@mysten-incubation/devstack 0.1.1 → 0.2.0

package/dist/cli/wirings/up.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"up.mjs","names":["resolvePath"],"sources":["../../../src/cli/wirings/up.ts"],"sourcesContent":["// `devstack up` verb wiring.\n//\n// Wires the substrate Layer stack, supervisor, attached renderer, and\n// in-process TUI command queue. The Effect runs as the outer Node fiber\n// so SIGINT reaches scope finalizers (see surfaces/cli/index.ts\n// architecture invariant).\n//\n// Logger layer: `Logger.layer([])` (silent). `up` owns the TUI, which is\n// the operator-facing output channel; routing structured `Effect.log*`\n// records to stderr would scribble on top of the live ink renderer in\n// human mode and would duplicate the structured event stream the plain\n// renderer already emits in non-TTY mode. The sibling `apply` verb (no\n// TUI) uses `Logger.consolePretty()` because its consumer is CI.\n\nimport { dirname, resolve as resolvePath } from 'node:path';\n\nimport { Cause, Effect, Exit, FileSystem, Logger, Queue, Ref, Scope, Stream } from 'effect';\n\nimport type { Identity } from '../../substrate/identity.ts';\nimport type { EngineCommand, EngineEvent } from '../../substrate/events.ts';\nimport { StackPathsService } from '../../substrate/runtime/paths.ts';\nimport {\n\tclaim,\n\tcommandChannelPaths,\n\theartbeatFiber,\n\tmakeCommandChannelSubscriber,\n\tmakeProjectionRef,\n\tpersistProjectionChanges,\n\trelease,\n\ttype SupervisedStack,\n\ttype SupervisorCommandHandler,\n\ttype SupervisorHandle,\n} from '../../substrate/runtime/index.ts';\nimport {\n\tcollectLifecyclePruneInventory,\n\tdefaultLifecyclePruneSelection,\n\tDEFAULT_LIFECYCLE_PRUNE_RESOURCES,\n\trunLifecyclePrune,\n} from '../../orchestrators/lifecycle-prune/index.ts';\nimport { superviseStackEffect } from '../../orchestrators/run.ts';\nimport {\n\tbuildProductionOrchestratorSinks,\n\tbuildProductionPostAcquireHook,\n} from '../../orchestrators/runtime-composition.ts';\nimport {\n\textendBuiltInPluginContext,\n\tlayerBuiltInPluginRuntime,\n} from '../../orchestrators/built-in-plugin-layers.ts';\nimport {\n\tcaptureSnapshot,\n\tSnapshotOrchestratorService,\n} from '../../orchestrators/snapshot/index.ts';\nimport {\n\ttype CliError,\n\tCliInternalError,\n\tCliSupervisorLiveError,\n\ttype GlobalFlags,\n} from '../../surfaces/cli/index.ts';\nimport type { CommandResult } from '../../surfaces/cli/commands/index.ts';\nimport { ExitCode } from '../../surfaces/cli/sysexits.ts';\nimport { makeTuiSurface } from '../../surfaces/tui/index.ts';\nimport type { LoadedConfig } from '../../surfaces/cli/commands/config-loader.ts';\n\nimport { cliErrorFromConfigExit } from '../bail.ts';\nimport { makeQueueCommandPublisher, resolveUpRendererMode } from '../up-lifecycle.ts';\nimport { makeConfigLoader } from './config-loader.ts';\nimport { isEngineCommand } from './engine-command.ts';\nimport {\n\tfindCliSupervisorLiveError,\n\tidentityValueFor,\n\tresolvedIdentityForStack,\n\ttype ResolvedIdentity,\n} from './identity.ts';\nimport { buildVerbLayers } from './build-verb-layers.ts';\nimport { provideFileSystem } from './provide-file-system.ts';\n\nconst rosterPathsFor = (stackRoot: string) => ({\n\tstackLockFile: resolvePath(stackRoot, 'stack.lock'),\n\trosterFile: resolvePath(stackRoot, 'roster.json'),\n});\n\n// -----------------------------------------------------------------------------\n// Supervisor command handler — snapshot/wipe/prune injected dispatch\n// -----------------------------------------------------------------------------\n\n/** Captured snapshot metadata is round-tripped through the\n *  command-channel ack payload so the publisher's `awaitCompletion`\n *  can surface it without tailing the engine event stream. */\ninterface SnapshotCaptureAckPayload {\n\treadonly kind: 'captured' | 'failed' | 'skipped';\n\treadonly snapshotId?: string;\n\treadonly name?: string;\n\treadonly summary?: string;\n\treadonly reason?: string;\n}\n\nconst makeSnapshotCommandHandler = (params: {\n\treadonly snapshot: import('../../orchestrators/snapshot/index.ts').SnapshotOrchestrator;\n\treadonly fs: FileSystem.FileSystem;\n\treadonly runtimeRoot: string;\n}): SupervisorCommandHandler => {\n\treturn (cmd, handlerCtx) => {\n\t\tswitch (cmd.tag) {\n\t\t\tcase 'snapshot.capture':\n\t\t\t\treturn captureSnapshot({\n\t\t\t\t\tsnapshotId: cmd.snapshotId,\n\t\t\t\t\tname: cmd.name,\n\t\t\t\t\tonProgress: (progress) =>\n\t\t\t\t\t\thandlerCtx.publish({\n\t\t\t\t\t\t\ttag: 'snapshot.captureProgress',\n\t\t\t\t\t\t\t...(cmd.snapshotId === undefined ? {} : { snapshotId: cmd.snapshotId }),\n\t\t\t\t\t\t\t...(cmd.name === undefined ? {} : { name: cmd.name }),\n\t\t\t\t\t\t\tphase: progress.phase,\n\t\t\t\t\t\t\t...(progress.detail === undefined ? {} : { detail: progress.detail }),\n\t\t\t\t\t\t\t...(progress.pausedContainers === undefined\n\t\t\t\t\t\t\t\t? {}\n\t\t\t\t\t\t\t\t: { pausedContainers: progress.pausedContainers }),\n\t\t\t\t\t\t\t...(progress.totalContainers === undefined\n\t\t\t\t\t\t\t\t? {}\n\t\t\t\t\t\t\t\t: { totalContainers: progress.totalContainers }),\n\t\t\t\t\t\t\tat: Date.now(),\n\t\t\t\t\t\t}),\n\t\t\t\t}).pipe(\n\t\t\t\t\tEffect.provideService(SnapshotOrchestratorService, params.snapshot),\n\t\t\t\t\tEffect.provideService(FileSystem.FileSystem, params.fs),\n\t\t\t\t\tEffect.map((meta) => [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\ttag: 'snapshot.captured',\n\t\t\t\t\t\t\tsnapshotId: meta.id,\n\t\t\t\t\t\t\t...(meta.label === null ? {} : { name: meta.label }),\n\t\t\t\t\t\t\tat: Date.now(),\n\t\t\t\t\t\t},\n\t\t\t\t\t]),\n\t\t\t\t);\n\t\t\tcase 'snapshot.restore':\n\t\t\t\treturn provideFileSystem(params.fs, params.snapshot.restore({ id: cmd.snapshotId })).pipe(\n\t\t\t\t\tEffect.map((meta) => [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\ttag: 'snapshot.restored',\n\t\t\t\t\t\t\tsnapshotId: meta.id,\n\t\t\t\t\t\t\tat: Date.now(),\n\t\t\t\t\t\t},\n\t\t\t\t\t]),\n\t\t\t\t);\n\t\t\tcase 'snapshot.list':\n\t\t\t\treturn provideFileSystem(params.fs, params.snapshot.list).pipe(Effect.as([]));\n\t\t\tcase 'snapshot.delete':\n\t\t\t\treturn provideFileSystem(params.fs, params.snapshot.delete(cmd.snapshotId)).pipe(\n\t\t\t\t\tEffect.as([]),\n\t\t\t\t);\n\t\t\tcase 'wipe.requested':\n\t\t\t\treturn provideFileSystem(params.fs, params.snapshot.wipe({})).pipe(Effect.as([]));\n\t\t\tcase 'prune.requested':\n\t\t\t\t// Route to the same orchestrator the offline `devstack prune`\n\t\t\t\t// verb uses (`runLifecyclePrune`), NOT the snapshot-orchestrator\n\t\t\t\t// prune (which only cleans the snapshot catalog and would leave\n\t\t\t\t// stale containers/networks/volumes/images behind for an attached\n\t\t\t\t// supervisor — silent under-prune is the bug we're closing).\n\t\t\t\t// Live supervisor implies the current stack's group is live and\n\t\t\t\t// therefore excluded from the default selection — exactly the\n\t\t\t\t// invariant the live-attached `prune` needs (operator can prune\n\t\t\t\t// sibling stacks under the same Docker daemon without touching\n\t\t\t\t// the running one).\n\t\t\t\treturn collectLifecyclePruneInventory({ runtimeRoot: params.runtimeRoot }).pipe(\n\t\t\t\t\tEffect.flatMap((inventory) =>\n\t\t\t\t\t\trunLifecyclePrune(\n\t\t\t\t\t\t\t{ runtimeRoot: params.runtimeRoot },\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\tgroupKeys: defaultLifecyclePruneSelection(\n\t\t\t\t\t\t\t\t\tinventory,\n\t\t\t\t\t\t\t\t\tDEFAULT_LIFECYCLE_PRUNE_RESOURCES,\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t\tresources: DEFAULT_LIFECYCLE_PRUNE_RESOURCES,\n\t\t\t\t\t\t\t\tdryRun: false,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t\tEffect.as([]),\n\t\t\t\t);\n\t\t\tdefault:\n\t\t\t\treturn Effect.succeed([]);\n\t\t}\n\t};\n};\n\nconst installLiveSupervisorRoster = (params: {\n\treadonly stackRoot: string;\n\treadonly app: string;\n\treadonly stack: string;\n}): Effect.Effect<void, unknown, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tconst paths = rosterPathsFor(params.stackRoot);\n\t\tconst claimed = yield* claim(paths);\n\t\tif (!claimed.soleHolder) {\n\t\t\tyield* release(paths).pipe(Effect.catch(() => Effect.void));\n\t\t\treturn yield* Effect.fail(\n\t\t\t\tnew CliSupervisorLiveError({\n\t\t\t\t\tapp: params.app,\n\t\t\t\t\tstack: params.stack,\n\t\t\t\t\thint: 'use `devstack apply` from another shell, or choose a different --stack name',\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\t\tyield* Effect.addFinalizer(() => release(paths).pipe(Effect.catch(() => Effect.void)));\n\t\tyield* Effect.forkScoped(heartbeatFiber(paths));\n\t});\n\ninterface PendingSnapshotCapture {\n\treadonly commandId: string;\n\treadonly snapshotId: string;\n\treadonly name?: string;\n}\n\n/** Detect snapshot-capture completion events on the published stream\n *  so we can ack/fail the originating `snapshot.capture` command with\n *  a structured payload (snapshot metadata on success; failure summary\n *  on failure). Drops the legacy tail-fiber on the CLI side — the\n *  `summary` is now surfaced through `awaitCompletion`'s reply.payload. */\nconst snapshotCaptureAckFromEvent = (\n\tevent: unknown,\n): { readonly snapshotId: string; readonly payload: SnapshotCaptureAckPayload } | null => {\n\tif (typeof event !== 'object' || event === null) return null;\n\tconst record = event as {\n\t\treadonly tag?: string;\n\t\treadonly snapshotId?: string;\n\t\treadonly name?: string;\n\t\treadonly summary?: string;\n\t\treadonly reason?: string;\n\t};\n\tif (typeof record.snapshotId !== 'string') return null;\n\tif (record.tag === 'snapshot.captured') {\n\t\treturn {\n\t\t\tsnapshotId: record.snapshotId,\n\t\t\tpayload: {\n\t\t\t\tkind: 'captured',\n\t\t\t\tsnapshotId: record.snapshotId,\n\t\t\t\t...(record.name === undefined ? {} : { name: record.name }),\n\t\t\t},\n\t\t};\n\t}\n\tif (record.tag === 'snapshot.captureFailed') {\n\t\treturn {\n\t\t\tsnapshotId: record.snapshotId,\n\t\t\tpayload: {\n\t\t\t\tkind: 'failed',\n\t\t\t\tsnapshotId: record.snapshotId,\n\t\t\t\t...(record.name === undefined ? {} : { name: record.name }),\n\t\t\t\t...(typeof record.summary === 'string' ? { summary: record.summary } : {}),\n\t\t\t},\n\t\t};\n\t}\n\tif (record.tag === 'snapshot.captureSkipped') {\n\t\treturn {\n\t\t\tsnapshotId: record.snapshotId,\n\t\t\tpayload: {\n\t\t\t\tkind: 'skipped',\n\t\t\t\tsnapshotId: record.snapshotId,\n\t\t\t\t...(typeof record.reason === 'string' ? { reason: record.reason } : {}),\n\t\t\t},\n\t\t};\n\t}\n\treturn null;\n};\n\nconst installCommandChannelBridge = (params: {\n\treadonly stackRoot: string;\n\treadonly handle: SupervisorHandle;\n}): Effect.Effect<\n\t{\n\t\treadonly publishEvent: (event: EngineEvent) => Effect.Effect<void>;\n\t},\n\tunknown,\n\tScope.Scope\n> =>\n\tEffect.gen(function* () {\n\t\tconst subscriber = yield* makeCommandChannelSubscriber(commandChannelPaths(params.stackRoot), {\n\t\t\tfromOffset: 'current',\n\t\t});\n\n\t\t// snapshotId → pending command record id. Populated when the\n\t\t// bridge dispatches a `snapshot.capture` command; drained when\n\t\t// the matching completion event flows through `publishEvent`.\n\t\tconst pendingCaptures = yield* Ref.make<ReadonlyMap<string, PendingSnapshotCapture>>(new Map());\n\n\t\t// Drive the command stream so a stream-LEVEL failure does not\n\t\t// permanently wedge cross-process IPC. The subscriber's `commands`\n\t\t// tail decodes with the `onDecodeError: 'fail'` default, so ONE\n\t\t// malformed/truncated NDJSON line (CLI killed mid-append, partial\n\t\t// disk write) raises `CommandChannelError` and terminates the\n\t\t// stream. If `runForEach` were the only consumer, the live\n\t\t// supervisor would then process NO further commands for the rest of\n\t\t// the `up` session (a sibling `snapshot save`/`apply`/`prune`\n\t\t// appends but is never read, and its `awaitCompletion` times out\n\t\t// with no diagnostic). Instead we log the failure and RE-SUBSCRIBE:\n\t\t// `subscriber.commands` is `tailRecords(... fromOffset: 'current')`,\n\t\t// and each subscription re-runs its builder, re-anchoring the tail\n\t\t// at the file's current EOF — so the corrupt line (and any records\n\t\t// that were buffered alongside it) are skipped and subsequent\n\t\t// commands are processed again. A short delay before resume avoids a\n\t\t// busy spin if the tail keeps failing. The publisher's reply-tail\n\t\t// already uses `onDecodeError: 'skip'` for the same NDJSON-tolerance\n\t\t// reason; this gives the command-subscriber side equivalent\n\t\t// resilience without touching the shared subscriber.\n\t\tconst consumeCommands: Effect.Effect<void, never, Scope.Scope> = subscriber.commands\n\t\t\t.pipe(\n\t\t\t\tStream.runForEach((record) =>\n\t\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\t\tif (!isEngineCommand(record.command)) {\n\t\t\t\t\t\t\tyield* subscriber\n\t\t\t\t\t\t\t\t.fail(record.id, 'invalid command', 'command payload did not match EngineCommand')\n\t\t\t\t\t\t\t\t.pipe(Effect.catch(() => Effect.void));\n\t\t\t\t\t\t\treturn;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tconst cmd: EngineCommand = record.command;\n\t\t\t\t\t\t// Snapshot capture is a background task in the supervisor:\n\t\t\t\t\t\t// `runCommand` returns as soon as the fork is scheduled, so\n\t\t\t\t\t\t// auto-acking here would race the actual capture. We defer\n\t\t\t\t\t\t// ack/fail until the matching `snapshot.captured` /\n\t\t\t\t\t\t// `snapshot.captureFailed` / `snapshot.captureSkipped` event\n\t\t\t\t\t\t// flows through `publishEvent` below.\n\t\t\t\t\t\tif (cmd.tag === 'snapshot.capture') {\n\t\t\t\t\t\t\tif (cmd.snapshotId === undefined) {\n\t\t\t\t\t\t\t\t// Without a snapshotId we cannot correlate the completion\n\t\t\t\t\t\t\t\t// event back to this command record. Fall through to the\n\t\t\t\t\t\t\t\t// legacy auto-ack path — the CLI side mints an id today, so\n\t\t\t\t\t\t\t\t// this branch is defensive.\n\t\t\t\t\t\t\t\tyield* params.handle.runCommand(cmd).pipe(\n\t\t\t\t\t\t\t\t\tEffect.andThen(subscriber.ack(record.id)),\n\t\t\t\t\t\t\t\t\tEffect.catchCause((cause) =>\n\t\t\t\t\t\t\t\t\t\tsubscriber\n\t\t\t\t\t\t\t\t\t\t\t.fail(\n\t\t\t\t\t\t\t\t\t\t\t\trecord.id,\n\t\t\t\t\t\t\t\t\t\t\t\t'command failed',\n\t\t\t\t\t\t\t\t\t\t\t\tCause.pretty(cause as Cause.Cause<unknown>),\n\t\t\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\t\t\t.pipe(Effect.catch(() => Effect.void)),\n\t\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t\treturn;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tyield* Ref.update(pendingCaptures, (map) => {\n\t\t\t\t\t\t\t\tconst next = new Map(map);\n\t\t\t\t\t\t\t\tnext.set(cmd.snapshotId!, {\n\t\t\t\t\t\t\t\t\tcommandId: record.id,\n\t\t\t\t\t\t\t\t\tsnapshotId: cmd.snapshotId!,\n\t\t\t\t\t\t\t\t\t...(cmd.name === undefined ? {} : { name: cmd.name }),\n\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\treturn next;\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\tyield* params.handle.runCommand(cmd).pipe(\n\t\t\t\t\t\t\t\tEffect.catchCause((cause) =>\n\t\t\t\t\t\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\t\t\t\t\t\t// Synchronous dispatch failure (e.g. command-loop refused).\n\t\t\t\t\t\t\t\t\t\t// Drain the pending entry and surface the failure now.\n\t\t\t\t\t\t\t\t\t\tyield* Ref.update(pendingCaptures, (map) => {\n\t\t\t\t\t\t\t\t\t\t\tconst next = new Map(map);\n\t\t\t\t\t\t\t\t\t\t\tnext.delete(cmd.snapshotId!);\n\t\t\t\t\t\t\t\t\t\t\treturn next;\n\t\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t\t\tyield* subscriber\n\t\t\t\t\t\t\t\t\t\t\t.fail(\n\t\t\t\t\t\t\t\t\t\t\t\trecord.id,\n\t\t\t\t\t\t\t\t\t\t\t\t'command failed',\n\t\t\t\t\t\t\t\t\t\t\t\tCause.pretty(cause as Cause.Cause<unknown>),\n\t\t\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\t\t\t.pipe(Effect.catch(() => Effect.void));\n\t\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\treturn;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tyield* params.handle.runCommand(cmd).pipe(\n\t\t\t\t\t\t\tEffect.andThen(subscriber.ack(record.id)),\n\t\t\t\t\t\t\tEffect.catchCause((cause) =>\n\t\t\t\t\t\t\t\tsubscriber\n\t\t\t\t\t\t\t\t\t.fail(record.id, 'command failed', Cause.pretty(cause as Cause.Cause<unknown>))\n\t\t\t\t\t\t\t\t\t.pipe(Effect.catch(() => Effect.void)),\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t);\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t\t)\n\t\t\t.pipe(\n\t\t\t\tEffect.catchCause((cause): Effect.Effect<void, never, Scope.Scope> => {\n\t\t\t\t\t// Scope-close interrupts this forked fiber via an interrupt\n\t\t\t\t\t// cause. Re-raise it so the fork stops cleanly on `up`\n\t\t\t\t\t// teardown — resuming here would leak the fiber and spam\n\t\t\t\t\t// stderr forever.\n\t\t\t\t\tif (Cause.hasInterrupts(cause as Cause.Cause<unknown>)) {\n\t\t\t\t\t\treturn Effect.failCause(cause as Cause.Cause<never>);\n\t\t\t\t\t}\n\t\t\t\t\t// Otherwise a stream-level failure (e.g. a corrupt NDJSON\n\t\t\t\t\t// line tripping the subscriber's `onDecodeError: 'fail'`\n\t\t\t\t\t// default). Log it, pause briefly to avoid a busy spin, then\n\t\t\t\t\t// re-subscribe by recursing — a fresh tail re-anchors at the\n\t\t\t\t\t// file's current EOF, so the next command is processed\n\t\t\t\t\t// instead of IPC wedging for the session.\n\t\t\t\t\treturn Effect.sync(() => {\n\t\t\t\t\t\tprocess.stderr.write(\n\t\t\t\t\t\t\t`command channel decode failed; resuming tail: ${Cause.pretty(cause as Cause.Cause<unknown>)}\\n`,\n\t\t\t\t\t\t);\n\t\t\t\t\t}).pipe(\n\t\t\t\t\t\tEffect.andThen(Effect.sleep('200 millis')),\n\t\t\t\t\t\tEffect.andThen(Effect.suspend(() => consumeCommands)),\n\t\t\t\t\t);\n\t\t\t\t}),\n\t\t\t);\n\n\t\tyield* Effect.forkScoped(consumeCommands);\n\n\t\tconst publishEvent = (event: EngineEvent): Effect.Effect<void> =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\t// First, route the event to the events file so peer\n\t\t\t\t// subscribers see it. THEN drain any matching pending\n\t\t\t\t// capture so the ack lands after the engine event — this\n\t\t\t\t// preserves the \"captured before ack\" ordering tests rely\n\t\t\t\t// on (test/cli/main.test.ts:483-491 publishes captured then\n\t\t\t\t// acks; we mirror that ordering from the supervisor side).\n\t\t\t\tyield* subscriber.publishEvent(event).pipe(Effect.catch(() => Effect.void));\n\t\t\t\tconst ackFromEvent = snapshotCaptureAckFromEvent(event);\n\t\t\t\tif (ackFromEvent === null) return;\n\t\t\t\tconst pending = yield* Ref.modify(pendingCaptures, (map) => {\n\t\t\t\t\tconst entry = map.get(ackFromEvent.snapshotId);\n\t\t\t\t\tif (entry === undefined) return [null, map];\n\t\t\t\t\tconst next = new Map(map);\n\t\t\t\t\tnext.delete(ackFromEvent.snapshotId);\n\t\t\t\t\treturn [entry, next];\n\t\t\t\t});\n\t\t\t\tif (pending === null) return;\n\t\t\t\tif (ackFromEvent.payload.kind === 'captured') {\n\t\t\t\t\tyield* subscriber\n\t\t\t\t\t\t.ack(pending.commandId, 'captured', ackFromEvent.payload)\n\t\t\t\t\t\t.pipe(Effect.catch(() => Effect.void));\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tif (ackFromEvent.payload.kind === 'failed') {\n\t\t\t\t\tyield* subscriber\n\t\t\t\t\t\t.fail(\n\t\t\t\t\t\t\tpending.commandId,\n\t\t\t\t\t\t\t'snapshot capture failed',\n\t\t\t\t\t\t\tackFromEvent.payload.summary,\n\t\t\t\t\t\t\tackFromEvent.payload,\n\t\t\t\t\t\t)\n\t\t\t\t\t\t.pipe(Effect.catch(() => Effect.void));\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\t// skipped\n\t\t\t\tyield* subscriber\n\t\t\t\t\t.fail(\n\t\t\t\t\t\tpending.commandId,\n\t\t\t\t\t\t'snapshot capture skipped',\n\t\t\t\t\t\tackFromEvent.payload.reason,\n\t\t\t\t\t\tackFromEvent.payload,\n\t\t\t\t\t)\n\t\t\t\t\t.pipe(Effect.catch(() => Effect.void));\n\t\t\t});\n\n\t\treturn { publishEvent };\n\t});\n\n/**\n * Run `devstack up`. Wires the substrate Layer stack, supervisor,\n * attached renderer, and in-process TUI command queue. The Effect runs\n * as the outer Node fiber so SIGINT reaches scope finalizers.\n *\n * Returns a typed `CommandResult` / fails with a typed `CliError` so\n * the dispatcher's `emitFailure` renders the envelope (JSON mode) or\n * human-mode stderr line. Wirings MUST NOT write raw bytes to\n * `process.stderr` or mutate `process.exitCode` for terminal failures —\n * the dispatcher owns the projection.\n */\nexport const runUpLive = (\n\tconfigPath: string | undefined,\n\tidentity: ResolvedIdentity,\n\toptions: {\n\t\treadonly renderer: GlobalFlags['renderer'];\n\t\treadonly stdoutIsTty: boolean;\n\t},\n): Effect.Effect<CommandResult, CliError> => {\n\tconst loader = makeConfigLoader();\n\treturn Effect.gen(function* () {\n\t\tconst loadExit = yield* Effect.exit(loader.load(configPath));\n\t\tif (Exit.isFailure(loadExit)) {\n\t\t\treturn yield* Effect.fail(cliErrorFromConfigExit(loadExit));\n\t\t}\n\t\tconst loaded = loadExit.value;\n\t\tconst stack = (loaded as LoadedConfig & { readonly stack: SupervisedStack }).stack;\n\n\t\t// Re-derive the identity against the EFFECTIVE stack (explicit\n\t\t// `--stack`/`$DEVSTACK_STACK` > `config.stackName` > inferred) so\n\t\t// the roster lock, command channel, and container/router naming all\n\t\t// target the same stack the operator selected — matching what\n\t\t// `snapshot.ts` already does. Without this, an explicit `--stack`\n\t\t// would boot the supervisor under the config's `stackName` and a\n\t\t// concurrent default-stack `up` would falsely collide on the live\n\t\t// supervisor (`error: supervisor live for <app>/<stack>`, exit 40).\n\t\tconst effectiveIdentity = resolvedIdentityForStack(identity, stack);\n\t\tconst identityValue: Identity = identityValueFor(effectiveIdentity);\n\n\t\tconst appRoot = dirname(loaded.resolvedConfigPath);\n\t\tconst rendererMode = resolveUpRendererMode({\n\t\t\tcliRenderer: options.renderer,\n\t\t\tstackRenderer: stack.options.renderer,\n\t\t\tstdoutIsTty: options.stdoutIsTty,\n\t\t});\n\t\tconst substrateLayers = buildVerbLayers({\n\t\t\tidentity: identityValue,\n\t\t\tstack,\n\t\t\tappRoot,\n\t\t\truntimeRoot: effectiveIdentity.runtimeRoot,\n\t\t});\n\n\t\tconst program = Effect.gen(function* () {\n\t\t\tconst state = yield* makeProjectionRef();\n\t\t\tconst snapshot = yield* SnapshotOrchestratorService;\n\t\t\tconst fs = yield* FileSystem.FileSystem;\n\t\t\tconst snapshotCommandHandler = makeSnapshotCommandHandler({\n\t\t\t\tsnapshot,\n\t\t\t\tfs,\n\t\t\t\truntimeRoot: effectiveIdentity.runtimeRoot,\n\t\t\t});\n\t\t\tconst orchestratorSinks = yield* buildProductionOrchestratorSinks();\n\t\t\tconst postAcquireHook = yield* buildProductionPostAcquireHook({\n\t\t\t\textras: stack.options.extras,\n\t\t\t});\n\t\t\tyield* superviseStackEffect(\n\t\t\t\t{ _tag: 'Stack', members: stack.members, options: stack.options },\n\t\t\t\tidentityValue,\n\t\t\t\tstate,\n\t\t\t\t{\n\t\t\t\t\torchestratorSinks,\n\t\t\t\t\tcommandHandler: snapshotCommandHandler,\n\t\t\t\t\tpostAcquireHook,\n\t\t\t\t\textendContext: extendBuiltInPluginContext,\n\t\t\t\t\tbeforeInitialAcquire: (handle) =>\n\t\t\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\t\t\tconst stackPaths = yield* StackPathsService;\n\t\t\t\t\t\t\t// Reconcile any half-promoted snapshot restore from a\n\t\t\t\t\t\t\t// prior supervise (process hard-killed mid `tagImage`\n\t\t\t\t\t\t\t// loop, Docker daemon outage, etc.) BEFORE any plugin\n\t\t\t\t\t\t\t// acquire fires. The scanner is idempotent and a no-op\n\t\t\t\t\t\t\t// when no marker is present; partial recovery surfaces\n\t\t\t\t\t\t\t// via the returned summary's `stillPending` list which\n\t\t\t\t\t\t\t// we log so the operator can investigate.\n\t\t\t\t\t\t\tconst recovery = yield* snapshot.recoverPendingRestore.pipe(\n\t\t\t\t\t\t\t\tEffect.tapCause((cause) =>\n\t\t\t\t\t\t\t\t\tEffect.sync(() => {\n\t\t\t\t\t\t\t\t\t\tprocess.stderr.write(\n\t\t\t\t\t\t\t\t\t\t\t`snapshot recovery scan failed: ${Cause.pretty(cause as Cause.Cause<unknown>)}\\n`,\n\t\t\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t\tEffect.catch(() => Effect.succeed(null)),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tif (recovery && !recovery.noMarker) {\n\t\t\t\t\t\t\t\tconst summary = `snapshot.recover-pending: inspected=${recovery.inspected} recovered=${recovery.recovered} stillPending=${recovery.stillPending.length} markerCleared=${recovery.markerCleared}`;\n\t\t\t\t\t\t\t\tprocess.stderr.write(`${summary}\\n`);\n\t\t\t\t\t\t\t\tif (recovery.stillPending.length > 0) {\n\t\t\t\t\t\t\t\t\tfor (const entry of recovery.stillPending) {\n\t\t\t\t\t\t\t\t\t\tprocess.stderr.write(\n\t\t\t\t\t\t\t\t\t\t\t`  pending: ${entry.targetImageName} ← ${entry.stagedImageTag} (${entry.plugin}/${entry.role})\\n`,\n\t\t\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tconst commandChannel = yield* installCommandChannelBridge({\n\t\t\t\t\t\t\t\tstackRoot: stackPaths.stackRoot,\n\t\t\t\t\t\t\t\thandle,\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\tyield* installLiveSupervisorRoster({\n\t\t\t\t\t\t\t\tstackRoot: stackPaths.stackRoot,\n\t\t\t\t\t\t\t\tapp: String(identityValue.app),\n\t\t\t\t\t\t\t\tstack: String(identityValue.stack),\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\tconst rendererEvents = yield* Queue.unbounded<EngineEvent>();\n\t\t\t\t\t\t\tconst renderer = makeTuiSurface({\n\t\t\t\t\t\t\t\tmode: rendererMode,\n\t\t\t\t\t\t\t\tpublishCommand: makeQueueCommandPublisher(handle.commands),\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\tyield* Effect.addFinalizer(() =>\n\t\t\t\t\t\t\t\trenderer.flush.pipe(Effect.catch(() => Effect.void)),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tyield* Effect.forkScoped(\n\t\t\t\t\t\t\t\trenderer.mount(handle.state, Stream.fromQueue(rendererEvents)).pipe(\n\t\t\t\t\t\t\t\t\tEffect.catch((cause) =>\n\t\t\t\t\t\t\t\t\t\tEffect.sync(() => {\n\t\t\t\t\t\t\t\t\t\t\tprocess.stderr.write(`renderer failed: ${cause.detail ?? String(cause)}\\n`);\n\t\t\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tyield* Effect.forkScoped(\n\t\t\t\t\t\t\t\tpersistProjectionChanges(stackPaths.stackRoot, handle.state),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tyield* Effect.forkScoped(\n\t\t\t\t\t\t\t\tStream.fromQueue(handle.events).pipe(\n\t\t\t\t\t\t\t\t\tStream.runForEach((event) =>\n\t\t\t\t\t\t\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\t\t\t\t\t\t\tyield* Queue.offer(rendererEvents, event);\n\t\t\t\t\t\t\t\t\t\t\tyield* commandChannel.publishEvent(event);\n\t\t\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}),\n\t\t\t\t},\n\t\t\t).pipe(Effect.provide(layerBuiltInPluginRuntime(orchestratorSinks)));\n\t\t});\n\n\t\t// `Effect.matchCauseEffect` projects the inner program's\n\t\t// cause to a typed `CliError` outcome — `CliSupervisorLiveError`\n\t\t// when the roster-claim path failed, otherwise a wrapped\n\t\t// `CliInternalError` whose `cause` carries the cascade for the\n\t\t// envelope renderer's `error.chain[]`.\n\t\treturn yield* program.pipe(\n\t\t\tEffect.provide(substrateLayers),\n\t\t\tEffect.provide(Logger.layer([])),\n\t\t\tEffect.matchCauseEffect({\n\t\t\t\tonFailure: (cause): Effect.Effect<CommandResult, CliError> => {\n\t\t\t\t\tconst live = findCliSupervisorLiveError(cause as Cause.Cause<unknown>);\n\t\t\t\t\tif (live !== null) {\n\t\t\t\t\t\treturn Effect.fail(live);\n\t\t\t\t\t}\n\t\t\t\t\treturn Effect.fail(\n\t\t\t\t\t\tnew CliInternalError({\n\t\t\t\t\t\t\tmessage: 'stack failed',\n\t\t\t\t\t\t\tcause: Cause.pretty(cause as Cause.Cause<unknown>),\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t},\n\t\t\t\tonSuccess: (): Effect.Effect<CommandResult, CliError> =>\n\t\t\t\t\tEffect.succeed({ exitCode: ExitCode.OK }),\n\t\t\t}),\n\t\t);\n\t});\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AA4EA,MAAM,kBAAkB,eAAuB;CAC9C,eAAeA,QAAY,WAAW,aAAa;CACnD,YAAYA,QAAY,WAAW,cAAc;CACjD;AAiBD,MAAM,8BAA8B,WAIJ;AAC/B,SAAQ,KAAK,eAAe;AAC3B,UAAQ,IAAI,KAAZ;GACC,KAAK,mBACJ,QAAO,gBAAgB;IACtB,YAAY,IAAI;IAChB,MAAM,IAAI;IACV,aAAa,aACZ,WAAW,QAAQ;KAClB,KAAK;KACL,GAAI,IAAI,eAAe,KAAA,IAAY,EAAE,GAAG,EAAE,YAAY,IAAI,YAAY;KACtE,GAAI,IAAI,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,IAAI,MAAM;KACpD,OAAO,SAAS;KAChB,GAAI,SAAS,WAAW,KAAA,IAAY,EAAE,GAAG,EAAE,QAAQ,SAAS,QAAQ;KACpE,GAAI,SAAS,qBAAqB,KAAA,IAC/B,EAAE,GACF,EAAE,kBAAkB,SAAS,kBAAkB;KAClD,GAAI,SAAS,oBAAoB,KAAA,IAC9B,EAAE,GACF,EAAE,iBAAiB,SAAS,iBAAiB;KAChD,IAAI,KAAK,KAAK;KACd,CAAC;IACH,CAAC,CAAC,KACF,OAAO,eAAe,6BAA6B,OAAO,SAAS,EACnE,OAAO,eAAe,WAAW,YAAY,OAAO,GAAG,EACvD,OAAO,KAAK,SAAS,CACpB;IACC,KAAK;IACL,YAAY,KAAK;IACjB,GAAI,KAAK,UAAU,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO;IACnD,IAAI,KAAK,KAAK;IACd,CACD,CAAC,CACF;GACF,KAAK,mBACJ,QAAO,kBAAkB,OAAO,IAAI,OAAO,SAAS,QAAQ,EAAE,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC,KACpF,OAAO,KAAK,SAAS,CACpB;IACC,KAAK;IACL,YAAY,KAAK;IACjB,IAAI,KAAK,KAAK;IACd,CACD,CAAC,CACF;GACF,KAAK,gBACJ,QAAO,kBAAkB,OAAO,IAAI,OAAO,SAAS,KAAK,CAAC,KAAK,OAAO,GAAG,EAAE,CAAC,CAAC;GAC9E,KAAK,kBACJ,QAAO,kBAAkB,OAAO,IAAI,OAAO,SAAS,OAAO,IAAI,WAAW,CAAC,CAAC,KAC3E,OAAO,GAAG,EAAE,CAAC,CACb;GACF,KAAK,iBACJ,QAAO,kBAAkB,OAAO,IAAI,OAAO,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,GAAG,EAAE,CAAC,CAAC;GAClF,KAAK,kBAWJ,QAAO,+BAA+B,EAAE,aAAa,OAAO,aAAa,CAAC,CAAC,KAC1E,OAAO,SAAS,cACf,kBACC,EAAE,aAAa,OAAO,aAAa,EACnC;IACC,WAAW,+BACV,WACA,kCACA;IACD,WAAW;IACX,QAAQ;IACR,CACD,CACD,EACD,OAAO,GAAG,EAAE,CAAC,CACb;GACF,QACC,QAAO,OAAO,QAAQ,EAAE,CAAC;;;;AAK7B,MAAM,+BAA+B,WAKpC,OAAO,IAAI,aAAa;CACvB,MAAM,QAAQ,eAAe,OAAO,UAAU;AAE9C,KAAI,EAAC,OADkB,MAAM,MAAM,EACtB,YAAY;AACxB,SAAO,QAAQ,MAAM,CAAC,KAAK,OAAO,YAAY,OAAO,KAAK,CAAC;AAC3D,SAAO,OAAO,OAAO,KACpB,IAAI,uBAAuB;GAC1B,KAAK,OAAO;GACZ,OAAO,OAAO;GACd,MAAM;GACN,CAAC,CACF;;AAEF,QAAO,OAAO,mBAAmB,QAAQ,MAAM,CAAC,KAAK,OAAO,YAAY,OAAO,KAAK,CAAC,CAAC;AACtF,QAAO,OAAO,WAAW,eAAe,MAAM,CAAC;EAC9C;;;;;;AAaH,MAAM,+BACL,UACyF;AACzF,KAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;CACxD,MAAM,SAAS;AAOf,KAAI,OAAO,OAAO,eAAe,SAAU,QAAO;AAClD,KAAI,OAAO,QAAQ,oBAClB,QAAO;EACN,YAAY,OAAO;EACnB,SAAS;GACR,MAAM;GACN,YAAY,OAAO;GACnB,GAAI,OAAO,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,OAAO,MAAM;GAC1D;EACD;AAEF,KAAI,OAAO,QAAQ,yBAClB,QAAO;EACN,YAAY,OAAO;EACnB,SAAS;GACR,MAAM;GACN,YAAY,OAAO;GACnB,GAAI,OAAO,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,OAAO,MAAM;GAC1D,GAAI,OAAO,OAAO,YAAY,WAAW,EAAE,SAAS,OAAO,SAAS,GAAG,EAAE;GACzE;EACD;AAEF,KAAI,OAAO,QAAQ,0BAClB,QAAO;EACN,YAAY,OAAO;EACnB,SAAS;GACR,MAAM;GACN,YAAY,OAAO;GACnB,GAAI,OAAO,OAAO,WAAW,WAAW,EAAE,QAAQ,OAAO,QAAQ,GAAG,EAAE;GACtE;EACD;AAEF,QAAO;;AAGR,MAAM,+BAA+B,WAUpC,OAAO,IAAI,aAAa;CACvB,MAAM,aAAa,OAAO,6BAA6B,oBAAoB,OAAO,UAAU,EAAE,EAC7F,YAAY,WACZ,CAAC;CAKF,MAAM,kBAAkB,OAAO,IAAI,qBAAkD,IAAI,KAAK,CAAC;CAqB/F,MAAM,kBAA2D,WAAW,SAC1E,KACA,OAAO,YAAY,WAClB,OAAO,IAAI,aAAa;AACvB,MAAI,CAAC,gBAAgB,OAAO,QAAQ,EAAE;AACrC,UAAO,WACL,KAAK,OAAO,IAAI,mBAAmB,8CAA8C,CACjF,KAAK,OAAO,YAAY,OAAO,KAAK,CAAC;AACvC;;EAED,MAAM,MAAqB,OAAO;AAOlC,MAAI,IAAI,QAAQ,oBAAoB;AACnC,OAAI,IAAI,eAAe,KAAA,GAAW;AAKjC,WAAO,OAAO,OAAO,WAAW,IAAI,CAAC,KACpC,OAAO,QAAQ,WAAW,IAAI,OAAO,GAAG,CAAC,EACzC,OAAO,YAAY,UAClB,WACE,KACA,OAAO,IACP,kBACA,MAAM,OAAO,MAA8B,CAC3C,CACA,KAAK,OAAO,YAAY,OAAO,KAAK,CAAC,CACvC,CACD;AACD;;AAED,UAAO,IAAI,OAAO,kBAAkB,QAAQ;IAC3C,MAAM,OAAO,IAAI,IAAI,IAAI;AACzB,SAAK,IAAI,IAAI,YAAa;KACzB,WAAW,OAAO;KAClB,YAAY,IAAI;KAChB,GAAI,IAAI,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,IAAI,MAAM;KACpD,CAAC;AACF,WAAO;KACN;AACF,UAAO,OAAO,OAAO,WAAW,IAAI,CAAC,KACpC,OAAO,YAAY,UAClB,OAAO,IAAI,aAAa;AAGvB,WAAO,IAAI,OAAO,kBAAkB,QAAQ;KAC3C,MAAM,OAAO,IAAI,IAAI,IAAI;AACzB,UAAK,OAAO,IAAI,WAAY;AAC5B,YAAO;MACN;AACF,WAAO,WACL,KACA,OAAO,IACP,kBACA,MAAM,OAAO,MAA8B,CAC3C,CACA,KAAK,OAAO,YAAY,OAAO,KAAK,CAAC;KACtC,CACF,CACD;AACD;;AAED,SAAO,OAAO,OAAO,WAAW,IAAI,CAAC,KACpC,OAAO,QAAQ,WAAW,IAAI,OAAO,GAAG,CAAC,EACzC,OAAO,YAAY,UAClB,WACE,KAAK,OAAO,IAAI,kBAAkB,MAAM,OAAO,MAA8B,CAAC,CAC9E,KAAK,OAAO,YAAY,OAAO,KAAK,CAAC,CACvC,CACD;GACA,CACF,CACD,CACA,KACA,OAAO,YAAY,UAAmD;AAKrE,MAAI,MAAM,cAAc,MAA8B,CACrD,QAAO,OAAO,UAAU,MAA4B;AAQrD,SAAO,OAAO,WAAW;AACxB,WAAQ,OAAO,MACd,iDAAiD,MAAM,OAAO,MAA8B,CAAC,IAC7F;IACA,CAAC,KACF,OAAO,QAAQ,OAAO,MAAM,aAAa,CAAC,EAC1C,OAAO,QAAQ,OAAO,cAAc,gBAAgB,CAAC,CACrD;GACA,CACF;AAEF,QAAO,OAAO,WAAW,gBAAgB;CAEzC,MAAM,gBAAgB,UACrB,OAAO,IAAI,aAAa;AAOvB,SAAO,WAAW,aAAa,MAAM,CAAC,KAAK,OAAO,YAAY,OAAO,KAAK,CAAC;EAC3E,MAAM,eAAe,4BAA4B,MAAM;AACvD,MAAI,iBAAiB,KAAM;EAC3B,MAAM,UAAU,OAAO,IAAI,OAAO,kBAAkB,QAAQ;GAC3D,MAAM,QAAQ,IAAI,IAAI,aAAa,WAAW;AAC9C,OAAI,UAAU,KAAA,EAAW,QAAO,CAAC,MAAM,IAAI;GAC3C,MAAM,OAAO,IAAI,IAAI,IAAI;AACzB,QAAK,OAAO,aAAa,WAAW;AACpC,UAAO,CAAC,OAAO,KAAK;IACnB;AACF,MAAI,YAAY,KAAM;AACtB,MAAI,aAAa,QAAQ,SAAS,YAAY;AAC7C,UAAO,WACL,IAAI,QAAQ,WAAW,YAAY,aAAa,QAAQ,CACxD,KAAK,OAAO,YAAY,OAAO,KAAK,CAAC;AACvC;;AAED,MAAI,aAAa,QAAQ,SAAS,UAAU;AAC3C,UAAO,WACL,KACA,QAAQ,WACR,2BACA,aAAa,QAAQ,SACrB,aAAa,QACb,CACA,KAAK,OAAO,YAAY,OAAO,KAAK,CAAC;AACvC;;AAGD,SAAO,WACL,KACA,QAAQ,WACR,4BACA,aAAa,QAAQ,QACrB,aAAa,QACb,CACA,KAAK,OAAO,YAAY,OAAO,KAAK,CAAC;GACtC;AAEH,QAAO,EAAE,cAAc;EACtB;;;;;;;;;;;;AAaH,MAAa,aACZ,YACA,UACA,YAI4C;CAC5C,MAAM,SAAS,kBAAkB;AACjC,QAAO,OAAO,IAAI,aAAa;EAC9B,MAAM,WAAW,OAAO,OAAO,KAAK,OAAO,KAAK,WAAW,CAAC;AAC5D,MAAI,KAAK,UAAU,SAAS,CAC3B,QAAO,OAAO,OAAO,KAAK,uBAAuB,SAAS,CAAC;EAE5D,MAAM,SAAS,SAAS;EACxB,MAAM,QAAS,OAA8D;EAU7E,MAAM,oBAAoB,yBAAyB,UAAU,MAAM;EACnE,MAAM,gBAA0B,iBAAiB,kBAAkB;EAEnE,MAAM,UAAU,QAAQ,OAAO,mBAAmB;EAClD,MAAM,eAAe,sBAAsB;GAC1C,aAAa,QAAQ;GACrB,eAAe,MAAM,QAAQ;GAC7B,aAAa,QAAQ;GACrB,CAAC;EACF,MAAM,kBAAkB,gBAAgB;GACvC,UAAU;GACV;GACA;GACA,aAAa,kBAAkB;GAC/B,CAAC;AAwGF,SAAO,OAtGS,OAAO,IAAI,aAAa;GACvC,MAAM,QAAQ,OAAO,mBAAmB;GACxC,MAAM,WAAW,OAAO;GAExB,MAAM,yBAAyB,2BAA2B;IACzD;IACA,IAAA,OAHiB,WAAW;IAI5B,aAAa,kBAAkB;IAC/B,CAAC;GACF,MAAM,oBAAoB,OAAO,kCAAkC;GACnE,MAAM,kBAAkB,OAAO,+BAA+B,EAC7D,QAAQ,MAAM,QAAQ,QACtB,CAAC;AACF,UAAO,qBACN;IAAE,MAAM;IAAS,SAAS,MAAM;IAAS,SAAS,MAAM;IAAS,EACjE,eACA,OACA;IACC;IACA,gBAAgB;IAChB;IACA,eAAe;IACf,uBAAuB,WACtB,OAAO,IAAI,aAAa;KACvB,MAAM,aAAa,OAAO;KAQ1B,MAAM,WAAW,OAAO,SAAS,sBAAsB,KACtD,OAAO,UAAU,UAChB,OAAO,WAAW;AACjB,cAAQ,OAAO,MACd,kCAAkC,MAAM,OAAO,MAA8B,CAAC,IAC9E;OACA,CACF,EACD,OAAO,YAAY,OAAO,QAAQ,KAAK,CAAC,CACxC;AACD,SAAI,YAAY,CAAC,SAAS,UAAU;MACnC,MAAM,UAAU,uCAAuC,SAAS,UAAU,aAAa,SAAS,UAAU,gBAAgB,SAAS,aAAa,OAAO,iBAAiB,SAAS;AACjL,cAAQ,OAAO,MAAM,GAAG,QAAQ,IAAI;AACpC,UAAI,SAAS,aAAa,SAAS,EAClC,MAAK,MAAM,SAAS,SAAS,aAC5B,SAAQ,OAAO,MACd,cAAc,MAAM,gBAAgB,KAAK,MAAM,eAAe,IAAI,MAAM,OAAO,GAAG,MAAM,KAAK,KAC7F;;KAIJ,MAAM,iBAAiB,OAAO,4BAA4B;MACzD,WAAW,WAAW;MACtB;MACA,CAAC;AACF,YAAO,4BAA4B;MAClC,WAAW,WAAW;MACtB,KAAK,OAAO,cAAc,IAAI;MAC9B,OAAO,OAAO,cAAc,MAAM;MAClC,CAAC;KACF,MAAM,iBAAiB,OAAO,MAAM,WAAwB;KAC5D,MAAM,WAAW,eAAe;MAC/B,MAAM;MACN,gBAAgB,0BAA0B,OAAO,SAAS;MAC1D,CAAC;AACF,YAAO,OAAO,mBACb,SAAS,MAAM,KAAK,OAAO,YAAY,OAAO,KAAK,CAAC,CACpD;AACD,YAAO,OAAO,WACb,SAAS,MAAM,OAAO,OAAO,OAAO,UAAU,eAAe,CAAC,CAAC,KAC9D,OAAO,OAAO,UACb,OAAO,WAAW;AACjB,cAAQ,OAAO,MAAM,oBAAoB,MAAM,UAAU,OAAO,MAAM,CAAC,IAAI;OAC1E,CACF,CACD,CACD;AACD,YAAO,OAAO,WACb,yBAAyB,WAAW,WAAW,OAAO,MAAM,CAC5D;AACD,YAAO,OAAO,WACb,OAAO,UAAU,OAAO,OAAO,CAAC,KAC/B,OAAO,YAAY,UAClB,OAAO,IAAI,aAAa;AACvB,aAAO,MAAM,MAAM,gBAAgB,MAAM;AACzC,aAAO,eAAe,aAAa,MAAM;OACxC,CACF,CACD,CACD;MACA;IACH,CACD,CAAC,KAAK,OAAO,QAAQ,0BAA0B,kBAAkB,CAAC,CAAC;IAQhD,CAAC,KACrB,OAAO,QAAQ,gBAAgB,EAC/B,OAAO,QAAQ,OAAO,MAAM,EAAE,CAAC,CAAC,EAChC,OAAO,iBAAiB;GACvB,YAAY,UAAkD;IAC7D,MAAM,OAAO,2BAA2B,MAA8B;AACtE,QAAI,SAAS,KACZ,QAAO,OAAO,KAAK,KAAK;AAEzB,WAAO,OAAO,KACb,IAAI,iBAAiB;KACpB,SAAS;KACT,OAAO,MAAM,OAAO,MAA8B;KAClD,CAAC,CACF;;GAEF,iBACC,OAAO,QAAQ,EAAE,UAAU,SAAS,IAAI,CAAC;GAC1C,CAAC,CACF;GACA"}
+{"version":3,"file":"up.mjs","names":["resolvePath"],"sources":["../../../src/cli/wirings/up.ts"],"sourcesContent":["// `devstack up` verb wiring.\n//\n// Wires the substrate Layer stack, supervisor, attached renderer, and\n// in-process TUI command queue. The Effect runs as the outer Node fiber\n// so SIGINT reaches scope finalizers (see surfaces/cli/index.ts\n// architecture invariant).\n//\n// Logger layer: `Logger.layer([])` (silent). `up` owns the TUI, which is\n// the operator-facing output channel; routing structured `Effect.log*`\n// records to stderr would scribble on top of the live ink renderer in\n// human mode and would duplicate the structured event stream the plain\n// renderer already emits in non-TTY mode. The sibling `apply` verb (no\n// TUI) uses `Logger.consolePretty()` because its consumer is CI.\n\nimport { dirname, resolve as resolvePath } from 'node:path';\n\nimport { Cause, Effect, Exit, FileSystem, Queue, Scope, Stream } from 'effect';\n\nimport type { Identity } from '../../substrate/identity.ts';\nimport type { EngineEvent } from '../../substrate/events.ts';\nimport { StackPathsService } from '../../substrate/runtime/paths.ts';\nimport {\n\tclaim,\n\theartbeatFiber,\n\trelease,\n\ttype SupervisedStack,\n\ttype SupervisorCommandHandler,\n} from '../../substrate/runtime/index.ts';\nimport {\n\tcollectLifecyclePruneInventory,\n\tdefaultLifecyclePruneSelection,\n\tDEFAULT_LIFECYCLE_PRUNE_RESOURCES,\n\trunLifecyclePrune,\n} from '../../orchestrators/lifecycle-prune/index.ts';\nimport {\n\tcomputeSnapshotGraphInputFromStack,\n\trecoverInterruptedRestore,\n\tSnapshotOrchestratorService,\n} from '../../orchestrators/snapshot/index.ts';\nimport type { Stack } from '../../api/define-devstack.ts';\nimport {\n\trunStackWithBoot,\n\ttype CommandHandlerFactory,\n\ttype RunStackBootBag,\n} from '../../api/run-stack-internal.ts';\nimport type { BootError } from '../../api/run-stack.ts';\nimport {\n\ttype CliError,\n\tCliInternalError,\n\tCliSnapshotNotFoundError,\n\tCliSupervisorLiveError,\n\tCliUsageError,\n\ttype GlobalFlags,\n} from '../../surfaces/cli/index.ts';\nimport type { CommandResult } from '../../surfaces/cli/commands/index.ts';\nimport { ExitCode } from '../../surfaces/cli/sysexits.ts';\nimport { makeTuiSurface } from '../../surfaces/tui/index.ts';\nimport type { LoadedConfig } from '../../surfaces/cli/commands/config-loader.ts';\n\nimport { cliErrorFromConfigExit } from '../bail.ts';\nimport { makeQueueCommandPublisher, resolveUpRendererMode } from '../up-lifecycle.ts';\nimport { makeConfigLoader } from './config-loader.ts';\nimport { makeSnapshotReader } from '../snapshot-reader.ts';\nimport {\n\tfindCliSupervisorLiveError,\n\tidentityValueFor,\n\tresolvedIdentityForStack,\n\ttype ResolvedIdentity,\n} from './identity.ts';\nimport { installCommandChannelBridge } from './up-ipc.ts';\nimport { provideFileSystem } from './provide-file-system.ts';\nimport { readDevstackVersion } from './read-devstack-version.ts';\n\nconst rosterPathsFor = (stackRoot: string) => ({\n\tstackLockFile: resolvePath(stackRoot, 'stack.lock'),\n\trosterFile: resolvePath(stackRoot, 'roster.json'),\n});\n\n// -----------------------------------------------------------------------------\n// Supervisor command handler — snapshot/wipe/prune injected dispatch\n// -----------------------------------------------------------------------------\n\n/** Build the snapshot/wipe/prune `commandHandler` as a FACTORY the seam\n *  resolves against its LIVE substrate (see `CommandHandlerFactory`). The\n *  factory yields the seam's `SnapshotOrchestratorService` + `FileSystem` —\n *  the SAME orchestrator instance the supervisor's contribution dispatcher\n *  registers live participants on, so an operator `snapshot save` captures\n *  real chain/blob/db state, not an empty set — and returns a handler\n *  (R = `never`, as the command loop requires) that closes over them\n *  directly. No Deferred hand-off: the seam runs this factory before\n *  `startSupervisor` consumes the handler. */\nconst makeSnapshotCommandHandler = (params: {\n\treadonly runtimeRoot: string;\n\treadonly stack: SupervisedStack;\n\treadonly devstackVersion: string;\n}): CommandHandlerFactory =>\n\tEffect.gen(function* () {\n\t\tconst snapshot = yield* SnapshotOrchestratorService;\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tconst computeGraphInput = computeSnapshotGraphInputFromStack({\n\t\t\tstack: params.stack,\n\t\t\tdevstackVersion: params.devstackVersion,\n\t\t});\n\t\tconst handler: SupervisorCommandHandler = (cmd) => {\n\t\t\tswitch (cmd.tag) {\n\t\t\t\tcase 'snapshot.capture':\n\t\t\t\t\t// The L3 capture is the bounce's gather → stop → commit → retag\n\t\t\t\t\t// → hard-rm half; the RESUME (recreate + wait-write-ready) is the\n\t\t\t\t\t// command-loop's converge after this handler succeeds (it owns the\n\t\t\t\t\t// graph), mirroring restore. So no `resume` is injected here.\n\t\t\t\t\treturn provideFileSystem(\n\t\t\t\t\t\tfs,\n\t\t\t\t\t\tcomputeGraphInput.pipe(\n\t\t\t\t\t\t\tEffect.flatMap((graphInput) =>\n\t\t\t\t\t\t\t\tsnapshot.capture({\n\t\t\t\t\t\t\t\t\tid: cmd.snapshotId,\n\t\t\t\t\t\t\t\t\t...(cmd.name === undefined ? {} : { label: cmd.name }),\n\t\t\t\t\t\t\t\t\tgraphInput,\n\t\t\t\t\t\t\t\t\t...(cmd.replaceExisting === true ? { replaceExistingLabel: true } : {}),\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t),\n\t\t\t\t\t).pipe(\n\t\t\t\t\t\tEffect.map((meta) => [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\ttag: 'snapshot.captured',\n\t\t\t\t\t\t\t\tsnapshotId: meta.id,\n\t\t\t\t\t\t\t\t...(meta.label === null ? {} : { name: meta.label }),\n\t\t\t\t\t\t\t\tat: Date.now(),\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t]),\n\t\t\t\t\t);\n\t\t\t\tcase 'snapshot.restore':\n\t\t\t\t\treturn provideFileSystem(\n\t\t\t\t\t\tfs,\n\t\t\t\t\t\tcomputeGraphInput.pipe(\n\t\t\t\t\t\t\tEffect.flatMap((currentGraphInput) =>\n\t\t\t\t\t\t\t\tsnapshot.restore({\n\t\t\t\t\t\t\t\t\tid: cmd.snapshotId,\n\t\t\t\t\t\t\t\t\tcurrentGraphInput,\n\t\t\t\t\t\t\t\t\tgraphInputMismatchPolicy: 'warn',\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t),\n\t\t\t\t\t).pipe(\n\t\t\t\t\t\tEffect.map((meta) => [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\ttag: 'snapshot.restored',\n\t\t\t\t\t\t\t\tsnapshotId: meta.id,\n\t\t\t\t\t\t\t\tat: Date.now(),\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t]),\n\t\t\t\t\t);\n\t\t\t\tcase 'snapshot.list':\n\t\t\t\t\treturn provideFileSystem(fs, snapshot.list).pipe(Effect.as([]));\n\t\t\t\tcase 'snapshot.delete':\n\t\t\t\t\treturn provideFileSystem(fs, snapshot.delete(cmd.snapshotId)).pipe(Effect.as([]));\n\t\t\t\tcase 'wipe.requested':\n\t\t\t\t\treturn provideFileSystem(fs, snapshot.wipe({})).pipe(Effect.as([]));\n\t\t\t\tcase 'prune.requested':\n\t\t\t\t\t// Route to the same orchestrator the offline `devstack prune`\n\t\t\t\t\t// verb uses (`runLifecyclePrune`), NOT the snapshot-orchestrator\n\t\t\t\t\t// prune (which only cleans the snapshot catalog and would leave\n\t\t\t\t\t// stale containers/networks/volumes/images behind for an attached\n\t\t\t\t\t// supervisor — silent under-prune is the bug we're closing).\n\t\t\t\t\t// Live supervisor implies the current stack's group is live and\n\t\t\t\t\t// therefore excluded from the default selection — exactly the\n\t\t\t\t\t// invariant the live-attached `prune` needs (operator can prune\n\t\t\t\t\t// sibling stacks under the same Docker daemon without touching\n\t\t\t\t\t// the running one).\n\t\t\t\t\treturn collectLifecyclePruneInventory({ runtimeRoot: params.runtimeRoot }).pipe(\n\t\t\t\t\t\tEffect.flatMap((inventory) =>\n\t\t\t\t\t\t\trunLifecyclePrune(\n\t\t\t\t\t\t\t\t{ runtimeRoot: params.runtimeRoot },\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\tgroupKeys: defaultLifecyclePruneSelection(\n\t\t\t\t\t\t\t\t\t\tinventory,\n\t\t\t\t\t\t\t\t\t\tDEFAULT_LIFECYCLE_PRUNE_RESOURCES,\n\t\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t\t\tresources: DEFAULT_LIFECYCLE_PRUNE_RESOURCES,\n\t\t\t\t\t\t\t\t\tdryRun: false,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t),\n\t\t\t\t\t\tEffect.as([]),\n\t\t\t\t\t);\n\t\t\t\tdefault:\n\t\t\t\t\treturn Effect.succeed([]);\n\t\t\t}\n\t\t};\n\t\treturn handler;\n\t});\n\nconst installLiveSupervisorRoster = (params: {\n\treadonly stackRoot: string;\n\treadonly app: string;\n\treadonly stack: string;\n}): Effect.Effect<void, unknown, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tconst paths = rosterPathsFor(params.stackRoot);\n\t\tconst claimed = yield* claim(paths);\n\t\tif (!claimed.soleHolder) {\n\t\t\tyield* release(paths).pipe(Effect.catch(() => Effect.void));\n\t\t\treturn yield* Effect.fail(\n\t\t\t\tnew CliSupervisorLiveError({\n\t\t\t\t\tapp: params.app,\n\t\t\t\t\tstack: params.stack,\n\t\t\t\t\thint: 'use `devstack apply` from another shell, or choose a different --stack name',\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\t\tyield* Effect.addFinalizer(() => release(paths).pipe(Effect.catch(() => Effect.void)));\n\t\tyield* Effect.forkScoped(heartbeatFiber(paths));\n\t});\n\n// -----------------------------------------------------------------------------\n// CLI boot bundle — the `commandHandler` + `boot` hooks the seam consumes\n// -----------------------------------------------------------------------------\n\nexport interface UpBootBundleInput {\n\treadonly stack: SupervisedStack;\n\treadonly identityValue: Identity;\n\treadonly runtimeRoot: string;\n\treadonly devstackVersion: string;\n\treadonly rendererMode: import('../../surfaces/tui/mode-detect.ts').RendererMode;\n\treadonly startFromSnapshot?: {\n\t\treadonly id: string;\n\t\treadonly stalePolicy: 'warn' | 'block' | 'clean-start';\n\t};\n\treadonly snapshotCache?: {\n\t\treadonly name: string;\n\t\treadonly existingSnapshotId?: string;\n\t};\n}\n\nexport interface UpBootBundle {\n\treadonly commandHandler: CommandHandlerFactory;\n\treadonly boot: RunStackBootBag;\n}\n\ntype StartFromSnapshot = NonNullable<UpBootBundleInput['startFromSnapshot']>;\ntype SnapshotCache = NonNullable<UpBootBundleInput['snapshotCache']>;\n\n/**\n * Build the CLI's boot concerns as a VALUE bundle the seam consumes — the\n * snapshot/wipe/prune `commandHandler` plus the `beforeInitialAcquire`\n * (recover → IPC bridge → roster claim → TUI mount + event tee). Pure\n * value construction: no substrate is touched here; the hooks pull the\n * SEAM's substrate services at boot (they run inside the supervised scope).\n *\n * Extracted from `runUpLive` so the Docker-free CLI-boot smoke test drives\n * the EXACT bundle the production path feeds `runStackWithBoot` — the only\n * non-e2e gate on the cutover (`main.test.ts` only runs `up --help`).\n */\nexport const buildUpBootBundle = (input: UpBootBundleInput): UpBootBundle => {\n\tconst {\n\t\tstack,\n\t\tidentityValue,\n\t\truntimeRoot,\n\t\tdevstackVersion,\n\t\trendererMode,\n\t\tstartFromSnapshot,\n\t\tsnapshotCache,\n\t} = input;\n\n\tconst computeGraphInput = computeSnapshotGraphInputFromStack({ stack, devstackVersion });\n\tlet refreshSnapshotCache =\n\t\tsnapshotCache !== undefined && snapshotCache.existingSnapshotId === undefined;\n\n\t// The snapshot/wipe/prune `commandHandler` — a FACTORY the seam resolves\n\t// against its LIVE substrate (the seam runs it before `startSupervisor`\n\t// consumes the handler). The factory closes over the seam's ONE\n\t// `SnapshotOrchestratorService` instance — the same one the supervisor's\n\t// contribution dispatcher registers live participants on — so an operator\n\t// `snapshot save` captures the LIVE chain/blob/db state, not an empty set\n\t// off a sibling orchestrator. No Deferred hand-off.\n\tconst commandHandler = makeSnapshotCommandHandler({ runtimeRoot, stack, devstackVersion });\n\n\tconst boot: RunStackBootBag = {\n\t\tdevstackVersion,\n\t\tbeforeInitialAcquire: (h) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\t// The seam's substrate services — the SAME instances the\n\t\t\t\t// `commandHandler` factory closed over and the supervisor uses,\n\t\t\t\t// driven here for the recover/IPC/roster/TUI work.\n\t\t\t\tconst snapshot = yield* SnapshotOrchestratorService;\n\t\t\t\tconst fs = yield* FileSystem.FileSystem;\n\t\t\t\tconst stackPaths = yield* StackPathsService;\n\t\t\t\t// Resume any restore interrupted by a hard kill / power-loss\n\t\t\t\t// between the atomic swap and the end of the image-promotion\n\t\t\t\t// handoff (the interrupted-restore sentinel rode the swap into\n\t\t\t\t// the live root and was never cleared). Runs BEFORE any plugin\n\t\t\t\t// acquire so a half-promoted image set is reconciled before any\n\t\t\t\t// L2 lookup observes the runtime root. No-op when the sentinel\n\t\t\t\t// is absent (the clean-boot case); idempotent re-run of restore\n\t\t\t\t// when present.\n\t\t\t\t//\n\t\t\t\t// `restore({ id })` passes NO participants on purpose: this\n\t\t\t\t// hook fires BEFORE the initial acquire registers any snapshot\n\t\t\t\t// participant, so there is no live stack to contribute identity.\n\t\t\t\t// `runRestore` reads the empty participant set as \"no live\n\t\t\t\t// stack\" and skips ONLY the cross-plugin contribution guard\n\t\t\t\t// (the runtime + snapshot-emptiness guards still fire). With a\n\t\t\t\t// participants-required guard this recovery could never clear\n\t\t\t\t// the sentinel — it failed `IdentityMissingLive` every boot.\n\t\t\t\tyield* recoverInterruptedRestore({\n\t\t\t\t\tliveRoot: stackPaths.stackRoot,\n\t\t\t\t\trestoreSnapshot: (id) =>\n\t\t\t\t\t\tcomputeGraphInput.pipe(\n\t\t\t\t\t\t\tEffect.flatMap((currentGraphInput) =>\n\t\t\t\t\t\t\t\tsnapshot.restore({\n\t\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t\tcurrentGraphInput,\n\t\t\t\t\t\t\t\t\tgraphInputMismatchPolicy: 'warn',\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t),\n\t\t\t\t});\n\t\t\t\tif (snapshotCache !== undefined) {\n\t\t\t\t\tif (snapshotCache.existingSnapshotId === undefined) {\n\t\t\t\t\t\tyield* Effect.logWarning(\n\t\t\t\t\t\t\t`snapshot cache ${snapshotCache.name} was not found; boot will refresh it`,\n\t\t\t\t\t\t);\n\t\t\t\t\t} else {\n\t\t\t\t\t\tconst graphInput = yield* computeGraphInput;\n\t\t\t\t\t\tconst catalog = yield* provideFileSystem(fs, snapshot.list);\n\t\t\t\t\t\tconst entry = catalog.find(\n\t\t\t\t\t\t\t(snapshotEntry) => snapshotEntry.id === snapshotCache.existingSnapshotId,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tconst snapshotGraphInputId = entry?.metadata?.graphInput.graphInputId ?? null;\n\t\t\t\t\t\tif (snapshotGraphInputId === graphInput.graphInputId) {\n\t\t\t\t\t\t\trefreshSnapshotCache = false;\n\t\t\t\t\t\t\tyield* provideFileSystem(\n\t\t\t\t\t\t\t\tfs,\n\t\t\t\t\t\t\t\tsnapshot.restore({\n\t\t\t\t\t\t\t\t\tid: snapshotCache.existingSnapshotId,\n\t\t\t\t\t\t\t\t\tcurrentGraphInput: graphInput,\n\t\t\t\t\t\t\t\t\tgraphInputMismatchPolicy: 'block',\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\trefreshSnapshotCache = true;\n\t\t\t\t\t\t\tyield* Effect.logWarning(\n\t\t\t\t\t\t\t\t`snapshot cache ${snapshotCache.name} graph input is stale or unreadable; boot will refresh it`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t} else if (startFromSnapshot !== undefined) {\n\t\t\t\t\tconst graphInput = yield* computeGraphInput;\n\t\t\t\t\tif (startFromSnapshot.stalePolicy === 'clean-start') {\n\t\t\t\t\t\tconst catalog = yield* provideFileSystem(fs, snapshot.list);\n\t\t\t\t\t\tconst entry = catalog.find(\n\t\t\t\t\t\t\t(snapshotEntry) => snapshotEntry.id === startFromSnapshot.id,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tconst snapshotGraphInputId = entry?.metadata?.graphInput.graphInputId ?? null;\n\t\t\t\t\t\tif (snapshotGraphInputId !== graphInput.graphInputId) {\n\t\t\t\t\t\t\tyield* Effect.logWarning(\n\t\t\t\t\t\t\t\t`snapshot ${startFromSnapshot.id} graph input is stale; clean-start policy skipped restore`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\tyield* provideFileSystem(\n\t\t\t\t\t\t\t\tfs,\n\t\t\t\t\t\t\t\tsnapshot.restore({\n\t\t\t\t\t\t\t\t\tid: startFromSnapshot.id,\n\t\t\t\t\t\t\t\t\tcurrentGraphInput: graphInput,\n\t\t\t\t\t\t\t\t\tgraphInputMismatchPolicy: 'block',\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\t\t\t\t\t} else {\n\t\t\t\t\t\tyield* provideFileSystem(\n\t\t\t\t\t\t\tfs,\n\t\t\t\t\t\t\tsnapshot.restore({\n\t\t\t\t\t\t\t\tid: startFromSnapshot.id,\n\t\t\t\t\t\t\t\tcurrentGraphInput: graphInput,\n\t\t\t\t\t\t\t\tgraphInputMismatchPolicy: startFromSnapshot.stalePolicy,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tconst commandChannel = yield* installCommandChannelBridge({\n\t\t\t\t\tstackRoot: stackPaths.stackRoot,\n\t\t\t\t\thandle: h.supervisor,\n\t\t\t\t});\n\t\t\t\tyield* installLiveSupervisorRoster({\n\t\t\t\t\tstackRoot: stackPaths.stackRoot,\n\t\t\t\t\tapp: String(identityValue.app),\n\t\t\t\t\tstack: String(identityValue.stack),\n\t\t\t\t});\n\t\t\t\tconst rendererEvents = yield* Queue.unbounded<EngineEvent>();\n\t\t\t\tconst renderer = makeTuiSurface({\n\t\t\t\t\tmode: rendererMode,\n\t\t\t\t\tpublishCommand: makeQueueCommandPublisher(h.commands),\n\t\t\t\t\t// Opt-in quiet plain stream (readiness/endpoint/codegen\n\t\t\t\t\t// milestones + warns/errors only). Set by embedded consumers\n\t\t\t\t\t// that pipe `devstack up` output through another tool — the\n\t\t\t\t\t// Playwright `webServer` (see `devstackPlaywrightWebServer`)\n\t\t\t\t\t// — where the full per-event firehose reads as `[WebServer]`\n\t\t\t\t\t// noise. No effect on a TTY (`ink`) or normal CI `plain` run.\n\t\t\t\t\tquiet: process.env.DEVSTACK_PLAIN_QUIET === '1',\n\t\t\t\t});\n\t\t\t\tyield* Effect.addFinalizer(() => renderer.flush.pipe(Effect.catch(() => Effect.void)));\n\t\t\t\tyield* Effect.forkScoped(\n\t\t\t\t\trenderer.mount(h.state, Stream.fromQueue(rendererEvents)).pipe(\n\t\t\t\t\t\tEffect.catch((cause) =>\n\t\t\t\t\t\t\tEffect.sync(() => {\n\t\t\t\t\t\t\t\tprocess.stderr.write(`renderer failed: ${cause.detail ?? String(cause)}\\n`);\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\tyield* Effect.forkScoped(\n\t\t\t\t\th.events.pipe(\n\t\t\t\t\t\tStream.runForEach((event) =>\n\t\t\t\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\t\t\t\tyield* Queue.offer(rendererEvents, event);\n\t\t\t\t\t\t\t\tyield* commandChannel.publishEvent(event);\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t}),\n\t\twithinScope: (h) =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tif (snapshotCache === undefined || !refreshSnapshotCache) return;\n\t\t\t\tyield* h.supervisor.runCommand({\n\t\t\t\t\ttag: 'snapshot.capture',\n\t\t\t\t\tname: snapshotCache.name,\n\t\t\t\t\treplaceExisting: true,\n\t\t\t\t});\n\t\t\t}),\n\t};\n\n\treturn { commandHandler, boot };\n};\n\n/**\n * Run `devstack up`. Wires the substrate Layer stack, supervisor,\n * attached renderer, and in-process TUI command queue. The Effect runs\n * as the outer Node fiber so SIGINT reaches scope finalizers.\n *\n * Returns a typed `CommandResult` / fails with a typed `CliError` so\n * the dispatcher's `emitFailure` renders the envelope (JSON mode) or\n * human-mode stderr line. Wirings MUST NOT write raw bytes to\n * `process.stderr` or mutate `process.exitCode` for terminal failures —\n * the dispatcher owns the projection.\n */\nexport const runUpLive = (\n\tconfigPath: string | undefined,\n\tidentity: ResolvedIdentity,\n\toptions: {\n\t\treadonly renderer: GlobalFlags['renderer'];\n\t\treadonly stdoutIsTty: boolean;\n\t\treadonly fromSnapshot?: string;\n\t\treadonly snapshotCache?: string;\n\t\treadonly snapshotStalePolicy?: GlobalFlags['snapshotStalePolicy'];\n\t},\n): Effect.Effect<CommandResult, CliError> => {\n\tconst loader = makeConfigLoader();\n\treturn Effect.gen(function* () {\n\t\tif (options.fromSnapshot !== undefined && options.snapshotCache !== undefined) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\tnew CliUsageError({\n\t\t\t\t\tmessage: '--snapshot-cache cannot be combined with --from-snapshot',\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\t\tif (options.snapshotCache !== undefined && options.snapshotStalePolicy !== undefined) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\tnew CliUsageError({\n\t\t\t\t\tmessage: '--snapshot-stale is only valid with --from-snapshot',\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\t\tconst loadExit = yield* Effect.exit(loader.load(configPath));\n\t\tif (Exit.isFailure(loadExit)) {\n\t\t\treturn yield* Effect.fail(cliErrorFromConfigExit(loadExit));\n\t\t}\n\t\tconst loaded = loadExit.value;\n\t\tconst publicStack = (\n\t\t\tloaded as LoadedConfig & {\n\t\t\t\treadonly stack: Stack<SupervisedStack['members']>;\n\t\t\t}\n\t\t).stack;\n\t\tconst stack = (loaded as LoadedConfig & { readonly engine: SupervisedStack }).engine;\n\n\t\t// Re-derive the identity against the EFFECTIVE stack (explicit\n\t\t// `--stack`/`$DEVSTACK_STACK` > `config.stackName` > inferred) so\n\t\t// the roster lock, command channel, and container/router naming all\n\t\t// target the same stack the operator selected — matching what\n\t\t// `snapshot.ts` already does. Without this, an explicit `--stack`\n\t\t// would boot the supervisor under the config's `stackName` and a\n\t\t// concurrent default-stack `up` would falsely collide on the live\n\t\t// supervisor (`error: supervisor live for <app>/<stack>`, exit 40).\n\t\tconst effectiveIdentity = resolvedIdentityForStack(identity, stack);\n\t\tconst identityValue: Identity = identityValueFor(effectiveIdentity);\n\t\tconst appRoot = dirname(loaded.resolvedConfigPath);\n\n\t\tconst devstackVersion = readDevstackVersion({ fallback: '0.0.0' });\n\t\tconst rendererMode = resolveUpRendererMode({\n\t\t\tcliRenderer: options.renderer,\n\t\t\tstackRenderer: stack.options.renderer,\n\t\t\tstdoutIsTty: options.stdoutIsTty,\n\t\t});\n\t\tlet startFromSnapshot: StartFromSnapshot | undefined;\n\t\tlet snapshotCache: SnapshotCache | undefined;\n\t\tif (options.fromSnapshot !== undefined) {\n\t\t\tconst resolved = yield* makeSnapshotReader({ stackRoot: effectiveIdentity.stackRoot })\n\t\t\t\t.resolve(options.fromSnapshot)\n\t\t\t\t.pipe(\n\t\t\t\t\tEffect.mapError(\n\t\t\t\t\t\t(cause) =>\n\t\t\t\t\t\t\tnew CliInternalError({\n\t\t\t\t\t\t\t\tmessage: 'snapshot lookup failed',\n\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\tswitch (resolved.tag) {\n\t\t\t\tcase 'found':\n\t\t\t\t\tstartFromSnapshot = {\n\t\t\t\t\t\tid: resolved.entry.snapshotId,\n\t\t\t\t\t\tstalePolicy: options.snapshotStalePolicy ?? 'warn',\n\t\t\t\t\t};\n\t\t\t\t\tbreak;\n\t\t\t\tcase 'not-found':\n\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\tnew CliSnapshotNotFoundError({ snapshotRef: options.fromSnapshot }),\n\t\t\t\t\t);\n\t\t\t\tcase 'ambiguous':\n\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\tnew CliUsageError({\n\t\t\t\t\t\t\tmessage: `snapshot reference is ambiguous: ${resolved.snapshotRef}`,\n\t\t\t\t\t\t\thint: `matches: ${resolved.matches.map((entry) => entry.snapshotId).join(', ')}`,\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t}\n\t\t}\n\t\tif (options.snapshotCache !== undefined) {\n\t\t\tconst resolved = yield* makeSnapshotReader({ stackRoot: effectiveIdentity.stackRoot })\n\t\t\t\t.resolve(options.snapshotCache)\n\t\t\t\t.pipe(\n\t\t\t\t\tEffect.mapError(\n\t\t\t\t\t\t(cause) =>\n\t\t\t\t\t\t\tnew CliInternalError({\n\t\t\t\t\t\t\t\tmessage: 'snapshot lookup failed',\n\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\tswitch (resolved.tag) {\n\t\t\t\tcase 'found':\n\t\t\t\t\tsnapshotCache = {\n\t\t\t\t\t\tname: options.snapshotCache,\n\t\t\t\t\t\texistingSnapshotId: resolved.entry.snapshotId,\n\t\t\t\t\t};\n\t\t\t\t\tbreak;\n\t\t\t\tcase 'not-found':\n\t\t\t\t\tsnapshotCache = { name: options.snapshotCache };\n\t\t\t\t\tbreak;\n\t\t\t\tcase 'ambiguous':\n\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\tnew CliUsageError({\n\t\t\t\t\t\t\tmessage: `snapshot reference is ambiguous: ${resolved.snapshotRef}`,\n\t\t\t\t\t\t\thint: `matches: ${resolved.matches.map((entry) => entry.snapshotId).join(', ')}`,\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\t// The CLI concerns (snapshot/wipe/prune `commandHandler` + the\n\t\t// recover/roster/IPC/TUI boot hooks) as a value bundle — the\n\t\t// EXACT thing the seam consumes, extracted so the Docker-free CLI-boot\n\t\t// smoke test can drive the real bundle (see `test/cli/up-boot-smoke`).\n\t\tconst { commandHandler, boot } = buildUpBootBundle({\n\t\t\tstack,\n\t\t\tidentityValue,\n\t\t\truntimeRoot: effectiveIdentity.runtimeRoot,\n\t\t\tdevstackVersion,\n\t\t\trendererMode,\n\t\t\t...(startFromSnapshot === undefined ? {} : { startFromSnapshot }),\n\t\t\t...(snapshotCache === undefined ? {} : { snapshotCache }),\n\t\t});\n\n\t\t// The ONE boot seam. `runStackWithBoot` owns the substrate Layer\n\t\t// composition, the contribution dispatcher + post-acquire hook +\n\t\t// `extendContext` assembly, the projection ref, and the\n\t\t// forkDetach/Deferred boot lifecycle — `up` no longer forks its own\n\t\t// parallel orchestration. The CLI concerns (recover/roster/IPC/TUI\n\t\t// + snapshot handler) are passed as injected hooks + `commandHandler`.\n\t\tconst handle = runStackWithBoot(publicStack, {\n\t\t\tidentity: {\n\t\t\t\tapp: String(identityValue.app),\n\t\t\t\tstack: String(identityValue.stack),\n\t\t\t\tnetwork: String(identityValue.network),\n\t\t\t},\n\t\t\tappRoot,\n\t\t\truntimeRoot: effectiveIdentity.runtimeRoot,\n\t\t\tcodegen: stack.options.codegen,\n\t\t\tcommandHandler,\n\t\t\tboot,\n\t\t});\n\n\t\t// The outer fiber BLOCKS on `awaitShutdown` so SIGINT reaches the\n\t\t// supervisor's in-scope signal handler (forked inside `startSupervisor`)\n\t\t// and drives teardown through the command-channel/latch — the same path\n\t\t// the CLI used as the outer fiber before the cutover. `Effect.scoped`\n\t\t// owns the supervised scope so the TUI flush finalizer + roster release\n\t\t// run on scope close.\n\t\t//\n\t\t// Errors project through the seam's DISCRIMINATED channels — no\n\t\t// `matchCauseEffect` re-discrimination:\n\t\t//   - `handle.start` fails ⇒ BOOT-time `BootError`. Extract a\n\t\t//     `CliSupervisorLiveError` (roster-claim loss) for exit 40; else\n\t\t//     wrap as `CliInternalError`.\n\t\t//   - `handle.awaitShutdown` fails ⇒ MID-RUN cause. Wrap as\n\t\t//     `CliInternalError` (boot already succeeded by then).\n\t\treturn yield* Effect.scoped(\n\t\t\tEffect.gen(function* () {\n\t\t\t\tyield* handle.start.pipe(\n\t\t\t\t\tEffect.catch((bootError: BootError) => {\n\t\t\t\t\t\tconst live = findCliSupervisorLiveError(bootError.cause);\n\t\t\t\t\t\treturn Effect.fail(\n\t\t\t\t\t\t\tlive ??\n\t\t\t\t\t\t\t\tnew CliInternalError({\n\t\t\t\t\t\t\t\t\tmessage: 'stack failed',\n\t\t\t\t\t\t\t\t\tcause: Cause.pretty(bootError.cause),\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t);\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t\tyield* handle.awaitShutdown.pipe(\n\t\t\t\t\tEffect.catchCause(\n\t\t\t\t\t\t(cause): Effect.Effect<never, CliError> =>\n\t\t\t\t\t\t\tEffect.fail(\n\t\t\t\t\t\t\t\tnew CliInternalError({\n\t\t\t\t\t\t\t\t\tmessage: 'stack failed',\n\t\t\t\t\t\t\t\t\tcause: Cause.pretty(cause as Cause.Cause<unknown>),\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\treturn { exitCode: ExitCode.OK } satisfies CommandResult;\n\t\t\t}),\n\t\t);\n\t});\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAyEA,MAAM,kBAAkB,eAAuB;CAC9C,eAAeA,QAAY,WAAW,YAAY;CAClD,YAAYA,QAAY,WAAW,aAAa;AACjD;;;;;;;;;;AAeA,MAAM,8BAA8B,WAKnC,OAAO,IAAI,aAAa;CACvB,MAAM,WAAW,OAAO;CACxB,MAAM,KAAK,OAAO,WAAW;CAC7B,MAAM,oBAAoB,mCAAmC;EAC5D,OAAO,OAAO;EACd,iBAAiB,OAAO;CACzB,CAAC;CACD,MAAM,WAAqC,QAAQ;EAClD,QAAQ,IAAI,KAAZ;GACC,KAAK,oBAKJ,OAAO,kBACN,IACA,kBAAkB,KACjB,OAAO,SAAS,eACf,SAAS,QAAQ;IAChB,IAAI,IAAI;IACR,GAAI,IAAI,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,IAAI,KAAK;IACpD;IACA,GAAI,IAAI,oBAAoB,OAAO,EAAE,sBAAsB,KAAK,IAAI,CAAC;GACtE,CAAC,CACF,CACD,CACD,CAAC,CAAC,KACD,OAAO,KAAK,SAAS,CACpB;IACC,KAAK;IACL,YAAY,KAAK;IACjB,GAAI,KAAK,UAAU,OAAO,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM;IAClD,IAAI,KAAK,IAAI;GACd,CACD,CAAC,CACF;GACD,KAAK,oBACJ,OAAO,kBACN,IACA,kBAAkB,KACjB,OAAO,SAAS,sBACf,SAAS,QAAQ;IAChB,IAAI,IAAI;IACR;IACA,0BAA0B;GAC3B,CAAC,CACF,CACD,CACD,CAAC,CAAC,KACD,OAAO,KAAK,SAAS,CACpB;IACC,KAAK;IACL,YAAY,KAAK;IACjB,IAAI,KAAK,IAAI;GACd,CACD,CAAC,CACF;GACD,KAAK,iBACJ,OAAO,kBAAkB,IAAI,SAAS,IAAI,CAAC,CAAC,KAAK,OAAO,GAAG,CAAC,CAAC,CAAC;GAC/D,KAAK,mBACJ,OAAO,kBAAkB,IAAI,SAAS,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,OAAO,GAAG,CAAC,CAAC,CAAC;GACjF,KAAK,kBACJ,OAAO,kBAAkB,IAAI,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,GAAG,CAAC,CAAC,CAAC;GACnE,KAAK,mBAWJ,OAAO,+BAA+B,EAAE,aAAa,OAAO,YAAY,CAAC,CAAC,CAAC,KAC1E,OAAO,SAAS,cACf,kBACC,EAAE,aAAa,OAAO,YAAY,GAClC;IACC,WAAW,+BACV,WACA,iCACD;IACA,WAAW;IACX,QAAQ;GACT,CACD,CACD,GACA,OAAO,GAAG,CAAC,CAAC,CACb;GACD,SACC,OAAO,OAAO,QAAQ,CAAC,CAAC;EAC1B;CACD;CACA,OAAO;AACR,CAAC;AAEF,MAAM,+BAA+B,WAKpC,OAAO,IAAI,aAAa;CACvB,MAAM,QAAQ,eAAe,OAAO,SAAS;CAE7C,IAAI,EAAC,OADkB,MAAM,KAAK,EAAA,CACrB,YAAY;EACxB,OAAO,QAAQ,KAAK,CAAC,CAAC,KAAK,OAAO,YAAY,OAAO,IAAI,CAAC;EAC1D,OAAO,OAAO,OAAO,KACpB,IAAI,uBAAuB;GAC1B,KAAK,OAAO;GACZ,OAAO,OAAO;GACd,MAAM;EACP,CAAC,CACF;CACD;CACA,OAAO,OAAO,mBAAmB,QAAQ,KAAK,CAAC,CAAC,KAAK,OAAO,YAAY,OAAO,IAAI,CAAC,CAAC;CACrF,OAAO,OAAO,WAAW,eAAe,KAAK,CAAC;AAC/C,CAAC;;;;;;;;;;;;AAyCF,MAAa,qBAAqB,UAA2C;CAC5E,MAAM,EACL,OACA,eACA,aACA,iBACA,cACA,mBACA,kBACG;CAEJ,MAAM,oBAAoB,mCAAmC;EAAE;EAAO;CAAgB,CAAC;CACvF,IAAI,uBACH,kBAAkB,KAAA,KAAa,cAAc,uBAAuB,KAAA;CAsKrE,OAAO;EAAE,gBA7Jc,2BAA2B;GAAE;GAAa;GAAO;EAAgB,CA6JlE;EAAG,MAAA;GA1JxB;GACA,uBAAuB,MACtB,OAAO,IAAI,aAAa;IAIvB,MAAM,WAAW,OAAO;IACxB,MAAM,KAAK,OAAO,WAAW;IAC7B,MAAM,aAAa,OAAO;IAkB1B,OAAO,0BAA0B;KAChC,UAAU,WAAW;KACrB,kBAAkB,OACjB,kBAAkB,KACjB,OAAO,SAAS,sBACf,SAAS,QAAQ;MAChB;MACA;MACA,0BAA0B;KAC3B,CAAC,CACF,CACD;IACF,CAAC;IACD,IAAI,kBAAkB,KAAA,GACrB,IAAI,cAAc,uBAAuB,KAAA,GACxC,OAAO,OAAO,WACb,kBAAkB,cAAc,KAAK,qCACtC;SACM;KACN,MAAM,aAAa,OAAO;KAM1B,MAJc,OADS,kBAAkB,IAAI,SAAS,IAAI,EAAA,CACpC,MACpB,kBAAkB,cAAc,OAAO,cAAc,kBAEtB,CAAC,EAAE,UAAU,WAAW,gBAAgB,UAC5C,WAAW,cAAc;MACrD,uBAAuB;MACvB,OAAO,kBACN,IACA,SAAS,QAAQ;OAChB,IAAI,cAAc;OAClB,mBAAmB;OACnB,0BAA0B;MAC3B,CAAC,CACF;KACD,OAAO;MACN,uBAAuB;MACvB,OAAO,OAAO,WACb,kBAAkB,cAAc,KAAK,0DACtC;KACD;IACD;SACM,IAAI,sBAAsB,KAAA,GAAW;KAC3C,MAAM,aAAa,OAAO;KAC1B,IAAI,kBAAkB,gBAAgB,eAMrC,MAJc,OADS,kBAAkB,IAAI,SAAS,IAAI,EAAA,CACpC,MACpB,kBAAkB,cAAc,OAAO,kBAAkB,EAE1B,CAAC,EAAE,UAAU,WAAW,gBAAgB,UAC5C,WAAW,cACvC,OAAO,OAAO,WACb,YAAY,kBAAkB,GAAG,0DAClC;UAEA,OAAO,kBACN,IACA,SAAS,QAAQ;MAChB,IAAI,kBAAkB;MACtB,mBAAmB;MACnB,0BAA0B;KAC3B,CAAC,CACF;UAGD,OAAO,kBACN,IACA,SAAS,QAAQ;MAChB,IAAI,kBAAkB;MACtB,mBAAmB;MACnB,0BAA0B,kBAAkB;KAC7C,CAAC,CACF;IAEF;IACA,MAAM,iBAAiB,OAAO,4BAA4B;KACzD,WAAW,WAAW;KACtB,QAAQ,EAAE;IACX,CAAC;IACD,OAAO,4BAA4B;KAClC,WAAW,WAAW;KACtB,KAAK,OAAO,cAAc,GAAG;KAC7B,OAAO,OAAO,cAAc,KAAK;IAClC,CAAC;IACD,MAAM,iBAAiB,OAAO,MAAM,UAAuB;IAC3D,MAAM,WAAW,eAAe;KAC/B,MAAM;KACN,gBAAgB,0BAA0B,EAAE,QAAQ;KAOpD,OAAO,QAAQ,IAAI,yBAAyB;IAC7C,CAAC;IACD,OAAO,OAAO,mBAAmB,SAAS,MAAM,KAAK,OAAO,YAAY,OAAO,IAAI,CAAC,CAAC;IACrF,OAAO,OAAO,WACb,SAAS,MAAM,EAAE,OAAO,OAAO,UAAU,cAAc,CAAC,CAAC,CAAC,KACzD,OAAO,OAAO,UACb,OAAO,WAAW;KACjB,QAAQ,OAAO,MAAM,oBAAoB,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG;IAC3E,CAAC,CACF,CACD,CACD;IACA,OAAO,OAAO,WACb,EAAE,OAAO,KACR,OAAO,YAAY,UAClB,OAAO,IAAI,aAAa;KACvB,OAAO,MAAM,MAAM,gBAAgB,KAAK;KACxC,OAAO,eAAe,aAAa,KAAK;IACzC,CAAC,CACF,CACD,CACD;GACD,CAAC;GACF,cAAc,MACb,OAAO,IAAI,aAAa;IACvB,IAAI,kBAAkB,KAAA,KAAa,CAAC,sBAAsB;IAC1D,OAAO,EAAE,WAAW,WAAW;KAC9B,KAAK;KACL,MAAM,cAAc;KACpB,iBAAiB;IAClB,CAAC;GACF,CAAC;EAGyB;CAAE;AAC/B;;;;;;;;;;;;AAaA,MAAa,aACZ,YACA,UACA,YAO4C;CAC5C,MAAM,SAAS,iBAAiB;CAChC,OAAO,OAAO,IAAI,aAAa;EAC9B,IAAI,QAAQ,iBAAiB,KAAA,KAAa,QAAQ,kBAAkB,KAAA,GACnE,OAAO,OAAO,OAAO,KACpB,IAAI,cAAc,EACjB,SAAS,2DACV,CAAC,CACF;EAED,IAAI,QAAQ,kBAAkB,KAAA,KAAa,QAAQ,wBAAwB,KAAA,GAC1E,OAAO,OAAO,OAAO,KACpB,IAAI,cAAc,EACjB,SAAS,sDACV,CAAC,CACF;EAED,MAAM,WAAW,OAAO,OAAO,KAAK,OAAO,KAAK,UAAU,CAAC;EAC3D,IAAI,KAAK,UAAU,QAAQ,GAC1B,OAAO,OAAO,OAAO,KAAK,uBAAuB,QAAQ,CAAC;EAE3D,MAAM,SAAS,SAAS;EACxB,MAAM,cACL,OAGC;EACF,MAAM,QAAS,OAA+D;EAU9E,MAAM,oBAAoB,yBAAyB,UAAU,KAAK;EAClE,MAAM,gBAA0B,iBAAiB,iBAAiB;EAClE,MAAM,UAAU,QAAQ,OAAO,kBAAkB;EAEjD,MAAM,kBAAkB,oBAAoB,EAAE,UAAU,QAAQ,CAAC;EACjE,MAAM,eAAe,sBAAsB;GAC1C,aAAa,QAAQ;GACrB,eAAe,MAAM,QAAQ;GAC7B,aAAa,QAAQ;EACtB,CAAC;EACD,IAAI;EACJ,IAAI;EACJ,IAAI,QAAQ,iBAAiB,KAAA,GAAW;GACvC,MAAM,WAAW,OAAO,mBAAmB,EAAE,WAAW,kBAAkB,UAAU,CAAC,CAAC,CACpF,QAAQ,QAAQ,YAAY,CAAC,CAC7B,KACA,OAAO,UACL,UACA,IAAI,iBAAiB;IACpB,SAAS;IACT;GACD,CAAC,CACH,CACD;GACD,QAAQ,SAAS,KAAjB;IACC,KAAK;KACJ,oBAAoB;MACnB,IAAI,SAAS,MAAM;MACnB,aAAa,QAAQ,uBAAuB;KAC7C;KACA;IACD,KAAK,aACJ,OAAO,OAAO,OAAO,KACpB,IAAI,yBAAyB,EAAE,aAAa,QAAQ,aAAa,CAAC,CACnE;IACD,KAAK,aACJ,OAAO,OAAO,OAAO,KACpB,IAAI,cAAc;KACjB,SAAS,oCAAoC,SAAS;KACtD,MAAM,YAAY,SAAS,QAAQ,KAAK,UAAU,MAAM,UAAU,CAAC,CAAC,KAAK,IAAI;IAC9E,CAAC,CACF;GACF;EACD;EACA,IAAI,QAAQ,kBAAkB,KAAA,GAAW;GACxC,MAAM,WAAW,OAAO,mBAAmB,EAAE,WAAW,kBAAkB,UAAU,CAAC,CAAC,CACpF,QAAQ,QAAQ,aAAa,CAAC,CAC9B,KACA,OAAO,UACL,UACA,IAAI,iBAAiB;IACpB,SAAS;IACT;GACD,CAAC,CACH,CACD;GACD,QAAQ,SAAS,KAAjB;IACC,KAAK;KACJ,gBAAgB;MACf,MAAM,QAAQ;MACd,oBAAoB,SAAS,MAAM;KACpC;KACA;IACD,KAAK;KACJ,gBAAgB,EAAE,MAAM,QAAQ,cAAc;KAC9C;IACD,KAAK,aACJ,OAAO,OAAO,OAAO,KACpB,IAAI,cAAc;KACjB,SAAS,oCAAoC,SAAS;KACtD,MAAM,YAAY,SAAS,QAAQ,KAAK,UAAU,MAAM,UAAU,CAAC,CAAC,KAAK,IAAI;IAC9E,CAAC,CACF;GACF;EACD;EAMA,MAAM,EAAE,gBAAgB,SAAS,kBAAkB;GAClD;GACA;GACA,aAAa,kBAAkB;GAC/B;GACA;GACA,GAAI,sBAAsB,KAAA,IAAY,CAAC,IAAI,EAAE,kBAAkB;GAC/D,GAAI,kBAAkB,KAAA,IAAY,CAAC,IAAI,EAAE,cAAc;EACxD,CAAC;EAQD,MAAM,SAAS,iBAAiB,aAAa;GAC5C,UAAU;IACT,KAAK,OAAO,cAAc,GAAG;IAC7B,OAAO,OAAO,cAAc,KAAK;IACjC,SAAS,OAAO,cAAc,OAAO;GACtC;GACA;GACA,aAAa,kBAAkB;GAC/B,SAAS,MAAM,QAAQ;GACvB;GACA;EACD,CAAC;EAgBD,OAAO,OAAO,OAAO,OACpB,OAAO,IAAI,aAAa;GACvB,OAAO,OAAO,MAAM,KACnB,OAAO,OAAO,cAAyB;IACtC,MAAM,OAAO,2BAA2B,UAAU,KAAK;IACvD,OAAO,OAAO,KACb,QACC,IAAI,iBAAiB;KACpB,SAAS;KACT,OAAO,MAAM,OAAO,UAAU,KAAK;IACpC,CAAC,CACH;GACD,CAAC,CACF;GACA,OAAO,OAAO,cAAc,KAC3B,OAAO,YACL,UACA,OAAO,KACN,IAAI,iBAAiB;IACpB,SAAS;IACT,OAAO,MAAM,OAAO,KAA6B;GAClD,CAAC,CACF,CACF,CACD;GACA,OAAO,EAAE,UAAU,SAAS,GAAG;EAChC,CAAC,CACF;CACD,CAAC;AACF"}

package/dist/cli/wirings/wipe.mjs

@@ -2,8 +2,8 @@ import { SnapshotOrchestratorService } from "../../orchestrators/snapshot/servic
 import "../../orchestrators/snapshot/index.mjs";
 import { removeRouterDispatchFilesForStack } from "../../orchestrators/router/cleanup.mjs";
 import { ensureNoLiveSupervisor, identityValueFor } from "./identity.mjs";
-import { buildDirectSnapshotLayers } from "./build-verb-layers.mjs";
 import { provideFileSystem } from "./provide-file-system.mjs";
+import { buildDirectSnapshotLayers } from "../../orchestrators/layers.mjs";
 import { Effect, FileSystem, Logger } from "effect";
 //#region src/cli/wirings/wipe.ts
 const runWipeDirect = (identity) => Effect.gen(function* () {

package/dist/cli/wirings/wipe.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"wipe.mjs","names":[],"sources":["../../../src/cli/wirings/wipe.ts"],"sourcesContent":["// `devstack wipe` verb wiring — direct/offline path.\n//\n// Refuses to run when a supervisor owns the stack (the operator must\n// shut down `devstack up` first). When safe, drains the snapshot\n// catalog AND removes any router-dispatch files this stack contributed\n// so the router doesn't keep referencing endpoints that no longer\n// exist on disk.\n\nimport { Effect, FileSystem, Logger } from 'effect';\n\nimport {\n\tSnapshotOrchestratorService,\n\ttype WipeTargets,\n} from '../../orchestrators/snapshot/index.ts';\nimport { removeRouterDispatchFilesForStack } from '../../orchestrators/router/cleanup.ts';\n\nimport { ensureNoLiveSupervisor, identityValueFor, type ResolvedIdentity } from './identity.ts';\nimport { buildDirectSnapshotLayers } from './build-verb-layers.ts';\nimport { provideFileSystem } from './provide-file-system.ts';\n\nexport const runWipeDirect = (identity: ResolvedIdentity): Effect.Effect<void, unknown> =>\n\tEffect.gen(function* () {\n\t\tyield* ensureNoLiveSupervisor(identity, 'shut down the attached `devstack up` session first');\n\t\tconst program = Effect.gen(function* () {\n\t\t\tconst snapshot = yield* SnapshotOrchestratorService;\n\t\t\tconst fs = yield* FileSystem.FileSystem;\n\t\t\tyield* provideFileSystem(fs, snapshot.wipe({}));\n\t\t\tyield* removeRouterDispatchFilesForStack({\n\t\t\t\truntimeRoot: identity.runtimeRoot,\n\t\t\t\tapp: identity.app,\n\t\t\t\tstack: identity.stack,\n\t\t\t});\n\t\t});\n\t\treturn yield* program.pipe(\n\t\t\tEffect.provide(\n\t\t\t\tbuildDirectSnapshotLayers({\n\t\t\t\t\tidentity: identityValueFor(identity),\n\t\t\t\t\truntimeRoot: identity.runtimeRoot,\n\t\t\t\t}),\n\t\t\t),\n\t\t\tEffect.provide(Logger.layer([Logger.consolePretty()])),\n\t\t);\n\t});\n\n/** Read-only enumeration of the concrete targets a real `wipe` would\n *  remove — backs `devstack wipe --dry-run`. Deliberately does NOT\n *  `ensureNoLiveSupervisor` (a preview must work whether or not a\n *  supervisor is attached; it mutates nothing) and skips the router\n *  dispatch-file removal (that is a destructive side effect of the real\n *  wipe, not part of the preview). */\nexport const runWipePlanDirect = (\n\tidentity: ResolvedIdentity,\n): Effect.Effect<WipeTargets, unknown> =>\n\tEffect.gen(function* () {\n\t\tconst snapshot = yield* SnapshotOrchestratorService;\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\treturn yield* provideFileSystem(fs, snapshot.wipePlan({}));\n\t}).pipe(\n\t\tEffect.provide(\n\t\t\tbuildDirectSnapshotLayers({\n\t\t\t\tidentity: identityValueFor(identity),\n\t\t\t\truntimeRoot: identity.runtimeRoot,\n\t\t\t}),\n\t\t),\n\t\tEffect.provide(Logger.layer([Logger.consolePretty()])),\n\t);\n"],"mappings":";;;;;;;;AAoBA,MAAa,iBAAiB,aAC7B,OAAO,IAAI,aAAa;AACvB,QAAO,uBAAuB,UAAU,qDAAqD;AAW7F,QAAO,OAVS,OAAO,IAAI,aAAa;EACvC,MAAM,WAAW,OAAO;AAExB,SAAO,kBAAkB,OADP,WAAW,YACA,SAAS,KAAK,EAAE,CAAC,CAAC;AAC/C,SAAO,kCAAkC;GACxC,aAAa,SAAS;GACtB,KAAK,SAAS;GACd,OAAO,SAAS;GAChB,CAAC;GAEkB,CAAC,KACrB,OAAO,QACN,0BAA0B;EACzB,UAAU,iBAAiB,SAAS;EACpC,aAAa,SAAS;EACtB,CAAC,CACF,EACD,OAAO,QAAQ,OAAO,MAAM,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CACtD;EACA;;;;;;;AAQH,MAAa,qBACZ,aAEA,OAAO,IAAI,aAAa;CACvB,MAAM,WAAW,OAAO;AAExB,QAAO,OAAO,kBAAkB,OADd,WAAW,YACO,SAAS,SAAS,EAAE,CAAC,CAAC;EACzD,CAAC,KACF,OAAO,QACN,0BAA0B;CACzB,UAAU,iBAAiB,SAAS;CACpC,aAAa,SAAS;CACtB,CAAC,CACF,EACD,OAAO,QAAQ,OAAO,MAAM,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CACtD"}
+{"version":3,"file":"wipe.mjs","names":[],"sources":["../../../src/cli/wirings/wipe.ts"],"sourcesContent":["// `devstack wipe` verb wiring — direct/offline path.\n//\n// Refuses to run when a supervisor owns the stack (the operator must\n// shut down `devstack up` first). When safe, drains the snapshot\n// catalog AND removes any router-dispatch files this stack contributed\n// so the router doesn't keep referencing endpoints that no longer\n// exist on disk.\n\nimport { Effect, FileSystem, Logger } from 'effect';\n\nimport {\n\tSnapshotOrchestratorService,\n\ttype WipeTargets,\n} from '../../orchestrators/snapshot/index.ts';\nimport { removeRouterDispatchFilesForStack } from '../../orchestrators/router/cleanup.ts';\n\nimport { ensureNoLiveSupervisor, identityValueFor, type ResolvedIdentity } from './identity.ts';\nimport { buildDirectSnapshotLayers } from '../../orchestrators/layers.ts';\nimport { provideFileSystem } from './provide-file-system.ts';\n\nexport const runWipeDirect = (identity: ResolvedIdentity): Effect.Effect<void, unknown> =>\n\tEffect.gen(function* () {\n\t\tyield* ensureNoLiveSupervisor(identity, 'shut down the attached `devstack up` session first');\n\t\tconst program = Effect.gen(function* () {\n\t\t\tconst snapshot = yield* SnapshotOrchestratorService;\n\t\t\tconst fs = yield* FileSystem.FileSystem;\n\t\t\tyield* provideFileSystem(fs, snapshot.wipe({}));\n\t\t\tyield* removeRouterDispatchFilesForStack({\n\t\t\t\truntimeRoot: identity.runtimeRoot,\n\t\t\t\tapp: identity.app,\n\t\t\t\tstack: identity.stack,\n\t\t\t});\n\t\t});\n\t\treturn yield* program.pipe(\n\t\t\tEffect.provide(\n\t\t\t\tbuildDirectSnapshotLayers({\n\t\t\t\t\tidentity: identityValueFor(identity),\n\t\t\t\t\truntimeRoot: identity.runtimeRoot,\n\t\t\t\t}),\n\t\t\t),\n\t\t\tEffect.provide(Logger.layer([Logger.consolePretty()])),\n\t\t);\n\t});\n\n/** Read-only enumeration of the concrete targets a real `wipe` would\n *  remove — backs `devstack wipe --dry-run`. Deliberately does NOT\n *  `ensureNoLiveSupervisor` (a preview must work whether or not a\n *  supervisor is attached; it mutates nothing) and skips the router\n *  dispatch-file removal (that is a destructive side effect of the real\n *  wipe, not part of the preview). */\nexport const runWipePlanDirect = (\n\tidentity: ResolvedIdentity,\n): Effect.Effect<WipeTargets, unknown> =>\n\tEffect.gen(function* () {\n\t\tconst snapshot = yield* SnapshotOrchestratorService;\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\treturn yield* provideFileSystem(fs, snapshot.wipePlan({}));\n\t}).pipe(\n\t\tEffect.provide(\n\t\t\tbuildDirectSnapshotLayers({\n\t\t\t\tidentity: identityValueFor(identity),\n\t\t\t\truntimeRoot: identity.runtimeRoot,\n\t\t\t}),\n\t\t),\n\t\tEffect.provide(Logger.layer([Logger.consolePretty()])),\n\t);\n"],"mappings":";;;;;;;;AAoBA,MAAa,iBAAiB,aAC7B,OAAO,IAAI,aAAa;CACvB,OAAO,uBAAuB,UAAU,oDAAoD;CAW5F,OAAO,OAVS,OAAO,IAAI,aAAa;EACvC,MAAM,WAAW,OAAO;EAExB,OAAO,kBAAkB,OADP,WAAW,YACA,SAAS,KAAK,CAAC,CAAC,CAAC;EAC9C,OAAO,kCAAkC;GACxC,aAAa,SAAS;GACtB,KAAK,SAAS;GACd,OAAO,SAAS;EACjB,CAAC;CACF,CACoB,CAAC,CAAC,KACrB,OAAO,QACN,0BAA0B;EACzB,UAAU,iBAAiB,QAAQ;EACnC,aAAa,SAAS;CACvB,CAAC,CACF,GACA,OAAO,QAAQ,OAAO,MAAM,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CACtD;AACD,CAAC;;;;;;;AAQF,MAAa,qBACZ,aAEA,OAAO,IAAI,aAAa;CACvB,MAAM,WAAW,OAAO;CAExB,OAAO,OAAO,kBAAkB,OADd,WAAW,YACO,SAAS,SAAS,CAAC,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC,KACF,OAAO,QACN,0BAA0B;CACzB,UAAU,iBAAiB,QAAQ;CACnC,aAAa,SAAS;AACvB,CAAC,CACF,GACA,OAAO,QAAQ,OAAO,MAAM,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CACtD"}

package/dist/contracts/chain-probe.d.mts

@@ -18,7 +18,7 @@ interface ChainProbe<Key> {
 interface ChainProbeError {
   readonly _tag: 'ChainProbeError';
   readonly reason: 'decode-failed' | 'not-found' | 'transient' | 'no-probe-registered';
-  readonly chain: string;
+  readonly chainId: string;
   readonly detail: string;
 }
 //#endregion

package/dist/contracts/chain-probe.mjs

@@ -1,7 +1,7 @@
 //#region src/contracts/chain-probe.ts
 /** Capability-key constructor — chain-probes are dispatched through
 *  the StrategyContributor registry by this key shape. */
-const chainProbeCapabilityKey = (chain) => `chain-probe:${chain}`;
+const chainProbeCapabilityKey = (chainId) => `chain-probe:${chainId}`;
 //#endregion
 export { chainProbeCapabilityKey };
 

package/dist/contracts/chain-probe.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"chain-probe.mjs","names":[],"sources":["../../src/contracts/chain-probe.ts"],"sourcesContent":["// ChainProbe capability contract (architecture §9).\n//\n// Typed, schema-validated read surface over an on-chain RPC.\n// Consumers never depend on raw SDK property access.\n//\n// Lenient mode returns absence for both not-found and transient RPC\n// failure (so verify probes re-derive on the next cycle); strict\n// throws on transient failure.\n\nimport type { Effect, Schema } from 'effect';\n\nimport type { ChainId } from '../substrate/brand.ts';\n\nexport type ChainProbeMode = 'lenient' | 'strict';\n\n/** Capability-key constructor — chain-probes are dispatched through\n *  the StrategyContributor registry by this key shape. */\nexport const chainProbeCapabilityKey = (chain: ChainId): `chain-probe:${string}` =>\n\t`chain-probe:${chain}`;\n\n/**\n * Plugin-typed read interface. `Key` is the chain's native id\n * shape (object id, tx digest); `Shape` is the expected decoded\n * shape.\n */\n/** Schema-shape accepted by the probe. We constrain `DecodingServices`\n *  to `never` because the probe pipeline cannot inject services from\n *  the caller — schemas with dependencies are unsupported here. */\nexport type ChainProbeSchema<Shape> = Schema.Codec<Shape, unknown, never, never>;\n\nexport interface ChainProbe<Key> {\n\treadonly get: <Shape>(\n\t\tkey: Key,\n\t\tschema: ChainProbeSchema<Shape>,\n\t\tmode: ChainProbeMode,\n\t) => Effect.Effect<Shape | null, ChainProbeError>;\n\treadonly batchGet?: <Shape>(\n\t\tkeys: ReadonlyArray<Key>,\n\t\tschema: ChainProbeSchema<Shape>,\n\t\tmode: ChainProbeMode,\n\t) => Effect.Effect<ReadonlyArray<Shape | null>, ChainProbeError>;\n}\n\nexport interface ChainProbeError {\n\treadonly _tag: 'ChainProbeError';\n\treadonly reason: 'decode-failed' | 'not-found' | 'transient' | 'no-probe-registered';\n\treadonly chain: string;\n\treadonly detail: string;\n}\n"],"mappings":";;;AAiBA,MAAa,2BAA2B,UACvC,eAAe"}
+{"version":3,"file":"chain-probe.mjs","names":[],"sources":["../../src/contracts/chain-probe.ts"],"sourcesContent":["// ChainProbe capability contract (architecture §9).\n//\n// Typed, schema-validated read surface over an on-chain RPC.\n// Consumers never depend on raw SDK property access.\n//\n// Lenient mode returns absence for both not-found and transient RPC\n// failure (so verify probes re-derive on the next cycle); strict\n// throws on transient failure.\n\nimport type { Effect, Schema } from 'effect';\n\nexport type ChainProbeMode = 'lenient' | 'strict';\n\n/** Capability-key constructor — chain-probes are dispatched through\n *  the StrategyContributor registry by this key shape. */\nexport const chainProbeCapabilityKey = (chainId: string): `chain-probe:${string}` =>\n\t`chain-probe:${chainId}`;\n\n/**\n * Plugin-typed read interface. `Key` is the chain's native id\n * shape (object id, tx digest); `Shape` is the expected decoded\n * shape.\n */\n/** Schema-shape accepted by the probe. We constrain `DecodingServices`\n *  to `never` because the probe pipeline cannot inject services from\n *  the caller — schemas with dependencies are unsupported here. */\nexport type ChainProbeSchema<Shape> = Schema.Codec<Shape, unknown, never, never>;\n\nexport interface ChainProbe<Key> {\n\treadonly get: <Shape>(\n\t\tkey: Key,\n\t\tschema: ChainProbeSchema<Shape>,\n\t\tmode: ChainProbeMode,\n\t) => Effect.Effect<Shape | null, ChainProbeError>;\n\treadonly batchGet?: <Shape>(\n\t\tkeys: ReadonlyArray<Key>,\n\t\tschema: ChainProbeSchema<Shape>,\n\t\tmode: ChainProbeMode,\n\t) => Effect.Effect<ReadonlyArray<Shape | null>, ChainProbeError>;\n}\n\nexport interface ChainProbeError {\n\treadonly _tag: 'ChainProbeError';\n\treadonly reason: 'decode-failed' | 'not-found' | 'transient' | 'no-probe-registered';\n\treadonly chainId: string;\n\treadonly detail: string;\n}\n"],"mappings":";;;AAeA,MAAa,2BAA2B,YACvC,eAAe"}

package/dist/contracts/codegenable.d.mts

@@ -36,15 +36,16 @@ interface CodegenEmitDone {
  */
 interface AggregateContribution {
   /** Which aggregate file this decl contributes to (e.g.
-   *  `'accounts.ts'`, `'coins.ts'`, `'packages.ts'`,
-   *  `'services.ts'`). The plugin chooses; the orchestrator treats
-   *  it as opaque. Distinct decls that target the same `bucket`
-   *  shallow-merge into one aggregate file. */
+   *  `'accounts.ts'`, `'coins.ts'`, `'config.ts'`). The plugin
+   *  chooses; the orchestrator treats it as opaque. Distinct decls
+   *  that target the same `bucket` deep-merge into one aggregate
+   *  file (so e.g. sui's `networks.localnet` and every package's
+   *  `packages.<name>` coexist in one `config.ts`). */
   readonly bucket: string;
   /** Project this decl's `exported` map into the value to merge
    *  into the aggregate bucket. Returning `null` opts out of
    *  contributing for this cycle (e.g. when the emitter produced
-   *  no usable shape). The returned record is shallow-merged onto
+   *  no usable shape). The returned record is deep-merged onto
    *  the bucket; for typed shapes the plugin owns the merge
    *  semantics via the returned object's key set. */
   readonly project: (exported: Readonly<Record<string, unknown>>) => Readonly<Record<string, unknown>> | null;
@@ -53,7 +54,50 @@ interface AggregateContribution {
    *  orchestrator MUST NOT branch on this value — it is annotation-
    *  only. */
   readonly kind?: string;
+  /** Where the synthesized aggregate file lands. `'generated'` is
+   *  the canonical runtime tree (`src/generated/`); `'generated-extras'`
+   *  routes the aggregate to the gitignored
+   *  `.devstack/stacks/<stack>/generated-extras/` tree (dev-only +
+   *  secret artifacts). All decls contributing to one bucket MUST
+   *  agree on this; the orchestrator reads it from the first
+   *  contributor it sees for the bucket. Defaults to `'generated'`. */
+  readonly outputLocation?: OutputLocation;
+  /** When `true`, the synthesized aggregate file is written with
+   *  tightened `0o600` perms and injected into `.gitignore`. Mirrors
+   *  `CodegenableDecl.sensitive` for aggregate files. Defaults to
+   *  `false`. */
+  readonly sensitive?: boolean;
+  /** Generic-channel contributions for the loadable id-config. Only the
+   *  LIVE (boot) aggregate of a unified config-binding set sets this;
+   *  boot's `assembleIdConfig` folds it into `idConfig.values[ns][key]`.
+   *  Carries the live plugin JSON the typed id-config fields can't (pool
+   *  ids, coin types, walrus/seal endpoints). The committed-tree (static)
+   *  aggregate omits it — those values resolve at app build time. */
+  readonly idConfigValues?: {
+    readonly [namespace: string]: {
+      readonly [key: string]: unknown;
+    };
+  };
 }
+/** Which codegen output tree a decl (or aggregate) emits into.
+ *  `'generated'` is the runtime-imported `src/generated/` tree;
+ *  `'generated-extras'` is the gitignored
+ *  `.devstack/stacks/<stack>/generated-extras/` dev-only tree reached
+ *  via the `@devstack-dev` alias. */
+type OutputLocation = 'generated' | 'generated-extras';
+/**
+ * Static, stack-free codegen-decl source. A plugin that can describe its
+ * codegen contributions from CONFIG ALONE (no live acquire) exposes this
+ * on its spec so the `codegen` verb can emit a committed projection without
+ * booting a stack. The hook is pure: it returns the same `CodegenableDecl`s
+ * the live `acquire` would emit, but stack-free — KNOWN package ids come
+ * from the declared `networks` literals, LOCAL ids stay the all-zero
+ * sentinel (`UNRESOLVED_ID`) resolved at app build/dev time through the
+ * injected `__DEVSTACK_IDS__` global. Plugins whose contributions genuinely
+ * require live resolution (or which only land in the gitignored
+ * `generated-extras` dev tree) omit this — the verb simply skips them.
+ */
+type StaticCodegenSource = () => ReadonlyArray<CodegenableDecl>;
 /**
  * Codegen contribution. `Emitter` is a literal emitter name used
  * by the codegen orchestrator for attribution and grouping.
@@ -63,6 +107,16 @@ interface CodegenableDecl<Emitter extends string = string> {
   readonly emitterName: Emitter;
   /** Relative path under the codegen staging dir. */
   readonly outputPath: string;
+  /** Which codegen tree this decl's standalone file emits into.
+   *  `'generated'` (default) → `src/generated/`; `'generated-extras'`
+   *  → the gitignored `.devstack/stacks/<stack>/generated-extras/`
+   *  dev-only tree (reached via the `@devstack-dev` alias). */
+  readonly outputLocation?: OutputLocation;
+  /** When `true`, this decl contributes ONLY to its `aggregate`
+   *  bucket — the orchestrator skips emitting the standalone
+   *  per-decl file. Use when the per-decl singleton has no consumer
+   *  (the combined aggregate is the only app-facing surface). */
+  readonly aggregateOnly?: boolean;
   /** Optional sensitivity flag — drives file permissions and
    *  `.gitignore` inclusion. */
   readonly sensitive?: boolean;
@@ -82,5 +136,5 @@ interface CodegenableDecl<Emitter extends string = string> {
   readonly emit: (ctx: CodegenEmitContext) => Effect.Effect<CodegenEmitDone>;
 }
 //#endregion
-export { CodegenEmitContext, CodegenEmitDone, CodegenableDecl };
+export { CodegenEmitContext, CodegenEmitDone, CodegenableDecl, StaticCodegenSource };
 //# sourceMappingURL=codegenable.d.mts.map

package/dist/contracts/codegenable.mjs

@@ -0,0 +1,28 @@
+//#region src/contracts/codegenable.ts
+/**
+* A value the codegen renderer emits VERBATIM (not as a quoted literal).
+*
+* The one authorized use is id resolution in the emitted `config.ts`:
+* `byNetwork` / `mvrOverrides` / `packageId` entries hold a
+* `RawExpr('resolveId("@local/foo")')` so the COMMITTED config carries NO
+* on-chain id. The id resolves at app build/dev time through the injected
+* `__DEVSTACK_IDS__` global (see the emitted `config-runtime.ts`), which
+* throws loudly when an id is unresolved. Lives at the L0 contract layer
+* so both the package plugin (producer) and the renderer (consumer) can
+* reach it without a layering cycle.
+*/
+var RawExpr = class {
+	expr;
+	__rawExpr = true;
+	constructor(expr) {
+		this.expr = expr;
+	}
+};
+/** Build a `RawExpr`. */
+const rawExpr = (expr) => new RawExpr(expr);
+/** Type guard for `RawExpr` — the renderer's verbatim-emit branch. */
+const isRawExpr = (v) => typeof v === "object" && v !== null && v.__rawExpr === true;
+//#endregion
+export { isRawExpr, rawExpr };
+
+//# sourceMappingURL=codegenable.mjs.map

package/dist/contracts/codegenable.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"codegenable.mjs","names":[],"sources":["../../src/contracts/codegenable.ts"],"sourcesContent":["// Codegenable capability contract (architecture §6).\n//\n// Lets a plugin contribute files to the user's source tree without\n// the codegen surface (L4) knowing the plugin exists. The runtime\n// contract only needs the literal emitter name, output path,\n// sensitivity, and an emit operation that writes through an opaque\n// context. Generated files own their app-facing export types directly.\n\nimport type { Effect } from 'effect';\n\n// -----------------------------------------------------------------------------\n// Raw-expression escape hatch\n// -----------------------------------------------------------------------------\n\n/**\n * A value the codegen renderer emits VERBATIM (not as a quoted literal).\n *\n * The one authorized use is id resolution in the emitted `config.ts`:\n * `byNetwork` / `mvrOverrides` / `packageId` entries hold a\n * `RawExpr('resolveId(\"@local/foo\")')` so the COMMITTED config carries NO\n * on-chain id. The id resolves at app build/dev time through the injected\n * `__DEVSTACK_IDS__` global (see the emitted `config-runtime.ts`), which\n * throws loudly when an id is unresolved. Lives at the L0 contract layer\n * so both the package plugin (producer) and the renderer (consumer) can\n * reach it without a layering cycle.\n */\nexport class RawExpr {\n\treadonly __rawExpr = true as const;\n\tconstructor(readonly expr: string) {}\n}\n\n/** Build a `RawExpr`. */\nexport const rawExpr = (expr: string): RawExpr => new RawExpr(expr);\n\n/** Type guard for `RawExpr` — the renderer's verbatim-emit branch. */\nexport const isRawExpr = (v: unknown): v is RawExpr =>\n\ttypeof v === 'object' && v !== null && (v as { __rawExpr?: unknown }).__rawExpr === true;\n\n/**\n * Opaque per-file emission context.\n *\n * Plugin authors declare named generated exports by calling\n * `exportConst(...)`. The orchestrator owns how those declarations are\n * collected, rendered, grouped, permissioned, and written. Emitters do\n * not return a raw `{ [exportName]: value }` record, which keeps the\n * codegen contract focused on the public generated file shape instead\n * of an internal renderer payload.\n */\nexport interface CodegenEmitContext {\n\t/** Add one `export const <name> = <value> as const;` to the file. */\n\treadonly exportConst: (name: string, value: unknown) => void;\n\t/** Add a raw import statement before the generated exports. */\n\treadonly importStatement: (statement: string) => void;\n\t/** Finish emission after all exports/imports have been written. */\n\treadonly done: () => CodegenEmitDone;\n}\n\nexport interface CodegenEmitDone {\n\treadonly _tag: 'CodegenEmitDone';\n}\n\n/**\n * Optional cross-decl aggregation. When present, the codegen\n * orchestrator additionally folds this decl's exported map into a\n * shared aggregate file alongside its own per-decl output.\n *\n * Architectural note: the orchestrator treats `bucket` as opaque and\n * delegates the projection to the plugin via `project`. Aggregate\n * special-casing (e.g. \"the Sui `services.ts` row holds `{rpc,\n * faucet, graphql}`\") belongs in the plugin's contributor, NOT in\n * the codegen orchestrator (architecture: \"Orchestrator boundaries\n * — never names a service\").\n */\nexport interface AggregateContribution {\n\t/** Which aggregate file this decl contributes to (e.g.\n\t *  `'accounts.ts'`, `'coins.ts'`, `'config.ts'`). The plugin\n\t *  chooses; the orchestrator treats it as opaque. Distinct decls\n\t *  that target the same `bucket` deep-merge into one aggregate\n\t *  file (so e.g. sui's `networks.localnet` and every package's\n\t *  `packages.<name>` coexist in one `config.ts`). */\n\treadonly bucket: string;\n\t/** Project this decl's `exported` map into the value to merge\n\t *  into the aggregate bucket. Returning `null` opts out of\n\t *  contributing for this cycle (e.g. when the emitter produced\n\t *  no usable shape). The returned record is deep-merged onto\n\t *  the bucket; for typed shapes the plugin owns the merge\n\t *  semantics via the returned object's key set. */\n\treadonly project: (\n\t\texported: Readonly<Record<string, unknown>>,\n\t) => Readonly<Record<string, unknown>> | null;\n\t/** Optional plugin-supplied kind tag for diagnostics / span\n\t *  attributes (e.g. `'sui-network'`, `'account'`). The\n\t *  orchestrator MUST NOT branch on this value — it is annotation-\n\t *  only. */\n\treadonly kind?: string;\n\t/** Where the synthesized aggregate file lands. `'generated'` is\n\t *  the canonical runtime tree (`src/generated/`); `'generated-extras'`\n\t *  routes the aggregate to the gitignored\n\t *  `.devstack/stacks/<stack>/generated-extras/` tree (dev-only +\n\t *  secret artifacts). All decls contributing to one bucket MUST\n\t *  agree on this; the orchestrator reads it from the first\n\t *  contributor it sees for the bucket. Defaults to `'generated'`. */\n\treadonly outputLocation?: OutputLocation;\n\t/** When `true`, the synthesized aggregate file is written with\n\t *  tightened `0o600` perms and injected into `.gitignore`. Mirrors\n\t *  `CodegenableDecl.sensitive` for aggregate files. Defaults to\n\t *  `false`. */\n\treadonly sensitive?: boolean;\n\t/** Generic-channel contributions for the loadable id-config. Only the\n\t *  LIVE (boot) aggregate of a unified config-binding set sets this;\n\t *  boot's `assembleIdConfig` folds it into `idConfig.values[ns][key]`.\n\t *  Carries the live plugin JSON the typed id-config fields can't (pool\n\t *  ids, coin types, walrus/seal endpoints). The committed-tree (static)\n\t *  aggregate omits it — those values resolve at app build time. */\n\treadonly idConfigValues?: {\n\t\treadonly [namespace: string]: { readonly [key: string]: unknown };\n\t};\n}\n\n/** Which codegen output tree a decl (or aggregate) emits into.\n *  `'generated'` is the runtime-imported `src/generated/` tree;\n *  `'generated-extras'` is the gitignored\n *  `.devstack/stacks/<stack>/generated-extras/` dev-only tree reached\n *  via the `@devstack-dev` alias. */\nexport type OutputLocation = 'generated' | 'generated-extras';\n\n/**\n * Static, stack-free codegen-decl source. A plugin that can describe its\n * codegen contributions from CONFIG ALONE (no live acquire) exposes this\n * on its spec so the `codegen` verb can emit a committed projection without\n * booting a stack. The hook is pure: it returns the same `CodegenableDecl`s\n * the live `acquire` would emit, but stack-free — KNOWN package ids come\n * from the declared `networks` literals, LOCAL ids stay the all-zero\n * sentinel (`UNRESOLVED_ID`) resolved at app build/dev time through the\n * injected `__DEVSTACK_IDS__` global. Plugins whose contributions genuinely\n * require live resolution (or which only land in the gitignored\n * `generated-extras` dev tree) omit this — the verb simply skips them.\n */\nexport type StaticCodegenSource = () => ReadonlyArray<CodegenableDecl>;\n\n/**\n * Codegen contribution. `Emitter` is a literal emitter name used\n * by the codegen orchestrator for attribution and grouping.\n */\nexport interface CodegenableDecl<Emitter extends string = string> {\n\treadonly kind: 'codegenable';\n\treadonly emitterName: Emitter;\n\t/** Relative path under the codegen staging dir. */\n\treadonly outputPath: string;\n\t/** Which codegen tree this decl's standalone file emits into.\n\t *  `'generated'` (default) → `src/generated/`; `'generated-extras'`\n\t *  → the gitignored `.devstack/stacks/<stack>/generated-extras/`\n\t *  dev-only tree (reached via the `@devstack-dev` alias). */\n\treadonly outputLocation?: OutputLocation;\n\t/** When `true`, this decl contributes ONLY to its `aggregate`\n\t *  bucket — the orchestrator skips emitting the standalone\n\t *  per-decl file. Use when the per-decl singleton has no consumer\n\t *  (the combined aggregate is the only app-facing surface). */\n\treadonly aggregateOnly?: boolean;\n\t/** Optional sensitivity flag — drives file permissions and\n\t *  `.gitignore` inclusion. */\n\treadonly sensitive?: boolean;\n\t/** When `true`, multiple decls may share this `emitterName`\n\t *  (the orchestrator skips the emitter-name uniqueness check for\n\t *  this decl). Use sparingly — only when the plugin legitimately\n\t *  emits one decl per item (e.g. one `Package` per published\n\t *  package). Output-path uniqueness is still enforced. */\n\treadonly allowEmitterNameRepetition?: boolean;\n\t/** Optional aggregation seam — when present, the orchestrator\n\t *  folds the per-decl exported map into a shared aggregate file\n\t *  via `aggregate.project(exported)`. Plugins own the projection\n\t *  shape; the orchestrator is name-blind. */\n\treadonly aggregate?: AggregateContribution;\n\t/** Emit operation; writes generated file declarations through the\n\t *  supplied context. */\n\treadonly emit: (ctx: CodegenEmitContext) => Effect.Effect<CodegenEmitDone>;\n}\n"],"mappings":";;;;;;;;;;;;;AA0BA,IAAa,UAAb,MAAqB;CAEC;CADrB,YAAqB;CACrB,YAAY,MAAuB;EAAd,KAAA,OAAA;CAAe;AACrC;;AAGA,MAAa,WAAW,SAA0B,IAAI,QAAQ,IAAI;;AAGlE,MAAa,aAAa,MACzB,OAAO,MAAM,YAAY,MAAM,QAAS,EAA8B,cAAc"}

package/dist/contracts/config-bindings.mjs

@@ -0,0 +1,162 @@
+import { rawExpr } from "./codegenable.mjs";
+import { Effect } from "effect";
+//#region src/contracts/config-bindings.ts
+/** Set `value` at `path` inside `root`, creating intermediate objects. */
+const setAtPath = (root, path, value) => {
+	let cursor = root;
+	for (let i = 0; i < path.length - 1; i++) {
+		const segment = path[i];
+		const next = cursor[segment];
+		if (typeof next === "object" && next !== null && !Array.isArray(next)) cursor = next;
+		else {
+			const created = {};
+			cursor[segment] = created;
+			cursor = created;
+		}
+	}
+	cursor[path[path.length - 1]] = value;
+};
+/** The `rawExpr` the STATIC path emits for a resolved binding. */
+const staticExprFor = (binding) => {
+	const sugar = binding.sugar;
+	if (sugar === void 0) {
+		const call = `resolveValue(${JSON.stringify(binding.namespace)}, ${JSON.stringify(binding.key)})`;
+		return rawExpr(binding.tsType === void 0 ? call : `${call} as ${binding.tsType}`);
+	}
+	switch (sugar.kind) {
+		case "id": return rawExpr(`resolveId(${JSON.stringify(sugar.mvrPlaceholder)})`);
+		case "network": return rawExpr("resolveNetwork()");
+		case "networks": return rawExpr("resolveNetworks()");
+	}
+};
+/** Build the STATIC (committed-tree) aggregate projection from a binding
+*  set — `rawExpr(resolve…())` for resolved bindings, literals for the
+*  rest. Pure: needs no acquired state. */
+const projectStaticConfig = (set) => {
+	const root = {};
+	for (const binding of set.bindings) {
+		const value = binding.variant === "literal" ? binding.value : staticExprFor(binding);
+		setAtPath(root, binding.configPath, value);
+	}
+	return root;
+};
+/** Build the LIVE (boot) aggregate projection from a binding set against
+*  the acquired plugin state — concrete resolved values everywhere. */
+const projectLiveConfig = (set, state) => {
+	const root = {};
+	for (const binding of set.bindings) {
+		const value = binding.variant === "literal" ? binding.value : binding.live(state);
+		setAtPath(root, binding.configPath, value);
+	}
+	return root;
+};
+/**
+* Derive the live `idConfig.values[namespace][key]` contributions of a
+* binding set. Only `resolved` bindings WITHOUT a `sugar` resolver land in
+* the generic channel (sugar bindings feed the typed id-config fields,
+* sliced from the live `config.ts` bucket by `idConfigFromBucket`). The
+* generic channel is the part the fixed typed schema can't carry.
+*/
+const liveValuesOf = (set, state) => {
+	const out = {};
+	for (const binding of set.bindings) {
+		if (binding.variant !== "resolved" || binding.sugar !== void 0) continue;
+		const ns = out[binding.namespace] ??= {};
+		ns[binding.key] = binding.live(state);
+	}
+	return out;
+};
+/**
+* Derive a `CodegenableDecl` from a binding set.
+*
+* `'static'` → the committed-tree decl (stack-free `codegen` verb). Its
+* aggregate emits `rawExpr(resolve…())` for resolved bindings.
+*
+* `{ mode: 'live', state }` → the boot decl. Its aggregate bakes concrete
+* values from `state`; boot's `assembleIdConfig` reads those back into the
+* loadable id-config (typed channel + the generic `values` channel).
+*/
+const configCodegenable = (set, how, options = {}) => {
+	const live = how !== "static";
+	const projected = live ? projectLiveConfig(set, how.state) : projectStaticConfig(set);
+	const idConfigValues = live ? liveValuesOf(set, how.state) : {};
+	const extraExports = options.extraExports;
+	return {
+		kind: "codegenable",
+		emitterName: set.emitterName,
+		outputPath: set.outputPath ?? set.bucket,
+		aggregateOnly: true,
+		...set.allowEmitterNameRepetition === true ? { allowEmitterNameRepetition: true } : {},
+		aggregate: {
+			kind: set.kind,
+			bucket: set.bucket,
+			project: () => projected,
+			...live && Object.keys(idConfigValues).length > 0 ? { idConfigValues } : {}
+		},
+		emit: (ctx) => Effect.sync(() => {
+			if (extraExports !== void 0) for (const [name, value] of Object.entries(extraExports)) ctx.exportConst(name, value);
+			else ctx.exportConst("__configBindings", set.kind);
+			return ctx.done();
+		})
+	};
+};
+/** Convenience constructor for the keyed-bucket shape the service plugins
+*  share (coin/deepbook/seal): every sibling instance keys under `<key>` in
+*  `<bucket>`, with `emitterName = `<kind>/<key>``, `namespace = `<kind>:<key>``,
+*  `instanceKey = <key>`, and `allowEmitterNameRepetition` (instances share the
+*  `<kind>/` emitter prefix). Only `bucket`/`kind`/`key`/`fields` vary across
+*  those plugins, so this keeps the `<kind>/<key>` + `<kind>:<key>` naming
+*  convention in ONE place instead of re-spelling it per plugin. */
+const keyedBucketSpec = (input) => ({
+	bucket: input.bucket,
+	kind: input.kind,
+	emitterName: `${input.kind}/${input.key}`,
+	instanceKey: input.key,
+	namespace: `${input.kind}:${input.key}`,
+	allowEmitterNameRepetition: true,
+	fields: input.fields
+});
+/** Build the `ConfigBindingSet` for a sibling-keyed bucket instance. The
+*  `configPath` of every binding is rooted at the instance key, so distinct
+*  instances deep-merge into one `<bucket>.ts` exporting
+*  `{ <instanceKey>: { ...fields } }`. */
+const siblingBucketBindings = (spec) => {
+	const bindings = spec.fields.map((field) => {
+		const configPath = [spec.instanceKey, field.key];
+		if (field.variant === "literal") return {
+			variant: "literal",
+			configPath: [...configPath],
+			value: field.value
+		};
+		return {
+			variant: "resolved",
+			configPath: [...configPath],
+			namespace: spec.namespace,
+			key: field.valueKey ?? field.key,
+			...field.tsType !== void 0 ? { tsType: field.tsType } : {},
+			live: field.live
+		};
+	});
+	return {
+		bucket: spec.bucket,
+		kind: spec.kind,
+		emitterName: spec.emitterName,
+		...spec.outputPath !== void 0 ? { outputPath: spec.outputPath } : {},
+		...spec.allowEmitterNameRepetition === true ? { allowEmitterNameRepetition: true } : {},
+		bindings
+	};
+};
+/** Derive the LIVE bucket decl — feeds concrete values into the generic
+*  id-config `values` channel (no per-stack generated file is written). */
+const liveBucketCodegen = (spec, state) => configCodegenable(siblingBucketBindings(spec), {
+	mode: "live",
+	state
+});
+/** Derive the STATIC (stack-free) bucket decl — emits
+*  `resolveValue(namespace, key)` for resolved fields, literals for the
+*  rest. The committed `<bucket>.ts` carries no baked runtime value. */
+const staticBucketCodegen = (spec) => configCodegenable(siblingBucketBindings(spec), "static");
+//#endregion
+export { configCodegenable, keyedBucketSpec, liveBucketCodegen, staticBucketCodegen };
+
+//# sourceMappingURL=config-bindings.mjs.map

package/dist/contracts/config-bindings.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-bindings.mjs","names":[],"sources":["../../src/contracts/config-bindings.ts"],"sourcesContent":["// Unified config-binding contract.\n//\n// THE PROBLEM THIS SOLVES. A config-emitting plugin used to maintain TWO\n// near-duplicate projectors:\n//   - a LIVE one (boot): bakes concrete resolved values (real ids, rpc\n//     URLs) into the loadable id-config (`assembleIdConfig`), and\n//   - a STATIC one (the stack-free `codegen` verb): emits\n//     `rawExpr(resolve…())` into the committed `config.ts` so the tree\n//     carries NO on-chain id.\n// Two hand-written projectors per plugin is error-prone: forget the static\n// path and the committed tree is incomplete (broken clean-clone build);\n// the fixed typed id-config channel also can't carry arbitrary plugin live\n// values (deepbook pool ids, coin types, walrus/seal endpoints).\n//\n// THE UNIFICATION. A plugin declares its `config.ts` contributions ONCE as\n// a `ConfigBindingSet`. BOTH paths are DERIVED from it:\n//   - `configCodegenable(set, 'static')` → the committed-tree decl whose\n//     aggregate emits `rawExpr(resolveValue(...))` / typed-sugar resolvers\n//     (and pure literals as literals).\n//   - `configCodegenable(set, { mode: 'live', state })` → the boot decl\n//     whose aggregate carries concrete resolved values that feed ONLY the\n//     loadable id-config (typed channel + the generic `values` channel) —\n//     no per-stack generated source is written; the committed `src/generated`\n//     tree stays the single bindings source.\n//\n// One declaration, two derivations — no parallel projectors to drift.\n\nimport { Effect } from 'effect';\n\nimport type { CodegenableDecl } from './codegenable.ts';\nimport { rawExpr } from './codegenable.ts';\nimport type { JsonValue } from '../orchestrators/codegen/id-config.ts';\n\n// -----------------------------------------------------------------------------\n// Binding shape\n// -----------------------------------------------------------------------------\n\n/** A typed-sugar resolver a binding may target instead of the generic\n *  `resolveValue(namespace, key)` channel. Each maps to a `config-runtime.ts`\n *  function: `id` → `resolveId(<arg>)`, `network` → `resolveNetwork()`,\n *  `networks` → `resolveNetworks()`. Sugar bindings also feed the TYPED\n *  id-config fields (`mvrOverrides`/`network`/`networks`), not the generic\n *  `values` channel — that keeps `config.network`/`config.mvrOverrides`\n *  readable by apps exactly as before. */\nexport type ConfigSugarResolver =\n\t| { readonly kind: 'id'; readonly mvrPlaceholder: string }\n\t| { readonly kind: 'network' }\n\t| { readonly kind: 'networks' };\n\n/**\n * One config-binding. A plugin returns a list of these ONCE; the framework\n * derives both the live and static behaviors from them.\n *\n * Variants:\n *   - `literal`: the SAME value in both paths (e.g. the package `mvr`\n *     placeholder string, a network NAME you decide is static). Emitted\n *     verbatim in `config.ts`; mirrored into the live id-config too.\n *   - `resolved`: runtime-resolved. STATIC emits a resolver `rawExpr`;\n *     LIVE computes the concrete value via `live(state)` and routes it into\n *     the id-config — through the typed channel for a `sugar` resolver, or\n *     through the generic `values[namespace][key]` channel otherwise.\n */\nexport type ConfigBinding<State = unknown> =\n\t| {\n\t\t\treadonly variant: 'literal';\n\t\t\t/** Path into the `config.ts` object literal, e.g. `['network']`\n\t\t\t *  or `['packages', 'connect_four', 'mvr']`. */\n\t\t\treadonly configPath: ReadonlyArray<string>;\n\t\t\t/** The literal value (identical in both paths). */\n\t\t\treadonly value: JsonValue;\n\t  }\n\t| {\n\t\t\treadonly variant: 'resolved';\n\t\t\t/** Path into the `config.ts` object literal. */\n\t\t\treadonly configPath: ReadonlyArray<string>;\n\t\t\t/** Generic-channel coordinates. Always present so the live path\n\t\t\t *  can populate `idConfig.values[namespace][key]` even for a\n\t\t\t *  sugar-resolved binding (the sugar ALSO feeds the typed field;\n\t\t\t *  `values` is harmless redundancy and keeps the guard simple). */\n\t\t\treadonly namespace: string;\n\t\t\treadonly key: string;\n\t\t\t/** When set, the static path emits the typed-sugar resolver\n\t\t\t *  (`resolveId`/`resolveNetwork`/`resolveNetworks`) and the live\n\t\t\t *  path additionally feeds the TYPED id-config field. When\n\t\t\t *  omitted, the static path emits `resolveValue(namespace, key)`\n\t\t\t *  and the live value lands ONLY in the generic `values` channel. */\n\t\t\treadonly sugar?: ConfigSugarResolver;\n\t\t\t/** The field's STATIC TypeScript type, as a source string (e.g.\n\t\t\t *  `'string'`, `'string | null'`, or a structural literal type for a\n\t\t\t *  composite). When set, the static path emits\n\t\t\t *  `resolveValue(ns, key) as <tsType>` so the committed value carries\n\t\t\t *  its concrete type instead of the `unknown` the generic channel\n\t\t\t *  returns. Ignored for sugar bindings (those use the typed resolver\n\t\t\t *  whose return type is already concrete). When omitted, the static\n\t\t\t *  path emits a bare `resolveValue(ns, key)` (type `unknown`). */\n\t\t\treadonly tsType?: string;\n\t\t\t/** Compute the concrete value at boot from acquired plugin state.\n\t\t\t *  Only invoked on the LIVE path. */\n\t\t\treadonly live: (state: State) => JsonValue;\n\t  };\n\n/**\n * A plugin's full `config.ts` contribution, declared ONCE.\n *\n * `bucket` is always `'config.ts'` for the typed app config; carried as a\n * field so the orchestrator stays name-blind (it reads the bucket off the\n * decl rather than hard-coding it).\n */\nexport interface ConfigBindingSet<State = unknown> {\n\t/** Aggregate bucket the bindings fold into (always `'config.ts'` today;\n\t *  a field so the orchestrator never hard-codes it). */\n\treadonly bucket: string;\n\t/** Diagnostic tag for span attributes (e.g. `'sui-network'`,\n\t *  `'package'`). The orchestrator MUST NOT branch on it. */\n\treadonly kind: string;\n\t/** The emitter name the derived `CodegenableDecl` carries. */\n\treadonly emitterName: string;\n\t/** Optional standalone output path. The derived decl is `aggregateOnly`,\n\t *  so no per-decl file is written; path-resolution only needs a non-empty,\n\t *  per-bucket-unique string, which defaults to `bucket` when omitted. Set\n\t *  it only when a standalone path would be genuinely meaningful. */\n\treadonly outputPath?: string;\n\t/** When `true`, the derived decl sets `allowEmitterNameRepetition`\n\t *  (one decl per item, e.g. one `package` per published package). */\n\treadonly allowEmitterNameRepetition?: boolean;\n\t/** The bindings. */\n\treadonly bindings: ReadonlyArray<ConfigBinding<State>>;\n}\n\n// -----------------------------------------------------------------------------\n// Derivation\n// -----------------------------------------------------------------------------\n\n/** Set `value` at `path` inside `root`, creating intermediate objects. */\nconst setAtPath = (\n\troot: Record<string, unknown>,\n\tpath: ReadonlyArray<string>,\n\tvalue: unknown,\n): void => {\n\tlet cursor = root;\n\tfor (let i = 0; i < path.length - 1; i++) {\n\t\tconst segment = path[i]!;\n\t\tconst next = cursor[segment];\n\t\tif (typeof next === 'object' && next !== null && !Array.isArray(next)) {\n\t\t\tcursor = next as Record<string, unknown>;\n\t\t} else {\n\t\t\tconst created: Record<string, unknown> = {};\n\t\t\tcursor[segment] = created;\n\t\t\tcursor = created;\n\t\t}\n\t}\n\tcursor[path[path.length - 1]!] = value;\n};\n\n/** The `rawExpr` the STATIC path emits for a resolved binding. */\nconst staticExprFor = <State>(\n\tbinding: Extract<ConfigBinding<State>, { variant: 'resolved' }>,\n): ReturnType<typeof rawExpr> => {\n\tconst sugar = binding.sugar;\n\tif (sugar === undefined) {\n\t\tconst call = `resolveValue(${JSON.stringify(binding.namespace)}, ${JSON.stringify(binding.key)})`;\n\t\t// A `tsType` carries the field's concrete static type so the committed\n\t\t// value typechecks against the app's usage (the generic channel returns\n\t\t// `unknown`). Emit the call as a typed cast; bare otherwise.\n\t\treturn rawExpr(binding.tsType === undefined ? call : `${call} as ${binding.tsType}`);\n\t}\n\tswitch (sugar.kind) {\n\t\tcase 'id':\n\t\t\treturn rawExpr(`resolveId(${JSON.stringify(sugar.mvrPlaceholder)})`);\n\t\tcase 'network':\n\t\t\treturn rawExpr('resolveNetwork()');\n\t\tcase 'networks':\n\t\t\treturn rawExpr('resolveNetworks()');\n\t}\n};\n\n/** Build the STATIC (committed-tree) aggregate projection from a binding\n *  set — `rawExpr(resolve…())` for resolved bindings, literals for the\n *  rest. Pure: needs no acquired state. */\nexport const projectStaticConfig = <State>(\n\tset: ConfigBindingSet<State>,\n): Record<string, unknown> => {\n\tconst root: Record<string, unknown> = {};\n\tfor (const binding of set.bindings) {\n\t\tconst value = binding.variant === 'literal' ? binding.value : staticExprFor(binding);\n\t\tsetAtPath(root, binding.configPath, value);\n\t}\n\treturn root;\n};\n\n/** Build the LIVE (boot) aggregate projection from a binding set against\n *  the acquired plugin state — concrete resolved values everywhere. */\nexport const projectLiveConfig = <State>(\n\tset: ConfigBindingSet<State>,\n\tstate: State,\n): Record<string, unknown> => {\n\tconst root: Record<string, unknown> = {};\n\tfor (const binding of set.bindings) {\n\t\tconst value = binding.variant === 'literal' ? binding.value : binding.live(state);\n\t\tsetAtPath(root, binding.configPath, value);\n\t}\n\treturn root;\n};\n\n/**\n * Derive the live `idConfig.values[namespace][key]` contributions of a\n * binding set. Only `resolved` bindings WITHOUT a `sugar` resolver land in\n * the generic channel (sugar bindings feed the typed id-config fields,\n * sliced from the live `config.ts` bucket by `idConfigFromBucket`). The\n * generic channel is the part the fixed typed schema can't carry.\n */\nexport const liveValuesOf = <State>(\n\tset: ConfigBindingSet<State>,\n\tstate: State,\n): Record<string, Record<string, JsonValue>> => {\n\tconst out: Record<string, Record<string, JsonValue>> = {};\n\tfor (const binding of set.bindings) {\n\t\tif (binding.variant !== 'resolved' || binding.sugar !== undefined) continue;\n\t\tconst ns = (out[binding.namespace] ??= {});\n\t\tns[binding.key] = binding.live(state);\n\t}\n\treturn out;\n};\n\n/**\n * Derive a `CodegenableDecl` from a binding set.\n *\n * `'static'` → the committed-tree decl (stack-free `codegen` verb). Its\n * aggregate emits `rawExpr(resolve…())` for resolved bindings.\n *\n * `{ mode: 'live', state }` → the boot decl. Its aggregate bakes concrete\n * values from `state`; boot's `assembleIdConfig` reads those back into the\n * loadable id-config (typed channel + the generic `values` channel).\n */\nexport const configCodegenable = <State, Emitter extends string = string>(\n\tset: ConfigBindingSet<State>,\n\thow: 'static' | { readonly mode: 'live'; readonly state: State },\n\toptions: {\n\t\t/** Extra `export const <name> = <value>` declarations to emit on the\n\t\t *  decl's `emit` context, instead of the default placeholder export.\n\t\t *  The package plugin uses this to export its `packageBindings` object\n\t\t *  so the orchestrator's `isPackageBindings` seam can forward it to the\n\t\t *  Move-bindings emitter. When omitted, a single minimal placeholder\n\t\t *  export is emitted (the projection is what the aggregate folds). */\n\t\treadonly extraExports?: Readonly<Record<string, unknown>>;\n\t} = {},\n): CodegenableDecl<Emitter> => {\n\tconst live = how !== 'static';\n\tconst projected = live ? projectLiveConfig(set, how.state) : projectStaticConfig(set);\n\tconst idConfigValues = live ? liveValuesOf(set, how.state) : {};\n\tconst extraExports = options.extraExports;\n\treturn {\n\t\tkind: 'codegenable',\n\t\temitterName: set.emitterName as Emitter,\n\t\t// `aggregateOnly` never writes a standalone file; default the\n\t\t// path-resolution placeholder to the bucket name so plugins don't\n\t\t// invent dead paths.\n\t\toutputPath: set.outputPath ?? set.bucket,\n\t\taggregateOnly: true,\n\t\t...(set.allowEmitterNameRepetition === true ? { allowEmitterNameRepetition: true } : {}),\n\t\taggregate: {\n\t\t\tkind: set.kind,\n\t\t\tbucket: set.bucket,\n\t\t\t// The projection is precomputed above (pure over `set`/`state`);\n\t\t\t// the orchestrator calls `project(exported)` with the emitted map\n\t\t\t// but the value is already fixed, so we ignore the argument.\n\t\t\tproject: () => projected,\n\t\t\t// Only the live aggregate feeds the generic id-config channel.\n\t\t\t...(live && Object.keys(idConfigValues).length > 0 ? { idConfigValues } : {}),\n\t\t},\n\t\temit: (ctx) =>\n\t\t\tEffect.sync(() => {\n\t\t\t\tif (extraExports !== undefined) {\n\t\t\t\t\tfor (const [name, value] of Object.entries(extraExports)) {\n\t\t\t\t\t\tctx.exportConst(name, value);\n\t\t\t\t\t}\n\t\t\t\t} else {\n\t\t\t\t\t// A placeholder export so the emitter runs; the projection is\n\t\t\t\t\t// what the aggregate folds. Kept minimal + name-stable.\n\t\t\t\t\tctx.exportConst('__configBindings', set.kind);\n\t\t\t\t}\n\t\t\t\treturn ctx.done();\n\t\t\t}),\n\t};\n};\n\n// -----------------------------------------------------------------------------\n// Sibling-keyed bucket bindings\n// -----------------------------------------------------------------------------\n//\n// The own-bucket service plugins (coin → `coins.ts`, deepbook → `deepbook.ts`,\n// seal → `seal.ts`) emit a name-keyed bucket where distinct instances deep-merge\n// into one `<bucket>.ts` exporting `{ <instanceKey>: { ...fields } }`. They\n// declare their per-instance contribution as a flat list of `BucketField`s\n// (each a structural literal or a runtime-resolved value rooted under the\n// instance key); the helpers below derive the `ConfigBindingSet` and both the\n// live/static decls from it, so there are no parallel projectors to drift.\n\n/** One field of an instance's bucket entry, classified as either a pure\n *  STRUCTURAL literal (a name / mode / decimals — the same in both paths)\n *  or a runtime-RESOLVED value (an on-chain id, coin type, or endpoint URL —\n *  the static path emits `resolveValue`, the live path feeds the concrete\n *  value into the id-config). The `key` is the leaf field name written under\n *  the instance key in the bucket object literal. */\nexport type BucketField<State> =\n\t| { readonly key: string; readonly variant: 'literal'; readonly value: JsonValue }\n\t| {\n\t\t\treadonly key: string;\n\t\t\treadonly variant: 'resolved';\n\t\t\t/** `resolveValue(namespace, valueKey)` coordinates. `valueKey`\n\t\t\t *  defaults to `key` when omitted. */\n\t\t\treadonly valueKey?: string;\n\t\t\t/** The field's STATIC TypeScript type as a source string (see\n\t\t\t *  `ConfigBinding.tsType`). When set, the static path emits\n\t\t\t *  `resolveValue(...) as <tsType>` so the committed value carries its\n\t\t\t *  concrete type instead of `unknown`. */\n\t\t\treadonly tsType?: string;\n\t\t\treadonly live: (state: State) => JsonValue;\n\t  };\n\nexport interface SiblingBucketSpec<State> {\n\t/** The aggregate bucket filename, e.g. `'coins.ts'`. */\n\treadonly bucket: string;\n\t/** Diagnostic kind tag (e.g. `'coin'`) — the orchestrator never\n\t *  branches on it. */\n\treadonly kind: string;\n\t/** The emitter name the derived decl carries (literal, e.g.\n\t *  `coin/<symbol>`). */\n\treadonly emitterName: string;\n\t/** Optional standalone output path. Defaults to `bucket` (the decl is\n\t *  `aggregateOnly`, so no per-decl file is written). */\n\treadonly outputPath?: string;\n\t/** The instance key the entry lives under in the bucket object\n\t *  (e.g. the coin symbol, the deepbook instance name). */\n\treadonly instanceKey: string;\n\t/** The `resolveValue` namespace shared by every resolved field\n\t *  (e.g. `coin:<symbol>`, `deepbook:<name>`). */\n\treadonly namespace: string;\n\t/** The instance's fields. */\n\treadonly fields: ReadonlyArray<BucketField<State>>;\n\t/** When `true`, the derived decl sets `allowEmitterNameRepetition`\n\t *  (sibling instances share an emitter-name prefix). */\n\treadonly allowEmitterNameRepetition?: boolean;\n}\n\n/** Convenience constructor for the keyed-bucket shape the service plugins\n *  share (coin/deepbook/seal): every sibling instance keys under `<key>` in\n *  `<bucket>`, with `emitterName = `<kind>/<key>``, `namespace = `<kind>:<key>``,\n *  `instanceKey = <key>`, and `allowEmitterNameRepetition` (instances share the\n *  `<kind>/` emitter prefix). Only `bucket`/`kind`/`key`/`fields` vary across\n *  those plugins, so this keeps the `<kind>/<key>` + `<kind>:<key>` naming\n *  convention in ONE place instead of re-spelling it per plugin. */\nexport const keyedBucketSpec = <State>(input: {\n\treadonly bucket: string;\n\treadonly kind: string;\n\treadonly key: string;\n\treadonly fields: ReadonlyArray<BucketField<State>>;\n}): SiblingBucketSpec<State> => ({\n\tbucket: input.bucket,\n\tkind: input.kind,\n\temitterName: `${input.kind}/${input.key}`,\n\tinstanceKey: input.key,\n\tnamespace: `${input.kind}:${input.key}`,\n\tallowEmitterNameRepetition: true,\n\tfields: input.fields,\n});\n\n/** Build the `ConfigBindingSet` for a sibling-keyed bucket instance. The\n *  `configPath` of every binding is rooted at the instance key, so distinct\n *  instances deep-merge into one `<bucket>.ts` exporting\n *  `{ <instanceKey>: { ...fields } }`. */\nexport const siblingBucketBindings = <State>(\n\tspec: SiblingBucketSpec<State>,\n): ConfigBindingSet<State> => {\n\tconst bindings: Array<ConfigBinding<State>> = spec.fields.map((field) => {\n\t\tconst configPath = [spec.instanceKey, field.key] as const;\n\t\tif (field.variant === 'literal') {\n\t\t\treturn { variant: 'literal', configPath: [...configPath], value: field.value };\n\t\t}\n\t\treturn {\n\t\t\tvariant: 'resolved',\n\t\t\tconfigPath: [...configPath],\n\t\t\tnamespace: spec.namespace,\n\t\t\tkey: field.valueKey ?? field.key,\n\t\t\t// No `sugar` — these are generic `resolveValue` bindings (the typed\n\t\t\t// id-config channel only carries network/packages/mvrOverrides).\n\t\t\t...(field.tsType !== undefined ? { tsType: field.tsType } : {}),\n\t\t\tlive: field.live,\n\t\t};\n\t});\n\treturn {\n\t\tbucket: spec.bucket,\n\t\tkind: spec.kind,\n\t\temitterName: spec.emitterName,\n\t\t...(spec.outputPath !== undefined ? { outputPath: spec.outputPath } : {}),\n\t\t...(spec.allowEmitterNameRepetition === true ? { allowEmitterNameRepetition: true } : {}),\n\t\tbindings,\n\t};\n};\n\n/** Derive the LIVE bucket decl — feeds concrete values into the generic\n *  id-config `values` channel (no per-stack generated file is written). */\nexport const liveBucketCodegen = <State>(\n\tspec: SiblingBucketSpec<State>,\n\tstate: State,\n): CodegenableDecl => configCodegenable(siblingBucketBindings(spec), { mode: 'live', state });\n\n/** Derive the STATIC (stack-free) bucket decl — emits\n *  `resolveValue(namespace, key)` for resolved fields, literals for the\n *  rest. The committed `<bucket>.ts` carries no baked runtime value. */\nexport const staticBucketCodegen = <State>(spec: SiblingBucketSpec<State>): CodegenableDecl =>\n\tconfigCodegenable(siblingBucketBindings(spec), 'static');\n"],"mappings":";;;;AAsIA,MAAM,aACL,MACA,MACA,UACU;CACV,IAAI,SAAS;CACb,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,SAAS,GAAG,KAAK;EACzC,MAAM,UAAU,KAAK;EACrB,MAAM,OAAO,OAAO;EACpB,IAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,CAAC,MAAM,QAAQ,IAAI,GACnE,SAAS;OACH;GACN,MAAM,UAAmC,CAAC;GAC1C,OAAO,WAAW;GAClB,SAAS;EACV;CACD;CACA,OAAO,KAAK,KAAK,SAAS,MAAO;AAClC;;AAGA,MAAM,iBACL,YACgC;CAChC,MAAM,QAAQ,QAAQ;CACtB,IAAI,UAAU,KAAA,GAAW;EACxB,MAAM,OAAO,gBAAgB,KAAK,UAAU,QAAQ,SAAS,EAAE,IAAI,KAAK,UAAU,QAAQ,GAAG,EAAE;EAI/F,OAAO,QAAQ,QAAQ,WAAW,KAAA,IAAY,OAAO,GAAG,KAAK,MAAM,QAAQ,QAAQ;CACpF;CACA,QAAQ,MAAM,MAAd;EACC,KAAK,MACJ,OAAO,QAAQ,aAAa,KAAK,UAAU,MAAM,cAAc,EAAE,EAAE;EACpE,KAAK,WACJ,OAAO,QAAQ,kBAAkB;EAClC,KAAK,YACJ,OAAO,QAAQ,mBAAmB;CACpC;AACD;;;;AAKA,MAAa,uBACZ,QAC6B;CAC7B,MAAM,OAAgC,CAAC;CACvC,KAAK,MAAM,WAAW,IAAI,UAAU;EACnC,MAAM,QAAQ,QAAQ,YAAY,YAAY,QAAQ,QAAQ,cAAc,OAAO;EACnF,UAAU,MAAM,QAAQ,YAAY,KAAK;CAC1C;CACA,OAAO;AACR;;;AAIA,MAAa,qBACZ,KACA,UAC6B;CAC7B,MAAM,OAAgC,CAAC;CACvC,KAAK,MAAM,WAAW,IAAI,UAAU;EACnC,MAAM,QAAQ,QAAQ,YAAY,YAAY,QAAQ,QAAQ,QAAQ,KAAK,KAAK;EAChF,UAAU,MAAM,QAAQ,YAAY,KAAK;CAC1C;CACA,OAAO;AACR;;;;;;;;AASA,MAAa,gBACZ,KACA,UAC+C;CAC/C,MAAM,MAAiD,CAAC;CACxD,KAAK,MAAM,WAAW,IAAI,UAAU;EACnC,IAAI,QAAQ,YAAY,cAAc,QAAQ,UAAU,KAAA,GAAW;EACnE,MAAM,KAAM,IAAI,QAAQ,eAAe,CAAC;EACxC,GAAG,QAAQ,OAAO,QAAQ,KAAK,KAAK;CACrC;CACA,OAAO;AACR;;;;;;;;;;;AAYA,MAAa,qBACZ,KACA,KACA,UAQI,CAAC,MACyB;CAC9B,MAAM,OAAO,QAAQ;CACrB,MAAM,YAAY,OAAO,kBAAkB,KAAK,IAAI,KAAK,IAAI,oBAAoB,GAAG;CACpF,MAAM,iBAAiB,OAAO,aAAa,KAAK,IAAI,KAAK,IAAI,CAAC;CAC9D,MAAM,eAAe,QAAQ;CAC7B,OAAO;EACN,MAAM;EACN,aAAa,IAAI;EAIjB,YAAY,IAAI,cAAc,IAAI;EAClC,eAAe;EACf,GAAI,IAAI,+BAA+B,OAAO,EAAE,4BAA4B,KAAK,IAAI,CAAC;EACtF,WAAW;GACV,MAAM,IAAI;GACV,QAAQ,IAAI;GAIZ,eAAe;GAEf,GAAI,QAAQ,OAAO,KAAK,cAAc,CAAC,CAAC,SAAS,IAAI,EAAE,eAAe,IAAI,CAAC;EAC5E;EACA,OAAO,QACN,OAAO,WAAW;GACjB,IAAI,iBAAiB,KAAA,GACpB,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,YAAY,GACtD,IAAI,YAAY,MAAM,KAAK;QAK5B,IAAI,YAAY,oBAAoB,IAAI,IAAI;GAE7C,OAAO,IAAI,KAAK;EACjB,CAAC;CACH;AACD;;;;;;;;AAoEA,MAAa,mBAA0B,WAKN;CAChC,QAAQ,MAAM;CACd,MAAM,MAAM;CACZ,aAAa,GAAG,MAAM,KAAK,GAAG,MAAM;CACpC,aAAa,MAAM;CACnB,WAAW,GAAG,MAAM,KAAK,GAAG,MAAM;CAClC,4BAA4B;CAC5B,QAAQ,MAAM;AACf;;;;;AAMA,MAAa,yBACZ,SAC6B;CAC7B,MAAM,WAAwC,KAAK,OAAO,KAAK,UAAU;EACxE,MAAM,aAAa,CAAC,KAAK,aAAa,MAAM,GAAG;EAC/C,IAAI,MAAM,YAAY,WACrB,OAAO;GAAE,SAAS;GAAW,YAAY,CAAC,GAAG,UAAU;GAAG,OAAO,MAAM;EAAM;EAE9E,OAAO;GACN,SAAS;GACT,YAAY,CAAC,GAAG,UAAU;GAC1B,WAAW,KAAK;GAChB,KAAK,MAAM,YAAY,MAAM;GAG7B,GAAI,MAAM,WAAW,KAAA,IAAY,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;GAC7D,MAAM,MAAM;EACb;CACD,CAAC;CACD,OAAO;EACN,QAAQ,KAAK;EACb,MAAM,KAAK;EACX,aAAa,KAAK;EAClB,GAAI,KAAK,eAAe,KAAA,IAAY,EAAE,YAAY,KAAK,WAAW,IAAI,CAAC;EACvE,GAAI,KAAK,+BAA+B,OAAO,EAAE,4BAA4B,KAAK,IAAI,CAAC;EACvF;CACD;AACD;;;AAIA,MAAa,qBACZ,MACA,UACqB,kBAAkB,sBAAsB,IAAI,GAAG;CAAE,MAAM;CAAQ;AAAM,CAAC;;;;AAK5F,MAAa,uBAA8B,SAC1C,kBAAkB,sBAAsB,IAAI,GAAG,QAAQ"}