alchemy 2.0.0-beta.74 → 2.0.0-beta.76

package/bin/exec.js

@@ -10,10 +10,11 @@ import { Path } from "effect/Path";
 import * as Redacted from "effect/Redacted";
 import path from "pathe";
 import * as Config from "effect/Config";
-import * as NodeOs from "node:os";
+import * as os$1 from "node:os";
 import os from "node:os";
 import * as Semaphore from "effect/Semaphore";
 import * as Clock from "effect/Clock";
+import * as Console from "effect/Console";
 import * as Data from "effect/Data";
 import * as Duration from "effect/Duration";
 import * as Option from "effect/Option";
@@ -36,7 +37,6 @@ import * as Cause from "effect/Cause";
 import * as Exit from "effect/Exit";
 import * as Stream from "effect/Stream";
 import * as NodeUtil from "node:util";
-import * as Console from "effect/Console";
 import * as Queue from "effect/Queue";
 import * as HttpServer from "effect/unstable/http/HttpServer";
 import { HttpServerRequest } from "effect/unstable/http/HttpServerRequest";
@@ -47,7 +47,13 @@ import { ChildProcessSpawner } from "effect/unstable/process/ChildProcessSpawner
 import { fileURLToPath, pathToFileURL } from "node:url";
 import * as Command from "effect/unstable/cli/Command";
 import * as Flag from "effect/unstable/cli/Flag";
+import * as GlobalFlag from "effect/unstable/cli/GlobalFlag";
 import * as Metric from "effect/Metric";
+import { exec } from "node:child_process";
+import * as crypto$2 from "node:crypto";
+import crypto$1 from "node:crypto";
+import * as fs from "node:fs/promises";
+import * as nodePath from "node:path";
 import * as Argument from "effect/unstable/cli/Argument";
 import * as CliError from "effect/unstable/cli/CliError";
 import * as Floci from "@alchemy.run/floci";
@@ -56,8 +62,6 @@ import { Credentials } from "@distilled.cloud/aws/Credentials";
 import * as STS from "@distilled.cloud/aws/sts";
 import * as Match from "effect/Match";
 import { ChildProcess } from "effect/unstable/process";
-import * as NodeCrypto from "node:crypto";
-import crypto$1 from "node:crypto";
 import * as p from "@clack/prompts";
 import { Endpoint } from "@distilled.cloud/aws";
 import * as Result from "effect/Result";
@@ -123,7 +127,7 @@ var init_interactive = __esmMin((() => {
 }));
 //#endregion
 //#region lib/Auth/Lock.js
-var semaphores, STALE, REFRESH, RETRY_INTERVAL, DEFAULT_TIMEOUT, LockHeld, LockTimeout, sanitizeLockKey, acquireFileLock, withLock;
+var semaphores, STALE, REFRESH, RETRY_INTERVAL, DEFAULT_TIMEOUT, STALL_INTERVAL, LockHeld, LockTimeout, sanitizeLockKey, acquireFileLock, stallNotice, withLock;
 var init_Lock = __esmMin((() => {
 	init_Profile();
 	semaphores = /* @__PURE__ */ new Map();
@@ -131,6 +135,7 @@ var init_Lock = __esmMin((() => {
 	REFRESH = Duration.seconds(10);
 	RETRY_INTERVAL = Duration.millis(50);
 	DEFAULT_TIMEOUT = Duration.minutes(2);
+	STALL_INTERVAL = Duration.seconds(30);
 	LockHeld = class extends Data.TaggedError("LockHeld") {};
 	LockTimeout = class extends Data.TaggedError("LockTimeout") {};
 	sanitizeLockKey = (key) => key.replace(/[^A-Za-z0-9._-]/g, "_");
@@ -165,8 +170,16 @@ var init_Lock = __esmMin((() => {
 		})), Effect.ignore));
 		yield* fs.readFileString(ownerPath).pipe(Effect.filterOrFail((current) => current === owner), Effect.andThen(Clock.currentTimeMillis.pipe(Effect.map((now) => new Date(now)))), Effect.flatMap((now) => fs.utimes(lockPath, now, now)), Effect.repeat(Schedule.spaced(REFRESH)), Effect.catch(() => Effect.logWarning(`auth lock compromised (continuing): '${lockPath}' is no longer owned by this process`)), Effect.forkScoped);
 	});
+	stallNotice = (lockPath, label, phase, interval) => Effect.suspend(() => {
+		let seconds = 0;
+		return Effect.suspend(() => {
+			seconds += Duration.toSeconds(interval);
+			return Console.error(phase.current === "waiting" ? `alchemy: ${seconds}s waiting for the auth lock '${lockPath}' (${label}). Another alchemy process holds it; if none is running, delete that directory.` : `alchemy: ${label} has been running for ${seconds}s while holding the auth lock '${lockPath}'. Re-run with --log-level debug for detail.`);
+		}).pipe(Effect.delay(interval), Effect.repeat(Schedule.spaced(interval)));
+	});
 	withLock = (key, effect, options) => {
 		const safeKey = sanitizeLockKey(key);
+		const label = options?.label ?? key;
 		let semaphore = semaphores.get(safeKey);
 		if (semaphore === void 0) {
 			semaphore = Semaphore.makeUnsafe(1);
@@ -174,8 +187,13 @@ var init_Lock = __esmMin((() => {
 		}
 		return semaphore.withPermit(Effect.gen(function* () {
 			const lockPath = (yield* Path$1.Path).join(rootDir, "lock", `${safeKey}.lock`);
+			const phase = { current: "waiting" };
+			if (options?.watchdog !== false) yield* Effect.forkScoped(stallNotice(lockPath, label, phase, options?.stallInterval ?? STALL_INTERVAL));
+			yield* Effect.logDebug(`auth lock: acquiring '${lockPath}' for ${label}`);
 			yield* acquireFileLock(lockPath, options?.timeout ?? DEFAULT_TIMEOUT).pipe(Effect.orDie);
-			return yield* effect;
+			phase.current = "held";
+			yield* Effect.logDebug(`auth lock: acquired '${lockPath}' for ${label}`);
+			return yield* effect.pipe(Effect.onExit(() => Effect.logDebug(`auth lock: releasing '${lockPath}' for ${label}`)));
 		}).pipe(Effect.scoped));
 	};
 }));
@@ -211,7 +229,10 @@ var init_AuthProvider$1 = __esmMin((() => {
 				let eff = fn(...args).pipe(Effect.provideContext(ctx));
 				if (LOCKED_METHODS.has(methodName)) {
 					const profileName = args[0];
-					eff = withLock(`${profileName}-${name}`, eff);
+					eff = withLock(`${profileName}-${name}`, eff, {
+						label: `${name}.${methodName} (profile '${profileName}')`,
+						watchdog: !INTERACTIVE_METHODS.has(methodName)
+					});
 				}
 				if (INTERACTIVE_METHODS.has(methodName)) eff = Semaphore.withPermits(interactiveMutex, 1)(eff);
 				return eff;
@@ -399,6 +420,27 @@ var init_FQN = __esmMin((() => {
 			logicalId: parts.pop()
 		};
 	};
+})), ProviderModePolicy, LOCAL_ID_PREFIX, hasLocalIdentity, stampedMode, defaultProviderMode;
+var init_ProviderMode = __esmMin((() => {
+	init_AlchemyContext();
+	ProviderModePolicy = EffectContext.Reference("ProviderModePolicy", { defaultValue: () => void 0 });
+	Data.TaggedError("ConflictingProviderModeError");
+	LOCAL_ID_PREFIX = "dev:";
+	hasLocalIdentity = (value) => {
+		if (typeof value === "string") return value.startsWith(LOCAL_ID_PREFIX);
+		if (Array.isArray(value)) return value.some(hasLocalIdentity);
+		if (typeof value === "object" && value !== null) return Object.values(value).some(hasLocalIdentity);
+		return false;
+	};
+	stampedMode = (row) => row.providerMode ?? (hasLocalIdentity(row.attr) ? "local" : "live");
+	defaultProviderMode = Effect.gen(function* () {
+		if (yield* ProviderModePolicy) return "live";
+		const ctx = yield* Effect.serviceOption(AlchemyContext);
+		return Option.match(ctx, {
+			onNone: () => "live",
+			onSome: (c) => c.dev ? "local" : "live"
+		});
+	});
 }));
 //#endregion
 //#region lib/Provider.js
@@ -438,27 +480,6 @@ var init_Provider = __esmMin((() => {
 		if (Option.isNone(found)) return found;
 		return Option.some(yield* providerForMode(found.value, mode));
 	});
-})), ProviderModePolicy, LOCAL_ID_PREFIX, hasLocalIdentity, stampedMode, defaultProviderMode;
-var init_ProviderMode = __esmMin((() => {
-	init_AlchemyContext();
-	ProviderModePolicy = EffectContext.Reference("ProviderModePolicy", { defaultValue: () => void 0 });
-	Data.TaggedError("ConflictingProviderModeError");
-	LOCAL_ID_PREFIX = "dev:";
-	hasLocalIdentity = (value) => {
-		if (typeof value === "string") return value.startsWith(LOCAL_ID_PREFIX);
-		if (Array.isArray(value)) return value.some(hasLocalIdentity);
-		if (typeof value === "object" && value !== null) return Object.values(value).some(hasLocalIdentity);
-		return false;
-	};
-	stampedMode = (row) => row.providerMode ?? (hasLocalIdentity(row.attr) ? "local" : "live");
-	defaultProviderMode = Effect.gen(function* () {
-		if (yield* ProviderModePolicy) return "live";
-		const ctx = yield* Effect.serviceOption(AlchemyContext);
-		return Option.match(ctx, {
-			onNone: () => "live",
-			onSome: (c) => c.dev ? "local" : "live"
-		});
-	});
 }));
 //#endregion
 //#region lib/Resource.js
@@ -867,7 +888,7 @@ var init_ConfigProvider = __esmMin((() => {
 		if (Option.isSome(envFile)) return ConfigProvider.fromDotEnv({ path: envFile.value }).pipe(Effect.map((dotEnv) => ConfigProvider.orElse(dotEnv, ConfigProvider.fromEnv())));
 		return Effect.gen(function* () {
 			if (!(yield* (yield* FileSystem.FileSystem).exists(".env"))) return ConfigProvider.fromEnv();
-			return ConfigProvider.orElse(yield* ConfigProvider.fromDotEnv({ path: ".env" }), ConfigProvider.fromEnv());
+			return ConfigProvider.orElse(ConfigProvider.fromEnv(), yield* ConfigProvider.fromDotEnv({ path: ".env" }));
 		});
 	};
 }));
@@ -1131,7 +1152,15 @@ var init_RpcProviderProxy = __esmMin((() => {
 		const getSession = Effect.fn(function* (serverEntryUrl, sessionEnv) {
 			const payload = { serverEntryUrl };
 			const response = yield* client.post(spawnerUrl, { body: yield* HttpBody.json(payload) });
-			const websocketUrl = new URL(yield* response.text);
+			const body = yield* response.text;
+			if (response.status !== 200) return yield* Effect.fail(/* @__PURE__ */ new Error(`RPC spawner POST ${spawnerUrl} returned ${response.status}: ${body.slice(0, 300)}`));
+			let websocketUrl;
+			try {
+				websocketUrl = new URL(body);
+			} catch {
+				return yield* Effect.fail(/* @__PURE__ */ new Error(`RPC spawner POST ${spawnerUrl} did not return a websocket URL (got ${JSON.stringify(body.slice(0, 200))})`));
+			}
+			if (websocketUrl.protocol !== "ws:" && websocketUrl.protocol !== "wss:") return yield* Effect.fail(/* @__PURE__ */ new Error(`RPC spawner POST ${spawnerUrl} returned a non-websocket URL: ${websocketUrl.toString()}`));
 			websocketUrl.searchParams.set(SESSION_ENV_PARAM, sessionEnv);
 			return newWebSocketRpcSession(websocketUrl.toString());
 		}, (effect, serverEntryUrl) => Effect.catch(effect, (error) => Effect.die(new Error(`Failed to create provider RPC session for "${serverEntryUrl}"`, { cause: error }))));
@@ -1159,7 +1188,8 @@ var init_RpcProviderProxy = __esmMin((() => {
 				const session = yield* Cache.get(cache, key);
 				return yield* Effect.tryPromise(() => session.getProvider(providerName));
 			});
-			return unwrapRpcHandlers(yield* fetchProvider.pipe(Effect.catch(() => Cache.invalidate(cache, key).pipe(Effect.andThen(fetchProvider))), Effect.orDie), ["tail"]);
+			const provider = yield* fetchProvider.pipe(Effect.catch(() => Cache.invalidate(cache, key).pipe(Effect.andThen(fetchProvider))), Effect.orDie);
+			return unwrapRpcHandlers(provider, ["tail"]);
 		}) });
 	});
 	fromEnv = () => Layer.effect(RpcProviderProxy, Config.string(SPAWNER_URL_ENV_KEY).pipe(Effect.flatMap(make$2)));
@@ -2145,71 +2175,75 @@ const make = (stack, options = {}) => Effect.gen(function* () {
 			oldBindings,
 			newBindings
 		}).pipe(providePlanScope(fqn, oldState.instanceId))).pipe(Effect.map((diff) => diff ?? { action: havePropsChanged(oldProps, news) || bindingDiffs.some((b) => b.action !== "noop") ? "update" : "noop" }), Effect.map((diff) => options.force && diff.action === "noop" ? { action: "update" } : diff), Effect.map((diff) => (forceUpdateAfterAdoption || renameMoved) && diff.action === "noop" ? { action: "update" } : diff));
-		if (oldState.status === "creating") if (diff.action === "noop") return Node({
-			action: "create",
-			props: applyProps,
-			state: oldState
-		});
-		else if (diff.action === "update") return Node({
-			action: "create",
-			props: applyProps,
-			state: oldState
-		});
-		else return Node({
-			action: "replace",
-			props: applyProps,
-			deleteFirst: diff.deleteFirst ?? false,
-			state: oldState
-		});
-		else if (oldState.status === "updating") if (diff.action === "update" || diff.action === "noop") return Node({
-			action: "update",
-			props: applyProps,
-			state: oldState
-		});
-		else return Node({
-			action: "replace",
-			deleteFirst: diff.deleteFirst ?? false,
-			props: applyProps,
-			state: oldState
-		});
-		else if (oldState.status === "replacing") if (diff.action === "noop") return Node({
-			action: "replace",
-			deleteFirst: oldState.deleteFirst,
-			props: applyProps,
-			state: oldState
-		});
-		else if (diff.action === "update") return Node({
-			action: "replace",
-			deleteFirst: oldState.deleteFirst,
-			props: applyProps,
-			state: oldState
-		});
-		else return Node({
-			restart: true,
-			action: "replace",
-			deleteFirst: diff.deleteFirst ?? oldState.deleteFirst,
-			props: applyProps,
-			state: oldState
-		});
-		else if (oldState.status === "replaced") if (diff.action === "noop") return Node({
-			action: "replace",
-			deleteFirst: oldState.deleteFirst,
-			props: applyProps,
-			state: oldState
-		});
-		else if (diff.action === "update") return Node({
-			action: "update",
-			props: applyProps,
-			state: oldState
-		});
-		else return Node({
-			restart: true,
-			action: "replace",
-			deleteFirst: diff.deleteFirst ?? oldState.deleteFirst,
-			props: applyProps,
-			state: oldState
-		});
-		else if (oldState.status === "deleting") return Node({
+		if (oldState.status === "creating") {
+			if (diff.action === "noop") return Node({
+				action: "create",
+				props: applyProps,
+				state: oldState
+			});
+			else if (diff.action === "update") return Node({
+				action: "create",
+				props: applyProps,
+				state: oldState
+			});
+			else return Node({
+				action: "replace",
+				props: applyProps,
+				deleteFirst: diff.deleteFirst ?? false,
+				state: oldState
+			});
+		} else if (oldState.status === "updating") {
+			if (diff.action === "update" || diff.action === "noop") return Node({
+				action: "update",
+				props: applyProps,
+				state: oldState
+			});
+			else return Node({
+				action: "replace",
+				deleteFirst: diff.deleteFirst ?? false,
+				props: applyProps,
+				state: oldState
+			});
+		} else if (oldState.status === "replacing") {
+			if (diff.action === "noop") return Node({
+				action: "replace",
+				deleteFirst: oldState.deleteFirst,
+				props: applyProps,
+				state: oldState
+			});
+			else if (diff.action === "update") return Node({
+				action: "replace",
+				deleteFirst: oldState.deleteFirst,
+				props: applyProps,
+				state: oldState
+			});
+			else return Node({
+				restart: true,
+				action: "replace",
+				deleteFirst: diff.deleteFirst ?? oldState.deleteFirst,
+				props: applyProps,
+				state: oldState
+			});
+		} else if (oldState.status === "replaced") {
+			if (diff.action === "noop") return Node({
+				action: "replace",
+				deleteFirst: oldState.deleteFirst,
+				props: applyProps,
+				state: oldState
+			});
+			else if (diff.action === "update") return Node({
+				action: "update",
+				props: applyProps,
+				state: oldState
+			});
+			else return Node({
+				restart: true,
+				action: "replace",
+				deleteFirst: diff.deleteFirst ?? oldState.deleteFirst,
+				props: applyProps,
+				state: oldState
+			});
+		} else if (oldState.status === "deleting") return Node({
 			action: "create",
 			props: applyProps,
 			state: {
@@ -2238,7 +2272,8 @@ const make = (stack, options = {}) => Effect.gen(function* () {
 	const actionGraph = Object.fromEntries(yield* Effect.all(actions.map(Effect.fn("plan.diff.action")(function* (action) {
 		const fqn = action.FQN;
 		const downstream = newDownstreamDependencies[fqn] ?? [];
-		const inputHash = yield* hashInput(materializeStableRefs(yield* resolveInput(action.Input)));
+		const resolvedInput = materializeStableRefs(yield* resolveInput(action.Input));
+		const inputHash = yield* hashInput(resolvedInput);
 		const oldState = yield* state.get({
 			stack: stackName,
 			stage,
@@ -2345,7 +2380,8 @@ const make = (stack, options = {}) => Effect.gen(function* () {
 			if (migratedRowFqns.has(fqn)) return;
 			const { logicalId } = parseFqn(fqn);
 			const resourceType = oldState.resourceType;
-			const providerOption = yield* tryFindProviderByType(resourceType, stampedMode(oldState));
+			const rowMode = stampedMode(oldState);
+			const providerOption = yield* tryFindProviderByType(resourceType, rowMode);
 			if (Option.isNone(providerOption)) return yield* Effect.die(missingProviderError(resourceType, fqn));
 			return [fqn, {
 				action: "delete",
@@ -3386,17 +3422,21 @@ const collectGarbage = Effect.fn(function* (plan, session) {
 					}
 					const retainOldGeneration = !isDeleteNode(node) && node.removalPolicy === "retain";
 					if (retainOldGeneration) yield* scopedSession.note("Retaining replaced resource (removal policy: retain)...");
-					if (attr === void 0 && !retainOldGeneration) if (provider.read) {
-						const recovered = yield* provider.read({
-							id: logicalId,
-							fqn,
-							instanceId,
-							olds: props,
-							output: void 0
-						}).pipe(instrumentLifecycle("read", fqn, resourceType, logicalId, instanceId), Effect.catchDefect((defect) => scopedSession.note(`Recovery read crashed while looking up this resource's interrupted create (${String(defect)}) — if a physical resource was created, it must be cleaned up manually.`).pipe(Effect.as(void 0))));
-						if (recovered !== void 0) if (Unowned.is(recovered)) yield* scopedSession.note("Resource exists in the cloud but is not owned by this stack — leaving it in place (re-deploy with --adopt to take ownership, then destroy).");
-						else attr = stripUnowned(recovered);
-					} else yield* scopedSession.note("No attributes were recorded for this resource (its create was interrupted) and the provider does not implement `read` — if a physical resource was created, it must be cleaned up manually.");
+					if (attr === void 0 && !retainOldGeneration) {
+						if (provider.read) {
+							const recovered = yield* provider.read({
+								id: logicalId,
+								fqn,
+								instanceId,
+								olds: props,
+								output: void 0
+							}).pipe(instrumentLifecycle("read", fqn, resourceType, logicalId, instanceId), Effect.catchDefect((defect) => scopedSession.note(`Recovery read crashed while looking up this resource's interrupted create (${String(defect)}) — if a physical resource was created, it must be cleaned up manually.`).pipe(Effect.as(void 0))));
+							if (recovered !== void 0) {
+								if (Unowned.is(recovered)) yield* scopedSession.note("Resource exists in the cloud but is not owned by this stack — leaving it in place (re-deploy with --adopt to take ownership, then destroy).");
+								else attr = stripUnowned(recovered);
+							}
+						} else yield* scopedSession.note("No attributes were recorded for this resource (its create was interrupted) and the provider does not implement `read` — if a physical resource was created, it must be cleaned up manually.");
+					}
 					if (isDeleteNode(node)) yield* commit({
 						status: "deleting",
 						fqn,
@@ -3490,6 +3530,159 @@ const excludeDeletedBindings = (bindings) => bindings.flatMap(({ action, sid, da
 	data
 }]);
 //#endregion
+//#region package.json
+var version = "2.0.0-beta.76";
+//#endregion
+//#region lib/Telemetry/Attributes.js
+const ALCHEMY_DIR = nodePath.join(os$1.homedir(), ".alchemy");
+const ID_PATH = nodePath.join(ALCHEMY_DIR, "id");
+const DISABLED_PATH = nodePath.join(ALCHEMY_DIR, "telemetry-disabled");
+const tryRead = (path) => Effect.tryPromise(() => fs.readFile(path, "utf-8").then((s) => s.trim())).pipe(Effect.orElseSucceed(() => null));
+const sha256Hex = (input) => crypto$2.createHash("sha256").update(input).digest("hex");
+const hashStringOrEmpty = (input) => input == null || input === "" ? "" : sha256Hex(input);
+const execCapture = (cmd) => Effect.callback((resume) => {
+	exec(cmd, { timeout: 1500 }, (err, stdout) => {
+		if (err) {
+			resume(Effect.succeed(null));
+			return;
+		}
+		resume(Effect.succeed(stdout.toString().trim()));
+	});
+});
+const getOrCreateUserId = Effect.gen(function* () {
+	const existing = yield* tryRead(ID_PATH);
+	if (existing) return existing;
+	const id = crypto$2.randomUUID();
+	yield* Effect.tryPromise({
+		try: async () => {
+			await fs.mkdir(ALCHEMY_DIR, { recursive: true });
+			await fs.writeFile(ID_PATH, id);
+		},
+		catch: () => null
+	}).pipe(Effect.catch(() => Effect.void));
+	return id;
+});
+const getRootCommitHash = execCapture(process.platform === "win32" ? `git rev-list --max-parents=0 HEAD | ForEach-Object { if (-not (git cat-file -p $_ | Select-String "^parent ")) { $_ } }` : `git rev-list --max-parents=0 HEAD | xargs -r -I{} sh -c 'git cat-file -p {} | grep -q "^parent " || echo {}'`);
+const getGitOriginUrl = execCapture("git config --get remote.origin.url");
+const getBranchName = execCapture("git rev-parse --abbrev-ref HEAD");
+const getRuntime = () => {
+	const g = globalThis;
+	if (typeof g.Bun !== "undefined") return {
+		name: "bun",
+		version: g.Bun.version
+	};
+	if (typeof g.Deno !== "undefined") return {
+		name: "deno",
+		version: g.Deno.version?.deno ?? ""
+	};
+	if (globalThis.process?.versions?.node) return {
+		name: "node",
+		version: process.versions.node
+	};
+	return {
+		name: "",
+		version: ""
+	};
+};
+const CI_PROVIDERS = [
+	{
+		env: "GITHUB_ACTIONS",
+		provider: "GitHub Actions",
+		isCI: true
+	},
+	{
+		env: "GITLAB_CI",
+		provider: "GitLab CI",
+		isCI: true
+	},
+	{
+		env: "CIRCLECI",
+		provider: "CircleCI",
+		isCI: true
+	},
+	{
+		env: "JENKINS_URL",
+		provider: "Jenkins",
+		isCI: true
+	},
+	{
+		env: "TRAVIS",
+		provider: "Travis CI",
+		isCI: true
+	},
+	{
+		env: "BUILDKITE",
+		provider: "Buildkite",
+		isCI: true
+	},
+	{
+		env: "NOW_BUILDER",
+		provider: "Vercel",
+		isCI: true
+	},
+	{
+		env: "VERCEL",
+		provider: "Vercel",
+		isCI: false
+	}
+];
+const getCIEnvironment = () => {
+	for (const p of CI_PROVIDERS) if (process.env[p.env]) return {
+		provider: p.provider,
+		isCI: p.isCI
+	};
+	return {
+		provider: "",
+		isCI: !!process.env.CI
+	};
+};
+const TELEMETRY_DISABLED_ENV = () => !!process.env.ALCHEMY_TELEMETRY_DISABLED || !!process.env.DO_NOT_TRACK || !!process.env.NO_TRACK;
+/**
+* `true` if telemetry is disabled via environment variable
+* (`DO_NOT_TRACK`, `NO_TRACK`, `ALCHEMY_TELEMETRY_DISABLED`) or via a
+* persisted opt-out file at `~/.alchemy/telemetry-disabled`.
+*/
+const isTelemetryDisabled = Effect.gen(function* () {
+	if (TELEMETRY_DISABLED_ENV()) return true;
+	return (yield* tryRead(DISABLED_PATH)) === "true";
+});
+Effect.tryPromise(async () => {
+	await fs.mkdir(ALCHEMY_DIR, { recursive: true });
+	await fs.writeFile(DISABLED_PATH, "true");
+}).pipe(Effect.ignore);
+Effect.tryPromise(() => fs.rm(DISABLED_PATH, { force: true })).pipe(Effect.ignore);
+const collectAttributesUncached = Effect.gen(function* () {
+	const [userId, rootCommit, originUrl, branch] = yield* Effect.all([
+		getOrCreateUserId,
+		getRootCommitHash,
+		getGitOriginUrl,
+		getBranchName
+	], { concurrency: "unbounded" });
+	const runtime = getRuntime();
+	const ci = getCIEnvironment();
+	return {
+		"alchemy.user.id": userId,
+		"alchemy.session.id": process.env.ALCHEMY_TELEMETRY_SESSION_ID ?? crypto$2.randomUUID(),
+		"alchemy.version": version,
+		"alchemy.git.root_commit": rootCommit ?? "",
+		"alchemy.git.origin_hash": hashStringOrEmpty(originUrl),
+		"alchemy.git.branch_hash": hashStringOrEmpty(branch),
+		"alchemy.runtime.name": runtime.name,
+		"alchemy.runtime.version": runtime.version,
+		"alchemy.ci.provider": ci.provider,
+		"alchemy.ci": ci.isCI,
+		"host.arch": os$1.arch(),
+		"os.type": os$1.platform(),
+		"os.version": os$1.release(),
+		"host.cpus": os$1.cpus().length,
+		"host.memory_mb": Math.round(os$1.totalmem() / 1024 / 1024)
+	};
+});
+let cachedAttrs;
+Effect.suspend(() => cachedAttrs !== void 0 ? Effect.succeed(cachedAttrs) : collectAttributesUncached.pipe(Effect.tap((a) => Effect.sync(() => {
+	cachedAttrs = a;
+}))));
+//#endregion
 //#region lib/Util/Clank.js
 var PromptCancelled, prompt, success, warn, info, text, password, select, confirm, multiselect, openUrl;
 var init_Clank = __esmMin((() => {
@@ -3611,6 +3804,17 @@ const of$1 = (endpoint) => Layer.succeed(Endpoint.Endpoint, Effect.succeed(endpo
 Layer.effect(Endpoint.Endpoint, Effect.gen(function* () {
 	return Effect.map(yield* AWSEnvironment, (env) => env.endpoint ?? void 0);
 }));
+/**
+* Explicitly "no custom endpoint" — the SDK falls back to its default
+* endpoint resolver.
+*
+* Use this (never `Layer.empty`) when an AWS call is made from *inside*
+* the construction of {@link AWSEnvironment}: leaving `Endpoint`
+* unprovided lets the call fall through to {@link fromEnvironment},
+* whose service Effect re-enters the in-flight `AWSEnvironment` cache and
+* deadlocks the fiber with no I/O and no timer pending.
+*/
+const none = Layer.succeed(Endpoint.Endpoint, Effect.succeed(void 0));
 //#endregion
 //#region lib/AWS/Region.js
 const of = (region) => Layer.succeed(Region.Region, Effect.succeed(region));
@@ -3677,7 +3881,7 @@ const AwsAuth = AuthProviderLayer()("AWS", Effect.gen(function* () {
 		secretAccessKey,
 		sessionToken,
 		region
-	})), of(region), endpoint ? of$1(endpoint) : Layer.empty)), Effect.flatMap((self) => self.Account ? Effect.succeed(self.Account) : Effect.die(/* @__PURE__ */ new Error("No account ID found"))));
+	})), of(region), endpoint ? of$1(endpoint) : none)), Effect.flatMap((self) => self.Account ? Effect.succeed(self.Account) : Effect.die(/* @__PURE__ */ new Error("No account ID found"))));
 	const loginStored = Effect.fn(function* (profileName) {
 		const accessKeyId = yield* text({
 			message: "AWS Access Key ID",
@@ -3901,8 +4105,8 @@ const clearDistilledSsoCache = (ssoProfile) => Effect.gen(function* () {
 	if (!ssoSession) return;
 	const fs = yield* FileSystem.FileSystem;
 	const path = yield* Path$1.Path;
-	const hash = NodeCrypto.createHash("sha1").update(ssoSession).digest("hex");
-	const cacheFile = path.join(NodeOs.homedir(), ".aws", "sso", "cache", `${hash}.credentials.json`);
+	const hash = crypto$2.createHash("sha1").update(ssoSession).digest("hex");
+	const cacheFile = path.join(os$1.homedir(), ".aws", "sso", "cache", `${hash}.credentials.json`);
 	yield* fs.remove(cacheFile).pipe(Effect.catch(() => Effect.void));
 }).pipe(Effect.catch(() => Effect.void));
 //#endregion
@@ -4179,7 +4383,7 @@ function callbackPromise$1(authorization, signal) {
 				error: "timeout",
 				errorDescription: "The authorization process timed out."
 			}));
-		}, 300 * 1e3);
+		}, 3e5);
 		function cleanup() {
 			clearTimeout(timeout);
 			signal.removeEventListener("abort", cleanup);
@@ -5343,7 +5547,7 @@ function callbackPromise(authorization, signal) {
 				error: "timeout",
 				errorDescription: "The authorization process timed out."
 			}));
-		}, 300 * 1e3);
+		}, 3e5);
 		function cleanup() {
 			clearTimeout(timeout);
 			signal.removeEventListener("abort", cleanup);
@@ -5753,7 +5957,8 @@ Effect.fn(function* (profile, stored, registry) {
 	}
 });
 const importStack = Effect.fn(function* (main) {
-	const url = pathToFileURL((yield* Path$1.Path).resolve(main)).href;
+	const path = yield* Path$1.Path;
+	const url = pathToFileURL(path.resolve(main)).href;
 	const stackEffect = (yield* Effect.promise(() => import(__rewriteRelativeImportExtension(url)))).default;
 	if (!Effect.isEffect(stackEffect)) return yield* Effect.die(/* @__PURE__ */ new Error(`Main file '${main}' must export a default stack definition (export default Alchemy.Stack({...}))`));
 	return stackEffect;
@@ -5830,12 +6035,13 @@ const stackSpanAttrs = (args) => ({
 const adopt = Flag.boolean("adopt").pipe(Flag.withDescription("Adopt pre-existing cloud resources that conflict with this stack instead of failing. Useful for re-importing infrastructure into a fresh state store."), Flag.withDefault(false));
 const runStack = Effect.fn(function* ({ main, stage, envFile, profile, dryRun = false, force = false, yes = false, destroy: destroy$1 = false, dev = false, adopt = false }) {
 	const stackEffect = yield* importStack(main);
+	const consoleSink = Option.isSome(Option.flatten(yield* Effect.serviceOption(GlobalFlag.LogLevel))) && !(yield* isTelemetryDisabled) ? [Logger.consolePretty()] : [];
 	const services = Layer.mergeAll(Layer.effect(AlchemyContext, AlchemyContext.pipe(Effect.map((ctx) => ({
 		...ctx,
 		dev,
 		adopt,
 		updateStateStore: yes
-	})))), Layer.succeed(AdoptPolicy, adopt), Layer.succeed(ArtifactStore, createArtifactStore()), Layer.succeed(AuthProviders, yield* Effect.serviceOption(AuthProviders).pipe(Effect.map(Option.getOrElse(() => ({}))))), ConfigProvider.layer(withProfileOverride(yield* loadConfigProvider(envFile), profile)), Logger.layer([fileLogger("out")], { mergeWithExisting: true }), Layer.succeed(Stage, stage));
+	})))), Layer.succeed(AdoptPolicy, adopt), Layer.succeed(ArtifactStore, createArtifactStore()), Layer.succeed(AuthProviders, yield* Effect.serviceOption(AuthProviders).pipe(Effect.map(Option.getOrElse(() => ({}))))), ConfigProvider.layer(withProfileOverride(yield* loadConfigProvider(envFile), profile)), Logger.layer([fileLogger("out"), ...consoleSink], { mergeWithExisting: true }), Layer.succeed(Stage, stage));
 	yield* Effect.gen(function* () {
 		const cli = yield* Cli;
 		const stack = yield* stackEffect;
@@ -6008,8 +6214,10 @@ const LoggingCli = Layer.succeed(Cli, Cli.of({
 					defaultMode: plan.defaultMode
 				});
 				const msg = event.message ? ` ${dim("—")} ${event.message}` : "";
-				if (isTerminal(event.status)) if (event.status === "fail") counts.fail++;
-				else counts.ok++;
+				if (isTerminal(event.status)) {
+					if (event.status === "fail") counts.fail++;
+					else counts.ok++;
+				}
 				return Console.log(`${tag(id)} ${status}${mode}${msg}`);
 			}),
 			done: () => Console.log(`\n${bold("Done:")} ${green(`${counts.ok} succeeded`)}${counts.fail ? dim(", ") + red(`${counts.fail} failed`) : ""}`)
@@ -6181,8 +6389,9 @@ function Plan({ plan }) {
 				jsx(Text, { children: ": " }),
 				[...actions.map((action) => {
 					const count = counts[action];
+					const color = actionColor(action);
 					return jsx(Box, { children: jsxs(Text, {
-						color: actionColor(action),
+						color,
 						children: [
 							count,
 							" to ",
@@ -6768,14 +6977,14 @@ init_Profile();
 init_RpcProviderProxy();
 init_PlatformServices();
 const makeServices = (dev) => Layer.merge(dev ? LoggingCli : selectCli(), fromEnv()).pipe(Layer.provideMerge(Layer.mergeAll(AlchemyContextLive, ProfileLive, CredentialsStoreLive)), Layer.provideMerge(Layer.mergeAll(PlatformServices, FetchHttpClient.layer, ConfigProvider.layer(ConfigProvider.fromEnv()))));
-const exec = () => {
+const exec$1 = () => {
 	const options = Schema.decodeSync(ExecStackOptions)(JSON.parse(process.env.ALCHEMY_EXEC_OPTIONS));
 	return forwardSidecarLogs.pipe(Effect.andThen(execStack(options)), Effect.provide(makeServices(options.dev)), Effect.scoped);
 };
 //#endregion
 //#region bin/exec.ts
 init_PlatformServices();
-exec().pipe(runMain);
+exec$1().pipe(runMain);
 //#endregion
 export {};