@mysten-incubation/devstack 0.1.1 → 0.3.0

package/dist/substrate/runtime/lifecycle/selective-restart.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"selective-restart.mjs","names":[],"sources":["../../../../src/substrate/runtime/lifecycle/selective-restart.ts"],"sourcesContent":["// Selective-restart driver.\n//\n// Architecture § Watch-triggered invalidation:\n//   \"L0 watcher emits a debounced+deduped content-hash event. L3 watch\n//   dispatcher consults plugin watch decls. Matched plugins enter\n//   `selective-restart-pending`. Scheduler runs subset invalidate: evict\n//   shadow-cache entry BEFORE closing scope; run finalizers (parallel\n//   strategy); re-acquire.\"\n//\n// Architecture § Selective restart cascading:\n//   \"Invalidating a producer invalidates downstream consumers along\n//   dep-graph edges (cascade semantics — engine already has this).\"\n//\n// This module is the planner: given a set of root keys to invalidate,\n// compute the downstream slice, order it for teardown and re-acquire.\n// The actual `Scope.close` / `acquire` calls live in `supervisor.ts`\n// so it can fold them into the per-cycle event stream.\n\nimport { Data, Effect } from 'effect';\n\nimport type { PluginKey } from '../../brand.ts';\nimport { downstreamClosure, orderByLevel, type ResolvedGraph } from './dep-graph.ts';\n\n/** Tagged error: a restart was requested for a key that isn't in the\n *  graph. The supervisor lifts this from `attribute()` callers that\n *  somehow produced a stale key — defensive. */\nexport class RestartTargetMissing extends Data.TaggedError('RestartTargetMissing')<{\n\treadonly pluginKey: PluginKey;\n}> {}\n\n/** A planned slice of work for selective restart. The supervisor:\n *  1. Tears down `teardownOrder` (reverse-dep, parallel-within-level).\n *  2. Re-acquires `acquireOrder` (forward, level-batched-parallel).\n *\n *  The two arrays cover the same set of keys; the difference is the\n *  iteration direction. */\nexport interface RestartPlan {\n\treadonly slice: ReadonlySet<PluginKey>;\n\treadonly teardownOrder: ReadonlyArray<PluginKey>;\n\treadonly acquireOrder: ReadonlyArray<PluginKey>;\n}\n\n/**\n * Build a restart plan from a set of root invalidation targets. Each\n * root contributes its full downstream closure to the slice.\n */\nexport const planRestart = (\n\tgraph: ResolvedGraph,\n\troots: ReadonlySet<PluginKey>,\n): Effect.Effect<RestartPlan, RestartTargetMissing> =>\n\tEffect.gen(function* () {\n\t\tyield* Effect.annotateCurrentSpan({ 'devstack.restart.rootCount': roots.size });\n\t\tfor (const root of roots) {\n\t\t\tif (!graph.nodes.has(root)) {\n\t\t\t\treturn yield* Effect.fail(new RestartTargetMissing({ pluginKey: root }));\n\t\t\t}\n\t\t}\n\t\tconst slice = new Set<PluginKey>();\n\t\tfor (const root of roots) {\n\t\t\tfor (const key of downstreamClosure(graph, root)) slice.add(key);\n\t\t}\n\t\tconst teardownOrder = orderByLevel(graph, slice, 'reverse');\n\t\tconst acquireOrder = orderByLevel(graph, slice, 'forward');\n\t\treturn { slice, teardownOrder, acquireOrder } satisfies RestartPlan;\n\t}).pipe(Effect.withSpan('lifecycle.selective-restart.plan'));\n\n/**\n * Drain plan — for `stack.stop` and graceful shutdown. All keys in\n * dep-graph order, reverse. Architecture § Stack lifecycle:\n *   \"shutdown.requested → parallel teardown (max grace, not sum grace)\"\n *\n * The \"parallel within a level\" semantics live in the supervisor's\n * execution loop; this planner just produces the level batches in\n * reverse.\n */\nexport const planFullDrain = (graph: ResolvedGraph): RestartPlan => {\n\tconst slice = new Set<PluginKey>(graph.nodes.keys());\n\tconst teardownOrder = orderByLevel(graph, slice, 'reverse');\n\tconst acquireOrder = orderByLevel(graph, slice, 'forward');\n\treturn { slice, teardownOrder, acquireOrder };\n};\n"],"mappings":";;;;;;AA0BA,IAAa,uBAAb,cAA0C,KAAK,YAAY,uBAAuB,CAE/E;;;;;AAkBH,MAAa,eACZ,OACA,UAEA,OAAO,IAAI,aAAa;AACvB,QAAO,OAAO,oBAAoB,EAAE,8BAA8B,MAAM,MAAM,CAAC;AAC/E,MAAK,MAAM,QAAQ,MAClB,KAAI,CAAC,MAAM,MAAM,IAAI,KAAK,CACzB,QAAO,OAAO,OAAO,KAAK,IAAI,qBAAqB,EAAE,WAAW,MAAM,CAAC,CAAC;CAG1E,MAAM,wBAAQ,IAAI,KAAgB;AAClC,MAAK,MAAM,QAAQ,MAClB,MAAK,MAAM,OAAO,kBAAkB,OAAO,KAAK,CAAE,OAAM,IAAI,IAAI;AAIjE,QAAO;EAAE;EAAO,eAFM,aAAa,OAAO,OAAO,UAEpB;EAAE,cADV,aAAa,OAAO,OAAO,UACL;EAAE;EAC5C,CAAC,KAAK,OAAO,SAAS,mCAAmC,CAAC;;;;;;;;;;AAW7D,MAAa,iBAAiB,UAAsC;CACnE,MAAM,QAAQ,IAAI,IAAe,MAAM,MAAM,MAAM,CAAC;AAGpD,QAAO;EAAE;EAAO,eAFM,aAAa,OAAO,OAAO,UAEpB;EAAE,cADV,aAAa,OAAO,OAAO,UACL;EAAE"}
+{"version":3,"file":"selective-restart.mjs","names":[],"sources":["../../../../src/substrate/runtime/lifecycle/selective-restart.ts"],"sourcesContent":["// Selective-restart driver.\n//\n// Architecture § Watch-triggered invalidation:\n//   \"L0 watcher emits a debounced+deduped content-hash event. L3 watch\n//   dispatcher consults plugin watch decls. Matched plugins enter\n//   `selective-restart-pending`. Scheduler runs subset invalidate: evict\n//   shadow-cache entry BEFORE closing scope; run finalizers (parallel\n//   strategy); re-acquire.\"\n//\n// Architecture § Selective restart cascading:\n//   \"Invalidating a producer invalidates downstream consumers along\n//   dep-graph edges (cascade semantics — engine already has this).\"\n//\n// This module is the planner: given a set of root keys to invalidate,\n// compute the downstream slice, order it for teardown and re-acquire.\n// The actual `Scope.close` / `acquire` calls live in `supervisor.ts`\n// so it can fold them into the per-cycle event stream.\n\nimport { Data, Effect } from 'effect';\n\nimport type { PluginKey } from '../../brand.ts';\nimport { plan, type GraphPlan } from '../reconcile/graph.ts';\nimport { downstreamClosure, type DepNode, type ResolvedGraph } from './dep-graph.ts';\n\n/** Tagged error: a restart was requested for a key that isn't in the\n *  graph. The supervisor lifts this from `attribute()` callers that\n *  somehow produced a stale key — defensive. */\nexport class RestartTargetMissing extends Data.TaggedError('RestartTargetMissing')<{\n\treadonly pluginKey: PluginKey;\n}> {}\n\n/**\n * Build a restart plan from a set of root invalidation targets. Each\n * root contributes its full downstream closure to the slice. The\n * downstream-closure slice computation + the root-membership validation\n * are this planner's unique work; the dep-ordering itself delegates to\n * the shared reconcile `plan` body, which returns a `GraphPlan`.\n */\nexport const planRestart = (\n\tgraph: ResolvedGraph,\n\troots: ReadonlySet<PluginKey>,\n): Effect.Effect<GraphPlan, RestartTargetMissing> =>\n\tEffect.gen(function* () {\n\t\tfor (const root of roots) {\n\t\t\tif (!graph.nodes.has(root)) {\n\t\t\t\treturn yield* Effect.fail(new RestartTargetMissing({ pluginKey: root }));\n\t\t\t}\n\t\t}\n\t\tconst slice = new Set<PluginKey>();\n\t\tfor (const root of roots) {\n\t\t\tfor (const key of downstreamClosure(graph, root)) slice.add(key);\n\t\t}\n\t\treturn plan(graph, { kind: 'graph-keys', keys: [...slice] });\n\t});\n\n/** Plan a drain + re-acquire of the whole graph MINUS the nodes matched by\n *  `exclude`. The excluded nodes stay live while every other plugin is\n *  drained + re-acquired.\n *\n *  The live `snapshot.restore` re-acquire passes a predicate over the\n *  plugin-declared keep-alive flag so a plugin whose transport is\n *  answering the restore isn't torn down mid-flight (which would surface\n *  to its caller as a 502 even though the restore succeeded). This module\n *  filters purely on the node flag — it has no knowledge of which plugins\n *  set it. `stack.restart` / CLI full-restart drains everything by passing\n *  the full key set straight to `plan`. */\nexport const planExcluding = (\n\tgraph: ResolvedGraph,\n\texclude: (node: DepNode) => boolean,\n): GraphPlan => {\n\tconst slice = new Set<PluginKey>();\n\tfor (const [key, node] of graph.nodes) {\n\t\tif (!exclude(node)) slice.add(key);\n\t}\n\treturn plan(graph, { kind: 'graph-keys', keys: [...slice] });\n};\n"],"mappings":";;;;;;;AA2BA,IAAa,uBAAb,cAA0C,KAAK,YAAY,sBAAsB,CAAC,CAE/E,CAAC;;;;;;;;AASJ,MAAa,eACZ,OACA,UAEA,OAAO,IAAI,aAAa;CACvB,KAAK,MAAM,QAAQ,OAClB,IAAI,CAAC,MAAM,MAAM,IAAI,IAAI,GACxB,OAAO,OAAO,OAAO,KAAK,IAAI,qBAAqB,EAAE,WAAW,KAAK,CAAC,CAAC;CAGzE,MAAM,wBAAQ,IAAI,IAAe;CACjC,KAAK,MAAM,QAAQ,OAClB,KAAK,MAAM,OAAO,kBAAkB,OAAO,IAAI,GAAG,MAAM,IAAI,GAAG;CAEhE,OAAO,KAAK,OAAO;EAAE,MAAM;EAAc,MAAM,CAAC,GAAG,KAAK;CAAE,CAAC;AAC5D,CAAC;;;;;;;;;;;;AAaF,MAAa,iBACZ,OACA,YACe;CACf,MAAM,wBAAQ,IAAI,IAAe;CACjC,KAAK,MAAM,CAAC,KAAK,SAAS,MAAM,OAC/B,IAAI,CAAC,QAAQ,IAAI,GAAG,MAAM,IAAI,GAAG;CAElC,OAAO,KAAK,OAAO;EAAE,MAAM;EAAc,MAAM,CAAC,GAAG,KAAK;CAAE,CAAC;AAC5D"}

package/dist/substrate/runtime/lifecycle/signals.mjs

@@ -57,7 +57,7 @@ const installSignalHandler = (commands, options = {}) => Effect.gen(function* ()
 		for (const { signal, listener } of handlers) process.removeListener(signal, listener);
 	}));
 	return yield* Effect.never;
-}).pipe(Effect.withSpan("lifecycle.signals.installSignalHandler"));
+});
 //#endregion
 export { installSignalHandler };
 

package/dist/substrate/runtime/lifecycle/signals.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"signals.mjs","names":[],"sources":["../../../../src/substrate/runtime/lifecycle/signals.ts"],"sourcesContent":["// POSIX signal handling.\n//\n// Architecture § Engine / supervisor split:\n//   \"signals → L0 (one POSIX signal handler at process boot), routed\n//   via the command channel.\"\n//\n// Discipline:\n//   - ONE handler per process. Registering twice is a programmer\n//     error.\n//   - Signals translate to `EngineCommand`s on the typed command stream\n//     (`shutdown.requested` for graceful, `shutdown.hardKillRequested`\n//     for hard).\n//   - Second SIGINT/SIGTERM escalates to abort: the hard-kill command\n//     is offered first, then `process.exit(130)` (or 143 for SIGTERM)\n//     is scheduled.\n//\n// The supervisor wires this fiber once at boot via `Effect.forkScoped`;\n// its scope is the supervisor's outer scope, so the handler unregisters\n// when the supervisor tears down (test environments that boot multiple\n// supervisors must close them before booting the next).\n\nimport { Effect, Queue, Scope } from 'effect';\n\nimport type { EngineCommand, ShutdownSignal } from '../../events.ts';\n\n/** Signals the supervisor handles. SIGHUP intentionally omitted —\n *  reconfigure is a command-channel concern, not a signal one. */\nconst HANDLED_SIGNALS = ['SIGINT', 'SIGTERM'] as const satisfies ReadonlyArray<ShutdownSignal>;\ntype HandledSignal = (typeof HANDLED_SIGNALS)[number];\n\n/** Map a signal to the exit code POSIX clients expect — 128 + N. */\nconst exitCodeForSignal = (signal: HandledSignal): number => {\n\tswitch (signal) {\n\t\tcase 'SIGINT':\n\t\t\treturn 130;\n\t\tcase 'SIGTERM':\n\t\t\treturn 143;\n\t}\n};\n\nexport interface SignalHandlerOptions {\n\treadonly scheduleExit?: (exitCode: number) => void;\n}\n\nconst scheduleProcessExit = (exitCode: number): void => {\n\tsetImmediate(() => {\n\t\tprocess.exit(exitCode);\n\t});\n};\n\n/**\n * Install signal handlers that publish `shutdown.requested` (first\n * signal) and `shutdown.hardKillRequested` before scheduling process\n * exit (second handled signal).\n *\n * Returns an Effect that runs forever in its Scope; the supervisor\n * forks it via `Effect.forkScoped`. Scope close unregisters the\n * listeners — Node's `process` listeners persist past the scope\n * otherwise, leading to \"ghost\" handlers from prior test boots.\n */\nexport const installSignalHandler = (\n\tcommands: Queue.Enqueue<EngineCommand>,\n\toptions: SignalHandlerOptions = {},\n): Effect.Effect<never, never, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tconst scheduleExit = options.scheduleExit ?? scheduleProcessExit;\n\t\t// Capture the surrounding fiber's Context so the signal-listener\n\t\t// fork inherits the supervisor's logger Layer, fiber-refs, and\n\t\t// span context. Bare `Effect.runFork` evaluates against an empty\n\t\t// context — warnings/spans from the offered command would\n\t\t// otherwise bypass redaction rules and supervisor instrumentation.\n\t\tconst supervisorContext = yield* Effect.context<never>();\n\t\tconst runForkInherited = Effect.runForkWith(supervisorContext);\n\t\tlet shutdownRequested = false;\n\n\t\tconst handlers: Array<{\n\t\t\treadonly signal: HandledSignal;\n\t\t\treadonly listener: NodeJS.SignalsListener;\n\t\t}> = [];\n\n\t\tfor (const signal of HANDLED_SIGNALS) {\n\t\t\tconst listener: NodeJS.SignalsListener = () => {\n\t\t\t\tconst exitCode = exitCodeForSignal(signal);\n\t\t\t\tif (shutdownRequested) {\n\t\t\t\t\tconst offerEffect = Queue.offer(commands, {\n\t\t\t\t\t\ttag: 'shutdown.hardKillRequested',\n\t\t\t\t\t\tsignal,\n\t\t\t\t\t\texitCode,\n\t\t\t\t\t\tat: Date.now(),\n\t\t\t\t\t} satisfies EngineCommand).pipe(\n\t\t\t\t\t\tEffect.andThen(Effect.sync(() => scheduleExit(exitCode))),\n\t\t\t\t\t);\n\t\t\t\t\trunForkInherited(offerEffect);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tshutdownRequested = true;\n\t\t\t\tprocess.exitCode ??= exitCode;\n\t\t\t\t// Publish `shutdown.requested` — same shape regardless of\n\t\t\t\t// which signal fired. The supervisor decides drain vs abort\n\t\t\t\t// on its own loop.\n\t\t\t\tconst offerEffect = Queue.offer(commands, {\n\t\t\t\t\ttag: 'shutdown.requested',\n\t\t\t\t} satisfies EngineCommand);\n\t\t\t\t// We're inside a Node listener; bridge into Effect via the\n\t\t\t\t// captured supervisor Context so the offered command\n\t\t\t\t// inherits logger/fiber-refs/spans. `runFork` returns a\n\t\t\t\t// fiber but we don't track it — the queue is bounded by\n\t\t\t\t// the supervisor's lifetime.\n\t\t\t\trunForkInherited(offerEffect);\n\t\t\t};\n\t\t\tprocess.on(signal, listener);\n\t\t\thandlers.push({ signal, listener });\n\t\t}\n\n\t\tyield* Effect.addFinalizer(() =>\n\t\t\tEffect.sync(() => {\n\t\t\t\tfor (const { signal, listener } of handlers) {\n\t\t\t\t\tprocess.removeListener(signal, listener);\n\t\t\t\t}\n\t\t\t}),\n\t\t);\n\n\t\t// Park forever; the listeners themselves run synchronously in\n\t\t// Node's event loop, not in this fiber.\n\t\treturn yield* Effect.never;\n\t}).pipe(Effect.withSpan('lifecycle.signals.installSignalHandler'));\n\n/** Re-export the handled-signal list so tests / docs can enumerate. */\nexport const handledSignals: ReadonlyArray<HandledSignal> = HANDLED_SIGNALS;\n"],"mappings":";;;;AA2BA,MAAM,kBAAkB,CAAC,UAAU,UAAU;;AAI7C,MAAM,qBAAqB,WAAkC;AAC5D,SAAQ,QAAR;EACC,KAAK,SACJ,QAAO;EACR,KAAK,UACJ,QAAO;;;AAQV,MAAM,uBAAuB,aAA2B;AACvD,oBAAmB;AAClB,UAAQ,KAAK,SAAS;GACrB;;;;;;;;;;;;AAaH,MAAa,wBACZ,UACA,UAAgC,EAAE,KAElC,OAAO,IAAI,aAAa;CACvB,MAAM,eAAe,QAAQ,gBAAgB;CAM7C,MAAM,oBAAoB,OAAO,OAAO,SAAgB;CACxD,MAAM,mBAAmB,OAAO,YAAY,kBAAkB;CAC9D,IAAI,oBAAoB;CAExB,MAAM,WAGD,EAAE;AAEP,MAAK,MAAM,UAAU,iBAAiB;EACrC,MAAM,iBAAyC;GAC9C,MAAM,WAAW,kBAAkB,OAAO;AAC1C,OAAI,mBAAmB;AAStB,qBARoB,MAAM,MAAM,UAAU;KACzC,KAAK;KACL;KACA;KACA,IAAI,KAAK,KAAK;KACd,CAAyB,CAAC,KAC1B,OAAO,QAAQ,OAAO,WAAW,aAAa,SAAS,CAAC,CAAC,CAE9B,CAAC;AAC7B;;AAED,uBAAoB;AACpB,WAAQ,aAAa;AAYrB,oBARoB,MAAM,MAAM,UAAU,EACzC,KAAK,sBACL,CAM2B,CAAC;;AAE9B,UAAQ,GAAG,QAAQ,SAAS;AAC5B,WAAS,KAAK;GAAE;GAAQ;GAAU,CAAC;;AAGpC,QAAO,OAAO,mBACb,OAAO,WAAW;AACjB,OAAK,MAAM,EAAE,QAAQ,cAAc,SAClC,SAAQ,eAAe,QAAQ,SAAS;GAExC,CACF;AAID,QAAO,OAAO,OAAO;EACpB,CAAC,KAAK,OAAO,SAAS,yCAAyC,CAAC"}
+{"version":3,"file":"signals.mjs","names":[],"sources":["../../../../src/substrate/runtime/lifecycle/signals.ts"],"sourcesContent":["// POSIX signal handling.\n//\n// Architecture § Engine / supervisor split:\n//   \"signals → L0 (one POSIX signal handler at process boot), routed\n//   via the command channel.\"\n//\n// Discipline:\n//   - ONE handler per process. Registering twice is a programmer\n//     error.\n//   - Signals translate to `EngineCommand`s on the typed command stream\n//     (`shutdown.requested` for graceful, `shutdown.hardKillRequested`\n//     for hard).\n//   - Second SIGINT/SIGTERM escalates to abort: the hard-kill command\n//     is offered first, then `process.exit(130)` (or 143 for SIGTERM)\n//     is scheduled.\n//\n// The supervisor wires this fiber once at boot via `Effect.forkScoped`;\n// its scope is the supervisor's outer scope, so the handler unregisters\n// when the supervisor tears down (test environments that boot multiple\n// supervisors must close them before booting the next).\n\nimport { Effect, Queue, Scope } from 'effect';\n\nimport type { EngineCommand, ShutdownSignal } from '../../events.ts';\n\n/** Signals the supervisor handles. SIGHUP intentionally omitted —\n *  reconfigure is a command-channel concern, not a signal one. */\nconst HANDLED_SIGNALS = ['SIGINT', 'SIGTERM'] as const satisfies ReadonlyArray<ShutdownSignal>;\ntype HandledSignal = (typeof HANDLED_SIGNALS)[number];\n\n/** Map a signal to the exit code POSIX clients expect — 128 + N. */\nconst exitCodeForSignal = (signal: HandledSignal): number => {\n\tswitch (signal) {\n\t\tcase 'SIGINT':\n\t\t\treturn 130;\n\t\tcase 'SIGTERM':\n\t\t\treturn 143;\n\t}\n};\n\nexport interface SignalHandlerOptions {\n\treadonly scheduleExit?: (exitCode: number) => void;\n}\n\nconst scheduleProcessExit = (exitCode: number): void => {\n\tsetImmediate(() => {\n\t\tprocess.exit(exitCode);\n\t});\n};\n\n/**\n * Install signal handlers that publish `shutdown.requested` (first\n * signal) and `shutdown.hardKillRequested` before scheduling process\n * exit (second handled signal).\n *\n * Returns an Effect that runs forever in its Scope; the supervisor\n * forks it via `Effect.forkScoped`. Scope close unregisters the\n * listeners — Node's `process` listeners persist past the scope\n * otherwise, leading to \"ghost\" handlers from prior test boots.\n */\nexport const installSignalHandler = (\n\tcommands: Queue.Enqueue<EngineCommand>,\n\toptions: SignalHandlerOptions = {},\n): Effect.Effect<never, never, Scope.Scope> =>\n\tEffect.gen(function* () {\n\t\tconst scheduleExit = options.scheduleExit ?? scheduleProcessExit;\n\t\t// Capture the surrounding fiber's Context so the signal-listener\n\t\t// fork inherits the supervisor's logger Layer, fiber-refs, and\n\t\t// span context. Bare `Effect.runFork` evaluates against an empty\n\t\t// context — warnings/spans from the offered command would\n\t\t// otherwise bypass redaction rules and supervisor instrumentation.\n\t\tconst supervisorContext = yield* Effect.context<never>();\n\t\tconst runForkInherited = Effect.runForkWith(supervisorContext);\n\t\tlet shutdownRequested = false;\n\n\t\tconst handlers: Array<{\n\t\t\treadonly signal: HandledSignal;\n\t\t\treadonly listener: NodeJS.SignalsListener;\n\t\t}> = [];\n\n\t\tfor (const signal of HANDLED_SIGNALS) {\n\t\t\tconst listener: NodeJS.SignalsListener = () => {\n\t\t\t\tconst exitCode = exitCodeForSignal(signal);\n\t\t\t\tif (shutdownRequested) {\n\t\t\t\t\tconst offerEffect = Queue.offer(commands, {\n\t\t\t\t\t\ttag: 'shutdown.hardKillRequested',\n\t\t\t\t\t\tsignal,\n\t\t\t\t\t\texitCode,\n\t\t\t\t\t\tat: Date.now(),\n\t\t\t\t\t} satisfies EngineCommand).pipe(\n\t\t\t\t\t\tEffect.andThen(Effect.sync(() => scheduleExit(exitCode))),\n\t\t\t\t\t);\n\t\t\t\t\trunForkInherited(offerEffect);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tshutdownRequested = true;\n\t\t\t\tprocess.exitCode ??= exitCode;\n\t\t\t\t// Publish `shutdown.requested` — same shape regardless of\n\t\t\t\t// which signal fired. The supervisor decides drain vs abort\n\t\t\t\t// on its own loop.\n\t\t\t\tconst offerEffect = Queue.offer(commands, {\n\t\t\t\t\ttag: 'shutdown.requested',\n\t\t\t\t} satisfies EngineCommand);\n\t\t\t\t// We're inside a Node listener; bridge into Effect via the\n\t\t\t\t// captured supervisor Context so the offered command\n\t\t\t\t// inherits logger/fiber-refs/spans. `runFork` returns a\n\t\t\t\t// fiber but we don't track it — the queue is bounded by\n\t\t\t\t// the supervisor's lifetime.\n\t\t\t\trunForkInherited(offerEffect);\n\t\t\t};\n\t\t\tprocess.on(signal, listener);\n\t\t\thandlers.push({ signal, listener });\n\t\t}\n\n\t\tyield* Effect.addFinalizer(() =>\n\t\t\tEffect.sync(() => {\n\t\t\t\tfor (const { signal, listener } of handlers) {\n\t\t\t\t\tprocess.removeListener(signal, listener);\n\t\t\t\t}\n\t\t\t}),\n\t\t);\n\n\t\t// Park forever; the listeners themselves run synchronously in\n\t\t// Node's event loop, not in this fiber.\n\t\treturn yield* Effect.never;\n\t});\n\n/** Re-export the handled-signal list so tests / docs can enumerate. */\nexport const handledSignals: ReadonlyArray<HandledSignal> = HANDLED_SIGNALS;\n"],"mappings":";;;;AA2BA,MAAM,kBAAkB,CAAC,UAAU,SAAS;;AAI5C,MAAM,qBAAqB,WAAkC;CAC5D,QAAQ,QAAR;EACC,KAAK,UACJ,OAAO;EACR,KAAK,WACJ,OAAO;CACT;AACD;AAMA,MAAM,uBAAuB,aAA2B;CACvD,mBAAmB;EAClB,QAAQ,KAAK,QAAQ;CACtB,CAAC;AACF;;;;;;;;;;;AAYA,MAAa,wBACZ,UACA,UAAgC,CAAC,MAEjC,OAAO,IAAI,aAAa;CACvB,MAAM,eAAe,QAAQ,gBAAgB;CAM7C,MAAM,oBAAoB,OAAO,OAAO,QAAe;CACvD,MAAM,mBAAmB,OAAO,YAAY,iBAAiB;CAC7D,IAAI,oBAAoB;CAExB,MAAM,WAGD,CAAC;CAEN,KAAK,MAAM,UAAU,iBAAiB;EACrC,MAAM,iBAAyC;GAC9C,MAAM,WAAW,kBAAkB,MAAM;GACzC,IAAI,mBAAmB;IAStB,iBARoB,MAAM,MAAM,UAAU;KACzC,KAAK;KACL;KACA;KACA,IAAI,KAAK,IAAI;IACd,CAAyB,CAAC,CAAC,KAC1B,OAAO,QAAQ,OAAO,WAAW,aAAa,QAAQ,CAAC,CAAC,CAE9B,CAAC;IAC5B;GACD;GACA,oBAAoB;GACpB,QAAQ,aAAa;GAYrB,iBARoB,MAAM,MAAM,UAAU,EACzC,KAAK,qBACN,CAM2B,CAAC;EAC7B;EACA,QAAQ,GAAG,QAAQ,QAAQ;EAC3B,SAAS,KAAK;GAAE;GAAQ;EAAS,CAAC;CACnC;CAEA,OAAO,OAAO,mBACb,OAAO,WAAW;EACjB,KAAK,MAAM,EAAE,QAAQ,cAAc,UAClC,QAAQ,eAAe,QAAQ,QAAQ;CAEzC,CAAC,CACF;CAIA,OAAO,OAAO,OAAO;AACtB,CAAC"}

package/dist/substrate/runtime/lifecycle/state-machine.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"state-machine.mjs","names":[],"sources":["../../../../src/substrate/runtime/lifecycle/state-machine.ts"],"sourcesContent":["// Lifecycle state-machine — runtime guard over `LifecycleTransition`.\n//\n// Architecture § Lifecycle state. The transition table is declared in\n// `substrate/lifecycle.ts`; this file asserts moves against it at runtime\n// so an off-table transition lands as a typed Defect (programmer-error\n// class), not a corrupt projection.\n//\n// The state machine is per-plugin. Callers (the supervisor) hold a\n// `Ref` of `LifecycleStatus` and route every change through\n// `transition`, which:\n//   - validates the move,\n//   - emits the `lifecycle.statusChanged` typed event,\n//   - returns the new status.\n\nimport { Data, Effect } from 'effect';\n\nimport type { LifecycleStatus, LifecycleTransition } from '../../lifecycle.ts';\n\n/** Off-table transition — programmer error. Surfaced as a defect via\n *  `Effect.die` so the renderer / cause walker sees the impossible\n *  transition rather than silently corrupting the projection. */\nexport class InvalidLifecycleTransition extends Data.TaggedError('InvalidLifecycleTransition')<{\n\treadonly from: LifecycleStatus;\n\treadonly to: LifecycleStatus;\n}> {}\n\n/** Canonical transition table — mirrors the type-level\n *  `LifecycleTransition` from `substrate/lifecycle.ts` exactly. Adding\n *  a transition requires updating BOTH (the type-level union AND this\n *  table). */\nconst ALLOWED: ReadonlyMap<LifecycleStatus, ReadonlySet<LifecycleStatus>> = new Map([\n\t['pending', new Set<LifecycleStatus>(['acquiring', 'failed'])],\n\t['acquiring', new Set<LifecycleStatus>(['ready', 'failed'])],\n\t['ready', new Set<LifecycleStatus>(['stopping', 'failed', 'done'])],\n\t['stopping', new Set<LifecycleStatus>(['stopped', 'failed'])],\n\t['failed', new Set<LifecycleStatus>(['pending'])],\n\t['stopped', new Set<LifecycleStatus>(['pending'])],\n\t['done', new Set<LifecycleStatus>(['pending', 'failed'])],\n] as const);\n\n/** Predicate that the type-table and the runtime table agree. The\n *  compiler checks the type-level shape; this conditional verifies the\n *  runtime table covers exactly the same `from` set. */\ntype _AllFroms = LifecycleTransition['from'];\ntype _RuntimeFroms = 'pending' | 'acquiring' | 'ready' | 'stopping' | 'failed' | 'stopped' | 'done';\ntype _TableShape = _AllFroms extends _RuntimeFroms\n\t? _RuntimeFroms extends _AllFroms | 'done'\n\t\t? true\n\t\t: false\n\t: false;\n// Force the check by exporting the assertion.\nexport type __LifecycleTableShape = _TableShape extends true ? true : never;\n\n/** Returns true iff `from → to` is on the allowed-transition table. */\nexport const isAllowedTransition = (from: LifecycleStatus, to: LifecycleStatus): boolean =>\n\tALLOWED.get(from)?.has(to) ?? false;\n\n/** Effect-flavored transition assertion. Returns the new status on\n *  success; dies with `InvalidLifecycleTransition` otherwise. */\nexport const assertTransition = (\n\tfrom: LifecycleStatus,\n\tto: LifecycleStatus,\n): Effect.Effect<LifecycleStatus> =>\n\tisAllowedTransition(from, to)\n\t\t? Effect.succeed(to)\n\t\t: Effect.die(new InvalidLifecycleTransition({ from, to }));\n\n/** Completed task status. It counts as ready, restart can return it to pending,\n *  and post-acquire failures can still mark it failed. */\nexport const isTerminal = (status: LifecycleStatus): boolean => status === 'done';\n\n/** Statuses that count toward \"stack is ready\" — every plugin must be\n *  in one of these for the stack to surface `running`. */\nexport const isReadyOrTerminal = (status: LifecycleStatus): boolean =>\n\tstatus === 'ready' || status === 'done';\n"],"mappings":";;;;;AAqBA,IAAa,6BAAb,cAAgD,KAAK,YAAY,6BAA6B,CAG3F;;;;;AAMH,MAAM,UAAsE,IAAI,IAAI;CACnF,CAAC,WAAW,IAAI,IAAqB,CAAC,aAAa,SAAS,CAAC,CAAC;CAC9D,CAAC,aAAa,IAAI,IAAqB,CAAC,SAAS,SAAS,CAAC,CAAC;CAC5D,CAAC,SAAS,IAAI,IAAqB;EAAC;EAAY;EAAU;EAAO,CAAC,CAAC;CACnE,CAAC,YAAY,IAAI,IAAqB,CAAC,WAAW,SAAS,CAAC,CAAC;CAC7D,CAAC,UAAU,IAAI,IAAqB,CAAC,UAAU,CAAC,CAAC;CACjD,CAAC,WAAW,IAAI,IAAqB,CAAC,UAAU,CAAC,CAAC;CAClD,CAAC,QAAQ,IAAI,IAAqB,CAAC,WAAW,SAAS,CAAC,CAAC;CACzD,CAAU;;AAgBX,MAAa,uBAAuB,MAAuB,OAC1D,QAAQ,IAAI,KAAK,EAAE,IAAI,GAAG,IAAI;;;AAI/B,MAAa,oBACZ,MACA,OAEA,oBAAoB,MAAM,GAAG,GAC1B,OAAO,QAAQ,GAAG,GAClB,OAAO,IAAI,IAAI,2BAA2B;CAAE;CAAM;CAAI,CAAC,CAAC;;;AAQ5D,MAAa,qBAAqB,WACjC,WAAW,WAAW,WAAW"}
+{"version":3,"file":"state-machine.mjs","names":[],"sources":["../../../../src/substrate/runtime/lifecycle/state-machine.ts"],"sourcesContent":["// Lifecycle state-machine — runtime guard over `LifecycleTransition`.\n//\n// Architecture § Lifecycle state. The transition table is declared in\n// `substrate/lifecycle.ts`; this file asserts moves against it at runtime\n// so an off-table transition lands as a typed Defect (programmer-error\n// class), not a corrupt projection.\n//\n// The state machine is per-plugin. Callers (the supervisor) hold a\n// `Ref` of `LifecycleStatus` and route every change through\n// `transition`, which:\n//   - validates the move,\n//   - emits the `lifecycle.statusChanged` typed event,\n//   - returns the new status.\n\nimport { Data, Effect } from 'effect';\n\nimport type { LifecycleStatus, LifecycleTransition } from '../../lifecycle.ts';\n\n/** Off-table transition — programmer error. Surfaced as a defect via\n *  `Effect.die` so the renderer / cause walker sees the impossible\n *  transition rather than silently corrupting the projection. */\nexport class InvalidLifecycleTransition extends Data.TaggedError('InvalidLifecycleTransition')<{\n\treadonly from: LifecycleStatus;\n\treadonly to: LifecycleStatus;\n}> {}\n\n/** Canonical transition table — mirrors the type-level\n *  `LifecycleTransition` from `substrate/lifecycle.ts` exactly. Adding\n *  a transition requires updating BOTH (the type-level union AND this\n *  table). */\nconst ALLOWED: ReadonlyMap<LifecycleStatus, ReadonlySet<LifecycleStatus>> = new Map([\n\t['pending', new Set<LifecycleStatus>(['acquiring', 'failed'])],\n\t['acquiring', new Set<LifecycleStatus>(['ready', 'failed'])],\n\t['ready', new Set<LifecycleStatus>(['stopping', 'failed', 'done'])],\n\t['stopping', new Set<LifecycleStatus>(['stopped', 'failed'])],\n\t['failed', new Set<LifecycleStatus>(['pending'])],\n\t['stopped', new Set<LifecycleStatus>(['pending'])],\n\t['done', new Set<LifecycleStatus>(['pending', 'failed'])],\n] as const);\n\n/** Predicate that the type-table and the runtime table agree. The\n *  compiler checks the type-level shape; this conditional verifies the\n *  runtime table covers exactly the same `from` set. */\ntype _AllFroms = LifecycleTransition['from'];\ntype _RuntimeFroms = 'pending' | 'acquiring' | 'ready' | 'stopping' | 'failed' | 'stopped' | 'done';\ntype _TableShape = _AllFroms extends _RuntimeFroms\n\t? _RuntimeFroms extends _AllFroms | 'done'\n\t\t? true\n\t\t: false\n\t: false;\n// Force the check by exporting the assertion.\nexport type __LifecycleTableShape = _TableShape extends true ? true : never;\n\n/** Returns true iff `from → to` is on the allowed-transition table. */\nexport const isAllowedTransition = (from: LifecycleStatus, to: LifecycleStatus): boolean =>\n\tALLOWED.get(from)?.has(to) ?? false;\n\n/** Effect-flavored transition assertion. Returns the new status on\n *  success; dies with `InvalidLifecycleTransition` otherwise. */\nexport const assertTransition = (\n\tfrom: LifecycleStatus,\n\tto: LifecycleStatus,\n): Effect.Effect<LifecycleStatus> =>\n\tisAllowedTransition(from, to)\n\t\t? Effect.succeed(to)\n\t\t: Effect.die(new InvalidLifecycleTransition({ from, to }));\n\n/** Statuses that count toward \"stack is ready\" — every plugin must be\n *  in one of these for the stack to surface `running`. */\nexport const isReadyOrTerminal = (status: LifecycleStatus): boolean =>\n\tstatus === 'ready' || status === 'done';\n"],"mappings":";;;;;AAqBA,IAAa,6BAAb,cAAgD,KAAK,YAAY,4BAA4B,CAAC,CAG3F,CAAC;;;;;AAMJ,MAAM,UAAsE,IAAI,IAAI;CACnF,CAAC,WAAW,IAAI,IAAqB,CAAC,aAAa,QAAQ,CAAC,CAAC;CAC7D,CAAC,aAAa,IAAI,IAAqB,CAAC,SAAS,QAAQ,CAAC,CAAC;CAC3D,CAAC,SAAS,IAAI,IAAqB;EAAC;EAAY;EAAU;CAAM,CAAC,CAAC;CAClE,CAAC,YAAY,IAAI,IAAqB,CAAC,WAAW,QAAQ,CAAC,CAAC;CAC5D,CAAC,UAAU,IAAI,IAAqB,CAAC,SAAS,CAAC,CAAC;CAChD,CAAC,WAAW,IAAI,IAAqB,CAAC,SAAS,CAAC,CAAC;CACjD,CAAC,QAAQ,IAAI,IAAqB,CAAC,WAAW,QAAQ,CAAC,CAAC;AACzD,CAAU;;AAgBV,MAAa,uBAAuB,MAAuB,OAC1D,QAAQ,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK;;;AAI/B,MAAa,oBACZ,MACA,OAEA,oBAAoB,MAAM,EAAE,IACzB,OAAO,QAAQ,EAAE,IACjB,OAAO,IAAI,IAAI,2BAA2B;CAAE;CAAM;AAAG,CAAC,CAAC;;;AAI3D,MAAa,qBAAqB,WACjC,WAAW,WAAW,WAAW"}

package/dist/substrate/runtime/lifecycle/watch-attribution.d.mts

@@ -1 +1 @@
-import { Effect } from "effect";
+export { };

package/dist/substrate/runtime/lifecycle/watch-attribution.mjs

@@ -1,4 +1,3 @@
-import "effect";
 //#region src/substrate/runtime/lifecycle/watch-attribution.ts
 /** Build the watch index from a resolved dep-graph's nodes. */
 const buildWatchIndex = (nodes) => {
@@ -15,13 +14,83 @@ const buildWatchIndex = (nodes) => {
 	return out;
 };
 /**
-* Default fallback matcher — exact-prefix only. Provided so unit
-* tests / single-stack boots without a real minimatch dependency
-* still function. The L0 thick watcher's minimatch is the production
-* matcher.
+* Given the firing `firedPath` (already debounced + content-hash dedup'd
+* by L0), return the plugin keys whose declared paths match.
+*
+* Matching is glob-aware via minimatch semantics — the substrate-level
+* attribution here delegates to a supplied `match` predicate to keep
+* this module dependency-free. The supervisor wires the matcher in.
 */
-const exactPrefixMatch = (pattern, path) => path === pattern || path.startsWith(pattern.replace(/\*+$/, ""));
+const attribute = (index, firedPath, match) => {
+	const out = /* @__PURE__ */ new Set();
+	for (const entry of index) for (const pattern of entry.paths) if (match(pattern, firedPath)) {
+		out.add(entry.pluginKey);
+		break;
+	}
+	return out;
+};
+const REGEXP_SPECIALS = new Set(".+^${}()|[]\\".split(""));
+/**
+* Compile a watch glob to an anchored `RegExp`. Supports the only glob
+* features the package plugin emits (architecture § WatchDecl):
+*   - `**\/` — zero or more path segments (so `root/**\/*.move` matches both
+*     `root/x.move` and `root/sources/x.move`)
+*   - `**`   — any characters including `/` (trailing-segment form)
+*   - `*`    — any characters except `/` (within one segment)
+*   - `?`    — one character except `/`
+* Everything else is matched literally. This is the dependency-free stand-in
+* for the architecture's "minimatch" matcher — devstack pulls in no glob
+* library (cf. the hand-rolled `collectHashedSources`).
+*/
+const globToRegExp = (glob) => {
+	let body = "";
+	for (let i = 0; i < glob.length; i += 1) {
+		const c = glob[i];
+		if (c === "*" && glob[i + 1] === "*") if (glob[i + 2] === "/") {
+			body += "(?:.*/)?";
+			i += 2;
+		} else {
+			body += ".*";
+			i += 1;
+		}
+		else if (c === "*") body += "[^/]*";
+		else if (c === "?") body += "[^/]";
+		else if (REGEXP_SPECIALS.has(c)) body += `\\${c}`;
+		else body += c;
+	}
+	return new RegExp(`^${body}$`);
+};
+/** Glob-aware matcher — the production matcher the supervisor wires into
+*  `attribute`. Honors `**`, `*`, `?`; everything else is literal. Both
+*  sides are normalized to POSIX separators first: the watcher feeds paths
+*  from `join(root, filename)`, which is `\`-separated on Windows, while
+*  glob patterns are always `/`-separated. */
+const toPosix = (p) => p.replace(/\\/g, "/");
+const globMatch = (pattern, path) => globToRegExp(toPosix(pattern)).test(toPosix(path));
+/** Literal directory prefix of a watch glob — the path up to (but not
+*  including) the first segment containing a glob metacharacter. Both
+*  `root/**\/*.move` and the exact `root/Move.toml` collapse to `root`,
+*  so the L0 watcher places ONE recursive watch per source tree. A
+*  pattern whose literal prefix has no directory separator — a bare
+*  basename (`Move.toml`), a leading glob (`*.move` ⇒ empty prefix), or a
+*  same-segment glob (`src*`) — collapses to `.` (the cwd), never to a
+*  bare filename: `fs.watch` must be handed a directory, and `globMatch`
+*  still filters the events. */
+const literalRoot = (pattern) => {
+	const metaIdx = pattern.search(/[*?]/);
+	const literal = metaIdx === -1 ? pattern : pattern.slice(0, metaIdx);
+	const slash = literal.lastIndexOf("/");
+	if (slash === 0) return "/";
+	return slash > 0 ? literal.slice(0, slash) : ".";
+};
+/** Distinct recursive-watch roots for a watch index — the directories the
+*  L0 file watcher hands to `fs.watch(root, { recursive: true })`. */
+const deriveWatchRoots = (index) => {
+	const roots = /* @__PURE__ */ new Set();
+	for (const entry of index) for (const pattern of entry.paths) roots.add(literalRoot(pattern));
+	return [...roots];
+};
 //#endregion
-export { buildWatchIndex, exactPrefixMatch };
+export { attribute, buildWatchIndex, deriveWatchRoots, globMatch };
 
 //# sourceMappingURL=watch-attribution.mjs.map

package/dist/substrate/runtime/lifecycle/watch-attribution.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"watch-attribution.mjs","names":[],"sources":["../../../../src/substrate/runtime/lifecycle/watch-attribution.ts"],"sourcesContent":["// Watch-path → owning plugin attribution.\n//\n// Architecture § L3 Watch dispatcher: \"collects all plugin `watch`\n// declarations, receives watcher events from L0 (which already\n// debounced + dedup'd), triggers selective restart through the\n// scheduler's invalidate-with-cascade.\"\n//\n// L0 owns the file watcher (debounce + content-hash dedup). The\n// supervisor's role at watch time is just: given a fired path, which\n// plugin row(s) should be invalidated? This module builds and queries\n// that index. Selective-restart is the supervisor's concern; watch\n// attribution stays pure.\n\nimport { Effect } from 'effect';\n\nimport type { PluginKey } from '../../brand.ts';\nimport type { DepNode } from './dep-graph.ts';\n\n/** Per-plugin watch entry — a copy of the plugin's declared `watch`\n *  decl with the owning key attached. */\nexport interface WatchEntry {\n\treadonly pluginKey: PluginKey;\n\treadonly paths: ReadonlyArray<string>;\n\t/** Whether downstream consumers should cascade-invalidate when this\n\t *  fires. Defaults to true (architecture § WatchDecl). */\n\treadonly cascade: boolean;\n}\n\n/** Build the watch index from a resolved dep-graph's nodes. */\nexport const buildWatchIndex = (\n\tnodes: ReadonlyMap<PluginKey, DepNode>,\n): ReadonlyArray<WatchEntry> => {\n\tconst out: WatchEntry[] = [];\n\tfor (const [key, node] of nodes) {\n\t\tconst watch = node.member.watch;\n\t\tif (watch === undefined || watch.paths.length === 0) continue;\n\t\tout.push({\n\t\t\tpluginKey: key,\n\t\t\tpaths: watch.paths,\n\t\t\tcascade: watch.cascade ?? true,\n\t\t});\n\t}\n\treturn out;\n};\n\n/**\n * Given the firing `firedPath` (already debounced + content-hash dedup'd\n * by L0), return the plugin keys whose declared paths match.\n *\n * Matching is glob-aware via minimatch semantics — the substrate-level\n * attribution here delegates to a supplied `match` predicate to keep\n * this module dependency-free. The supervisor wires the matcher in.\n */\nexport const attribute = (\n\tindex: ReadonlyArray<WatchEntry>,\n\tfiredPath: string,\n\tmatch: (pattern: string, path: string) => boolean,\n): ReadonlySet<PluginKey> => {\n\tconst out = new Set<PluginKey>();\n\tfor (const entry of index) {\n\t\tfor (const pattern of entry.paths) {\n\t\t\tif (match(pattern, firedPath)) {\n\t\t\t\tout.add(entry.pluginKey);\n\t\t\t\tbreak;\n\t\t\t}\n\t\t}\n\t}\n\treturn out;\n};\n\n/**\n * Effect-flavored wrapper — span-instrumented for tracing. Wraps the\n * pure `attribute` so the supervisor's invalidate-with-cascade trace\n * shows the watch fan-out alongside the dep-graph restart slice.\n */\nexport const attributeFire = (\n\tindex: ReadonlyArray<WatchEntry>,\n\tfiredPath: string,\n\tmatch: (pattern: string, path: string) => boolean,\n): Effect.Effect<ReadonlySet<PluginKey>> =>\n\tEffect.gen(function* () {\n\t\tconst keys = attribute(index, firedPath, match);\n\t\tyield* Effect.annotateCurrentSpan({\n\t\t\t'devstack.watch.firedPath': firedPath,\n\t\t\t'devstack.watch.matchedCount': keys.size,\n\t\t});\n\t\treturn keys;\n\t}).pipe(Effect.withSpan('lifecycle.watch.attribute'));\n\n/**\n * Default fallback matcher — exact-prefix only. Provided so unit\n * tests / single-stack boots without a real minimatch dependency\n * still function. The L0 thick watcher's minimatch is the production\n * matcher.\n */\nexport const exactPrefixMatch = (pattern: string, path: string): boolean =>\n\tpath === pattern || path.startsWith(pattern.replace(/\\*+$/, ''));\n"],"mappings":";;;AA6BA,MAAa,mBACZ,UAC+B;CAC/B,MAAM,MAAoB,EAAE;AAC5B,MAAK,MAAM,CAAC,KAAK,SAAS,OAAO;EAChC,MAAM,QAAQ,KAAK,OAAO;AAC1B,MAAI,UAAU,KAAA,KAAa,MAAM,MAAM,WAAW,EAAG;AACrD,MAAI,KAAK;GACR,WAAW;GACX,OAAO,MAAM;GACb,SAAS,MAAM,WAAW;GAC1B,CAAC;;AAEH,QAAO;;;;;;;;AAqDR,MAAa,oBAAoB,SAAiB,SACjD,SAAS,WAAW,KAAK,WAAW,QAAQ,QAAQ,QAAQ,GAAG,CAAC"}
+{"version":3,"file":"watch-attribution.mjs","names":[],"sources":["../../../../src/substrate/runtime/lifecycle/watch-attribution.ts"],"sourcesContent":["// Watch-path → owning plugin attribution.\n//\n// Architecture § L3 Watch dispatcher: \"collects all plugin `watch`\n// declarations, receives watcher events from L0 (which already\n// debounced + dedup'd), triggers selective restart through the\n// scheduler's invalidate-with-cascade.\"\n//\n// L0 owns the file watcher (debounce + content-hash dedup). The\n// supervisor's role at watch time is just: given a fired path, which\n// plugin row(s) should be invalidated? This module builds and queries\n// that index. Selective-restart is the supervisor's concern; watch\n// attribution stays pure.\n\nimport type { PluginKey } from '../../brand.ts';\nimport type { DepNode } from './dep-graph.ts';\n\n/** Per-plugin watch entry — a copy of the plugin's declared `watch`\n *  decl with the owning key attached. */\nexport interface WatchEntry {\n\treadonly pluginKey: PluginKey;\n\treadonly paths: ReadonlyArray<string>;\n\t/** Whether downstream consumers should cascade-invalidate when this\n\t *  fires. Defaults to true (architecture § WatchDecl). */\n\treadonly cascade: boolean;\n}\n\n/** Build the watch index from a resolved dep-graph's nodes. */\nexport const buildWatchIndex = (\n\tnodes: ReadonlyMap<PluginKey, DepNode>,\n): ReadonlyArray<WatchEntry> => {\n\tconst out: WatchEntry[] = [];\n\tfor (const [key, node] of nodes) {\n\t\tconst watch = node.member.watch;\n\t\tif (watch === undefined || watch.paths.length === 0) continue;\n\t\tout.push({\n\t\t\tpluginKey: key,\n\t\t\tpaths: watch.paths,\n\t\t\tcascade: watch.cascade ?? true,\n\t\t});\n\t}\n\treturn out;\n};\n\n/**\n * Given the firing `firedPath` (already debounced + content-hash dedup'd\n * by L0), return the plugin keys whose declared paths match.\n *\n * Matching is glob-aware via minimatch semantics — the substrate-level\n * attribution here delegates to a supplied `match` predicate to keep\n * this module dependency-free. The supervisor wires the matcher in.\n */\nexport const attribute = (\n\tindex: ReadonlyArray<WatchEntry>,\n\tfiredPath: string,\n\tmatch: (pattern: string, path: string) => boolean,\n): ReadonlySet<PluginKey> => {\n\tconst out = new Set<PluginKey>();\n\tfor (const entry of index) {\n\t\tfor (const pattern of entry.paths) {\n\t\t\tif (match(pattern, firedPath)) {\n\t\t\t\tout.add(entry.pluginKey);\n\t\t\t\tbreak;\n\t\t\t}\n\t\t}\n\t}\n\treturn out;\n};\n\nconst REGEXP_SPECIALS = new Set('.+^${}()|[]\\\\'.split(''));\n\n/**\n * Compile a watch glob to an anchored `RegExp`. Supports the only glob\n * features the package plugin emits (architecture § WatchDecl):\n *   - `**\\/` — zero or more path segments (so `root/**\\/*.move` matches both\n *     `root/x.move` and `root/sources/x.move`)\n *   - `**`   — any characters including `/` (trailing-segment form)\n *   - `*`    — any characters except `/` (within one segment)\n *   - `?`    — one character except `/`\n * Everything else is matched literally. This is the dependency-free stand-in\n * for the architecture's \"minimatch\" matcher — devstack pulls in no glob\n * library (cf. the hand-rolled `collectHashedSources`).\n */\nconst globToRegExp = (glob: string): RegExp => {\n\tlet body = '';\n\tfor (let i = 0; i < glob.length; i += 1) {\n\t\tconst c = glob[i]!;\n\t\tif (c === '*' && glob[i + 1] === '*') {\n\t\t\tif (glob[i + 2] === '/') {\n\t\t\t\tbody += '(?:.*/)?';\n\t\t\t\ti += 2;\n\t\t\t} else {\n\t\t\t\tbody += '.*';\n\t\t\t\ti += 1;\n\t\t\t}\n\t\t} else if (c === '*') {\n\t\t\tbody += '[^/]*';\n\t\t} else if (c === '?') {\n\t\t\tbody += '[^/]';\n\t\t} else if (REGEXP_SPECIALS.has(c)) {\n\t\t\tbody += `\\\\${c}`;\n\t\t} else {\n\t\t\tbody += c;\n\t\t}\n\t}\n\treturn new RegExp(`^${body}$`);\n};\n\n/** Glob-aware matcher — the production matcher the supervisor wires into\n *  `attribute`. Honors `**`, `*`, `?`; everything else is literal. Both\n *  sides are normalized to POSIX separators first: the watcher feeds paths\n *  from `join(root, filename)`, which is `\\`-separated on Windows, while\n *  glob patterns are always `/`-separated. */\nconst toPosix = (p: string): string => p.replace(/\\\\/g, '/');\n\nexport const globMatch = (pattern: string, path: string): boolean =>\n\tglobToRegExp(toPosix(pattern)).test(toPosix(path));\n\n/** Literal directory prefix of a watch glob — the path up to (but not\n *  including) the first segment containing a glob metacharacter. Both\n *  `root/**\\/*.move` and the exact `root/Move.toml` collapse to `root`,\n *  so the L0 watcher places ONE recursive watch per source tree. A\n *  pattern whose literal prefix has no directory separator — a bare\n *  basename (`Move.toml`), a leading glob (`*.move` ⇒ empty prefix), or a\n *  same-segment glob (`src*`) — collapses to `.` (the cwd), never to a\n *  bare filename: `fs.watch` must be handed a directory, and `globMatch`\n *  still filters the events. */\nconst literalRoot = (pattern: string): string => {\n\tconst metaIdx = pattern.search(/[*?]/);\n\tconst literal = metaIdx === -1 ? pattern : pattern.slice(0, metaIdx);\n\tconst slash = literal.lastIndexOf('/');\n\tif (slash === 0) return '/'; // pattern sits at filesystem root\n\treturn slash > 0 ? literal.slice(0, slash) : '.';\n};\n\n/** Distinct recursive-watch roots for a watch index — the directories the\n *  L0 file watcher hands to `fs.watch(root, { recursive: true })`. */\nexport const deriveWatchRoots = (index: ReadonlyArray<WatchEntry>): ReadonlyArray<string> => {\n\tconst roots = new Set<string>();\n\tfor (const entry of index) {\n\t\tfor (const pattern of entry.paths) {\n\t\t\troots.add(literalRoot(pattern));\n\t\t}\n\t}\n\treturn [...roots];\n};\n"],"mappings":";;AA2BA,MAAa,mBACZ,UAC+B;CAC/B,MAAM,MAAoB,CAAC;CAC3B,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO;EAChC,MAAM,QAAQ,KAAK,OAAO;EAC1B,IAAI,UAAU,KAAA,KAAa,MAAM,MAAM,WAAW,GAAG;EACrD,IAAI,KAAK;GACR,WAAW;GACX,OAAO,MAAM;GACb,SAAS,MAAM,WAAW;EAC3B,CAAC;CACF;CACA,OAAO;AACR;;;;;;;;;AAUA,MAAa,aACZ,OACA,WACA,UAC4B;CAC5B,MAAM,sBAAM,IAAI,IAAe;CAC/B,KAAK,MAAM,SAAS,OACnB,KAAK,MAAM,WAAW,MAAM,OAC3B,IAAI,MAAM,SAAS,SAAS,GAAG;EAC9B,IAAI,IAAI,MAAM,SAAS;EACvB;CACD;CAGF,OAAO;AACR;AAEA,MAAM,kBAAkB,IAAI,IAAI,gBAAgB,MAAM,EAAE,CAAC;;;;;;;;;;;;;AAczD,MAAM,gBAAgB,SAAyB;CAC9C,IAAI,OAAO;CACX,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,GAAG;EACxC,MAAM,IAAI,KAAK;EACf,IAAI,MAAM,OAAO,KAAK,IAAI,OAAO,KAChC,IAAI,KAAK,IAAI,OAAO,KAAK;GACxB,QAAQ;GACR,KAAK;EACN,OAAO;GACN,QAAQ;GACR,KAAK;EACN;OACM,IAAI,MAAM,KAChB,QAAQ;OACF,IAAI,MAAM,KAChB,QAAQ;OACF,IAAI,gBAAgB,IAAI,CAAC,GAC/B,QAAQ,KAAK;OAEb,QAAQ;CAEV;CACA,OAAO,IAAI,OAAO,IAAI,KAAK,EAAE;AAC9B;;;;;;AAOA,MAAM,WAAW,MAAsB,EAAE,QAAQ,OAAO,GAAG;AAE3D,MAAa,aAAa,SAAiB,SAC1C,aAAa,QAAQ,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC;;;;;;;;;;AAWlD,MAAM,eAAe,YAA4B;CAChD,MAAM,UAAU,QAAQ,OAAO,MAAM;CACrC,MAAM,UAAU,YAAY,KAAK,UAAU,QAAQ,MAAM,GAAG,OAAO;CACnE,MAAM,QAAQ,QAAQ,YAAY,GAAG;CACrC,IAAI,UAAU,GAAG,OAAO;CACxB,OAAO,QAAQ,IAAI,QAAQ,MAAM,GAAG,KAAK,IAAI;AAC9C;;;AAIA,MAAa,oBAAoB,UAA4D;CAC5F,MAAM,wBAAQ,IAAI,IAAY;CAC9B,KAAK,MAAM,SAAS,OACnB,KAAK,MAAM,WAAW,MAAM,OAC3B,MAAM,IAAI,YAAY,OAAO,CAAC;CAGhC,OAAO,CAAC,GAAG,KAAK;AACjB"}

package/dist/substrate/runtime/managed-container.d.mts

@@ -4,7 +4,7 @@ import { Effect, Scope } from "effect";
 
 //#region src/substrate/runtime/managed-container.d.ts
 declare namespace managed_container_d_exports {
-  export { EnsureManagedContainerOptions, ManagedContainerIdentity, ManagedContainerLabelOptions, PER_APP_SHARED_STACK, ensureManagedContainer, managedContainerLabels };
+  export { EnsureManagedContainerOptions, ManagedContainerIdentity, ManagedContainerLabelOptions, PER_APP_SHARED_STACK, ensureManagedContainer, managedContainerLabels, sanitizeAlias };
 }
 /** Sentinel `stack` value for containers / volumes / networks that are
  *  shared across a single app's stacks but isolated PER APP — the
@@ -24,6 +24,10 @@ declare namespace managed_container_d_exports {
  *  role }` label tuple — managed-container.ts is the canonical
  *  owner. */
 declare const PER_APP_SHARED_STACK: "_per-app_";
+/** Coerce a composed string to a Docker network / DNS-alias-safe form
+ *  (alphanumerics + hyphen). Identity strings are already network-safe;
+ *  this guards the literal composition (`devstack-${app}-${stack}-…`). */
+declare const sanitizeAlias: (s: string) => string;
 interface ManagedContainerIdentity {
   readonly app: string;
   readonly stack: string;

package/dist/substrate/runtime/managed-container.mjs

@@ -1,11 +1,11 @@
 import { __exportAll } from "../../_virtual/_rolldown/runtime.mjs";
-import { SpanAttr } from "./observability/spans.mjs";
 import { Effect } from "effect";
 //#region src/substrate/runtime/managed-container.ts
 var managed_container_exports = /* @__PURE__ */ __exportAll({
 	PER_APP_SHARED_STACK: () => PER_APP_SHARED_STACK,
 	ensureManagedContainer: () => ensureManagedContainer,
-	managedContainerLabels: () => managedContainerLabels
+	managedContainerLabels: () => managedContainerLabels,
+	sanitizeAlias: () => sanitizeAlias
 });
 /** Sentinel `stack` value for containers / volumes / networks that are
 *  shared across a single app's stacks but isolated PER APP — the
@@ -25,6 +25,10 @@ var managed_container_exports = /* @__PURE__ */ __exportAll({
 *  role }` label tuple — managed-container.ts is the canonical
 *  owner. */
 const PER_APP_SHARED_STACK = "_per-app_";
+/** Coerce a composed string to a Docker network / DNS-alias-safe form
+*  (alphanumerics + hyphen). Identity strings are already network-safe;
+*  this guards the literal composition (`devstack-${app}-${stack}-…`). */
+const sanitizeAlias = (s) => s.replace(/[^a-zA-Z0-9-]/g, "-");
 const managedContainerLabels = (options) => ({
 	app: options.identity.app,
 	stack: options.identity.stack,
@@ -37,15 +41,9 @@ const ensureManagedContainer = (options) => {
 	return options.runtime.ensureContainer({
 		...options.spec,
 		labels
-	}).pipe(Effect.mapError(options.mapError), Effect.withSpan("substrate.managedContainer.ensure", { attributes: {
-		[SpanAttr.app]: labels.app,
-		[SpanAttr.stack]: labels.stack,
-		[SpanAttr.plugin]: labels.plugin,
-		[SpanAttr.containerRole]: labels.role,
-		[SpanAttr.containerName]: options.spec.name
-	} }));
+	}).pipe(Effect.mapError(options.mapError));
 };
 //#endregion
-export { PER_APP_SHARED_STACK, ensureManagedContainer, managed_container_exports };
+export { PER_APP_SHARED_STACK, ensureManagedContainer, managed_container_exports, sanitizeAlias };
 
 //# sourceMappingURL=managed-container.mjs.map

package/dist/substrate/runtime/managed-container.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"managed-container.mjs","names":[],"sources":["../../../src/substrate/runtime/managed-container.ts"],"sourcesContent":["import { Effect, type Scope } from 'effect';\n\nimport type {\n\tContainerHandle,\n\tContainerRuntime,\n\tContainerRuntimeError,\n\tEnsureContainerSpec,\n} from '../../contracts/container-runtime.ts';\nimport type { ContainerLabelTuple } from '../../contracts/snapshotable.ts';\nimport { SpanAttr } from './observability/spans.ts';\n\n/** Sentinel `stack` value for containers / volumes / networks that are\n *  shared across a single app's stacks but isolated PER APP — the\n *  resource lives at app-scope, not stack-scope.\n *\n *  Current producer: the per-app sui chain-build container\n *  (`plugins/sui/chain-build-container.ts`) reuses one container\n *  across multiple stacks of the same app to keep the bind-mounted\n *  Move dep cache warm.\n *\n *  Lifecycle-prune + the prune CLI compare against this sentinel to\n *  decide whether a resource group is shared (pinned while any\n *  sibling stack under the same app is live) vs per-stack (pruned\n *  with its stack).\n *\n *  The vocabulary lives here alongside the `{ app, stack, plugin,\n *  role }` label tuple — managed-container.ts is the canonical\n *  owner. */\nexport const PER_APP_SHARED_STACK = '_per-app_' as const;\n\nexport interface ManagedContainerIdentity {\n\treadonly app: string;\n\treadonly stack: string;\n}\n\nexport interface ManagedContainerLabelOptions {\n\treadonly identity: ManagedContainerIdentity;\n\treadonly plugin: string;\n\treadonly role: string;\n}\n\nexport const managedContainerLabels = (\n\toptions: ManagedContainerLabelOptions,\n): ContainerLabelTuple => ({\n\tapp: options.identity.app,\n\tstack: options.identity.stack,\n\tplugin: options.plugin,\n\trole: options.role,\n});\n\ntype ManagedContainerLabelInput =\n\t| { readonly labels: ContainerLabelTuple }\n\t| ManagedContainerLabelOptions;\n\nexport type EnsureManagedContainerOptions<E> = ManagedContainerLabelInput & {\n\treadonly runtime: ContainerRuntime;\n\treadonly spec: Omit<EnsureContainerSpec, 'labels'>;\n\treadonly mapError: (cause: ContainerRuntimeError) => E;\n};\n\nconst labelsFrom = (input: ManagedContainerLabelInput): ContainerLabelTuple =>\n\t'labels' in input ? input.labels : managedContainerLabels(input);\n\nexport const ensureManagedContainer = <E>(\n\toptions: EnsureManagedContainerOptions<E>,\n): Effect.Effect<ContainerHandle, E, Scope.Scope> => {\n\tconst labels = labelsFrom(options);\n\treturn options.runtime\n\t\t.ensureContainer({\n\t\t\t...options.spec,\n\t\t\tlabels,\n\t\t})\n\t\t.pipe(\n\t\t\tEffect.mapError(options.mapError),\n\t\t\tEffect.withSpan('substrate.managedContainer.ensure', {\n\t\t\t\tattributes: {\n\t\t\t\t\t[SpanAttr.app]: labels.app,\n\t\t\t\t\t[SpanAttr.stack]: labels.stack,\n\t\t\t\t\t[SpanAttr.plugin]: labels.plugin,\n\t\t\t\t\t[SpanAttr.containerRole]: labels.role,\n\t\t\t\t\t[SpanAttr.containerName]: options.spec.name,\n\t\t\t\t},\n\t\t\t}),\n\t\t);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,MAAa,uBAAuB;AAapC,MAAa,0BACZ,aAC0B;CAC1B,KAAK,QAAQ,SAAS;CACtB,OAAO,QAAQ,SAAS;CACxB,QAAQ,QAAQ;CAChB,MAAM,QAAQ;CACd;AAYD,MAAM,cAAc,UACnB,YAAY,QAAQ,MAAM,SAAS,uBAAuB,MAAM;AAEjE,MAAa,0BACZ,YACoD;CACpD,MAAM,SAAS,WAAW,QAAQ;AAClC,QAAO,QAAQ,QACb,gBAAgB;EAChB,GAAG,QAAQ;EACX;EACA,CAAC,CACD,KACA,OAAO,SAAS,QAAQ,SAAS,EACjC,OAAO,SAAS,qCAAqC,EACpD,YAAY;GACV,SAAS,MAAM,OAAO;GACtB,SAAS,QAAQ,OAAO;GACxB,SAAS,SAAS,OAAO;GACzB,SAAS,gBAAgB,OAAO;GAChC,SAAS,gBAAgB,QAAQ,KAAK;EACvC,EACD,CAAC,CACF"}
+{"version":3,"file":"managed-container.mjs","names":[],"sources":["../../../src/substrate/runtime/managed-container.ts"],"sourcesContent":["import { Effect, type Scope } from 'effect';\n\nimport type {\n\tContainerHandle,\n\tContainerRuntime,\n\tContainerRuntimeError,\n\tEnsureContainerSpec,\n} from '../../contracts/container-runtime.ts';\nimport type { ContainerLabelTuple } from '../../contracts/snapshotable.ts';\n\n/** Sentinel `stack` value for containers / volumes / networks that are\n *  shared across a single app's stacks but isolated PER APP — the\n *  resource lives at app-scope, not stack-scope.\n *\n *  Current producer: the per-app sui chain-build container\n *  (`plugins/sui/chain-build-container.ts`) reuses one container\n *  across multiple stacks of the same app to keep the bind-mounted\n *  Move dep cache warm.\n *\n *  Lifecycle-prune + the prune CLI compare against this sentinel to\n *  decide whether a resource group is shared (pinned while any\n *  sibling stack under the same app is live) vs per-stack (pruned\n *  with its stack).\n *\n *  The vocabulary lives here alongside the `{ app, stack, plugin,\n *  role }` label tuple — managed-container.ts is the canonical\n *  owner. */\nexport const PER_APP_SHARED_STACK = '_per-app_' as const;\n\n/** Coerce a composed string to a Docker network / DNS-alias-safe form\n *  (alphanumerics + hyphen). Identity strings are already network-safe;\n *  this guards the literal composition (`devstack-${app}-${stack}-…`). */\nexport const sanitizeAlias = (s: string): string => s.replace(/[^a-zA-Z0-9-]/g, '-');\n\nexport interface ManagedContainerIdentity {\n\treadonly app: string;\n\treadonly stack: string;\n}\n\nexport interface ManagedContainerLabelOptions {\n\treadonly identity: ManagedContainerIdentity;\n\treadonly plugin: string;\n\treadonly role: string;\n}\n\nexport const managedContainerLabels = (\n\toptions: ManagedContainerLabelOptions,\n): ContainerLabelTuple => ({\n\tapp: options.identity.app,\n\tstack: options.identity.stack,\n\tplugin: options.plugin,\n\trole: options.role,\n});\n\ntype ManagedContainerLabelInput =\n\t| { readonly labels: ContainerLabelTuple }\n\t| ManagedContainerLabelOptions;\n\nexport type EnsureManagedContainerOptions<E> = ManagedContainerLabelInput & {\n\treadonly runtime: ContainerRuntime;\n\treadonly spec: Omit<EnsureContainerSpec, 'labels'>;\n\treadonly mapError: (cause: ContainerRuntimeError) => E;\n};\n\nconst labelsFrom = (input: ManagedContainerLabelInput): ContainerLabelTuple =>\n\t'labels' in input ? input.labels : managedContainerLabels(input);\n\nexport const ensureManagedContainer = <E>(\n\toptions: EnsureManagedContainerOptions<E>,\n): Effect.Effect<ContainerHandle, E, Scope.Scope> => {\n\tconst labels = labelsFrom(options);\n\treturn options.runtime\n\t\t.ensureContainer({\n\t\t\t...options.spec,\n\t\t\tlabels,\n\t\t})\n\t\t.pipe(Effect.mapError(options.mapError));\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AA2BA,MAAa,uBAAuB;;;;AAKpC,MAAa,iBAAiB,MAAsB,EAAE,QAAQ,kBAAkB,GAAG;AAanF,MAAa,0BACZ,aAC0B;CAC1B,KAAK,QAAQ,SAAS;CACtB,OAAO,QAAQ,SAAS;CACxB,QAAQ,QAAQ;CAChB,MAAM,QAAQ;AACf;AAYA,MAAM,cAAc,UACnB,YAAY,QAAQ,MAAM,SAAS,uBAAuB,KAAK;AAEhE,MAAa,0BACZ,YACoD;CACpD,MAAM,SAAS,WAAW,OAAO;CACjC,OAAO,QAAQ,QACb,gBAAgB;EAChB,GAAG,QAAQ;EACX;CACD,CAAC,CAAC,CACD,KAAK,OAAO,SAAS,QAAQ,QAAQ,CAAC;AACzC"}

package/dist/substrate/runtime/manifest/manifest.mjs

@@ -1,54 +1,33 @@
-import { atomicWriteFile } from "../atomic-write.mjs";
 import "../runtime-decode.mjs";
+import { atomicWriteFile } from "../atomic-write.mjs";
 import "../../manifest.mjs";
 import { Data, Effect } from "effect";
 /** One error class for every manifest IO failure. */
 var ManifestError = class extends Data.TaggedError("ManifestError") {};
 /**
-* Build the envelope from per-plugin contributions. Pure; the writer
+* Build the envelope from endpoint entries + extras. Pure; the writer
 * calls this and then atomically writes the JSON.
 *
-* `pluginKey` collisions are an error — two contributions for the
-* same plugin would silently overwrite. Endpoint-key collisions also
-* error: every endpoint has a unique `(pluginKey, dispatchId)` digest
-* by construction; a duplicate means a substrate bug.
+* Endpoint-key collisions error: every endpoint has a unique
+* `(pluginKey, dispatchId)` digest by construction; a duplicate means
+* a substrate bug.
 */
 const buildEnvelope = (input) => Effect.gen(function* () {
-	const services = {};
 	const endpoints = {};
 	const extras = { ...input.extras };
 	const addEndpoint = (ep) => Effect.gen(function* () {
 		const ek = ep.endpointKey;
 		if (ek in endpoints) return yield* Effect.fail(new ManifestError({
-			reason: "duplicate-contribution",
+			reason: "duplicate-endpoint",
 			path: "(in-memory envelope)",
 			detail: `endpointKey ${ek} contributed twice`
 		}));
 		endpoints[ek] = ep;
 	});
-	for (const contribution of input.contributions) {
-		const key = contribution.pluginKey;
-		if (key in services) return yield* Effect.fail(new ManifestError({
-			reason: "duplicate-contribution",
-			path: "(in-memory envelope)",
-			detail: `pluginKey ${key} contributed twice`
-		}));
-		services[key] = contribution.services;
-		if (contribution.extras !== void 0) for (const [extraKey, extraValue] of Object.entries(contribution.extras)) {
-			if (extraKey in extras) return yield* Effect.fail(new ManifestError({
-				reason: "duplicate-contribution",
-				path: "(in-memory envelope)",
-				detail: `extras key ${extraKey} contributed twice`
-			}));
-			extras[extraKey] = extraValue;
-		}
-		for (const ep of contribution.endpoints) yield* addEndpoint(ep);
-	}
 	for (const ep of input.endpoints ?? []) yield* addEndpoint(ep);
 	return {
 		identity: input.identity,
 		manifestVersion: 1,
-		services,
 		endpoints,
 		extras,
 		...input.codegen !== void 0 ? { codegen: input.codegen } : {}
@@ -58,8 +37,7 @@ const buildEnvelope = (input) => Effect.gen(function* () {
 * Serialize and write the envelope at `path` atomically. Routes
 * through the canonical `atomicWriteFile` primitive (mkdir-parent →
 * O_EXCL temp → write → fsync → rename), so the manifest writer
-* shares ONE owner of the tempfile dance with the state-store and
-* cache.
+* shares ONE owner of the tempfile dance with the cache.
 */
 const writeManifest = (envelope, path) => Effect.gen(function* () {
 	const json = serializeEnvelope(envelope);
@@ -69,7 +47,7 @@ const writeManifest = (envelope, path) => Effect.gen(function* () {
 		detail: `atomic write failed at stage ${cause.stage}`,
 		cause
 	})));
-}).pipe(Effect.withSpan("Manifest.writeManifest", { attributes: { "devstack.manifest.path": path } }));
+});
 const serializeEnvelope = (envelope) => JSON.stringify(envelope, null, 2);
 //#endregion
 export { ManifestError, buildEnvelope, writeManifest };

package/dist/substrate/runtime/manifest/manifest.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.mjs","names":[],"sources":["../../../../src/substrate/runtime/manifest/manifest.ts"],"sourcesContent":["// Manifest emitter — endpoint-keyed envelope, atomic write.\n//\n// Architecture § Manifest data model. The envelope is L0 (`identity`\n// tuple, `manifestVersion`, `services` slot, `endpoints` lookup,\n// `extras`). The per-service projection lives in each plugin's\n// Codegenable contribution and is consumed by codegen output, not by\n// the manifest envelope itself.\n//\n// The emitter:\n//   - Accepts per-plugin contributions through a `contribute` Effect.\n//   - Walks endpoint contributions to build the flat `endpoints`\n//     lookup keyed by `endpointKey`. Entries still carry the declared\n//     endpoint `name` for build-integration lookup.\n//   - Writes atomically via tempfile + fsync + rename. The atomic-\n//     write primitive lives in L0 (per architecture § Collapsed:\n//     \"Three tempfile+rename impls → one atomic-write primitive\").\n//   - Validates the envelope against `ManifestEnvelopeSchema` on read.\n//   - Pins `manifestVersion` so future-proofing migrations have a\n//     compatibility seam. The pinned version is `1` for the post-\n//     rewrite envelope. (The old devstack used unversioned manifests\n//     plus a hash field; the rewrite's clean break is `version 1`.)\n//\n// Discipline: zero service names. The writer iterates `pluginKey`-\n// indexed contributions and copies the bytes through. The schema\n// validates the envelope shape, not the per-plugin contents (which\n// are `Schema.Unknown`).\n\nimport { Effect } from 'effect';\nimport { Data } from 'effect';\nimport { FileSystem } from 'effect';\n\nimport type { EndpointKey, PluginKey } from '../../brand.ts';\nimport {\n\ttype EndpointEntry,\n\ttype ManifestCodegen,\n\ttype ManifestExtras,\n\ttype ManifestEnvelope,\n\tManifestEnvelopeSchema,\n} from '../../manifest.ts';\nimport { atomicWriteFile } from '../atomic-write.ts';\nimport { decodeJsonText } from '../runtime-decode.ts';\n\n// -----------------------------------------------------------------------------\n// Pinned schema version\n// -----------------------------------------------------------------------------\n\n/**\n * Schema version pinned at the envelope level. Bump only on a\n * breaking shape change to the envelope (NOT to a per-plugin service\n * slice — those carry their own version via Codegenable contribution).\n *\n * Reader policy:\n *   - Equal version: accept.\n *   - Older version: refuse (advise user to re-run `up`).\n *   - Newer version: refuse (build integration is out of date).\n */\nexport const CURRENT_MANIFEST_VERSION = 1 as const;\n\n// -----------------------------------------------------------------------------\n// Errors\n// -----------------------------------------------------------------------------\n\n/** One error class for every manifest IO failure. */\nexport class ManifestError extends Data.TaggedError('ManifestError')<{\n\treadonly reason:\n\t\t| 'write-failed'\n\t\t| 'read-failed'\n\t\t| 'decode-failed'\n\t\t| 'version-mismatch'\n\t\t| 'duplicate-contribution';\n\treadonly path: string;\n\treadonly detail?: string;\n\treadonly cause?: unknown;\n}> {}\n\n// -----------------------------------------------------------------------------\n// Contribution shape\n// -----------------------------------------------------------------------------\n\n/**\n * One plugin's contribution to the manifest. Keyed by `pluginKey`\n * (branded), opaque `services` blob, plus a flat list of endpoint\n * entries the plugin owns.\n *\n * The writer copies `services` through to\n * `envelope.services[pluginKey]`. The renderer of the typed shape\n * lives in the plugin's Codegenable contribution — the manifest\n * doesn't decode it.\n */\nexport interface PluginManifestContribution {\n\treadonly pluginKey: PluginKey;\n\t/** Plugin's structured slice — opaque to the writer. */\n\treadonly services: unknown;\n\t/** Endpoints owned by this plugin. The writer indexes these by\n\t *  `endpointKey` into the flat top-level lookup. */\n\treadonly endpoints: ReadonlyArray<EndpointEntry>;\n\t/** Optional app-facing extras merged into the top-level extras slot. */\n\treadonly extras?: ManifestExtras;\n}\n\n// -----------------------------------------------------------------------------\n// Public writer interface\n// -----------------------------------------------------------------------------\n\nexport interface WriteManifestInput {\n\treadonly identity: ManifestEnvelope['identity'];\n\treadonly contributions: ReadonlyArray<PluginManifestContribution>;\n\treadonly endpoints?: ReadonlyArray<EndpointEntry>;\n\treadonly extras?: ManifestExtras;\n\t/** Per-stack codegen metadata (the resolved absolute `generatedDir`).\n\t *  Optional + additive — omitting it produces an envelope without the\n\t *  `codegen` key, identical to a pre-field manifest. */\n\treadonly codegen?: ManifestCodegen;\n}\n\n/**\n * Build the envelope from per-plugin contributions. Pure; the writer\n * calls this and then atomically writes the JSON.\n *\n * `pluginKey` collisions are an error — two contributions for the\n * same plugin would silently overwrite. Endpoint-key collisions also\n * error: every endpoint has a unique `(pluginKey, dispatchId)` digest\n * by construction; a duplicate means a substrate bug.\n */\nexport const buildEnvelope = (\n\tinput: WriteManifestInput,\n): Effect.Effect<ManifestEnvelope, ManifestError> =>\n\tEffect.gen(function* () {\n\t\tconst services: Record<string, unknown> = {};\n\t\tconst endpoints: Record<string, EndpointEntry> = {};\n\t\tconst extras: Record<string, unknown> = { ...input.extras };\n\n\t\tconst addEndpoint = (ep: EndpointEntry): Effect.Effect<void, ManifestError> =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst ek = ep.endpointKey as string;\n\t\t\t\tif (ek in endpoints) {\n\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\tnew ManifestError({\n\t\t\t\t\t\t\treason: 'duplicate-contribution',\n\t\t\t\t\t\t\tpath: '(in-memory envelope)',\n\t\t\t\t\t\t\tdetail: `endpointKey ${ek} contributed twice`,\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tendpoints[ek] = ep;\n\t\t\t});\n\n\t\tfor (const contribution of input.contributions) {\n\t\t\tconst key = contribution.pluginKey as string;\n\t\t\tif (key in services) {\n\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\tnew ManifestError({\n\t\t\t\t\t\treason: 'duplicate-contribution',\n\t\t\t\t\t\tpath: '(in-memory envelope)',\n\t\t\t\t\t\tdetail: `pluginKey ${key} contributed twice`,\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}\n\t\t\tservices[key] = contribution.services;\n\t\t\tif (contribution.extras !== undefined) {\n\t\t\t\tfor (const [extraKey, extraValue] of Object.entries(contribution.extras)) {\n\t\t\t\t\tif (extraKey in extras) {\n\t\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\t\tnew ManifestError({\n\t\t\t\t\t\t\t\treason: 'duplicate-contribution',\n\t\t\t\t\t\t\t\tpath: '(in-memory envelope)',\n\t\t\t\t\t\t\t\tdetail: `extras key ${extraKey} contributed twice`,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t\textras[extraKey] = extraValue;\n\t\t\t\t}\n\t\t\t}\n\t\t\tfor (const ep of contribution.endpoints) {\n\t\t\t\tyield* addEndpoint(ep);\n\t\t\t}\n\t\t}\n\t\tfor (const ep of input.endpoints ?? []) {\n\t\t\tyield* addEndpoint(ep);\n\t\t}\n\n\t\treturn {\n\t\t\tidentity: input.identity,\n\t\t\tmanifestVersion: CURRENT_MANIFEST_VERSION,\n\t\t\tservices,\n\t\t\tendpoints,\n\t\t\textras,\n\t\t\t// Spread only when present so an omitted `codegen` yields the\n\t\t\t// exact same envelope (and serialized bytes) as a pre-field\n\t\t\t// manifest — additive, no churn for stacks that don't record it.\n\t\t\t...(input.codegen !== undefined ? { codegen: input.codegen } : {}),\n\t\t};\n\t});\n\n// -----------------------------------------------------------------------------\n// Atomic write — delegates to the canonical primitive.\n// -----------------------------------------------------------------------------\n\n/**\n * Serialize and write the envelope at `path` atomically. Routes\n * through the canonical `atomicWriteFile` primitive (mkdir-parent →\n * O_EXCL temp → write → fsync → rename), so the manifest writer\n * shares ONE owner of the tempfile dance with the state-store and\n * cache.\n */\nexport const writeManifest = (\n\tenvelope: ManifestEnvelope,\n\tpath: string,\n): Effect.Effect<void, ManifestError, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst json = serializeEnvelope(envelope);\n\t\tconst bytes = new TextEncoder().encode(json);\n\t\tyield* atomicWriteFile(path, bytes).pipe(\n\t\t\tEffect.mapError(\n\t\t\t\t(cause) =>\n\t\t\t\t\tnew ManifestError({\n\t\t\t\t\t\treason: 'write-failed',\n\t\t\t\t\t\tpath,\n\t\t\t\t\t\tdetail: `atomic write failed at stage ${cause.stage}`,\n\t\t\t\t\t\tcause,\n\t\t\t\t\t}),\n\t\t\t),\n\t\t);\n\t}).pipe(\n\t\tEffect.withSpan('Manifest.writeManifest', { attributes: { 'devstack.manifest.path': path } }),\n\t);\n\nconst serializeEnvelope = (envelope: ManifestEnvelope): string =>\n\t// Stable key ordering, deterministic re-emit. `JSON.stringify` with\n\t// 2-space indent is reproducible byte-for-byte given the same\n\t// input object.\n\tJSON.stringify(envelope, null, 2);\n\n// -----------------------------------------------------------------------------\n// Read + decode\n// -----------------------------------------------------------------------------\n\n/**\n * Read and decode the manifest at `path`. Validates against\n * `ManifestEnvelopeSchema` and the pinned `CURRENT_MANIFEST_VERSION`.\n *\n * Used by:\n *   - Codegen (architecture §6) — consumes plugin slices off\n *     `envelope.services[pluginKey]`.\n *   - Build integrations (Vitest, Playwright, generated app code) — consumes\n *     `envelope.endpoints` lookup.\n *\n * The reader is read-only; no mutation, no IO beyond the single read.\n */\nexport const readManifest = (\n\tpath: string,\n): Effect.Effect<ManifestEnvelope, ManifestError, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tconst text = yield* fs\n\t\t\t.readFileString(path)\n\t\t\t.pipe(Effect.mapError((cause) => new ManifestError({ reason: 'read-failed', path, cause })));\n\t\tconst decoded = yield* decodeJsonText(ManifestEnvelopeSchema, text, {\n\t\t\tsource: path,\n\t\t\tmkError: (issue) =>\n\t\t\t\tnew ManifestError({ reason: 'decode-failed', path, cause: issue.cause ?? issue }),\n\t\t});\n\t\tif (decoded.manifestVersion !== CURRENT_MANIFEST_VERSION) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\tnew ManifestError({\n\t\t\t\t\treason: 'version-mismatch',\n\t\t\t\t\tpath,\n\t\t\t\t\tdetail: `expected ${CURRENT_MANIFEST_VERSION}, got ${decoded.manifestVersion}`,\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\t\treturn decoded as ManifestEnvelope;\n\t}).pipe(\n\t\tEffect.withSpan('Manifest.readManifest', { attributes: { 'devstack.manifest.path': path } }),\n\t);\n\n// -----------------------------------------------------------------------------\n// Re-export the envelope + endpoint types so downstream substrate\n// modules (codegen, build integrations) don't reach into substrate/\n// directly.\n// -----------------------------------------------------------------------------\n\nexport type { EndpointEntry, EndpointKey, ManifestCodegen, ManifestEnvelope, PluginKey };\nexport { ManifestEnvelopeSchema };\n"],"mappings":";;;;;AA+DA,IAAa,gBAAb,cAAmC,KAAK,YAAY,gBAAgB,CAUjE;;;;;;;;;;AAmDH,MAAa,iBACZ,UAEA,OAAO,IAAI,aAAa;CACvB,MAAM,WAAoC,EAAE;CAC5C,MAAM,YAA2C,EAAE;CACnD,MAAM,SAAkC,EAAE,GAAG,MAAM,QAAQ;CAE3D,MAAM,eAAe,OACpB,OAAO,IAAI,aAAa;EACvB,MAAM,KAAK,GAAG;AACd,MAAI,MAAM,UACT,QAAO,OAAO,OAAO,KACpB,IAAI,cAAc;GACjB,QAAQ;GACR,MAAM;GACN,QAAQ,eAAe,GAAG;GAC1B,CAAC,CACF;AAEF,YAAU,MAAM;GACf;AAEH,MAAK,MAAM,gBAAgB,MAAM,eAAe;EAC/C,MAAM,MAAM,aAAa;AACzB,MAAI,OAAO,SACV,QAAO,OAAO,OAAO,KACpB,IAAI,cAAc;GACjB,QAAQ;GACR,MAAM;GACN,QAAQ,aAAa,IAAI;GACzB,CAAC,CACF;AAEF,WAAS,OAAO,aAAa;AAC7B,MAAI,aAAa,WAAW,KAAA,EAC3B,MAAK,MAAM,CAAC,UAAU,eAAe,OAAO,QAAQ,aAAa,OAAO,EAAE;AACzE,OAAI,YAAY,OACf,QAAO,OAAO,OAAO,KACpB,IAAI,cAAc;IACjB,QAAQ;IACR,MAAM;IACN,QAAQ,cAAc,SAAS;IAC/B,CAAC,CACF;AAEF,UAAO,YAAY;;AAGrB,OAAK,MAAM,MAAM,aAAa,UAC7B,QAAO,YAAY,GAAG;;AAGxB,MAAK,MAAM,MAAM,MAAM,aAAa,EAAE,CACrC,QAAO,YAAY,GAAG;AAGvB,QAAO;EACN,UAAU,MAAM;EAChB,iBAAA;EACA;EACA;EACA;EAIA,GAAI,MAAM,YAAY,KAAA,IAAY,EAAE,SAAS,MAAM,SAAS,GAAG,EAAE;EACjE;EACA;;;;;;;;AAaH,MAAa,iBACZ,UACA,SAEA,OAAO,IAAI,aAAa;CACvB,MAAM,OAAO,kBAAkB,SAAS;AAExC,QAAO,gBAAgB,MADT,IAAI,aAAa,CAAC,OAAO,KACL,CAAC,CAAC,KACnC,OAAO,UACL,UACA,IAAI,cAAc;EACjB,QAAQ;EACR;EACA,QAAQ,gCAAgC,MAAM;EAC9C;EACA,CAAC,CACH,CACD;EACA,CAAC,KACF,OAAO,SAAS,0BAA0B,EAAE,YAAY,EAAE,0BAA0B,MAAM,EAAE,CAAC,CAC7F;AAEF,MAAM,qBAAqB,aAI1B,KAAK,UAAU,UAAU,MAAM,EAAE"}
+{"version":3,"file":"manifest.mjs","names":[],"sources":["../../../../src/substrate/runtime/manifest/manifest.ts"],"sourcesContent":["// Manifest emitter — endpoint-keyed envelope, atomic write.\n//\n// Architecture § Manifest data model. The envelope is L0 (`identity`\n// tuple, `manifestVersion`, `endpoints` lookup, `extras`).\n//\n// The emitter:\n//   - Walks endpoint entries to build the flat `endpoints` lookup\n//     keyed by `endpointKey`. Entries carry the declared endpoint\n//     `name` for build-integration lookup.\n//   - Writes atomically via tempfile + fsync + rename. The atomic-\n//     write primitive lives in L0 (per architecture § Collapsed:\n//     \"Three tempfile+rename impls → one atomic-write primitive\").\n//   - Validates the envelope against `ManifestEnvelopeSchema` on read.\n//   - Pins `manifestVersion` so future-proofing migrations have a\n//     compatibility seam. The pinned version is `1`.\n//\n// Discipline: zero service names. The schema validates the envelope\n// shape, not the per-plugin contents.\n\nimport { Effect } from 'effect';\nimport { Data } from 'effect';\nimport { FileSystem } from 'effect';\n\nimport type { EndpointKey, PluginKey } from '../../brand.ts';\nimport {\n\ttype EndpointEntry,\n\ttype ManifestCodegen,\n\ttype ManifestExtras,\n\ttype ManifestEnvelope,\n\tManifestEnvelopeSchema,\n} from '../../manifest.ts';\nimport { atomicWriteFile } from '../atomic-write.ts';\nimport { decodeJsonText } from '../runtime-decode.ts';\n\n// -----------------------------------------------------------------------------\n// Pinned schema version\n// -----------------------------------------------------------------------------\n\n/**\n * Schema version pinned at the envelope level. Bump only on a\n * breaking shape change to the envelope (NOT to a per-plugin service\n * slice — those carry their own version via Codegenable contribution).\n *\n * Reader policy:\n *   - Equal version: accept.\n *   - Older version: refuse (advise user to re-run `up`).\n *   - Newer version: refuse (build integration is out of date).\n */\nexport const CURRENT_MANIFEST_VERSION = 1 as const;\n\n// -----------------------------------------------------------------------------\n// Errors\n// -----------------------------------------------------------------------------\n\n/** One error class for every manifest IO failure. */\nexport class ManifestError extends Data.TaggedError('ManifestError')<{\n\treadonly reason:\n\t\t| 'write-failed'\n\t\t| 'read-failed'\n\t\t| 'decode-failed'\n\t\t| 'version-mismatch'\n\t\t| 'duplicate-endpoint';\n\treadonly path: string;\n\treadonly detail?: string;\n\treadonly cause?: unknown;\n}> {}\n\n// -----------------------------------------------------------------------------\n// Public writer interface\n// -----------------------------------------------------------------------------\n\nexport interface WriteManifestInput {\n\treadonly identity: ManifestEnvelope['identity'];\n\treadonly endpoints?: ReadonlyArray<EndpointEntry>;\n\treadonly extras?: ManifestExtras;\n\t/** Per-stack codegen metadata (the dev-only `extrasDir` + live\n\t *  `idsFile`). Optional + additive — omitting it produces an envelope\n\t *  without the `codegen` key, identical to a pre-field manifest. */\n\treadonly codegen?: ManifestCodegen;\n}\n\n/**\n * Build the envelope from endpoint entries + extras. Pure; the writer\n * calls this and then atomically writes the JSON.\n *\n * Endpoint-key collisions error: every endpoint has a unique\n * `(pluginKey, dispatchId)` digest by construction; a duplicate means\n * a substrate bug.\n */\nexport const buildEnvelope = (\n\tinput: WriteManifestInput,\n): Effect.Effect<ManifestEnvelope, ManifestError> =>\n\tEffect.gen(function* () {\n\t\tconst endpoints: Record<string, EndpointEntry> = {};\n\t\tconst extras: Record<string, unknown> = { ...input.extras };\n\n\t\tconst addEndpoint = (ep: EndpointEntry): Effect.Effect<void, ManifestError> =>\n\t\t\tEffect.gen(function* () {\n\t\t\t\tconst ek = ep.endpointKey as string;\n\t\t\t\tif (ek in endpoints) {\n\t\t\t\t\treturn yield* Effect.fail(\n\t\t\t\t\t\tnew ManifestError({\n\t\t\t\t\t\t\treason: 'duplicate-endpoint',\n\t\t\t\t\t\t\tpath: '(in-memory envelope)',\n\t\t\t\t\t\t\tdetail: `endpointKey ${ek} contributed twice`,\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tendpoints[ek] = ep;\n\t\t\t});\n\n\t\tfor (const ep of input.endpoints ?? []) {\n\t\t\tyield* addEndpoint(ep);\n\t\t}\n\n\t\treturn {\n\t\t\tidentity: input.identity,\n\t\t\tmanifestVersion: CURRENT_MANIFEST_VERSION,\n\t\t\tendpoints,\n\t\t\textras,\n\t\t\t// Spread only when present so an omitted `codegen` yields the\n\t\t\t// exact same envelope (and serialized bytes) as a pre-field\n\t\t\t// manifest — additive, no churn for stacks that don't record it.\n\t\t\t...(input.codegen !== undefined ? { codegen: input.codegen } : {}),\n\t\t};\n\t});\n\n// -----------------------------------------------------------------------------\n// Atomic write — delegates to the canonical primitive.\n// -----------------------------------------------------------------------------\n\n/**\n * Serialize and write the envelope at `path` atomically. Routes\n * through the canonical `atomicWriteFile` primitive (mkdir-parent →\n * O_EXCL temp → write → fsync → rename), so the manifest writer\n * shares ONE owner of the tempfile dance with the cache.\n */\nexport const writeManifest = (\n\tenvelope: ManifestEnvelope,\n\tpath: string,\n): Effect.Effect<void, ManifestError, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst json = serializeEnvelope(envelope);\n\t\tconst bytes = new TextEncoder().encode(json);\n\t\tyield* atomicWriteFile(path, bytes).pipe(\n\t\t\tEffect.mapError(\n\t\t\t\t(cause) =>\n\t\t\t\t\tnew ManifestError({\n\t\t\t\t\t\treason: 'write-failed',\n\t\t\t\t\t\tpath,\n\t\t\t\t\t\tdetail: `atomic write failed at stage ${cause.stage}`,\n\t\t\t\t\t\tcause,\n\t\t\t\t\t}),\n\t\t\t),\n\t\t);\n\t});\n\nconst serializeEnvelope = (envelope: ManifestEnvelope): string =>\n\t// Stable key ordering, deterministic re-emit. `JSON.stringify` with\n\t// 2-space indent is reproducible byte-for-byte given the same\n\t// input object.\n\tJSON.stringify(envelope, null, 2);\n\n// -----------------------------------------------------------------------------\n// Read + decode\n// -----------------------------------------------------------------------------\n\n/**\n * Read and decode the manifest at `path`. Validates against\n * `ManifestEnvelopeSchema` and the pinned `CURRENT_MANIFEST_VERSION`.\n *\n * Used by:\n *   - Build integrations (Vitest, Playwright, generated app code) — consumes\n *     `envelope.endpoints` lookup.\n *\n * The reader is read-only; no mutation, no IO beyond the single read.\n */\nexport const readManifest = (\n\tpath: string,\n): Effect.Effect<ManifestEnvelope, ManifestError, FileSystem.FileSystem> =>\n\tEffect.gen(function* () {\n\t\tconst fs = yield* FileSystem.FileSystem;\n\t\tconst text = yield* fs\n\t\t\t.readFileString(path)\n\t\t\t.pipe(Effect.mapError((cause) => new ManifestError({ reason: 'read-failed', path, cause })));\n\t\tconst decoded = yield* decodeJsonText(ManifestEnvelopeSchema, text, {\n\t\t\tsource: path,\n\t\t\tmkError: (issue) =>\n\t\t\t\tnew ManifestError({ reason: 'decode-failed', path, cause: issue.cause ?? issue }),\n\t\t});\n\t\tif (decoded.manifestVersion !== CURRENT_MANIFEST_VERSION) {\n\t\t\treturn yield* Effect.fail(\n\t\t\t\tnew ManifestError({\n\t\t\t\t\treason: 'version-mismatch',\n\t\t\t\t\tpath,\n\t\t\t\t\tdetail: `expected ${CURRENT_MANIFEST_VERSION}, got ${decoded.manifestVersion}`,\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\t\treturn decoded as ManifestEnvelope;\n\t});\n\n// -----------------------------------------------------------------------------\n// Re-export the envelope + endpoint types so downstream substrate\n// modules (codegen, build integrations) don't reach into substrate/\n// directly.\n// -----------------------------------------------------------------------------\n\nexport type { EndpointEntry, EndpointKey, ManifestCodegen, ManifestEnvelope, PluginKey };\nexport { ManifestEnvelopeSchema };\n"],"mappings":";;;;;AAuDA,IAAa,gBAAb,cAAmC,KAAK,YAAY,eAAe,CAAC,CAUjE,CAAC;;;;;;;;;AAwBJ,MAAa,iBACZ,UAEA,OAAO,IAAI,aAAa;CACvB,MAAM,YAA2C,CAAC;CAClD,MAAM,SAAkC,EAAE,GAAG,MAAM,OAAO;CAE1D,MAAM,eAAe,OACpB,OAAO,IAAI,aAAa;EACvB,MAAM,KAAK,GAAG;EACd,IAAI,MAAM,WACT,OAAO,OAAO,OAAO,KACpB,IAAI,cAAc;GACjB,QAAQ;GACR,MAAM;GACN,QAAQ,eAAe,GAAG;EAC3B,CAAC,CACF;EAED,UAAU,MAAM;CACjB,CAAC;CAEF,KAAK,MAAM,MAAM,MAAM,aAAa,CAAC,GACpC,OAAO,YAAY,EAAE;CAGtB,OAAO;EACN,UAAU,MAAM;EAChB,iBAAA;EACA;EACA;EAIA,GAAI,MAAM,YAAY,KAAA,IAAY,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;CACjE;AACD,CAAC;;;;;;;AAYF,MAAa,iBACZ,UACA,SAEA,OAAO,IAAI,aAAa;CACvB,MAAM,OAAO,kBAAkB,QAAQ;CAEvC,OAAO,gBAAgB,MADT,IAAI,YAAY,CAAC,CAAC,OAAO,IACN,CAAC,CAAC,CAAC,KACnC,OAAO,UACL,UACA,IAAI,cAAc;EACjB,QAAQ;EACR;EACA,QAAQ,gCAAgC,MAAM;EAC9C;CACD,CAAC,CACH,CACD;AACD,CAAC;AAEF,MAAM,qBAAqB,aAI1B,KAAK,UAAU,UAAU,MAAM,CAAC"}

package/dist/substrate/runtime/mode-errors.d.mts

@@ -1,5 +1,4 @@
 import { Schema } from "effect";
-import * as _$effect_Cause0 from "effect/Cause";
 
 //#region src/substrate/runtime/mode-errors.d.ts
 declare const ForkIncompatibleError_base: Schema.Class<ForkIncompatibleError, Schema.TaggedStruct<"ForkIncompatibleError", {
@@ -13,7 +12,7 @@ declare const ForkIncompatibleError_base: Schema.Class<ForkIncompatibleError, Sc
   /** Optional original cause when the refusal wraps an underlying
    *  fault (rare — typical use is a pure factory-time refusal). */
   readonly cause: Schema.optional<Schema.Defect>;
-}>, _$effect_Cause0.YieldableError>;
+}>, import("effect/Cause").YieldableError>;
 /**
  * Synchronous factory-time refusal raised by a plugin factory
  * variant when composed against a network the variant cannot serve

package/dist/substrate/runtime/mode-errors.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"mode-errors.mjs","names":[],"sources":["../../../src/substrate/runtime/mode-errors.ts"],"sourcesContent":["// Cross-cutting mode-refusal errors.\n//\n// Reviews finding (cross-cutting.md §\"Error model\"): the\n// `ForkIncompatibleError` tag is defined twice today — once in\n// `plugins/walrus/errors.ts`, once in `plugins/seal/errors.ts` — with\n// conflicting field shapes. Two `_tag` literals with the same name\n// but different shapes violate STYLE_GUIDE §2 (\"One `_tag` literal\n// per logical error type across the whole package\").\n//\n// Lift the canonical shape here. Both plugins import from substrate\n// in PR3; this PR does NOT modify the plugin-side error files (per\n// PR1 scope).\n//\n// Shape decision:\n//   - `variant` carries the refusing factory name (e.g.\n//     `'walrusLocalCluster'`, `'sealLocalKeygen'`). Lets walrus and\n//     seal share the shape without losing the call-site distinction.\n//   - `network` carries the resolved `*-fork` network string the\n//     user passed.\n//   - `message` is the imperative one-liner suitable for stderr.\n//   - `hint` is the actionable next step (the known-deployment\n//     alternative).\n//\n// Substrate is name-blind on the plugin level — these fields are\n// generic (\"which factory variant refused\" + \"which network it\n// refused under\") and do NOT name walrus / seal.\n\nimport { Schema } from 'effect';\n\n/**\n * Synchronous factory-time refusal raised by a plugin factory\n * variant when composed against a network the variant cannot serve\n * (canonically: a `*-fork` chain that doesn't expose the fullnode\n * surface the variant requires).\n *\n * Architecture (Tension 11): primary refusal is TYPE-LEVEL via\n * mode-narrowed factory namespaces — `walrusFor(forkNet).<mode>` only\n * exposes `.known`. This runtime shape is defense-in-depth for\n * callers that bypass the type-level narrowing (env-driven factories,\n * plugin composition through resolved values).\n *\n * Used by walrus (`local-cluster` variant) and seal (`local-keygen`\n * variant) today; future plugin factories refusing on a network\n * predicate share this single shape.\n */\nexport class ForkIncompatibleError extends Schema.TaggedErrorClass<ForkIncompatibleError>()(\n\t'ForkIncompatibleError',\n\t{\n\t\t/** Refusing factory variant — e.g. `'walrusLocalCluster'`,\n\t\t *  `'sealLocalKeygen'`. Lets multiple plugin factories share\n\t\t *  this shape without losing the call-site distinction. */\n\t\tvariant: Schema.String,\n\t\t/** Resolved network the composition refused under. */\n\t\tnetwork: Schema.String,\n\t\t/** Imperative one-liner suitable for stderr. */\n\t\tmessage: Schema.String,\n\t\t/** Actionable next step (the known-deployment alternative). */\n\t\thint: Schema.optional(Schema.String),\n\t\t/** Optional original cause when the refusal wraps an underlying\n\t\t *  fault (rare — typical use is a pure factory-time refusal). */\n\t\tcause: Schema.optional(Schema.Defect),\n\t},\n) {}\n"],"mappings":";AA6C2C,OAAO,kBAAyC,CAC1F,yBACA;;;;CAIC,SAAS,OAAO;;CAEhB,SAAS,OAAO;;CAEhB,SAAS,OAAO;;CAEhB,MAAM,OAAO,SAAS,OAAO,OAAO;;;CAGpC,OAAO,OAAO,SAAS,OAAO,OAAO;CACrC,CACD"}
+{"version":3,"file":"mode-errors.mjs","names":[],"sources":["../../../src/substrate/runtime/mode-errors.ts"],"sourcesContent":["// Cross-cutting mode-refusal errors.\n//\n// Reviews finding (cross-cutting.md §\"Error model\"): the\n// `ForkIncompatibleError` tag is defined twice today — once in\n// `plugins/walrus/errors.ts`, once in `plugins/seal/errors.ts` — with\n// conflicting field shapes. Two `_tag` literals with the same name\n// but different shapes violate STYLE_GUIDE §2 (\"One `_tag` literal\n// per logical error type across the whole package\").\n//\n// Lift the canonical shape here. Both plugins import from substrate\n// in PR3; this PR does NOT modify the plugin-side error files (per\n// PR1 scope).\n//\n// Shape decision:\n//   - `variant` carries the refusing factory name (e.g.\n//     `'walrusLocalCluster'`, `'sealLocalKeygen'`). Lets walrus and\n//     seal share the shape without losing the call-site distinction.\n//   - `network` carries the resolved `*-fork` network string the\n//     user passed.\n//   - `message` is the imperative one-liner suitable for stderr.\n//   - `hint` is the actionable next step (the known-deployment\n//     alternative).\n//\n// Substrate is name-blind on the plugin level — these fields are\n// generic (\"which factory variant refused\" + \"which network it\n// refused under\") and do NOT name walrus / seal.\n\nimport { Schema } from 'effect';\n\n/**\n * Synchronous factory-time refusal raised by a plugin factory\n * variant when composed against a network the variant cannot serve\n * (canonically: a `*-fork` chain that doesn't expose the fullnode\n * surface the variant requires).\n *\n * Architecture (Tension 11): primary refusal is TYPE-LEVEL via\n * mode-narrowed factory namespaces — `walrusFor(forkNet).<mode>` only\n * exposes `.known`. This runtime shape is defense-in-depth for\n * callers that bypass the type-level narrowing (env-driven factories,\n * plugin composition through resolved values).\n *\n * Used by walrus (`local-cluster` variant) and seal (`local-keygen`\n * variant) today; future plugin factories refusing on a network\n * predicate share this single shape.\n */\nexport class ForkIncompatibleError extends Schema.TaggedErrorClass<ForkIncompatibleError>()(\n\t'ForkIncompatibleError',\n\t{\n\t\t/** Refusing factory variant — e.g. `'walrusLocalCluster'`,\n\t\t *  `'sealLocalKeygen'`. Lets multiple plugin factories share\n\t\t *  this shape without losing the call-site distinction. */\n\t\tvariant: Schema.String,\n\t\t/** Resolved network the composition refused under. */\n\t\tnetwork: Schema.String,\n\t\t/** Imperative one-liner suitable for stderr. */\n\t\tmessage: Schema.String,\n\t\t/** Actionable next step (the known-deployment alternative). */\n\t\thint: Schema.optional(Schema.String),\n\t\t/** Optional original cause when the refusal wraps an underlying\n\t\t *  fault (rare — typical use is a pure factory-time refusal). */\n\t\tcause: Schema.optional(Schema.Defect),\n\t},\n) {}\n"],"mappings":";AA6C2C,OAAO,iBAAwC,CAAC,CAC1F,yBACA;;;;CAIC,SAAS,OAAO;;CAEhB,SAAS,OAAO;;CAEhB,SAAS,OAAO;;CAEhB,MAAM,OAAO,SAAS,OAAO,MAAM;;;CAGnC,OAAO,OAAO,SAAS,OAAO,MAAM;AACrC,CACD"}

package/dist/substrate/runtime/observability/cascade-formatter.mjs

@@ -1,9 +1,6 @@
 import { redactText, redactValue } from "./redaction.mjs";
 import { Cause } from "effect";
 //#region src/substrate/runtime/observability/cascade-formatter.ts
-/** Empty registry — the formatter falls back to the default
-*  rendering for every value. */
-const emptyFormatterRegistry = /* @__PURE__ */ new Map();
 const DEFAULT_FIELD_TRUNCATE = 8192;
 const DEFAULT_MAX_DEPTH = 12;
 const isTaggedError = (value) => typeof value === "object" && value !== null && typeof value._tag === "string";
@@ -18,7 +15,6 @@ const isTaggedError = (value) => typeof value === "object" && value !== null &&
 */
 const formatCause = (cause, options) => {
 	const opts = {
-		formatters: options?.formatters ?? emptyFormatterRegistry,
 		fieldTruncate: options?.fieldTruncate ?? DEFAULT_FIELD_TRUNCATE,
 		maxDepth: options?.maxDepth ?? DEFAULT_MAX_DEPTH,
 		redactions: options?.redactions ?? []
@@ -37,7 +33,6 @@ const formatCause = (cause, options) => {
 */
 const formatValue = (value, options) => {
 	return formatAny(value, {
-		formatters: options?.formatters ?? emptyFormatterRegistry,
 		fieldTruncate: options?.fieldTruncate ?? DEFAULT_FIELD_TRUNCATE,
 		maxDepth: options?.maxDepth ?? DEFAULT_MAX_DEPTH,
 		redactions: options?.redactions ?? []
@@ -78,11 +73,6 @@ const formatAny = (value, opts, visited, depth) => {
 	}
 };
 const formatTagged = (value, opts, visited, depth) => {
-	const override = opts.formatters.get(value._tag);
-	if (override) {
-		const result = override(value, (inner) => formatAny(inner, opts, visited, depth + 1));
-		if (result !== null) return result;
-	}
 	const qualifier = typeof value.phase === "string" ? `(${value.phase})` : typeof value.op === "string" ? `(${value.op})` : "";
 	const message = typeof value.message === "string" ? redactText(value.message, opts.redactions) : "";
 	const header = qualifier ? `${value._tag} ${qualifier}: ${message}` : `${value._tag}: ${message}`;
@@ -126,6 +116,6 @@ const safeJson = (value, limit, redactions) => {
 	}
 };
 //#endregion
-export { emptyFormatterRegistry, formatCause, formatValue, isTaggedError };
+export { formatCause, formatValue, isTaggedError };
 
 //# sourceMappingURL=cascade-formatter.mjs.map