raw-bytes-into-Ed25519 path. */
-const resolveInlineVariant = (args) => {
-	if (typeof args.privateKey === "string") return decodeBech32Secret(args.privateKey, args.name, "inline");
-	return resolvedKeypairFromEd25519Bytes(args.privateKey, args.name, "inline");
-};
-//#endregion
-export { resolveInlineVariant };
-
-//# sourceMappingURL=inline.mjs.map

package/dist/plugins/account/variants/inline.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"inline.mjs","names":[],"sources":["../../../../src/plugins/account/variants/inline.ts"],"sourcesContent":["// Account variant — inline (literal bech32 secret in config).\n//\n// Distilled-doc warning: TESTS AND DEMOS ONLY. The key is serialized\n// as part of the user's devstack config; if that file is committed,\n// the key is in their git history. The user-facing factory in\n// `index.ts` mirrors the warning in JSDoc.\n//\n// This file accepts either a `string` (bech32 form) or a `Uint8Array`\n// (raw 32-byte secret key). Both funnel through Ed25519 construction\n// so downstream paths are uniform.\n\nimport { Effect } from 'effect';\n\nimport {\n\tdecodeBech32Secret,\n\tresolvedKeypairFromEd25519Bytes,\n\ttype ResolvedKeypair,\n} from '../keypair.ts';\nimport type { AccountAcquireError } from '../errors.ts';\n\nexport interface InlineVariantArgs {\n\treadonly name: string;\n\treadonly privateKey: string | Uint8Array;\n}\n\n/** Resolve the inline variant. String input takes the bech32 decode\n *  path; Uint8Array input takes the raw-bytes-into-Ed25519 path. */\nexport const resolveInlineVariant = (\n\targs: InlineVariantArgs,\n): Effect.Effect<ResolvedKeypair, AccountAcquireError> => {\n\tif (typeof args.privateKey === 'string') {\n\t\treturn decodeBech32Secret(args.privateKey, args.name, 'inline');\n\t}\n\treturn resolvedKeypairFromEd25519Bytes(args.privateKey, args.name, 'inline');\n};\n"],"mappings":";;;;;AA2BA,MAAa,wBACZ,SACyD;AACzD,KAAI,OAAO,KAAK,eAAe,SAC9B,QAAO,mBAAmB,KAAK,YAAY,KAAK,MAAM,SAAS;AAEhE,QAAO,gCAAgC,KAAK,YAAY,KAAK,MAAM,SAAS"}

package/dist/plugins/account/variants/keystore.mjs

@@ -1,91 +0,0 @@
-import { decodeJsonText } from "../../../substrate/runtime/runtime-decode.mjs";
-import { accountAcquireError } from "../errors.mjs";
-import { decodeBech32Secret } from "../keypair.mjs";
-import { Effect, Schema } from "effect";
-import { promises } from "node:fs";
-import { decodeSuiPrivateKey } from "@mysten/sui/cryptography";
-import { Ed25519Keypair } from "@mysten/sui/keypairs/ed25519";
-//#region src/plugins/account/variants/keystore.ts
-const AliasesShape = Schema.Array(Schema.Struct({
-	alias: Schema.String,
-	public_key_base64: Schema.optional(Schema.String)
-}));
-const KeystoreShape = Schema.Array(Schema.String);
-/** Resolve the keystore variant. */
-const resolveKeystoreVariant = (args) => Effect.gen(function* () {
-	const rows = yield* decodeJsonText(KeystoreShape, yield* Effect.tryPromise({
-		try: () => promises.readFile(args.path, "utf-8"),
-		catch: (cause) => accountAcquireError({
-			phase: "load-keystore",
-			accountName: args.name,
-			variant: "keystore",
-			message: `Account '${args.name}': failed to read keystore at '${args.path}'.`,
-			hint: "Verify the path exists and is readable. The Sui CLI default is `~/.sui/sui_config/sui.keystore`.",
-			cause
-		})
-	}), {
-		source: args.path,
-		mkError: (issue) => accountAcquireError({
-			phase: "load-keystore",
-			accountName: args.name,
-			variant: "keystore",
-			message: issue.message === "failed to parse JSON" ? `Account '${args.name}': keystore at '${args.path}' is not valid JSON.` : `Account '${args.name}': keystore at '${args.path}' did not match the expected schema (array of bech32 strings).`
-		})
-	});
-	const aliasIdx = yield* resolveAliasIndex(`${args.path.replace(/\.keystore$/, "")}.aliases`, args.aliasOrAddress, args.name).pipe(Effect.orElseSucceed(() => -1));
-	if (aliasIdx >= 0 && aliasIdx < rows.length) {
-		const bech32 = rows[aliasIdx];
-		return yield* decodeBech32Secret(bech32, args.name, "keystore");
-	}
-	const wantAddr = normalizeAddress(args.aliasOrAddress);
-	for (const bech32 of rows) {
-		const addr = yield* tryDeriveAddress(bech32).pipe(Effect.orElseSucceed(() => null));
-		if (addr !== null && normalizeAddress(addr) === wantAddr) return yield* decodeBech32Secret(bech32, args.name, "keystore");
-	}
-	return yield* Effect.fail(accountAcquireError({
-		phase: "load-keystore",
-		accountName: args.name,
-		variant: "keystore",
-		message: `Account '${args.name}': keystore at '${args.path}' has no entry matching alias-or-address '${args.aliasOrAddress}'.`,
-		hint: "Check the sibling sui.aliases file for the alias spelling, or pass the on-chain address (0x-prefixed) directly."
-	}));
-});
-const resolveAliasIndex = (aliasesPath, want, accountName) => Effect.gen(function* () {
-	return (yield* decodeJsonText(AliasesShape, yield* Effect.tryPromise({
-		try: () => promises.readFile(aliasesPath, "utf-8"),
-		catch: (cause) => accountAcquireError({
-			phase: "load-keystore",
-			accountName,
-			variant: "keystore",
-			message: `aliases file '${aliasesPath}' missing or unreadable`,
-			cause
-		})
-	}), {
-		source: aliasesPath,
-		mkError: (issue) => accountAcquireError({
-			phase: "load-keystore",
-			accountName,
-			variant: "keystore",
-			message: issue.message === "failed to parse JSON" ? `aliases file '${aliasesPath}' is not valid JSON` : `aliases file '${aliasesPath}' did not match the expected schema`
-		})
-	})).findIndex((row) => row.alias === want);
-});
-/** Derive the on-chain address from a bech32 secret without
-*  surfacing a typed error — used by the by-address scan, which
-*  swallows per-row failures and moves on. */
-const tryDeriveAddress = (bech32) => Effect.try({
-	try: () => {
-		const parsed = decodeSuiPrivateKey(bech32);
-		if (parsed.scheme !== "ED25519") throw new Error(`scheme ${parsed.scheme} not yet derivable here`);
-		return Ed25519Keypair.fromSecretKey(parsed.secretKey).toSuiAddress();
-	},
-	catch: (cause) => cause instanceof Error ? cause : new Error(String(cause))
-});
-const normalizeAddress = (addr) => {
-	const lower = addr.toLowerCase();
-	return lower.startsWith("0x") ? lower : `0x${lower}`;
-};
-//#endregion
-export { resolveKeystoreVariant };
-
-//# sourceMappingURL=keystore.mjs.map

package/dist/plugins/account/variants/keystore.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"keystore.mjs","names":["fs"],"sources":["../../../../src/plugins/account/variants/keystore.ts"],"sourcesContent":["// Account variant — keystore (read from Sui CLI keystore file).\n//\n// Distilled-doc surface: read a `suiprivkey1...` entry by alias or\n// by address from a CLI-shape keystore file. Devstack NEVER copies\n// the keystore — only reads. Persistence stays with the user's\n// CLI tooling.\n//\n// Keystore file shape (canonical sui-cli output):\n//   `<path>`           — a JSON array of bech32 `suiprivkey1...` strings\n//   `<path>.aliases`   — a sibling JSON array of `{alias, public_key_base64}`\n//                         entries; the array's index matches the keystore.\n//\n// Lookup precedence: alias match first (case-sensitive), then by-address\n// match (the resolver decodes each bech32 row, derives the address,\n// and compares). The address path is intentionally O(n) — keystores\n// are small and the alternative is a side-table the CLI doesn't\n// maintain.\n\nimport { Effect, Schema } from 'effect';\nimport { promises as fs } from 'node:fs';\n\nimport { decodeJsonText } from '../../../substrate/runtime/runtime-decode.ts';\nimport { accountAcquireError, type AccountAcquireError } from '../errors.ts';\nimport { decodeBech32Secret, type ResolvedKeypair } from '../keypair.ts';\nimport { decodeSuiPrivateKey } from '@mysten/sui/cryptography';\nimport { Ed25519Keypair } from '@mysten/sui/keypairs/ed25519';\n\nexport interface KeystoreVariantArgs {\n\treadonly name: string;\n\t/** Absolute path to the keystore file. Defaults at the factory\n\t *  boundary to `~/.sui/sui_config/sui.keystore`. */\n\treadonly path: string;\n\t/** Alias name (from the sibling `sui.aliases` file) OR the\n\t *  on-chain address — the resolver tries alias first, then a\n\t *  by-address lookup. */\n\treadonly aliasOrAddress: string;\n}\n\nconst AliasesShape = Schema.Array(\n\tSchema.Struct({\n\t\talias: Schema.String,\n\t\t// Optional because some CLI versions omit it for newer rows;\n\t\t// we only need the alias for the alias-path.\n\t\tpublic_key_base64: Schema.optional(Schema.String),\n\t}),\n);\n\nconst KeystoreShape = Schema.Array(Schema.String);\n\n/** Resolve the keystore variant. */\nexport const resolveKeystoreVariant = (\n\targs: KeystoreVariantArgs,\n): Effect.Effect<ResolvedKeypair, AccountAcquireError> =>\n\tEffect.gen(function* () {\n\t\t// --- read + parse the keystore ----------------------------------\n\t\tconst raw = yield* Effect.tryPromise({\n\t\t\ttry: () => fs.readFile(args.path, 'utf-8'),\n\t\t\tcatch: (cause): AccountAcquireError =>\n\t\t\t\taccountAcquireError({\n\t\t\t\t\tphase: 'load-keystore',\n\t\t\t\t\taccountName: args.name,\n\t\t\t\t\tvariant: 'keystore',\n\t\t\t\t\tmessage: `Account '${args.name}': failed to read keystore at '${args.path}'.`,\n\t\t\t\t\thint: 'Verify the path exists and is readable. The Sui CLI default is `~/.sui/sui_config/sui.keystore`.',\n\t\t\t\t\tcause,\n\t\t\t\t}),\n\t\t});\n\t\tconst rows = yield* decodeJsonText(KeystoreShape, raw, {\n\t\t\tsource: args.path,\n\t\t\t// Secret-leak guard: the keystore file IS an array of\n\t\t\t// `suiprivkey1...` private keys, so a malformed-array\n\t\t\t// `ParseError` renders the offending secret rows into its\n\t\t\t// message/tree. We deliberately DROP the raw `cause`; the typed\n\t\t\t// `message` already distinguishes \"not valid JSON\" from a schema\n\t\t\t// mismatch, which is the only actionable diagnostic here.\n\t\t\t// (Mirrors the `decodeBech32Secret` guard in `../keypair.ts`.)\n\t\t\tmkError: (issue): AccountAcquireError =>\n\t\t\t\taccountAcquireError({\n\t\t\t\t\tphase: 'load-keystore',\n\t\t\t\t\taccountName: args.name,\n\t\t\t\t\tvariant: 'keystore',\n\t\t\t\t\tmessage:\n\t\t\t\t\t\tissue.message === 'failed to parse JSON'\n\t\t\t\t\t\t\t? `Account '${args.name}': keystore at '${args.path}' is not valid JSON.`\n\t\t\t\t\t\t\t: `Account '${args.name}': keystore at '${args.path}' did not match the expected schema (array of bech32 strings).`,\n\t\t\t\t}),\n\t\t});\n\n\t\t// --- alias path -------------------------------------------------\n\t\t// Best-effort: missing aliases file is not fatal — fall through\n\t\t// to the by-address path.\n\t\tconst aliasesPath = `${args.path.replace(/\\.keystore$/, '')}.aliases`;\n\t\tconst aliasIdx = yield* resolveAliasIndex(aliasesPath, args.aliasOrAddress, args.name).pipe(\n\t\t\tEffect.orElseSucceed(() => -1),\n\t\t);\n\t\tif (aliasIdx >= 0 && aliasIdx < rows.length) {\n\t\t\tconst bech32 = rows[aliasIdx]!;\n\t\t\treturn yield* decodeBech32Secret(bech32, args.name, 'keystore');\n\t\t}\n\n\t\t// --- by-address path -------------------------------------------\n\t\t// Normalize the lookup key to a lowercased 0x-prefixed string so\n\t\t// comparisons match regardless of caller casing.\n\t\tconst wantAddr = normalizeAddress(args.aliasOrAddress);\n\t\tfor (const bech32 of rows) {\n\t\t\tconst addr = yield* tryDeriveAddress(bech32).pipe(Effect.orElseSucceed(() => null));\n\t\t\tif (addr !== null && normalizeAddress(addr) === wantAddr) {\n\t\t\t\treturn yield* decodeBech32Secret(bech32, args.name, 'keystore');\n\t\t\t}\n\t\t}\n\n\t\treturn yield* Effect.fail(\n\t\t\taccountAcquireError({\n\t\t\t\tphase: 'load-keystore',\n\t\t\t\taccountName: args.name,\n\t\t\t\tvariant: 'keystore',\n\t\t\t\tmessage: `Account '${args.name}': keystore at '${args.path}' has no entry matching alias-or-address '${args.aliasOrAddress}'.`,\n\t\t\t\thint: 'Check the sibling sui.aliases file for the alias spelling, or pass the on-chain address (0x-prefixed) directly.',\n\t\t\t}),\n\t\t);\n\t});\n\nconst resolveAliasIndex = (\n\taliasesPath: string,\n\twant: string,\n\taccountName: string,\n): Effect.Effect<number, AccountAcquireError> =>\n\tEffect.gen(function* () {\n\t\tconst raw = yield* Effect.tryPromise({\n\t\t\ttry: () => fs.readFile(aliasesPath, 'utf-8'),\n\t\t\tcatch: (cause): AccountAcquireError =>\n\t\t\t\taccountAcquireError({\n\t\t\t\t\tphase: 'load-keystore',\n\t\t\t\t\taccountName,\n\t\t\t\t\tvariant: 'keystore',\n\t\t\t\t\tmessage: `aliases file '${aliasesPath}' missing or unreadable`,\n\t\t\t\t\tcause,\n\t\t\t\t}),\n\t\t});\n\t\tconst aliases = yield* decodeJsonText(AliasesShape, raw, {\n\t\t\tsource: aliasesPath,\n\t\t\t// Secret-leak guard: drop the raw `cause`. The aliases file holds\n\t\t\t// public keys rather than secrets, but a malformed-array\n\t\t\t// `ParseError` embeds whatever rows the file contained, and the\n\t\t\t// resolver is pointed at a sibling of the secret keystore — so we\n\t\t\t// keep the same scrub the keystore-array path uses above. The\n\t\t\t// typed `message` already names the only actionable distinction.\n\t\t\tmkError: (issue): AccountAcquireError =>\n\t\t\t\taccountAcquireError({\n\t\t\t\t\tphase: 'load-keystore',\n\t\t\t\t\taccountName,\n\t\t\t\t\tvariant: 'keystore',\n\t\t\t\t\tmessage:\n\t\t\t\t\t\tissue.message === 'failed to parse JSON'\n\t\t\t\t\t\t\t? `aliases file '${aliasesPath}' is not valid JSON`\n\t\t\t\t\t\t\t: `aliases file '${aliasesPath}' did not match the expected schema`,\n\t\t\t\t}),\n\t\t});\n\t\treturn aliases.findIndex((row) => row.alias === want);\n\t});\n\n/** Derive the on-chain address from a bech32 secret without\n *  surfacing a typed error — used by the by-address scan, which\n *  swallows per-row failures and moves on. */\nconst tryDeriveAddress = (bech32: string): Effect.Effect<string, Error> =>\n\tEffect.try({\n\t\ttry: () => {\n\t\t\tconst parsed = decodeSuiPrivateKey(bech32);\n\t\t\tif (parsed.scheme !== 'ED25519') {\n\t\t\t\tthrow new Error(`scheme ${parsed.scheme} not yet derivable here`);\n\t\t\t}\n\t\t\treturn Ed25519Keypair.fromSecretKey(parsed.secretKey).toSuiAddress();\n\t\t},\n\t\tcatch: (cause) => (cause instanceof Error ? cause : new Error(String(cause))),\n\t});\n\nconst normalizeAddress = (addr: string): string => {\n\tconst lower = addr.toLowerCase();\n\treturn lower.startsWith('0x') ? lower : `0x${lower}`;\n};\n"],"mappings":";;;;;;;;AAsCA,MAAM,eAAe,OAAO,MAC3B,OAAO,OAAO;CACb,OAAO,OAAO;CAGd,mBAAmB,OAAO,SAAS,OAAO,OAAO;CACjD,CAAC,CACF;AAED,MAAM,gBAAgB,OAAO,MAAM,OAAO,OAAO;;AAGjD,MAAa,0BACZ,SAEA,OAAO,IAAI,aAAa;CAcvB,MAAM,OAAO,OAAO,eAAe,eAAe,OAZ/B,OAAO,WAAW;EACpC,WAAWA,SAAG,SAAS,KAAK,MAAM,QAAQ;EAC1C,QAAQ,UACP,oBAAoB;GACnB,OAAO;GACP,aAAa,KAAK;GAClB,SAAS;GACT,SAAS,YAAY,KAAK,KAAK,iCAAiC,KAAK,KAAK;GAC1E,MAAM;GACN;GACA,CAAC;EACH,CAAC,EACqD;EACtD,QAAQ,KAAK;EAQb,UAAU,UACT,oBAAoB;GACnB,OAAO;GACP,aAAa,KAAK;GAClB,SAAS;GACT,SACC,MAAM,YAAY,yBACf,YAAY,KAAK,KAAK,kBAAkB,KAAK,KAAK,wBAClD,YAAY,KAAK,KAAK,kBAAkB,KAAK,KAAK;GACtD,CAAC;EACH,CAAC;CAMF,MAAM,WAAW,OAAO,kBAAkB,GADnB,KAAK,KAAK,QAAQ,eAAe,GAAG,CAAC,WACL,KAAK,gBAAgB,KAAK,KAAK,CAAC,KACtF,OAAO,oBAAoB,GAAG,CAC9B;AACD,KAAI,YAAY,KAAK,WAAW,KAAK,QAAQ;EAC5C,MAAM,SAAS,KAAK;AACpB,SAAO,OAAO,mBAAmB,QAAQ,KAAK,MAAM,WAAW;;CAMhE,MAAM,WAAW,iBAAiB,KAAK,eAAe;AACtD,MAAK,MAAM,UAAU,MAAM;EAC1B,MAAM,OAAO,OAAO,iBAAiB,OAAO,CAAC,KAAK,OAAO,oBAAoB,KAAK,CAAC;AACnF,MAAI,SAAS,QAAQ,iBAAiB,KAAK,KAAK,SAC/C,QAAO,OAAO,mBAAmB,QAAQ,KAAK,MAAM,WAAW;;AAIjE,QAAO,OAAO,OAAO,KACpB,oBAAoB;EACnB,OAAO;EACP,aAAa,KAAK;EAClB,SAAS;EACT,SAAS,YAAY,KAAK,KAAK,kBAAkB,KAAK,KAAK,4CAA4C,KAAK,eAAe;EAC3H,MAAM;EACN,CAAC,CACF;EACA;AAEH,MAAM,qBACL,aACA,MACA,gBAEA,OAAO,IAAI,aAAa;AA+BvB,SAAO,OAnBgB,eAAe,cAAc,OAXjC,OAAO,WAAW;EACpC,WAAWA,SAAG,SAAS,aAAa,QAAQ;EAC5C,QAAQ,UACP,oBAAoB;GACnB,OAAO;GACP;GACA,SAAS;GACT,SAAS,iBAAiB,YAAY;GACtC;GACA,CAAC;EACH,CAAC,EACuD;EACxD,QAAQ;EAOR,UAAU,UACT,oBAAoB;GACnB,OAAO;GACP;GACA,SAAS;GACT,SACC,MAAM,YAAY,yBACf,iBAAiB,YAAY,uBAC7B,iBAAiB,YAAY;GACjC,CAAC;EACH,CAAC,EACa,WAAW,QAAQ,IAAI,UAAU,KAAK;EACpD;;;;AAKH,MAAM,oBAAoB,WACzB,OAAO,IAAI;CACV,WAAW;EACV,MAAM,SAAS,oBAAoB,OAAO;AAC1C,MAAI,OAAO,WAAW,UACrB,OAAM,IAAI,MAAM,UAAU,OAAO,OAAO,yBAAyB;AAElE,SAAO,eAAe,cAAc,OAAO,UAAU,CAAC,cAAc;;CAErE,QAAQ,UAAW,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,MAAM,CAAC;CAC5E,CAAC;AAEH,MAAM,oBAAoB,SAAyB;CAClD,MAAM,QAAQ,KAAK,aAAa;AAChC,QAAO,MAAM,WAAW,KAAK,GAAG,QAAQ,KAAK"}

package/dist/plugins/action/spans.mjs

@@ -1,11 +0,0 @@
-//#region src/plugins/action/spans.ts
-const ActionSpans = {
-	name: "action.name",
-	chain: "action.chain",
-	phase: "action.phase",
-	digest: "action.digest"
-};
-//#endregion
-export { ActionSpans };
-
-//# sourceMappingURL=spans.mjs.map

package/dist/plugins/action/spans.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"spans.mjs","names":[],"sources":["../../../src/plugins/action/spans.ts"],"sourcesContent":["// Action plugin span-attribute vocabulary. Plugin-local — substrate's\n// `SpanAttr` carries only engine-dimensional + http/process generic\n// keys; plugin-domain keys live next to the plugin that owns them.\n//\n// Callsite pattern: `Effect.annotateCurrentSpan({ [ActionSpans.name]:\n// inputs.actionName })`. Free-form string literals are a STYLE_GUIDE §16\n// violation.\n\nexport const ActionSpans = {\n\tname: 'action.name',\n\tchain: 'action.chain',\n\tphase: 'action.phase',\n\tdigest: 'action.digest',\n} as const;\n"],"mappings":";AAQA,MAAa,cAAc;CAC1B,MAAM;CACN,OAAO;CACP,OAAO;CACP,QAAQ;CACR"}

package/dist/plugins/coin/spans.mjs

@@ -1,20 +0,0 @@
-//#region src/plugins/coin/spans.ts
-const CoinSpans = {
-	type: "coin.type",
-	form: "coin.form",
-	fullCoinType: "coin.fullCoinType",
-	decimals: "coin.decimals",
-	source: "coin.source",
-	mint: {
-		recipient: "coin.mint.recipient",
-		fullCoinType: "coin.mint.fullCoinType",
-		amount: "coin.mint.amount",
-		digest: "coin.mint.digest",
-		mintedCoinId: "coin.mint.mintedCoinId"
-	},
-	metadata: { fullCoinType: "coin.metadata.fullCoinType" }
-};
-//#endregion
-export { CoinSpans };
-
-//# sourceMappingURL=spans.mjs.map

package/dist/plugins/coin/spans.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"spans.mjs","names":[],"sources":["../../../src/plugins/coin/spans.ts"],"sourcesContent":["// Coin plugin span-attribute vocabulary. Plugin-local — substrate's\n// `SpanAttr` carries only engine-dimensional + http/process generic\n// keys; plugin-domain keys live next to the plugin that owns them.\n//\n// Callsite pattern: `Effect.annotateCurrentSpan({ [CoinSpans.type]:\n// value })`. Free-form string literals are a STYLE_GUIDE §16 violation.\n\nexport const CoinSpans = {\n\ttype: 'coin.type',\n\tform: 'coin.form',\n\tfullCoinType: 'coin.fullCoinType',\n\tdecimals: 'coin.decimals',\n\tsource: 'coin.source',\n\tmint: {\n\t\trecipient: 'coin.mint.recipient',\n\t\tfullCoinType: 'coin.mint.fullCoinType',\n\t\tamount: 'coin.mint.amount',\n\t\tdigest: 'coin.mint.digest',\n\t\tmintedCoinId: 'coin.mint.mintedCoinId',\n\t},\n\tmetadata: {\n\t\tfullCoinType: 'coin.metadata.fullCoinType',\n\t},\n} as const;\n"],"mappings":";AAOA,MAAa,YAAY;CACxB,MAAM;CACN,MAAM;CACN,cAAc;CACd,UAAU;CACV,QAAQ;CACR,MAAM;EACL,WAAW;EACX,cAAc;EACd,QAAQ;EACR,QAAQ;EACR,cAAc;EACd;CACD,UAAU,EACT,cAAc,8BACd;CACD"}

package/dist/plugins/deepbook/spans.mjs

@@ -1,18 +0,0 @@
-//#region src/plugins/deepbook/spans.ts
-const DeepbookSpans = {
-	chain: "deepbook.chain",
-	fundAmount: "fund.amount",
-	fundCoin: "fund.coin",
-	name: "deepbook.name",
-	packageId: "deepbook.packageId",
-	poolCount: "deepbook.pool.count",
-	publisher: "deepbook.publisher",
-	pyth: {
-		feedCount: "pyth.feed.count",
-		packageId: "pyth.packageId"
-	}
-};
-//#endregion
-export { DeepbookSpans };
-
-//# sourceMappingURL=spans.mjs.map

package/dist/plugins/deepbook/spans.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"spans.mjs","names":[],"sources":["../../../src/plugins/deepbook/spans.ts"],"sourcesContent":["// Deepbook plugin span-attribute vocabulary. Plugin-local — substrate's\n// `SpanAttr` carries only engine-dimensional + http/process generic\n// keys; plugin-domain keys live next to the plugin that owns them.\n//\n// Callsite pattern: `Effect.annotateCurrentSpan({ [DeepbookSpans.name]:\n// value })`. Free-form string literals are a STYLE_GUIDE §16 violation.\n//\n// Pyth is a deepbook implementation detail (see `./pyth/`), so pyth\n// span keys live here under a nested `pyth` sub-object to keep\n// vocabulary discovery scoped to the owning plugin.\n\nexport const DeepbookSpans = {\n\tchain: 'deepbook.chain',\n\tfundAmount: 'fund.amount',\n\tfundCoin: 'fund.coin',\n\tname: 'deepbook.name',\n\tpackageId: 'deepbook.packageId',\n\tpoolCount: 'deepbook.pool.count',\n\tpublisher: 'deepbook.publisher',\n\tpyth: {\n\t\tfeedCount: 'pyth.feed.count',\n\t\tpackageId: 'pyth.packageId',\n\t},\n} as const;\n"],"mappings":";AAWA,MAAa,gBAAgB;CAC5B,OAAO;CACP,YAAY;CACZ,UAAU;CACV,MAAM;CACN,WAAW;CACX,WAAW;CACX,WAAW;CACX,MAAM;EACL,WAAW;EACX,WAAW;EACX;CACD"}

package/dist/plugins/faucet/spans.mjs

@@ -1,12 +0,0 @@
-//#region src/plugins/faucet/spans.ts
-const FaucetSpans = {
-	address: "faucet.address",
-	amount: "faucet.amount",
-	budgetMs: "faucet.budget_ms",
-	maxAttempts: "faucet.max_attempts",
-	url: "faucet.url"
-};
-//#endregion
-export { FaucetSpans };
-
-//# sourceMappingURL=spans.mjs.map

package/dist/plugins/faucet/spans.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"spans.mjs","names":[],"sources":["../../../src/plugins/faucet/spans.ts"],"sourcesContent":["// Faucet plugin span-attribute vocabulary. Plugin-local — substrate's\n// `SpanAttr` carries only engine-dimensional + http/process generic\n// keys; plugin-domain keys live next to the plugin that owns them.\n//\n// Callsite pattern: `Effect.annotateCurrentSpan({ [FaucetSpans.url]:\n// value })`. Free-form string literals are a STYLE_GUIDE §16 violation.\n\nexport const FaucetSpans = {\n\taddress: 'faucet.address',\n\tamount: 'faucet.amount',\n\tbudgetMs: 'faucet.budget_ms',\n\tmaxAttempts: 'faucet.max_attempts',\n\turl: 'faucet.url',\n} as const;\n"],"mappings":";AAOA,MAAa,cAAc;CAC1B,SAAS;CACT,QAAQ;CACR,UAAU;CACV,aAAa;CACb,KAAK;CACL"}