@mysten-incubation/devstack 0.1.1 → 0.2.0

package/dist/orchestrators/codegen/bindings.mjs

@@ -10,6 +10,16 @@ import { generateFromPackageSummary } from "@mysten/codegen";
 var MoveSummaryRunnerService = class extends Context.Service()("@devstack/orchestrator/MoveSummaryRunner") {};
 var MoveCodegenService = class extends Context.Service()("@devstack/orchestrator/MoveCodegen") {};
 /**
+* Consumer-side shape guard: does an aggregated value look like a
+* Move-bindings contribution that `emitBindings` knows how to consume?
+* This is structural validation of the orchestrator's own input
+* contract, NOT a plugin-name match — any plugin whose
+* `aggregate.project` returns objects with this shape is forwarded to
+* the Move bindings emitter. The single definition of the seam; both
+* the codegen orchestrator service and the Package plugin reference it.
+*/
+const isPackageBindings = (v) => typeof v === "object" && v !== null && "name" in v && "packageId" in v && "mvrPlaceholder" in v && "sourcePath" in v;
+/**
 * Walk the `PackageBindings` set, filter to LOCAL packages
 * (`sourcePath !== null`), run `sui move summary` + `@mysten/codegen`
 * for each, and write the rendered files into `bindingsDir/<name>/`.
@@ -21,7 +31,8 @@ const emitBindings = (input) => Effect.gen(function* () {
 	const runner = yield* MoveSummaryRunnerService;
 	const generator = yield* MoveCodegenService;
 	const importExtension = input.importExtension ?? ".ts";
-	const seen = /* @__PURE__ */ new Set();
+	const seenIdentityByName = /* @__PURE__ */ new Map();
+	const identityOf = (pkg) => `${pkg.packageId} ${pkg.sourcePath ?? ""}`;
 	const targets = [];
 	const skipped = [];
 	for (const pkg of input.packages) {
@@ -33,12 +44,14 @@ const emitBindings = (input) => Effect.gen(function* () {
 			skipped.push(pkg.name);
 			continue;
 		}
-		if (seen.has(pkg.name)) {
-			yield* Effect.logWarning(`codegen.bindings: duplicate package name '${pkg.name}' — keeping first and skipping duplicate to avoid HMR re-emit storm. Rename one of the packages.`);
+		const identity = identityOf(pkg);
+		const seenIdentity = seenIdentityByName.get(pkg.name);
+		if (seenIdentity !== void 0) {
+			if (seenIdentity !== identity) yield* Effect.logWarning(`codegen.bindings: duplicate package name '${pkg.name}' — keeping first and skipping duplicate to avoid HMR re-emit storm. Rename one of the packages.`);
 			skipped.push(pkg.name);
 			continue;
 		}
-		seen.add(pkg.name);
+		seenIdentityByName.set(pkg.name, identity);
 		targets.push(pkg);
 	}
 	targets.sort((a, b) => a.name.localeCompare(b.name));
@@ -90,8 +103,8 @@ const emitBindings = (input) => Effect.gen(function* () {
 		packagesSkipped: skipped,
 		filesWritten
 	};
-}).pipe(Effect.withSpan("codegen.emitBindings", { attributes: { "codegen.bindingsDir": input.bindingsDir } }));
-const layerMystenMoveCodegen = Layer.succeed(MoveCodegenService, MoveCodegenService.of({ generate: (input) => Effect.tryPromise({
+});
+const layerMystenMoveCodegen = (options = {}) => Layer.succeed(MoveCodegenService, MoveCodegenService.of({ generate: (input) => Effect.tryPromise({
 	try: async () => {
 		const tmp = await mkdtemp(join(tmpdir(), "devstack-move-codegen-"));
 		try {
@@ -104,7 +117,8 @@ const layerMystenMoveCodegen = Layer.succeed(MoveCodegenService, MoveCodegenServ
 				},
 				prune: true,
 				outputDir: tmp,
-				importExtension: input.importExtension
+				importExtension: input.importExtension,
+				includePhantomTypeParameters: options.includePhantomTypeParameters
 			});
 			return await collectGeneratedFiles(tmp);
 		} finally {
@@ -141,7 +155,7 @@ const joinPath = (...parts) => parts.map((p, i) => i === 0 ? p.replace(/\/+$/, "
 *
 * Hand-parse rather than pull in a TOML dependency: the sibling Move-build
 * path already harvests `{ local = "../x" }` deps from Move.toml by regex
-* (`sui-move-build/index.ts`), and we only need the `[addresses]` section's
+* (`plugins/sui/move/index.ts`), and we only need the `[addresses]` section's
 * left-hand labels — never their values.
 */
 const resolveSummaryDirName = async (sourcePath) => {
@@ -201,6 +215,6 @@ const collectGeneratedFiles = async (root) => {
 	return out;
 };
 //#endregion
-export { MoveCodegenService, MoveSummaryRunnerService, emitBindings, layerMystenMoveCodegen };
+export { MoveCodegenService, MoveSummaryRunnerService, emitBindings, isPackageBindings, layerMystenMoveCodegen };
 
 //# sourceMappingURL=bindings.mjs.map

package/dist/orchestrators/codegen/bindings.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"bindings.mjs","names":[],"sources":["../../../src/orchestrators/codegen/bindings.ts"],"sourcesContent":["// Move-package bindings emission.\n//\n// Distilled-doc § \"Move-to-TS bindings: per-published-package typed\n// client modules produced from each local Move package's summary.\"\n// Drives `@mysten/codegen`'s `generateFromPackageSummary` against\n// `MoveSummary` JSON contributed by a plugin-owned\n// `MoveSummaryRunnerService`.\n//\n// sourcePath-known-vs-unknown discipline:\n//   - `Package` plugin's `Codegenable` emits a `PackageBindings`\n//     shape with `sourcePath: string | null`.\n//   - The bindings emitter filters to `sourcePath !== null` (i.e.\n//     LOCAL packages); `KnownPackage` entries (`sourcePath: null`)\n//     are skipped — their bindings come from the SDK or MVR.\n//\n// Architecture seam:\n//   - `MoveSummaryRunnerService` is contributed by a plugin (the\n//     sui plugin ships `layerSuiMoveSummaryRunnerDocker` /\n//     `layerSuiMoveSummaryRunnerHost`). The codegen orchestrator\n//     consumes only the abstract service — it never names the Sui\n//     CLI binary or container image (architecture: \"Orchestrator\n//     boundaries — never names a service\").\n//   - The call to `@mysten/codegen.generateFromPackageSummary` is\n//     similarly behind a tagged service so unit tests can stub it\n//     without pulling in the heavyweight `@mysten/codegen` graph.\n//\n// Distilled-doc § \"Silent no-op from a downstream tool is a\n// failure\": after summary + render, we probe the output dir.\n// If it's empty, that's a `CodegenBindingsFailed` with a hint about\n// the common `Move.toml` `[addresses]` cause.\n\nimport { mkdtemp, readdir, readFile, rm } from 'node:fs/promises';\nimport { tmpdir } from 'node:os';\nimport { join, relative, sep } from 'node:path';\n\nimport { generateFromPackageSummary } from '@mysten/codegen';\nimport { Context, Effect, FileSystem, Layer } from 'effect';\n\nimport type { ImageRef } from '../../contracts/container-runtime.ts';\n\nimport { emitOne } from './emit.ts';\nimport { CodegenBindingsFailed } from './errors.ts';\nimport { NON_SENSITIVE_DIR_MODE, NON_SENSITIVE_FILE_MODE } from './permissions.ts';\n\n// -----------------------------------------------------------------------------\n// Service seam — Move summary + codegen invocation\n// -----------------------------------------------------------------------------\n\n/** Result of `sui move summary` — opaque JSON the codegen generator\n *  consumes. We don't decode it here; `@mysten/codegen` owns the\n *  schema. */\nexport interface MoveSummary {\n\treadonly packageName: string;\n\treadonly sourcePath: string;\n\treadonly summaryPath?: string;\n\treadonly cleanupPath?: string;\n\treadonly summaryJson: unknown;\n}\n\nexport interface MoveSummaryInput {\n\treadonly packageName: string;\n\treadonly sourcePath: string;\n\treadonly buildImage?: ImageRef | null;\n}\n\n/** Shape of the Move summary runner. Implementations live in\n *  plugin packages (e.g. `plugins/sui/move-summary-runner.ts`\n *  exports `layerSuiMoveSummaryRunnerDocker` and\n *  `layerSuiMoveSummaryRunnerHost`); tests use `stubMoveSummaryRunner`\n *  below. */\nexport interface MoveSummaryRunner {\n\treadonly runSummary: (\n\t\tinput: MoveSummaryInput,\n\t) => Effect.Effect<MoveSummary, CodegenBindingsFailed>;\n}\n\nexport class MoveSummaryRunnerService extends Context.Service<\n\tMoveSummaryRunnerService,\n\tMoveSummaryRunner\n>()('@devstack/orchestrator/MoveSummaryRunner') {}\n\n/** Shape of the `@mysten/codegen` invocation. Returns the rendered\n *  TS files (path → content) for one package. */\nexport interface MoveCodegen {\n\treadonly generate: (input: {\n\t\treadonly packageName: string;\n\t\treadonly sourcePath: string;\n\t\treadonly summary: MoveSummary;\n\t\treadonly mvrPlaceholder: string;\n\t\treadonly importExtension: '.ts' | '.js' | '';\n\t}) => Effect.Effect<\n\t\tReadonlyArray<{ readonly relPath: string; readonly content: string }>,\n\t\tCodegenBindingsFailed\n\t>;\n}\n\nexport class MoveCodegenService extends Context.Service<MoveCodegenService, MoveCodegen>()(\n\t'@devstack/orchestrator/MoveCodegen',\n) {}\n\n// -----------------------------------------------------------------------------\n// Public entry — emit bindings for the local packages in a set of\n// PackageBindings contributions.\n// -----------------------------------------------------------------------------\n\nexport interface PackageBindings {\n\treadonly name: string;\n\treadonly packageId: string;\n\treadonly mvrPlaceholder: string;\n\treadonly sourcePath: string | null;\n\treadonly excluded: boolean;\n}\n\nexport interface EmitBindingsInput {\n\treadonly bindingsDir: string;\n\treadonly packages: ReadonlyArray<PackageBindings>;\n\treadonly importExtension?: '.ts' | '.js' | '';\n}\n\nexport interface EmitBindingsResult {\n\treadonly packagesEmitted: ReadonlyArray<string>;\n\treadonly packagesSkipped: ReadonlyArray<string>;\n\treadonly filesWritten: ReadonlyArray<string>;\n}\n\n/**\n * Walk the `PackageBindings` set, filter to LOCAL packages\n * (`sourcePath !== null`), run `sui move summary` + `@mysten/codegen`\n * for each, and write the rendered files into `bindingsDir/<name>/`.\n *\n * Serial within a cycle (distilled-doc § \"Serial within a cycle\":\n * shared Move build cache races). Per-package parallelism is unsafe.\n */\nexport const emitBindings = (\n\tinput: EmitBindingsInput,\n): Effect.Effect<\n\tEmitBindingsResult,\n\tCodegenBindingsFailed,\n\tFileSystem.FileSystem | MoveSummaryRunnerService | MoveCodegenService\n> =>\n\tEffect.gen(function* () {\n\t\tconst runner = yield* MoveSummaryRunnerService;\n\t\tconst generator = yield* MoveCodegenService;\n\t\tconst importExtension = input.importExtension ?? '.ts';\n\n\t\t// Dedup by package name. First-wins; distilled-doc § \"Duplicate\n\t\t// package names\": warn + skip the duplicate to avoid the HMR\n\t\t// re-emit storm.\n\t\tconst seen = new Set<string>();\n\t\tconst targets: Array<PackageBindings> = [];\n\t\tconst skipped: Array<string> = [];\n\t\tfor (const pkg of input.packages) {\n\t\t\tif (pkg.sourcePath === null) {\n\t\t\t\tskipped.push(pkg.name);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (pkg.excluded) {\n\t\t\t\tskipped.push(pkg.name);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (seen.has(pkg.name)) {\n\t\t\t\tyield* Effect.logWarning(\n\t\t\t\t\t`codegen.bindings: duplicate package name '${pkg.name}' — keeping ` +\n\t\t\t\t\t\t`first and skipping duplicate to avoid HMR re-emit storm. ` +\n\t\t\t\t\t\t`Rename one of the packages.`,\n\t\t\t\t);\n\t\t\t\tskipped.push(pkg.name);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tseen.add(pkg.name);\n\t\t\ttargets.push(pkg);\n\t\t}\n\t\t// Deterministic order: lexicographic by package name.\n\t\ttargets.sort((a, b) => a.name.localeCompare(b.name));\n\n\t\tconst emitted: Array<string> = [];\n\t\tconst filesWritten: Array<string> = [];\n\t\tfor (const pkg of targets) {\n\t\t\t// sourcePath is non-null per the filter above. Narrow.\n\t\t\tif (pkg.sourcePath === null) continue;\n\t\t\tconst summary = yield* runner.runSummary({\n\t\t\t\tpackageName: pkg.name,\n\t\t\t\tsourcePath: pkg.sourcePath,\n\t\t\t});\n\t\t\tconst files = yield* generator.generate({\n\t\t\t\tpackageName: pkg.name,\n\t\t\t\tsourcePath: pkg.sourcePath,\n\t\t\t\tsummary,\n\t\t\t\tmvrPlaceholder: pkg.mvrPlaceholder,\n\t\t\t\timportExtension,\n\t\t\t});\n\t\t\t// Post-emit probe — silent no-op detection.\n\t\t\tif (files.length === 0) {\n\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\tnew CodegenBindingsFailed({\n\t\t\t\t\t\tpackage: pkg.name,\n\t\t\t\t\t\tsourcePath: pkg.sourcePath,\n\t\t\t\t\t\treason: 'no-output',\n\t\t\t\t\t\thint:\n\t\t\t\t\t\t\t'The Move codegen generator produced no files. This is ' +\n\t\t\t\t\t\t\t'usually caused by a missing `[addresses]` block in the ' +\n\t\t\t\t\t\t\t\"package's Move.toml, or a non-published address mapping.\",\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}\n\t\t\tfor (const f of files) {\n\t\t\t\tif (f.relPath.includes('..') || f.relPath.startsWith('/')) {\n\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\tnew CodegenBindingsFailed({\n\t\t\t\t\t\t\tpackage: pkg.name,\n\t\t\t\t\t\t\tsourcePath: pkg.sourcePath,\n\t\t\t\t\t\t\treason: 'write-failed',\n\t\t\t\t\t\t\tcause: new Error(`generated binding path escapes output dir: ${f.relPath}`),\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tconst abs = joinPath(input.bindingsDir, f.relPath);\n\t\t\t\tconst outcome = yield* emitOne({\n\t\t\t\t\tpath: abs,\n\t\t\t\t\tcontent: stabilizeGeneratedBindingContent(f.content),\n\t\t\t\t\tmode: NON_SENSITIVE_FILE_MODE,\n\t\t\t\t\tparentMode: NON_SENSITIVE_DIR_MODE,\n\t\t\t\t}).pipe(\n\t\t\t\t\tEffect.mapError(\n\t\t\t\t\t\t(cause) =>\n\t\t\t\t\t\t\tnew CodegenBindingsFailed({\n\t\t\t\t\t\t\t\tpackage: pkg.name,\n\t\t\t\t\t\t\t\tsourcePath: pkg.sourcePath!,\n\t\t\t\t\t\t\t\treason: 'write-failed',\n\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\tif (outcome.outcome !== 'unchanged') {\n\t\t\t\t\tfilesWritten.push(abs);\n\t\t\t\t}\n\t\t\t}\n\t\t\temitted.push(pkg.name);\n\t\t}\n\n\t\treturn {\n\t\t\tpackagesEmitted: emitted,\n\t\t\tpackagesSkipped: skipped,\n\t\t\tfilesWritten,\n\t\t};\n\t}).pipe(\n\t\tEffect.withSpan('codegen.emitBindings', {\n\t\t\tattributes: { 'codegen.bindingsDir': input.bindingsDir },\n\t\t}),\n\t);\n\n// -----------------------------------------------------------------------------\n// Stub implementations for tests\n// -----------------------------------------------------------------------------\n\n/** Stub runner — returns a synthetic summary. Used in unit tests\n *  to exercise the bindings pipeline without a real `sui` binary. */\nexport const stubMoveSummaryRunner = (\n\tsummaryFor: (sourcePath: string) => MoveSummary,\n): MoveSummaryRunner => ({\n\trunSummary: ({ sourcePath }) => Effect.succeed(summaryFor(sourcePath)),\n});\n\n/** Stub generator — returns a synthetic file set. Used in unit\n *  tests to exercise the bindings pipeline without pulling in the\n *  heavyweight `@mysten/codegen` graph. */\nexport const stubMoveCodegen = (\n\tfiles: (\n\t\tinput: Parameters<MoveCodegen['generate']>[0],\n\t) => ReadonlyArray<{ readonly relPath: string; readonly content: string }>,\n): MoveCodegen => ({\n\tgenerate: (input) => Effect.succeed(files(input)),\n});\n\n// -----------------------------------------------------------------------------\n// Production implementations\n// -----------------------------------------------------------------------------\n//\n// Layer factories for `MoveSummaryRunnerService` are plugin-owned —\n// they live in `src/plugins/sui/move-summary-runner.ts`. The codegen\n// orchestrator does not name the Sui CLI binary or container image;\n// per \"Orchestrator boundaries — never names a service\", any plugin\n// that can produce `MoveSummary` JSON may contribute a runner Layer.\n\nexport const layerMystenMoveCodegen: Layer.Layer<MoveCodegenService> = Layer.succeed(\n\tMoveCodegenService,\n\tMoveCodegenService.of({\n\t\tgenerate: (input) =>\n\t\t\tEffect.tryPromise({\n\t\t\t\ttry: async () => {\n\t\t\t\t\tconst tmp = await mkdtemp(join(tmpdir(), 'devstack-move-codegen-'));\n\t\t\t\t\ttry {\n\t\t\t\t\t\t// `sui move summary` keys each `package_summaries/<dir>`\n\t\t\t\t\t\t// subdirectory by the package's NAMED ADDRESS, not its\n\t\t\t\t\t\t// `[package].name`. These legitimately differ (the canonical\n\t\t\t\t\t\t// example is MoveStdlib, whose package name is \"MoveStdlib\"\n\t\t\t\t\t\t// but whose named address is \"std\"). `@mysten/codegen`'s\n\t\t\t\t\t\t// resolver matches the summary subdir by either (1) a single\n\t\t\t\t\t\t// `[addresses]` label or (2) the `packageName` — but it reads\n\t\t\t\t\t\t// the Move.toml at the path WE pass it (the summary scratch\n\t\t\t\t\t\t// dir), which has NO `[addresses]` table, so its label-based\n\t\t\t\t\t\t// path (1) is defeated and it falls back to (2). We pass the\n\t\t\t\t\t\t// symbolic localPackage() NAME as `packageName`, which is the\n\t\t\t\t\t\t// `[package].name`, NOT the named address — so codegen throws\n\t\t\t\t\t\t// \"Could not identify main package directory\" whenever the two\n\t\t\t\t\t\t// differ. Recover the correct subdir name here from the REAL\n\t\t\t\t\t\t// source Move.toml's `[addresses]` table (which devstack still\n\t\t\t\t\t\t// has at `input.sourcePath`), falling back to the name when the\n\t\t\t\t\t\t// source is unreadable or ambiguous (a no-op for the common\n\t\t\t\t\t\t// case where name == address).\n\t\t\t\t\t\tconst packageName =\n\t\t\t\t\t\t\t(await resolveSummaryDirName(input.sourcePath)) ?? input.packageName;\n\t\t\t\t\t\tawait generateFromPackageSummary({\n\t\t\t\t\t\t\tpackage: {\n\t\t\t\t\t\t\t\tpath: input.summary.summaryPath ?? input.sourcePath,\n\t\t\t\t\t\t\t\tpackage: input.mvrPlaceholder,\n\t\t\t\t\t\t\t\tpackageName,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\tprune: true,\n\t\t\t\t\t\t\toutputDir: tmp,\n\t\t\t\t\t\t\timportExtension: input.importExtension,\n\t\t\t\t\t\t});\n\t\t\t\t\t\treturn await collectGeneratedFiles(tmp);\n\t\t\t\t\t} finally {\n\t\t\t\t\t\tawait rm(tmp, { recursive: true, force: true });\n\t\t\t\t\t\tif (input.summary.cleanupPath !== undefined) {\n\t\t\t\t\t\t\tawait rm(input.summary.cleanupPath, { recursive: true, force: true });\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\tcatch: (cause) =>\n\t\t\t\t\tnew CodegenBindingsFailed({\n\t\t\t\t\t\tpackage: input.packageName,\n\t\t\t\t\t\tsourcePath: input.sourcePath,\n\t\t\t\t\t\treason: 'render-failed',\n\t\t\t\t\t\tcause,\n\t\t\t\t\t}),\n\t\t\t}),\n\t}),\n);\n\n// -----------------------------------------------------------------------------\n// Local helpers — keep the module dep-free of Path.Path so the\n// caller can compose without an extra service yield.\n// -----------------------------------------------------------------------------\n\nconst joinPath = (...parts: ReadonlyArray<string>): string =>\n\tparts.map((p, i) => (i === 0 ? p.replace(/\\/+$/, '') : p.replace(/^\\/+|\\/+$/g, ''))).join('/');\n\n/**\n * Determine the `package_summaries/<dir>` subdirectory name for a local\n * Move package from its REAL source `Move.toml`. `sui move summary` keys\n * these subdirs by the NAMED ADDRESS (e.g. MoveStdlib → \"std\"), not the\n * `[package].name`, so when the two differ we must hand `@mysten/codegen`\n * the address label rather than the symbolic package name.\n *\n * Returns the single `[addresses]` label when the table has exactly one\n * entry (the overwhelmingly common case — and a no-op when name == address),\n * and `null` otherwise (unreadable Move.toml, no `[addresses]` table, or an\n * ambiguous multi-address table) so the caller can fall back to the package\n * name and preserve `@mysten/codegen`'s own resolution.\n *\n * Hand-parse rather than pull in a TOML dependency: the sibling Move-build\n * path already harvests `{ local = \"../x\" }` deps from Move.toml by regex\n * (`sui-move-build/index.ts`), and we only need the `[addresses]` section's\n * left-hand labels — never their values.\n */\nconst resolveSummaryDirName = async (sourcePath: string): Promise<string | null> => {\n\tlet toml: string;\n\ttry {\n\t\ttoml = await readFile(join(sourcePath, 'Move.toml'), 'utf8');\n\t} catch {\n\t\treturn null;\n\t}\n\tconst labels = parseAddressLabels(toml);\n\treturn labels.length === 1 ? labels[0]! : null;\n};\n\n/** Left-hand labels of the `[addresses]` table in a Move.toml. Scans from\n *  the `[addresses]` header to the next `[section]` header (or EOF) and\n *  collects each `name = \"...\"` key, ignoring blank/comment lines. */\nconst parseAddressLabels = (toml: string): ReadonlyArray<string> => {\n\tconst lines = toml.split(/\\r?\\n/);\n\tconst start = lines.findIndex((line) => /^\\s*\\[addresses\\]\\s*$/.test(line));\n\tif (start === -1) return [];\n\tconst labels: Array<string> = [];\n\tfor (const line of lines.slice(start + 1)) {\n\t\t// Next table header ends the `[addresses]` section.\n\t\tif (/^\\s*\\[/.test(line)) break;\n\t\tconst stripped = line.replace(/#.*$/, '').trim();\n\t\tif (stripped === '') continue;\n\t\tconst match = /^([A-Za-z_][\\w-]*)\\s*=/.exec(stripped);\n\t\tif (match) labels.push(match[1]!);\n\t}\n\treturn labels;\n};\n\nconst generatedBcsFactoryPattern =\n\t/export function ([A-Za-z_$][\\w$]*)<((?:[^<>]|<[^<>]*>)+)>\\((\\.\\.\\.typeParameters: \\[[\\s\\S]*?\\n\\])\\) \\{\\n(\\s*)return new (MoveStruct|MoveEnum|MoveTuple)\\(/g;\n\nconst bcsFactoryReturnType = (constructorName: string): string => {\n\tif (constructorName === 'MoveEnum') {\n\t\treturn 'MoveEnum<any, string>';\n\t}\n\tif (constructorName === 'MoveTuple') {\n\t\treturn 'MoveTuple<any, string>';\n\t}\n\treturn 'MoveStruct<any, string>';\n};\n\nconst stabilizeGeneratedBindingContent = (content: string): string =>\n\tcontent.replace(\n\t\tgeneratedBcsFactoryPattern,\n\t\t(_match, name, generics, parameters, indent, constructorName: string) =>\n\t\t\t`export function ${name}<${generics}>(${parameters}): ${bcsFactoryReturnType(\n\t\t\t\tconstructorName,\n\t\t\t)} {\\n${indent}return new ${constructorName}(`,\n\t);\n\nconst collectGeneratedFiles = async (\n\troot: string,\n): Promise<ReadonlyArray<{ readonly relPath: string; readonly content: string }>> => {\n\tconst out: Array<{ readonly relPath: string; readonly content: string }> = [];\n\tconst walk = async (dir: string): Promise<void> => {\n\t\tconst entries = await readdir(dir, { withFileTypes: true });\n\t\tfor (const entry of entries) {\n\t\t\tconst abs = join(dir, entry.name);\n\t\t\tif (entry.isDirectory()) {\n\t\t\t\tawait walk(abs);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (!entry.isFile()) continue;\n\t\t\tconst relPath = relative(root, abs).split(sep).join('/');\n\t\t\tout.push({ relPath, content: await readFile(abs, 'utf8') });\n\t\t}\n\t};\n\tawait walk(root);\n\tout.sort((a, b) => a.relPath.localeCompare(b.relPath));\n\treturn out;\n};\n"],"mappings":";;;;;;;;;AA4EA,IAAa,2BAAb,cAA8C,QAAQ,SAGnD,CAAC,2CAA2C,CAAC;AAiBhD,IAAa,qBAAb,cAAwC,QAAQ,SAA0C,CACzF,qCACA,CAAC;;;;;;;;;AAmCF,MAAa,gBACZ,UAMA,OAAO,IAAI,aAAa;CACvB,MAAM,SAAS,OAAO;CACtB,MAAM,YAAY,OAAO;CACzB,MAAM,kBAAkB,MAAM,mBAAmB;CAKjD,MAAM,uBAAO,IAAI,KAAa;CAC9B,MAAM,UAAkC,EAAE;CAC1C,MAAM,UAAyB,EAAE;AACjC,MAAK,MAAM,OAAO,MAAM,UAAU;AACjC,MAAI,IAAI,eAAe,MAAM;AAC5B,WAAQ,KAAK,IAAI,KAAK;AACtB;;AAED,MAAI,IAAI,UAAU;AACjB,WAAQ,KAAK,IAAI,KAAK;AACtB;;AAED,MAAI,KAAK,IAAI,IAAI,KAAK,EAAE;AACvB,UAAO,OAAO,WACb,6CAA6C,IAAI,KAAK,kGAGtD;AACD,WAAQ,KAAK,IAAI,KAAK;AACtB;;AAED,OAAK,IAAI,IAAI,KAAK;AAClB,UAAQ,KAAK,IAAI;;AAGlB,SAAQ,MAAM,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,KAAK,CAAC;CAEpD,MAAM,UAAyB,EAAE;CACjC,MAAM,eAA8B,EAAE;AACtC,MAAK,MAAM,OAAO,SAAS;AAE1B,MAAI,IAAI,eAAe,KAAM;EAC7B,MAAM,UAAU,OAAO,OAAO,WAAW;GACxC,aAAa,IAAI;GACjB,YAAY,IAAI;GAChB,CAAC;EACF,MAAM,QAAQ,OAAO,UAAU,SAAS;GACvC,aAAa,IAAI;GACjB,YAAY,IAAI;GAChB;GACA,gBAAgB,IAAI;GACpB;GACA,CAAC;AAEF,MAAI,MAAM,WAAW,EACpB,QAAO,OAAO,OAAO,KACpB,IAAI,sBAAsB;GACzB,SAAS,IAAI;GACb,YAAY,IAAI;GAChB,QAAQ;GACR,MACC;GAGD,CAAC,CACF;AAEF,OAAK,MAAM,KAAK,OAAO;AACtB,OAAI,EAAE,QAAQ,SAAS,KAAK,IAAI,EAAE,QAAQ,WAAW,IAAI,CACxD,QAAO,OAAO,OAAO,KACpB,IAAI,sBAAsB;IACzB,SAAS,IAAI;IACb,YAAY,IAAI;IAChB,QAAQ;IACR,uBAAO,IAAI,MAAM,8CAA8C,EAAE,UAAU;IAC3E,CAAC,CACF;GAEF,MAAM,MAAM,SAAS,MAAM,aAAa,EAAE,QAAQ;AAiBlD,QAAI,OAhBmB,QAAQ;IAC9B,MAAM;IACN,SAAS,iCAAiC,EAAE,QAAQ;IACpD,MAAA;IACA,YAAA;IACA,CAAC,CAAC,KACF,OAAO,UACL,UACA,IAAI,sBAAsB;IACzB,SAAS,IAAI;IACb,YAAY,IAAI;IAChB,QAAQ;IACR;IACA,CAAC,CACH,CACD,EACW,YAAY,YACvB,cAAa,KAAK,IAAI;;AAGxB,UAAQ,KAAK,IAAI,KAAK;;AAGvB,QAAO;EACN,iBAAiB;EACjB,iBAAiB;EACjB;EACA;EACA,CAAC,KACF,OAAO,SAAS,wBAAwB,EACvC,YAAY,EAAE,uBAAuB,MAAM,aAAa,EACxD,CAAC,CACF;AAmCF,MAAa,yBAA0D,MAAM,QAC5E,oBACA,mBAAmB,GAAG,EACrB,WAAW,UACV,OAAO,WAAW;CACjB,KAAK,YAAY;EAChB,MAAM,MAAM,MAAM,QAAQ,KAAK,QAAQ,EAAE,yBAAyB,CAAC;AACnE,MAAI;GAmBH,MAAM,cACJ,MAAM,sBAAsB,MAAM,WAAW,IAAK,MAAM;AAC1D,SAAM,2BAA2B;IAChC,SAAS;KACR,MAAM,MAAM,QAAQ,eAAe,MAAM;KACzC,SAAS,MAAM;KACf;KACA;IACD,OAAO;IACP,WAAW;IACX,iBAAiB,MAAM;IACvB,CAAC;AACF,UAAO,MAAM,sBAAsB,IAAI;YAC9B;AACT,SAAM,GAAG,KAAK;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;AAC/C,OAAI,MAAM,QAAQ,gBAAgB,KAAA,EACjC,OAAM,GAAG,MAAM,QAAQ,aAAa;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;;;CAIxE,QAAQ,UACP,IAAI,sBAAsB;EACzB,SAAS,MAAM;EACf,YAAY,MAAM;EAClB,QAAQ;EACR;EACA,CAAC;CACH,CAAC,EACH,CAAC,CACF;AAOD,MAAM,YAAY,GAAG,UACpB,MAAM,KAAK,GAAG,MAAO,MAAM,IAAI,EAAE,QAAQ,QAAQ,GAAG,GAAG,EAAE,QAAQ,cAAc,GAAG,CAAE,CAAC,KAAK,IAAI;;;;;;;;;;;;;;;;;;;AAoB/F,MAAM,wBAAwB,OAAO,eAA+C;CACnF,IAAI;AACJ,KAAI;AACH,SAAO,MAAM,SAAS,KAAK,YAAY,YAAY,EAAE,OAAO;SACrD;AACP,SAAO;;CAER,MAAM,SAAS,mBAAmB,KAAK;AACvC,QAAO,OAAO,WAAW,IAAI,OAAO,KAAM;;;;;AAM3C,MAAM,sBAAsB,SAAwC;CACnE,MAAM,QAAQ,KAAK,MAAM,QAAQ;CACjC,MAAM,QAAQ,MAAM,WAAW,SAAS,wBAAwB,KAAK,KAAK,CAAC;AAC3E,KAAI,UAAU,GAAI,QAAO,EAAE;CAC3B,MAAM,SAAwB,EAAE;AAChC,MAAK,MAAM,QAAQ,MAAM,MAAM,QAAQ,EAAE,EAAE;AAE1C,MAAI,SAAS,KAAK,KAAK,CAAE;EACzB,MAAM,WAAW,KAAK,QAAQ,QAAQ,GAAG,CAAC,MAAM;AAChD,MAAI,aAAa,GAAI;EACrB,MAAM,QAAQ,yBAAyB,KAAK,SAAS;AACrD,MAAI,MAAO,QAAO,KAAK,MAAM,GAAI;;AAElC,QAAO;;AAGR,MAAM,6BACL;AAED,MAAM,wBAAwB,oBAAoC;AACjE,KAAI,oBAAoB,WACvB,QAAO;AAER,KAAI,oBAAoB,YACvB,QAAO;AAER,QAAO;;AAGR,MAAM,oCAAoC,YACzC,QAAQ,QACP,6BACC,QAAQ,MAAM,UAAU,YAAY,QAAQ,oBAC5C,mBAAmB,KAAK,GAAG,SAAS,IAAI,WAAW,KAAK,qBACvD,gBACA,CAAC,MAAM,OAAO,aAAa,gBAAgB,GAC7C;AAEF,MAAM,wBAAwB,OAC7B,SACoF;CACpF,MAAM,MAAqE,EAAE;CAC7E,MAAM,OAAO,OAAO,QAA+B;EAClD,MAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,MAAM,CAAC;AAC3D,OAAK,MAAM,SAAS,SAAS;GAC5B,MAAM,MAAM,KAAK,KAAK,MAAM,KAAK;AACjC,OAAI,MAAM,aAAa,EAAE;AACxB,UAAM,KAAK,IAAI;AACf;;AAED,OAAI,CAAC,MAAM,QAAQ,CAAE;GACrB,MAAM,UAAU,SAAS,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,IAAI;AACxD,OAAI,KAAK;IAAE;IAAS,SAAS,MAAM,SAAS,KAAK,OAAO;IAAE,CAAC;;;AAG7D,OAAM,KAAK,KAAK;AAChB,KAAI,MAAM,GAAG,MAAM,EAAE,QAAQ,cAAc,EAAE,QAAQ,CAAC;AACtD,QAAO"}
+{"version":3,"file":"bindings.mjs","names":[],"sources":["../../../src/orchestrators/codegen/bindings.ts"],"sourcesContent":["// Move-package bindings emission.\n//\n// Distilled-doc § \"Move-to-TS bindings: per-published-package typed\n// client modules produced from each local Move package's summary.\"\n// Drives `@mysten/codegen`'s `generateFromPackageSummary` against\n// `MoveSummary` JSON contributed by a plugin-owned\n// `MoveSummaryRunnerService`.\n//\n// sourcePath-known-vs-unknown discipline:\n//   - `Package` plugin's `Codegenable` emits a `PackageBindings`\n//     shape with `sourcePath: string | null`.\n//   - The bindings emitter filters to `sourcePath !== null` (i.e.\n//     LOCAL packages); `KnownPackage` entries (`sourcePath: null`)\n//     are skipped — their bindings come from the SDK or MVR.\n//\n// Architecture seam:\n//   - `MoveSummaryRunnerService` is contributed by a plugin (the\n//     sui plugin ships `layerSuiMoveSummaryRunnerDocker` /\n//     `layerSuiMoveSummaryRunnerHost`). The codegen orchestrator\n//     consumes only the abstract service — it never names the Sui\n//     CLI binary or container image (architecture: \"Orchestrator\n//     boundaries — never names a service\").\n//   - The call to `@mysten/codegen.generateFromPackageSummary` is\n//     similarly behind a tagged service so unit tests can stub it\n//     without pulling in the heavyweight `@mysten/codegen` graph.\n//\n// Distilled-doc § \"Silent no-op from a downstream tool is a\n// failure\": after summary + render, we probe the output dir.\n// If it's empty, that's a `CodegenBindingsFailed` with a hint about\n// the common `Move.toml` `[addresses]` cause.\n\nimport { mkdtemp, readdir, readFile, rm } from 'node:fs/promises';\nimport { tmpdir } from 'node:os';\nimport { join, relative, sep } from 'node:path';\n\nimport { generateFromPackageSummary } from '@mysten/codegen';\nimport { Context, Effect, FileSystem, Layer } from 'effect';\n\nimport type { ImageRef } from '../../contracts/container-runtime.ts';\n\nimport { emitOne } from './emit.ts';\nimport { CodegenBindingsFailed } from './errors.ts';\nimport { NON_SENSITIVE_DIR_MODE, NON_SENSITIVE_FILE_MODE } from './permissions.ts';\n\n// -----------------------------------------------------------------------------\n// Service seam — Move summary + codegen invocation\n// -----------------------------------------------------------------------------\n\n/** Result of `sui move summary` — opaque JSON the codegen generator\n *  consumes. We don't decode it here; `@mysten/codegen` owns the\n *  schema. */\nexport interface MoveSummary {\n\treadonly packageName: string;\n\treadonly sourcePath: string;\n\treadonly summaryPath?: string;\n\treadonly cleanupPath?: string;\n\treadonly summaryJson: unknown;\n}\n\nexport interface MoveSummaryInput {\n\treadonly packageName: string;\n\treadonly sourcePath: string;\n\treadonly buildImage?: ImageRef | null;\n}\n\n/** Shape of the Move summary runner. Implementations live in\n *  plugin packages (e.g. `plugins/sui/move-summary-runner.ts`\n *  exports `layerSuiMoveSummaryRunnerDocker` and\n *  `layerSuiMoveSummaryRunnerHost`); tests use `stubMoveSummaryRunner`\n *  below. */\nexport interface MoveSummaryRunner {\n\treadonly runSummary: (\n\t\tinput: MoveSummaryInput,\n\t) => Effect.Effect<MoveSummary, CodegenBindingsFailed>;\n}\n\nexport class MoveSummaryRunnerService extends Context.Service<\n\tMoveSummaryRunnerService,\n\tMoveSummaryRunner\n>()('@devstack/orchestrator/MoveSummaryRunner') {}\n\n/** Shape of the `@mysten/codegen` invocation. Returns the rendered\n *  TS files (path → content) for one package. */\nexport interface MoveCodegen {\n\treadonly generate: (input: {\n\t\treadonly packageName: string;\n\t\treadonly sourcePath: string;\n\t\treadonly summary: MoveSummary;\n\t\treadonly mvrPlaceholder: string;\n\t\treadonly importExtension: '.ts' | '.js' | '';\n\t}) => Effect.Effect<\n\t\tReadonlyArray<{ readonly relPath: string; readonly content: string }>,\n\t\tCodegenBindingsFailed\n\t>;\n}\n\nexport class MoveCodegenService extends Context.Service<MoveCodegenService, MoveCodegen>()(\n\t'@devstack/orchestrator/MoveCodegen',\n) {}\n\n// -----------------------------------------------------------------------------\n// Public entry — emit bindings for the local packages in a set of\n// PackageBindings contributions.\n// -----------------------------------------------------------------------------\n\nexport interface PackageBindings {\n\treadonly name: string;\n\treadonly packageId: string;\n\treadonly mvrPlaceholder: string;\n\treadonly sourcePath: string | null;\n\treadonly excluded: boolean;\n}\n\n/**\n * Consumer-side shape guard: does an aggregated value look like a\n * Move-bindings contribution that `emitBindings` knows how to consume?\n * This is structural validation of the orchestrator's own input\n * contract, NOT a plugin-name match — any plugin whose\n * `aggregate.project` returns objects with this shape is forwarded to\n * the Move bindings emitter. The single definition of the seam; both\n * the codegen orchestrator service and the Package plugin reference it.\n */\nexport const isPackageBindings = (v: unknown): v is PackageBindings =>\n\ttypeof v === 'object' &&\n\tv !== null &&\n\t'name' in v &&\n\t'packageId' in v &&\n\t'mvrPlaceholder' in v &&\n\t'sourcePath' in v;\n\nexport interface EmitBindingsInput {\n\treadonly bindingsDir: string;\n\treadonly packages: ReadonlyArray<PackageBindings>;\n\treadonly importExtension?: '.ts' | '.js' | '';\n}\n\nexport interface EmitBindingsResult {\n\treadonly packagesEmitted: ReadonlyArray<string>;\n\treadonly packagesSkipped: ReadonlyArray<string>;\n\treadonly filesWritten: ReadonlyArray<string>;\n}\n\n/**\n * Walk the `PackageBindings` set, filter to LOCAL packages\n * (`sourcePath !== null`), run `sui move summary` + `@mysten/codegen`\n * for each, and write the rendered files into `bindingsDir/<name>/`.\n *\n * Serial within a cycle (distilled-doc § \"Serial within a cycle\":\n * shared Move build cache races). Per-package parallelism is unsafe.\n */\nexport const emitBindings = (\n\tinput: EmitBindingsInput,\n): Effect.Effect<\n\tEmitBindingsResult,\n\tCodegenBindingsFailed,\n\tFileSystem.FileSystem | MoveSummaryRunnerService | MoveCodegenService\n> =>\n\tEffect.gen(function* () {\n\t\tconst runner = yield* MoveSummaryRunnerService;\n\t\tconst generator = yield* MoveCodegenService;\n\t\tconst importExtension = input.importExtension ?? '.ts';\n\n\t\t// Dedup by package name. First-wins; distilled-doc § \"Duplicate\n\t\t// package names\": warn + skip the duplicate to avoid the HMR\n\t\t// re-emit storm.\n\t\t// Dedup by package IDENTITY (packageId + sourcePath), keyed for\n\t\t// lookup by name. The SAME package legitimately appears more than\n\t\t// once in the contribution set (e.g. the plugin's localPackage\n\t\t// binding AND a coin's package reference both point at it) — that\n\t\t// is a benign self-duplicate and is skipped SILENTLY. We only warn\n\t\t// when two genuinely DIFFERENT packages (different id/sourcePath)\n\t\t// collide on the same name, which is the real HMR re-emit hazard.\n\t\tconst seenIdentityByName = new Map<string, string>();\n\t\tconst identityOf = (pkg: PackageBindings): string => `${pkg.packageId} ${pkg.sourcePath ?? ''}`;\n\t\tconst targets: Array<PackageBindings> = [];\n\t\tconst skipped: Array<string> = [];\n\t\tfor (const pkg of input.packages) {\n\t\t\tif (pkg.sourcePath === null) {\n\t\t\t\tskipped.push(pkg.name);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (pkg.excluded) {\n\t\t\t\tskipped.push(pkg.name);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst identity = identityOf(pkg);\n\t\t\tconst seenIdentity = seenIdentityByName.get(pkg.name);\n\t\t\tif (seenIdentity !== undefined) {\n\t\t\t\tif (seenIdentity !== identity) {\n\t\t\t\t\t// Two genuinely DIFFERENT packages share a name — a real\n\t\t\t\t\t// collision and a real HMR re-emit hazard.\n\t\t\t\t\tyield* Effect.logWarning(\n\t\t\t\t\t\t`codegen.bindings: duplicate package name '${pkg.name}' — keeping ` +\n\t\t\t\t\t\t\t`first and skipping duplicate to avoid HMR re-emit storm. ` +\n\t\t\t\t\t\t\t`Rename one of the packages.`,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\t// Same identity → benign self-duplicate (e.g. localPackage +\n\t\t\t\t// coin package ref): skip silently, no warning.\n\t\t\t\tskipped.push(pkg.name);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tseenIdentityByName.set(pkg.name, identity);\n\t\t\ttargets.push(pkg);\n\t\t}\n\t\t// Deterministic order: lexicographic by package name.\n\t\ttargets.sort((a, b) => a.name.localeCompare(b.name));\n\n\t\tconst emitted: Array<string> = [];\n\t\tconst filesWritten: Array<string> = [];\n\t\tfor (const pkg of targets) {\n\t\t\t// sourcePath is non-null per the filter above. Narrow.\n\t\t\tif (pkg.sourcePath === null) continue;\n\t\t\tconst summary = yield* runner.runSummary({\n\t\t\t\tpackageName: pkg.name,\n\t\t\t\tsourcePath: pkg.sourcePath,\n\t\t\t});\n\t\t\tconst files = yield* generator.generate({\n\t\t\t\tpackageName: pkg.name,\n\t\t\t\tsourcePath: pkg.sourcePath,\n\t\t\t\tsummary,\n\t\t\t\tmvrPlaceholder: pkg.mvrPlaceholder,\n\t\t\t\timportExtension,\n\t\t\t});\n\t\t\t// Post-emit probe — silent no-op detection.\n\t\t\tif (files.length === 0) {\n\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\tnew CodegenBindingsFailed({\n\t\t\t\t\t\tpackage: pkg.name,\n\t\t\t\t\t\tsourcePath: pkg.sourcePath,\n\t\t\t\t\t\treason: 'no-output',\n\t\t\t\t\t\thint:\n\t\t\t\t\t\t\t'The Move codegen generator produced no files. This is ' +\n\t\t\t\t\t\t\t'usually caused by a missing `[addresses]` block in the ' +\n\t\t\t\t\t\t\t\"package's Move.toml, or a non-published address mapping.\",\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}\n\t\t\tfor (const f of files) {\n\t\t\t\tif (f.relPath.includes('..') || f.relPath.startsWith('/')) {\n\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\tnew CodegenBindingsFailed({\n\t\t\t\t\t\t\tpackage: pkg.name,\n\t\t\t\t\t\t\tsourcePath: pkg.sourcePath,\n\t\t\t\t\t\t\treason: 'write-failed',\n\t\t\t\t\t\t\tcause: new Error(`generated binding path escapes output dir: ${f.relPath}`),\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tconst abs = joinPath(input.bindingsDir, f.relPath);\n\t\t\t\tconst outcome = yield* emitOne({\n\t\t\t\t\tpath: abs,\n\t\t\t\t\tcontent: stabilizeGeneratedBindingContent(f.content),\n\t\t\t\t\tmode: NON_SENSITIVE_FILE_MODE,\n\t\t\t\t\tparentMode: NON_SENSITIVE_DIR_MODE,\n\t\t\t\t}).pipe(\n\t\t\t\t\tEffect.mapError(\n\t\t\t\t\t\t(cause) =>\n\t\t\t\t\t\t\tnew CodegenBindingsFailed({\n\t\t\t\t\t\t\t\tpackage: pkg.name,\n\t\t\t\t\t\t\t\tsourcePath: pkg.sourcePath!,\n\t\t\t\t\t\t\t\treason: 'write-failed',\n\t\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\tif (outcome.outcome !== 'unchanged') {\n\t\t\t\t\tfilesWritten.push(abs);\n\t\t\t\t}\n\t\t\t}\n\t\t\temitted.push(pkg.name);\n\t\t}\n\n\t\treturn {\n\t\t\tpackagesEmitted: emitted,\n\t\t\tpackagesSkipped: skipped,\n\t\t\tfilesWritten,\n\t\t};\n\t});\n\n// -----------------------------------------------------------------------------\n// Stub implementations for tests\n// -----------------------------------------------------------------------------\n\n/** Stub runner — returns a synthetic summary. Used in unit tests\n *  to exercise the bindings pipeline without a real `sui` binary. */\nexport const stubMoveSummaryRunner = (\n\tsummaryFor: (sourcePath: string) => MoveSummary,\n): MoveSummaryRunner => ({\n\trunSummary: ({ sourcePath }) => Effect.succeed(summaryFor(sourcePath)),\n});\n\n/** Stub generator — returns a synthetic file set. Used in unit\n *  tests to exercise the bindings pipeline without pulling in the\n *  heavyweight `@mysten/codegen` graph. */\nexport const stubMoveCodegen = (\n\tfiles: (\n\t\tinput: Parameters<MoveCodegen['generate']>[0],\n\t) => ReadonlyArray<{ readonly relPath: string; readonly content: string }>,\n): MoveCodegen => ({\n\tgenerate: (input) => Effect.succeed(files(input)),\n});\n\n// -----------------------------------------------------------------------------\n// Production implementations\n// -----------------------------------------------------------------------------\n//\n// Layer factories for `MoveSummaryRunnerService` are plugin-owned —\n// they live in `src/plugins/sui/move-summary-runner.ts`. The codegen\n// orchestrator does not name the Sui CLI binary or container image;\n// per \"Orchestrator boundaries — never names a service\", any plugin\n// that can produce `MoveSummary` JSON may contribute a runner Layer.\n\nexport const layerMystenMoveCodegen = (\n\toptions: {\n\t\t/** Forwarded verbatim to `@mysten/codegen`'s\n\t\t *  `generateFromPackageSummary({ includePhantomTypeParameters })`.\n\t\t *  Default `false` (`@mysten/codegen`'s own default): phantom-only\n\t\t *  structs render as plain consts with the `<phantom T>` placeholder\n\t\t *  baked into `.name`. `true` renders them as factory functions whose\n\t\t *  phantom type parameters are REQUIRED arguments, so the returned\n\t\t *  instance's `.name` is a fully-qualified, composable type tag\n\t\t *  (`Pool(DBTC, DUSDC).name`). Static per stack — threaded from\n\t\t *  `DevstackOptions['codegen']` through\n\t\t *  `resolveProductionCodegenOptions`, never per-cycle. */\n\t\treadonly includePhantomTypeParameters?: boolean;\n\t} = {},\n): Layer.Layer<MoveCodegenService> =>\n\tLayer.succeed(\n\t\tMoveCodegenService,\n\t\tMoveCodegenService.of({\n\t\t\tgenerate: (input) =>\n\t\t\t\tEffect.tryPromise({\n\t\t\t\t\ttry: async () => {\n\t\t\t\t\t\tconst tmp = await mkdtemp(join(tmpdir(), 'devstack-move-codegen-'));\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t// `sui move summary` keys each `package_summaries/<dir>`\n\t\t\t\t\t\t\t// subdirectory by the package's NAMED ADDRESS, not its\n\t\t\t\t\t\t\t// `[package].name`. These legitimately differ (the canonical\n\t\t\t\t\t\t\t// example is MoveStdlib, whose package name is \"MoveStdlib\"\n\t\t\t\t\t\t\t// but whose named address is \"std\"). `@mysten/codegen`'s\n\t\t\t\t\t\t\t// resolver matches the summary subdir by either (1) a single\n\t\t\t\t\t\t\t// `[addresses]` label or (2) the `packageName` — but it reads\n\t\t\t\t\t\t\t// the Move.toml at the path WE pass it (the summary scratch\n\t\t\t\t\t\t\t// dir), which has NO `[addresses]` table, so its label-based\n\t\t\t\t\t\t\t// path (1) is defeated and it falls back to (2). We pass the\n\t\t\t\t\t\t\t// symbolic localPackage() NAME as `packageName`, which is the\n\t\t\t\t\t\t\t// `[package].name`, NOT the named address — so codegen throws\n\t\t\t\t\t\t\t// \"Could not identify main package directory\" whenever the two\n\t\t\t\t\t\t\t// differ. Recover the correct subdir name here from the REAL\n\t\t\t\t\t\t\t// source Move.toml's `[addresses]` table (which devstack still\n\t\t\t\t\t\t\t// has at `input.sourcePath`), falling back to the name when the\n\t\t\t\t\t\t\t// source is unreadable or ambiguous (a no-op for the common\n\t\t\t\t\t\t\t// case where name == address).\n\t\t\t\t\t\t\tconst packageName =\n\t\t\t\t\t\t\t\t(await resolveSummaryDirName(input.sourcePath)) ?? input.packageName;\n\t\t\t\t\t\t\tawait generateFromPackageSummary({\n\t\t\t\t\t\t\t\tpackage: {\n\t\t\t\t\t\t\t\t\tpath: input.summary.summaryPath ?? input.sourcePath,\n\t\t\t\t\t\t\t\t\tpackage: input.mvrPlaceholder,\n\t\t\t\t\t\t\t\t\tpackageName,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\tprune: true,\n\t\t\t\t\t\t\t\toutputDir: tmp,\n\t\t\t\t\t\t\t\timportExtension: input.importExtension,\n\t\t\t\t\t\t\t\tincludePhantomTypeParameters: options.includePhantomTypeParameters,\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\treturn await collectGeneratedFiles(tmp);\n\t\t\t\t\t\t} finally {\n\t\t\t\t\t\t\tawait rm(tmp, { recursive: true, force: true });\n\t\t\t\t\t\t\tif (input.summary.cleanupPath !== undefined) {\n\t\t\t\t\t\t\t\tawait rm(input.summary.cleanupPath, { recursive: true, force: true });\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t},\n\t\t\t\t\tcatch: (cause) =>\n\t\t\t\t\t\tnew CodegenBindingsFailed({\n\t\t\t\t\t\t\tpackage: input.packageName,\n\t\t\t\t\t\t\tsourcePath: input.sourcePath,\n\t\t\t\t\t\t\treason: 'render-failed',\n\t\t\t\t\t\t\tcause,\n\t\t\t\t\t\t}),\n\t\t\t\t}),\n\t\t}),\n\t);\n\n// -----------------------------------------------------------------------------\n// Local helpers — keep the module dep-free of Path.Path so the\n// caller can compose without an extra service yield.\n// -----------------------------------------------------------------------------\n\nconst joinPath = (...parts: ReadonlyArray<string>): string =>\n\tparts.map((p, i) => (i === 0 ? p.replace(/\\/+$/, '') : p.replace(/^\\/+|\\/+$/g, ''))).join('/');\n\n/**\n * Determine the `package_summaries/<dir>` subdirectory name for a local\n * Move package from its REAL source `Move.toml`. `sui move summary` keys\n * these subdirs by the NAMED ADDRESS (e.g. MoveStdlib → \"std\"), not the\n * `[package].name`, so when the two differ we must hand `@mysten/codegen`\n * the address label rather than the symbolic package name.\n *\n * Returns the single `[addresses]` label when the table has exactly one\n * entry (the overwhelmingly common case — and a no-op when name == address),\n * and `null` otherwise (unreadable Move.toml, no `[addresses]` table, or an\n * ambiguous multi-address table) so the caller can fall back to the package\n * name and preserve `@mysten/codegen`'s own resolution.\n *\n * Hand-parse rather than pull in a TOML dependency: the sibling Move-build\n * path already harvests `{ local = \"../x\" }` deps from Move.toml by regex\n * (`plugins/sui/move/index.ts`), and we only need the `[addresses]` section's\n * left-hand labels — never their values.\n */\nconst resolveSummaryDirName = async (sourcePath: string): Promise<string | null> => {\n\tlet toml: string;\n\ttry {\n\t\ttoml = await readFile(join(sourcePath, 'Move.toml'), 'utf8');\n\t} catch {\n\t\treturn null;\n\t}\n\tconst labels = parseAddressLabels(toml);\n\treturn labels.length === 1 ? labels[0]! : null;\n};\n\n/** Left-hand labels of the `[addresses]` table in a Move.toml. Scans from\n *  the `[addresses]` header to the next `[section]` header (or EOF) and\n *  collects each `name = \"...\"` key, ignoring blank/comment lines. */\nconst parseAddressLabels = (toml: string): ReadonlyArray<string> => {\n\tconst lines = toml.split(/\\r?\\n/);\n\tconst start = lines.findIndex((line) => /^\\s*\\[addresses\\]\\s*$/.test(line));\n\tif (start === -1) return [];\n\tconst labels: Array<string> = [];\n\tfor (const line of lines.slice(start + 1)) {\n\t\t// Next table header ends the `[addresses]` section.\n\t\tif (/^\\s*\\[/.test(line)) break;\n\t\tconst stripped = line.replace(/#.*$/, '').trim();\n\t\tif (stripped === '') continue;\n\t\tconst match = /^([A-Za-z_][\\w-]*)\\s*=/.exec(stripped);\n\t\tif (match) labels.push(match[1]!);\n\t}\n\treturn labels;\n};\n\nconst generatedBcsFactoryPattern =\n\t/export function ([A-Za-z_$][\\w$]*)<((?:[^<>]|<[^<>]*>)+)>\\((\\.\\.\\.typeParameters: \\[[\\s\\S]*?\\n\\])\\) \\{\\n(\\s*)return new (MoveStruct|MoveEnum|MoveTuple)\\(/g;\n\nconst bcsFactoryReturnType = (constructorName: string): string => {\n\tif (constructorName === 'MoveEnum') {\n\t\treturn 'MoveEnum<any, string>';\n\t}\n\tif (constructorName === 'MoveTuple') {\n\t\treturn 'MoveTuple<any, string>';\n\t}\n\treturn 'MoveStruct<any, string>';\n};\n\nconst stabilizeGeneratedBindingContent = (content: string): string =>\n\tcontent.replace(\n\t\tgeneratedBcsFactoryPattern,\n\t\t(_match, name, generics, parameters, indent, constructorName: string) =>\n\t\t\t`export function ${name}<${generics}>(${parameters}): ${bcsFactoryReturnType(\n\t\t\t\tconstructorName,\n\t\t\t)} {\\n${indent}return new ${constructorName}(`,\n\t);\n\nconst collectGeneratedFiles = async (\n\troot: string,\n): Promise<ReadonlyArray<{ readonly relPath: string; readonly content: string }>> => {\n\tconst out: Array<{ readonly relPath: string; readonly content: string }> = [];\n\tconst walk = async (dir: string): Promise<void> => {\n\t\tconst entries = await readdir(dir, { withFileTypes: true });\n\t\tfor (const entry of entries) {\n\t\t\tconst abs = join(dir, entry.name);\n\t\t\tif (entry.isDirectory()) {\n\t\t\t\tawait walk(abs);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (!entry.isFile()) continue;\n\t\t\tconst relPath = relative(root, abs).split(sep).join('/');\n\t\t\tout.push({ relPath, content: await readFile(abs, 'utf8') });\n\t\t}\n\t};\n\tawait walk(root);\n\tout.sort((a, b) => a.relPath.localeCompare(b.relPath));\n\treturn out;\n};\n"],"mappings":";;;;;;;;;AA4EA,IAAa,2BAAb,cAA8C,QAAQ,QAGpD,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC;AAiBjD,IAAa,qBAAb,cAAwC,QAAQ,QAAyC,CAAC,CACzF,oCACD,CAAC,CAAC,CAAC;;;;;;;;;;AAwBH,MAAa,qBAAqB,MACjC,OAAO,MAAM,YACb,MAAM,QACN,UAAU,KACV,eAAe,KACf,oBAAoB,KACpB,gBAAgB;;;;;;;;;AAsBjB,MAAa,gBACZ,UAMA,OAAO,IAAI,aAAa;CACvB,MAAM,SAAS,OAAO;CACtB,MAAM,YAAY,OAAO;CACzB,MAAM,kBAAkB,MAAM,mBAAmB;CAYjD,MAAM,qCAAqB,IAAI,IAAoB;CACnD,MAAM,cAAc,QAAiC,GAAG,IAAI,UAAU,GAAG,IAAI,cAAc;CAC3F,MAAM,UAAkC,CAAC;CACzC,MAAM,UAAyB,CAAC;CAChC,KAAK,MAAM,OAAO,MAAM,UAAU;EACjC,IAAI,IAAI,eAAe,MAAM;GAC5B,QAAQ,KAAK,IAAI,IAAI;GACrB;EACD;EACA,IAAI,IAAI,UAAU;GACjB,QAAQ,KAAK,IAAI,IAAI;GACrB;EACD;EACA,MAAM,WAAW,WAAW,GAAG;EAC/B,MAAM,eAAe,mBAAmB,IAAI,IAAI,IAAI;EACpD,IAAI,iBAAiB,KAAA,GAAW;GAC/B,IAAI,iBAAiB,UAGpB,OAAO,OAAO,WACb,6CAA6C,IAAI,KAAK,iGAGvD;GAID,QAAQ,KAAK,IAAI,IAAI;GACrB;EACD;EACA,mBAAmB,IAAI,IAAI,MAAM,QAAQ;EACzC,QAAQ,KAAK,GAAG;CACjB;CAEA,QAAQ,MAAM,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;CAEnD,MAAM,UAAyB,CAAC;CAChC,MAAM,eAA8B,CAAC;CACrC,KAAK,MAAM,OAAO,SAAS;EAE1B,IAAI,IAAI,eAAe,MAAM;EAC7B,MAAM,UAAU,OAAO,OAAO,WAAW;GACxC,aAAa,IAAI;GACjB,YAAY,IAAI;EACjB,CAAC;EACD,MAAM,QAAQ,OAAO,UAAU,SAAS;GACvC,aAAa,IAAI;GACjB,YAAY,IAAI;GAChB;GACA,gBAAgB,IAAI;GACpB;EACD,CAAC;EAED,IAAI,MAAM,WAAW,GACpB,OAAO,OAAO,OAAO,KACpB,IAAI,sBAAsB;GACzB,SAAS,IAAI;GACb,YAAY,IAAI;GAChB,QAAQ;GACR,MACC;EAGF,CAAC,CACF;EAED,KAAK,MAAM,KAAK,OAAO;GACtB,IAAI,EAAE,QAAQ,SAAS,IAAI,KAAK,EAAE,QAAQ,WAAW,GAAG,GACvD,OAAO,OAAO,OAAO,KACpB,IAAI,sBAAsB;IACzB,SAAS,IAAI;IACb,YAAY,IAAI;IAChB,QAAQ;IACR,uBAAO,IAAI,MAAM,8CAA8C,EAAE,SAAS;GAC3E,CAAC,CACF;GAED,MAAM,MAAM,SAAS,MAAM,aAAa,EAAE,OAAO;GAiBjD,KAAI,OAhBmB,QAAQ;IAC9B,MAAM;IACN,SAAS,iCAAiC,EAAE,OAAO;IACnD,MAAA;IACA,YAAA;GACD,CAAC,CAAC,CAAC,KACF,OAAO,UACL,UACA,IAAI,sBAAsB;IACzB,SAAS,IAAI;IACb,YAAY,IAAI;IAChB,QAAQ;IACR;GACD,CAAC,CACH,CACD,EAAA,CACY,YAAY,aACvB,aAAa,KAAK,GAAG;EAEvB;EACA,QAAQ,KAAK,IAAI,IAAI;CACtB;CAEA,OAAO;EACN,iBAAiB;EACjB,iBAAiB;EACjB;CACD;AACD,CAAC;AAmCF,MAAa,0BACZ,UAYI,CAAC,MAEL,MAAM,QACL,oBACA,mBAAmB,GAAG,EACrB,WAAW,UACV,OAAO,WAAW;CACjB,KAAK,YAAY;EAChB,MAAM,MAAM,MAAM,QAAQ,KAAK,OAAO,GAAG,wBAAwB,CAAC;EAClE,IAAI;GAmBH,MAAM,cACJ,MAAM,sBAAsB,MAAM,UAAU,KAAM,MAAM;GAC1D,MAAM,2BAA2B;IAChC,SAAS;KACR,MAAM,MAAM,QAAQ,eAAe,MAAM;KACzC,SAAS,MAAM;KACf;IACD;IACA,OAAO;IACP,WAAW;IACX,iBAAiB,MAAM;IACvB,8BAA8B,QAAQ;GACvC,CAAC;GACD,OAAO,MAAM,sBAAsB,GAAG;EACvC,UAAU;GACT,MAAM,GAAG,KAAK;IAAE,WAAW;IAAM,OAAO;GAAK,CAAC;GAC9C,IAAI,MAAM,QAAQ,gBAAgB,KAAA,GACjC,MAAM,GAAG,MAAM,QAAQ,aAAa;IAAE,WAAW;IAAM,OAAO;GAAK,CAAC;EAEtE;CACD;CACA,QAAQ,UACP,IAAI,sBAAsB;EACzB,SAAS,MAAM;EACf,YAAY,MAAM;EAClB,QAAQ;EACR;CACD,CAAC;AACH,CAAC,EACH,CAAC,CACF;AAOD,MAAM,YAAY,GAAG,UACpB,MAAM,KAAK,GAAG,MAAO,MAAM,IAAI,EAAE,QAAQ,QAAQ,EAAE,IAAI,EAAE,QAAQ,cAAc,EAAE,CAAE,CAAC,CAAC,KAAK,GAAG;;;;;;;;;;;;;;;;;;;AAoB9F,MAAM,wBAAwB,OAAO,eAA+C;CACnF,IAAI;CACJ,IAAI;EACH,OAAO,MAAM,SAAS,KAAK,YAAY,WAAW,GAAG,MAAM;CAC5D,QAAQ;EACP,OAAO;CACR;CACA,MAAM,SAAS,mBAAmB,IAAI;CACtC,OAAO,OAAO,WAAW,IAAI,OAAO,KAAM;AAC3C;;;;AAKA,MAAM,sBAAsB,SAAwC;CACnE,MAAM,QAAQ,KAAK,MAAM,OAAO;CAChC,MAAM,QAAQ,MAAM,WAAW,SAAS,wBAAwB,KAAK,IAAI,CAAC;CAC1E,IAAI,UAAU,IAAI,OAAO,CAAC;CAC1B,MAAM,SAAwB,CAAC;CAC/B,KAAK,MAAM,QAAQ,MAAM,MAAM,QAAQ,CAAC,GAAG;EAE1C,IAAI,SAAS,KAAK,IAAI,GAAG;EACzB,MAAM,WAAW,KAAK,QAAQ,QAAQ,EAAE,CAAC,CAAC,KAAK;EAC/C,IAAI,aAAa,IAAI;EACrB,MAAM,QAAQ,yBAAyB,KAAK,QAAQ;EACpD,IAAI,OAAO,OAAO,KAAK,MAAM,EAAG;CACjC;CACA,OAAO;AACR;AAEA,MAAM,6BACL;AAED,MAAM,wBAAwB,oBAAoC;CACjE,IAAI,oBAAoB,YACvB,OAAO;CAER,IAAI,oBAAoB,aACvB,OAAO;CAER,OAAO;AACR;AAEA,MAAM,oCAAoC,YACzC,QAAQ,QACP,6BACC,QAAQ,MAAM,UAAU,YAAY,QAAQ,oBAC5C,mBAAmB,KAAK,GAAG,SAAS,IAAI,WAAW,KAAK,qBACvD,eACD,EAAE,MAAM,OAAO,aAAa,gBAAgB,EAC9C;AAED,MAAM,wBAAwB,OAC7B,SACoF;CACpF,MAAM,MAAqE,CAAC;CAC5E,MAAM,OAAO,OAAO,QAA+B;EAClD,MAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;EAC1D,KAAK,MAAM,SAAS,SAAS;GAC5B,MAAM,MAAM,KAAK,KAAK,MAAM,IAAI;GAChC,IAAI,MAAM,YAAY,GAAG;IACxB,MAAM,KAAK,GAAG;IACd;GACD;GACA,IAAI,CAAC,MAAM,OAAO,GAAG;GACrB,MAAM,UAAU,SAAS,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG;GACvD,IAAI,KAAK;IAAE;IAAS,SAAS,MAAM,SAAS,KAAK,MAAM;GAAE,CAAC;EAC3D;CACD;CACA,MAAM,KAAK,IAAI;CACf,IAAI,MAAM,GAAG,MAAM,EAAE,QAAQ,cAAc,EAAE,OAAO,CAAC;CACrD,OAAO;AACR"}

package/dist/orchestrators/codegen/config-runtime.mjs

@@ -0,0 +1,208 @@
+//#region src/orchestrators/codegen/config-runtime.ts
+/** Output path (relative to the generated tree) of the emitted resolver. */
+const CONFIG_RUNTIME_OUTPUT_PATH = "config-runtime.ts";
+/** The verbatim source emitted as `src/generated/config-runtime.ts`. */
+const CONFIG_RUNTIME_SOURCE = `// THIS FILE IS AUTO-GENERATED BY @mysten/devstack.
+// Do not edit by hand — your changes will be overwritten by the next
+// \`devstack codegen\`. Apps consume codegen output; codegen output never
+// imports from devstack.
+//
+// Loud-failing on-chain id resolver. The committed \`config.ts\` carries no
+// ids; it resolves each id through \`resolveId(...)\` here, which reads the
+// build-time-injected \`__DEVSTACK_IDS__\` global. Run \`devstack up\` for
+// local dev (the Vite plugin injects the live ids), or point the build at a
+// committed id-config file for a real deployment.
+
+const UNRESOLVED_ID =
+	'0x0000000000000000000000000000000000000000000000000000000000000000';
+
+// Node-only runtime fallback for the on-chain ids. The browser/dev/prod
+// path injects \`__DEVSTACK_IDS__\` via the Vite \`define\` (replaced at
+// transform time); this fallback ONLY engages when that define is absent —
+// i.e. under Node/vitest, where the \`define\` bakes to \`null\` because the
+// test stack is booted by the vitest \`globalSetup\` AFTER the Vite config
+// (and so this module) is evaluated. The devstack vitest \`globalSetup\`
+// publishes the booted stack's id-config FILE path as
+// \`process.env.DEVSTACK_IDS_FILE\`; we read+parse it lazily here. Guarded so
+// browser bundles (no \`process\`, no \`node:fs\`) never touch it. Returns
+// \`null\` on any miss, so \`ids()\` throws its actionable error as before.
+// Minimal LOCAL shapes (no \`@types/node\` dependency — this file is also
+// type-checked in browser tsconfigs that don't load node types). We reach
+// \`process\` through \`globalThis\` and feature-test every member.
+interface NodeProcessLike {
+	readonly env?: { readonly [k: string]: string | undefined };
+	readonly getBuiltinModule?: (id: string) => unknown;
+}
+interface NodeFsLike {
+	readonly existsSync: (p: string) => boolean;
+	readonly readFileSync: (p: string, enc: 'utf8') => string;
+}
+let nodeFallbackCache: DevstackIds | null | undefined;
+const readNodeFallbackIds = (): DevstackIds | null => {
+	if (nodeFallbackCache !== undefined) return nodeFallbackCache;
+	nodeFallbackCache = null;
+	try {
+		const proc = (globalThis as { process?: NodeProcessLike }).process;
+		if (proc === undefined) return null;
+		const idsFile = proc.env?.DEVSTACK_IDS_FILE;
+		if (idsFile === undefined || idsFile.length === 0) return null;
+		// \`process.getBuiltinModule\` (Node >=22.3) loads \`node:fs\`
+		// synchronously without an \`import\`/\`require\` literal a browser
+		// bundler would try to resolve — this whole branch is unreachable in
+		// the browser (no \`process\`), so node:fs never enters the bundle.
+		const getBuiltin = proc.getBuiltinModule;
+		if (typeof getBuiltin !== 'function') return null;
+		const fs = getBuiltin('node:fs') as NodeFsLike;
+		if (!fs.existsSync(idsFile)) return null;
+		nodeFallbackCache = JSON.parse(fs.readFileSync(idsFile, 'utf8')) as DevstackIds;
+		return nodeFallbackCache;
+	} catch {
+		return null;
+	}
+};
+
+/** The injected ids, or — under Node with no injected define — the
+ *  \`DEVSTACK_IDS_FILE\` fallback. \`null\` when neither is available. */
+const injectedIds = (): DevstackIds | null => {
+	const injected = typeof __DEVSTACK_IDS__ === 'undefined' ? null : __DEVSTACK_IDS__;
+	if (injected !== null && injected !== undefined) return injected;
+	return readNodeFallbackIds();
+};
+
+/** One network connection entry — \`rpc\` is the load-bearing field the app
+ *  reads synchronously; \`chainId\`/\`faucet\`/\`graphql\` are optional
+ *  diagnostics (mirrors \`IdConfigNetworkSchema\`). */
+export interface DevstackNetworkEntry {
+	readonly rpc: string;
+	readonly chainId?: string;
+	readonly faucet?: string | null;
+	readonly graphql?: string | null;
+}
+
+/** Shape of the injected ids. \`null\` when no stack is running and no
+ *  id-config file was supplied at build time. */
+export interface DevstackIds {
+	readonly network: string;
+	readonly networks: { readonly [name: string]: DevstackNetworkEntry };
+	readonly packages: {
+		readonly [name: string]: { readonly id: string; readonly objects?: { readonly [k: string]: string } };
+	};
+	readonly accounts: { readonly [name: string]: string };
+	readonly mvrOverrides: { readonly [mvrPlaceholder: string]: string };
+	/** Generic resolver channel: \`values[namespace][key]\` carries
+	 *  arbitrary plugin JSON the typed fields above can't (deepbook pool
+	 *  ids, coin types, walrus/seal endpoints). Optional — an older
+	 *  injected blob (no \`values\`) still satisfies the typed resolvers. */
+	readonly values?: { readonly [namespace: string]: { readonly [key: string]: unknown } };
+}
+
+declare global {
+	// Injected by the devstack Vite plugin via \`define\`. \`null\` when no
+	// ids are available (no stack up + no id-config file).
+	const __DEVSTACK_IDS__: DevstackIds | null | undefined;
+}
+
+/** Thrown when a generated config value needs an on-chain id but none was
+ *  injected — actionable, not a silent zero. */
+export class DevstackConfigMissingError extends Error {
+	constructor(detail: string) {
+		super(
+			\`[devstack] \${detail}\\n\` +
+				\`No on-chain ids are available. For local dev, run \\\`devstack up\\\` \` +
+				\`(the Vite dev server injects the live ids). For a production build, \` +
+				\`point the build at the known deployment's committed id-config file \` +
+				\`(the Vite plugin \\\`ids\\\` option, or \\\`DEVSTACK_IDS_FILE\\\`) before \` +
+				\`\\\`pnpm build\\\`. See your example README's "Deploy to a real network" \` +
+				\`section.\`,
+		);
+		this.name = 'DevstackConfigMissingError';
+	}
+}
+
+const ids = (): DevstackIds => {
+	const injected = injectedIds();
+	if (injected === null || injected === undefined) {
+		throw new DevstackConfigMissingError('on-chain ids were never injected');
+	}
+	return injected;
+};
+
+/** Resolve the active-network id for an MVR placeholder (\`@local/<slug>\`).
+ *  Throws \`DevstackConfigMissingError\` when the id is absent or the
+ *  all-zero sentinel. */
+export const resolveId = (mvrPlaceholder: string): string => {
+	const id = ids().mvrOverrides[mvrPlaceholder];
+	if (id === undefined || id === UNRESOLVED_ID) {
+		throw new DevstackConfigMissingError(\`id for "\${mvrPlaceholder}" is unresolved\`);
+	}
+	return id;
+};
+
+/** Resolve the active network name (the \`networks.<name>\` key the app
+ *  reads). Environment/live data — the local stack picks a dynamic value
+ *  and a real deployment names a different network — so it is injected,
+ *  never baked into the committed tree. Throws when no ids were injected. */
+export const resolveNetwork = (): string => ids().network;
+
+/** Resolve the network connection map (\`{ [name]: DevstackNetworkEntry }\`).
+ *  The local rpc carries a dynamic port; a real deployment supplies its own —
+ *  so this is injected, never baked. Throws when no ids were injected. */
+export const resolveNetworks = (): { readonly [name: string]: DevstackNetworkEntry } =>
+	ids().networks;
+
+/** Resolve the ACTIVE network's connection entry —
+ *  \`resolveNetworks()[resolveNetwork()]\` with a non-undefined return type and
+ *  a loud throw. Removes the \`config.networks[config.network]\` index-signature
+ *  footgun: the app reads \`.rpc\` etc. off a guaranteed entry instead of
+ *  threading an \`undefined\` past the index lookup. Throws
+ *  \`DevstackConfigMissingError\` when no ids were injected or the active
+ *  network has no entry in the injected map. */
+export const resolveActiveNetwork = (): DevstackNetworkEntry => {
+	const network = resolveNetwork();
+	const entry = resolveNetworks()[network];
+	if (entry === undefined) {
+		throw new DevstackConfigMissingError(\`active network "\${network}" has no entry\`);
+	}
+	return entry;
+};
+
+/** Resolve a generic plugin value (\`values[namespace][key]\`). The committed
+ *  \`config.ts\` calls this for any live plugin value that isn't a package id
+ *  or the network — deepbook pool ids, coin types, walrus/seal endpoints.
+ *  Throws \`DevstackConfigMissingError\` when no ids were injected, the value
+ *  is missing, or it is the all-zero sentinel. */
+export const resolveValue = <T = unknown>(namespace: string, key: string): T => {
+	const values = ids().values ?? {};
+	const namespaceValues = values[namespace];
+	const value = namespaceValues === undefined ? undefined : namespaceValues[key];
+	if (value === undefined || value === UNRESOLVED_ID) {
+		throw new DevstackConfigMissingError(
+			\`value "\${namespace}.\${key}" is unresolved\`,
+		);
+	}
+	return value as T;
+};
+
+/** Non-throwing variant of \`resolveValue\`: returns \`undefined\` instead of
+ *  throwing \`DevstackConfigMissingError\` when no ids were injected, the value
+ *  is missing, or it is the all-zero sentinel. For discovery-only ids the app
+ *  GATES on (e.g. a coin's \`treasuryCapId\`/\`metadataId\`, only known after a
+ *  live publish) rather than the load-bearing fields that should fail loud. */
+export const resolveValueOptional = <T = unknown>(
+	namespace: string,
+	key: string,
+): T | undefined => {
+	const injected = injectedIds();
+	const values = injected?.values ?? {};
+	const namespaceValues = values[namespace];
+	const value = namespaceValues === undefined ? undefined : namespaceValues[key];
+	if (value === undefined || value === UNRESOLVED_ID) {
+		return undefined;
+	}
+	return value as T;
+};
+`;
+//#endregion
+export { CONFIG_RUNTIME_OUTPUT_PATH, CONFIG_RUNTIME_SOURCE };
+
+//# sourceMappingURL=config-runtime.mjs.map

package/dist/orchestrators/codegen/config-runtime.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-runtime.mjs","names":[],"sources":["../../../src/orchestrators/codegen/config-runtime.ts"],"sourcesContent":["// The FIXED `config-runtime.ts` source the codegen verb emits into the\n// committed `src/generated` tree.\n//\n// This is NOT routed through the literal renderer (`format.ts`) — it is a\n// constant string, emitted verbatim. It is the loud-failing id resolver\n// the committed `config.ts` calls: `config.ts` carries NO on-chain id\n// (those are LOADED CONFIG DATA, not codegen output), so each id is a\n// `resolveId('@local/<slug>')` call into this module, which reads the\n// build-time-injected `__DEVSTACK_IDS__` global and THROWS a clear,\n// actionable error when the id is absent or the all-zero sentinel.\n//\n// `__DEVSTACK_IDS__` is injected synchronously by the devstack Vite plugin\n// (`build-integrations/vite/index.ts`) via `define`:\n//   - dev (stack up): the live `.devstack/stacks/<stack>/devstack-ids.json`.\n//   - prod build:     a committed id-config FILE (same schema) — the Vite\n//                     plugin `ids` option or a `DEVSTACK_IDS_FILE` path.\n//   - neither:        `null` → `resolveId` throws at access time.\n\n/** Output path (relative to the generated tree) of the emitted resolver. */\nexport const CONFIG_RUNTIME_OUTPUT_PATH = 'config-runtime.ts';\n\n/** The verbatim source emitted as `src/generated/config-runtime.ts`. */\nexport const CONFIG_RUNTIME_SOURCE = `// THIS FILE IS AUTO-GENERATED BY @mysten/devstack.\n// Do not edit by hand — your changes will be overwritten by the next\n// \\`devstack codegen\\`. Apps consume codegen output; codegen output never\n// imports from devstack.\n//\n// Loud-failing on-chain id resolver. The committed \\`config.ts\\` carries no\n// ids; it resolves each id through \\`resolveId(...)\\` here, which reads the\n// build-time-injected \\`__DEVSTACK_IDS__\\` global. Run \\`devstack up\\` for\n// local dev (the Vite plugin injects the live ids), or point the build at a\n// committed id-config file for a real deployment.\n\nconst UNRESOLVED_ID =\n\t'0x0000000000000000000000000000000000000000000000000000000000000000';\n\n// Node-only runtime fallback for the on-chain ids. The browser/dev/prod\n// path injects \\`__DEVSTACK_IDS__\\` via the Vite \\`define\\` (replaced at\n// transform time); this fallback ONLY engages when that define is absent —\n// i.e. under Node/vitest, where the \\`define\\` bakes to \\`null\\` because the\n// test stack is booted by the vitest \\`globalSetup\\` AFTER the Vite config\n// (and so this module) is evaluated. The devstack vitest \\`globalSetup\\`\n// publishes the booted stack's id-config FILE path as\n// \\`process.env.DEVSTACK_IDS_FILE\\`; we read+parse it lazily here. Guarded so\n// browser bundles (no \\`process\\`, no \\`node:fs\\`) never touch it. Returns\n// \\`null\\` on any miss, so \\`ids()\\` throws its actionable error as before.\n// Minimal LOCAL shapes (no \\`@types/node\\` dependency — this file is also\n// type-checked in browser tsconfigs that don't load node types). We reach\n// \\`process\\` through \\`globalThis\\` and feature-test every member.\ninterface NodeProcessLike {\n\treadonly env?: { readonly [k: string]: string | undefined };\n\treadonly getBuiltinModule?: (id: string) => unknown;\n}\ninterface NodeFsLike {\n\treadonly existsSync: (p: string) => boolean;\n\treadonly readFileSync: (p: string, enc: 'utf8') => string;\n}\nlet nodeFallbackCache: DevstackIds | null | undefined;\nconst readNodeFallbackIds = (): DevstackIds | null => {\n\tif (nodeFallbackCache !== undefined) return nodeFallbackCache;\n\tnodeFallbackCache = null;\n\ttry {\n\t\tconst proc = (globalThis as { process?: NodeProcessLike }).process;\n\t\tif (proc === undefined) return null;\n\t\tconst idsFile = proc.env?.DEVSTACK_IDS_FILE;\n\t\tif (idsFile === undefined || idsFile.length === 0) return null;\n\t\t// \\`process.getBuiltinModule\\` (Node >=22.3) loads \\`node:fs\\`\n\t\t// synchronously without an \\`import\\`/\\`require\\` literal a browser\n\t\t// bundler would try to resolve — this whole branch is unreachable in\n\t\t// the browser (no \\`process\\`), so node:fs never enters the bundle.\n\t\tconst getBuiltin = proc.getBuiltinModule;\n\t\tif (typeof getBuiltin !== 'function') return null;\n\t\tconst fs = getBuiltin('node:fs') as NodeFsLike;\n\t\tif (!fs.existsSync(idsFile)) return null;\n\t\tnodeFallbackCache = JSON.parse(fs.readFileSync(idsFile, 'utf8')) as DevstackIds;\n\t\treturn nodeFallbackCache;\n\t} catch {\n\t\treturn null;\n\t}\n};\n\n/** The injected ids, or — under Node with no injected define — the\n *  \\`DEVSTACK_IDS_FILE\\` fallback. \\`null\\` when neither is available. */\nconst injectedIds = (): DevstackIds | null => {\n\tconst injected = typeof __DEVSTACK_IDS__ === 'undefined' ? null : __DEVSTACK_IDS__;\n\tif (injected !== null && injected !== undefined) return injected;\n\treturn readNodeFallbackIds();\n};\n\n/** One network connection entry — \\`rpc\\` is the load-bearing field the app\n *  reads synchronously; \\`chainId\\`/\\`faucet\\`/\\`graphql\\` are optional\n *  diagnostics (mirrors \\`IdConfigNetworkSchema\\`). */\nexport interface DevstackNetworkEntry {\n\treadonly rpc: string;\n\treadonly chainId?: string;\n\treadonly faucet?: string | null;\n\treadonly graphql?: string | null;\n}\n\n/** Shape of the injected ids. \\`null\\` when no stack is running and no\n *  id-config file was supplied at build time. */\nexport interface DevstackIds {\n\treadonly network: string;\n\treadonly networks: { readonly [name: string]: DevstackNetworkEntry };\n\treadonly packages: {\n\t\treadonly [name: string]: { readonly id: string; readonly objects?: { readonly [k: string]: string } };\n\t};\n\treadonly accounts: { readonly [name: string]: string };\n\treadonly mvrOverrides: { readonly [mvrPlaceholder: string]: string };\n\t/** Generic resolver channel: \\`values[namespace][key]\\` carries\n\t *  arbitrary plugin JSON the typed fields above can't (deepbook pool\n\t *  ids, coin types, walrus/seal endpoints). Optional — an older\n\t *  injected blob (no \\`values\\`) still satisfies the typed resolvers. */\n\treadonly values?: { readonly [namespace: string]: { readonly [key: string]: unknown } };\n}\n\ndeclare global {\n\t// Injected by the devstack Vite plugin via \\`define\\`. \\`null\\` when no\n\t// ids are available (no stack up + no id-config file).\n\tconst __DEVSTACK_IDS__: DevstackIds | null | undefined;\n}\n\n/** Thrown when a generated config value needs an on-chain id but none was\n *  injected — actionable, not a silent zero. */\nexport class DevstackConfigMissingError extends Error {\n\tconstructor(detail: string) {\n\t\tsuper(\n\t\t\t\\`[devstack] \\${detail}\\\\n\\` +\n\t\t\t\t\\`No on-chain ids are available. For local dev, run \\\\\\`devstack up\\\\\\` \\` +\n\t\t\t\t\\`(the Vite dev server injects the live ids). For a production build, \\` +\n\t\t\t\t\\`point the build at the known deployment's committed id-config file \\` +\n\t\t\t\t\\`(the Vite plugin \\\\\\`ids\\\\\\` option, or \\\\\\`DEVSTACK_IDS_FILE\\\\\\`) before \\` +\n\t\t\t\t\\`\\\\\\`pnpm build\\\\\\`. See your example README's \"Deploy to a real network\" \\` +\n\t\t\t\t\\`section.\\`,\n\t\t);\n\t\tthis.name = 'DevstackConfigMissingError';\n\t}\n}\n\nconst ids = (): DevstackIds => {\n\tconst injected = injectedIds();\n\tif (injected === null || injected === undefined) {\n\t\tthrow new DevstackConfigMissingError('on-chain ids were never injected');\n\t}\n\treturn injected;\n};\n\n/** Resolve the active-network id for an MVR placeholder (\\`@local/<slug>\\`).\n *  Throws \\`DevstackConfigMissingError\\` when the id is absent or the\n *  all-zero sentinel. */\nexport const resolveId = (mvrPlaceholder: string): string => {\n\tconst id = ids().mvrOverrides[mvrPlaceholder];\n\tif (id === undefined || id === UNRESOLVED_ID) {\n\t\tthrow new DevstackConfigMissingError(\\`id for \"\\${mvrPlaceholder}\" is unresolved\\`);\n\t}\n\treturn id;\n};\n\n/** Resolve the active network name (the \\`networks.<name>\\` key the app\n *  reads). Environment/live data — the local stack picks a dynamic value\n *  and a real deployment names a different network — so it is injected,\n *  never baked into the committed tree. Throws when no ids were injected. */\nexport const resolveNetwork = (): string => ids().network;\n\n/** Resolve the network connection map (\\`{ [name]: DevstackNetworkEntry }\\`).\n *  The local rpc carries a dynamic port; a real deployment supplies its own —\n *  so this is injected, never baked. Throws when no ids were injected. */\nexport const resolveNetworks = (): { readonly [name: string]: DevstackNetworkEntry } =>\n\tids().networks;\n\n/** Resolve the ACTIVE network's connection entry —\n *  \\`resolveNetworks()[resolveNetwork()]\\` with a non-undefined return type and\n *  a loud throw. Removes the \\`config.networks[config.network]\\` index-signature\n *  footgun: the app reads \\`.rpc\\` etc. off a guaranteed entry instead of\n *  threading an \\`undefined\\` past the index lookup. Throws\n *  \\`DevstackConfigMissingError\\` when no ids were injected or the active\n *  network has no entry in the injected map. */\nexport const resolveActiveNetwork = (): DevstackNetworkEntry => {\n\tconst network = resolveNetwork();\n\tconst entry = resolveNetworks()[network];\n\tif (entry === undefined) {\n\t\tthrow new DevstackConfigMissingError(\\`active network \"\\${network}\" has no entry\\`);\n\t}\n\treturn entry;\n};\n\n/** Resolve a generic plugin value (\\`values[namespace][key]\\`). The committed\n *  \\`config.ts\\` calls this for any live plugin value that isn't a package id\n *  or the network — deepbook pool ids, coin types, walrus/seal endpoints.\n *  Throws \\`DevstackConfigMissingError\\` when no ids were injected, the value\n *  is missing, or it is the all-zero sentinel. */\nexport const resolveValue = <T = unknown>(namespace: string, key: string): T => {\n\tconst values = ids().values ?? {};\n\tconst namespaceValues = values[namespace];\n\tconst value = namespaceValues === undefined ? undefined : namespaceValues[key];\n\tif (value === undefined || value === UNRESOLVED_ID) {\n\t\tthrow new DevstackConfigMissingError(\n\t\t\t\\`value \"\\${namespace}.\\${key}\" is unresolved\\`,\n\t\t);\n\t}\n\treturn value as T;\n};\n\n/** Non-throwing variant of \\`resolveValue\\`: returns \\`undefined\\` instead of\n *  throwing \\`DevstackConfigMissingError\\` when no ids were injected, the value\n *  is missing, or it is the all-zero sentinel. For discovery-only ids the app\n *  GATES on (e.g. a coin's \\`treasuryCapId\\`/\\`metadataId\\`, only known after a\n *  live publish) rather than the load-bearing fields that should fail loud. */\nexport const resolveValueOptional = <T = unknown>(\n\tnamespace: string,\n\tkey: string,\n): T | undefined => {\n\tconst injected = injectedIds();\n\tconst values = injected?.values ?? {};\n\tconst namespaceValues = values[namespace];\n\tconst value = namespaceValues === undefined ? undefined : namespaceValues[key];\n\tif (value === undefined || value === UNRESOLVED_ID) {\n\t\treturn undefined;\n\t}\n\treturn value as T;\n};\n`;\n"],"mappings":";;AAmBA,MAAa,6BAA6B;;AAG1C,MAAa,wBAAwB"}

package/dist/orchestrators/codegen/emit.mjs

@@ -35,7 +35,7 @@ const emitOne = (input) => Effect.gen(function* () {
 		path: input.path,
 		outcome: "wrote"
 	};
-}).pipe(Effect.withSpan("codegen.emitOne", { attributes: { "codegen.path": input.path } }));
+});
 /**
 * Check the file's current mode and restore it if drifted. Returns
 * true if a chmod was performed.

package/dist/orchestrators/codegen/emit.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"emit.mjs","names":[],"sources":["../../../src/orchestrators/codegen/emit.ts"],"sourcesContent":["// File emission: per-file atomic write + idempotent no-touch.\n//\n// Distilled-doc § \"No-touch on no change\": when inputs are unchanged,\n// file mtimes do not move. This is load-bearing for dev-server HMR\n// quietness — Vite watchers fire on mtime, not content.\n//\n// Flow per file:\n//   1. Read existing file (best-effort). Decode as UTF-8 string.\n//   2. Compare to rendered content. If identical, restore mode bits\n//      (defensive — distilled-doc §\"sensitive-file permission drift\")\n//      and return WITHOUT touching the file.\n//   3. Otherwise atomic-write via the substrate's `atomicWriteFile`\n//      primitive: tempfile + fsync + rename. Apply mode.\n//\n// Cycle-level atomicity lives in `service.ts.runEmitCycle`, which\n// wraps the entire pipeline in substrate `stageAndSwap`. `emitOne`\n// remains per-file atomic so the inner staging-directory writes\n// stay crash-safe, but the user-visible output dir is replaced as\n// one rename — a half-cycle never reaches consumers.\n\nimport { Effect, FileSystem } from 'effect';\nimport { dirname } from 'node:path';\n\nimport { atomicWriteFile } from '../../substrate/runtime/atomic-write.ts';\n\nimport { CodegenWriteFailed } from './errors.ts';\n\nexport interface EmitOneInput {\n\treadonly path: string;\n\treadonly content: string;\n\treadonly mode: number;\n\treadonly parentMode?: number;\n}\n\nexport interface EmitOneResult {\n\treadonly path: string;\n\t/** `wrote` — content was different and we atomically wrote.\n\t *  `unchanged` — bytes matched, we skipped the write.\n\t *  `chmod-only` — bytes matched but mode bits drifted; we\n\t *  restored the mode but did not rewrite the file. */\n\treadonly outcome: 'wrote' | 'unchanged' | 'chmod-only';\n}\n\n/**\n * Emit one file with idempotency. The mode is re-applied even on\n * the no-write path to recover from manual chmods (distilled-doc\n * §\"sensitive-file permission drift\").\n */\nexport const emitOne = (\n\tinput: EmitOneInput,\n): Effect.Effect<EmitOneResult, CodegenWriteFailed, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tconst bytes = new TextEncoder().encode(input.content);\n\t\tif (input.parentMode !== undefined) {\n\t\t\tyield* ensureParentDirectory(input.path, input.parentMode);\n\t\t}\n\n\t\t// 1. Best-effort read of existing content for the no-touch\n\t\t//    short-circuit. A missing file collapses to \"no existing\n\t\t//    bytes\" → write. Any other error also collapses to write\n\t\t//    (atomic-write will report the real failure).\n\t\tconst existing = yield* fs.readFileString(input.path).pipe(\n\t\t\tEffect.match({\n\t\t\t\tonSuccess: (text) => text,\n\t\t\t\tonFailure: () => null,\n\t\t\t}),\n\t\t);\n\n\t\tif (existing !== null && existing === input.content) {\n\t\t\t// Content matches — re-apply mode to fix drift, but don't\n\t\t\t// touch the file's mtime. `chmod` updates the inode's\n\t\t\t// `ctime` only.\n\t\t\tconst drifted = yield* checkAndRestoreMode(input.path, input.mode);\n\t\t\treturn {\n\t\t\t\tpath: input.path,\n\t\t\t\toutcome: drifted ? ('chmod-only' as const) : ('unchanged' as const),\n\t\t\t};\n\t\t}\n\n\t\t// 2. Bytes differ (or file missing) — atomic write. The\n\t\t//    substrate's `atomicWriteFile` owns mkdir-parent +\n\t\t//    tempfile + fsync + rename. Mode is applied at create\n\t\t//    time via the `mode` open flag.\n\t\tyield* atomicWriteFile(input.path, bytes, {\n\t\t\tmode: input.mode,\n\t\t\t...(input.parentMode === undefined ? {} : { parentMode: input.parentMode }),\n\t\t}).pipe(\n\t\t\tEffect.mapError(\n\t\t\t\t(cause) =>\n\t\t\t\t\tnew CodegenWriteFailed({\n\t\t\t\t\t\toutputPath: input.path,\n\t\t\t\t\t\tstage: cause.stage === 'mkdir-parent' ? 'mkdir-parent' : 'write',\n\t\t\t\t\t\tcause,\n\t\t\t\t\t}),\n\t\t\t),\n\t\t);\n\t\treturn { path: input.path, outcome: 'wrote' as const };\n\t}).pipe(\n\t\tEffect.withSpan('codegen.emitOne', {\n\t\t\tattributes: { 'codegen.path': input.path },\n\t\t}),\n\t);\n\n/**\n * Check the file's current mode and restore it if drifted. Returns\n * true if a chmod was performed.\n */\nconst checkAndRestoreMode = (\n\tpath: string,\n\twantedMode: number,\n): Effect.Effect<boolean, CodegenWriteFailed, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tconst stat = yield* fs.stat(path).pipe(\n\t\t\tEffect.match({\n\t\t\t\tonSuccess: (s) => s,\n\t\t\t\tonFailure: () => null,\n\t\t\t}),\n\t\t);\n\t\tif (stat === null) return false;\n\t\t// `stat.mode` is the full mode bits; mask to file-perm\n\t\t// bits (lowest 12 — incl. setuid/setgid/sticky).\n\t\tconst currentPermBits = stat.mode & 0o7777;\n\t\tif (currentPermBits === wantedMode) return false;\n\t\tyield* fs.chmod(path, wantedMode).pipe(\n\t\t\tEffect.mapError(\n\t\t\t\t(cause) =>\n\t\t\t\t\tnew CodegenWriteFailed({\n\t\t\t\t\t\toutputPath: path,\n\t\t\t\t\t\tstage: 'chmod',\n\t\t\t\t\t\tcause,\n\t\t\t\t\t}),\n\t\t\t),\n\t\t);\n\t\treturn true;\n\t});\n\nconst ensureParentDirectory = (\n\tpath: string,\n\tparentMode: number,\n): Effect.Effect<void, CodegenWriteFailed, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tconst parent = dirname(path);\n\t\tyield* fs.makeDirectory(parent, { recursive: true, mode: parentMode }).pipe(\n\t\t\tEffect.mapError(\n\t\t\t\t(cause) =>\n\t\t\t\t\tnew CodegenWriteFailed({\n\t\t\t\t\t\toutputPath: parent,\n\t\t\t\t\t\tstage: 'mkdir-parent',\n\t\t\t\t\t\tcause,\n\t\t\t\t\t}),\n\t\t\t),\n\t\t);\n\t\tyield* checkAndRestoreMode(parent, parentMode).pipe(Effect.asVoid);\n\t});\n"],"mappings":";;;;;;;;;;AAgDA,MAAa,WACZ,UAEA,OAAO,IAAI,aAAa;CACvB,MAAM,KAAK,OAAO,WAAW;CAC7B,MAAM,QAAQ,IAAI,aAAa,CAAC,OAAO,MAAM,QAAQ;AACrD,KAAI,MAAM,eAAe,KAAA,EACxB,QAAO,sBAAsB,MAAM,MAAM,MAAM,WAAW;CAO3D,MAAM,WAAW,OAAO,GAAG,eAAe,MAAM,KAAK,CAAC,KACrD,OAAO,MAAM;EACZ,YAAY,SAAS;EACrB,iBAAiB;EACjB,CAAC,CACF;AAED,KAAI,aAAa,QAAQ,aAAa,MAAM,SAAS;EAIpD,MAAM,UAAU,OAAO,oBAAoB,MAAM,MAAM,MAAM,KAAK;AAClE,SAAO;GACN,MAAM,MAAM;GACZ,SAAS,UAAW,eAA0B;GAC9C;;AAOF,QAAO,gBAAgB,MAAM,MAAM,OAAO;EACzC,MAAM,MAAM;EACZ,GAAI,MAAM,eAAe,KAAA,IAAY,EAAE,GAAG,EAAE,YAAY,MAAM,YAAY;EAC1E,CAAC,CAAC,KACF,OAAO,UACL,UACA,IAAI,mBAAmB;EACtB,YAAY,MAAM;EAClB,OAAO,MAAM,UAAU,iBAAiB,iBAAiB;EACzD;EACA,CAAC,CACH,CACD;AACD,QAAO;EAAE,MAAM,MAAM;EAAM,SAAS;EAAkB;EACrD,CAAC,KACF,OAAO,SAAS,mBAAmB,EAClC,YAAY,EAAE,gBAAgB,MAAM,MAAM,EAC1C,CAAC,CACF;;;;;AAMF,MAAM,uBACL,MACA,eAEA,OAAO,IAAI,aAAa;CACvB,MAAM,KAAK,OAAO,WAAW;CAC7B,MAAM,OAAO,OAAO,GAAG,KAAK,KAAK,CAAC,KACjC,OAAO,MAAM;EACZ,YAAY,MAAM;EAClB,iBAAiB;EACjB,CAAC,CACF;AACD,KAAI,SAAS,KAAM,QAAO;AAI1B,MADwB,KAAK,OAAO,UACZ,WAAY,QAAO;AAC3C,QAAO,GAAG,MAAM,MAAM,WAAW,CAAC,KACjC,OAAO,UACL,UACA,IAAI,mBAAmB;EACtB,YAAY;EACZ,OAAO;EACP;EACA,CAAC,CACH,CACD;AACD,QAAO;EACN;AAEH,MAAM,yBACL,MACA,eAEA,OAAO,IAAI,aAAa;CACvB,MAAM,KAAK,OAAO,WAAW;CAC7B,MAAM,SAAS,QAAQ,KAAK;AAC5B,QAAO,GAAG,cAAc,QAAQ;EAAE,WAAW;EAAM,MAAM;EAAY,CAAC,CAAC,KACtE,OAAO,UACL,UACA,IAAI,mBAAmB;EACtB,YAAY;EACZ,OAAO;EACP;EACA,CAAC,CACH,CACD;AACD,QAAO,oBAAoB,QAAQ,WAAW,CAAC,KAAK,OAAO,OAAO;EACjE"}
+{"version":3,"file":"emit.mjs","names":[],"sources":["../../../src/orchestrators/codegen/emit.ts"],"sourcesContent":["// File emission: per-file atomic write + idempotent no-touch.\n//\n// Distilled-doc § \"No-touch on no change\": when inputs are unchanged,\n// file mtimes do not move. This is load-bearing for dev-server HMR\n// quietness — Vite watchers fire on mtime, not content.\n//\n// Flow per file:\n//   1. Read existing file (best-effort). Decode as UTF-8 string.\n//   2. Compare to rendered content. If identical, restore mode bits\n//      (defensive — distilled-doc §\"sensitive-file permission drift\")\n//      and return WITHOUT touching the file.\n//   3. Otherwise atomic-write via the substrate's `atomicWriteFile`\n//      primitive: tempfile + fsync + rename. Apply mode.\n//\n// Cycle-level atomicity lives in `service.ts.runEmitCycle`, which\n// wraps the entire pipeline in substrate `stageAndSwap`. `emitOne`\n// remains per-file atomic so the inner staging-directory writes\n// stay crash-safe, but the user-visible output dir is replaced as\n// one rename — a half-cycle never reaches consumers.\n\nimport { Effect, FileSystem } from 'effect';\nimport { dirname } from 'node:path';\n\nimport { atomicWriteFile } from '../../substrate/runtime/atomic-write.ts';\n\nimport { CodegenWriteFailed } from './errors.ts';\n\nexport interface EmitOneInput {\n\treadonly path: string;\n\treadonly content: string;\n\treadonly mode: number;\n\treadonly parentMode?: number;\n}\n\nexport interface EmitOneResult {\n\treadonly path: string;\n\t/** `wrote` — content was different and we atomically wrote.\n\t *  `unchanged` — bytes matched, we skipped the write.\n\t *  `chmod-only` — bytes matched but mode bits drifted; we\n\t *  restored the mode but did not rewrite the file. */\n\treadonly outcome: 'wrote' | 'unchanged' | 'chmod-only';\n}\n\n/**\n * Emit one file with idempotency. The mode is re-applied even on\n * the no-write path to recover from manual chmods (distilled-doc\n * §\"sensitive-file permission drift\").\n */\nexport const emitOne = (\n\tinput: EmitOneInput,\n): Effect.Effect<EmitOneResult, CodegenWriteFailed, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tconst bytes = new TextEncoder().encode(input.content);\n\t\tif (input.parentMode !== undefined) {\n\t\t\tyield* ensureParentDirectory(input.path, input.parentMode);\n\t\t}\n\n\t\t// 1. Best-effort read of existing content for the no-touch\n\t\t//    short-circuit. A missing file collapses to \"no existing\n\t\t//    bytes\" → write. Any other error also collapses to write\n\t\t//    (atomic-write will report the real failure).\n\t\tconst existing = yield* fs.readFileString(input.path).pipe(\n\t\t\tEffect.match({\n\t\t\t\tonSuccess: (text) => text,\n\t\t\t\tonFailure: () => null,\n\t\t\t}),\n\t\t);\n\n\t\tif (existing !== null && existing === input.content) {\n\t\t\t// Content matches — re-apply mode to fix drift, but don't\n\t\t\t// touch the file's mtime. `chmod` updates the inode's\n\t\t\t// `ctime` only.\n\t\t\tconst drifted = yield* checkAndRestoreMode(input.path, input.mode);\n\t\t\treturn {\n\t\t\t\tpath: input.path,\n\t\t\t\toutcome: drifted ? ('chmod-only' as const) : ('unchanged' as const),\n\t\t\t};\n\t\t}\n\n\t\t// 2. Bytes differ (or file missing) — atomic write. The\n\t\t//    substrate's `atomicWriteFile` owns mkdir-parent +\n\t\t//    tempfile + fsync + rename. Mode is applied at create\n\t\t//    time via the `mode` open flag.\n\t\tyield* atomicWriteFile(input.path, bytes, {\n\t\t\tmode: input.mode,\n\t\t\t...(input.parentMode === undefined ? {} : { parentMode: input.parentMode }),\n\t\t}).pipe(\n\t\t\tEffect.mapError(\n\t\t\t\t(cause) =>\n\t\t\t\t\tnew CodegenWriteFailed({\n\t\t\t\t\t\toutputPath: input.path,\n\t\t\t\t\t\tstage: cause.stage === 'mkdir-parent' ? 'mkdir-parent' : 'write',\n\t\t\t\t\t\tcause,\n\t\t\t\t\t}),\n\t\t\t),\n\t\t);\n\t\treturn { path: input.path, outcome: 'wrote' as const };\n\t});\n\n/**\n * Check the file's current mode and restore it if drifted. Returns\n * true if a chmod was performed.\n */\nconst checkAndRestoreMode = (\n\tpath: string,\n\twantedMode: number,\n): Effect.Effect<boolean, CodegenWriteFailed, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tconst stat = yield* fs.stat(path).pipe(\n\t\t\tEffect.match({\n\t\t\t\tonSuccess: (s) => s,\n\t\t\t\tonFailure: () => null,\n\t\t\t}),\n\t\t);\n\t\tif (stat === null) return false;\n\t\t// `stat.mode` is the full mode bits; mask to file-perm\n\t\t// bits (lowest 12 — incl. setuid/setgid/sticky).\n\t\tconst currentPermBits = stat.mode & 0o7777;\n\t\tif (currentPermBits === wantedMode) return false;\n\t\tyield* fs.chmod(path, wantedMode).pipe(\n\t\t\tEffect.mapError(\n\t\t\t\t(cause) =>\n\t\t\t\t\tnew CodegenWriteFailed({\n\t\t\t\t\t\toutputPath: path,\n\t\t\t\t\t\tstage: 'chmod',\n\t\t\t\t\t\tcause,\n\t\t\t\t\t}),\n\t\t\t),\n\t\t);\n\t\treturn true;\n\t});\n\nconst ensureParentDirectory = (\n\tpath: string,\n\tparentMode: number,\n): Effect.Effect<void, CodegenWriteFailed, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tconst parent = dirname(path);\n\t\tyield* fs.makeDirectory(parent, { recursive: true, mode: parentMode }).pipe(\n\t\t\tEffect.mapError(\n\t\t\t\t(cause) =>\n\t\t\t\t\tnew CodegenWriteFailed({\n\t\t\t\t\t\toutputPath: parent,\n\t\t\t\t\t\tstage: 'mkdir-parent',\n\t\t\t\t\t\tcause,\n\t\t\t\t\t}),\n\t\t\t),\n\t\t);\n\t\tyield* checkAndRestoreMode(parent, parentMode).pipe(Effect.asVoid);\n\t});\n"],"mappings":";;;;;;;;;;AAgDA,MAAa,WACZ,UAEA,OAAO,IAAI,aAAa;CACvB,MAAM,KAAK,OAAO,WAAW;CAC7B,MAAM,QAAQ,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM,OAAO;CACpD,IAAI,MAAM,eAAe,KAAA,GACxB,OAAO,sBAAsB,MAAM,MAAM,MAAM,UAAU;CAO1D,MAAM,WAAW,OAAO,GAAG,eAAe,MAAM,IAAI,CAAC,CAAC,KACrD,OAAO,MAAM;EACZ,YAAY,SAAS;EACrB,iBAAiB;CAClB,CAAC,CACF;CAEA,IAAI,aAAa,QAAQ,aAAa,MAAM,SAAS;EAIpD,MAAM,UAAU,OAAO,oBAAoB,MAAM,MAAM,MAAM,IAAI;EACjE,OAAO;GACN,MAAM,MAAM;GACZ,SAAS,UAAW,eAA0B;EAC/C;CACD;CAMA,OAAO,gBAAgB,MAAM,MAAM,OAAO;EACzC,MAAM,MAAM;EACZ,GAAI,MAAM,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,MAAM,WAAW;CAC1E,CAAC,CAAC,CAAC,KACF,OAAO,UACL,UACA,IAAI,mBAAmB;EACtB,YAAY,MAAM;EAClB,OAAO,MAAM,UAAU,iBAAiB,iBAAiB;EACzD;CACD,CAAC,CACH,CACD;CACA,OAAO;EAAE,MAAM,MAAM;EAAM,SAAS;CAAiB;AACtD,CAAC;;;;;AAMF,MAAM,uBACL,MACA,eAEA,OAAO,IAAI,aAAa;CACvB,MAAM,KAAK,OAAO,WAAW;CAC7B,MAAM,OAAO,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,KACjC,OAAO,MAAM;EACZ,YAAY,MAAM;EAClB,iBAAiB;CAClB,CAAC,CACF;CACA,IAAI,SAAS,MAAM,OAAO;CAI1B,KADwB,KAAK,OAAO,UACZ,YAAY,OAAO;CAC3C,OAAO,GAAG,MAAM,MAAM,UAAU,CAAC,CAAC,KACjC,OAAO,UACL,UACA,IAAI,mBAAmB;EACtB,YAAY;EACZ,OAAO;EACP;CACD,CAAC,CACH,CACD;CACA,OAAO;AACR,CAAC;AAEF,MAAM,yBACL,MACA,eAEA,OAAO,IAAI,aAAa;CACvB,MAAM,KAAK,OAAO,WAAW;CAC7B,MAAM,SAAS,QAAQ,IAAI;CAC3B,OAAO,GAAG,cAAc,QAAQ;EAAE,WAAW;EAAM,MAAM;CAAW,CAAC,CAAC,CAAC,KACtE,OAAO,UACL,UACA,IAAI,mBAAmB;EACtB,YAAY;EACZ,OAAO;EACP;CACD,CAAC,CACH,CACD;CACA,OAAO,oBAAoB,QAAQ,UAAU,CAAC,CAAC,KAAK,OAAO,MAAM;AAClE,CAAC"}

package/dist/orchestrators/codegen/errors.mjs

@@ -20,6 +20,26 @@ var CodegenEmitterCollision = class extends Schema.TaggedErrorClass()("CodegenEm
 	emitterName: Schema.String,
 	outputPaths: Schema.Array(Schema.String)
 }) {};
+/** Two `Codegenable` contributions target the SAME aggregate
+*  `bucket` but disagree on its routing/sensitivity metadata
+*  (`outputLocation` or `sensitive`). The `AggregateContribution`
+*  contract requires all contributors to a bucket to agree; the
+*  orchestrator routes the synthesized aggregate from the FIRST
+*  contributor it sees, so a silent disagreement could misroute a
+*  sensitive aggregate into the committed `generated` tree. Detected
+*  while folding contributions so the cycle fails fast rather than
+*  emitting a secret with non-sensitive handling. */
+var CodegenAggregateConflict = class extends Schema.TaggedErrorClass()("CodegenAggregateConflict", {
+	bucket: Schema.String,
+	field: Schema.Literals(["outputLocation", "sensitive"]),
+	/** The value the first contributor established for the bucket. */
+	established: Schema.String,
+	/** The conflicting value a later contributor declared. */
+	conflicting: Schema.String,
+	/** Emitter names: the contributor that established the value and
+	*  the one that disagreed. */
+	emitters: Schema.Array(Schema.String)
+}) {};
 /** A `Codegenable.emit()` wrote a value that the renderer cannot
 *  serialise (a function, a symbol, a circular reference, etc.). */
 var CodegenRenderError = class extends Schema.TaggedErrorClass()("CodegenRenderError", {
@@ -66,6 +86,6 @@ var CodegenBindingsFailed = class extends Schema.TaggedErrorClass()("CodegenBind
 }) {};
 Schema.TaggedErrorClass()("CodegenManifestDrift", { detail: Schema.String });
 //#endregion
-export { CodegenBindingsFailed, CodegenEmitFailed, CodegenEmitterCollision, CodegenPathConflict, CodegenRenderError, CodegenWriteFailed };
+export { CodegenAggregateConflict, CodegenBindingsFailed, CodegenEmitFailed, CodegenEmitterCollision, CodegenPathConflict, CodegenRenderError, CodegenWriteFailed };
 
 //# sourceMappingURL=errors.mjs.map

package/dist/orchestrators/codegen/errors.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"errors.mjs","names":[],"sources":["../../../src/orchestrators/codegen/errors.ts"],"sourcesContent":["// Typed errors for the Codegen orchestrator.\n//\n// Architecture §6 (Codegenable) failure-mode taxonomy + distilled-doc\n// §\"Refine the `CodegenError` phase taxonomy\". Today's v3 collapsed\n// \"emitter-collision at acquire\", \"binary shell-out failure\", and\n// \"pure render failure\" into a single tag; the rewrite keeps them\n// separate so callers can `catchTag` on each.\n//\n// Phase tags inside each error name the lifecycle step that failed\n// (resolve → emit → render → write → bindings → finalize) so error\n// attribution stays accurate.\n\nimport { Schema } from 'effect';\n\n/** Path-layer rejection from the codegen orchestrator.\n *  - `kind: 'duplicate'` — two `Codegenable` contributions claim the\n *    same `outputPath`. Hard failure detected BEFORE write so the\n *    user-visible output dir never sees an ambiguous overwrite.\n *  - `kind: 'non-relative'` — a plugin-authored `outputPath` escapes\n *    the codegen root (contains `..` or is absolute). Defense-in-depth\n *    for the file-layout invariants. */\nexport class CodegenPathConflict extends Schema.TaggedErrorClass<CodegenPathConflict>()(\n\t'CodegenPathConflict',\n\t{\n\t\tkind: Schema.Literals(['duplicate', 'non-relative']),\n\t\toutputPath: Schema.String,\n\t\temitters: Schema.Array(Schema.String),\n\t},\n) {}\n\n/** Two `Codegenable` contributions share the SAME `emitterName`\n *  literal but resolve to different `outputPath`s — programming\n *  bug in plugin code (emitter name should be unique). Distinct\n *  from `CodegenPathConflict` so attribution stays clean. */\nexport class CodegenEmitterCollision extends Schema.TaggedErrorClass<CodegenEmitterCollision>()(\n\t'CodegenEmitterCollision',\n\t{\n\t\temitterName: Schema.String,\n\t\toutputPaths: Schema.Array(Schema.String),\n\t},\n) {}\n\n/** A `Codegenable.emit()` wrote a value that the renderer cannot\n *  serialise (a function, a symbol, a circular reference, etc.). */\nexport class CodegenRenderError extends Schema.TaggedErrorClass<CodegenRenderError>()(\n\t'CodegenRenderError',\n\t{\n\t\temitterName: Schema.String,\n\t\toutputPath: Schema.String,\n\t\tdetail: Schema.String,\n\t\tcause: Schema.optional(Schema.Defect),\n\t},\n) {}\n\n/** `Codegenable.emit()` raised. Wraps the inner Effect failure\n *  rather than propagating it raw so the orchestrator's error\n *  channel stays closed. */\nexport class CodegenEmitFailed extends Schema.TaggedErrorClass<CodegenEmitFailed>()(\n\t'CodegenEmitFailed',\n\t{\n\t\temitterName: Schema.String,\n\t\toutputPath: Schema.String,\n\t\tcause: Schema.optional(Schema.Defect),\n\t},\n) {}\n\n/** Disk write (atomic-write or permission-tighten) failed. */\nexport class CodegenWriteFailed extends Schema.TaggedErrorClass<CodegenWriteFailed>()(\n\t'CodegenWriteFailed',\n\t{\n\t\toutputPath: Schema.String,\n\t\tstage: Schema.Literals(['mkdir-parent', 'write', 'rename', 'chmod', 'gitignore']),\n\t\tcause: Schema.optional(Schema.Defect),\n\t},\n) {}\n\n/** `@mysten/codegen` shell-out (Move-to-TS bindings) failed or\n *  silently no-op'd. Distilled-doc § \"Silent no-op from a\n *  downstream tool is a failure\" — we surface a hint about the\n *  common `Move.toml` cause. */\nexport class CodegenBindingsFailed extends Schema.TaggedErrorClass<CodegenBindingsFailed>()(\n\t'CodegenBindingsFailed',\n\t{\n\t\tpackage: Schema.String,\n\t\tsourcePath: Schema.String,\n\t\treason: Schema.Literals(['summary-failed', 'no-output', 'render-failed', 'write-failed']),\n\t\thint: Schema.optional(Schema.String),\n\t\tcause: Schema.optional(Schema.Defect),\n\t},\n) {}\n\n/** The reader of the manifest envelope detected drift between\n *  what plugins contributed and what's on disk — e.g. a stale\n *  envelope from a previous stack lifecycle. */\nexport class CodegenManifestDrift extends Schema.TaggedErrorClass<CodegenManifestDrift>()(\n\t'CodegenManifestDrift',\n\t{\n\t\tdetail: Schema.String,\n\t},\n) {}\n\nexport type CodegenError =\n\t| CodegenPathConflict\n\t| CodegenEmitterCollision\n\t| CodegenRenderError\n\t| CodegenEmitFailed\n\t| CodegenWriteFailed\n\t| CodegenBindingsFailed\n\t| CodegenManifestDrift;\n"],"mappings":";;;;;;;;;AAqBA,IAAa,sBAAb,cAAyC,OAAO,kBAAuC,CACtF,uBACA;CACC,MAAM,OAAO,SAAS,CAAC,aAAa,eAAe,CAAC;CACpD,YAAY,OAAO;CACnB,UAAU,OAAO,MAAM,OAAO,OAAO;CACrC,CACD,CAAC;;;;;AAMF,IAAa,0BAAb,cAA6C,OAAO,kBAA2C,CAC9F,2BACA;CACC,aAAa,OAAO;CACpB,aAAa,OAAO,MAAM,OAAO,OAAO;CACxC,CACD,CAAC;;;AAIF,IAAa,qBAAb,cAAwC,OAAO,kBAAsC,CACpF,sBACA;CACC,aAAa,OAAO;CACpB,YAAY,OAAO;CACnB,QAAQ,OAAO;CACf,OAAO,OAAO,SAAS,OAAO,OAAO;CACrC,CACD,CAAC;;;;AAKF,IAAa,oBAAb,cAAuC,OAAO,kBAAqC,CAClF,qBACA;CACC,aAAa,OAAO;CACpB,YAAY,OAAO;CACnB,OAAO,OAAO,SAAS,OAAO,OAAO;CACrC,CACD,CAAC;;AAGF,IAAa,qBAAb,cAAwC,OAAO,kBAAsC,CACpF,sBACA;CACC,YAAY,OAAO;CACnB,OAAO,OAAO,SAAS;EAAC;EAAgB;EAAS;EAAU;EAAS;EAAY,CAAC;CACjF,OAAO,OAAO,SAAS,OAAO,OAAO;CACrC,CACD,CAAC;;;;;AAMF,IAAa,wBAAb,cAA2C,OAAO,kBAAyC,CAC1F,yBACA;CACC,SAAS,OAAO;CAChB,YAAY,OAAO;CACnB,QAAQ,OAAO,SAAS;EAAC;EAAkB;EAAa;EAAiB;EAAe,CAAC;CACzF,MAAM,OAAO,SAAS,OAAO,OAAO;CACpC,OAAO,OAAO,SAAS,OAAO,OAAO;CACrC,CACD,CAAC;AAKwC,OAAO,kBAAwC,CACxF,wBACA,EACC,QAAQ,OAAO,QACf,CACD"}
+{"version":3,"file":"errors.mjs","names":[],"sources":["../../../src/orchestrators/codegen/errors.ts"],"sourcesContent":["// Typed errors for the Codegen orchestrator.\n//\n// A phase-tagged failure-mode taxonomy: \"emitter-collision at acquire\",\n// \"binary shell-out failure\", and \"pure render failure\" each get a\n// separate tag so callers can `catchTag` on each.\n//\n// Phase tags inside each error name the lifecycle step that failed\n// (resolve → emit → render → write → bindings → finalize) so error\n// attribution stays accurate.\n\nimport { Schema } from 'effect';\n\n/** Path-layer rejection from the codegen orchestrator.\n *  - `kind: 'duplicate'` — two `Codegenable` contributions claim the\n *    same `outputPath`. Hard failure detected BEFORE write so the\n *    user-visible output dir never sees an ambiguous overwrite.\n *  - `kind: 'non-relative'` — a plugin-authored `outputPath` escapes\n *    the codegen root (contains `..` or is absolute). Defense-in-depth\n *    for the file-layout invariants. */\nexport class CodegenPathConflict extends Schema.TaggedErrorClass<CodegenPathConflict>()(\n\t'CodegenPathConflict',\n\t{\n\t\tkind: Schema.Literals(['duplicate', 'non-relative']),\n\t\toutputPath: Schema.String,\n\t\temitters: Schema.Array(Schema.String),\n\t},\n) {}\n\n/** Two `Codegenable` contributions share the SAME `emitterName`\n *  literal but resolve to different `outputPath`s — programming\n *  bug in plugin code (emitter name should be unique). Distinct\n *  from `CodegenPathConflict` so attribution stays clean. */\nexport class CodegenEmitterCollision extends Schema.TaggedErrorClass<CodegenEmitterCollision>()(\n\t'CodegenEmitterCollision',\n\t{\n\t\temitterName: Schema.String,\n\t\toutputPaths: Schema.Array(Schema.String),\n\t},\n) {}\n\n/** Two `Codegenable` contributions target the SAME aggregate\n *  `bucket` but disagree on its routing/sensitivity metadata\n *  (`outputLocation` or `sensitive`). The `AggregateContribution`\n *  contract requires all contributors to a bucket to agree; the\n *  orchestrator routes the synthesized aggregate from the FIRST\n *  contributor it sees, so a silent disagreement could misroute a\n *  sensitive aggregate into the committed `generated` tree. Detected\n *  while folding contributions so the cycle fails fast rather than\n *  emitting a secret with non-sensitive handling. */\nexport class CodegenAggregateConflict extends Schema.TaggedErrorClass<CodegenAggregateConflict>()(\n\t'CodegenAggregateConflict',\n\t{\n\t\tbucket: Schema.String,\n\t\tfield: Schema.Literals(['outputLocation', 'sensitive']),\n\t\t/** The value the first contributor established for the bucket. */\n\t\testablished: Schema.String,\n\t\t/** The conflicting value a later contributor declared. */\n\t\tconflicting: Schema.String,\n\t\t/** Emitter names: the contributor that established the value and\n\t\t *  the one that disagreed. */\n\t\temitters: Schema.Array(Schema.String),\n\t},\n) {}\n\n/** A `Codegenable.emit()` wrote a value that the renderer cannot\n *  serialise (a function, a symbol, a circular reference, etc.). */\nexport class CodegenRenderError extends Schema.TaggedErrorClass<CodegenRenderError>()(\n\t'CodegenRenderError',\n\t{\n\t\temitterName: Schema.String,\n\t\toutputPath: Schema.String,\n\t\tdetail: Schema.String,\n\t\tcause: Schema.optional(Schema.Defect),\n\t},\n) {}\n\n/** `Codegenable.emit()` raised. Wraps the inner Effect failure\n *  rather than propagating it raw so the orchestrator's error\n *  channel stays closed. */\nexport class CodegenEmitFailed extends Schema.TaggedErrorClass<CodegenEmitFailed>()(\n\t'CodegenEmitFailed',\n\t{\n\t\temitterName: Schema.String,\n\t\toutputPath: Schema.String,\n\t\tcause: Schema.optional(Schema.Defect),\n\t},\n) {}\n\n/** Disk write (atomic-write or permission-tighten) failed. */\nexport class CodegenWriteFailed extends Schema.TaggedErrorClass<CodegenWriteFailed>()(\n\t'CodegenWriteFailed',\n\t{\n\t\toutputPath: Schema.String,\n\t\tstage: Schema.Literals(['mkdir-parent', 'write', 'rename', 'chmod', 'gitignore']),\n\t\tcause: Schema.optional(Schema.Defect),\n\t},\n) {}\n\n/** `@mysten/codegen` shell-out (Move-to-TS bindings) failed or\n *  silently no-op'd. Distilled-doc § \"Silent no-op from a\n *  downstream tool is a failure\" — we surface a hint about the\n *  common `Move.toml` cause. */\nexport class CodegenBindingsFailed extends Schema.TaggedErrorClass<CodegenBindingsFailed>()(\n\t'CodegenBindingsFailed',\n\t{\n\t\tpackage: Schema.String,\n\t\tsourcePath: Schema.String,\n\t\treason: Schema.Literals(['summary-failed', 'no-output', 'render-failed', 'write-failed']),\n\t\thint: Schema.optional(Schema.String),\n\t\tcause: Schema.optional(Schema.Defect),\n\t},\n) {}\n\n/** The reader of the manifest envelope detected drift between\n *  what plugins contributed and what's on disk — e.g. a stale\n *  envelope from a previous stack lifecycle. */\nexport class CodegenManifestDrift extends Schema.TaggedErrorClass<CodegenManifestDrift>()(\n\t'CodegenManifestDrift',\n\t{\n\t\tdetail: Schema.String,\n\t},\n) {}\n\nexport type CodegenError =\n\t| CodegenPathConflict\n\t| CodegenEmitterCollision\n\t| CodegenAggregateConflict\n\t| CodegenRenderError\n\t| CodegenEmitFailed\n\t| CodegenWriteFailed\n\t| CodegenBindingsFailed\n\t| CodegenManifestDrift;\n"],"mappings":";;;;;;;;;AAmBA,IAAa,sBAAb,cAAyC,OAAO,iBAAsC,CAAC,CACtF,uBACA;CACC,MAAM,OAAO,SAAS,CAAC,aAAa,cAAc,CAAC;CACnD,YAAY,OAAO;CACnB,UAAU,OAAO,MAAM,OAAO,MAAM;AACrC,CACD,CAAC,CAAC,CAAC;;;;;AAMH,IAAa,0BAAb,cAA6C,OAAO,iBAA0C,CAAC,CAC9F,2BACA;CACC,aAAa,OAAO;CACpB,aAAa,OAAO,MAAM,OAAO,MAAM;AACxC,CACD,CAAC,CAAC,CAAC;;;;;;;;;;AAWH,IAAa,2BAAb,cAA8C,OAAO,iBAA2C,CAAC,CAChG,4BACA;CACC,QAAQ,OAAO;CACf,OAAO,OAAO,SAAS,CAAC,kBAAkB,WAAW,CAAC;;CAEtD,aAAa,OAAO;;CAEpB,aAAa,OAAO;;;CAGpB,UAAU,OAAO,MAAM,OAAO,MAAM;AACrC,CACD,CAAC,CAAC,CAAC;;;AAIH,IAAa,qBAAb,cAAwC,OAAO,iBAAqC,CAAC,CACpF,sBACA;CACC,aAAa,OAAO;CACpB,YAAY,OAAO;CACnB,QAAQ,OAAO;CACf,OAAO,OAAO,SAAS,OAAO,MAAM;AACrC,CACD,CAAC,CAAC,CAAC;;;;AAKH,IAAa,oBAAb,cAAuC,OAAO,iBAAoC,CAAC,CAClF,qBACA;CACC,aAAa,OAAO;CACpB,YAAY,OAAO;CACnB,OAAO,OAAO,SAAS,OAAO,MAAM;AACrC,CACD,CAAC,CAAC,CAAC;;AAGH,IAAa,qBAAb,cAAwC,OAAO,iBAAqC,CAAC,CACpF,sBACA;CACC,YAAY,OAAO;CACnB,OAAO,OAAO,SAAS;EAAC;EAAgB;EAAS;EAAU;EAAS;CAAW,CAAC;CAChF,OAAO,OAAO,SAAS,OAAO,MAAM;AACrC,CACD,CAAC,CAAC,CAAC;;;;;AAMH,IAAa,wBAAb,cAA2C,OAAO,iBAAwC,CAAC,CAC1F,yBACA;CACC,SAAS,OAAO;CAChB,YAAY,OAAO;CACnB,QAAQ,OAAO,SAAS;EAAC;EAAkB;EAAa;EAAiB;CAAc,CAAC;CACxF,MAAM,OAAO,SAAS,OAAO,MAAM;CACnC,OAAO,OAAO,SAAS,OAAO,MAAM;AACrC,CACD,CAAC,CAAC,CAAC;AAKuC,OAAO,iBAAuC,CAAC,CACxF,wBACA,EACC,QAAQ,OAAO,OAChB,CACD"}

package/dist/orchestrators/codegen/format.mjs

@@ -1,4 +1,5 @@
 import { CodegenRenderError } from "./errors.mjs";
+import { isRawExpr } from "../../contracts/codegenable.mjs";
 //#region src/orchestrators/codegen/format.ts
 const GENERATED_HEADER = [
 	"// THIS FILE IS AUTO-GENERATED BY @mysten/devstack.",
@@ -65,6 +66,7 @@ const tryErr = (detail) => ({
 const tryRender = (value, seen, depth = 1) => {
 	if (value === null) return tryOk("null");
 	if (value === void 0) return tryErr("undefined is not serialisable — emit null instead");
+	if (isRawExpr(value)) return tryOk(value.expr);
 	const t = typeof value;
 	if (t === "string") return tryOk(JSON.stringify(value));
 	if (t === "number") {